H3C MSR 20/30/50 Series Routers Command Reference Manual (v1.00) MSR 20 Series Routers MSR 30 Series Routers MSR 50 Series Routers www.3Com.com Part Number: 10016323 Rev.
3Com Corporation 350 Campus Drive Marlborough, MA USA 01752-3064 Copyright © 2007, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corporation.
CONTENTS ABOUT THIS GUIDE Conventions 73 Related Documentation 74 ALPHABETICAL LISTING OF COMMANDS 75 1 PUBLIC ATM AND DSL INTERFACE COMMANDS display interface atm 111 interface atm 112 reset atm interface 112 2 IMA-E1/T1 INTERFACE CONFIGURATION COMMANDS cable 113 clock 113 code 114 differential-delay 115 display interface ima-group frame-format 116 frame-length 117 ima ima-group 117 ima-clock 118 ima-standard 119 ima-test 119 interface ima-group 120 loopback 120 min-active-links 121 scramble 121 3
display dsl configuration display dsl status 133 display dsl version 136 shdsl annex 137 shdsl mode 137 shdsl psd 138 shdsl rate 138 shdsl snr-margin 139 shdsl wire 140 6 132 ADSL INTERFACE CONFIGURATION COMMANDS activate 143 adsl standard 144 adsl tx-attenuation 144 bootrom update file 145 display dsl configuration 146 display dsl status 147 display dsl version 148 7 POS INTERFACE CONFIGURATION COMMANDS clock 151 crc 151 display interface pos 152 display ip interface pos 154 display ipv6 interface pos
9 CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN BRIDGE MODE broadcast-suppression 175 display loopback-detection 176 display port 176 display port-group manual 177 flow-interval 178 group-member 178 loopback-detection control enable 179 loopback-detection enable 180 loopback-detection interval-time 180 loopback-detection per-vlan enable 181 mdi 182 multicast-suppression 182 port-group 183 unicast-suppression 184 virtual-cable-test 184 10 CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN ROUTE MODE mt
crc 204 detect-ais 204 display controller e1 205 error-diffusion restraint config 206 error-diffusion restraint enable 207 error-diffusion restraint restart-channel 207 frame-format (CE1/PRI interface view) 208 idlecode (CE1/PRI interface view) 208 itf (CE1/PRI interface view) 209 loopback (CE1/PRI interface view) 210 pri-set (CE1/PRI interface view) 210 reset counters controller e1 211 using (CE1/PRI interface view) 212 13 FUNDAMENTAL CT1/PRI INTERFACE CONFIGURATION COMMANDS alarm-threshold 213 bert (CT1
15 T1-F INTERFACE CONFIGURATION COMMANDS crc 239 display ft1 239 ft1 bert (T1-F interface view) ft1 cable 243 ft1 clock 244 ft1 code 244 ft1 data-coding 245 ft1 fdl 246 ft1 frame-format 246 ft1 idlecode 247 ft1 itf 247 ft1 loopback 248 ft1 timeslot-list 249 ft1 alarm-threshold 250 ft1 sendloopcode 251 16 242 FUNDAMENTAL CE3 INTERFACE CONFIGURATION COMMANDS bert (CE3 Interface) 253 clock (CE3 interface view) 254 controller e3 254 crc 255 display controller e3 255 e1 bert 257 e1 channel-set 258 e1 set clo
t1 channel-set 280 t1 sendloopcode 281 t1 set clock 282 t1 set frame-format 282 t1 set loopback 283 t1 set fdl 283 t1 show 284 t1 shutdown 285 t1 unframed 286 using (CT3 interface view) 18 287 ISDN BRI INTERFACE CONFIGURATION COMMANDS loopback (ISDN BRI interface view) 19 289 ATM CONFIGURATION COMMANDS atm class 291 atm-class 291 atm-link check 292 clock 292 display atm class 293 display atm interface 294 display atm map-info 295 display atm pvc-group 296 display atm pvc-info 297 encapsulation 298 int
dialer circular-group 318 dialer disconnect 319 dialer enable-circular 319 dialer flow-interval 320 dialer isdn-leased (physical interface view) dialer number 321 dialer priority 322 dialer queue-length 322 dialer route 323 dialer threshold 324 dialer timer autodial 325 dialer timer compete 326 dialer timer enable 327 dialer timer idle 327 dialer timer wait-carrier 328 dialer user 328 dialer-group 329 dialer-rule 330 display dialer 331 display interface dialer 332 interface dialer 333 ppp callback 334 ppp c
llc2 timer ack-delay 355 llc2 timer busy 356 llc2 timer detect 356 llc2 timer poll 357 llc2 timer reject 358 reset dlsw circuits 358 reset dlsw reachable-cache 358 reset dlsw tcp 359 sdlc controller 360 sdlc enable dlsw 361 sdlc mac-map local 361 sdlc mac-map remote 362 sdlc max-pdu 363 sdlc max-send-queue 363 sdlc max-transmission 364 sdlc modulo 364 sdlc sap-map local 365 sdlc sap-map remote 366 sdlc simultaneous 366 sdlc status 367 sdlc timer ack 368 sdlc timer lifetime 368 sdlc timer poll 369 sdlc windo
fr lmi n393dce 393 fr lmi n393dte 393 fr lmi t392dce 394 fr lmi type 395 fr map ip 396 fr map ppp 397 fr switch 397 fr switching 398 interface mfr 399 interface serial 399 link-protocol fr 400 link-protocol fr mfr 401 mfr bundle-name 401 mfr fragment 402 mfr fragment-size 402 mfr link-name 403 mfr retry 404 mfr stateup-respond-addlink mfr timer ack 405 mfr timer hello 406 mfr window-size 406 shutdown 407 reset fr inarp 407 reset fr pvc 408 timer hold 408 x25-template 409 x25 template 409 23 404 GARP CONF
display x25 cug 425 display x25 hunt-group-info 425 display x25 map 426 display x25 pad 427 display x25 switch-table pvc 428 display x25 switch-table svc 428 display x25 vc 429 display x25 x2t switch-table 432 display x25 xot 432 lapb max-frame 433 lapb modulo 434 lapb retry 434 lapb timer 435 lapb window-size 435 link-protocol lapb 436 link-protocol x25 437 pad 437 reset xot 438 reset x25 438 reset lapb statistics 439 translate ip 439 translate x25 440 x25 alias-policy 441 x25 call-facility 442 x25 cug-ser
x25 vc-per-map 468 x25 vc-range 468 x25 window-size 469 x25 x121-address 470 x25 xot pvc 470 x29 timer inviteclear-time 27 472 LINK AGGREGATION CONFIGURATION COMMANDS display lacp system-id 473 display link-aggregation interface 473 display link-aggregation summary 475 display link-aggregation verbose 476 lacp port-priority 478 lacp system-priority 479 link-aggregation group description 479 link-aggregation group mode 480 port link-aggregation group 480 port-group aggregation 481 reset lacp statistics 48
link-protocol ppp 509 ppp account-statistics enable 509 ppp authentication-mode 510 ppp chap password 511 ppp chap user 511 ppp ipcp dns 512 ppp ipcp dns admit-any 513 ppp ipcp dns request 513 ppp ipcp remote-address forced 514 ppp lqc 515 ppp mp 516 ppp mp binding-mode 516 ppp mp max-bind 517 ppp mp min-bind 518 ppp mp min-fragment 519 ppp mp mp-group 520 ppp mp user 520 ppp mp virtual-template 521 ppp pap local-user 522 ppp timer negotiate 522 remote address 523 timer hold 524 32 PPP LINK EFFICIENCY MEC
35 PPP DEBUGGING COMMANDS debugging ppp 36 543 BRIDGING CONFIGURATION COMMANDS bridge aging-time 549 bridge bridge-set enable 549 bridge bridging 550 bridge enable 550 bridge learning 551 bridge mac-address 551 bridge routing 552 bridge routing-enable 553 bridge-set 553 display bridge address-table 554 display bridge information 555 display bridge traffic 556 display interface bridge-template 557 fr map bridge 558 interface bridge-template 559 mac-address (bridge-template interface view) map bridge-grou
isdn q921-permanent 585 isdn send-restart 586 isdn spid auto_trigger 586 isdn spid nit 587 isdn spid timer 587 isdn spid service 588 isdn spid resend 589 isdn spid1 589 isdn spid2 590 isdn statistics 591 isdn two-tei 592 permanent-active 593 power-source 594 shutdown 595 38 MSTP CONFIGURATION COMMANDS active region-configuration 597 check region-configuration 597 display stp 598 display stp abnormal-port 600 display stp down-port 601 display stp history 601 display stp region-configuration 602 display stp
stp tc-protection threshold 624 stp timer forward-delay 624 stp timer hello 625 stp timer max-age 626 stp timer-factor 627 stp transmit-limit 628 vlan-mapping modulo 628 39 VLAN CONFIGURATION COMMANDS description 631 display interface vlan-interface display vlan 633 interface vlan-interface 634 ip address 635 shutdown 636 vlan 636 40 631 PORT-BASED VLAN CONFIGURATION COMMANDS port 639 port access vlan 639 port hybrid pvid vlan 640 port hybrid vlan 641 port link-type 642 port trunk permit vlan 642 port
display interface mfr 658 display interface mp-group 660 display interface null 661 display interface virtual-ethernet 661 display interface virtual-template 662 display mfr 663 display virtual-access 664 interface 665 interface ethernet 665 interface loopback 666 interface mfr 666 interface mp-group 667 interface null 667 interface virtual-ethernet 668 interface virtual-template 668 45 CPOS INTERFACE CONFIGURATION COMMANDS clock 671 controller cpos 671 crc 672 display controller cpos 672 display controll
naturemask-arp enable reset arp 695 47 694 GRATUITOUS ARP CONFIGURATION COMMANDS gratuitous-arp-sending enable gratuitous-arp-learning enable 48 697 697 ARP SOURCE SUPPRESSION CONFIGURATION COMMANDS arp source-suppression enable 699 arp source-suppression limit 699 display arp source-suppression 700 49 AUTHORIZED ARP CONFIGURATION COMMANDS arp authorized enable 701 arp authorized time-out 701 50 PROXY ARP CONFIGURATION COMMANDS proxy-arp enable 703 local-proxy-arp enable 703 display proxy-arp 704
reset dhcp server conflict 722 reset dhcp server ip-in-use 722 reset dhcp server statistics 722 static-bind client-identifier 723 static-bind ip-address 724 static-bind mac-address 725 tftp-server domain-name 725 tftp-server ip-address 726 voice-config 726 52 DHCP RELAY AGENT CONFIGURATION COMMANDS dhcp enable 729 dhcp relay address-check 729 dhcp relay information enable 730 dhcp relay information format 730 dhcp relay information strategy 731 dhcp relay release ip 732 dhcp relay security static 732 dhcp
debugging dhcp client 57 760 DNS CONFIGURATION COMMANDS display dns domain 765 display dns dynamic-host 765 display dns proxy table 766 display dns server 767 display ip host 767 dns domain 768 dns proxy enable 768 dns resolve 769 dns server 769 ip host 770 reset dns dynamic-host 770 58 IP ACCOUNTING CONFIGURATION COMMANDS display ip count 773 display ip count rule 774 ip count enable 774 ip count exterior-threshold 775 ip count firewall-denied 775 ip count inbound-packets 776 ip count interior-thresho
reset tcp statistics 799 reset udp statistics 800 tcp anti-naptha enable 800 tcp mss 801 tcp state 801 tcp syn-cookie enable 802 tcp timer check-state 803 tcp timer fin-timeout 803 tcp timer syn-timeout 804 tcp window 805 61 IP UNICAST POLICY ROUTING CONFIGURATION COMMANDS apply default output-interface 807 apply ip-address default next-hop 807 apply ip-address next-hop 808 apply ip-precedence 809 apply output-interface 810 display ip policy-based-route 810 display ip policy-based-route setup 811 display
display ipv6 interface 832 display ipv6 neighbors 834 display ipv6 neighbors count 835 display ipv6 pathmtu 836 display ipv6 socket 836 display ipv6 statistics 837 display tcp ipv6 statistics 840 display tcp ipv6 status 842 display udp ipv6 statistics 843 dns server ipv6 844 ipv6 844 ipv6 address 845 ipv6 address auto link-local 845 ipv6 address eui-64 846 ipv6 address link-local 846 ipv6 fibcache 847 ipv6 fib-loadbalance-type hash-based 847 ipv6 host 848 ipv6 icmp-error 848 ipv6 icmpv6 multicast-echo-reply
display natpt frag-sessions 866 display natpt session 867 display natpt statistics 867 natpt address-group 868 natpt aging-time 869 natpt enable 870 natpt max-session 870 natpt prefix 871 natpt turn-off tos 872 natpt turn-off traffic-class 872 natpt v4bound dynamic 873 natpt v4bound static 873 natpt v6bound dynamic 874 natpt v6bound static 875 reset natpt dynamic-mappings 875 reset natpt statistics 876 67 DUAL STACK CONFIGURATION COMMANDS ipv6 877 ipv6 address 877 ipv6 address auto link-local 878 ipv6 add
70 TERMINAL ACCESS CONFIGURATION COMMANDS auto-close 899 auto-link 899 bind vpn-instance 900 data protect router-unix 901 data read block 901 data send delay 902 display rta 902 driverbuf save 906 driverbuf size 906 idle-timeout 907 menu hotkey 908 menu screencode 908 print connection-info 909 print information 910 print menu 910 print language 911 redrawkey 911 reset rta connection 912 reset rta statistics 912 resetkey 913 rta bind 913 rta rtc-server listen-port 914 rta server enable 915 rta source-ip 915
display ip routing-table statistics 940 display ip relay-route 941 display ip relay-tunnel 941 display load-sharing ip address 942 display ipv6 routing-table 942 display ipv6 routing-table acl 943 display ipv6 routing-table ipv6-address 944 display ipv6 routing-table ipv6-address1 ipv6-address2 display ipv6 routing-table ipv6-prefix 946 display ipv6 routing-table protocol 946 display ipv6 routing-table statistics 947 display ipv6 routing-table verbose 948 display ipv6 relay-route 948 display ipv6 relay-tunn
ebgp-interface-sensitive 976 filter-policy export (BGP/BGP-VPN instance view) 977 filter-policy import (BGP/BGP-VPN instance view) 978 graceful-restart (BGP view) 979 graceful-restart timer restart 979 graceful-restart timer wait-for-rib 980 group (BGP/BGP-VPN instance view) 980 import-route (BGP/BGP-VPN instance view) 981 log-peer-change 982 network (BGP/BGP-VPN instance view) 983 peer advertise-community (BGP/BGP-VPN instance view) 984 peer advertise-ext-community (BGP/BGP-VPN instance view) 984 peer allo
73 BGP DEBUGGING COMMANDS debugging bgp all 1015 debugging bgp detail 1017 debugging bgp event 1018 debugging bgp graceful-restart 1019 debugging bgp 1021 debugging bgp timer 1024 debugging bgp update 1025 debugging bgp update ipv4 1026 debugging bgp update ipv6 1027 debugging bgp update l2vpn 1029 debugging bgp update label-route 1030 debugging bgp update peer 1032 debugging bgp update vpls 1033 debugging bgp update vpn-instance 1034 debugging bgp update vpnv4 1035 74 IS-IS CONFIGURATION COMMANDS area-a
isis dis-name 1065 isis dis-priority 1066 isis enable 1067 isis mesh-group 1067 isis peer-ip-ignore 1068 isis enable 1069 isis small-hello 1069 isis timer csnp 1070 isis timer hello 1070 isis timer holding-multiplier 1071 isis timer lsp 1072 isis timer retransmit 1073 is-level 1073 is-name 1074 is-name map 1075 is-snmp-traps enable 1075 log-peer-change (IS-IS view) 1076 lsp-fragments-extend 1076 lsp-length originate 1077 lsp-length receive 1078 maximum load-balancing (IS-IS view) network-entity 1079 prefere
display ospf cumulative 1117 display ospf error 1118 display ospf interface 1120 display ospf lsdb 1121 display ospf nexthop 1123 display ospf peer 1124 display ospf peer statistics 1125 display ospf request-queue 1126 display ospf retrans-queue 1127 display ospf routing 1128 display ospf vlink 1129 enable link-local-signaling 1130 enable log 1130 enable out-of-band-resynchronization 1131 filter import/export 1131 filter-policy export (OSPF view) 1132 filter-policy import (OSPF view) 1133 graceful-restart (
spf-schedule-interval 1157 stub (OSPF area view) 1157 stub-router 1158 vlink-peer (OSPF area view) 1159 77 RIP CONFIGURATION COMMANDS checkzero 1161 default cost (RIP view) 1161 default-route originate 1162 display rip 1162 display rip database 1164 display rip interface 1165 display rip route 1165 filter-policy export (RIP view) 1167 filter-policy import (RIP view) 1168 host-route 1169 import-route (RIP view) 1170 maximum load-balancing (RIP view) 1171 network 1171 peer 1172 preference 1172 reset rip sta
apply local-preference 1192 apply mpls-label 1192 apply origin 1193 apply preference 1193 apply preferred-value 1194 apply tag 1194 display ip as-path 1195 display ip community-list 1196 display ip extcommunity-list 1196 display route-policy 1197 if-match as-path 1197 if-match community 1198 if-match cost 1199 if-match extcommunity 1199 if-match interface 1200 if-match mpls-label 1201 if-match route-type 1201 if-match tag 1202 ip as-path 1202 ip community-list 1203 ip extcommunity-list 1205 route-policy 120
compare-different-as-med (IPv6 address family view) 1223 dampening (IPv6 address family view) 1224 default local-preference(IPv6 address family view) 1225 default med (IPv6 address family view) 1225 default-route imported (IPv6 address family view) 1226 display bgp ipv6 group 1226 display bgp ipv6 network 1227 display bgp ipv6 paths 1228 display bgp ipv6 peer 1229 display bgp ipv6 routing-table 1230 display bgp ipv6 routing-table as-path-acl 1231 display bgp ipv6 routing-table community 1232 display bgp ipv
peer route-policy (IPv6 address family view) 1258 peer route-update-interval (IPv6 address family view) 1258 peer substitute-as (IPv6 address family view) 1259 peer timer (IPv6 address family view) 1260 preference (IPv6 address family view) 1260 reflect between-clients (IPv6 address family view) 1261 reflector cluster-id (IPv6 address family view) 1262 refresh bgp ipv6 1262 reset bgp ipv6 1263 reset bgp ipv6 dampening 1264 reset bgp ipv6 flap-info 1264 router-id 1265 synchronization (IPv6 address family vie
log-peer-change 1298 maximum load-balancing(OSPFv3 view) ospfv3 1299 ospfv3 area 1299 ospfv3 cost 1300 ospfv3 dr-priority 1300 ospfv3 mtu-ignore 1301 ospfv3 timer dead 1301 ospfv3 timer hello 1302 ospfv3 timer retransmit 1303 ospfv3 trans-delay 1303 preference 1304 router-id 1305 silent-interface(OSPFv3 view) 1305 spf timers 1306 stub(OSPFv3 area view) 1307 vlink-peer(OSPFv3 area view) 1307 85 1298 IPV6 RIPNG CONFIGURATION COMMANDS checkzero 1309 default cost (RIPng view) 1309 display ripng 1310 display
display multicast rpf-info 1333 ip rpf-route-static 1334 mtracert 1336 multicast boundary 1337 multicast forwarding-table downstream-limit 1338 multicast forwarding-table route-limit 1339 multicast load-splitting 1340 multicast longest-match 1340 multicast minimum-ttl 1341 multicast routing-enable 1341 reset multicast forwarding-table 1342 reset multicast routing-table 1343 88 IGMP CONFIGURATION COMMANDS display igmp group 1345 display igmp interface 1346 display igmp routing-table 1348 fast-leave (IGMP v
originating-rp 1373 peer connect-interface 1373 peer description 1374 peer mesh-group 1374 peer minimum-ttl 1375 peer request-sa-enable 1376 peer sa-cache-maximum 1376 peer sa-policy 1377 peer sa-request-policy 1378 reset msdp peer 1378 reset msdp sa-cache 1379 reset msdp statistics 1380 shutdown (MSDP View) 1380 static-rpf-peer 1381 timer retry 1382 90 PIM CONFIGURATION COMMANDS auto-rp enable 1383 bsr-policy (PIM view) 1383 c-bsr (PIM view) 1384 c-bsr admin-scope 1385 c-bsr global 1385 c-bsr group 1386
pim dm 1411 pim hello-option dr-priority 1412 pim hello-option holdtime 1413 pim hello-option lan-delay 1413 pim hello-option neighbor-tracking 1414 pim hello-option override-interval 1414 pim holdtime assert 1415 pim holdtime join-prune 1415 pim require-genid 1416 pim sm 1416 pim state-refresh-capable 1417 pim timer graft-retry 1417 pim timer hello 1418 pim timer join-prune 1418 pim triggered-hello-delay 1419 probe-interval (PIM view) 1419 register-policy (PIM view) 1420 register-suppression-timeout (PIM v
92 MLD CONFIGURATION COMMANDS display mld group 1443 display mld interface 1444 display mld routing-table 1445 fast-leave (MLD view) 1446 last-listener-query-interval 1447 max-response-time (MLD view) 1447 mld 1448 mld enable 1448 mld fast-leave 1449 mld group-policy 1449 mld last-listener-query-interval 1450 mld max-response-time 1451 mld require-router-alert 1451 mld robust-count 1452 mld send-router-alert 1453 mld static-group 1453 mld timer other-querier-present 1454 mld timer query 1455 mld version 14
hello-option holdtime (IPv6 PIM view) 1479 hello-option lan-delay (IPv6 PIM view) 1480 hello-option neighbor-tracking (IPv6 PIM view) 1480 hello-option override-interval (IPv6 PIM view) 1481 holdtime assert (IPv6 PIM view) 1481 holdtime join-prune (IPv6 PIM view) 1482 jp-pkt-size (IPv6 PIM view) 1483 jp-queue-size (IPv6 PIM view) 1483 pim ipv6 1484 pim ipv6 bsr-boundary 1484 pim ipv6 dm 1485 pim ipv6 hello-option dr-priority 1486 pim ipv6 hello-option holdtime 1486 pim ipv6 hello-option lan-delay 1487 pim i
95 MPLS BASICS CONFIGURATION COMMANDS display mpls fast-forwarding cache 1513 display mpls ilm 1514 display mpls interface 1515 display mpls label 1516 display mpls ldp 1517 display mpls ldp cr-lsp 1518 display mpls ldp interface 1519 display mpls ldp Isp 1521 display mpls ldp peer 1522 display mpls ldp remote-peer 1524 display mpls ldp session 1525 display mpls ldp vpn-instance 1527 display mpls lsp 1528 display mpls lsp statistics 1531 display mpls nhlfe 1531 display mpls route-state 1532 display mpls st
reset mpls statistics lsp 1558 snmp-agent trap enable mpls 1559 static-lsp egress 1559 static-lsp ingress 1560 static-lsp transit 1561 statistics interval 1562 tracert lsp 1562 ttl expiration 1563 ttl propagate 1564 96 MPLS TE CONFIGURATION COMMANDS add hop 1565 delete hop 1566 display explicit-path 1566 display isis traffic-eng advertisements 1567 display isis traffic-eng link 1569 display isis traffic-eng network 1570 display isis traffic-eng statistics 1571 display isis traffic-eng sub-tlvs 1572 displa
mpls rsvp-te reliability 1610 mpls rsvp-te resvconfirm 1611 mpls rsvp-te srefresh 1611 mpls rsvp-te timer graceful-restart recovery 1612 mpls rsvp-te timer graceful-restart restart 1612 mpls rsvp-te timer hello 1613 mpls rsvp-te timer refresh 1613 mpls rsvp-te timer retransmission 1614 mpls te 1615 mpls te affinity property 1616 mpls te auto-bandwidth 1616 mpls te backup 1617 mpls te backup bandwidth 1618 mpls te bandwidth 1619 mpls te bandwidth change thresholds 1619 mpls te commit 1620 mpls te cspf 1621 m
static-cr-lsp transit 1641 te-set-subtlv 1642 traffic-eng 1642 97 MPLS L2VPN CONFIGURATION COMMANDS ccc interface in-label out-label 1645 ccc interface out-interface 1646 ce 1646 connection 1647 display bgp l2vpn 1648 display ccc 1653 display l2vpn ccc-interface vc-type 1654 display mpls l2vc 1655 display mpls l2vpn 1657 display mpls l2vpn connection 1659 display mpls l2vpn forwarding-info 1662 display mpls static-l2vc 1662 l2vpn-family 1663 mpls l2vc 1664 mpls l2vpn 1665 mpls l2vpn vpn-name 1665 mpls sta
ip binding vpn-instance 1695 ip vpn-instance 1696 ipv4-family 1696 peer advertise-community (BGP-VPNv4 subaddress family view) 1697 peer allow-as-loop 1698 peer as-path-acl (BGP-VPNv4 subaddress family view) 1698 peer default-route-advertise vpn-instance 1699 peer enable 1700 peer filter-policy (BGP-VPNv4 subaddress family view) 1700 peer group 1701 peer ip-prefix (BGP-VPNv4 subaddress family view) 1702 peer label-route-capability (BGP view/BGP VPN instance view) 1702 peer next-hop-invariable (BGP-VPNv4 sub
vam server vpn 100 1730 VAM CLIENT CONFIGURATION COMMANDS client enable 1731 display vam client 1731 pre-shared-key (VAM client view) 1733 resend interval 1734 server primary ip-address 1735 server secondary ip-address 1735 user 1736 vam client enable 1736 vam client name 1737 vpn 1738 101 IPSEC PROFILE CONFIGURATION COMMANDS display ipsec profile 1739 ipsec profile (system view) 1740 102 DVPN TUNNEL CONFIGURATION COMMANDS display dvpn session 1743 dvpn session dumb-time 1744 dvpn session idle-time 1
mandatory-chap 1762 mandatory-lcp 1762 reset l2tp tunnel 1763 start l2tp 1764 tunnel authentication 1764 tunnel avp-hidden 1765 tunnel flow-control 1766 tunnel name 1766 tunnel password 1767 tunnel timer hello 1767 105 TRAFFIC POLICING (TP) CONFIGURATION COMMANDS display qos car interface display qos carl 1770 qos car 1770 qos carl 1772 106 TRAFFIC SHAPING CONFIGURATION COMMANDS display qos gts interface qos gts 1776 107 1769 1775 LINE RATE CONFIGURATION COMMANDS display qos lr interface 1779 qos lr
display qos policy 1801 display qos policy interface 1803 qos apply policy (interface view) 1804 qos apply policy (layer 2 interface view or port group view) qos policy 1806 111 FIFO QUEUING CONFIGURATION COMMANDS qos fifo queue-length 112 1805 1809 PQ CONFIGURATION COMMANDS display qos pq interface 1811 display qos pql 1811 qos pq 1812 qos pql default-queue 1813 qos pql inbound-interface 1813 qos pql protocol 1814 qos pql queue 1815 113 CQ CONFIGURATION COMMANDS display qos cq interface 1817 displa
117 QOS TOKEN CONFIGURATION COMMANDS qos qmtoken 118 1837 PRIORITY MAPPING TABLE CONFIGURATION COMMANDS display qos map-table 1839 qos map-table dot1p-Ip 1840 import 1840 119 PORT PRIORITY CONFIGURATION COMMANDS qos priority 120 1843 PORT PRIORITY TRUST MODE CONFIGURATION COMMANDS display qos trust interface qos trust 1845 121 1845 WRED CONFIGURATION COMMANDS display qos wred interface 1847 qos wred enable 1848 qos wred dscp 1849 qos wred ip-precedence 1850 qos wred weighting-constant 1850 122
reset dar session 125 1873 FR QOS CONFIGURATION COMMANDS apply policy outbound 1875 cbs 1876 cir 1876 cir allow 1877 congestion-threshold 1878 cq 1878 display fr class-map 1879 display fr fragment-info 1880 display fr switch-table 1882 display qos policy interface 1882 display qos pvc-pq interface 1884 ebs 1885 fifo queue-length 1885 fr class 1886 fr congestion-threshold 1886 fr de del 1887 fr del inbound-interface 1888 fr del protocol 1889 fr pvc-pq 1890 fr traffic-policing 1891 fr traffic-shaping 1891
accounting default 1913 accounting lan-access 1915 accounting login 1915 accounting optional 1916 accounting portal 1917 accounting ppp 1918 accounting voip 1919 attribute 1919 authentication default 1920 authentication lan-access 1921 authentication login 1922 authentication portal 1923 authentication ppp 1924 authentication voip 1925 authorization command 1925 authorization default 1926 authorization lan-access 1927 authorization login 1928 authorization portal 1929 authorization ppp 1930 authorization vo
primary authentication (RADIUS scheme view) 1959 radius client 1960 radius nas-ip 1960 radius scheme 1961 radius trap 1962 reset radius statistics 1963 reset stop-accounting-buffer 1963 retry 1964 retry realtime-accounting 1965 retry stop-accounting (RADIUS scheme view) 1966 secondary accounting (RADIUS scheme view) 1966 secondary authentication (RADIUS scheme view) 1967 security-policy-server 1968 server-type 1968 state 1969 stop-accounting-buffer enable (RADIUS scheme view) 1970 timer quiet (RADIUS scheme
firewall fragments-inspect 1994 firewall fragments-inspect [ high | low ] 1995 firewall ipv6 fragments-inspect 1995 firewall packet-filter 1996 firewall packet-filter ipv6 1997 reset firewall ethernet-frame-filter 1997 reset firewall-statistics 1998 131 ASPF CONFIGURATION COMMANDS aging-time 1999 aspf-policy 2000 detect 2000 display aspf all 2001 display aspf interface 2002 display aspf policy 2003 display aspf session 2003 display port-mapping 2004 firewall aspf 2005 log enable 2006 port-mapping 2006 res
nat aging-time 2029 nat alg 2030 nat connection-limit-policy 2031 nat log enable 2032 nat log flow-active 2032 nat log flow-begin 2033 nat outbound 2033 nat outbound static 2035 nat server 2035 nat static 2038 reset nat session 2039 reset userlog export 2040 reset userlog nat logbuffer 2040 userlog nat export host 2040 userlog nat export source-ip 2041 userlog nat export version 2042 userlog nat syslog 2042 134 PKI CONFIGURATION COMMANDS attribute 2043 ca identifier 2044 certificate request entity 2045 ce
root-certificate fingerprint 2062 rule (access control policy view) 2063 state 2063 135 PORTAL CONFIGURATION COMMANDS display portal acl 2065 display portal connection statistics 2066 display portal free-rule 2068 display portal interface 2069 display portal server 2070 display portal server statistics 2071 display portal tcp-cheat statistics 2072 display portal user 2073 portal auth-network 2074 portal delete-user 2075 portal free-rule 2075 portal resource-name 2076 portal server 2077 portal server metho
display acl ipv6 2106 reset acl ipv6 counter 2107 rule (in basic IPv6 ACL view) 2108 rule (in advanced IPv6 ACL view) 2109 rule (in simple IPv6 ACL view) 2112 rule comment (for IPv6) 2115 step (for IPv6) 2116 140 IPSEC CONFIGURATION COMMANDS ah authentication-algorithm 2119 cryptoswitch fabric enable 2119 display encrypt-card fast-switch 2120 display ipsec policy 2121 display ipsec policy-template 2123 display ipsec proposal 2124 display ipsec sa 2124 display ipsec session 2127 display ipsec statistics 21
141 IKE CONFIGURATION COMMANDS authentication-algorithm 2153 authentication-method 2153 certificate domain 2154 dh 2154 display ike dpd 2155 display ike peer 2156 display ike proposal 2156 display ike sa 2157 dpd 2160 encryption-algorithm 2160 exchange-mode 2161 id-type 2161 ike dpd 2162 ike local-name 2162 ike next-payload check disabled 2163 ike peer (system view) 2164 ike proposal 2164 ike sa keepalive-timer interval 2165 ike sa keepalive-timer timeout 2165 ike sa nat-keepalive-timer interval 2166 inter
sftp 2185 sftp client ipv6 source 2186 sftp client source 2187 sftp ipv6 2187 sftp server enable 2189 sftp server idle-timeout 2189 ssh client authentication server 2190 ssh client first-time enable 2190 ssh client ipv6 source 2191 ssh client source 2191 ssh server authentication-retries 2192 ssh server authentication-timeout 2193 ssh server compatible-ssh1x enable 2193 ssh server enable 2194 ssh server rekey-interval 2194 ssh user 2195 ssh2 2196 ssh2 ipv6 2197 143 SFTP CONFIGURATION COMMANDS bye 2201 cd
145 BACKUP CENTER CONFIGURATION COMMANDS display standby flow 2217 display standby state 2218 standby bandwidth 2219 standby interface 2220 standby threshold 2221 standby timer delay 2222 standby timer flow-check 2223 standby track 2223 146 IPV4-BASED VRRP CONFIGURATION COMMANDS display vrrp 2225 display vrrp statistics 2226 reset vrrp statistics 2228 vrrp vrid authentication-mode 2228 vrrp method 2229 vrrp ping-enable 2230 vrrp un-check ttl 2231 vrrp vrid preempt-mode 2231 vrrp vrid priority 2232 vrrp v
display memory 2257 display power 2257 display reboot-type 2258 display schedule reboot 2258 license register 2259 reboot 2259 remove 2260 reset unused porttag 2260 schedule reboot at 2261 schedule reboot delay 2262 temperature-alarm enable 2263 temperature-limit 2264 149 NQA CLIENT CONFIGURATION COMMANDS data-fill 2265 data-size 2266 description (any NQA test type view) 2266 destination ip 2267 destination port 2267 display nqa 2268 filename 2271 frequency 2271 history-records 2272 http-version 2273 next
150 NQA SERVER CONFIGURATION COMMANDS display nqa server status 2289 nqa server enable 2290 nqa server tcp-connect 2290 nqa server udp-echo 2291 151 NETSTREAM CONFIGURATION COMMANDS display ip netstream cache 2293 display ip netstream export 2294 enable 2295 ip netstream 2295 ip netstream aggregation 2296 ip netstream export host 2297 ip netstream export source 2297 ip netstream export version 2298 ip netstream max-entry 2299 ip netstream timeout active 2299 ip netstream timeout inactive 2300 reset ip ne
rmon prialarm rmon statistics 154 2325 2327 SNMP CONFIGURATION COMMANDS display snmp-agent local-switch fabricid 2329 display snmp-agent community 2329 display snmp-agent group 2330 display snmp-agent mib-view 2331 display snmp-agent statistics 2332 display snmp-agent sys-info 2333 display snmp-agent trap-list 2334 display snmp-agent usm-user 2335 enable snmp trap updown 2335 snmp-agent 2336 snmp-agent community 2337 snmp-agent group 2338 snmp-agent local-switch fabricid 2339 snmp-agent log 2339 snmp-age
156 CONFIGURATION FILE MANAGEMENT COMMANDS backup startup-configuration 2361 display saved-configuration 2361 display startup 2363 reset saved-configuration 2363 restore startup-configuration 2364 save 2365 startup saved-configuration 2366 157 FTP SERVER CONFIGURATION COMMANDS display ftp-server 2369 display ftp-user 2369 free ftp user 2370 ftp server enable 2370 ftp timeout 2371 ftp update 2371 158 FTP CLIENT CONFIGURATION COMMANDS ascii 2373 binary 2373 bye 2374 cd 2374 cdup 2374 close 2375 debugging
tftp-server acl 2391 tftp 2392 tftp client source 2393 tftp ipv6 2394 160 SYSTEM MAINTAINING COMMANDS ping 2397 ping ipv6 2398 tracert 2400 tracert ipv6 2401 161 SYSTEM DEBUGGING COMMANDS debugging 2403 display debugging 2404 162 BASIC CONFIGURATION COMMANDS clock datetime 2405 clock summer-time one-off 2405 clock summer-time repeating 2407 clock timezone 2408 command-privilege 2409 configure-user count 2410 display clipboard 2410 display clock 2411 display configure-user 2411 display current-configur
info-center console channel 2433 info-center enable 2434 info-center logbuffer 2434 info-center logfile enable 2435 info-center logfile frequency 2435 info-center logfile size-quota 2436 info-center logfile switch-directory 2436 info-center loghost 2437 info-center loghost source 2438 info-center monitor channel 2439 info-center snmp channel 2439 info-center source 2440 info-center synchronous 2442 info-center timestamp 2442 info-center timestamp loghost 2443 info-center trapbuffer 2444 logfile save 2444 re
screen-length 2469 send 2469 set authentication password 2470 shell 2471 speed (in user interface view) 2472 stopbits 2473 terminal type 2473 user privilege level 2474 user-interface 2475 165 MAC ADDRESS TABLE MANAGEMENT CONFIGURATION COMMANDS display mac-address 2477 display mac-address aging-time 2478 display mac-address mac-learning 2478 mac-address (Ethernet interface view) 2479 mac-address (system view) 2480 mac-address mac-learning disable 2481 mac-address max-mac-count (Ethernet interface view) mac
168 ACFP CONFIGURATION COMMANDS acfp enable 2509 display acfp client-info 2509 display acfp policy-info 2510 display acfp rule-cache 2512 display acfp rule-info 2513 display acfp server-info 2515 reset acfp rule-cache 2516 169 ACSEI SERVER CONFIGURATION COMMANDS acsei server enable 2517 acsei server 2517 acsei timer clock-sync 2518 acsei timer monitor 2518 acsei client close 2519 acsei client reboot 2519 display acsei client summary 2519 display acsei client info 2520 170 ACSEI CLIENT CONFIGURATION COM
ipx rip mtu 2541 ipx rip multiplier 2541 ipx rip timer update 2542 ipx route-static 2542 ipx route load-balance-path 2543 ipx route max-reserve-path 2544 ipx sap disable 2544 ipx sap gns-disable-reply 2545 ipx sap gns-load-balance 2545 ipx sap max-reserve-servers 2546 ipx sap mtu 2546 ipx sap multiplier 2547 ipx sap timer update 2548 ipx service 2548 ipx split-horizon 2549 ipx tick 2549 ipx update-change-only 2550 ping ipx 2550 reset ipx statistics 2551 reset ipx routing-table statistics protocol 173 2551
display voice entity 2581 display voice ipp statistic 2581 display voice iva statistic 2583 display voice subscriber-line 2584 dscp media 2587 dtmf amplitude 2587 dtmf sensitivity-level 2588 dtmf time 2588 dtmf threshold 2589 echo-canceller 2591 echo-canceller parameter 2592 em-phy-parm 2593 em-signal 2593 entity 2594 fast-connect 2595 hookoff-mode 2596 hookoff-mode delay bind 2596 hookoff-time 2597 impedance 2598 line 2599 match-template 2599 nlp-on 2601 outband 2602 payload-size 2602 plc-mode 2603 receive
voip called-tunnel enable 2620 voip called-start 2621 voip timer 2621 vqa dscp 2622 vqa dsp-monitor buffer-time 2623 174 DIAL PLAN CONFIGURATION COMMANDS caller-permit 2625 dial-prefix 2626 display voice number-substitute 2627 dot-match 2628 first-rule 2629 max-call (in voice dial program view) 2629 max-call (in voice entity view) 2630 number-match 2631 number-priority 2632 number-substitute 2632 priority 2633 private-line 2633 rule 2634 select-rule rule-order 2638 select-rule search-stop 2639 select-rule
reverse 2665 seizure-ack enable 2665 select-mode 2666 sendring ringbusy enable 2667 signal-value 2668 special-character 2668 subscriber line 2669 tdm-clock 2670 timer dl 2671 timer dtmf 2672 timer register-pulse persistence 2673 timer register-complete group-b 2674 timer ring 2675 timeslot-set 2675 trunk-direction 2676 ts 2677 176 FAX OVER IP CONFIGURATION COMMANDS default entity fax 2679 display voice fax 2680 fax baudrate 2683 fax ecm 2684 fax level 2685 fax local-train threshold 2685 fax nsf-on 2686 fa
reset voice sip 2704 sip 2704 sip-comp 2704 sip-comp agent 2705 sip-comp server 2706 sip-domain 2706 source-ip 2707 user 2707 wildcard-register enable 179 2709 VOFR CONFIGURATION COMMANDS address 2711 call-mode 2712 cid select-mode 2712 display fr vofr-info 2713 entity vofr 2714 outband vofr 2714 seq-number 2715 timestamp 2716 trunk-id 2716 voice bandwidth 2717 vofr 2717 vofr frf11-timer 2719 180 VOICE RADIUS CONFIGURATION COMMANDS aaa-client 2721 accounting 2721 accounting-did 2722 acct-method 2723 au
ABOUT THIS GUIDE This manual covers the command line interface (CLI) of the H3C MSR 20/30/50 Series routers. It provides a detailed description of the operating commands, which are organized by feature. An alphabetical listing of all commands can be found beginning on page 75.
ABOUT THIS GUIDE Table 2 Text Conventions Convention Description Words in italics Italics are used to: Emphasize a point. Denote a new term at the place where it is defined in the text. Identify menu names, menu commands, and software button names. Examples: From the Help menu, select Contents. Click OK. Words in bold Related Documentation Boldface type is used to highlight command names. For example, “Use the display user-interface command to...
ALPHABETICAL LISTING OF COMMANDS aaa-client 2721 abr-summary (OSPF area view) 1107 abr-summary (OSPFv3 area view) 1279 access-limit 1913 accounting 2721 accounting default 1913 accounting lan-access 1915 accounting login 1915 accounting optional 1916 accounting portal 1917 accounting ppp 1918 accounting voip 1919 accounting-did 2722 accounting-on enable 1949 accounting-on enable interval 1950 accounting-on enable send 1950 acct-method 2723 acfp enable 2509 acl 2087 acl 2449 acl copy 2088 acl ipv6 2103 acl i
area 2554 area-authentication-mode 1037 area-id 2554 area-id 2691 arp authorized enable 701 arp authorized time-out 701 arp check enable 689 arp max-learning-num 689 arp source-suppression enable 699 arp source-suppression limit 699 arp static 690 arp timer aging 691 asbr-summary 1108 ascii 2373 aspf-policy 2000 async mode 189 atm class 291 atm-class 291 atm-link check 292 attribute 1919 attribute 2043 authentication 2724 authentication default 1920 authentication lan-access 1921 authentication login 1922 a
cable (CT3 interface view) 267 cable 113 cable 123 cable 201 cache-sa-enable 1365 callednumber receive-method 2727 caller-permit 2625 callmode 2649 call-mode 2712 car 1791 card-digit 2728 cas 2649 cbs 1876 c-bsr (IPv6 PIM view) 1461 c-bsr (PIM view) 1384 c-bsr admin-scope 1385 c-bsr global 1385 c-bsr group 1386 c-bsr hash-length (IPv6 PIM view) 1462 c-bsr hash-length (PIM view) 1387 c-bsr holdtime (IPv6 PIM view) 1463 c-bsr holdtime (PIM view) 1387 c-bsr interval (IPv6 PIM view) 1463 c-bsr interval (PIM vie
connection-limit default action 2015 connection-limit default amount 2015 connection-limit enable 2016 connection-limit policy 2016 controller cpos 671 controller e1 203 controller e3 254 controller t1 217 controller t3 268 copy 2351 cost-style 1040 country 2048 country-code 192 cptone country-type 2564 cptone tone-type 2566 cq 1878 crc 151 crc 193 crc 204 crc 218 crc 231 crc 239 crc 255 crc 268 crc 672 crl check 2049 crl update-period 2049 crl url 2050 c-rp (IPv6 PIM view) 1464 c-rp (PIM view) 1389 c-rp ad
default local-preference (BGP-VPNv4 subaddress family view) 1671 default local-preference(IPv6 address family view) 1225 default med (BGP/BGP-VPN instance view) 962 default med (BGP-VPNv4 subaddress family view) 1672 default med (IPv6 address family view) 1225 default subscriber-line 2570 default-cost (OSPF area view) 1111 default-cost (OSPFv3 area view) 1280 default-route imported (BGP/BGP-VPN instance view) 963 default-route imported (IPv6 address family view) 1226 default-route originate 1162 default-rou
dialer user 328 dialer-group 329 dialer-rule 330 dial-prefix 2626 dial-program 2575 differential-delay 115 dir 2202 dir 2352 dir 2377 disconnect 2377 display acfp client-info 2509 display acfp policy-info 2510 display acfp rule-cache 2512 display acfp rule-info 2513 display acfp server-info 2515 display acl 2091 display acl ipv6 2106 display acsei client info 2520 display acsei client summary 2519 display arp 691 display arp ip-address 693 display arp source-suppression 700 display arp timer aging 693 displ
display brief interface 162 display ccc 1653 display channel 2425 display clipboard 2410 display clock 2411 display configure-user 2411 display connection 1932 display connection-limit policy 2017 display connection-limit statistics 2018 display controller cpos 672 display controller cpos e1 674 display controller cpos t1 675 display controller e1 205 display controller e3 255 display controller t1 219 display controller t3 269 display cpu-usage 2250 display current-configuration 2412 display dar informatio
display history-command 2415 display history-command 2454 display hotkey 2415 display hwtacacs 1975 display icmp statistics 790 display igmp group 1345 display igmp interface 1346 display igmp routing-table 1348 display ike dpd 2155 display ike peer 2156 display ike proposal 2156 display ike sa 2157 display info-center 2426 display interface 164 display interface 422 display interface atm 111 display interface bridge-template 557 display interface dialer 332 display interface ima-group 115 display interface
display ipv6 routing-table verbose 948 display ipv6 socket 836 display ipv6 statistics 837 display ipx interface 2531 display ipx routing-table 2532 display ipx routing-table protocol 2534 display ipx routing-table statistics 2535 display ipx routing-table verbose 2533 display ipx service-table 2535 display ipx statistics 2536 display isdn active-channel 564 display isdn call-info 564 display isdn call-record 566 display isdn parameters 567 display isdn spid 568 display isis brief 1042 display isis debug-sw
display mpls rsvp-te statistics 1584 display mpls static-cr-lsp 1586 display mpls static-l2vc 1662 display mpls static-lsp 1533 display mpls statistics interface 1534 display mpls statistics lsp 1536 display mpls te cspf tedb 1587 display mpls te link-administration admission-control 1592 display mpls te link-administration bandwidth-allocation 1593 display mpls te tunnel 1594 display mpls te tunnel path 1596 display mpls te tunnel statistics 1597 display mpls te tunnel-interface 1597 display msdp brief 136
display pim ipv6 control-message counters 1469 display pim ipv6 grafts 1471 display pim ipv6 interface 1471 display pim ipv6 join-prune 1473 display pim ipv6 neighbor 1474 display pim ipv6 routing-table 1475 display pim ipv6 rp-info 1477 display pim join-prune 1398 display pim neighbor 1399 display pim routing-table 1401 display pim rp-info 1403 display pki certificate 2050 display pki certificate access-control-policy 2052 display pki certificate attribute-group 2052 display pki crl domain 2053 display poe
display ssh server 2176 display ssh server-info 2177 display ssh user-information 2178 display ssl client-policy 2211 display ssl server-policy 2211 display standby flow 2217 display standby state 2218 display startup 2363 display stop-accounting-buffer 1956 display stop-accounting-buffer 1977 display stp 598 display stp abnormal-port 600 display stp down-port 601 display stp history 601 display stp region-configuration 602 display stp root 603 display stp tc 604 display tcp ipv6 statistics 840 display tcp
dot1x handshake 1903 dot1x max-user 1904 dot1x multicast-trigger 1905 dot1x port-control 1905 dot1x port-method 1906 dot1x quiet-period 1907 dot1x retry 1908 dot1x supp-proxy-check 1908 dot1x timer 1910 dot-match 2628 dpd 2160 driverbuf save 906 driverbuf size 906 dscp media 2587 dtmf amplitude 2587 dtmf enable 2654 dtmf sensitivity-level 2588 dtmf threshold 2589 dtmf threshold digital 2654 dtmf time 2588 duplex 168 du-readvertise 1538 du-readvertise timer 1538 dvpn session dumb-time 1744 dvpn session idle-
fe1 unframed 237 fe3 261 feac (CT3 interface view) 273 fifo queue-length 1885 file prompt 2354 filename 2271 filter 1793 filter import/export 1131 filter-policy export (BGP/BGP-VPN instance view) 977 filter-policy export (BGP-VPNv4 subaddress family view) 1693 filter-policy export (IS-IS view) 1055 filter-policy export (OSPF view) 1132 filter-policy export (RIP view) 1167 filter-policy export 1314 filter-policy export(IPv6 address family view) 1238 filter-policy export(OSPFv3 view) 1295 filter-policy import
ft1 code 244 ft1 data-coding 245 ft1 fdl 246 ft1 frame-format 246 ft1 idlecode 247 ft1 itf 247 ft1 loopback 248 ft1 sendloopcode 251 ft1 timeslot-list 249 ft3 274 ftp 2378 ftp client source 2379 ftp ipv6 2380 ftp server enable 2370 ftp timeout 2371 ftp update 2371 garp timer 412 garp timer leaveall 413 gateway-list 718 get 2203 get 2381 gk-2nd-id 2693 gk-client 2692 gk-id 2694 gk-security call enable 2694 gk-security register-pwd 2695 graceful-restart (BGP view) 979 graceful-restart (IS-IS view) 1058 gracef
idle-cut 1938 idle-mark 195 idle-mark 351 idle-timeout 2460 idle-timeout 907 id-type 2161 if-match 1784 if-match acl 1208 if-match acl 813 if-match acl6 895 if-match as-path 1197 if-match community 1198 if-match cost 1199 if-match extcommunity 1199 if-match interface 1200 if-match ip 1209 if-match ip-prefix 1209 if-match ipv6 1214 if-match mpls-exp 1857 if-match mpls-label 1201 if-match packet-length 814 if-match packet-length 896 if-match protocol 1870 if-match protocol http 1871 if-match protocol rtp 1872
interface mp-group 507 interface mp-group 667 interface null 667 interface serial 399 interface tunnel 1754 interface tunnel 884 interface virtual-ethernet 668 interface virtual-template 1759 interface virtual-template 508 interface virtual-template 668 interface vlan-interface 634 interval-time 2166 invert receive-clock 195 invert transmit-clock 196 ip (PKI entity view) 2054 ip address 635 ip address 784 ip address bootp-alloc 752 ip address dhcp-alloc 744 ip address ppp-negotiate 508 ip address unnumbered
ipv6 nd autoconfig other-flag 850 ipv6 nd dad attempts 851 ipv6 nd hop-limit 851 ipv6 nd ns retrans-timer 852 ipv6 nd nud reachable-time 852 ipv6 nd ra halt 853 ipv6 nd ra interval 854 ipv6 nd ra prefix 854 ipv6 nd ra router-lifetime 855 ipv6 neighbor 856 ipv6 neighbors max-learning-num 857 ipv6 pathmtu 857 ipv6 pathmtu age 858 ipv6 policy-based-route (interface view) 897 ipv6 policy-based-route (system view) 897 ipv6 preference 1276 ipv6 route-static 1325 ipv6 summary 1277 ipv6-family 1241 ipx enable 2538
keepalive 1754 keepalive interval 1726 keepalive retry 1727 key (HWTACACS scheme view) 1979 key (RADIUS scheme view) 1957 l2tp enable 1760 l2tp sendaccm enable 1760 l2tp-group 1761 l2tpmoreexam enable 1761 l2vpn-family 1663 label advertise 1542 label-distribution 1543 label-retention 1544 lacp port-priority 478 lacp system-priority 479 lapb max-frame 433 lapb modulo 434 lapb retry 434 lapb timer 435 lapb window-size 435 last-listener-query-interval 1447 last-member-query-interval 1357 lcd 2382 ldap-server 2
interface view) 560 mac-address (Ethernet interface view) 2479 mac-address (system view) 2480 mac-address mac-learning disable 2481 mac-address max-mac-count (Ethernet interface view) 2482 mac-address timer 2483 mac-authentication 2010 mac-authentication domain 2011 mac-authentication timer 2012 mac-authentication user-name-format 2013 mandatory-chap 1762 mandatory-lcp 1762 map bridge 300 map bridge-group 560 map ip 301 map ppp 302 match-template 2599 max-call (in voice dial program view) 2629 max-call (in
mpls rsvp-te hello-lost 1609 mpls rsvp-te keep-multiplier 1610 mpls rsvp-te reliability 1610 mpls rsvp-te resvconfirm 1611 mpls rsvp-te srefresh 1611 mpls rsvp-te timer graceful-restart recovery 1612 mpls rsvp-te timer graceful-restart restart 1612 mpls rsvp-te timer hello 1613 mpls rsvp-te timer refresh 1613 mpls rsvp-te timer retransmission 1614 mpls static-l2vc destination 1666 mpls te 1615 mpls te affinity property 1616 mpls te auto-bandwidth 1616 mpls te backup 1617 mpls te backup bandwidth 1618 mpls t
nat log enable 2032 nat log flow-active 2032 nat log flow-begin 2033 nat outbound 2033 nat outbound static 2035 nat server 2035 nat static 2038 nat traversal 2168 national-bit 263 natpt address-group 868 natpt aging-time 869 natpt enable 870 natpt max-session 870 natpt prefix 871 natpt turn-off tos 872 natpt turn-off traffic-class 872 natpt v4bound dynamic 873 natpt v4bound static 873 natpt v6bound dynamic 874 natpt v6bound static 875 naturemask-arp enable 694 nbns-list 719 netbios-type 719 network (BGP/BGP
outband vofr 2714 pad 437 parity 2463 passive 2385 password (FTP test type view) 2277 password 1941 password-digit 2737 path-vectors 1555 payload-size 2602 pcm 2659 peer 1151 peer 1172 peer 2168 peer advertise-community (BGP/BGP-VPN instance view) 984 peer advertise-community (BGP-VPNv4 subaddress family view) 1697 peer advertise-community (IPv6 address family view) 1242 peer advertise-ext-community (BGP/BGP-VPN instance view) 984 peer advertise-ext-community (IPv6 address family view) 1243 peer allow-as-lo
view) 1254 peer mesh-group 1374 peer minimum-ttl 1375 peer next-hop-invariable (BGP-VPNv4 subaddress family view) 1703 peer next-hop-local (BGP/BGP-VPN instance view) 997 peer next-hop-local (IPv6 address family view) 1254 peer next-hop-local 1704 peer password 998 peer preferred-value (BGP/BGP-VPN instance view) 999 peer preferred-value (IPv6 address family view) 1255 peer public-as-only (BGP/BGP-VPN instance view) 1000 peer public-as-only (BGP-VPNv4 subaddress family view) 1704 peer public-as-only (IPv6 a
pki certificate attribute-group 2057 pki delete-certificate 2058 pki domain 2058 pki entity 2059 pki import-certificate 2059 pki request-certificate domain 2060 pki retrieval-certificate 2061 pki retrieval-crl domain 2061 pki validate-certificate 2062 pki-domain 2212 plc-mode 2603 poe disconnect 2496 poe enable 2497 poe enable pse 2498 poe legacy enable 2498 poe max-power (system view) 2499 poe max-power 2499 poe mode 2500 poe pd-description 2501 poe pd-policy priority 2501 poe priority (system view) 2503 p
primary accounting (HWTACACS scheme view) 1980 primary accounting (RADIUS scheme view) 1958 primary authentication (HWTACACS scheme view) 1981 primary authentication (RADIUS scheme view) 1959 primary authorization 1982 print connection-info 909 print information 910 print language 911 print menu 910 priority 2633 pri-set (CE1/PRI interface view) 210 pri-set (CT1/PRI interface view) 227 pri-set 2660 private-line 2633 probe count 2278 probe packet-interval 2279 probe packet-number 2279 probe packet-timeout 22
reboot 2259 receive gain 2604 redialtimes 2740 redirect 1794 redirect disconnect 2465 redirect enable 2465 redirect listen-port 2466 redirect refuse-negotiation 2466 redirect return-deal from-telnet 2467 redirect return-deal from-terminal 2468 redirect timeout 2468 redrawkey 911 reflect between-clients (BGP view) 1006 reflect between-clients (IPv6 address family view) 1261 reflect between-clients 1708 reflector cluster-id (BGP view) 1007 reflector cluster-id (IPv6 address family view) 1262 reflector culster
reset firewall-statistics 1998 reset fr inarp 407 reset fr pvc 408 reset garp statistics 414 reset hwtacacs statistics 1982 reset igmp group 1359 reset ike sa 2170 reset ip count 779 reset ip fast-forwarding cache 827 reset ip ip-prefix 1211 reset ip ipv6-prefix 1216 reset ip netstream statistics 2300 reset ip routing-table statistics protocol 951 reset ip statistics 799 reset ipsec sa 2142 reset ipsec session 2143 reset ipsec statistics 2144 reset ipv6 fibcache 859 reset ipv6 neighbors 859 reset ipv6 pathm
retry 1964 retry realtime-accounting 1965 retry stop-accounting (HWTACACS scheme view) 1983 retry stop-accounting (RADIUS scheme view) 1966 return 2421 reverse 2665 reverse-rts 199 revision-level 607 rfc1583 compatible 1154 rip 1173 rip authentication-mode 1174 rip input 1175 rip metricin 1176 rip metricout 1176 rip mib-binding 1177 rip output 1177 rip poison-reverse 1178 rip split-horizon 1178 rip summary-address 1179 rip triggered 1179 rip version 1180 ripng 1317 ripng default-route 1318 ripng enable 1318
sdlc status 367 sdlc timer ack 368 sdlc timer lifetime 368 sdlc timer poll 369 sdlc window 369 sdlc xid 370 secondary accounting (HWTACACS scheme view) 1984 secondary accounting (RADIUS scheme view) 1966 secondary authentication (HWTACACS scheme view) 1984 secondary authentication (RADIUS scheme view) 1967 secondary authorization 1985 security acl 2149 security-policy-server 1968 seizure-ack enable 2665 selectlanguage 2741 select-mode 2666 select-rule rule-order 2638 select-rule search-stop 2639 select-rule
snmp-agent target-host 2342 snmp-agent trap enable 2344 snmp-agent trap enable mpls 1559 snmp-agent trap enable ospf 1155 snmp-agent trap if-mib link extended 2345 snmp-agent trap life 2346 snmp-agent trap queue-size 2346 snmp-agent trap source 2347 snmp-agent usm-user 2347 source 1755 source 886 source interface 2283 source ip 2284 source port 2284 source-ip 2707 source-lifetime (IPv6 PIM view) 1496 source-lifetime (PIM view) 1422 source-policy (IPv6 PIM view) 1496 source-policy (PIM view) 1423 special-cha
stp pathcost-standard 616 stp point-to-point 617 stp port priority 619 stp port-log 618 stp priority 620 stp region-configuration 621 stp root primary 621 stp root secondary 622 stp root-protection 623 stp tc-protection 623 stp tc-protection threshold 624 stp timer forward-delay 624 stp timer hello 625 stp timer max-age 626 stp timer-factor 627 stp transmit-limit 628 stub (OSPF area view) 1157 stub(OSPFv3 area view) 1307 stub-router 1158 subscriber line 2669 subscriber-line 2610 substitute (subscriber line
timer lsp-refresh 1085 timer other-querier-present (IGMP view) 1361 timer other-querier-present (MLD view) 1458 timer query (IGMP view) 1362 timer query (MLD view) 1459 timer quiet (HWTACACS scheme view) 1987 timer quiet (RADIUS scheme view) 1971 timer realtime-accounting (HWTACACS scheme view) 1987 timer realtime-accounting (RADIUS scheme view) 1971 timer register-complete group-b 2674 timer register-pulse persistence 2673 timer response-timeout (HWTACACS scheme view) 1988 timer response-timeout (RADIUS sc
vam client enable 1736 vam client name 1737 vam server enable 1729 vam server ip-address 1729 vam server vpn 1730 verbose 2389 version (IGMP view) 1363 version (MLD view) 1460 version 1185 version 2216 vi-card busy-tone-detect 2617 vi-card cptone-custom 2618 vi-card reboot 2619 virtualbaudrate 200 virtual-cable-test 184 virtual-system 1087 vlan 636 vlan-mapping modulo 628 vlink-peer (OSPF area view) 1159 vlink-peer(OSPFv3 area view) 1307 vofr 2717 vofr frf11-timer 2719 voice bandwidth 2717 voice vlan 646 vo
x25 switch svc xot 462 x25 switching 463 x25 template 409 x25 timer hold 464 x25 timer idle 464 x25 timer tx0 465 x25 timer tx1 466 x25 timer tx2 466 x25 timer tx3 467 x25 vc-per-map 468 x25 vc-range 468 x25 window-size 469 x25 x121-address 470 x25 xot pvc 470 x25-template 409 x29 timer inviteclear-time 472
PUBLIC ATM AND DSL INTERFACE COMMANDS 1 display interface atm Syntax View display interface atm [ interface-number ] Any view Parameter interface-number: Interface number. If no interface is specified, the configuration and status information about all ATM/DSL interfaces and channels on them is displayed. Description Use the display interface atm command to display the configuration and status information about an ATM interface or a DSL interface.
CHAPTER 1: PUBLIC ATM AND DSL INTERFACE COMMANDS interface atm Syntax View Parameter Description Example interface atm interface-number System view interface-number: ATM or DSL interface number or DSL interface view. Use the interface atm command to enter ATM interface view. # Enter ATM 2/0 interface view.
IMA-E1/T1 INTERFACE CONFIGURATION COMMANDS 2 cable Syntax cable { long | short } undo cable View Parameter ATM E1/T1 interface view long: Long haul mode, with a cable length in the range 151 to 500 m (495 to 1640 ft.). short: Short haul mode, with a cable length in the range 0 to 150 m (0 to 495 ft.). Description Use the cable command to set the cable length of the ATM E1 interface. Use the undo cable command to restore the default.
CHAPTER 2: IMA-E1/T1 INTERFACE CONFIGURATION COMMANDS slave: Sets the clock mode as slave. Description Use the clock command to set the clock mode for an ATM E1/T1 interface. Use the undo clock command to restore the default, that is, the slave clock mode. For ATM E1/T1 interfaces operating as DCEs, set the clock mode to master. For interfaces operating as DTEa, set the clock mode to slave.
By default, the line coding format of an ATM E1 interface is HDB3, and that of an ATM T1 interface is B8ZS. Example # Set the line coding format to AMI for ATM 5/0 interface. system-view [Sysname] interface atm 5/0 [Sysname-Atm5/0] code ami differential-delay Syntax differential-delay milliseconds undo differential-delay View Parameter Description IMA group interface view milliseconds: Maximum differential delay, in the range 25 to 100 milliseconds.
CHAPTER 2: IMA-E1/T1 INTERFACE CONFIGURATION COMMANDS Example # Display the status and configuration information about IMA group interface 3.
Use the undo frame-format command to restore the default, that is, CRC4 ADM for ATM E1 interfaces and ESF ADM for ATM T1 interfaces. ATM Direct Mapping (ADM) directly maps ATM cells transmitted over the E1/T1 line into E1/T1 frames. This process is defined by ITU-T G.804 and ATM forum. Example # Configure no-CRC4 ADM framing on ATM E1 interface 5/0.
CHAPTER 2: IMA-E1/T1 INTERFACE CONFIGURATION COMMANDS Use the undo ima ima-group command to remove an interface from an IMA group. By default, no IMA group is created. Before adding an ATM E1/T1 interface to an IMA group, you need to remove the network layer service-related configurations of the interface. for example, the IP address assigned to the interface by using the undo ip address command. n Example The first link in the IMA group is the primary link.
ima-standard Syntax ima-standard { alternate-v10 | normal | standard-v10 | standard-v11 } undo ima-standard View Parameter IMA group interface view alternate-v10: Uses V1.0 (other implementation) standard. normal: Uses V1.1 standard. An IMA group interface adopting this standard changes to adopt V1.0 (standard implementation) standard if its peer interface adopts V1.0 (standard implementation). standard-v10: Uses V1.0 (standard implementation) standard. standard-v11: Uses V1.1 standard.
CHAPTER 2: IMA-E1/T1 INTERFACE CONFIGURATION COMMANDS By default, IMA group interface test is disabled. Note that: n Example ■ If you do not specify the number argument, the ima-test command specifies to test the link that is the first to be added to the IMA group interface. ■ If you do not specify the id argument when executing the ima-test command, the default test mode (that is, 0xAA) is adopted.
Parameter cell: Internal cell loopback for checking that the local physical chip is operating. local: Internal loopback for checking that the local service chip is operating. payload: External payload loopback for checking that payload framing is normal. remote: External loopback for checking that the remote end is normal. Description Use the loopback command to configure the loopback mode on the ATM E1/T1 interface. Use the undo loopback command to disable loopback.
CHAPTER 2: IMA-E1/T1 INTERFACE CONFIGURATION COMMANDS Parameter Description None Use the scramble command to enable payload scrambling on the ATM E1/T1 interface. This, however, does not affect cell headers. Use the undo scramble command to disable payload scrambling. By default, payload scrambling is enabled on an ATM E1/T1 interface. Example # Enable payload scrambling on ATM interface 5/0.
ATM E3/T3 INTERFACE CONFIGURATION COMMANDS 3 cable Syntax cable { long | short } undo cable View Parameter ATM T3 interface view long: Long haul mode, with a cable length in the range 151 to 500 m (495 to 1640 ft.). short: Short haul mode, with a cable length in the range 0 to 150 m (0 to 495 ft.). Description Use the cable command to configure the cable length of the ATM T3 interface. Use the undo cable command to restore the default. By default, short haul mode applies.
CHAPTER 3: ATM E3/T3 INTERFACE CONFIGURATION COMMANDS Use the undo clock command to restore the default, that is, the slave clock mode. Example # Set the clock mode of ATM E3/T3 interface 5/0 to master.
loopback Syntax loopback { cell | local | payload | remote } undo loopback View Parameter ATM E3/T3 interface view cell: Internal cell loopback, used to check whether the local end physical chipset is working properly local: Internal loopback, used to check whether the local service chip is working properly. payload: External payload loopback, used to check whether payload framing is normal. remote: External line loopback, used to check whether the remote end is working properly.
CHAPTER 3: ATM E3/T3 INTERFACE CONFIGURATION COMMANDS Example # Disable payload scrambling on ATM E3/T3 interface 5/0.
ATM OC-3C/STM-1 INTERFACE CONFIGURATION COMMANDS 4 clock Syntax clock { master | slave } undo clock View Parameter ATM OC-3c interface view, STM-1 interface view master: Sets the clock mode as master. slave: Sets the clock mode as slave. Description Use the clock command to set the clock mode for an ATM OC-3c/STM-1 interface. Use the undo clock command to restore the default, that is, the slave clock mode. When the ATM interface is operating as DCE, set its clock mode to master.
CHAPTER 4: ATM OC-3C/STM-1 INTERFACE CONFIGURATION COMMANDS sonet: Sets the framing format to SONET OC-3, the optical carrier level three (OC-3 of synchronous optical network (SONET). Description Use the frame-format command to set the framing format for an ATM OC-3c/STM-1 interface. Use the undo frame-format command to restore the default, that is, SDH STM-1. Example # Set the framing format to SDH STM-1 on an ATM OC-3c/STM-1 interface.
View Parameter Description ATM OC-3c interface view, STM-1 interface view None Use the scramble command to enable payload scrambling on the ATM OC-3c/STM-1 interface. This, however, does not affect cell headers. Use the undo scramble command to disable payload scrambling. By default, payload scrambling is enabled on the ATM OC-3c/STM-1 interface. Example # Enable payload scrambling on ATM interface 5/0.
CHAPTER 4: ATM OC-3C/STM-1 INTERFACE CONFIGURATION COMMANDS
G.SHDSL INTERFACE CONFIGURATION COMMANDS 5 activate Syntax activate undo activate View Parameter Description ATM (G.SHDSL) interface view None Use the activate command to activate the G.SHDSL interface. Use the undo activate command to deactivate the G.SHDSL interface. By default, a G.SHDSL interface is active. A G.SHDSL interface must be activated before it can transmit services. Activation refers to training between the G.SHDSL office end and the STU-C end.
CHAPTER 5: G.SHDSL INTERFACE CONFIGURATION COMMANDS display dsl configuration Syntax View display dsl configuration interface atm interface-number Any view Parameter interface-number: Specifies a iG.SHDSL interface to view the configuration information about. Description Use the display dsl configuration command to display actual GSHDSL configurations. Example # Display the actual configurations of G.SHDSL interface ATM 3/0.
Table 1 Description on the fields of the display dsl configuration command Field Description Target Margin Target margin Line Rate Line rate PSD Mode Power spectral density mode: symmetric or asymmetric Power-Backoff Power compensation LinkCheck State of link check: enable or disable Actual Handshake Status -- Local Handshake Status -- Remote Handshake Status -- display dsl status Syntax View display dsl status interface atm interface-number Any view Parameter interface-number: Spe
CHAPTER 5: G.SHDSL INTERFACE CONFIGURATION COMMANDS Rmt Rmt Rmt Rmt Rmt Rmt Encoder B : 0x00000331 NSF Cusdata : 0x0000 NSF CusID : 0x0000 Country Code : 0x00b5 Provider Code: GSPN Vendor Data: 0x12 0x34 0x56 0x78 0x12 0x34 0x56 0x78 # Display status information about ATM 5/0, which is a four-wire G.SHDSL interface that is up.
TxPower(dBm): 9.
CHAPTER 5: G.SHDSL INTERFACE CONFIGURATION COMMANDS Table 2 Description on the fields of the display dsl status command Field Description Rmt Provider Code Remote code of the chip provider Rmt Vendor Data Remote code of the chip vendor display dsl version Syntax View Parameter Description Example display dsl version interface atm interface-number Any view interface-number: Specifies a G.SHDSL interface to view the version and support capability information about it.
shdsl annex Syntax shdsl annex { a | b } undo shdsl annex View Parameter ATM (G.SHDSL) interface view a: Annex A. b: Annex B. Description Use the shdsl annex command to configure the annex standard supported on the G.SHDSL interface. You cannot activate a link with different standard types at its two ends. Use the undo shdsl annex command to restore the default, that is, Annex B. Annex A is dominant in North America while Annex B is dominant in Europe.
CHAPTER 5: G.SHDSL INTERFACE CONFIGURATION COMMANDS Example # Set the operating mode of interface ATM 5/0 to CO. system-view [Sysname] interface atm 5/0 [Sysname-Atm5/0] shdsl mode co shdsl psd Syntax shdsl psd { asymmetry | symmetry } undo shdsl psd View Parameter ATM (G.SHDSL) interface view asymmetry: Specifies the asymmetric mode, where different power spectral densities (PSD) are set for the central office (CO) and the customer premises equipment (CPE).
n Description ■ For four-wire (dual-pair) G.SHDSL, the interface rate is two times single-pair rate. For example, if you set single-pair rate to 2,312 kbps, four-wire interface rate is 4,624 kbps. ■ Because four-wire G.SHDSL interfaces cannot negotiate rate, do not set their single-pair interface rate to auto mode. Use the shdsl rate command to set the single-pair interface rate of the SHDSL interface. Use the undo shdsl rate command to restore the default, that is, auto.
CHAPTER 5: G.SHDSL INTERFACE CONFIGURATION COMMANDS Setting margin can affect maximum rate of the line. When line condition is good, you can set a small margin to obtain higher rate. When much noise is around the line, this may cause disconnection however. By default, current-margin-value is set to 2 and snext-margin-value is set to 0. Example # Set the SNR target margin to 5 on interface ATM 5/0.
system-view [Sysname] interface atm 5/0 [Sysname-Atm5/0] shdsl wire 4-auto-enhanced
CHAPTER 5: G.
ADSL INTERFACE CONFIGURATION COMMANDS 6 activate Syntax activate undo activate View Parameter Description ATM (ADSL) interface view None Use the activate command to activate an ADSL interface. Use the undo activate command to deactivate an ADSL interface. By default, an ADSL interface is active. An ADSL interface must be activated before it can transmit services. Activation refers to training between ADSL office end and ATU-R end.
CHAPTER 6: ADSL INTERFACE CONFIGURATION COMMANDS adsl standard Syntax adsl standard { auto | g9923 | g9925 | gdmt | glite | t1413 } undo adsl standard View Parameter ATM (ADSL) interface view auto: Auto-negotiation mode. g9923: ADSL2 (G992.3) standard. g9925: ADSL2+ (G992.5) standard. gdmt: G.DMT (G992.1) standard. glite: G.Lite (G992.2) standard. t1413: T1.413 standard. Description Use the adsl standard command to set the standard applied to an ADSL interface.
Parameter Description attenuation: Transmit power attenuation, in the range 0 to 12. Use the adsl tx-attenuation command to set a transmit power attenuation for the ADSL interface. Use the undo adsl tx-attenuation command to restore the default, that is, 0. Example # Set the transmit power attenuation to 10 for ATM ADSL interface 2/0.
CHAPTER 6: ADSL INTERFACE CONFIGURATION COMMANDS Use the all keyword with caution. In case failure occurs, recovery is difficult and troublesome. Note that: Example ■ Only distributed devices support the slot slot-no-list option. ■ The subslot subslot-no-list option is not available if the device does not support the sub-card-level maintenance. # Upgrade software for an ADSL2+ card.
AS0 (DS) 238 7616 Intlv 0 1/64/16 Rate(Bytes): Rate(kbps): Latency: FEC(fast): S/D/R(Inlv): DMT 00: 20: 40: 60: 80: a0: c0: e0: Bits Allocation 0 0 0 0 0 0 7 8 0 0 0 0 2 2 2 3 0 a a a a b b b b b b b b b b b b b b b b b b b b b b a b a b a a a a a a a a a a 9 9 a 9 9 9 9 Per a a 4 4 b b b b b b b b a a 9 9 Bin a a 5 6 a b b b b b a b a a 8 9 LS0(US) 26 832 Intlv 0 8/8/16 (Up/Down Bits:249/2148) 8 a b c c c b b b b b b 6 7 7 8 8 8 8 8 9 9 a a b b b b b b b b b b b b b b b b b b b a 9 4 a b b b b b
CHAPTER 6: ADSL INTERFACE CONFIGURATION COMMANDS Current Rate(kbps): Latency: 0 Intl 0 Intl Table 5 Description on the fields of the display dsl status command Field Description Line Status Line status of the ADSL interface, which can be: Training Status ■ No Defect, indicating the normal state ■ Loss Of Frame, indicating an error concerning frame ■ Loss Of Signal, indicating an error concerning signal ■ Loss Of Power, indicating an error concerning power supply ■ Loss Of Signal Quali
Dsl Line Type: Chipset Vendor: FW Release: DSP Version: AFE Version: Bootrom Version: Hardware Version: Driver Version: CPLD Version: Adsl Over Pots BDCM A2pB017l.d15h 17.1200 1.0 1.1 4.0 1.3 1.0 Adsl Capability ANNEX Supported : ANNEX A Standard Supported : ANSI T1.413 Issue 2 ITU G992.1(G.dmt) ITU G992.2(G.lite) ITU G992.3(Adsl2) ITU G992.3(ReAdsl2) ITU G992.
CHAPTER 6: ADSL INTERFACE CONFIGURATION COMMANDS
POS INTERFACE CONFIGURATION COMMANDS 7 clock Syntax clock { master | slave } undo clock View Parameter POS interface view master: Sets the clock mode of the POS interface to master. slave: Sets the clock mode of the POS interface to slave. Description Use the clock command to set the clock mode of the POS interface. Use the undo clock command to restore the default, that is, slave. POS interfaces support two clock modes: ■ Master, which uses internal clock signal.
CHAPTER 7: POS INTERFACE CONFIGURATION COMMANDS Parameter 16: Sets CRC length to 16 bits. 32: Sets CRC length to 32 bits. Description Use the crc command to set the CRC length on the POS interface. Use the undo crc command to restore the default, that is, 32 bits. Example # Set the CRC length on interface POS 1/0 to 16 bits.
Table 7 Description on the fields of the display interface pos command Field Description Internet protocol processing IP protocol processing capability, enabled or disabled Link layer protocol is PPP Link layer protocol of the POS interface and loopback detection state LCP opened, IPCP opened, IP6CP opened LCP state, IPCP state, and IPv6CP state Physical layer is Pos1/0, Baudrate is 155520000 bps Physical interface and baudrate Scramble enabled, crc 32, clock slave, loopback not set Payload
CHAPTER 7: POS INTERFACE CONFIGURATION COMMANDS display ip interface pos Syntax View Parameter display ip interface pos interface-number Any view interface-number: Interface number. Description Use the display ip interface pos command to view the IP-related configuration and status information of the specified POS interface. Example # Display IP-related status and configuration information about the interface POS 1/0.
Description Example Use the display ipv6 interface pos command to view the IPv6-related configuration and status information of the specified POS interface. # Display IPv6-related status and configuration information about the interface POS1/0.
CHAPTER 7: POS INTERFACE CONFIGURATION COMMANDS Description Use the flag command to set the SONET/SDH overhead bytes. Use the undo flag { j0 | j1 } sdh command to restore the default SONET/SDH overhead bytes. By default, the default SDH overhead bytes are used. The default overhead bytes are as1 follows.
link-protocol Syntax View Parameter link-protocol { fr [ nonstandard | ietf | mfr interface-number | nonstandard ] | hdlc | ppp } POS interface view fr: Specifies Frame Relay as the link layer protocol of the interface. ietf: Adopts the IETF encapsulation format. This is the default. mfr interface-number: MFR interface or subinterface number. The specified interface must be one that already exists. nonstandard: Adopts non-standard compatible encapsulation format.
CHAPTER 7: POS INTERFACE CONFIGURATION COMMANDS n Example ■ If you enable loopback on a POS interface encapsulated with PPP, it is normal that the state of the link layer protocol is reported up. ■ Loopback and clock slave cannot be set at the same time; otherwise, POS interfaces cannot be connected successfully. # Enable internal loopback on interface POS 1/0.
View Parameter Description POS interface view None Use the scramble command to enable payload scrambling on the POS interface. Use the undo scramble command to disable payload scrambling. By default, payload scrambling is enabled. You may configure payload scrambling to prevent the presence of excessive consecutive 1s or 0s to facilitate line clock signal extraction at the receiving end.
CHAPTER 7: POS INTERFACE CONFIGURATION COMMANDS Example # Set the SD threshold to 10e-4 for POS 1/0.
GENERAL ETHERNET INTERFACE CONFIGURATION COMMANDS 8 combo enable Syntax View Parameter combo enable { copper | fiber } Ethernet interface view (the port should be a Combo Port) copper: Indicates that the electrical port is enabled and uses double-twisted pair cable. fiber: Indicates that the optical port is enabled and uses optical fiber cable. Description Use the combo enable command to specify the state of a single Combo port. When one port is enabled, the other will be automatically disabled.
CHAPTER 8: GENERAL ETHERNET INTERFACE CONFIGURATION COMMANDS Parameter text: The description of an Ethernet interface, a string of 1 to 80 characters. Description Use the description command to configure the description of an Ethernet interface. Use the undo description command to remove the description. Default to interface name followed by the “interface” string. Example # Configure the description for interface Ethernet 1/0 to “lan-interface”.
Table 8 Special characters used in regular expressions Description Related command: Example Character Meaning Notes on Use * Star, which matches the occurrences of the character to the left for zero or multiple times zo* matches z and zoo. + Plus, which matches one or multiple occurrences of the character to the left zo+ matches zo and zoo, but not z. - Hyphen, which is used to connect two numbers or characters.
CHAPTER 8: GENERAL ETHERNET INTERFACE CONFIGURATION COMMANDS Eth4/6 Eth4/7 DOWN DOWN auto auto auto auto access access 1 1 # Display brief interface information that contains the string “UP”.
Related command: Example ■ If only interface type is specified, then only information of this particular type of interface will be displayed. ■ If both interface type and interface number are specified, then only information of the specified interface will be displayed. interface. # Display the current state of Layer 3 interface Ethernet 1/0 and related information.
CHAPTER 8: GENERAL ETHERNET INTERFACE CONFIGURATION COMMANDS Table 11 Description on the fields of the display interface (in route mode) command.
Table 12 Description on the fields of the display interface command (in bridge mode) Field Description Unknown-speed mode Unknown-speed mode, in which mode speed is negotiated between the current host and the peer unknown-duplex mode unknown-duplex mode, in which mode speed is negotiated between the current host and the peer Link speed type is autonegotiation Link speed type is autonegotiation link duplex type is autonegotiation Link duplex type is autonegotiation Flow-control is not enabled
CHAPTER 8: GENERAL ETHERNET INTERFACE CONFIGURATION COMMANDS Table 12 Description on the fields of the display interface command (in bridge mode) Field Description Input (total): Error statistics on the interface inbound and outbound packets, underscore indicates that the corresponding entry is invalid Input (normal): Input: Output (total): Output (normal): Output: duplex Syntax duplex { auto | full | half } undo duplex View Parameter Ethernet interface view auto: Indicates that the interface
Parameter Description None Use the flow-control command to turn on flow control on an Ethernet interface. Use the undo flow-control command to turn off flow control on an Ethernet interface. By default, flow control on an Ethernet interface is turned off. n Example The flow control can be implemented on the local Ethernet interface only when the flow control function is enabled on both the local and peer devices. # Turn on flow control on interface Ethernet1/0.
CHAPTER 8: GENERAL ETHERNET INTERFACE CONFIGURATION COMMANDS Parameter external: Enables external loopback testing on an Ethernet interface. The support for this keyword varies with device models. internal: Enables internal loopback testing on an Ethernet interface. The support for this keyword varies with device models. Description Use the loopback command to enable Ethernet interface loopback testing. Use the undo loopback command to disable Ethernet interface loopback testing.
Example ■ Only 4SIC-FSW interface cards, 9DSIC-FSW interface cards, and the fixed switching interfaces of 20-21 routers support work mode switching. ■ On an MSR series router, you can change the working mode to route mode for up to two Ethernet interfaces. ■ After the working mode is changed, all parameters of the Ethernet interface will be restored to the defaults in the current working mode. # Configure Ethernet1/0 to work in bridge mode.
CHAPTER 8: GENERAL ETHERNET INTERFACE CONFIGURATION COMMANDS Example # Clear the statistics of Ethernet 1/0. reset counters interface ethernet 1/0 shutdown Syntax shutdown undo shutdown View Parameter Description Ethernet interface view None Use the shutdown command to shut down an Ethernet interface. Use the undo shutdown command to turn on Ethernet interface.
Use the undo speed command to restore Ethernet interface data rate. By default, Ethernet interface data rate is automatically negotiated between peer Ethernet interfaces. Note that the following: Related command: Example ■ The Combo port does not support the speed command. ■ The speed 1000 command is only applicable to Gigabit Ethernet interface. duplex. # Configure data rate for the interface Ethernet 1/0 to 100 Mbps.
CHAPTER 8: GENERAL ETHERNET INTERFACE CONFIGURATION COMMANDS
CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN BRIDGE MODE 9 broadcast-suppression Syntax broadcast-suppression { ratio | pps max-pps } undo broadcast-suppression View Parameter Ethernet interface view, port group view ratio: Maximal ratio of broadcast traffic to the total transmission capability of an Ethernet interface. Currently, this argument can only be set to 100.
CHAPTER 9: CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN BRIDGE MODE display loopback-detection Syntax View Parameter Description display loopback-detection Any view None Use the display loopback-detection command to display loopback detection information on a port If loopback detection is already enabled, this command will also display the detection interval and information on the ports currently detected with a loopback. Example # Display loopback detection information on a port.
Untagged:1, 10, 15, 18, 20-30, 44, 55, 67, 100, 150-160, 200, 255, 286, 300-302 # Display the current Trunk port(s). display port trunk Interface PVID VLAN passing Eth1/8 2 1-4, 6-100, 145, 177, 189-200, 244, 289, 400, 555, 600-611, 1000, 2006-2008 Table 14 Description on the fields of the display port command.
CHAPTER 9: CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN BRIDGE MODE Member of group2: None # Display the details of the manual port group named group 1.
Description Use the group-member command to add specified Ethernet interfaces to a manual port group. Use the undo group-member command to remove specified Ethernet interfaces from a manual port group. By default, a manual port group contains no Ethernet interface. Examples # Add interface Ethernet 1/0 to the manual port group named group 1.
CHAPTER 9: CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN BRIDGE MODE loopback-detection enable Syntax loopback-detection enable undo loopback-detection enable View Parameter Description System view/Ethernet interface view None Use the loopback-detection enable command to enable loopback detection globally or on a specified port. Use the undo loopback-detection enable command to disable loopback detection globally or on a specified port.
Parameter Description time: Time interval in seconds for port loopback detection, in the range of 5 to 300. Use the loopback-detection interval-time command to configure time interval for port loopback detection. Use the undo loopback-detection interval-time command to restore the default time interval for port loopback detection, which is 30 seconds. Related command: Example display loopback-detection. # Set the time interval for port loopback detection to 10 seconds.
CHAPTER 9: CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN BRIDGE MODE mdi Syntax mdi { across | auto | normal } undo mdi View Parameter Ethernet interface view across: Specifies cross-over cables for the Ethernet interface. auto: Configures the Ethernet interface to be auto-sensing for the cable type. normal: Specifies straight-through cables for the Ethernet interface. Description Use the mdi command to configure the cable type that can be sensed by an Ethernet interface.
Use the undo multicast-suppression command to restore default multicast suppression ratio. By default, all multicast traffic is allowed to go through an Ethernet interface, that is, multicast traffic is not suppressed. If you execute this command in Ethernet interface view, the configuration takes effect only on the current interface. If you execute this command in port group view, the configuration takes effect on all ports in the port group.
CHAPTER 9: CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN BRIDGE MODE unicast-suppression Syntax unicast-suppression { ratio | pps max-pps } undo unicast-suppression View Parameter Ethernet interface view, port group view ratio: Maximal ratio of unicast traffic to the total transmission capability of an Ethernet interface, in the range of 1 to 100. The smaller the ratio is, the less unicast traffic is allowed through the interface.
Parameter Description None Use the virtual-cable-test command to enable the virtual cable test for an Ethernet interface and to display the testing result. The tested items include: ■ Cable status: Could be normal, abnormal, abnormal-open, abnormal-short, and failure; ■ Cable length; ■ Pair Impedance mismatch; ■ Pair skew; ■ Pair swap; ■ Pair polarity; ■ Insertion loss; ■ Return loss; ■ Near-end crosstalk. By default, virtual cable test is disabled.
CHAPTER 9: CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN BRIDGE MODE
CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN ROUTE MODE 10 mtu Syntax mtu size undo mtu View Parameter Description Ethernet interface view size: The value of Maximum Transmission Unit (MTU for short), which varies by interface type and defaults to 1,500 bytes. ■ Fast Ethernet: (FE for short): in the range of 46 bytes to 1,560 bytes ■ GigabitEthernet (GE for short) or 10 GE: in the range of 46 bytes to 16,384 bytes, with a default value of 1,500 bytes.
CHAPTER 10: CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN ROUTE MODE Parameter Description seconds: Time interval in seconds for link suppression, in the range of 0 to 32,767. A value 0 represents the link test is disabled. Use the timer hold command to configure Layer 3 Ethernet interface link-layer-state change suppression time. Use the undo timer hold command to restore the default suppression time. By default, Layer 3 Ethernet link-layer-state change suppression time is set to 10 seconds.
FUNDAMENTAL SERIAL INTERFACE CONFIGURATION COMMANDS 11 async mode Syntax async mode { flow | protocol } undo async mode View Parameter Asynchronous serial interface view, AUX interface view, AM interface view flow: Flow mode, also known as interactive mode. In this mode, the two ends interact attempting to set up a link after the physical link is set up.
CHAPTER 11: FUNDAMENTAL SERIAL INTERFACE CONFIGURATION COMMANDS undo baudrate View Parameter Description Serial interface view baudrate: Baud rate (in bps) to be set for a serial interface. Use the baudrate command to set the baud rate for a serial interface. Use the undo baudrate command to restore the default. By default, the baud rate is 64,000 bps on a synchronous serial interface.
dteclk3: Sets the interface clock selection mode to DTE clock option 3. dteclk4: Sets the interface clock selection mode to DTE clock option 4. dteclkauto: Sets the interface clock selection mode to DTE autonegotiation. Description Use the clock command to set clock selection mode for the synchronous serial interface. Use the undo clock command to restore the default. By default, the DTE-side clock on synchronous serial interfaces is DTE clock option 1 (dteclk1).
CHAPTER 11: FUNDAMENTAL SERIAL INTERFACE CONFIGURATION COMMANDS code nrzi Syntax code nrzi undo code View Parameter Description Synchronous serial interface view None Use the code nrzi command to set the digital signal coding format to none-return-to-zero-inverse (NRZI) on the synchronous serial interface. Use the undo code command to restore the default, that is, NRZ. Example # Set the digital signal coding format to NRZI on synchronous serial interface 1/0.
system-view [Sysname] interface serial 1/0 [Sysname-Serial1/0] country-code china crc Syntax crc { 16 | 32 | none } undo crc View Parameter Synchronous serial interface view 16: Specifies 16-bit CRC. 32: Specifies 32-bit CRC. none: Disables CRC. Description Use the crc command to set the CRC mode. Use the undo crc command to restore the default. By default, 16-bit CRC is adopted.
CHAPTER 11: FUNDAMENTAL SERIAL INTERFACE CONFIGURATION COMMANDS Parameter dsr-dtr: Detects DSR (data set ready) and DTR (data terminal ready) signals of DSU/CSU (data service unit/channel service unit). dcd: Detects the DCD (data carrier detect) signal of the DSU/CSU on the serial interface. Description Use the detect command to enable data carrier detection as well as level detection on the serial interface.
Use the undo eliminate-pulse command to restore the default, eliminating the pulses with a width less than 1.472 us. n When the baud rate of the interface is 115,200 bps, you cannot configure this command. After you configure this command, the baud rate of the interface cannot be set to 115,200 bps. This command is restricted to the 8ASE and 16ASE interface cards and modules. Example # Eliminate the pulses with a width less than 3.472 us on interface Async 1/0.
CHAPTER 11: FUNDAMENTAL SERIAL INTERFACE CONFIGURATION COMMANDS Description Use the invert receive-clock command to invert the receive-clock signal on the DTE-side synchronous serial interface. Use the undo invert transmit-clock command to restore the default. By default, receive-clock signal inversion is disabled on DTE-side synchronous serial interfaces. Sometimes, you may need to invert the receive-clock signal on a DTE-side serial interface to eliminate the half clock-period delay on the line.
loopback Syntax loopback undo loopback View Parameter Description Serial interface view, AUX interface view, AM interface view None Use the loopback command to enable internal loopback on the serial interface. Use the undo loopback command to restore the default. By default, loopback is disabled. Loopback is intended for test use. Disable it otherwise. Example # Enable internal loopback on interface Serial 2/0.
CHAPTER 11: FUNDAMENTAL SERIAL INTERFACE CONFIGURATION COMMANDS Example # Set the MTU of interface Serial 2/0 to 1,200 bytes. system-view [Sysname] interface serial 2/0 [Sysname-Serial1/0] mtu 1200 physical-mode Syntax View Parameter physical-mode { async | sync } Serial interface view async: Sets the synchronous/asynchronous serial interface to operate in asynchronous mode. sync: Sets the synchronous/asynchronous serial interface to operate in synchronous mode.
Example # Set the MRU of interface serial 2/0 to 1,500 bytes (assuming that the interface is an asynchronous serial interface and operates in flow mode). system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] physical-mode async [Sysname-Serial2/0] async mode flow [Sysname-Serial2/0] phy-mru 1500 reverse-rts Syntax reverse-rts undo reverse-rts View Parameter Description Synchronous serial interface view None Use the reverse-rts command to reverse RTS signal for debugging purpose.
CHAPTER 11: FUNDAMENTAL SERIAL INTERFACE CONFIGURATION COMMANDS Example # Set the link state polling interval to 20 seconds for interface serial 1/0. system-view [Sysname] interface serial 1/0 [Sysname-Serial1/0] timer hold 20 virtualbaudrate Syntax virtualbaudrate virtualbaudrate undo virtualbaudrate View Parameter Description Synchronous serial interface view virtualbaudrate: Baud rate (in bps) to be set, which must be consistent with the one configured at the DCE side.
FUNDAMENTAL CE1/PRI INTERFACE CONFIGURATION COMMANDS 12 cable Syntax cable { long | short } undo cable View Parameter CE1/PRI interface view long: Indicates that the attenuation of receiver is -43 dB. short: Indicates that the attenuation of receiver is -10 dB. Description Use the cable command to set the cable type for a CE1/PRI interface. Use the undo cable command to restore the default. By default, the long keyword applies.
CHAPTER 12: FUNDAMENTAL CE1/PRI INTERFACE CONFIGURATION COMMANDS Description Use the channel-set command to bundle timeslots on the CE1/PRI interface into a channel-set. Use the undo channel-set command to restore the default. By default, no timeslots are bundled into channel sets. A CE1/PRI interface in CE1/PRI mode is physically divided into 32 timeslots numbered 0 through 31. In actual applications, all the timeslots except timeslot 0 can be bundled into multiple channel sets.
When the CE1/PRI interface is working as DCE, choose the internal clock (master) for it. When it is working as DTE, choose the line clock for it. Example # Use the internal clock as the clock source on CE1/PRI interface E1 2/0. system-view [Sysname] controller e1 2/0 [Sysname-E1 2/0] clock master code (CEI/PRI interface view) Syntax code { ami | hdb3 } undo code View Parameter CE1/PRI interface view ami: Adopts alternate mark inversion (AMI) line code format.
CHAPTER 12: FUNDAMENTAL CE1/PRI INTERFACE CONFIGURATION COMMANDS crc Syntax crc { 16 | 32 | none } undo crc View Parameter Synchronous serial interface view 16: Adopts 16-bit cyclic redundancy check (CRC). 32: Adopts 32-bit CRC. none: Disables CRC. Description Use the crc command to configure CRC mode for a synchronous serial interface formed on a CE1/PRI interface. Use the undo crc command to restore the default, that is, 16-bit CRC.
system-view [Sysname] controller e1 2/0 [Sysname-E1 2/0] detect-ais display controller e1 Syntax View Parameter Description display controller e1 [ interface-number ] Any view interface-number: Interface number. In conjunction with the e1 keyword, it specifies a CE1/PRI interface. Use the display controller e1 command to display information about one or all the CE1/PRI interfaces.
CHAPTER 12: FUNDAMENTAL CE1/PRI INTERFACE CONFIGURATION COMMANDS Table 17 Description on the fields of the command Field Description Line Code Line code, which can be AMI or HDB3. Idle Code Idle code, which can be 0x7E or 0xFF. Itf type Iterframe filling tag, which can be 0x7E or 0xFF. Itf number Number of interframe filling tags between two successive frames.
n Example ■ The support for these two commands varies with device models. ■ These two commands apply to CT1/PRI interfaces and CE1/PRI interfaces only. # Set the error packet detect timer to 100 seconds, the renew timer to 2400 seconds, and the error packet ratio threshold to 15.
CHAPTER 12: FUNDAMENTAL CE1/PRI INTERFACE CONFIGURATION COMMANDS n Example ■ The support of this command varies with device model. ■ This command applies to CT1/PRI interfaces and CE1/PRI interfaces only. # restart channel serial 2/0:0 that has been shut down due to error packets diffusion.
Use the undo idlecode command to restore the default, that is, 0x7E. The line idle code is sent in the timeslots that are not bundled into logical channels. Example # Set the line idle code to 0x7E on CE1/PRI interface E1 2/0.
CHAPTER 12: FUNDAMENTAL CE1/PRI INTERFACE CONFIGURATION COMMANDS loopback (CE1/PRI interface view) Syntax loopback { local | payload | remote } undo loopback View Parameter CE1/PRI interface view local: Sets the interface in local loopback mode. remote: Sets the interface in external loopback mode. payload: Sets the interface in external payload loopback mode. Description Use the loopback command to enable loopback and set the loopback mode. Use the undo loopback command to restore the default.
Use the undo pri-set command to remove the bundle. By default, no PRI set is created. On a CE1/PRI interface in PRI mode, timeslot 0 is used for frame synchronization control (FSC), timeslot 16 as the D channel for signaling transmission, and other timeslots as B channels for data transmission. You can create only one PRI set on a CE1/PRI interface. This PRI set can include any timeslots except timeslot 0 and must include timeslot 16.
CHAPTER 12: FUNDAMENTAL CE1/PRI INTERFACE CONFIGURATION COMMANDS Example # Clear the controller counter for CE1/PRI interface E1 2/0. reset counters controller e1 2/0 using (CE1/PRI interface view) Syntax using { ce1 | e1 } undo using View Parameter CE1/PRI interface view ce1: Sets the interface to operate in CE1/PRI mode. e1: Sets the interface to operate in E1 mode. Description Use the using command to configure the operating mode of the CE1/PRI interface.
FUNDAMENTAL CT1/PRI INTERFACE CONFIGURATION COMMANDS 13 alarm-threshold Syntax alarm-threshold { ais { level-1 | level-2 } | lfa { level-1 | level-2 | level-3 | level-4 } | los { pulse-detection | pulse-recovery } value } undo alarm-threshold View Parameter CT1/PRI interface view ais: Sets the alarm threshold of alarm indication signal (AIS), which can be level-1 and level-2.
CHAPTER 13: FUNDAMENTAL CT1/PRI INTERFACE CONFIGURATION COMMANDS If the number of the pulses detected during the total length of the specified pulse detection intervals is smaller than the pulse-recovery threshold, a LOS alarm occurs. For example, if the two thresholds take their defaults, a LOS alarm is created if the number of pulses detected within 176 pulse intervals is less than 22. Description Use the alarm-threshold command to set LOS, AIS, or LFA alarm thresholds on the CT1/PRI interface.
You may view the state and result of the BERT test with the display controller t1 command. Example # Run a 10-minute 2^20 BERT test on CT1/PRI interface t1 2/0. system-view [Sysname] controller t1 2/0 [Sysname-T1 2/0] bert pattern 2^20 time 10 cable (CT1/PRI interface view) Syntax cable { long { 0db | -7.5db | -15db | -22.5db } | short { 133ft | 266ft | 399ft | 533ft | 655ft } } undo cable View Parameter CT1/PRI interface view long: Matches 199.6-meter (655-feet) and longer cable length.
CHAPTER 13: FUNDAMENTAL CT1/PRI INTERFACE CONFIGURATION COMMANDS Parameter set-number: The number of the channel set formed by timeslot bundling on the interface. It ranges from 0 to 23. timeslot-list list: Specifies timeslots to be bundled. The list argument is timeslot numbers, in the range of 1 to 24.
Use the undo clock command to restore the default clock source, that is, line clock. When the CT1/PRI interface is working as DCE, choose the internal clock for it. When it is working as DTE, choose the line clock for it. Example # Use the internal clock as the clock source on CT1/PRI interface T1 2/0.
CHAPTER 13: FUNDAMENTAL CT1/PRI INTERFACE CONFIGURATION COMMANDS system-view [Sysname] controller t1 2/0 [Sysname-T1 2/0] crc Syntax crc { 16 | 32 | none } undo crc View Parameter Synchronous serial interface view 16: Adopts 16-bit CRC. 32: Adopts 32-bit CRC. none: Disables CRC. Description Use the crc command to configure CRC mode for a synchronous serial interface formed on a CE1/PRI interface. Use the undo crc command to restore the default, that is, 16-bit CRC.
Use the undo data-coding command to restore the default. By default, data inversion is disabled. To prevent 7e in valid data from being taken for stuffing characters, HDLC inserts a zero after every five ones in the data stream. Then, HDLC inverts every one bit into a zero and every zero bit into a one. This ensures at least one out of every eight bits is a one. When AMI encoding is adopted on a T1 interface, the use of data inversion can eliminate the presence of multiple consecutive zeros.
CHAPTER 13: FUNDAMENTAL CT1/PRI INTERFACE CONFIGURATION COMMANDS Work mode is T1 framed, Cable type is 100 Ohm balanced. Frame-format is esf, fdl is none, Line code is b8zs. Source clock is slave, Data-coding is normal. Idle code is ff, Itf type is ff, Itf number is 2. Loop back is not set. Alarm State: Receiver alarm state is Loss-of-Signal. Transmitter is sending remote alarm. Pulse density violation detected. SendLoopCode History: inband-llb-up:0 times, inband-llb-down:0 times.
Table 18 Description on the fields of the display controller t1 command Field Description Itf number Number of interframe filling tags Loop back Loopback setting on the interface: local, payload, remote, or not set Alarm State Alarm state Receiver alarm state Type of received alarm: none, LOS, LOF, RAI, or AIS Transmitter is sending remote alarm.
CHAPTER 13: FUNDAMENTAL CT1/PRI INTERFACE CONFIGURATION COMMANDS Table 18 Description on the fields of the display controller t1 command Field Description Data in Interval 1: Statistics spanning the first interval. 0 Line Code Violations, 0 Path Code Violations The statistical items are the same as those provided by the statistics spanning the current interval.
Description Use the error-diffusion restraint config command to set the three parameters in error packet diffusion restraint. Use the undo error-diffusion restraint enable command to restore the default settings of the three parameters. By default, the error packet detect timer is set to 30 seconds, the renew timer is set to 600 seconds, and the error packet ratio threshold is 20. The setting of renew timer must be at least four times that of the error packet detect timer.
CHAPTER 13: FUNDAMENTAL CT1/PRI INTERFACE CONFIGURATION COMMANDS error-diffusion restraint restart-channel Syntax View Parameter Description n Example error-diffusion restraint restart-channel serial interface-number:set-number System view serial interface-number:set-number: Specifies a channel formed on a CE1/PRI interface. The interface-number argument is a CE1/PRI interface number, and the set-number argument is a channel set number.
system-view [Sysname] controller t1 2/0 [Sysname-T1 2/0] fdl att frame-format (CT1/PRI interface view) Syntax frame-format { esf | sf } undo frame-format View Parameter CT1/PRI interface view sf: Sets the framing format to super frame (SF). esf: Sets the framing format to extended super frame (ESF). Description Use the frame-format command to set the framing format on the CT1/PRI interface. Use the undo frame-format command to restore the default, that is, esf.
CHAPTER 13: FUNDAMENTAL CT1/PRI INTERFACE CONFIGURATION COMMANDS The line idle code is sent in the timeslots that are not bundled into the logical channels on the interface. Example # Set the line idle code to 0x7E on CT1/PRI interface T1 2/0.
undo loopback View Parameter CT1/PRI interface view local: Enables the CT1/PRI interface to perform local loopback. payload: Enables the interface to perform external payload loopback. remote: Enables the interface to perform remote loopback. Description Use the loopback command to enable local, remote, or external payload loopback on the CT1/PRI interface. Use the undo loopback command to restore the default. By default, loopback is disabled.
CHAPTER 13: FUNDAMENTAL CT1/PRI INTERFACE CONFIGURATION COMMANDS When creating a PRI set on a CT1/PRI interface, note that timeslot 24 is the D channel for transmitting signaling; it cannot form a bundle that includes itself only. The attempts to bundle only timeslot 24 will fail. In the created PRI set, timeslot 24 is used as D channel for signaling transmission, and the other timeslots as B channels for data transmission.
sendloopcode Syntax View Parameter sendloopcode { fdl-ansi-llb-down | fdl-ansi-llb-up | fdl-ansi-plb-down | fdl-ansi-plb-up | fdl-att-plb-down | fdl-att-plb-up | inband-llb-down | inband-llb-up } CT1/PRI interface view fdl-ansi-llb-down: Sends ANSI-compliant LLB deactivation request code in the FDL to remove loopback. fdl-ansi-llb-up: Sends ANSI-compliant line loopback (LLB) activation request code in the FDL to start remote loopback.
CHAPTER 13: FUNDAMENTAL CT1/PRI INTERFACE CONFIGURATION COMMANDS The sending of remote loopback control code lasts five minutes without affecting the operation of other interfaces. Example # Send in-band LLB activation request code.
E1-F INTERFACE CONFIGURATION COMMANDS 14 crc Syntax crc { 16 | 32 | none } undo crc View Parameter Synchronous serial interface view 16: Adopts 16-bit CRC. 32: Adopts 32-bit CRC. none: Disables CRC. Description Use the crc command to configure CRC mode for an E1-F interface. Use the undo crc command to restore the default, that is, 16-bit CRC. Example # Adopt 32-bit CRC on E1-F interface Serial 2/0.
CHAPTER 14: E1-F INTERFACE CONFIGURATION COMMANDS display fe1 serial 2/0 Serial2/0 Basic Configuration: E1 FRAMED Physical type is FE1 - 75 OHM unbalanced Frame-format is NONE,Line Code is HDB3,Source Clock is SLAVE Alarm State: Receiver alarm state is None.
undo fe1 clock View Parameter E1-F interface view master: Adopts the internal clock as the clock source. slave: Adopts the line clock as the clock source. Description Use the fe1 clock command to configure clock source for the E1-F interface. Use the undo fe1 clock command to restore the default, that is, line clock. When the E1-F interface is working as DCE, choose the internal clock (master) for it. When it is working as DTE, choose the line clock for it.
CHAPTER 14: E1-F INTERFACE CONFIGURATION COMMANDS undo fe1 detect-ais View Parameter Description E1-F interface view None Use the fe1 detect-ais command to enable AIS test on an interface. Use the undo fe1 detect-ais command to disable AIS test. By default, AIS test is performed. Example # Enable AIS test on E1-F 2/0 interface.
undo fe1 loopback View Parameter E1-F interface view local: Sets the interface in internal loopback mode. payload: Sets the interface in external payload loopback mode. remote: Sets the interface in external loopback mode. Description Use the fe1 loopback command to set the E1-F interface in a loopback mode. Use the undo fe1 loopback command to restore the default. By default, loopback is disabled. Loopback is intended for checking the condition of interfaces or cables. Disable it otherwise.
CHAPTER 14: E1-F INTERFACE CONFIGURATION COMMANDS Only one channel set can be created on an E1-F interface, and this channel set is associated with the current synchronous serial interface. On a CE1/PRI interface, however, you may create multiple channel sets; for each of them, the system automatically creates a synchronous serial interface. n Timeslot 0 on E1-F interfaces is used for synchronization. Therefore, a bundling operation only involves timeslots 1 through 31.
View Parameter E1-F interface view number number: Sets the number of interframe filling tags (an interframe filling tag is one byte in length). The number argument ranges from 0 to 14. type { 7e | ff }: Sets the type of interframe filling tag to 0x7E by specifying the 7e keyword or to 0xFF by specifying the ff keyword. The default is 0x7E. Description Use the fe1 itf command to set the type of and the number of interframe filling tags on the E1-F interface.
CHAPTER 14: E1-F INTERFACE CONFIGURATION COMMANDS When the E1-F interface is working in unframed mode, it is a 2048 kbps interface without timeslot division and is logically equivalent to a synchronous serial interface. When it works in framed mode, it is physically divided into 32 timeslots numbered 0 through 31, where timeslot 0 is used for synchronization. Related command: Example fe1 timeslot-list. # Set E1-F interface Serial 2/0 to work in unframed mode.
T1-F INTERFACE CONFIGURATION COMMANDS 15 crc Syntax crc { 16 | 32 | none } undo crc View Parameter Synchronous serial interface view 16: Adopts 16-bit CRC. 32: Adopts 32-bit CRC. none: Disables CRC. Description Use the crc command to configure CRC mode for an T1-F interface. Use the undo crc command to restore the default, that is, 16-bit CRC. Example # Adopt 32-bit CRC on T1-F interface Serial 1/0.
CHAPTER 15: T1-F INTERFACE CONFIGURATION COMMANDS display ft1 serial 2/0 Serial2/0 Input: 0 packets, 0 bytes 0 broadcasts, 0 multicasts 0 errors, 0 runts, 0 giants 0 CRC, 0 align errors, 0 overruns 0 dribbles, 0 aborts, 0 no buffers 0 frame errors Output:0 packets, 0 bytes 0 errors, 0 underruns, 0 collisions 0 deferred Basic Configuration: Work mode is T1 framed, Cable type is 100 Ohm balanced. Frame-format is esf, fdl is none, Line code is b8zs. Source clock is slave, Data-coding is normal.
Table 20 Description on the fields of the display ft1 serial command Field Description Cable type Cable type of the interface, 100 ohm balanced in this sample output Frame-format Frame format configured on the interface: ESF or SF fdl FDL format: ANSI, ATT, or none Line code AMI or B8ZS Source Clock Source clock used by the interface: master for the internal clock or slave for the line clock Data-coding Normal or inverted Idle code 7e or ff Itf type Type of interframe filling tag: 7e o
CHAPTER 15: T1-F INTERFACE CONFIGURATION COMMANDS Table 20 Description on the fields of the display ft1 serial command Field Description Data in current interval (285 seconds elapsed): Statistics spanning the current interval. The statistical items, such as AIS alarm, LOS signal, and LFA, are provided according to the T1 specifications for the physical layer. 0 Line Code Violations, 0 Path Code Violations 0 Ais Alarm Secs, 286 Los Alarm Secs For details, refer to ANSI T1.403 and AT&T TR 54016.
time minutes: Sets the duration (in minutes) of a BERT test. The minute argument is up to 1,440. unframed: Sets the test pattern to cover the overhead bits of the frame. Description Use the ft1 bert command to start a BERT test on a T1-F interface. Use the undo ft1 bert command to stop the BERT test running on the T1-F interface. ITU O.151, ITU O.153, and ANSI T1.403-1999 define many BERT patterns, among which, the T1-F interface supports only 2^15 and 2^20 at present.
CHAPTER 15: T1-F INTERFACE CONFIGURATION COMMANDS You may use this command to adapt signal waveform to different transmission conditions such as the quality of the signal received by the receiver. If the signal quality is good, you can just use the default setting. Example # Set the cable length to 40.5 meters (133 feet) on T1-F interface Serial 2/0.
Parameter ami: Adopts AMI line code format. b8zs: Adopts B8ZS line code format. Description Use the ft1 code command to set the line code format for the T1-F interface. Use the undo ft1 code command to restore the default, that is, B8ZS. Keep the line code format of the interface in consistency with the one used on the remote device. Example # Set the line code format of T1-F interface Serial 2/0 to AMI.
CHAPTER 15: T1-F INTERFACE CONFIGURATION COMMANDS ft1 fdl Syntax ft1 fdl { ansi | att | both | none } undo ft1 fdl View Parameter T1-F interface view ansi: Adopts ANSI T1.403 for FDL. att: Adopts AT&T TR 54016 for FDL. both: Adopts both ANSI T1.403 and AT&T TR 54016 for FDL. none: Disables FDL. Description Use the ft1 fdl command to set the behavior of the T1-F interface on the FDL in ESF framing. Use the undo ft1 fdl command to restore the default. By default, FDL is disabled.
T1-F interfaces support two framing formats, that is, SF and ESF. In SF format, multiple frames can share the same FSC and signaling information, so that more significant bits are available for transmitting user data. The use of ESF allows you to test the system without affecting the ongoing service. Example # Set the framing format of T1-F interface Serial 2/0 to SF.
CHAPTER 15: T1-F INTERFACE CONFIGURATION COMMANDS type { 7e | ff }: Sets the interframe filling tag to 0x7E by specifying the 7e keyword or to 0xFF by specifying the ff keyword. On a T1-F interface, the default interframe filling tag is 0x7E. Description Use the ft1 itf command to set the type and the number of interframe filling tags on the T1-F interface. Two types of interframe filling tag are available: 0x7E and 0xFF. Use the undo ft1 itf command to restore the default.
Loopback is intended for checking the condition of interfaces or cables. Disable it otherwise. n Example The three loopback modes cannot be used at the same time on a T1-F interface. # Set T1-F interface Serial 2/0 in local loopback mode. system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0]ft1 loopback local ft1 timeslot-list Syntax ft1 timeslot-list list [ speed { 56k | 64k } ] undo ft1 timeslot-list View Parameter T1-F interface view list: Specifies timeslots to be bundled.
CHAPTER 15: T1-F INTERFACE CONFIGURATION COMMANDS ft1 alarm-threshold Syntax ft1 alarm-threshold { ais { level-1 | level-2 } | lfa { level-1 | level-2 | level-3 | level-4 } | los { pulse-detection | pulse-recovery } value } undo ft1 alarm-threshold View Parameter T1-F interface view ais: Sets the alarm threshold of alarm indication signal (AIS), which can be level-1 and level-2.
Use the undo ft1 alarm-threshold command to restore the defaults. Example # Set the number of detection intervals to 300 for the pulse detection duration threshold.
CHAPTER 15: T1-F INTERFACE CONFIGURATION COMMANDS The format of loopback code can be compliant with ANSI T1.403 or AT&T TR 54016. In SF framing, LLB code is sent using the effective bandwidth (slots 1 through 24). In ESF framing, both LLB code and PLB code are sent/received in the FDL in ESF frames. You can use this command only when the far-end CT1/PRI interface can automatically detect loopback request code from the network. Example # Send in-band LLB activation request code.
FUNDAMENTAL CE3 INTERFACE CONFIGURATION COMMANDS 16 bert (CE3 Interface) Syntax bert pattern { 2^7 | 2^11 | 2^15 | qrss } time number [ unframed ] undo bert View Parameter CE3 interface view pattern: Specifies BERT test mode, which can be 2^7, 2^11, 2^15, and QRSS. 2^7: Specifies the code stream transmitted is the 7th power of 2 bits in length. 2^11: Specifies the code stream transmitted is the 11th power of 2 bits in length.
CHAPTER 16: FUNDAMENTAL CE3 INTERFACE CONFIGURATION COMMANDS Example # Perform BERT test in QRSS mode on CE3 2/0 interface, setting the duration to ten minutes. system-view [Sysname] interface E3 2/0 [Sysname-E3 2/0] bert pattern qrss time 10 clock (CE3 interface view) Syntax clock { master | slave } undo clock View Parameter CE3 interface view master: Adopts the internal clock as the clock source. slave: Adopts the line clock as the clock source.
system-view [Sysname] controller e3 2/0 [Sysname-E3 2/0] crc Syntax crc { 16 | 32 | none } undo crc View Parameter Synchronous serial interface view 16: Adopts 16-bit CRC. 32: Adopts 32-bit CRC. none: Adopts no CRC. Description Use the crc command to configure CRC mode for a synchronous serial interface formed by CE3 interfaces. Use the undo crc command to restore the default, that is, 16-bit CRC. Related command: Example e1 channel-set, e1 unframed, using (CT3 interface view).
CHAPTER 16: FUNDAMENTAL CE3 INTERFACE CONFIGURATION COMMANDS Parameter Description interface-number: CE3 interface number. In conjunction with the e3 keyword, it specifies a CE3 interface. Use the display controller e3 command to display state information about one specified or all CE3 interfaces. In addition to the state information of the CE3 interface, the command displays information about each E1 line on the CE3 interface if the interface is working in CE3 mode.
e1 bert Syntax e1 line-number bert pattern { 2^11 | 2^15 | 2^20 | 2^23 | qrss } time number [ unframed ] undo e1 line-number bert View Parameter CE3 interface view line-number: E1 channel number, in the range 1 to 28. pattern: Specifies BERT test mode, which can be 2^11, 2^15, 2^20, 2^23, and QRSS. 2^11: Specifies the code stream transmitted is the 11th power of 2 bits in length. 2^15: Specifies the code stream transmitted is the 15th power of 2 bits in length.
CHAPTER 16: FUNDAMENTAL CE3 INTERFACE CONFIGURATION COMMANDS system-view [Sysname] interface e3 2/0 [Sysname-E3 2/0] e1 1 bert pattern qrss time 10 e1 channel-set Syntax e1 line-number channel-set set-number timeslot-list list undo e1 line-number channel-set set-number View Parameter CE3 interface view line-number: E1 line number in the range 1 to 16. set-number: Number of the channel set formed by a timeslot bundle on the E1 line. It ranges from 0 to 30.
undo e1 line-number set clock View Parameter CE3 interface view line-number: E1 line number in the range 1 to 16. master: Adopts the internal clock as the clock source. slave: Adopts the line clock as the clock source. Description Use the e1 set clock command to configure clock source for an E1 line on the CE3 interface. Use the undo e1 clock command to restore the default, that is, line clock. When the CE3 interface is working in channelized mode, you can set separate clock for each E1 line on it.
CHAPTER 16: FUNDAMENTAL CE3 INTERFACE CONFIGURATION COMMANDS system-view [Sysname] controller e3 2/0 [Sysname-E3 2/0] e1 1 set frame-format crc4 e1 set loopback Syntax e1 line-number set loopback { local | payload | remote } undo e1 line-number set loopback View Parameter CE3 interface view line-number: E1 line number in the range 1 to 16. local: Sets the E1 line in internal loopback mode. payload: Sets the E1 line in payload loopback mode.
By default, E1 lines are up. This command affects not only the specified E1 line but also the serial interfaces formed by E1 line bundling. Performing the e1 shutdown command on the specified E1 line shuts down all these serial interfaces. Data transmission and receiving stop as a result. Likewise, performing the undo e1 shutdown command restarts all these serial interfaces. Example # Shut down the first E1 line on interface E3 2/0.
CHAPTER 16: FUNDAMENTAL CE3 INTERFACE CONFIGURATION COMMANDS View Parameters CE3 interface (in FE3 mode) view dsu-mode: Specifies the FE3 (Fractional E3) DSU mode for a CE3 interface operating in FE3 mode. This keyword can be followed by 0 or 1 keyword, as described below:. 0: Specifies the Digital Link mode, where the subrate is a multiple of 358 kbps and ranges from 358 to 34010 kbps (that is, up to 95 rate levels are available).
loopback (CE3 interface view) Syntax loopback { local | payload | remote } undo loopback View Parameter CE3 interface view local: Enables internal loopback on the CE3 interface. payload: Enables external payload loopback on the CE3 interface. remote: Enables external loopback on the CE3 interface. Description Use the loopback command to configure the loopback mode of the CE3 interface. Use the undo loopback command to restore the default. By default, loopback is disabled on the CE3 interface.
CHAPTER 16: FUNDAMENTAL CE3 INTERFACE CONFIGURATION COMMANDS You need to set the national bit to 0 on an E3 interface only in some special circumstances. Related command: Example controller e3. # Set the national bit to 0 on interface E3 2/0. system-view [Sysname] controller e3 2/0 [Sysname-E3 2/0] national-bit 0 using (CE3 interface view) Syntax using { ce3 | e3 } undo using View Parameter CE3 interface view ce3: Sets the CE3 interface to work in channelized mode.
FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS 17 alarm (CT3 interface view) Syntax alarm { detect | generate { ais | febe | idle | rai } } undo alarm { detect | generate { ais | febe | idle | rai } } View Parameter CT3 interface view detect: Enables/disables periodical alarm signal detection. By default, periodical alarm detection is enabled. generate: Sends alarm signals, which can be AIS, RAI, idle, or FEBE for line state test. By default, alarm signal sending is disabled.
CHAPTER 17: FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS Example # Enable periodical alarm signal detection on CT3 interface T3 2/0. system-view [Sysname] interface t3 2/0 [Sysname-T3 2/0] alarm detect # Enable CT3 interface T3 2/0 to send AIS alarm signals.
Example # Run a 10-minute QRSS BERT test on CT3 interface T3 2/0. system-view [Sysname] interface t3 2/0 [Sysname-T3 2/0] bert pattern qrss time 10 cable (CT3 interface view) Syntax cable feet undo cable View Parameter Description CT3 interface view feet: Cable length in the range 0 to 450 feet (0 to 137.2 meters). Use the cable command to configure the cable length on the CT3 interface. Use the undo cable command to restore the default, that is, 49 feet (14.9 meters).
CHAPTER 17: FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS Example # Use the internal clock as the clock source on CT3 interface T3 2/0. system-view [Sysname] interface t3 2/0 [Sysname-T3 2/0] clock master controller t3 Syntax View Parameter Description Related command: Example controller t3 interface-number System view interface-number: CT3 interface number. Use the controller t3 command to enter CT3 interface view. display controller t3. # Enter the view of interface T3 2/0.
Example # Apply 32-bit CRC to a serial interface formed on interface T3 2/0 in unchannelized mode. system-view [Sysname] controller t3 2/0 [Sysname-T3 2/0] using t3 [Sysname-T3 2/0] quit [Sysname] interface serial 2/0/0:0 [Sysname-Serial2/0/0:0] crc 32 # Apply 16-bit CRC to a serial interface formed on interface CT3 2/0 in channelized mode.
CHAPTER 17: FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS No code is sent now. Periodical detection is enabled, no code received now.
Table 21 Description on the fields of the display controller t3 command Field Description No message is sent now. No MDL message is being sent. If an MDL message, path or idle-signal for example, was being sent, the screen would display “Message sent now: path. idle signal.” Message data elements MDL data elements EIC: line, LIC: line, FIC: line, UNIT: line EIC, LIC, FIC, and UNIT are four elements present in all types of MDL messages. Their values are user configurable and default to line.
CHAPTER 17: FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS Table 21 Description on the fields of the display controller t3 command Field Description Data in current interval: Statistics spanning the current 15-minute interval, coving the counts of these items: Line Code Violations Far End Block Error C-Bit Coding Violation P-bit Coding Violation Framing Bit Err Severely Err Framing Secs C-bit Err Secs C-bit Severely Err Secs P-bit Err Secs P-bit Severely Err Secs Line code violations: BPV, or E
Table 21 Description on the fields of the display controller t3 command Field Description Bits received (since latest sync) Number of bits received since the last synchronization feac (CT3 interface view) Syntax feac { detect | generate { ds3-los | ds3-ais | ds3-oof | ds3-idle | ds3-eqptfail | loopback { ds3-line | ds3-payload } } } undo feac { detect | generate { ds3-los | ds3-ais | ds3-oof | ds3-idle | ds3-eqptfail | loopback { ds3-line | ds3-payload } } } View Parameter CT3 interface view det
CHAPTER 17: FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS Example # Enable FEAC channel signal detection on CT3 interface T3 2/0. system-view [Sysname] interface t3 2/0 [Sysname-T3 2/0] feac detect # Sends DS3 LOS signal on CT3 interface T3 2/0. system-view [Sysname] interface t3 2/0 [Sysname-T3 2/0] feac generate ds3-los # On CT3 interface T3 2/0, send loopback code to the far end to place the far end in a line loopback.
Parameters dsu-mode: Specifies the FT3 (Fractional T3) DSU mode for a CT3 interface operating in FT3 mode. This keyword can be followed by 0, 1, 2, 3, and 4, as described below. 0: Specifies the Digital Link mode, where the subrate is a multiple of 300746 bps and ranges from 300 to 44210 kbps (that is, up to 147 rate levels are available). 1: Specifies the Kentrox mode, where the subrate is a multiple of 1500 kbps and ranges from 1500 to 35000 kbps.
CHAPTER 17: FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS Examples # Configure T3 2/0 interface to operate in the FT3 mode, setting the DSU mode to 1 and the subrate to 3000 kbps.
data: Sets information included in MDL messages. Among all types of information, EIC, LIC, FIC, and unit are defined for all types of MDL messages; PFI is only for path MDL messages; port number is only for idle signal messages; and generator number is only for test signal messages. eic string: Equipment identification code, a string of 1 to 10 characters. The default EIC is line. lic string: Location identification code, a string of 1 to 11 characters. The default LIC is line.
CHAPTER 17: FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS # Set LIC to “hello” for CT3 interface T3 2/0. system-view [Sysname] interface t3 2/0 [Sysname-T3 2/0] mdl data lic hello # Send path messages on CT3 interface T3 2/0.
Example # Enable periodical alarm signal detection on T1 line 1 on CT3 interface T3 2/0. system-view [Sysname] interface t3 2/0 [Sysname-T3 2/0] t1 1 alarm detect # Enable T1 line 1 on CT3 interface T3 2/0 to send AIS alarm signals.
CHAPTER 17: FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS checks the received pattern for the bit error rate, and by so doing helps you determine whether the condition of the line is good. To this end, you must configure loopback to allow the transmitted pattern to loop back from somewhere on the line, for example, from the far-end interface by placing the interface in far-end loopback. You may view the state and result of the BERT test with the display controller t3 command.
Example # Create a 128 kbps serial interface through timeslot bundling on the first T1 line on interface T3 2/0.
CHAPTER 17: FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS system-view [Sysname] interface t3 2/0 [Sysname-T3 2/0] t1 1 sendloopcode inband-line-up t1 set clock Syntax t1 line-number set clock { master | slave } undo t1 line-number set clock View Parameter CT3 interface view line-number: T1 line number in the range 1 to 28. master: Adopts the internal clock as the clock source on the T1 line. slave: Adopts the line clock as the clock source on the T1 line.
You can configure this command only when the T1 line is working in framed format (which can be set by using the undo t1 unframed command). Related command: Example t1 unframed. # Set the framing format to SF for the first T1 line on interface T3 2/0.
CHAPTER 17: FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS View Parameter CT3 interface view line-number: T1 line number, in the range 1 to 28. fdl: Sets the FDL format of T1. ansi: Adopts ANSI T1.403 for FDL. att: Adopts AT&T TR 54016 for FDL. both: Adopts both ANSI T1.403 and AT&T TR 54016 for FDL. none: Disables the use of FDL on the T1 line. Description Use the t1 set fdl command to set the behavior of the specified T1 line on the FDL in ESF framing.
Example # Display line state of T1 line 1 on CT3 interface T3 2/0.
CHAPTER 17: FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS undo t1 line-number shutdown View Parameter Description CT3 interface view line-number: T1 line number in the range 1 to 28. Use the t1 shutdown command to shut down a T1 line on the CT3 interface. Use the undo t1 shutdown command to bring up a T1 line. By default, T1 lines are up. This command shuts down not only the specified T1 line but also the serial interfaces formed on it. Data transmission and receiving will stop as a result.
system-view [Sysname] interface t3 2/0 [Sysname-T3 2/0] t1 1 unframed using (CT3 interface view) Syntax View Parameter using { ct3 | t3 } CT3 interface view ct3: Sets the CT3 interface to operate in channelized mode. t3: Sets the CT3 interface to operate in unchannelized mode. Description Use the using command to configure the operating mode of a CT3 interface. Use the undo using command to restore the default, that is, channelized mode.
CHAPTER 17: FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS
ISDN BRI INTERFACE CONFIGURATION COMMANDS 18 loopback (ISDN BRI interface view) Syntax loopback { b1 | b2 | both } undo loopback View Parameter ISDN BRI interface view b1: Places the B1 channel in external loopback. b2: Places the B2 channel in external loopback. both: Places both B1 and B2 channels in external loopback. Description Use the loopback command to sets the B1, B2, or both channels on the ISDN BRI interface in external loopback. This can send data from a line back to the line.
CHAPTER 18: ISDN BRI INTERFACE CONFIGURATION COMMANDS
ATM CONFIGURATION COMMANDS 19 atm class Syntax atm class atm-class-name undo atm class atm-class-name View Parameter Description System view atm-class-name: Name of ATM class, a string of 1 to 16 characters. Use the atm class command to create an ATM class and enter the ATM class view. Use the undo atm class command to delete the specified ATM class. An ATM class is a group of predefined parameters that can be used for ATM interface or PVC. Related command: Example atm-class.
CHAPTER 19: ATM CONFIGURATION COMMANDS Related command: Example atm class. # Apply the ATM class named “main” to ATM 1/0 interface.
Description Use the clock command to specify the clock signal to be adopted by an ATM interface. Use the undo clock command to restore the default. By default, ATM interface uses line clock signal (slave). This clock signal is usually provided by device which provides ATM interfaces. When two network devices are connected back-to-back through their ATM interfaces, you need to configure one interface to adopt the signal of the internal transmission clock.
CHAPTER 19: ATM CONFIGURATION COMMANDS Table 23 Description on the fields of the display atm class command Field Description Service ubr 8000 The PVC’s service type and the bit rate encapsulation aal5snap The type of ATM AAL5 encapsulation of the PVC is aal5snap. display atm interface Syntax View Parameter Description display atm interface [ atm interface-number ] Any view interface-number: Specifies an ATM interface to view the detailed information about.
Table 24 Description on the fields of the display atm interface command Field Description PVCs Number of PVCs configured on the interface MAPs Number of maps on the interface input pkts: 0, input bytes: 0, input pkt errors: 0 Received packets, bytes, and errors output pkts: 69, output bytes: 2218, output pkt errors: 8 Transmitted packets, bytes, and errors display atm map-info Syntax View Parameter display atm map-info [ interface interface-type interface-number [ pvc { pvc-name [ vpi/vci ]
CHAPTER 19: ATM CONFIGURATION COMMANDS Table 25 Description on the fields of the display atm map-info command Field Description IP & Mask Protocol type State UP Map entry state 100.11.1.1, mask 255.255.0.0 Protocol address Vlink 1 Virtual link number display atm pvc-group Syntax View Parameter display atm pvc-group [ interface interface-type interface-number [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ] Any view interface-type interface-number: Interface type and interface number.
Table 26 Description on the fields of the display atm pvc-group command Field Description ENCAP AAL5 encapsulation type of the PVC PROT Upper protocol running on the PVC INTERFACE Interface to which the PVC belongs GROUP PVC group to which the PVC belongs display atm pvc-info Syntax View Parameter display atm pvc-info [ interface interface-type interface-number [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ] Any view interface-type interface-number: Interface type and number.
CHAPTER 19: ATM CONFIGURATION COMMANDS Table 27 Description on the fields of the display atm pvc-info command Field Description PVC-NAME PVC name INDEX Internal index of the PVC ENCAP AAL5 encapsulation type of the PVC PROT Upper protocol running on the PVC INTERFACE Interface to which the PVC belongs encapsulation Syntax encapsulation aal5-encap undo encapsulation View Parameter Description PVC view/ATM Class view aal5-encap: AAL5 encapsulation type; its possible values are as follows
interface atm Syntax interface atm { interface-number | interface-number.subnumber [ p2mp | p2p ] } undo interface atm interface-number.subnumber View Parameter System view interface-number: ATM main interface number. subnumber: ATM sub-interface number, in the range 0 to 1023.
CHAPTER 19: ATM CONFIGURATION COMMANDS vpi/vci: VPI/VCI pair. VPI is short for virtual path identifier; its value ranges from 0 to 255. VCI is short for virtual channel identifier; its value range varies by interface type. Normally, VCI values from 0 to 31 are reserved for special purpose, you are not recommended to use them. For details regarding the value range, refer to Table 28. min: Minimum precedence of IP packets carried by the PVC, in the range 0 to 7.
Parameter Description interface-number: Virtual Ethernet (VE) interface number. Use the map bridge command to establish the IPoEoA mapping or PPPoEoA mapping on the PVC. Use the undo map bridge command to delete the mapping. By default, no mapping is configured. Before using this command, make sure that the VE has been created. Example The following example demonstrates a complete process of IPoEoA configuration. # Establish a VE interface virtual-Ethernet 1.
CHAPTER 19: ATM CONFIGURATION COMMANDS PVC so long as a next-hop address in the specified network segment is found for the packet. default: A mapping with the default route property is set. If a packet cannot find a mapping with the same address of next hop at the interface, but one PVC has the default mapping, the packet can be sent over the PVC. inarp: Enables inverse address resolution protocol (InARP) on PVC. minutes: Time interval to send InARP packets, in minutes.
Parameter Description vt-number: Number of the virtual template (VT) interface corresponding to a PPPoA map. Use the map ppp command to create a PPPoA map on the PVC. Use the undo map ppp command to delete the map. By default, no mapping is configured. Before this command is used, the VT must have already been created. Example The following example demonstrates a complete process of PPPoA configuration. # Create a VT interface numbered 10, and assign it an IP address.
CHAPTER 19: ATM CONFIGURATION COMMANDS mechanism used by PVC is FIFO. You can use the fifo queue-length command in the PVC view to change its queue length. n Example The effect of this command applies to ATM main interface and sub-interface simultaneously. # Set the MTU of ATM interface atm 1/0 to 1492 bytes.
oam frequency Syntax oam frequency frequency [ up up-count down down-count retry-frequency retry-frequency ] undo oam frequency View Parameter PVC view/ATM Class view frequency: Time interval to send operations, administration, and maintenance (OAM) F5 Loopback cells, in seconds, and the range of the value is 1 to 600. up-count: Number of OAM F5 Loopback cells.
CHAPTER 19: ATM CONFIGURATION COMMANDS oamping interface Syntax View Parameter oamping interface atm interface-number pvc { pvc-name | vpi/vci } [ number timeout ] ATM interface view atm interface-number: ATM interface number. pvc-name: PVC name, a unique string of 1 to 16 characters on ATM interface, not case-sensitive. The name cannot be the same as a valid VPI/VCI pair value. For example, the name 1/20 is not allowed. vpi/vci: VPI/VCI pair.
Parameter pvc-name: PVC name, a unique string of 1 to 16 characters on ATM interface, not case-sensitive. The name cannot be the same as a valid VPI/VCI pair value. For example, the name 1/20 is not allowed. vpi/vci: VPI/VCI pair. VPI is short for virtual path identifier; its value ranges from 0 to 255. VCI is short for virtual channel identifier; its value range varies by interface type. Normally, VCI values from 0 to 31 are reserved for special purpose, you are not recommended to use them.
CHAPTER 19: ATM CONFIGURATION COMMANDS pvc-group Syntax pvc-group { pvc-name [ vpi/vci ] | vpi/vci } undo pvc-group { pvc-name [ vpi/vci ] | vpi/vci } View Parameter ATM interface view pvc-name: PVC name, a unique string of 1 to 16 characters on ATM interface, not case-sensitive. The name cannot be the same as a valid VPI/VCI pair value. For example, the name 1/20 is not allowed. The PVC corresponding to pvc-name must have already been created. vpi/vci: VPI/VCI pair.
Parameter max-number: Maximum number of PVCs allowed. The value range varies by the type of physical interface, as shown in the following table.
CHAPTER 19: ATM CONFIGURATION COMMANDS When applying VP policing, the parameters of PVC are still valid. Only when the parameters of PVC and VP policing are satisfied, will the packets be transmitted and received. In calculating the traffic, the LLC/SNAP, MUX and NLPID headers are included, but the ATM cell head is not included. Related command: Example pvc, service cbr, service vbr-nrt, service vbr-rt, service ubr. # Set the traffic of VP with vpi 1 to 2M.
Related command: Example service vbr-nrt, service vbr-rt, service ubr. # Create a PVC named “aa”, with the VPI/VCI value of 1/101. system-view [Sysname] interface atm 1/0 [Sysname-Atm1/0] pvc aa 1/101 # Specify the service type of the PVC as cbr and the peak rate of ATM cell as 50,000 kbps, and the cell delay variation tolerance as 1000 μs.
CHAPTER 19: ATM CONFIGURATION COMMANDS Parameter output-pcr: Peak rate of ATM cell output in kbps. For the value ranges of this parameter, see Table 30. output-scr: Sustainable rate of ATM cell output in kbps. Its value ranges are the same as those of output-pcr. output-mbs: Maximum burst size for ATM cell output, that is, the maximum number of ATM cells that the output interface can cache. The value ranges from 1 to 512.
Description Use the service vbr-rt command to set the service type of PVC to Variable Bit Rate - Real Time (VBR-RT) and specify the related rate parameters in the PVC view. By default, the service type is UBR after creating a PVC. You can use this command as well as the service ubr, service cbr and service vbr-nrt commands to set the service type and rate-related parameters of a PVC. A newly configured PVC service type overwrites the existing one. This command is not applicable to ATM E1 interfaces.
CHAPTER 19: ATM CONFIGURATION COMMANDS transmit-priority Syntax transmit-priority value undo transmit-priority View Parameter PVC view value: Transmission priority, in the range 0 to 9, the higher value indicating a higher priority. The priority level for the UBR service ranges from 0 to 4. The priority level for the VBR-NRT service ranges from 5 to 7. The priority level for the VBR-RT service ranges from 8 to 9.
DCC CONFIGURATION COMMANDS 20 n Set all synchronous/asynchronous serial interfaces involved in DCC configuration to work in asynchronous mode with the physical-mode async command. dialer bundle Syntax dialer bundle number undo dialer bundle View Parameter Description Dialer interface view number: Dialer bundle number, in the range 1 to 255. Use the dialer bundle command to associate a dialer bundle with a dialer interface in RS-DCC. Use the undo dialer bundle command to remove the association.
CHAPTER 20: DCC CONFIGURATION COMMANDS priority priority: Priority of a physical interface in the dialer bundle. The priority argument is in the range 1 to 255. The higher the number, the higher the priority. The physical interface with higher priority is used first. The default priority is 1. Description Use the dialer bundle-member command to assign a physical interface to a dialer bundle in RS-DCC. Use the undo dialer bundle-member command to remove a physical interface from a dialer bundle.
With both references configured, the device always attempts to place return calls in the user reference approach and in case failure occurs the dial number reference approach. If the command is configured with neither keyword, it equals the dialer callback-center user dial-number command. Related command: Example ppp callback in PPP Commands in Access Volume. # Specify the device as the PPP callback server, and set the callback reference to user mode.
CHAPTER 20: DCC CONFIGURATION COMMANDS When receiving an incoming ISDN call, the device with the dialer call-in command configured first verifies that the caller is valid before processing the call. If the remote PBX does not provide the calling number, the call is dropped directly.
[Sysname-Serial2/0] [Sysname-Serial2/0] [Sysname] interface [Sysname-Serial2/1] dialer circular-group 1 quit serial 2/1 dialer circular-group 1 dialer disconnect Syntax View dialer disconnect [ interface interface-type interface-number ] Any view Parameter interface interface-type interface-number: Specifies an interface by its type and number. Description Use the dialer disconnect command to clear the dialup link on an interface or all dialup links if no interface is specified.
CHAPTER 20: DCC CONFIGURATION COMMANDS If you perform the dialer enable-circular command or its undo form on a non-dial interface, do the same on the interface to recover it. Related command: Example dialer circular-group. # Enable C-DCC on interface Serial 2/0.
for a PRI interface, and 0 to 23 (with 23 excluded for the control channel) for a CT1/PRI interface. Description Use the dialer isdn-leased command to configure an ISDN B channel for leased line connection. Use the undo dialer isdn-leased command to remove the configuration. By default, no ISDN B channel is configured to be leased line. You may use any ISDN B channel for leased line connection without affecting other B channel settings.
CHAPTER 20: DCC CONFIGURATION COMMANDS Related command: Example dialer route. # Set the dial string for placing calls to 11111 on interface Dialer1. system-view [Sysname] interface dialer 1 [Sysname-Dialer1] dialer number 11111 dialer priority Syntax dialer priority priority undo dialer priority View Dial interface (physical) view Parameter priority: Priority of the physical interface in a dialer circular group, in the range 1 to 127.
Description Use the dialer queue-length command to set the buffer queue length on the dial interface. Use the undo dialer queue-length command to restore the default. By default, no packets are buffered. If no connection is available yet when a dial interface without a buffer queue receives a packet, it will drop the packet. Configured with a buffer queue, the dial interface will buffer the packet until a connection is available for packet sending.
CHAPTER 20: DCC CONFIGURATION COMMANDS interface interface-type interface-number: Specifies to dial from the specified physical interface. When multiple physical interfaces are assigned to a dialer interface and their dialup links are connected to different ISDN switches, you need to associate the dialup numbers with the physical interfaces. This configuration is intended for dialer interfaces in C-DCC only.
Description Use the dialer threshold command to set the traffic threshold of a single link on the dialer interface. When the percentage of the traffic on the link to available bandwidth exceeds the threshold, another link is brought up to call the same destination address. Use the undo dialer threshold command to restore the default. By default, MP flow control is not enabled. In DCC applications, you may configure load thresholds for links.
CHAPTER 20: DCC CONFIGURATION COMMANDS Description Use the dialer timer autodial command to set the auto-dial timer of DCC. Use the undo dialer timer autodial command to restore the default. By default, the auto-dial timer of DCC is 300 seconds. This command takes effect only when the auto-dial keyword is configured in the dialer route command. It allows DCC to automatically dial at certain intervals to set up a connection.
dialer timer enable Syntax dialer timer enable seconds undo dialer timer enable View Parameter Description Dial interface (physical or dialer) view seconds: Holddown timer value, setting the interval for originating a call to bring up a link after it is disconnected. It ranges from 5 to 65535 seconds. Use the dialer timer enable command to set the link holddown timer. Use the undo dialer timer enable command to restore the default.
CHAPTER 20: DCC CONFIGURATION COMMANDS A link idle-timeout timer starts upon setup of a link. If no interesting packets are present before the timer expires, DCC disconnects the link. If the timer is set to 0, the link will never be disconnected, regardless of whether there are interesting packets on the link or not. Example # Set the link idle-timeout timer to 50 seconds on interface Serial 2/0.
Description Use the dialer user command to add a remote username for authenticating incoming calls. Use the undo dialer user command to remove the remote username. By default, no remote username is set. This command is only valid on dialer interfaces in RS-DCC. On a dialer interface encapsulated with PPP, DCC identifies which dialer interface is to be used for receiving calls based on the remote username obtained through PPP authentication.
CHAPTER 20: DCC CONFIGURATION COMMANDS n Related command: Example In the default configuration of the interface, the dialer-group command is not configured. You must configure this command for DCC to send packets. dialer-rule. # Add interface Serial 2/0 to dialer access group 1.
resetting the idle-timeout timer if a link is present, or drops it without originating calls for link setup if no link is present. For DCC to send packets normally, you must configure a dial ACL and associate it with the concerned dial interface (physical or dialer) by using the dialer-group command. If no dial ACL is configured for the dialer access group associated with a dial interface, DCC will drop received packets on the interface as uninteresting ones. Related command: Example dialer-group.
CHAPTER 20: DCC CONFIGURATION COMMANDS Table 31 Description on the fields of the display dialer command Field Description Enable Timer set by the dialer timer enable command Idle Timer set by the dialer timer idle command Wait-for-carrier Timer set by the dialer timer wait-carrier command Total Channels Total number of channels on the interface Free Channels Number of free channels display interface dialer Syntax View display interface dialer [ number ] Any view Parameters number : Dial
Table 32 Description on the fields of the display interface dialer command Field Description LCP initial LCP is initialized. Physical is Dialer The physical interface is a dialer interface.
CHAPTER 20: DCC CONFIGURATION COMMANDS The physical interfaces in C-DCC and Resource-Shared DCC do not use individual network addresses. Instead, they use the addresses of the corresponding dialer interfaces. In both C-DCC and RS-DCC, physical interfaces use the network addresses of their associated dialer interface rather than being assigned separate addresses. Example # Create dialer interface Dialer1.
undo ppp callback ntstring View Parameter Description Dial interface (physical or dialer) view dial-number: Dial string for a Windows NT server to place return calls to your router, a string of 1 to 64 characters. Use the ppp callback ntstring command to configure the dial number required for a Windows NT server to place return calls to your router. Use the undo ppp callback ntstring command to remove the dial string. By default, no callback dial string is configured for any Windows NT server.
CHAPTER 20: DCC CONFIGURATION COMMANDS
BASIC DLSW CONFIGURATION COMMANDS 21 code nrzi Syntax code nrzi undo code View Parameter Description Synchronous serial interface view None Use the code nrzi command to configure the synchronous serial interface to use NRZI encoding. Use the undo code command to configure the synchronous serial interface to use NRZ encoding. By default, the NRZ encoding scheme is used on the synchronous serial interface. There are two encoding schemes, NRZI and NRZ, for synchronous serial interface.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS Description Use the display dlsw circuits command to view the DLSw virtual circuit information. The output information of the command helps the user understand the condition of DLSw virtual circuits. Example # Display the information of all virtual circuits. display dlsw circuits circuit-Id port local-MAC remote-MAC state lifetime 00a2000a 04 0000.1738.6dfd 0000.1722.
Table 34 Description on the fields of the display dlsw information command Field Description DLSw The IP address of the remote peer Vendor ID(OUI) The vendor ID of the remote device Version number The latest DLSw version currently supported by the remote device Release number Release version Initial pacing window Size of the initialized window TCP sessions number Number of TCP sessions Multicast address Multicast IP address configured on the remote device Version string Operating syste
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS *145.11.23.
Table 36 Description on the fields of the display dlsw reachable-cache command Field Description LOCAL MAC addresses in cache Display the saved local reachability information MAC address MAC address of the terminal that is reachable to the local peer Status Status of the reachability information Interface The interface through which information destined to the MAC address will be sent Remain time Remaining aging time REMOTE MAC addresses in Display the saved remote reachability information
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS Table 37 Description on the fields of the display llc2 command Field Description Role Local role of LLC2 circuit State ■ primary" represents the end that initiated the circuit ■ secondary" represents the end accepted the circuit connection State of the LLC2 circuit dlsw bridge-set Syntax dlsw bridge-set bridge-set undo dlsw bridge-set bridge-set View System view Parameter bridge-set: ID of the bridge set to be mapped to DLSw, in the range of
Description Use the dlsw enable command to enable DLSw. Use the undo dlsw enable command to disable DLSw. By default, DLSw is enabled. The execution of the undo dlsw enable command releases all dynamic resources without altering the configuration. Example # Disable DLSw without changing the configuration. system-view [Sysname] undo dlsw enable # Enable DLSw.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS dlsw local Syntax dlsw local ip-address [ init-window init-window-size | keepalive keepalive-interval | max-frame max-frame-size | max-window max-window-size | permit-dynamic | vendor-id vendor-id ] * undo dlsw local ip-address [ init-window | keepalive | max-frame | max-window | permit-dynamic ] * View Parameter System view ip-address: IP address of the local peer to be created. This IP address must be reachable.
Example # Create a local DLSw peer with the following parameters: ■ IP address: 1.1.1.1 ■ Initial local window size: 50 ■ Keepalive interval: 40 seconds ■ Maximum frame size: default ■ Maximum local window size: default system-view [Sysname] dlsw local 1.1.1.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS [Sysname] dlsw reachable saps 12 14 # Permit access to user-configured MAC addresses only. [Sysname] dlsw reachable mac-exclusivity dlsw reachable-cache Syntax dlsw reachable-cache mac-address remote ip-address undo dlsw reachable-cache mac-address remote ip-address View Parameter System view mac-address: MAC address of the SNA device connected to a remote peer. ip-address: IP address of a remote peer.
backup backup-address: Creates a backup remote peer with the IP address of ip-address; backup-address is the IP address of the primary remote peer, which must be created prior to this backup remote peer. keepalive-interval: Interval in seconds between keepalive messages, in the range of 0 to 1,200. The default is 30 seconds. A value of 0 indicates no keepalive will be sent. minutes: Timeout time of the backup connection after the primary remote peer is disconnected, in units of minutes.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS dlsw reverse Syntax View Parameter Description dlsw reverse mac-address System view mac-address: MAC address to be converted. Use the dlsw reverse command to convert a MAC address from the Ethernet format to the token ring format, or vice versa.
Description Use the dlsw max-transmission command to set the maximum number of the attempts the DLSw v2.0 router should make to send an explorer frame. Use the undo dlsw max-transmission command to restore the default. Each time the origin DLSw v2.0 router sends an explorer frame in a UDP multicast or unicast, an explorer timer starts.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS dlsw timer Syntax dlsw timer { cache | connected | explorer | explorer-wait | local-pending | remote-pending } seconds undo dlsw timer { cache | connected | explorer | explorer-wait | local-pending | remote-pending } View Parameter System view cache seconds: Timeout time of addresses in SNA cache, in seconds. The effective range is 1 to 65,535, and the default is 120 seconds. connected seconds: Connection timeout time in seconds.
idle-mark Syntax idle-mark undo idle-mark View Parameter Description Synchronous serial interface view None Use the idle-mark command to configure the idle-time encoding scheme of the synchronous serial interface to be 0xFF. Use the undo idle-mark command to restore the default setting. By default, the synchronous serial interface uses “0x7E” to indicate its idle state.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS Note that you need to remove all IP related configurations on the interface before enabling SDLC, because SDLC cannot underlie the IP protocol. For example, you need to delete the IP address of the interface. Example # Configure Serial 2/0 to use SDLC as the link layer encapsulation protocol.
Use the undo max-pdu command to restore the default maximum LLC2 PDU size. By default, the maximum LLC2 PDU size is 1,493 bytes. Example # Set the maximum LLC2 PDU size to 1,000 bytes on Ethernet 1/0. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] llc2 max-pdu 1000 llc2 max-send-queue Syntax llc2 max-send-queue length undo llc2 max-send-queue View Parameter Description Ethernet interface view length: The length of the LLC2 output queue, in the range of 20 to 200.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS By default, the number of LLC2 transmission retries is 3. Example # Set the number of LLC2 transmission retries to 10 on Ethernet 1/0. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] llc2 max-transmission 10 llc2 modulo Syntax llc2 modulo { 8 | 128 } undo llc2 modulo View Parameter Ethernet interface view 8: Specifies the modulus value to be 8. 128: Specifies the modulus value to be 128.
Parameter Description length: The maximum number of consecutive information frames the router can send before receiving an acknowledgment from the peer, in the range of 1 to 127. Use the llc2 receive-window command to configure the maximum number of consecutive information frames the router can send before receiving an acknowledgment from the peer. Use the undo llc2 receive-window command to restore the default setting.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS View Ethernet interface view Parameter mseconds: LLC2 local acknowledgment delay, in milliseconds. The effective range is 1 to 60,000. Description Use the llc2 timer ack-delay command to configure the LLC2 local acknowledgment delay time, namely the maximum length of time the device waits before sending an acknowledgment to the peer end upon receiving an LLC2 frame. Use the undo llc2 timer ack-delay command to restore the default setting.
View Parameter Description Ethernet interface view mseconds: LLC2 POLL timer length in milliseconds. The effective range is 1 to 60,000. Use the llc2 timer detect command to configure the LLC2 POLL timer, namely the interval at which both ends of a virtual circuit sends/receives Receiver Ready (RR) frames after the virtual circuit is established. Use the undo llc2 timer detect command to restore the default setting. By default, the LLC2 POLL timer length is 30,000 milliseconds.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS llc2 timer reject Syntax llc2 timer reject mseconds undo llc2 timer reject View Parameter Description Ethernet interface view mseconds: LLC2 REJ status time in milliseconds. The effective range is 1 to 60,000. Use the llc2 timer reject command to configure the LLC2 REJ status time, namely the amount of time the router waits for the expected frame after it receives an unexpected frame and sends a reject frame.
Parameter Description Example None Use the reset dlsw reachable-cache command to clear DLSw reachability information. # Clear the DLSw reachability information. reset dlsw reachable-cache reset dlsw tcp Syntax View Parameter Description reset dlsw tcp [ ip-address ] User view ip-address: IP address of the remote peer. Use the reset dlsw tcp command to reset the TCP connection between the DLSw router and a remote peer or all remote peers.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS Table 38 Description on the fields of the reset dlsw tcp command Field Description Error: Wrong IP address Invalid IP address entered Error: No specified peer is found The specified peer does not exist. sdlc controller Syntax sdlc controller sdlc-address undo sdlc controller sdlc-address View Parameter Description Synchronous serial interface view sdlc-address: Address of the secondary SDLC station to be configured, in the range of 0x01 to 0xFE.
Example # Set the secondary SDLC station address to 0x05 on Serial 2/0. system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] sdlc controller 05 sdlc enable dlsw Syntax sdlc enable dlsw undo sdlc enable dlsw View Parameter Description Synchronous serial interface view None Use the sdlc enable dlsw command to enable DLSw forwarding on the current synchronous serial interface.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS Use the undo sdlc mac-map local command to delete the configured SDLC virtual MAC address. By default, no SDLC virtual MAC address is configured. Initially designed for LLC2 protocols, DLSw establishes mappings with virtual circuits through MAC addresses. Therefore, a MAC address must be specified for an SDLC virtual circuit so that SDLC frames can be forwarded.
Example ■ If the remote SDLC peer to be configured uses a token ring address, use its token ring address directly; ■ If the remote SDLC peer uses an Ethernet address, reverse the bit order of the Ethernet address: for example, convert 00e0.fc03.a548 to 0007.3fc0.5a12. You are recommended to use the dlsw reverse command to avoid errors that may be introduced in manual conversion. # Configure an SDLC peer on Serial 2/0.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS Description Use the sdlc max-send-queue command to configure the length of the SDLC output queue. Use the undo sdlc max-send-queue command to restore the default setting. By default, the length of the SDLC output queue is 50. Example # Set the length of the SDLC output queue to 30 on Serial 2/0.
Description Use the sdlc modulo command to configure the modulus of the SDLC. Use the undo sdlc modulo command to restore the default setting. By default, the SDLC modulus is 8. Like X.25, SDLC uses the modulus method to number frames. All frames sent are numbered incrementally and await an acknowledgment. When the frame number reaches the configured value (referred to as “modulus value”), subsequent frames are numbered from 1 again. For example, if the modulus value is set to 8, frames are numbered .
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] sdlc sap-map local 08 05 sdlc sap-map remote Syntax sdlc sap-map remote dsap sdlc-addr undo sdlc sap-map remote dsap sdlc-addr View Parameter Synchronous serial interface view dsap: SAP address of the DLSw peer device, in the range of 0x01 to 0xFE. sdlc-addr: SDLC address, in the range of 0x01 to 0xFE.
Description Use the sdlc simultaneous command to configure the SDLC synchronous serial interface to work in two-way simultaneous mode, so that the primary SDLC station can send data to and receive data from a secondary station at the same time. Use the undo sdlc simultaneous command to restore the default mode. By default, the data transmission mode is “alternate”. Example # Enable the two-way simultaneous mode for SDLC data on Serial 2/0.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS Example # Set the role of the SDLC device connected with Serial 2/0 to primary, and the role of the local interface to secondary. system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] sdlc status secondary sdlc timer ack Syntax sdlc timer ack mseconds undo sdlc timer ack View Parameter Description Synchronous serial interface view mseconds: Primary-station acknowledgment waiting time: in milliseconds.
Use the undo sdlc timer lifetime command to restore the default setting. By default, the secondary-station acknowledgment waiting time is 500 milliseconds. Example # Set the secondary-station acknowledgment waiting time to 1,000 milliseconds on Serial 2/0.
CHAPTER 21: BASIC DLSW CONFIGURATION COMMANDS Use the undo sdlc window command to restore the default setting. By default, the maximum number of consecutive frames the device can send before receiving an acknowledgement from the peer is 7. Example # Set the maximum number of consecutive frames the device can send before receiving an acknowledgement from the peer to 5 on Serial 2/0.
FRAME RELAY CONFIGURATION COMMANDS 22 annexg Syntax annexg {dce | dte} undo annexg {dce | dte} View Parameter DLCI interface view dce: Specifies the DLCI interface as an Annex G DTE interface. dte: Specifies the DLCI interface as an Annex G DCE interface. Description Use the annexg command to configure the operating mode (Annex G DCE or Annex DTE) for a DLCI interface. Use the undo annexg command to remove the configuration. By default, a DLCI interface does operate in the Annex G DCE mode. ANSI T1.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS Description Related commands: Example Use the display fr compress command to display the statistics information about frame relay compression. If no interface is specified, the DLCI statistics information for all interfaces is displayed. fr compression frf9. # Display the frame relay compression statistics information of FRF.9 stac.
Table 40 Description on the fields of the display fr dlci-switch command Field Description Frame relay switch statistics The statistics of frame relay switch Status The status of frame relay switching function Interface(Dlci) <----------> Interface(Dlci) Input interface and its DLCI, output interface and its DLCI.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS Parameter Description interface-type { interface-number | interface-number.subnumber }: Specifies an interface by its type and number. The interface-number argument is a main interface number. The subnumber argument is a subinterface number, in the range 0 to 1023. Use the display fr interface command to display information about the specified or all frame relay interfaces.
Table 43 Description on the fields of the display fr lmi-info command Field Description Frame relay LMI statistics for interface Serial2/1 (DTE, Q933) Terminal type and LMI protocol type for the frame relay interface T391DTE = 10 (hold timer 10) DTE-side T.391 setting N391DTE = 6, N392DTE = 3, N393DTE = DTE-side N.391, N.392, and N.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS Total packets: 8 , Packets compressed: Link searches: 0 , Search Missed : Bytes saved : 173 , Bytes sent : Decompression: Total packets: 6 , Packets compressed: Errors : 0 Compression-connections: 16 , Decompression-connections: 16 5 1 598 4 Table 44 Description on the fields of the display fr iphc command Field Description RTP header compression information Information of RTP header compression Information of TCP header compression Information of
display fr map-info Map Statistics for interface Serial2/0 (DTE) DLCI = 100, IP INARP 100.100.1.1, Serial2/0 create time = 2002/10/21 14:48:44, status = ACTIVE encapsulation = ietf, vlink = 14, broadcast DLCI = 200, IP INARP 100.100.1.1, Serial2/0 create time = 2002/10/21 14:34:42, status = ACTIVE encapsulation = ietf, vlink = 0, broadcast DLCI = 300, IP 1.1.1.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS Table 46 Description on the fields of the display fr map-info pppofr command Field Description Fr Interface Frame relay interface name DLCI DLCI number Fr State Frame relay state PPP Interface Name of the associated PPP virtual template interface PPP Phase Phase of the PPP session display fr pvc-info Syntax View Parameter display fr pvc-info [ interface interface-type { interface-number | interface-number.
Table 47 Description on the fields of the display fr pvc-info command Field Description PVC statistics for interface Serial2/0 (DTE, Display information about PVCs on the frame relay physical UP) interface Serial 2/0. The interface operates in as a DTE. The physical state of the interface is up. DLCI = 100, USAGE = UNUSED (0000), INTERFACE = Serial2/0 DLCI 100 was assigned to the PVC through negotiation of LMI with DCE end. Its state is unused, and it belongs to interface Serial 2/0.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS display interface mfr Syntax View Parameter display interface mfr [ interface-number | interface-number.subnumber ] Any view interface-number: MFR interface number, in the range 0 to 1023. interface-number.subnumber: MFR subinterface number, of which, interface-number is the main interface number, and subnumber is subinterface number. The subnumber argument ranges from 0 to 1023.
Table 49 Description on the fields of the display interface mfr command Field Description LMI status enquiry sent 435, LMI status received 435 Transmitted and received LMI status enquiry messages LMI status timeout 0, LMI message discarded 0 LMI timeout messages and dropped LMI messages Physical is MFR Physical interface is MFR Output queue: (Urgent queue: Size/Length/Discards) 0/50/0 Statistics on the packets of the following interface output queues: Output queue: (Protocol queue: Size/Lengt
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS Table 50 Description on the fields of the display mfr command Field Description Bundle interface Bundle interface Bundle state Operating state of the bundle interface. Bundle class Class A indicates if there is one bundle link is in up state, the bundle is flagged as up. Moreover, all bundle links should be tagged as down before the bundle is down.
Table 51 Description on the fields of the display mfr verbose command Field Description Hello(TX/RX) Number of the transmitted and received Hello messages. Hello messages are sent for maintaining link state. Hello_ack(TX/RX) Number of transmitted and received Hello acknowledgement messages. Hello_ack messages are sent notifying receipt of the Hello messages. Add_link(TX/RX) Number of transmitted and received Add_link messages.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS If you do not specify the name argument, this command displays the information of all the X.25 templates. Related command: Example x25 template, x25-template. # Display the configuration of the X.25 template named “vofr”.
fr compression frf9 Syntax fr compression frf9 undo fr compression View Parameter Description Subinterface (point-to-point) view None Use the fr compression frf9 command to enable FRF9 compression function. Use the undo fr compression command to disable FRF9 compression function. By default, frame relay compression function is disabled. The system supports FRF.9 stac compression function, which groups messages into control messages and data messages.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS undo fr compression iphc View Parameter Description Frame relay interface view None Use the fr compression iphc command to enable FRF.20 (FRF.20 IPHC) compression. Use the undo fr compression iphc command to disable the function. By default, the frame relay compression function is disabled. The system supports frame relay FRF.20 IP Header Compression (IPHC) function that compresses IP header.
Use the undo fr dlci command to cancel the configuration. When the frame relay interface type is DCE or NNI, it is necessary to manually configure virtual circuit for interface (either main interface or subinterface). When the frame relay interface type is DTE, if the interface is main interface, the system will automatically configure the virtual circuit according to the peer device. The virtual circuit number on the physical interface is unique.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] fr dlci-switch 100 interface serial 2/1 dlci 200 # Configure a static route, allowing the packets on the link with DLCI of 200 on Serial 2/1 to be forwarded over the link with DLCI of 300 on tunnel interface 4.
The fr inarp command configured on an FR main interface also applies to its subinterfaces. Example # Enable InARP at all PVCs of the frame relay interface Serial 2/0. system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] fr inarp fr interface-type Syntax fr interface-type { dce | dte | nni } undo fr interface-type View Parameter Interface view dce: Set the type of frame relay interface to DCE (Data Circuit-terminating Equipment).
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS fr iphc Syntax fr iphc { nonstandard | rtp-connections number1 | tcp-connections number2 | tcp-include } undo fr iphc { nonstandard | rtp-connections | tcp-connections | tcp-include } View Parameter Frame relay interface view, MFR interface view nonstandard: Nonstandard compatible compression format. rtp-connections number1: The number of RTP compression connections, in the range 3 to 1000. By default, the number of RTP compression connections is 16.
Description Use the fr lmi n391dte command to configure N391 parameter at the DTE side. Use the undo fr lmi n391dte command to restore the default. By default, the parameter value is 6. The DTE sends a Status-Enquiry packet at regular interval set by T391 to the DCE. There are two types of Status-Enquiry packets: link integrity authentication packet and link status enquiry packet.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS Example # Set frame relay interface Serial 2/0 to operate in DCE mode and set N392 to 5 and N393 to 6.
fr lmi n393dce Syntax fr lmi n393dce n393-value undo fr lmi n393dce View Parameter Description Interface view n393-value: The value of N392 parameter at the DTE side. It ranges from 1 to 10. Use the fr lmi n393dce command to set the N393 parameter at the DCE side. Use the undo fr lmi n393dce command to restore the default. By default, the parameter value is 4. The DCE requires the DTE to send a Status-Enquiry packet at a regular interval (set by T392).
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS Use the undo fr lmi n393dte command to restore the default. By default, the parameter value is 4. The DTE sends a Status-Enquiry packet at a regular interval to the DCE to inquire the link status. On receiving this packet, the DCE will immediately send a Status-Response packet. If the DTE does not receive the response packet in the specified time, it will record the error by adding 1 to the error count.
Example # Set the frame relay interface Serial 2/0 to operate in DCE mode and set T392 to 10s. system-view [Sysname] interface serial2/0 [Sysname-Serial2/0] link-protocol fr [Sysname-Serial2/0] fr interface-type dce [Sysname-Serial2/0] fr lmi t392dce 10 fr lmi type Syntax fr lmi type { ansi | nonstandard | q933a } [ bi-direction ] undo fr lmi type View Parameter Interface view ansi: Standard LMI protocol type of ANSI T1.617 Appendix D.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS fr map ip Syntax fr map ip { ip-address [ mask ] | default } dlci-number [ broadcast | [ nonstandard | ietf ] | compression { frf9 | iphc } ]* undo fr map ip { ip-address | default } dlci-number View Parameter Interface view ip-address: Peer IP address. mask: Peer IP mask, used to create a subnet address mapping. default: Creates a default mapping. dlci-number: Local virtual circuit number, in the range 16 to 1007.
fr map ppp Syntax fr map ppp dlci-number interface virtual-template interface-number undo fr map ppp [ dlci-number ] View Parameter Interface view dlci-number: Specific DLCI number in the range of 16 to 1007. virtual-template interface-number: Virtual template interface number in the range of 0 to 1023.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS Description Use the fr switch name interface interface-type interface-number dlci dlci1 interface interface-type interface-number dlci dlci2 command to create a PVC used for frame relay switching. Use the fr switch name command to enter the established frame relay switching view. Use the undo fr switch command to delete a specified PVC. By default, there is no PVC used for frame relay switching.
interface mfr Syntax interface mfr { interface-number | interface-number.subnumber } undo interface mfr { interface-number | interface-number.subnumber } View Parameter System view interface-number: MFR interface number, in the range 0 to 1023. interface-number.subnumber: MFR subinterface number, of which, interface-number is the main interface number, and subnumber is subinterface number. The subnumber argument ranges from 0 to 1023.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS subnumber: Subinterface number, in the range 0 to 1023. p2p: Specifies a point-to-point subinterface. p2mp: Specifies a point-to-multipoint subinterface. Description Use the interface serial command to create subinterface and enter subinterface view. Use the undo interface serial command to delete subinterface. Frame relay subinterface type defaults to p2mp. Example # Configure a point-to-point subinterface Serial 2/0.2.
system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] link-protocol fr nonstandard link-protocol fr mfr Syntax View Parameter Description link-protocol fr mfr interface-number Interface view interface-number: MFR interface number, in the range 0 to 1023. Use the link-protocol fr mfr command to configure the current physical interface as an MFR bundle link and bind it to an MFR interface. By default, an interface is not bound to any MFR interface.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS Use the undo mfr bundle-name command to restore the default. By default, BID is represented by mfr plus frame relay bundle number, for example, mfr4. Each MFR bundle has a BID, which only has local significance. Therefore, the same BID can be used at both ends of the link. Note that: Example ■ In spite of the default BID, you cannot configure a BID as a string in the form of mfr + number.
Parameter Description bytes: Fragment size, ranging from 60 to 1,500 in bytes. Use the mfr fragment-size command to configure the maximum fragment size allowed on a frame relay bundle link. Use the undo mfr fragment-size command to restore the default. By default, the maximum fragment size allowed on a frame relay bundle link is of 300 bytes. The bundle link executes the priority of the fragment size configured on the frame relay interface view after the fragmentation is enabled on MFR interface.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS Example # Set the bundle LID of the multilink frame relay bundle link Serial 2/0 to be bl1. system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] mfr link-name bl1 mfr retry Syntax mfr retry number undo mfr retry View Frame relay interface view Parameter number: The maximum times that a bundle link can resend hello messages, in the range 1 to 5.
Description Use the mfr stateup-respond-addlink command to configure an MFR interface to return ADD_LINK messages and transit the corresponding physical interface to the protocol ADD_SENT state when it is in protocol up state and receives an ADD_LINK request from the peer. Use the undo mfr stateup-respond-addlink command to restore the default. By default, an MFR interface does not respond to ADD_LINK requests received even if it is in protocol up state.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] mfr timer ack 6 mfr timer hello Syntax mfr timer hello seconds undo mfr timer hello View Parameter Description Frame relay interface view seconds: Interval (in seconds) for a bundle link to send hello message, in the range 1 to 180. Use the mfr timer hello command to set the interval for a frame relay bundle link to send hello message.
Example # Set the size of the sliding window of the MFR bundle interface MFR4 to be 8. system-view [Sysname] interface mfr 4 [Sysname-MFR4] mfr window-size 8 shutdown Syntax shutdown undo shutdown View Parameter Description Frame relay switching view None Use the shutdown command to disable the current switching PVC. Use the undo shutdown command to enable the current switching PVC. By default, the switching PVC is enabled.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS Example # Clear all the frame relay dynamic address maps. reset fr inarp reset fr pvc Syntax View Parameter reset fr pvc interface serial interface-number [ dlci dlci-number ] User view interface-number: Interface number. dlci dlci-number: DLCI assigned to an FR interface. The dlci-number argument is in the range 16 to 1007. Note that DLCI 0 through 15 and 1008 through 1023 are reserved for special use and are thus unavailable.
[Sysname-Serial2/0] fr interface-type dte [Sysname-Serial2/0] timer hold 15 x25-template Syntax x25-template name undo x25-template name View Parameter Description DLCI interface view Name: Name of an X.25 template, a string of 1 to 30 characters. Use the x25-template command to apply an X.25 template to a VC. Use the undo x25-template command to remove the X.25 template applied to a VC. Annex G implements X.25 over FR. You can configure X.25 parameters for an X.
CHAPTER 22: FRAME RELAY CONFIGURATION COMMANDS system-view [Sysname] x25 template vofr [Sysname-x25-vofr]
GARP CONFIGURATION COMMANDS 23 display garp statistics Syntax View display garp statistics [ interface interface-list ] Any view Parameter interface interface-list: Specifies an Ethernet port list, in the format of { interface-type interface-number [ to interface-type interface-number ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 port ranges. A port range defined without the to interface-type interface-number portion comprises only one port.
CHAPTER 23: GARP CONFIGURATION COMMANDS defined without the to interface-type interface-number portion comprises only one port. Description Use the display garp timer command to display GARP timers. Note that: Related command: Example ■ If the interface interface-list keyword-argument combination is not specified, this command displays the GARP timer settings of all the ports.
When restoring the default GARP timers, you are recommended to do that on the timers in the order of hold, join, leave, and leaveall. When configuring GARP timers, note that their values are dependent on each other and must be a multiplier of five centiseconds.
CHAPTER 23: GARP CONFIGURATION COMMANDS Each time a device on the network receives a LeaveAll message, it resets its leaveall timer. Therefore, a GARP application entity may send LeaveAll messages at the interval set by its leaveall timer or the leaveall timer on another device on the network, whichever is smaller. Related command: Example display garp timer. # Set the leaveall timer to 100 centiseconds, assuming that the leave timer is 60 centiseconds.
GVRP CONFIGURATION COMMANDS 24 display gvrp statistics Syntax View Parameter Description display gvrp statistics [ interface interface-list ] Any view interface interface-list: Specifies an Ethernet port list, in the format of { interface-type interface-number [ to interface-type interface-number ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 port ranges. A port range defined without the to interface-type interface-number portion comprises only one port.
CHAPTER 24: GVRP CONFIGURATION COMMANDS display gvrp status Syntax View Parameter Description Example display gvrp status Any view None Use the display gvrp status command to display the global enable/disable state of GVRP. # Display the global GVRP enable/disable state. display gvrp status GVRP is enabled gvrp Syntax gvrp undo gvrp View Parameter Description System view, Ethernet interface view, port group view None Use the gvrp command to enable GVRP.
gvrp registration Syntax gvrp registration { fixed | forbidden | normal } undo gvrp registration View Ethernet interface view, port group view Parameter fixed: Sets the registration type to fixed. forbidden: Sets the registration type to forbidden. normal: Sets the registration type to normal. Description Use the gvrp registration command to configure the GVRP registration type on a port. Use the undo gvrp registration command to restore the default. The default GVRP registration type is normal.
CHAPTER 24: GVRP CONFIGURATION COMMANDS
HDLC CONFIGURATION COMMANDS 25 link-protocol hdlc Syntax View Parameter Description link-protocol hdlc Interface view None Use the link-protocol hdlc command to configure HDLC encapsulation on the interface. As a data link layer protocol, HDLC can carry network layer protocols, such as IP and IPX. By default, PPP encapsulation is configured on an interface. Related command: Example timer hold # Configure HDLC encapsulation on interface Serial 2/0.
CHAPTER 25: HDLC CONFIGURATION COMMANDS You should set the same polling interval on both the local and remote devices. Setting it to zero disables link status check. Example # Set the link status polling interval to 100 seconds on interface Serial 2/0.
LAPB AND X.25 CONFIGURATION COMMANDS 26 channel Syntax channel { interface interface-type interface-number [ dlci dlci-number ] | xot ip-address } undo channel { interface interface-type interface-number | xot ip-address } View Parameter X.25 hunt group view interface interface-type interface-number: Specifies an interface by its type and number. dlci dlci-number: Specifies an FR DLCI. The dlci-number argument is in the range of 16 to 1007. xot ip-address: Specifies the IP address of the peer XOT host.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS [Sysname-Serial2/1] quit [Sysname] x25 hunt-group hg1 round-robin [Sysname-hg-hg1] channel interface serial 2/1 dlci 100 # Add the XOT channel with a destination of 10.1.1.2 to hunt group hg1. system-view [Sysname] x25 hunt-group hg1 round-robin [Sysname-hg-hg1] channel xot 10.1.1.
0 broadcasts, 0 multicasts 3 errors, 0 runts, 0 giants 0 CRC, 3 align errors, 0 overruns 0 dribbles, 0 aborts, 0 no buffers 0 frame errors Output:210 packets, 4720 bytes 0 errors, 0 underruns, 0 collisions 0 deferred DCD=UP DTR=UP DSR=UP RTS=UP CTS=UP Table 55 Description on the fields of the display interface command Field Description Link-protocol is X.25 DCE Ietf Current encapsulation protocol of this interface is X.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS Table 55 Description on the fields of the display interface command Field Description window-size 7 Window size of this interface LAPB is 7. max-frame 12056 The maximum length of frame sent by the interface LAPB is 12056 bits. retry 10 Maximum re-sending times of information frame of this interface LAPB is 10. timer Delay value of timers of this interface LAPB, in milliseconds. The unit of T3 is second.
Description Related command: Example Use the display x25 alias-policy command to view X.25 alias table. x25 alias-policy. # Display X.25 alias table.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS Parameter Description hunt-group-name: Hunt group name, a string of 1 to 30 characters. Use the display x25 hunt-group-info command to view the status information of X.25 hunt group. You can use this command to learn the hunt group of the Router and the information about the interfaces and XOT channel inside the hunt group. Related command: Example x25 hunt-group. # Display the status information of X.25 hunt group hg1.
Example # Display the X.25 address mapping table. display x25 map Interface:Serial3/0(protocol status is up): ip address:202.38.162.2 X.121 address: 22 map-type: SVC_MAP VC-number: 0 Facility: ACCEPT_REVERSE; BROADCAST; PACKET_SIZE: I 512 O 512 Table 58 Description on the fields of the display x25 map command Field Description Interface:Serial3/0(protocol status is up) Interface name and protocol status ip address:202.38.162.2 X.121 address: 22 IP address and X.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS Table 59 Description on the fields of the display x25 pad command Field Description UI-INDEX130: User interface index From remote 22 connected to local 11, State: Normal Connection of local X.121 address to remote X.121 address and the current connection state of the PAD. Connection states: Normal: Connection is normal Closing: Connection is being closed Exception: Connection is abnormal X.3Parameters(In): Incoming X.3 parameter X.
Parameter dynamic: Displays VC switching table. static: Displays SVC switching table. Description Use the display x25 switch-table svc command to display SVC switching table. With the keyword static included, the manually configured SVC switching table is displayed. With the keyword dynamic included, the VC switching table is displayed. VC routing table is the link relationship between the node port number and the logic channel number of the VC.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS Note that if no logical channel identifier is specified, the information about all virtual circuits is displayed. There are three types of virtual circuits as follows: ■ An SVC (switched virtual circuit) is set up temporarily by X.25 through calling as required. ■ A PVC is configured manually and exists regardless of the data transmission requirement. ■ When the device works in X.
Send Queue(Current/Max): 1/200 Interface: Serial2/0 PVC 1 State: D3(DCE reset indication) PVC <--> XOT Serial2/0-1.1.1.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS display x25 x2t switch-table Syntax View Parameter Description display x25 x2t switch-table Any view None Use the display x25 x2t switch-table command to display the X2T (X.25 to TCP) switching table. The entry exists when the router sets up an XOT connection and is deleted after the connection is closed. Example # Display the X2T switching table on the router. display x25 x2t switch-table X.
tcp peer ip: 10.1.1.1, peer port: 1998 tcp local ip: 10.1.1.2, local port: 1024 socket keepalive period: 5, keepalive tries: 3 come interface name: Serial1/0-10.1.1.1-1024 go interface name: Serial1/0 lapb max-frame Syntax lapb max-frame n1-value undo lapb max-frame View Parameter Description Interface view n1-value: N1 value of the LAPB parameter in bits, in the range 1096 to 12104. It is the maximum value of a frame expected from the DTE or DCE, 8 times the value of MTU plus the protocol header.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS lapb modulo Syntax lapb modulo { 8 | 128 } undo lapb modulo View Parameter Interface view 8: Modulo 8. 128: Modulo 128. Description Use the lapb modulo command to specify the LAPB modulo. Use the undo lapb modulo command to restore the default. The default is modulo 8. There are two LAPB frame numbering modes: modulo 8 and modulo 128. Each frame (I frame) is numbered in sequence, in the range 0 to the modulo minus 1.
Example # Set the LAPB parameter N2 on Serial 2/0 to 20. system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] lapb retry 20 lapb timer Syntax lapb timer { t1 t1-value | t2 t1-value | t3 t3-value } undo lapb timer { t1 | t2 | t3 } View Parameter Interface view t1 t1-value: Value of timer T1, in the range 2 to 64000 milliseconds. The default is 3000 milliseconds. t2 t2-value: Value of the timer T2, in the range 1 to 32000 milliseconds. The default is 1500 milliseconds.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS View Interface view Parameter k-value: Maximum number of sequence numbered frames to be acknowledged by DTE or DCE during any specified time. If the modulo is 8, the value of the window parameter K ranges 1 to 7. If the modulo is 128, the value of the window parameter K ranges 1 to 127. Description Use the lapb window-size command to configure the LAPB window parameter K. Use the undo lapb window-size command to restore the default.
Example # Configure the link layer protocol and operating mode of Serial 2/0 as LAPB and DCE. system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] link-protocol lapb dce link-protocol x25 Syntax View Parameter link-protocol x25 [ dce |dte ] [ ietf | nonstandard ] Interface view dce: Specifies the DCE mode. dte: Specifies the DTE mode. letf: Encapsulates IP or other network protocols on the X.25 network based on the standard stipulation of the IETF RFC 1356.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS View Parameter Description User view x121-address: Destination X.121 address, a string of 1 to 15 numerical characters. Use the pad command to establish a X.25 PAD connection and logon to the remote site. PAD is similar to telnet. It can establish the connection from the local to the remote through the remote X121 address to carry out configuration operations. Example # Establish a PAD connection to the destination X.121 address 2.
interface-type interface-number: Specifies an interface by its type and number. vc-number: Virtual circuit number of PVC or SVC, in the range 1 to 4095. Description Use the reset x25 command to reset X.25 protocol statistics or X.25 virtual circuit on the specified interface. For PVC number, the command resets the PVC. For SVC number, the command deletes the SVC. Example # Reset the X.25 statistics on Serial 2/0.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS Description Use the translate ip command to configure an X2T forwarding route from IP network to X.25 network. Use the undo translate ip command to remove the route. When a host in the IP network sends packets to the specified IP address and port number of the device, the device will translate these IP packets to X.25 ones and then forward them to the specified X.121 address or PVC in the X.25 network.
to the specified IP address and port number. Packets received from the X.25 model are added with an X2T header to forward through the TCP connection. You can establish mappings between port numbers and X.121 addresses by multiple commands. c Example CAUTION: The maximum number of IP-to-X.25 mappings varies by device. # Configure an X2T forwarding route to forward the packets that are received at the X.121 address 111 to the IP address 10.1.1.1:102.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS adapt this change. Please consult your ISP to learn if the network supports this function before deciding on whether the alias function is enabled or not. For information about x.25 alias, refer to “x25 alias-policy” on page 441. Example # Configure the link-layer protocol on interface Serial2/0 as X.25 and its X.121 address to 20112451, and set two aliases with different match types for it.
Table 65 Description on the user facility option Description Option Description window-size input-window-size output-window-size Carries out the window size negotiation when initiating calls from the X.25 interface. Window size negotiation is a part of flow control parameter negotiation. It needs two parameters: input window size and output window size. When the modulo is 8, the size is in the range 1 to 7; when the modulo is 128, it is in the range 1 to 127.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS Description Use the x25 cug-service command to enable CUG service and suppression policies. Use the undo x25 cug-service command to disable CUG service. By default, CUG service is disabled. After CUG service is enabled, the system suppresses those calls matching the preset conditions.
Description Use the x25 default-protocol command to set the default upper-layer protocol of X.25 for the X.25 interface. Use the undo x25 default-protocol command to restore the default. By default, no upper-layer protocol is specified. During X.25 SVC setup, the called device will check the call user data field of X.25 call request packet. If it is an unidentifiable one, the called device will deny the setup of the call connection.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS Example # Create hunt group hg1 which uses cyclic selection policy. system-view [Sysname] x25 hunt-group hg1 round-robin [Sysname-hg-hg1] x25 ignore called-address Syntax x25 ignore called-address undo x25 ignore called-address View Parameter Description Interface view None Use the x25 ignore called-address command to enable it to ignore the X.121 address of the called DTE when X.25 initiates calls.
Description Use the x25 ignore calling-address command to enable it to ignore the X.121 address of the calling DTE when X.25 initiates calls. Use the undo x25 ignore calling-address command to disable this function. By default, this function is disabled. According to X.25, the calling request packet must carry the address. However, on some occasions, the X.25 calling request does not have to carry the called/calling DTE address in a specific network environment or as is required by the application.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS example, if the DTE with CUG number as 10 wants to call the DTE with CUG number as 20 in the network, the device will first find the map in the map table. If the map is found, change the CUG number of the calling packet to 20 and forward the packet; if not found, refuse to forward the packet. You can specify the suppress rule while configuring CUG map.
Table 66 Description on the attributes or user facilities of X.25 address mapping Description Option Description broadcast Sends broadcasts of network protocol and multicasts of IP to the destination. This option provides support for some routing protocols (such as Routing Information Protocol). closed-user-group group number Specifies a closed user group (CUG) number for the X.25 interface, in the range 0 to 9999. compress Compresses X.25 payloads.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS modifications, you can first delete this address mapping via the undo x25 map command, and then establish one new address mapping. Two or more address mappings with an identical protocol address shall not exist on the same X.25 interface. Related command: Example display x25 map, x25 reverse-charge-accept, x25 call-facility, x25 timer idle, x25 vc-per-map. # Set two address mappings on the X.
n Example ■ The packet numbering mode on the pair of DTE and DCE must be the same ■ You need to run the shutdown and undo shutdown commands on the interface to apply the new configuration. ■ The packet numbering mode of X.25 Layer 3 is different from the frame numbering mode of LAPB (Layer 2 in X.25). When modulo 128 is applied to the DTE/DCE interface with high throughput, it improves only the efficiency of local DTE/DCE interface (point-to-point efficiency) for LAPB; while for Layer 3 in X.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS Normally, the maximum receiving packet length is equivalent to the maximum sending packet. Unless access ISP allows, do not configure these two parameters with different values. Example # Set the maximum receiving packet length and maximum sending packet length on X.25 interface Serial 2/0 to 256 bytes.
By default, no PVC is created. When creating such a PVC, if you do not set the relevant attributes for the PVC, its flow control parameters will be the same as that of the X.25 interface (the flow control parameters on an X.25 interface can be set by the x25 packet-size and x25 window-size commands). As one corresponding address mapping is created along with the PVC, it is unnecessary (or impossible) to establish an address mapping first before creating PVCs.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS The default is 200. When the data traffic is too heavy, you can use this command to extend the receiving queue and sending queue of the X.25 VC to avoid data loss that may affect transmission performance. Note that modifying this parameter would not affect the existing data queue of VC.
x25 response called-address Syntax x25 response called-address undo x25 response called-address View Parameter Description Interface view None Use the x25 response called-address command to enable X.25 call reception packets to carry the address information of the called DTE. Use the undo x25 response called-address command to disable the above function. By default, this function is disabled. According to X.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS According to X.25, the call reception packet of a call may or may not carry an address code group, depending on the specific network requirements. This command enables users to easily specify whether the call reception packet carries the calling DTE address. Related command: Example x25 response called-address, x25 ignore called-address, x25 ignore calling-address. # Specify that the call reception packet of a call sent from the X.
x25 roa-list Syntax x25 roa-list roa-name roa-id&<1-10> undo x25 roa-list roa-name View Parameter System view roa-name: Name of ROA, a string of 1 to 19 characters. roa-id&<1-10>: ROA ID. Its value ranges from 0 to 9999. You can specify 10 IDs for the ROA. Description Use the x25 roa-list command to define ROA list. Use the undo x25 roa-list command to delete ROA list items. By default, no ROA list is defined. You can configure multiple (0 to 20.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS interface interface-type interface-number: Specifies an interface by its type and number. dlci dlci-number: Specifies an DLCI. The dlci-number argument is in the range 16 to 1007. pvc pvc-number2: PVC number on the output interface, and its value ranges from 1 to 4095. option: Attribute option of PVC.
system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] x25 switch pvc 1 interface serial 2/1 pvc 2 # Perform the packet switching from Annex G DLCI PVC1 on the Serial2/1 to PVC1 on the Serial2/0.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS Table 69 X.121 mode matching rules Wildcard characters Matching rules Example Matchable character string .* Matching arbitrary zero or more characters fo.* fo, foo, fot .+ Matching arbitrary one or more characters fo.+ foo, fot, foot Table 70 Input rules of X.
Example # Configure an SVC to forward the packet to the X.121 address 20112451 through interface Serial2/0. system-view [Sysname-Serial2/0] x25 switch svc 20112451 interface serial 2/0 # Configure an SVC to forward the packet to the address 3 through the Annex G DLCI 100 of interface Serial 2/0.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS interfaces or XOT channels in the specified hunt group, to implement the load sharing of X.25 protocol. ■ Related command: Example X.25 hunt group supports source address and destination address replacement. With destination address replacement, you can hide X.121 address of DTE inside the hunt group so that the outside DTE knows only the X.121 address of the hunt group, therefore enhancing network security inside the hunt group.
Table 71 XOT channel parameter option Description Option Description timer seconds Keepalive timer delay of XOT connection. The timer sends the keepalive packet upon timeout to detect the connection availability. Its value ranges from 1 to 3600. retry times Number of maximum retries of sending keepalive. If the number exceeds times, the XOT connection will be disconnected. Its value ranges from 3 to 3600.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS Example # Enable X.25 switching function. system-view [Sysname] x25 switching x25 timer hold Syntax x25 timer hold minutes undo x25 timer hold View Parameter Description Interface view minutes: Value of delay time in minutes, in the range 0 to 1000. Use the x25 timer hold command to set the delay for sending another calling request to a destination to which a previous request failed to reach.
Use the undo x25 timer idle command to restore the default. By default, this value is 0. Note that: Related command: Example ■ When a SVC stays idle (no data are transmitted) for a period specified with the x25 timer idle command, the router will clear this SVC automatically. ■ The x25 timer idle command applies to all the SVCs under the interface.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS Example # Set the restart timer on the X.25 interface Serial 2/0 to 120 seconds. system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] x25 timer tx0 120 x25 timer tx1 Syntax x25 timer tx1 seconds undo x25 timer tx1 View Parameter Description Interface view seconds: Time of calling request (indication) sending timer in seconds, ranging from 0 to 1000.
Description Use the x25 timer tx2 command to set the reset request (indication) timer for DTE (or DCE). Use the undo x25 timer tx2 command to restore the default. By default, the timer on a DTE is 180 seconds, and that on a DCE is 60 seconds. According to X.25, a timer should be started when a DTE sends a reset request (or a DCE sends a reset indication).
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS x25 vc-per-map Syntax x25 vc-per-map count undo x25 vc-per-map View Parameter Description Interface view count: Maximum number of VCs, ranging from 1 to 8. Use the x25 vc-per-map command to set the maximum number of VCs for connections with the same destination device. Use the undo x25 vc-per-map command to restore the default. The default is 1.
Description Use the x25 vc-range command to set the upper and lower limits of X.25 VC range. Use the undo x25 vc-range command to restore their default values. By default, the upper and lower limits of two-way channel are 1 and 1024, of incoming-only channel are both 0, and of outgoing-only channel are both 0. By default, X.25 bans the incoming-only and outgoing-only channel sections and reserves only the double direction channel section (in the range 1 to 1024).
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS Please consult your ISP about the input and output window sizes. Unless supported by the network, do not set these two parameters to different values. Example # Set the input and output window sizes on the X.25 interface Serial 2/0 to 5. system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] x25 window-size 5 5 x25 x121-address Syntax x25 x121-address x.121-address undo x25 x121-address View Interface view Parameter x.
undo x25 pvc pvc-number1 View Parameter Interface view pvc-number1: Number of PVC on the local interface, in the range 1 to 4095. ip-address: IP address of the peer on the XOT connection. interface interface-type interface-number: Specifies an interface by its type and number. pvc pvc-number2: Specifies a PVC on the peer interface. The pvc-number2 argument is in the range 1 to 4095. xot-option: XOT channel parameter option. For specific configuration, see Table 72.
CHAPTER 26: LAPB AND X.25 CONFIGURATION COMMANDS system-view [Sysname] x25 switching [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] ip address 10.1.1.1 255.255.255.0 [Sysname-Ethernet1/0] quit [Sysname] interface serial 2/0 [Sysname-Serial2/0] link-protocol x25 dce ietf [Sysname-Serial2/0] x25 xot pvc 1 10.1.1.
LINK AGGREGATION CONFIGURATION COMMANDS 27 n Link aggregation is not supported on MSR 20 series routers. It is only supported on the interfaces of 16FSW/24FSW modules of MSR 30/MSR 50 series routers. display lacp system-id Syntax View Parameter Description Example display lacp system-id Any view None Use the display lacp system-id command to display the local system ID (also called the actor system ID), which comprises the system LACP priority and the system MAC address. # Display the local system ID.
CHAPTER 27: LINK AGGREGATION CONFIGURATION COMMANDS Example # Display detailed information about link aggregation for port Ethernet 1/1 in a manual aggregation group.
Table 73 Description on the fields of display link-aggregation interface Field Description Flags One-octet LACP state flags field. From the least to the most significant bit, they are represented by A through H as follows: ■ A indicates whether LACP is enabled, 1 for enabled and 0 for disabled. ■ B indicates the timeout control value, 1 for short timeout, and 0 for long timeout. ■ C indicates whether the sending system considers this link to be aggregatable, 1 for true, and 0 for false.
CHAPTER 27: LINK AGGREGATION CONFIGURATION COMMANDS You may find that information about the remote system for a manual link aggregation group is either replaced by none or not displayed at all. This is normal because this type of aggregation group has no knowledge of its partner. Example # Display the link aggregation group summary.
display link-aggregation verbose Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing Flags: A -- LACP_Activity, B -- LACP_timeout, C -- Aggregation, D -- Synchronization, E -- Collecting, F -- Distributing, G -- Defaulted, H -- Expired Aggregation ID: 1, AggregationType: Static, Loadsharing Type: Shar Aggregation Description: System ID: 0x8000, 000f-e219-57c3 Port Status: S -- Selected, U -- Unselected Local: Port Status Priority Oper-Key Flag --------------------------------------
CHAPTER 27: LINK AGGREGATION CONFIGURATION COMMANDS Table 75 Description on the fields of display link-aggregation verbose Field Description Flags One-octet LACP flags field indicates the actor state variables for the port.
Description Use the lacp port-priority command to assign an LACP priority to the port. Use the undo lacp port-priority command to restore the default. By default, port LACP priority is 32768. Related command: Example display link-aggregation interface, display link-aggregation verbose. # Assign LACP priority 64 to a port.
CHAPTER 27: LINK AGGREGATION CONFIGURATION COMMANDS Use the undo link-aggregation group description command to remove the name of the specified link aggregation group. Related command: Example display link-aggregation verbose. # Name link aggregation group 22 as abc.
Description Use the port link-aggregation group command to add the Ethernet port to a link aggregation group (manual or static LACP). Use the undo port link-aggregation group command to remove the Ethernet port from a link aggregation group. Related command: Example display link-aggregation verbose. # Assign port Ethernet 1/0 to link aggregation group 22.
CHAPTER 27: LINK AGGREGATION CONFIGURATION COMMANDS Description Related command: Example Use the reset lacp statistics command to clear statistics about LACP on a specified port or ports. display link-aggregation interface. # Clear statistics about LACP on all ports.
LINK AGGREGATION DEBUGGING COMMANDS 28 debugging lacp packet Syntax debugging lacp packet [ interface interface-type interface-number [ to interface-type interface-number ] ] undo debugging lacp packet [ interface interface-type interface-number [ to interface-type interface-number ] ] View Default Level Parameters User view 1: Monitor level interface-type interface-number: Port type and port number.
CHAPTER 28: LINK AGGREGATION DEBUGGING COMMANDS Table 76 Description on the fields of the debugging lacp packet command Field Description Actor Local port information carried in the protocol packet, which contains the following fields. Partner Collector Terminator Examples ■ tlv: A value of 1 indicates that the information is about the local port. ■ len: The length of the Actor information. ■ sys-pri: The LACP priority of the system where the local port resides.
debugging lacp packet interface ethernet 1/1 *0.60323 Sysname LAGG/8/Pkt: Send LACP Packet via port Ethernet1/1 // The device sent an LACP protocol packet through Ethernet 1/1. *0.60323 Sysname LAGG/8/Pkt: size=128, subtype =1, version=1 // The length of the LACP packet was 128 bytes, the protocol sub type was 1, and the version number was 1.
CHAPTER 28: LINK AGGREGATION DEBUGGING COMMANDS // The device received an LACP protocol packet through Ethernet 1/1. *0.1221133 Sysname LAGG/8/Pkt: size=128, subtype =1, version=1 // The length of the LACP packet was 128 bytes, the protocol sub type was 1, and the version number was 1.
debugging lacp state Syntax debugging lacp state [ interface interface-type interface-number [ to interface-type interface-number ] ] { { actor-churn | mux | partner-churn | ptx | rx } * | all } undo debugging lacp state [ interface interface-type interface-number [ to interface-type interface-number ] ] { { actor-churn | mux | partner-churn | ptx | rx } * | all } View Default Level Parameters User view 1: Monitor level interface-type interface-number: Port type and port number.
CHAPTER 28: LINK AGGREGATION DEBUGGING COMMANDS debugging lacp state interface ethernet 1/2 rx *0.1360830 Sysname LAGG/8/FSM: Port Ethernet1/2: FSM Rx transfers from state RESERVE to state INITIALIZE by the stimulation Begin_True // RX state machine was initiated and then transited to the INITIALIZE state. The event that triggered the transition was the startup of the state machine (Begin_True). *0.
Table 78 Description on the fields of debugging link-aggregation error command Examples Field Description File The program file that incurs a running error Line The number of the line where the error occurs ERROR Error description # Enable debugging for link aggregation errors to view the error information prompted during the system running. debugging link-aggregation error *0.21953 Sysname LAGG/8/lacpErrorEvent: File e:v500d05sp1softwarelacplacp_agm.
CHAPTER 28: LINK AGGREGATION DEBUGGING COMMANDS Examples # Enable debugging for link aggregation events to view the information about the events concerning link aggregation groups.
MODEM CONFIGURATION COMMANDS 29 modem Syntax modem [ both | call-in | call-out ] undo modem [ both | call-in | call-out ] View Parameter User interface view both: Permits both modem call-in and modem call-out. call-in: Permits only modem call-in. call-out: Permits only modem call-out. Description Use the modem command to enable modem call-in and call-out on the interface. Use the undo modem command to disable modem call-in or call-out.
CHAPTER 29: MODEM CONFIGURATION COMMANDS Use the undo modem auto-answer command to disable the connected external modem to answer automatically. In this case, the modem answers only when receiving an AT command sent by software. By default, the connected external modem is set to non-auto answer mode. Use this command depending on the answer state of the connected external modem.
sendat Syntax View Parameter sendat at-string Interface view (The interface can be an asynchronous serial interface, a asynchronous/synchronous serial interface operating in the asynchronous mode, an AUX interface, or an AM interface.) at-string: AT command string. This argument can contain “+++”, “A/” or any string beginning with AT. For detailed description of AT commands, see Table 80 Description Use the sendat command to send AT command to modem manually.
CHAPTER 29: MODEM CONFIGURATION COMMANDS Table 80 Description on common AT commands Command Description Bn Specifies the communication standard to be adopted and the transmission speed. The communication standard can be ITU or Bell. The n argument can be 0, 1, 2/3, 15, or 16. B0 specifies ITU V.22 and sets the transmission speed to 1,200 bps. B1 specifies Bell 212 and sets the transmission speed to 1,200 bps, which is a default setting. B2/B3 disables ITU V23 return path.
Table 80 Description on common AT commands Command Description Nn Specifies the local modem to perform negotiation connected with remote modem of different speed. The n argument is 0 or 1. N0 adopts the communication standard specified by S37 register and ATB commands to perform digital switch during sending or receiving calling. N1 adopts the transmission speed specified by S37 register and ATB commands to negotiate. On Forces a modem to be in the online mode. The n argument can be 0, 1 or 3.
CHAPTER 29: MODEM CONFIGURATION COMMANDS undo service modem-callback View Parameter Description System view None Use the service modem-callback command to enable the callback function of modems. Use the undo service modem-callback command to disable the callback function of modems. By default, the callback function of modems is disabled. When a modem line is active, that is, when the modem detects the carrier or data is being received, you may enable callback.
PORT MIRRORING CONFIGURATION COMMANDS 30 display mirroring-group Syntax View Parameter display mirroring-group { groupid | local } Any view groupid: Port mirroring group number. The value range is 1 to 5 for MSR 20 and BSR 30 series routers and 1 to 10 for MSR 50 series routers. local: Specifies local port mirroring groups. Description Use the display mirroring-group command to display the information about a port mirroring group.
CHAPTER 30: PORT MIRRORING CONFIGURATION COMMANDS undo mirroring-group { groupid | local } View Parameter System view groupid: Port mirroring group number. The value range is 1 to 5 for MSR 20 and BSR 30 series routers and 1 to 10 for MSR 50 series routers. local: Creates a local port mirroring group/removes all local port mirroring groups. Description Use the mirroring-group command to create a port mirroring group.
Note that: Example ■ Layer 2 Ethernet ports, Layer 3 Ethernet interfaces, POS interfaces, and CPOS interfaces can all be source mirroring ports of local port mirroring groups. ■ When you use the undo mirroring-group mirroring-port command to remove source ports from a port mirroring group, make sure the both/inbound/outbound keyword specified matches the actual packet direction of the ports.
CHAPTER 30: PORT MIRRORING CONFIGURATION COMMANDS Example ■ Layer 2 Ethernet ports, Layer 3 Ethernet interfaces, and tunnel interfaces can all be destination mirroring ports of local port mirroring groups. ■ Member ports of an existing port mirroring group cannot be destination ports. # Add port Ethernet1/1 to port mirroring group 1 (a remote destination port mirroring group) as the destination port.
system-view [Sysname] mirroring-group 3 local [Sysname] interface pos 5/1 [Sysname-Pos5/1] mirroring-group 3 mirroring-port both # Add CPOS 6/1 to local port mirroring group 4.
CHAPTER 30: PORT MIRRORING CONFIGURATION COMMANDS
PPP AND MP CONFIGURATION COMMANDS 31 display interface mp-group Syntax View display interface mp-group [ mp-number ] Any view Parameter mp-number: Multilink point to point protocol group (MP-group) interface number, which can be the number of any existing MP-group interface. Description Use the display interface mp-group command to view the information about an existing MP-group interface. If the mp-number argument is not specified, the information about all existing MP-group interfaces is displayed.
CHAPTER 31: PPP AND MP CONFIGURATION COMMANDS Table 82 Description on the fields of the display interface mp-group command Field Description LCP initial Link control protocol (LCP) negotiation is complete Physical Physical type of the interface Last 300 seconds input: 0 bytes/sec 0 packets/sec Average rate of input packets and output packets in the last 300 seconds (in bps) Last 300 seconds output: 0 bytes/sec 0 packets/sec 0 packets input, 0 bytes, 0 drops Total amount of input packets of th
display ppp mp Syntax View display ppp mp [ interface interface-type interface-number ] Any view Parameter interface interface-type interface-number: Specifies an interface by its type and number. Description Use the display ppp mp command to display information and statistics of MP interfaces. Related command: Example link-protocol ppp, ppp mp. # Display the information about MP interfaces configured through the MP-group.
CHAPTER 31: PPP AND MP CONFIGURATION COMMANDS Table 83 Description on the fields of the display ppp mp command Field Description 0 reordered Number of the packets reassembled 0 unassigned Number of the packets waiting for being reassembled 0 interleaved Number of the interleaved packets sequence 0/0 rcvd/sent Received sequence number/sent sequence number The member channels bundled are The following displays all the member channels bundled on this logical channel Serial1/1:15 Up-Time:2005/
vt vt-number: Specifies the number of the VT associated to the virtual access (VA) interface. The user-name argument ranges from 0 to 1023. Description Use the display virtual-access command to view the information about specific VA interfaces. n VA interfaces are created automatically by the system, and they adopt the settings of specific VTs. A VA interface can be removed due to failures of lower layer connections or user intervention.
CHAPTER 31: PPP AND MP CONFIGURATION COMMANDS system-view [Sysname] interface mp-group 3 [Sysname-Mp-group3] interface virtual-template Syntax interface virtual-ethernet number undo interface virtual-ethernet number View Parameter Description System view number: VT number, ranging from 0 to 1023. Use the interface virtual-template command to create a VT or enter VT view. Use the undo interface virtual-template command to remove a VT.
system-view [Sysname] interface serial 1/0 [Sysname-Serial1/0] ip address ppp-negotiate link-protocol ppp Syntax View Parameter Description link-protocol ppp Interface view None Use the link-protocol ppp command to configure the link-layer protocol encapsulated on the interface as PPP. By default, all interfaces except the Ethernet interface are encapsulated with PPP. Example # Configure interface Serial 1/0 to encapsulate PPP.
CHAPTER 31: PPP AND MP CONFIGURATION COMMANDS ppp authentication-mode Syntax ppp authentication-mode { chap | pap } [ [ call-in ] domain isp-name ] undo ppp authentication-mode View Parameter Interface view chap, pap: Authentication modes. Use either mode. call-in: Performs authentication only when receives a call from the remote end. domain isp-name: Domain name during authentication, a string of 1 to 24 characters.
For authentication on a dial-up interface, you are recommended to configure authentication on both the physical interface and the dialer interface. When the physical interface receives a DCC call request, it first initiates PPP negotiation and authenticates the dial-in user, and then passes the call to the upper layer protocol. Related command: Example local-user on page 1940, ppp chap user, ppp pap local-user, ppp pap password, and ppp chap password.
CHAPTER 31: PPP AND MP CONFIGURATION COMMANDS undo ppp chap user View Parameter Description Interface view username: Username of CHAP authentication, a string of 1 to 80 characters, which is the one sent to the peer device to be authenticated. Use the ppp chap user command to configure the user name when performing CHAP authentication. Use the undo ppp chap user command to delete the existing configuration. By default, the user name of the CHAP authentication is blank.
If a PC is connected to the device using PPP, you can use the winipcfg command or the ipconfig/all command to view its DNS server address assigned by the device. A sysname device can provide a primary DNS server address and a secondary DNS server address. Example # Configure the local device to assign primary DNS server address 100.1.1.1, and secondary DNS server address 100.1.1.2 to its peer. system-view [Sysname] interface serial 1/0 [Sysname-Serial1/0] ppp ipcp dns 100.1.1.1 100.1.1.
CHAPTER 31: PPP AND MP CONFIGURATION COMMANDS Parameter Description None Use the ppp ipcp dns request command to enable a device to request its peer for the DNS server address actively through a port. Use the undo ppp ipcp dns request command to restore the default. By default, a device does not request its peer for the DNS server address actively.
Example # Configure the interface serial 1/0 to allocate the IP address 10.0.0.1 to the peer. The peer may accept this assigned address, or use its self-configured address, or have no IP address. system-view [Sysname] interface serial 1/0 [Sysname-Serial1/0] remote address 10.0.0.1 # Configure the interface serial 1/0 to allocate the IP address 10.0.0.1 to the peer. The peer must accept this allocated address and cannot use its self-configured address or go without IP address.
CHAPTER 31: PPP AND MP CONFIGURATION COMMANDS quality every ten LQRs, and brings the link up if the results of three consecutive calculations are higher than the resume-percentage. This means a disabled link must experience 30 keepalive periods before it can go up again. If a large keepalive period is specified, it may take long time for the link to go up. When enabling LQC at both ends of a PPP link, you must set the same parameters on the devices involved.
View Parameter Virtual template interface view, dialer interface view authentication: Performs MP binding according to PPP authentication username. both: Performs MP binding according to both the PPP authentication username and the endpoint descriptor. descriptor: Performs the MP binding according to the endpoint descriptor. Description Use the ppp mp binding-mode command to set the MP binding mode. Use the undo ppp mp binding-mode command to restore the default MP binding mode.
CHAPTER 31: PPP AND MP CONFIGURATION COMMANDS Description Use the ppp mp max-bind command to configure the maximum number of links allowed in an MP bundle. Use the undo ppp mp max-bind command to restore the default value, which is 16. Generally speaking, it is unnecessary to configure this argument, but in case you need to configure it, you must do it under the guidance of technical engineers. Such a configuration may affect the performance of PPP.
min-bind command is configured, the dialer timer idle command no longer takes effect. The argument min-bind-num must be no greater than max-bind-num. Related command: Example dialer threshold on page 324 # Set the minimum number of links contained in an MP bundle to 4.
CHAPTER 31: PPP AND MP CONFIGURATION COMMANDS ppp mp mp-group Syntax ppp mp mp-group number undo ppp mp View Parameter Description Interface view number: MP-group interface number, in the range 0 to 1023. Use the ppp mp mp-group command to add the current interface to the specified MP-group. Use the undo ppp mp mp-group command to remove the current interface from the specified MP-group. This command should be used along with the interface mp-group command.
You can configure the following parameters on the virtual-template: Related command: Example ■ Local IP address and the IP address (or IP address pool) assigned to the peer ■ PPP working parameter ppp mp and ppp mp max-bind. # Specify the VT interface that corresponds to user 1 as 1, and configure the IP address of the VT as 202.38.60.1. system-view [Sysname] ppp mp user user1 bind virtual-template 1 [Sysname] interface virtual-template 1 [Sysname-Virtual-Template1] ip address 202.38.
CHAPTER 31: PPP AND MP CONFIGURATION COMMANDS ppp pap local-user Syntax ppp pap local-user username password { cipher | simple } password undo ppp pap local-user View Parameter Interface view username: Specifies the username sent by the local device when it is authenticated by the peer device via PAP, a string of 1 to 80 characters. cipher: Displays the password in ciphertext. simple: Displays the password in plain text.
Parameter Description seconds: Period of negotiation timeout in seconds. In PPP negotiation, if the local device fails to receive a response from the peer during this period of time, PPP will resend the last packet. This period ranges from 1 to 10 seconds. Use the ppp timer negotiate command to set the PPP negotiation timeout interval. Use the undo ppp timer negotiate command to restore the default value. By default, the PPP negotiation timeout interval is three seconds.
CHAPTER 31: PPP AND MP CONFIGURATION COMMANDS Example # Configure Interface Serial 1/0 to allocate IP address 10.0.0.1 to its peer device. system-view [Sysname] interface serial 1/0 [Sysname-Serial1/0] remote address 10.0.0.1 timer hold Syntax timer hold seconds undo timer hold View Parameter Description Interface view seconds: Time interval for the interface to send keepalive packet in seconds. The value ranges from 0 to 32767 and defaults to 10.
PPP LINK EFFICIENCY MECHANISM CONFIGURATION COMMANDS 32 display ppp compression iphc rtp Syntax View Parameter Description display ppp compression iphc rtp [ interface-type interface-number ] Any view interface-type interface-number: Specifies an interface by its type and number. Use the display ppp compression iphc rtp command to view statistics about IPHC RTP header compression.
CHAPTER 32: PPP LINK EFFICIENCY MECHANISM CONFIGURATION COMMANDS Example ■ When IPHC TCP header compression is applied on an MP link, the compression is performed on the VA (virtual access) interfaces. In this case, you can check the compression information on MP templates, such as VT or Dialer. ■ When IPHC TCP header compression is applied on a normal PPP link, the compression is performed on the physical link.
Parameter Description None Use the ip tcp vjcompress command to enable a PPP interface to compress the VJ TCP header. Use the undo ip tcp vjcompress command to disable the PPP interface to compress the VJ TCP header. By default, the VJ TCP header compression is disabled on PPP interfaces. If a PPP interface is enabled to perform VJ TCP header compression, so should the interface at the opposite end. Example # Enable VJ TCP header compression on interface Serial 1/0.
CHAPTER 32: PPP LINK EFFICIENCY MECHANISM CONFIGURATION COMMANDS ■ Related command: Example If the configuration is applied on a MP bundle, you need to shut down and then bring up all the member interfaces of the MP bundle for the configuration to take effect. ppp compression iphc rtp-connections, ppp compression iphc tcp-connections. # Enable IP header compression on interface Serial 1/0.
ppp compression iphc tcp-connections Syntax ppp compression iphc tcp-connections number undo ppp compression iphc tcp-connections View Parameter Description Interface view number: The maximum connection number of TCP header compression. The value ranges from 3 to 256. Use the ppp compression iphc tcp-connections command to configure the maximum number of connections in TCP header compression. Use the undo ppp compression iphc tcp-connections command to restore the default value, which is 16.
CHAPTER 32: PPP LINK EFFICIENCY MECHANISM CONFIGURATION COMMANDS Use the undo ppp compression stac-lzs command to disable STAC-LZS compression on the current interface. By default, this compression is disabled. STAC-LZS compression is supported on the current version of system. You can configure STAC-LZS compression on an interface to reduce size of data frames through lossless compression.
system-view [Sysname] interface virtual-template 1 [Sysname-Virtual-Template1] ppp mp lfi ppp mp lfi delay-per-frag Syntax ppp mp lfi delay-per-frag time undo ppp mp lfi delay-per-frag View Parameter Description Virtual template interface view, MP-group interface view, dialer interface view time: Maximum time delay of LFI fragment in ms, in the range 1 to 1000. Use the ppp mp lfi delay-per-frag command to set the maximum time delay for transmitting a LFI fragment.
CHAPTER 32: PPP LINK EFFICIENCY MECHANISM CONFIGURATION COMMANDS
PPPOE SERVER CONFIGURATION COMMANDS 33 display pppoe-server session Syntax View Parameter display pppoe-server session { all | packet } Any view all: Displays all information about each PPPoE session. packet: Displays statistics about the packets on each PPPoE session. Description n Example Use the display pppoe-server session command to view the status and statistics of PPPoE session. The support for the display pppoe-server session packet command varies with device models.
CHAPTER 33: PPPOE SERVER CONFIGURATION COMMANDS Table 85 Description on the fields of the display pppoe-server session packet command Field Description InP In Packets, Packages received InO In Octets, Bytes received InD In Discards, Received and then discarded packages OutP Out Packets, Packages sent OutO Out Octets, Bytes sent OutD Out Discard, Discarded packages that might be sent pppoe-server bind Syntax pppoe-server bind virtual-template number undo pppoe-server bind View Parameter
Use the undo pppoe-server log-information off command to enable the function. By default, the PPPoE server displays the PPP log information. Displaying too much log information can affect the performance of the device and can be a nuisance to user during configuration. You can use this command to disable the PPPoE server to display the PPP log information. Example # Disable the PPPoE server to display PPP log information.
CHAPTER 33: PPPOE SERVER CONFIGURATION COMMANDS Description Use the pppoe-server max-sessions remote-mac command to set the maximum number of PPPoE sessions that can be established by the system with regard to a peer MAC address. Use the undo pppoe-server max-sessions remote-mac command to restore the default configuration. By default, the value of number is 100. Example # Set the maximum number of PPPoE sessions that can be established by the system with regard to a peer MAC address to 50.
virtual-template number: Specifies a virtual template interface. Description Example Use the reset pppoe-server command to terminate a PPPoE session on the server side. # Terminate the session established on virtual template interface 1 on the server side.
CHAPTER 33: PPPOE SERVER CONFIGURATION COMMANDS
PPPOE CLIENT CONFIGURATION COMMANDS 34 display pppoe-client session Syntax View Parameter display pppoe-client session { packet | summary } [ dial-bundle-number number ] Any view packet: Displays the statistics of PPPoE session data packet. summary: Displays the summary of PPPoE session. dial-bundle-number number: Displays the statistics of the specified PPPoE session, in the range 1 to 255. If PPPoE session is not specified, the system will display the statistics of all PPPoE sessions.
CHAPTER 34: PPPOE CLIENT CONFIGURATION COMMANDS 1 2 164 304 6126 9886 0 0 83 156 1069 2142 0 0 Table 87 Description on the fields of display pppoe-server session packet Field Description ID PPPoE session ID InP In Packets: number of received packets InO In Octets: number of received octets InD In Discards: number of illegal packets received and discarded OutP Out Packets: number of packets sent OutO Out Octets: number of octets sent OutD Out Discards: number of illegal packets se
Ethernet interface, this dialer bundle can also not be added to the Ethernet interface used by PPPoE Client. When PPPoE session works in permanent online mode, and the physical lines go UP, the device will immediately initiate PPPoE call to establish PPPoE session. This PPPoE connection will exist constantly unless users use the command undo pppoe-client to delete PPPoE session.
CHAPTER 34: PPPOE CLIENT CONFIGURATION COMMANDS n Example The difference between the reset pppoe-client command and the undo pppoe-client command lies in: the former only temporarily terminates a PPPoE session, while the latter permanently deletes a PPPoE session. # Clear all PPPoE sessions, and re-initiate PPPoE session later.
PPP DEBUGGING COMMANDS 35 debugging ppp Syntax debugging ppp { all [ interface interface-type interface-number ] | bcp | cbcp packet [ interface interface-type interface-number ] | ccp | chap | compression iphc { rtp | tcp } | core event [ interface interface-type interface-number ] | ip packet [ interface interface-type interface-number ] | ipcp | ipv6 | ipv6cp | ipx | ipxcp | lcp | lqc | mp | mpls-multicast packet [ interface interface-type interface-number ] | mpls-unicast packet [ interface interface-
CHAPTER 35: PPP DEBUGGING COMMANDS ipv6cp: IPv6 Control Protocol (IPv6CP) debugging. ipx: IPX debugging. ipxcp: IPX Control Protocol (IPXCP) debugging. lcp: PPP Link Control Protocol (CCP) debugging. lqc: PPP link quality control (LQC) debugging. mp: MP debugging. mpls-multicast: MPLS multicast debugging. mpls-unicast: MPLS unicast debugging. mplscp: MPLS Control Protocol (MPLSCP) debugging. osi-npdu: OSI NPDU debugging. osicp: OSI Control Protocol (OSICP) debugging. pap: PAP debugging.
Table 88 Description on the fields of the debugging ppp event command Field Description Timeout(T0+,T0-) A timeout event occurred. T0+ indicates that the restart counter is greater than 0; thus, retransmission is required. T0indicates that the restart counter is less than 0; thus, retransmission is not needed. Receive-Configure-Request(RCR+,RCR-) A Configure-Request packet was received from the peer. RCR+ indicates that the request is acceptable and a Configure-Ack should be sent back.
CHAPTER 35: PPP DEBUGGING COMMANDS Table 89 Description on the fields of the debugging ppp ipcp command Examples Field value Field name Description 131 Secondary DNS Server Address Requested or allocated a secondary DNS server. 132 Secondary NBNS Server Address Requested or allocated a secondary NBNS server. # Two devices are connected using Serial interfaces. Enable PPP on the two interfaces. PPP negotiation starts between them. Enable PPP debugging. *0.
(the TLV length is four bytes and the desired MRRU is 05dc); and the endpoint discriminator of MP (the TLV length is 9 bytes, and the value is 01fa4d432c8451.
CHAPTER 35: PPP DEBUGGING COMMANDS
BRIDGING CONFIGURATION COMMANDS 36 bridge aging-time Syntax bridge aging-time seconds undo bridge aging-time View System view Parameters seconds: Aging time of dynamic bridge table entries, in seconds, with an effective range of 10 to 1000000. Description Use the bridge aging-time command to configure the aging time of dynamic bridge table entries. Use the undo bridge aging-time command to restore the default setting. By default, the aging time of dynamic bridge table entries is 300 seconds.
CHAPTER 36: BRIDGING CONFIGURATION COMMANDS Example # Enable bridge set 1. system-view [Sysname] bridge 1 enable bridge bridging Syntax bridge bridge-set bridging { ip | ipx | others } undo bridge bridge-set bridging { ip | ipx | others } View Parameters System view bridge-set: Bridge set number, an integer in the range of 1 to 255. ip: Specifies the Internet protocol (IP). ipx: Specifies the internetwork packet exchange (IPX) protocol. others: Specifies other protocols than IP and IPX.
Description Use the bridge enable command to enable the bridging functionality. Use the undo bridge enable command to disable the bridging functionality. By default, bridging is disabled. n Example Other related configurations can take effect only if the bridging and bridge set features are enabled. This command is required for bridge configuration. # Enable bridging.
CHAPTER 36: BRIDGING CONFIGURATION COMMANDS deny: Discards frames whose source address or destination address is the specified address on all interfaces or the specified interface. permit: Forwards frames whose source address or destination address is the specified address on all interfaces or the specified interface. interface: Specifies an outbound interface. interface-type interface-number: Specifies an interface by its name and number. dlsw: Specified that the outbound interface is a DLSw module.
bridge routing-enable Syntax bridge routing-enable undo bridge routing-enable View System view Parameters None Description Use the bridge routing-enable command to enable bridge routing. Use the undo bridge routing-enable command to disable bridge routing. By default, bridge routing is disabled. Routing of a particular protocol can be implemented only if bridge routing is enabled. Example # Enable bridge routing.
CHAPTER 36: BRIDGING CONFIGURATION COMMANDS promiscuous operation mode, an Ethernet interface forwards all correct frames, without filtering any MAC address. ■ Bridging is possible only between interfaces in the same bridge set. As shown above, after being added into bridge set 1, Ethernet1/0 automatically works in the promiscuous operation mode. When working in the promiscuous operation mode, an Ethernet interface forwards all correct frames, without filtering any MAC address.
Table 90 Description on the fields of the display bridge address-table command Field Description Set Bridge set number Flag Flag can be any of the four values: P--PERMIT N--DENY D--DYNAMIC S--STATIC P: The permit rule is used for MAC address filtering N: The deny rule is used for MAC address filtering D: This entry is a dynamic entry S: This entry is a static entry Aging-time The aging time of bridge table entries Receive Number of received frames destined for this MAC address Send Number of
CHAPTER 36: BRIDGING CONFIGURATION COMMANDS Table 91 Description on the fields of the display bridge information command n Field Description configure Configuration properties of this bridge set.
0 eth2, 0 snap, 0 dlsw, 0 other, 0 vlan; Send way: 0 Discard: 0 0 0 0 0 0 0 broadcast, 0 fast, 0 other by import state, for local frame , by mac table, by import filter, by outport filter, by ip filter , other Table 92 Description on the fields of the display bridge traffic command Field Description Input Indicates what kinds of and how many frames were received on this interface.
CHAPTER 36: BRIDGING CONFIGURATION COMMANDS display interface bridge-template 1 Bridge-template1 current state :UP Line protocol current state :UP Description : Bridge-template1 Interface The Maximum Transmit Unit is 1500 Internet Address is 2.0.0.
broadcast: Specifies to allow bridging of broadcasts over this FR-to-bridging mapping. Description Use the fr map bridge command to create an FR-to-bridging mapping on the specified virtual circuit. Use the undo fr map bridge command to remove an FR-to-bridging mapping. By default, no FR-to-bridging mappings exist. Related command: Example display fr map-info on page 376. # Create an FR-to-bridging mapping on the virtual circuit by the DLCI of 50 on Serial2/0.
CHAPTER 36: BRIDGING CONFIGURATION COMMANDS mac-address (bridge-template interface view) Syntax mac-address mac-address undo mac-address View Bridge-template interface view Parameters mac-address: MAC address, in the format of H-H-H Description Use the mac-address command to configure a MAC address for the current bridge-template interface. Use the undo mac-address command to configure the configured MAC address of the current bridge-template interface.
By default, bridging over a PVC is disabled. If you configure both the map bridge virtual-ethernet and map bridge-group commands, only the map bridge virtual-ethernet takes effect. Example # Enable bridging over PVC 32/102.
CHAPTER 36: BRIDGING CONFIGURATION COMMANDS Example # Clear the traffic statistics information about bridge set 1. reset bridge traffic bridge-set 1 x25 map bridge Syntax x25 map bridge x121-address x.121-address broadcast undo x25 map bridge x121-address x.121-address View Parameters Interface view x121-address x.121-address: X.121 address of the peer host. broadcast: Enables bridging of broadcasts to the X.25 destination. Description Use the x25 map bridge command to create an X.
ISDN CONFIGURATION COMMANDS 37 dialer isdn-leased (ISDN BRI interface view) Syntax dialer isdn-leased { 128k | number } undo dialer isdn-leased { 128k | number } View Parameter ISDN BRI interface view 128k: 128 kbps ISDN leased line connection. number: 64 kbps ISDN leased line connection. It can be 0 for the first B channel or 1 for the second B channel. Description Use the dialer isdn-leased 128k command to configure 128 kbps leased line connection.
CHAPTER 37: ISDN CONFIGURATION COMMANDS display isdn active-channel Syntax View Parameter Description display isdn active-channel [ interface interface-type interface-number ] Any view interface-type interface-number: Specifies an interface by its type and number. Use the display isdn active-channel command to view the active call information on ISDN interfaces. If no interface has been specified, the system will display the active call information on all the ISDN interfaces.
Description Use the display isdn call-info command to view the current state of ISDN interfaces. If no interface has been specified, the system will display the current states of all the ISDN interfaces. Executing this command will output the state of each layer of the ISDN protocol on one or all interfaces, including the information of Q.921, Q.931 and CC modules. You may make troubleshooting based on the output information. Example # Display the current state of ISDN interface 2/0.
CHAPTER 37: ISDN CONFIGURATION COMMANDS Table 95 Description on the fields of the display isdn call-info command Field Description CCIndex Index of the call at the CC layer State Current state of the layer 3 link of the BRI interface.
Out Out In In 10660016 10660022 660016 660022 10660016 10660022 03-07-05 03-07-05 03-07-05 03-07-05 11:23:01 11:23:01 11:23:01 11:23:01 03-07-05 03-07-05 03-07-05 03-07-05 11:23:04 11:23:04 11:23:04 11:23:04 3 3 3 3 Table 96 Description on the fields of the display isdn call-record command Field Description Call Type Call type: incoming or outgoing Calling Number Calling number Called Number Called number Start Time Time at which the call is set up Stop Time Time at which the call is
CHAPTER 37: ISDN CONFIGURATION COMMANDS T321 T322 30 4 Table 97 Description of the fields of the display isdn parameters command Item Description T200(sec) Retransmit-timer (in seconds) of the L2 protocol of ISDN T201(sec) TEI test request retransmit-timer (in seconds) of the L2 protocol of ISDN T202(sec) TEI request retransmit-timer (in seconds) of the ISDN L2 protocol T203(sec) The maximum link idle time (in seconds) of the ISDN L2 protocol N200 The maximum number of retransmissions K(
SPID timer: 30 seconds SPID resend: 1 times Table 98 Description on the fields of the display isdn spid interface command Field Description SPID Type SPID Type, which can be NIT, STATIC (having only the L3 initialization process), or AUTO (including both the negotiation and the L3 initialization) SPID B1 SPID value of the BRI interface B1 channel. SPID Num SPID value of the BRI interface.
CHAPTER 37: ISDN CONFIGURATION COMMANDS the router selected for a call is different from the one indicated by the exchange, the one indicated by the exchange is used for communication. Configured with the isdn bch-local-manage exclusive command, the router operates in exclusive local B-channel management mode. In this mode, the B channel selected by the router must be adopted for communication.
Parameter Description caller-number: Caller number that an incoming ISDN call can carry, which is a character string of 1 to 24 characters. Use the isdn caller-number command to configure the range of the numbers that the router can receive. Use the undo isdn caller-number command to delete the configured caller number. Example # Configure the router to receive only the incoming calls from the caller numbers with 400.
CHAPTER 37: ISDN CONFIGURATION COMMANDS Parameter check-index: Called number or subaddress checking index, which is in the range of 1 to 3. called-party-number: Called number, a string of 1 to 20 digits. subaddress: Subaddress, which is a string of digits and/or case-insensitive English letters and is 1 to 20 characters in length. Description Use the isdn check-called-number command to configure the called number or subaddress that the system should verify when receiving a digital call.
Example # Enable ISDN call checking and set the time to launch ISDN call checking to 08:30. system-view [Sysname] isdn check-time 8:30 isdn crlength Syntax isdn crlength call-reference-length undo isdn crlength View ISDN interface view Parameter call-reference-length: ISDN call reference length, which can be one or two bytes. Description Use the isdn crlength command to set length of the call reference used when a call is placed on an ISDN interface.
CHAPTER 37: ISDN CONFIGURATION COMMANDS undo isdn ignore connect-ack View Parameter Description ISDN interface view None Use the isdn ignore connect-ack command to configure the router to switch the ISDN protocol state to ACTIVE to start the data and voice service communications after sending a CONNECT message without having to wait for a CONNECT ACK message. Use the undo isdn ignore connect-ack command to restore the default setting.
By default, HLC information element is carried in SETUP messages when placing voice calls. n Example ■ In the event that the router is communicating with an ISDN exchange, its settings must be the same as those on the exchange. ■ You are not allowed to configure this command on an ISDN interface if there is still a call on it. This command can take effect only if it is configured when there is no call on the interface.
CHAPTER 37: ISDN CONFIGURATION COMMANDS Example # Disable ISDN to carry the LLC information element in the SETUP messages for the voice calls placed on the interface BRI 1/0.
executing the shutdown command, configure the command, and then enable the interface by executing the undo shutdown command. The operations, however, will lead to the disconnection of the call existing on the interface. You can configure this command on an interface only when the ISDN protocol running on the interface is DSS1, Q.SIG, NI2, or ETSI. Example # Ignore the Sending Complete Information Element in the received SETUP messages.
CHAPTER 37: ISDN CONFIGURATION COMMANDS Description Use the isdn L3-timer command to configure the duration of an ISDN protocol L3 timer. Use the undo isdn L3-timer command to restore the default duration of the ISDN L3 timer on the interface. You can view the default durations of the L3 timers in the ISDN protocol by executing the display isdn parameters command. Example # Set the duration of the L3 timer T301 on the interface BRI 1/0 to 160 seconds.
reserved. The following table lists the possible number types and code schemes. For more information, see the related protocol reference manual.
CHAPTER 37: ISDN CONFIGURATION COMMANDS Table 100 Types and code schemes of ISDN numbers Protocol Field (Bit) value Type 8 NI NTT QSIG 7 Definition Code scheme 6 5 4 3 2 1 1 1 0 Abbreviated number 1 1 1 Reserved for extension 0 0 0 0 Unknown 0 0 0 1 ISDN/telephony numbering plan (Recommendation E.164) 0 0 1 1 Data numbering plan (Recommendation X.121) 0 1 0 0 Telex numbering plan (Recommendation F.
Table 100 Types and code schemes of ISDN numbers Protocol Field (Bit) value Type 8 n Definition Code scheme 7 6 5 4 3 2 1 0 0 1 1 0 0 1 Level 2 regional number in private numbering plan 0 1 0 1 0 0 1 Level 1 regional number in private numbering plan 0 1 1 1 0 0 1 PISN specific number in private numbering plan 1 0 0 1 0 0 1 Level 0 regional number in private numbering plan The undefined bits in all the protocols are reserved for other purposes.
CHAPTER 37: ISDN CONFIGURATION COMMANDS Table 101 Set the type and code scheme of ISDN numbers Operation Command Remove the number type and code scheme for the calling numbers in incoming calls undo isdn number-property calling in Set a number type and code scheme for the calling numbers in outgoing calls isdn number-property number-property calling out Remove the number type and code scheme for the calling numbers in outgoing calls undo isdn number-property calling out Set a number type and c
Parameter digits: Maximum number of digits that can be sent each time in overlap-sending mode, in the range 1 to 15. The default is 10. Description Use the isdn overlap-sending command to set the system to send the called number information in the overlap mode on the ISDN interface. Use the undo isdn overlap-sending command to set the system to send the called information in full mode.
CHAPTER 37: ISDN CONFIGURATION COMMANDS Example # Configure the slide window size on the interface CE1/PRI 1/0 to 10.
By default, both BRI and PRI interfaces run ISDN protocol DSS1. You are allowed to configure: ■ ANSI ISDN on BRI and T1 PRI interfaces; ■ AT&T ISDN on T1 PRI interfaces; ■ DSS1 ISDN on BRI, E1 PRI, and T1 PRI interfaces; ■ ETSI ISDN on BRI, E1 PRI, and T1 PRI interfaces; ■ NI (National ISDN) on BRI interfaces; ■ NI2 (National ISDN) on T1 PRI interfaces; ■ QSIG ISDN on E1 PRI and T1 PRI interfaces; ■ NTT ISDN on BRI and T1 PRI interfaces.
CHAPTER 37: ISDN CONFIGURATION COMMANDS system-view [Sysname] interface bri 2/0 [Sysname-Bri2/0] isdn q921-permanent isdn send-restart Syntax isdn send-restart undo isdn send-restart View Parameter Description System view None Use the isdn send-restart command to enable PRI interfaces to actively send ISDN RESTART messages. Use the undo isdn send-restart command to disable PRI interfaces to actively send ISDN RESTART messages.
By default, a BRI interface does not originate a SPID negotiation request unless triggered by a call. This command applies only on the BRI interface running the NI protocol. Example # Manually trigger a new SPID negotiation request on the interface BRI 1/0.
CHAPTER 37: ISDN CONFIGURATION COMMANDS View Parameter Description ISDN BRI interface view seconds: Duration of the SPID timer, which is in the range of 1 to 255 seconds, and defaults to 30 seconds. Use the isdn spid timer command to set the duration of the timer TSPID for an NI-compliant BRI interface to seconds. Use the undo isdn spid timer command to restore the default duration of the timer TSPID for the NI-compliant BRI interface.
Generally, as for the BRI interface adopting the ISDN NI protocol, you need to negotiate or initialize SPID before originate a call. During negotiation, SPCS may send multiple SPIDs and carry the service types supported by the SPID, therefore, the router needs to choose a proper SPID according to the local service type. This command can only be applied on the BRI interface adopting NI protocol. Example # Set the service type supported by BRI interface to data and voice.
CHAPTER 37: ISDN CONFIGURATION COMMANDS undo isdn spid1 View Parameter ISDN BRI interface view spid: String of 1 to 20 digits. LDN: Local dialing number, a string of 1 to 30 digits. Description Use the isdn spid1 command to configure SPID information for the B1 channel on the NI-compliant BRI interface. Use the undo isdn spid1 command to remove the SPID information of the B1 channel on the interface.
Parameter spid: String of 1 to 20 digits. LDN: Local dialing number, a string of 1 to 30 digits. Description Use the isdn spid2 command to configure SPID information for the B1 channel on an NI-compliant BRI interface. Use the undo isdn spid2 command to remove the SPID information of the B1 channel on the interface. On a BRI interface compliant with the ISDN protocol in North America, calls can be placed only after the SPID negotiation or initialization is finished.
CHAPTER 37: ISDN CONFIGURATION COMMANDS start: Starts counting. stop: Stops counting. Description Use the isdn statistics command to have the system make statistics on the information received and transmitted at an ISDN interface. By default, no statistics is made on the information transmitted and received at interfaces. Use the isdn statistics start command in the view of an interface to start making statistics on the messages received and transmitted at the interface.
undo isdn two-tei View Parameter Description BRI interface view None Use the isdn two-tei command to have the router requests the connected switch for a new TEI value before calling for a B channel. Use the undo isdn two-tei command to restore the default TEI handling practice on the BRI interface. This command applies in the situation where the switch with which the router works is an ISDN NI compliant switch (the DMS100 for example) in North America.
CHAPTER 37: ISDN CONFIGURATION COMMANDS n Example ■ After you specify a BSV interface operating on the network side to be in permanent active state on physical layer using the permanent-active command, no deactivating request is sent to physical layer. In this case, the interface remains in the active state if it is up and the physical link operates smoothly. ■ The permanent-active command functions differently comparing with the isdn q921-permanent command.
system-view [Sysname] interface bri 2/0 [Sysname-Bri2/0] isdn protocol-mode network [Sysname-Bri2/0] power-source shutdown Syntax shutdown undo shutdown View ISDN interface view Parameters None Description Use the shutdown command to shut down an ISDN interface. Use the undo shutdown command to bring up an ISDN interface. By default, an ISDN interface is up. Examples # Shut down BRI 2/0.
CHAPTER 37: ISDN CONFIGURATION COMMANDS
MSTP CONFIGURATION COMMANDS 38 active region-configuration Syntax View active region-configuration MST region view Parameters None Description Use the active region-configuration command to activate your MST region configuration. When you carry out this command, MSTP will replace the currently running MST region-related parameters with the parameters you have just configured, and will perform spanning tree computing again.
CHAPTER 38: MSTP CONFIGURATION COMMANDS mapping table and the same MSTP revision level setting. A device will not be in a different region if it is different in any of these three settings. You can view all the MST region-related configuration information by using this command and determine the MST region the device is currently in, or check whether the MST region configuration is correct.
Based on the MSTP status information and statistics information, you can analyze and maintain the network topology or check whether MSTP is working normally. Note that: ■ If you do not specify any MST instance ID or port list, this command will display the MSTP information on all ports. The displayed information is sequenced by MST instance ID and by port name in each MST instance. ■ If you specify an MST instance ID, this command will display the MSTP information on all ports in that MST instance.
CHAPTER 38: MSTP CONFIGURATION COMMANDS display stp instance 0 interface Ethernet 1/1 to Ethernet 1/4 GigabitEthernet 1/1 to GigabitEthernet 1/4 brief MSTID Port Role STP State Protection 0 Ethernet1/1 ALTE DISCARDING LOOP 0 Ethernet1/2 DESI FORWARDING NONE 0 Ethernet1/3 DESI FORWARDING NONE 0 Ethernet1/4 DESI FORWARDING NONE 0 GigabitEthernet1/1 DESI FORWARDING NONE 0 GigabitEthernet1/2 DESI FORWARDING NONE 0 GigabitEthernet1/3 DESI FORWARDING NONE 0 GigabitEthernet1/4* DESI FORWARDING NONE
Table 104 Description on the fields of the display stp abnormal-port command Field Description MSTID MST instance ID Blocked Port Name of blocked port, which corresponds to the related MST instance Reason Reason that caused abnormal blocking of the port.
CHAPTER 38: MSTP CONFIGURATION COMMANDS Parameters instance instance-id: Displays the historic port role calculation information of a particular spanning tree instance. The minimum value of instance-id is 0, representing the common internal spanning tree (CIST), and the maximum value of instance-id depends on device model. Description Use the display stp history command to view the historic port role calculation information of the specified spanning tree instance or all spanning tree instances.
Description Related commands: Examples Use the display stp region-configuration command to view the currently effective configuration information of the MST region, including the region name, revision level, and user-configured VLAN-to-instance mappings. stp region-configuration. # View the currently effective MST region configuration information.
CHAPTER 38: MSTP CONFIGURATION COMMANDS Table 108 Description on the fields of the display stp root command Field Description Root Port Root port name (displayed only if a port of the current device is the root port of multiple instances) display stp tc Syntax View display stp [ instance instance-id ] tc Any view Parameters instance instance-id: Displays the statistics of TC BPDUs (also known as TCN BPDUs) received and sent by all ports in a particular spanning tree instance.
instance Syntax instance instance-id vlan vlan-list undo instance instance-id [ vlan vlan-list ] View Parameters MST region view instance-id: MST instance ID, in the range of 0 to 15. vlan-list: VLAN list. You can specify multiple VLANs or VLAN ranges by providing this argument in the form of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where, vlan-id is in the range of 1 to 4094, and &<1-10> means that you can specify up to 10 VLANs or VLAN ranges for this argument.
CHAPTER 38: MSTP CONFIGURATION COMMANDS Parameters name: Name of the MST regions, a string of 1 to 32 characters. Description Use the region-name command to configure the MST region name of your device. Use the undo region-name command to restore the MST region name to the default setting. By default, the MST region name of a device is its MAC address.
revision-level Syntax revision-level level undo revision-level View MST region view Parameters level: MSTP revision level, in the range of 0 to 65535. The system default is 0. Description Use the region-level command to configure the MSTP revision level of your device. Use the undo region-level command to restore the MSTP revision level to the default setting.
CHAPTER 38: MSTP CONFIGURATION COMMANDS Related commands: Examples ■ Configured in system view, the setting is effective for the device globally; configured in Ethernet interface view, the setting is effective on the current port only; configured in port group view, the setting is effective on all the ports in the port group.
system-view [Sysname] stp bpdu-protection stp bridge-diameter Syntax stp bridge-diameter bridge-number undo stp bridge-diameter View System view Parameters bridge-number: Specifies the switched network diameter, in the range of 2 to 7. Description Use the stp bridge-diameter command to specify the network diameter, namely the maximum number of stations between any two terminal devices on the switched network.
CHAPTER 38: MSTP CONFIGURATION COMMANDS dot1s: Configures the port(s) to receive and send only standard-format (802.1s-compliant) MSTP BPDUs. legacy: Configures the port(s) to receive and send only compatible-format MSTP BPDUs. Description Use the stp compliance command to configure the mode the port(s) will use to recognize and send MSTP BPDUs. Use the undo stp compliance command to restore the default. The default mode is auto, namely all ports recognize the BPDU format automatically.
Use the undo stp config-digest-snooping command to disable Digest Snooping. The feature is disabled by default. Notice that: Examples ■ You need to enable this feature both globally and on ports connected to other vendors’ devices to make it take effect. It is recommended to enable the feature on all associated ports first and then globally, making all configured ports take effect at the same time to minimize the impact, and disable the feature globally to disable it on all associated ports.
CHAPTER 38: MSTP CONFIGURATION COMMANDS Examples ■ Configured in Ethernet interface view, the setting is effective on the current port only; configured in port group view, the setting is effective on all the ports in the port group. ■ If you set instance-id to 0, you are setting the path cost of the port in the CIST. The path cost setting of a port can affect the role selection of the port.
■ Examples Normally, configuration BPDUs from other devices cannot reach an edge port because it does not connect to any other device. Before the BPDU guard function is enabled, if a port receives a configuration BPDU, the port is working actually as a non-edge port even if you have configured in as an edge port. # Configure port Ethernet 1/1 as a non-edge port.
CHAPTER 38: MSTP CONFIGURATION COMMANDS Description Use the stp max-hops command to set the maximum hops of the MST region on the device. Use the undo stp max-hops command to restore the maximum hops to the default setting. By default, the maximum hops of an MST region is 20. In the CIST and MST instances, the maximum hops setting configured on the regional root bridge determines the maximum network diameter supported by the MST region.
Examples # Carry out mCheck on port Ethernet 1/1. system-view [Sysname] interface Ethernet 1/1 [Sysname-Ethernet1/1] stp mcheck stp mode Syntax stp mode { stp | rstp | mstp } undo stp mode View Parameters System view stp: Configures the MSTP-compliant device to work in STP-compatible mode. rstp: Configures MSTP-compliant device to work in RSTP mode. mstp: Configures MSTP-compliant device to work in MSTP mode.
CHAPTER 38: MSTP CONFIGURATION COMMANDS By default, No Agreement Check is disabled. n Examples The No Agreement Check feature can take effect only on the root port or alternate port. # Enable No Agreement Check on Ethernet 1/1.
Table 110 Link speed vs. path cost Link speed Duplex state 802.1D-1998 IEEE 802.
CHAPTER 38: MSTP CONFIGURATION COMMANDS Parameters auto: Specifies MSTP detects automatically whether the current port connects to a point-to-point link. force-false: Specifies the current port to connect to a non-point-to-point link. force-true: Specifies the current port to connect to a point-to-point link. Description Use the stp point-to-point command to specify whether the current port connects to a point-to-point link.
instance instance-id: Enables output of port state transition information for the specified instance. The minimum value of instance-id is 0, representing the CIST, and the maximum value of this argument depends on the specific device model. Description Use the stp port-log command to enable output of port state transition information for the specified instance or all instances.
CHAPTER 38: MSTP CONFIGURATION COMMANDS Examples ■ If you set instance-id to 0, you are setting the priority of the port in the CIST. The priority of a port can affect the role selection of the port in the specified MST instance. ■ Setting different priorities for the same port in different MST instances allows different VLAN traffic flows to be forwarded along different physical links, thus to enable per-VLAN load balancing.
stp region-configuration Syntax stp region-configuration undo stp region-configuration View System view Parameters None Description Use the stp region-configuration command to enter MST region view. Use the undo stp region-configuration command to restore the default MST region configurations. By default, the default settings are used for all the three MST region parameters.
CHAPTER 38: MSTP CONFIGURATION COMMANDS Examples ■ If you do not provide instance instance-id, your configuration will take effect in the CIST instance only. ■ There is only one root bridge in effect in a spanning tree instance. If two or more devices have been designated to be root bridges of the same spanning tree instance, MSTP will select the device with the lowest MAC address as the root bridge. ■ You can specify a root bridge for each MST instance without caring about the device priority.
stp root-protection Syntax stp root-protection undo stp root-protection View Ethernet interface view, port group view Parameters None Description Use the stp root-protection command to enable the root guard function for a port or a group of ports. Use the undo stp root-protection command to restore default setting of the root guard function for the port(s). By default, the root guard function is disabled.
CHAPTER 38: MSTP CONFIGURATION COMMANDS stp tc-protection threshold Syntax stp tc-protection threshold number undo stp tc-protection threshold View System view Parameters number: Maximum number of times the device deletes forwarding address entries within a certain period of time immediately after it receives TC-BPDUs, in the range of 1 to 255.
forwarding state, and must wait a certain period of time before it transitions from one state to another to keep synchronized with the remote device during state transition. The forward delay timer set on the root bridge determines the time interval of state transition.
CHAPTER 38: MSTP CONFIGURATION COMMANDS interval of the hello time set on the device, while secondary root bridges use the hello time set on the root bridge. The setting of the hello time, forward delay and max age timers must meet the following formulae. ■ 2 × (forward delay - 1 second) ƒ max age ■ Max age ƒ 2 × (hello time + 1 second) MSTP can work effectively on the entire network only when the above-mentioned conditions are met; otherwise, network instability will frequently occur.
The setting of the hello time, forward delay and max age timers must meet the following formulae. ■ 2 × (forward delay - 1 second) ƒ max age ■ Max age ƒ 2 × (hello time + 1 second) MSTP can work effectively on the entire network only when the above-mentioned conditions are met; otherwise, network instability will frequently occur.
CHAPTER 38: MSTP CONFIGURATION COMMANDS system-view [Sysname] stp timer-factor 7 stp transmit-limit Syntax stp transmit-limit packet-number undo stp transmit-limit View Ethernet interface view, port group view Parameters packet-number: Maximum number of MSTP packets that the port can send within each hello time, namely the maximum transmission rate of the port, in the range of 1 to 255.
Description Use the vlan-mapping modulo command to map VLANs in the current MST region to MST instances according to the specified modulo value. By default, all VLANs are mapped to the CIST (instance 0). You cannot map the same VLAN to different MST instances. If you map a VLAN that has been mapped to an instance to a new instance, the old mapping will be automatically removed.
CHAPTER 38: MSTP CONFIGURATION COMMANDS
VLAN CONFIGURATION COMMANDS 39 description Syntax description text undo description View Parameter Description VLAN view/VLAN interface view text: A string that describes the current VLAN or VLAN interface (Space can be included), case sensitive. ■ For VLAN, this is a string of 1 to 32 characters. ■ For VLAN interface, this is a string of 1 to 80 characters. Use the description command to configure the descriptive string of the current VLAN or VLAN interface.
CHAPTER 39: VLAN CONFIGURATION COMMANDS View Parameter Description Any view vlan-interface-id: VLAN interface ID. Use the display interface vlan-interface command to display the relevant information of a VLAN interface. Execution of the command with the parameter included will display the information of a specified VLAN interface; otherwise, information on all created VLAN interfaces will be displayed. Related command: Example interface vlan-interface. # Display the information of VLAN-interface 2.
display vlan Syntax View Parameter display vlan [ vlan-id1 [ to vlan-id2 ] | all | dynamic | interface interface-type interface-number.subnumber | reserved | static] Any view vlan-id1: Displays the information of a VLAN specified by VLAN ID in the range of 1 to 4,094. vlan-id1 to vlan-id2: Displays the information of a range of VLANs specified by a VLAN ID range. all: Displays all current VLAN information except for the reserved VLAN.
CHAPTER 39: VLAN CONFIGURATION COMMANDS Description: VLAN 0003 Tagged Ports: none Untagged Ports: none Table 112 Description on the fields of the display vlan command Field Description VLAN ID VLAN ID VLAN Type VLAN type (static or dynamic) Route interface Whether the VLAN interface is configured for the VLAN: not configured or configured Description VLAN descriptive string Broadcast MAX-ratio VLAN broadcast suppression ratio (available only on the device supporting the broadcast-suppressi
ip address Syntax ip address ip-address { mask | mask-length } [ sub ] undo ip address [ ip-address { mask | mask-length } [ sub ] ] View Parameter VLAN interface view ip-address: IP address of a VLAN interface, in dotted decimal format. mask: Subnet mask that corresponds to the IP address of a VLAN interface, in dotted decimal format. mask-length: Length of a sub-net mask, indicated by the number of “1”s, in the range 0 to 32. sub: Indicates the address is a sub-IP address of the VLAN interface.
CHAPTER 39: VLAN CONFIGURATION COMMANDS shutdown Syntax shutdown undo shutdown View Parameter Description VLAN interface view None Use the shutdown command to shut down a VLAN interface. Use the undo shutdown command to bring up a VLAN interface.
If a specified VLAN exists, the command places you into its view. Use the undo vlan command to delete specified VLAN(s). Note that: Related command: Example ■ As the default VLAN, VLAN 1 cannot be created or removed. ■ You cannot create/remove reserved VLANs that are reserved for specific function implementation. ■ Dynamic VLANs cannot be removed using the undo vlan command. ■ A VLAN associated with QoS policies cannot be removed. display vlan. # Enter VLAN 2 view.
CHAPTER 39: VLAN CONFIGURATION COMMANDS
PORT-BASED VLAN CONFIGURATION COMMANDS 40 port Syntax port interface-list undo port interface-list View VLAN interface view Parameter interface interface-list: Ethernet interface list, in the format of { interface-type interface-number [ to interface-type interface-number ] }&<1-10>, where &<1-10> means that you can specify up to 10 port ranges. Description Use the port command to add one Access port or a group of Access ports to a VLAN.
CHAPTER 40: PORT-BASED VLAN CONFIGURATION COMMANDS Description Use the port access vlan command to add the current Access port to a specified VLAN. Use the undo port access vlan command to add the current Access port to the default VLAN. Configured in Ethernet interface view, the setting is effective on the current port only; configured in port group view, the setting is effective on all ports in the port group.
Example # Configure the default VLAN ID for the Hybrid port Ethernet 1/0 to be 100.
CHAPTER 40: PORT-BASED VLAN CONFIGURATION COMMANDS port link-type Syntax port link-type { access | hybrid | trunk } undo port link-type View Parameter Ethernet interface view, port group view access: Configures the link type of a port as Access. hybrid: Configures the link type of a port as Hybrid. trunk: Configures the link type of a port as Trunk. Description Use the port link-type command to configure the link type of a port.
Use the undo port trunk permit vlan command to remove the Trunk port from a specified VLAN, a selection of VLANs, or all VLANs. The Trunk port can allow multiple VLANs to pass. Repetitive execution of the port trunk permit vlan command will yield a set of vlan-id-list, to which the Trunk port belongs. Configured in Ethernet interface view, the setting is effective on the current port only; configured in port group view, the setting is effective on all ports in the port group.
CHAPTER 40: PORT-BASED VLAN CONFIGURATION COMMANDS Refer to “Link Aggregation Configuration Commands” on page 473 for information about port groups. You must configure the same default VLAN ID for the Trunk port of both the local device and remote device. Otherwise, the packets cannot be transmitted correctly. Related command: Example port link-type. # Configure the default VLAN ID for the Trunk port Ethernet 1/0 as 100.
VOICE VLAN CONFIGURATION COMMANDS 41 n ■ Voice VLAN automatic mode and secure mode are not supported on MSR 20 series routers. ■ Voice VLAN automatic mode and secure mode are not supported on SIC-4FSW and DSIC-9FSW modules. ■ Voice VLAN automatic mode and secure mode are supported on 16FSW and 24FSW modules.
CHAPTER 41: VOICE VLAN CONFIGURATION COMMANDS Table 113 Description on the fields of the display voice vlan oui command Field Description Description Description of the OUI addresses that are allowed to pass display voice vlan state Syntax View Parameter Description Related command: Example display voice vlan state Any view None Use the display voice vlan state command to display the voice VLAN configuration. voice vlan enable. # Display the voice VLAN configurations.
undo voice vlan enable View Parameter Description System view vlan-id: ID of the VLAN to be enabled with the voice VLAN feature, in the range of 2 to 4,094. Use the voice vlan command to enable the voice VLAN feature globally. Use the undo voice vlan enable command to disable the voice VLAN feature globally. Related command: Example ■ At one particular moment, only one VLAN of a certain device can have the voice VLAN feature enabled.
CHAPTER 41: VOICE VLAN CONFIGURATION COMMANDS Related command: Example display voice vlan state. # Configure the aging time of the voice VLAN as 100 minutes. system-view [Sysname] voice vlan aging 100 voice vlan enable Syntax voice vlan enable undo voice vlan enable View Parameter Description Ethernet interface view None Use the voice vlan enable command to enable the voice VLAN feature on an Ethernet port.
mask oui-mask: Valid length of the OUI address, represented in mask, in the format of H-H-H, from left to right are consecutive fs and 0s, for example, ffff-f000-0000. description text: A case sensitive string that describes the OUI address, in the range of 1 to 30 characters. oui: Deletes an OUI address that is in the format H-H-H, such as 1234-1200-0000, which is the logic AND result of mac-addr and oui-mask. Using the display voice vlan oui command can display OUI address information.
CHAPTER 41: VOICE VLAN CONFIGURATION COMMANDS 00e0-7500-0000 00e0-bb00-0000 1234-1200-0000 ffff-ff00-0000 ffff-ff00-0000 ffff-ff00-0000 Polycom phone 3com phone PhoneA # Disable voice packets of Phone A from passing through the voice VLAN.
Use the undo voice vlan security enable command to disable the security mode for voice VLAN. By default, the security mode of voice VLAN is enabled. n Example The voice vlan security enable and undo voice vlan security enable commands take effect only after the voice VLAN attribute is enabled globally. # Disable the security mode of the voice VLAN.
CHAPTER 41: VOICE VLAN CONFIGURATION COMMANDS
PORT ISOLATION CONFIGURATION COMMANDS 42 display port-isolate group Syntax View Parameter Description Example display port-isolate group Any view None Use the display port-isolate group command to display information of the default isolation group (Group 1). # Display information of the default isolation group.
CHAPTER 42: PORT ISOLATION CONFIGURATION COMMANDS Description Use the port-isolate enable command to add the current port to the default isolation group (Group 1) as an ordinary port. Use the undo port-isolate enable command to remove the port from the isolation group. Configured in Ethernet interface view, the setting is effective on the current port only; configured in port group view, the setting is effective on all ports in the port group.
DYNAMIC ROUTE BACKUP CONFIGURATION COMMANDS 43 n Refer to “DCC Configuration Commands” on page 315 for more information about dial control center (DCC). standby routing-group Syntax standby routing-group group-number undo standby routing-group group-number View Parameter Description Interface view group-number: Dynamic route backup group number, ranging from 1 to 255. Use the standby routing-group command to enable the dynamic route backup function on a dialup interface.
CHAPTER 43: DYNAMIC ROUTE BACKUP CONFIGURATION COMMANDS ip ip-address: IP address of the network segment to be monitored. mask: Network mask. mask-length: Network mask length, ranging from 0 to 32. Description Use the standby routing-rule command to create a dynamic route backup group and add the network segment to be monitored to this group. Use the undo standby routing-rule command to remove a dynamic route backup group or remove the monitored network segment from this group.
LOGICAL INTERFACE CONFIGURATION COMMANDS 44 n This section introduces basic configurations about logical interfaces. For the configurations about the data link layer, the network layer and some special features, refer to the relevant sections in Chapter 1 through Chapter 37 and Chapter 46 through Chapter 70.
CHAPTER 44: LOGICAL INTERFACE CONFIGURATION COMMANDS Parameter Description Related command: Example number: Loopback interface number, which can be the number of any existing Loopback interface. Use the display interface loopback command to view the relevant information about the existing Loopback interfaces. If you do not provide a Loopback interface number, this command will display the relevant information about all the existing Loopback interfaces. interface loopback.
Description Related command: Example Use the display interface mfr command to view the state information about the existing MFR interfaces. If you do not provide an MFR interface number, this command will display the state information about all the existing MFR interfaces. interface mfr. # View the state information about MFR 2.
CHAPTER 44: LOGICAL INTERFACE CONFIGURATION COMMANDS Table 118 Description on the fields of the display interface mfr command Field Description Output queue : (Urgent queue : Size/Length/Discards) Statistics on packets sent/received over the physical layer Output queue : (Protocol queue : Size/Length/Discards) Output queue : (FIFO queuing : Size/Length/Discards) Last 300 seconds input: 0 bytes/sec, 0 packets/sec Last 300 seconds output: 0 bytes/sec, 0 packets/sec 0 packets input, 0 bytes, 0 drops
The “Hold timer” field of the display interface mp-group command represents the hold time of the link state (up/down) of the current interface, and the “LCP initial” field indicates that the link control protocol (LCP) is initialized. Refer to Table 117 for the description on the other fields. display interface null Syntax View Parameter Description Related command: Example display interface null [ 0 ] Any view 0: Null interface number. This argument is always 0.
CHAPTER 44: LOGICAL INTERFACE CONFIGURATION COMMANDS Related command: Example interface virtual-ethernet. # View the state information about VE 12.
Line protocol current state: UP (spoofing) Description: Virtual-Template1 Interface The Maximum Transmit Unit is 1500, Hold timer is 10(sec) Internet protocol processing : disabled Link layer protocol is PPP LCP initial Physical is None Output queue : (Urgent queue : Size/Length/Discards) 0/50/0 Output queue : (Protocol queue : Size/Length/Discards) 0/500/0 Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0 Last 300 seconds input: 0 bytes/sec 0 packets/sec Last 300 seconds output: 0 bytes/sec
CHAPTER 44: LOGICAL INTERFACE CONFIGURATION COMMANDS Table 120 Description of the fields of the display mfr command Field Description Bundle name = MFR0 Name of the MFR bundling Bundle links Physical interface information on each bundled link Serial1/0, PHY state = up, link Physical interface of the bundled link, physical state of the state = up, Link name = Serial1/0 interface, state of the link layer, and the name of the bundled link (name of the corresponding interface by default) display vi
4 packets input, 50 bytes, 0 drops 4 packets output, 50 bytes, 0 drops Refer to Table 117 for the description on the fields of the display interface virtual-access command. interface Syntax interface interface-type interface-number.subnumber [ p2mp | p2p ] undo interface interface-type interface-number.subnumber View Parameter System view interface-type interface-number.subnumber: Interface type and interface number.
CHAPTER 44: LOGICAL INTERFACE CONFIGURATION COMMANDS Description Use the interface ethernet command to create an Ethernet sub-interface and enter the corresponding Ethernet sub-interface view. Use the undo interface ethernet command to remove the specified Ethernet sub-interface. By default, no VLAN is associated to an Ethernet sub-interface.
Parameter Description interface-number.subnumber: Interface number. The interface-number argument is the primary interface number, and the subnumber argument is the sub-interface number, ranging from 0 to 1023. Use the interface mfr command to create an MFR interface or an MFR sub-interface and enter the specified MFR interface view or MFR sub-interface view. Use the undo interface mfr command to remove an MFR interface.
CHAPTER 44: LOGICAL INTERFACE CONFIGURATION COMMANDS Description Use the interface null command to enter null interface view. Only one null interface (Null 0) exists. Null 0 is always up, and cannot be brought down or removed. Related command: display interface null. Example # Enter Null 0 interface view.
Use the undo interface virtual-template command to remove the specified VT. Before removing a VT, make sure that all the relevant VA interfaces are removed and this virtual interface is not being used. Example # Create VT 10.
CHAPTER 44: LOGICAL INTERFACE CONFIGURATION COMMANDS
CPOS INTERFACE CONFIGURATION COMMANDS 45 n E1- and T1-related commands are available for the CPOS (E) interface modules only. clock Syntax clock { master | slave } undo clock View Parameter CPOS interface view master: Sets the clock mode of the CPOS interface to master. slave: Sets the clock mode of the CPOS interface to slave. Description Use the clock command to set the clock mode of the CPOS interface. Use the undo clock command to restore the default, that is, slave.
CHAPTER 45: CPOS INTERFACE CONFIGURATION COMMANDS Before you can configure a CPOS physical interface, you must enter its CPOS interface view. Example # Enter the interface view of CPOS 1/0. system-view [Sysname] controller cpos 1/0 [Sysname-Cpos1/0] crc Syntax crc { 16 | 32 | none } undo crc View Parameter Synchronizing serial interface view 16: Sets the length of the CRC word to 16 bits. 32: Sets the length of the CRC word to 32 bits. None: Disables CRC.
Description Use the display controller cpos command to display information about CPOS interfaces, such as state of E1/T1 channels, and alarms, and errors occurred to the regeneration section, multiplex section, and higher-order path. The following table lists possible error types in the displayed information: Table 121 Possible error types Field Description FRED Receive loss of basic frame alignment, or receive frames with red alarm errors. COFA Change of frame alignment.
CHAPTER 45: CPOS INTERFACE CONFIGURATION COMMANDS Cpos4/0 CT1 3 is up Frame-format ESF, clock master, loopback not set (Some information about T1 channels is omitted.) Cpos4/0 CT1 83 is Frame-format ESF, Cpos4/0 CT1 84 is Frame-format ESF, up clock master, loopback not set up clock master, loopback not set Table 122 Description on the fields of the display controller cpos command Field Description Cpos4/0 current state Current physical state of the CPOS interface.
Different from the display controller cpos command, this command can display the error and alarm information of lower-order paths and E1 frames. Example # Display the status information of E1 channel 1 on interface CPOS 1/0.
CHAPTER 45: CPOS INTERFACE CONFIGURATION COMMANDS Different from the display controller cpos command, this command can display the error and alarm information of lower-order paths and T1 frames. Example # Display the status information of T1 channel 2 on interface CPOS 4/0.
Table 123 Description on the fields of the display controller cpos t1 command Field Description T1 framer(2-1-1): Presents how the T1 channel is multiplexed. 2-1-1 represents in order VC-3 number, TUG-2 number, and TUG-11 number for the T1 channel. For its calculation principle, refer to the accompanied operation manual.
CHAPTER 45: CPOS INTERFACE CONFIGURATION COMMANDS [Sysname-Cpos1/0] quit [Sysname] interface serial 1/0/63:1 [Sysname-Serial1/0/63:1] e1 set clock Syntax e1 e1-number set clock { master | slave } undo e1 e1-number set clock View Parameter CPOS interface view e1-number: Number of an E1 channel on the CPOS interface, in the range 1 to 63. master: Sets the clock mode of the E1 channel to master. slave: Sets the clock mode of the E1 channel to slave.
Description Use the e1 set frame-format command to set the framing format of an E1 channel. Use the undo e1 set frame-format command to restore the default, that is, no-CRC4. Example # Set E1 channel 1 to use framing format CRC4.
CHAPTER 45: CPOS INTERFACE CONFIGURATION COMMANDS e1 shutdown Syntax e1 e1-number shutdown undo e1 e1-number shutdown View Parameter Description CPOS interface view e1-number: Number of an E1 channel on the CPOS interface, in the range 1 to 63. Use the e1 shutdown command to shut down an E1 channel. Use the undo e1 shutdown command to bring up an E1 channel. By default, E1 channels are enabled. Disabling an E1 channel also disables the serial interfaces that are formed on it, if there is any.
capability, only up to 256 serial interfaces are allowed on one CPOS physical interface. Example # Set E1 channel 3 on interface CPOS 1/0 to operate in unframed mode. system-view [Sysname] controller cpos 1/0 [Sysname-Cpos 1/0] e1 3 unframed flag Syntax flag { j0 j0-string | j1 j1-string | c2 c2-value } undo flag { j0 | j1 | c2 } View Parameter CPOS interface view j0 j0-string: Specifies the regeneration section trace message. The j0-string argument is a string of 1 to 15 characters.
CHAPTER 45: CPOS INTERFACE CONFIGURATION COMMANDS Parameter sdh: Sets framing format to synchronous digital hierarchy (SDH). sonet: Sets framing format to synchronous optical network (SONET). Description Use the frame-format command to configure framing on the CPOS interface. Use the undo frame-format command to restore the default, that is, SDH. Example # Set the framing format on interface CPOS 1/0 to SONET.
au-4: Gets AUG through AU-4. Description Use the multiplex mode command to set AUG multiplexing mode. Use the undo multiplex mode command to restore the default, that is, au-4. SDH provides two payload mapping/multiplexing solutions: ANSI and ETSI. ■ ANSI uses the AU-3 multiplexing scheme, where the lower-order payload is aggregated into the VC-3 higher-order path. VC-3 plus an AU pointer forms AU-3. Three such AU-3s can be synchronized and multiplexed to form one AUG.
CHAPTER 45: CPOS INTERFACE CONFIGURATION COMMANDS Example # Shut down CPOS physical interface 1/0. system-view [Sysname] controller cpos 1/0 [Sysname-Cpos1/0] shutdown t1 channel-set Syntax t1 t1-number channel-set set-number timeslot-list range [ speed { 56k | 64k } ] undo t1 t1-number channel-set set-number View Parameter CPOS interface view t1-number: Number of a T1 channel on the CPOS interface, in the range 1 to 84. set-number: Channel set number in the range 0 to 23.
t1 set clock Syntax t1 t1-number set clock { master | slave } undo t1 t1-number set clock View Parameter CPOS interface view t1-number: Number of a T1 channel on the CPOS, in the range 1 to 84. Master: Set the clock mode of the T1 channel to master. slave: Set the clock mode of the T1 channel to slave. Description Use the t1 set clock command to configure the clock mode of the T1 channel. Use the undo t1 set clock command to restore the default, that is, slave.
CHAPTER 45: CPOS INTERFACE CONFIGURATION COMMANDS Use the undo t1 set frame-format command to restore the default, that is, ESF. Example # Set the framing format of T1 channel 1 to SF.
Description Use the t1 shutdown command to shut down a T1 channel. Use the undo t1 shutdown command to bring up a T1 channel. By default, T1 channels are enabled. Disabling a T1 channel disables the serial interfaces formed on it, if there is any. Example # Shut down T1 channel 1.
CHAPTER 45: CPOS INTERFACE CONFIGURATION COMMANDS
ARP CONFIGURATION COMMANDS 46 arp check enable Syntax arp check enable undo arp check enable View Parameter Description System view None Use the arp check enable command to enable ARP entry check, preventing the device from learning multicast MAC addresses. With this function enabled, the device cannot learn any ARP entry with a multicast MAC address. Configuring such a static ARP entry is not allowed either; otherwise, the system prompts error information.
CHAPTER 46: ARP CONFIGURATION COMMANDS Description Use the arp max-learning-num command to set the maximum number of dynamic ARP entries that an interface can learn. Use the undo arp max-learning-num command to restore the default. Example # Set the maximum number of dynamic ARP entries that can be learned on VLAN-interface 40 to 500.
Related command: Example reset arp, display arp. # Configure a static ARP entry, with the IP address being 202.38.10.2, the MAC address being 00e0-fc01-0000, and the outbound interface being Ethernet 1/0 of VLAN 10. system-view [Sysname] arp static 202.38.10.2 00e0-fc01-0000 10 ethernet 1/0 arp timer aging Syntax arp timer aging aging-time undo arp timer aging View Parameter Description System view aging-time: Aging time for dynamic ARP entries in minutes, in the range 1 to 1,440.
CHAPTER 46: ARP CONFIGURATION COMMANDS interface interface-type interface-number: Displays the ARP entries of the interface specified by the argument interface-type interface-number. verbose: Displays detailed information about ARP entries. |: Uses a regular expression to specify the ARP entries to be displayed. begin: Displays ARP entries from the first one containing the specified string. exclude: Displays the ARP entries that do not contain the specified string.
display arp ip-address Syntax View Parameter display arp ip-address [ verbose ] [ | { begin | exclude | include } string ] Any view ip-address: Displays the ARP entry for the specified IP address. verbose: Displays the detailed information about ARP entries. |: Uses a regular expression to specify the ARP entries to be displayed. begin: Displays the ARP entries from the first one containing the specified string. exclude: Displays the ARP entries that do not contain the specified string.
CHAPTER 46: ARP CONFIGURATION COMMANDS display arp vpn-instance Syntax View Parameter display arp vpn-instance vpn-instance-name [ | { begin | exclude | include } string | count ] Any view vpn-instance-name: Name of VPN instance, a case-sensitive string of 1 to 31 characters. With this argument specified, the ARP entries for a specific VPN instance are displayed. |: Uses a regular expression to specify the ARP entries to be displayed.
Use the undo naturemask-arp enable command to restore the default. By default, the support for ARP requests from a natural network is disabled. Example # Enable the support for ARP requests from a natural network. system-view [Sysname] naturemask-arp enable reset arp Syntax View Parameter reset arp { all | dynamic | static | interface interface-type interface-number } User view all: Clears all ARP entries. dynamic: Clears all dynamic ARP entries. static: Clears all static ARP entries.
CHAPTER 46: ARP CONFIGURATION COMMANDS
GRATUITOUS ARP CONFIGURATION COMMANDS 47 gratuitous-arp-sending enable Syntax gratuitous-arp-sending enable undo gratuitous-arp-sending enable View Parameter Description System view None Use the gratuitous-arp-sending enable command to enable a device to send gratuitous ARP packets when receiving ARP requests from another network segment. Use the undo gratuitous-arp-sending enable command to restore the default.
CHAPTER 47: GRATUITOUS ARP CONFIGURATION COMMANDS By default, the function is disabled. Example # Enable the gratuitous ARP packet learning function.
ARP SOURCE SUPPRESSION CONFIGURATION COMMANDS 48 arp source-suppression enable Syntax arp source-suppression enable undo arp source-suppression enable View Parameter Description System view None Use the arp source-suppression enable command to enable the ARP source suppression function. Use the undo arp source-suppression enable command to disable the function. By default, the ARP source suppression function is disabled. Related command: Example display arp source-suppression.
CHAPTER 48: ARP SOURCE SUPPRESSION CONFIGURATION COMMANDS Description Use the arp source-suppression limit command to set the maximum number of packets with the same source IP address but unresolvable destination IP addresses that a port can receive in five seconds. Use the undo arp source-suppression limit command to restore the default value, which is 10. Related command: Example display arp source-suppression.
AUTHORIZED ARP CONFIGURATION COMMANDS 49 n This feature is supported on Layer 3 Ethernet interfaces only. arp authorized enable Syntax arp authorized enable undo arp authorized enable View Parameter Description Layer 3 Ethernet interface view None Use the arp authorized enable command to enable authorized ARP on an interface, which at the same time is enabled with authorized ARP aging detection but disabled from learning dynamic ARP entries.
CHAPTER 49: AUTHORIZED ARP CONFIGURATION COMMANDS Description Use the arp authorized time-out command to configure the aging time for authorized ARP entries. Use the undo arp authorized time-out command to restore the default. By default, the aging time for authorized ARP entries is 1200 seconds. Example # Configure the aging time for authorized ARP entries.
PROXY ARP CONFIGURATION COMMANDS 50 proxy-arp enable Syntax proxy-arp enable undo proxy-arp enable View Parameter Description VLAN interface view/Ethernet interface view None Use the proxy-arp enable command to enable proxy ARP. Use the undo proxy-arp enable command to disable proxy ARP. By default, proxy ARP is disabled. Related command: Example display proxy-arp. # Enable proxy ARP on Ethernet 1/0.
CHAPTER 50: PROXY ARP CONFIGURATION COMMANDS Related command: Example display local-proxy-arp. # Enable local proxy ARP on VLAN-interface 2.
DHCP SERVER CONFIGURATION COMMANDS 51 n ■ The DHCP server configuration is supported only on Layer 3 Ethernet interfaces (or subinterfaces), virtual Ethernet interfaces, VLAN interfaces, serial interfaces, and loopback interfaces. The subaddress pool configuration is not supported on serial and loopback interfaces. ■ DHCP Snooping must be disabled on the DHCP server.
CHAPTER 51: DHCP SERVER CONFIGURATION COMMANDS bootfile-name Syntax bootfile-name bootfile-name undo bootfile-name View Parameter Description DHCP address pool view bootfile-name: Boot file name, a string of 1 to 63 characters. Use the bootfile-name command to specify a bootfile name in the DHCP address pool for the client. Use the undo bootfile-name command to remove the specified bootfile name from the DHCP address pool. By default, no bootfile name is specified.
dhcp select server global-pool Syntax dhcp select server global-pool [ subaddress ] undo dhcp select server global-pool subaddress View Interface view Parameter subaddress: Supports subaddress allocation. That is, the DHCP server and clients are on the same network segment, and the server allocates IP addresses from the address pool containing the network segment of the first subaddress if several subaddresses exist.
CHAPTER 51: DHCP SERVER CONFIGURATION COMMANDS dhcp server forbidden-ip Syntax dhcp server forbidden-ip low-ip-address [ high-ip-address ] undo dhcp server forbidden-ip low-ip-address [ high-ip-address ] View Parameter System view low-ip-address: Start IP address of the IP address range to be excluded from dynamic allocation. high-ip-address: End IP address of the IP address range to be excluded from dynamic allocation. The end IP address must have a higher sequence than the start one.
View System view Parameter pool-name: Global address pool name, which is a unique pool identifier, a string of 1 to 35 characters. Description Use the dhcp server ip-pool command to create a DHCP address pool and enter its view. If the pool was created, you will directly enter its view. Use the undo dhcp server ip-pool command to remove specified DHCP address pool. By default, no DHCP address pool is created. Related command: Example dhcp enable. # Create the DHCP address pool identified by 0.
CHAPTER 51: DHCP SERVER CONFIGURATION COMMANDS View Parameter Description System view milliseconds: Response timeout value for ping packets in milliseconds, in the range of 0 to 10,000. If the ping timeout time is set to 0, the DHCP server will not perform any ping collision detection. Use the dhcp server ping timeout command to configure response timeout time of the ping packet on the DHCP server. Use the undo dhcp server ping timeout command to restore the default. The time defaults to 500.
Parameter Description None Use the dhcp update arp command to configure the DHCP server to support authorized ARP. Use the undo dhcp update arp command to restore the default. By default, the DHCP server does not support authorized ARP. Example # Configure Ethernet 1/0 to support authorized ARP.
CHAPTER 51: DHCP SERVER CONFIGURATION COMMANDS ip ip-address: Displays the lease expiration information of a specified IP address. pool [ pool-name ]: Displays the lease expiration information of a specified address pool. The pool name is a string of 1 to 35 characters. If the pool name is not specified, the lease expiration information of all address pools is displayed.
View Parameter Description Example Any view None Use the display dhcp server forbidden-ip command to display IP addresses excluded from dynamic allocation in DHCP address pool. # Display IP addresses excluded from dynamic allocation in the DHCP address pool. display dhcp server forbidden-ip IP Range from 1.1.1.1 to 1.1.1.1 IP Range from 2.2.2.2 to 2.2.2.
CHAPTER 51: DHCP SERVER CONFIGURATION COMMANDS Table 128 Description on fields of the display dhcp server ip-in-use command Field Description Type Binding types, including Manual, Auto:OFFERED and Auto:COMMITTED. ■ Manual: Static binding ■ Auto:OFFERED: The binding sent in the DHCP-OFFER message from the server to the client. ■ Auto:COMMITTED: The binding sent in the DHCP-ACK message from the server to the client.
Table 129 Description on fields of the display dhcp server statistics command Field Description Manual The number of static bindings Expire The number of expired bindings BOOTP Request The number of DHCP requests sent from DHCP clients to the DHCP server, including: BOOTP Reply Bad Messages ■ DHCPDISCOVER ■ DHCPREQUEST ■ DHCPDECLINE ■ DHCPRELEASE ■ DHCPINFORM ■ BOOTPREQUEST The number of DHCP replies sent from the DHCP server to DHCP clients, including: ■ DHCPOFFER ■ DHCPACK ■
CHAPTER 51: DHCP SERVER CONFIGURATION COMMANDS PrevSibling node:0 expired unlimited Table 130 Description on fields of the display dhcp server tree command Field Description Global pool Information of a address pool Pool name Address pool name network Network segment for address allocation static-bind ip-address 10.10.1.2 mask 255.0.0.
Related command: Example dhcp server ip-pool. # Specify the DNS server address 10.1.1.254 in DHCP address pool 0. system-view [Sysname] dhcp server ip-pool 0 [Sysname-dhcp-pool-0] dns-list 10.1.1.254 domain-name Syntax domain-name domain-name undo domain-name View Parameter Description DHCP address pool view domain-name: DHCP client domain name suffix, a string of 1 to 50 characters. Use the domain-name command to specify the DHCP client domain name suffix in a DHCP address pool.
CHAPTER 51: DHCP SERVER CONFIGURATION COMMANDS Description Use the expired command to specify the lease duration in a DHCP address pool. Use the undo expired command to restore the default lease duration in a DHCP address pool. The lease duration defaults to one day. Note that if the lease duration you specified is beyond the year 2106, the system regards the lease as expired. Related command: Example dhcp server ip-pool.
nbns-list Syntax nbns-list ip-address&<1-8> undo nbns-list { ip-address | all } View Parameter DHCP address pool view ip-address&<1-8>: WINS server IP address. &<1-8> means you can specify up to eight WINS server addresses separated by spaces. all: Specifies all WINS server addresses to be removed. Description Use the nbns-list command to specify WINS server address(es) in a DHCP address pool. Use the undo nbns-list command to remove WINS server address(es) from a DHCP address pool.
CHAPTER 51: DHCP SERVER CONFIGURATION COMMANDS m-node: Mixed node, a combination of a b-node first and p-node second. An m-node client broadcasts the destination name, if there is no response, and then unicasts the destination name to the WINS server to get the mapping. h-node: Hybrid node, a combination of a p-node first and b-node second. An h-node is a p-node with the peer-to-peer communication mechanism.
Related command: Example dhcp server ip-pool and dhcp server forbidden-ip. # Specify 192.168.8.0/24 as the address range for dynamic allocation in DHCP address pool 0. system-view [Sysname] dhcp server ip-pool 0 [Sysname-dhcp-pool-0] network 192.168.8.0 mask 255.255.255.0 option Syntax option code { ascii ascii-string | hex hex-string&<1-16> | ip-address ip-address&<1-8> } undo option code View Parameter DHCP address pool view code: Self-defined option number, in the range of 2 to 254.
CHAPTER 51: DHCP SERVER CONFIGURATION COMMANDS reset dhcp server conflict Syntax View Parameter reset dhcp server conflict { all | ip ip-address } User view all: Clears the statistics of all IP address conflicts. ip ip-address: Clears the conflict statistics of a specified IP address. Description Related command: Example Use the reset dhcp server conflict command to clear statistics of IP address conflict(s). display dhcp server conflict. # Clear the statistics of all IP address conflicts.
Parameter Description Related command: Example None Use the reset dhcp server statistics command to clear the statistics of the DHCP server. display dhcp server statistics. # Clear the statistics of the DHCP server.
CHAPTER 51: DHCP SERVER CONFIGURATION COMMANDS system-view [Sysname] dhcp server ip-pool 0 [Sysname-dhcp-pool-0] static-bind ip-address 10.1.1.1 mask 255.255.255.
static-bind mac-address Syntax static-bind mac-address mac-address undo static-bind mac-address View Parameter Description DHCP address pool view mac-address: The MAC address of a static binding, in the format H-H-H. Use the static-bind mac-address command to specify the MAC address of a static binding in a DHCP address pool. Use the undo static-bind mac-address command to remove the MAC address of a static binding from a DHCP address pool. By default, no MAC address is specified.
CHAPTER 51: DHCP SERVER CONFIGURATION COMMANDS Use the undo tftp-server domain-name command to remove the TFTP server name from a DHCP address pool. By default, no TFTP server name is specified. Using the tftp-server domain-name command repeatedly will overwrite the previous configuration. Example # Specify the TFTP server name as aaa in DHCP address pool 0.
Parameter as-ip ip-address: Specifies IP address for the backup network calling processor. fail-over ip-address dialer-string: Specifies the failover IP address and dialer string. The dialer-string is a string of 1 to 39 characters, which can be 0 to 9, and “*”. ncp-ip ip-address: Specifies IP address for the primary network calling processor. voice-vlan vlan-id: Specifies the voice VLAN ID, in the range of 2 to 4094.
CHAPTER 51: DHCP SERVER CONFIGURATION COMMANDS
DHCP RELAY AGENT CONFIGURATION COMMANDS 52 n ■ The DHCP relay agent configuration is supported only on the Layer 3 Ethernet interface (or subinterface), virtual Ethernet interface, VLAN interface, and serial interface. ■ DHCP Snooping cannot be configured on the DHCP relay agent. dhcp enable Syntax dhcp enable undo dhcp enable View Parameter Description System view None Use the dhcp enable command to enable DHCP. Use the undo dhcp enable command to disable DHCP. By default, DHCP is disabled.
CHAPTER 52: DHCP RELAY AGENT CONFIGURATION COMMANDS Description Use the dhcp relay address-check enable command to enable IP address match check on the relay agent. Use the dhcp relay address-check disable command to disable IP address match check on the relay agent. By default, the function is disabled. Note that this command can be executed only on Layer 3 Ethernet interfaces (including sub-interfaces) and VLAN interfaces. Example # Enable IP address match checking on the DHCP relay agent.
Parameter normal: Specifies the normal padding format. verbose: Specifies the verbose padding format. node-identifier { mac | sysname | user-defined node-identifier }: Specifies access node identifier. By default, the node MAC address is used as the node identifier. Description ■ mac indicates using MAC address as the node identifier. ■ sysname indicates using the device name of a node as the node identifier.
CHAPTER 52: DHCP RELAY AGENT CONFIGURATION COMMANDS replace: Specifies to forward messages containing option 82 after replacing the original option 82 with the option 82 padded in the specified padding format. Description Use the dhcp relay information strategy command to configure DHCP relay agent handling strategy for messages containing option 82. Use the undo dhcp relay information strategy command to restore the default handling strategy.
interface interface-type interface-number: Specifies a Layer 3 interface connecting to the DHCP client. interface-type interface-number specifies the interface type and interface number. all: Specifies all entries of client IP-to-MAC bindings to be removed. dynamic: Specifies entries of dynamic client IP-to-MAC bindings to be removed. static: Specifies entries of manual client IP-to-MAC bindings to be removed.
CHAPTER 52: DHCP RELAY AGENT CONFIGURATION COMMANDS Use the undo dhcp relay security tracker command to restore the default interval. The default handshake interval is auto, the value of 60 seconds divided by the number of binding entries. Example # Set the handshake interval as 100 seconds.
Use the undo dhcp relay server-group command to remove a DHCP server from a DHCP server group, if no ip ip-address is specified, all servers in the DHCP server group and the server group itself will be removed. By default, no DHCP server is specified for a DHCP server group. Note that: Related command: Example ■ The IP address of any DHCP server and any interface’s IP address of the DHCP relay agent cannot be in the same network segment. Otherwise, the client may fail to obtain an IP address.
CHAPTER 52: DHCP RELAY AGENT CONFIGURATION COMMANDS dhcp select relay Syntax dhcp select relay undo dhcp select relay View Parameter Description Interface view None Use the dhcp select relay command to enable the relay agent on the current interface, specified or all interfaces. Upon receiving requests from an enabled interface, the relay agent will forward these requests to outside DHCP servers for IP address allocation.
Example # Configure Ethernet 1/0 to support authorized ARP. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] dhcp update arp display dhcp relay Syntax View Parameter display dhcp relay { all | interface interface-type interface-number } Any view all: Displays information of DHCP server groups that all interfaces correspond to. interface interface-type interface-number: Displays information of the DHCP server group that a specified interface corresponds to.
CHAPTER 52: DHCP RELAY AGENT CONFIGURATION COMMANDS display dhcp relay security IP Address MAC Address Type 10.1.1.1 00e0-0000-0001 Static 10.1.1.
Description Example Use the display dhcp relay security tracker command to display the interval for refreshing dynamic bindings on the relay agent. # Display the interval for refreshing dynamic bindings on the relay agent. [Sysname] display dhcp relay security tracker Current tracker interval : Auto The interval is 10 seconds.
CHAPTER 52: DHCP RELAY AGENT CONFIGURATION COMMANDS Description Use the display dhcp relay statistics command to display DHCP packet statistics related to a specified or all DHCP server groups. Note that if no parameter (server-group and all) is specified, all DHCP packet statistics on the relay agent will be displayed. Example # Display all DHCP packet statistics on the relay agent.
reset dhcp relay statistics Syntax View Parameter Description reset dhcp relay statistics [ server-group group-id ] User view server-group group-id: Specifies a server group ID in the range of 0 to 19 about which to remove statistics from the relay agent. Use the reset dhcp relay statistics command to remove statistics from the relay agent. If no server-group is specified, all statistics will be removed from the relay agent. Related command: Example display dhcp relay statistics.
CHAPTER 52: DHCP RELAY AGENT CONFIGURATION COMMANDS
DHCP CLIENT CONFIGURATION COMMANDS 53 n ■ The DHCP client configuration is supported only on the Layer 3 Ethernet interface (or subinterface) and VLAN interface. ■ When multiple VLAN interfaces having the same MAC address use DHCP for IP address acquisition via a relay agent, the DHCP server cannot be the Windows 2000 Server or Windows 2003 Server. ■ You are not recommended to enable both the DHCP client and the DHCP Snooping on the same device.
CHAPTER 53: DHCP CLIENT CONFIGURATION COMMANDS DNS server: 44.1.1.11 DNS server: 44.1.1.12 Domain name: ddd.com Boot server: 200.200.200.200 1.1.1.1 Client ID: 3030-3066-2e65-3234392e-3830-3438-2d566c61-6e2d-696e-74657266-6163-6531 T1 will timeout in 1 day 11 hours 58 minutes 52 seconds.
By default, an interface does not use DHCP for IP address acquisition. Note that: Example ■ If no parameter is specified, the client uses a character string comprised of the current interface name and MAC address as its ID for address acquisition. ■ The DHCP client sends a DHCP-RELEASE message for releasing the IP address obtained via DHCP, if the interface of the client is down, the message cannot be sent.
CHAPTER 53: DHCP CLIENT CONFIGURATION COMMANDS
DHCP SNOOPING CONFIGURATION COMMANDS 54 dhcp-snooping Syntax dhcp-snooping undo dhcp-snooping View Parameter Description System view None Use the dhcp-snooping command to enable DHCP snooping. Use the undo dhcp-snooping command to disable DHCP snooping. With DHCP snooping disabled, all ports can forward responses from any DHCP servers and does not record binding information about MAC addresses of DHCP clients and the obtained IP addresses. By default, DHCP snooping is disabled.
CHAPTER 54: DHCP SNOOPING CONFIGURATION COMMANDS All ports are untrusted by default. Related command: Example display dhcp-snooping trust. # Set port Ethernet 1/0 as trusted. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] dhcp-snooping trust display dhcp-snooping Syntax View Parameter Description Related command: n Example display dhcp-snooping Any view None Use the display dhcp-snooping command to display the binding information recorded through DHCP snooping.
View Parameter Description Related command: Example Any view None Use the display dhcp-snooping trust command to display information about trusted ports. dhcp-snooping trust. # Display information about trusted ports. display dhcp-snooping trust DHCP Snooping is enabled. DHCP Snooping trust becomes active.
CHAPTER 54: DHCP SNOOPING CONFIGURATION COMMANDS
BOOTP CLIENT CONFIGURATION COMMANDS 55 n c ■ BOOTP client configuration can only be used on Layer 3 Ethernet interfaces (including sub-interfaces) and VLAN interfaces. ■ If several VLAN interfaces sharing the same MAC address obtain IP addresses through a BOOTP relay agent, the BOOTP server cannot be a Windows 2000 Server or Windows 2003 Server. ■ You are not recommended to enable both the DHCP client and the DHCP Snooping on the same device.
CHAPTER 55: BOOTP CLIENT CONFIGURATION COMMANDS Table 137 Description on fields of the display bootp client command Field Description Ethernet1/0 BOOTP client Information of the interface serving as a BOOTP client information or Vlan-interface1 BOOTP client information Allocated IP BOOTP client’s IP address allocated by the BOOTP server Transaction ID Value of the XID field in a BOOTP message, namely, a random number used to match a response message from the BOOTP server while the BOOTP client se
DHCP DEBUGGING COMMANDS 56 debugging dhcp server Syntax debugging dhcp server { all | error | event | packet } undo debugging dhcp server { all | error | event | packet } View Default Level Parameters User view 1: Monitor level all: All types of debugging for DHCP server. error: DHCP server error debugging. event: DHCP server event debugging. packet: DHCP server packet debugging. Description Use the debugging dhcp server command to enable DHCP server debugging.
CHAPTER 56: DHCP DEBUGGING COMMANDS Table 138 Description on the fields of the debugging dhcp server packet command Field Description Broadcast flag: BroadcastFlag DHCP broadcast flag: 1 refers to broadcast, and 0 refers to unicast.
Table 140 Description on the fields of the debugging dhcp server error command Field Description Unable to generate Message-Type without an analyzed packet! Failed to generate a packet without a parsed packet Too many options have been configured! Failed to generate a packet with too many options configured Failed to cancel ICMP timer! Failed to cancel the timer for sending ICMP packets Failed to add ICMP timer! Failed to add the timer for sending ICMP packets Can not offer new IP without ana
CHAPTER 56: DHCP DEBUGGING COMMANDS // The DHCP server receives a response from a client at 22.0.0.1, which indicates the IP address is in use. *0.278406 Sysname DHCPS/7/DHCPS_DEBUG_COMMON: DHCPServer: Sending ICMP ECHOREQUEST to target IP: 22.0.0.2. // Checking whether the IP address 22.0.0.2 is in use *0.278406 Sysname DHCPS/7/DHCPS_DEBUG_COMMON: DHCPServer: Assign Free Lease from global pool. *0.279016 Sysname DHCPS/7/DHCPS_DEBUG_COMMON: DHCPServer: ICMP Timeout! *0.
Message type: reply Hardware type: 1, Hardware address length: 6 Hops: 0, Transaction ID: 2294688324 Seconds: 0, Broadcast flag: 0 Client IP address: 0.0.0.0 Your IP address: 22.0.0.2 Server IP address: 0.0.0.0 Relay agent IP address: 22.0.0.1 Client hardware address: 00e0-fc14-1601 Server host name: Not Configured, Boot file name: Not Configured DHCP message type: DHCP Ack *0.279172 Sysname DHCPS/7/DHCPS_DEBUG_COMMON: DhcpServer: Send DHCPACK to 00e0.fc14.1601-Vlan-interface2 Offer IP=> 22.0.0 .
CHAPTER 56: DHCP DEBUGGING COMMANDS Table 141 Description on the fields of the debugging dhcp relay packet command Field Description Hardware type: HardwareType Hardware address type of the DHCP client. 1 refers to Ethernet type.
DHCP message type: DHCP Discover *0.230094 Sysname DHCPR/7/DHCPR_DEBUG_RELAYPKT: Pkt Sent: send request interface Vlan-interface22, dest IP: 11.0.0.1, CHardAddr: 00e0.fc14.1601, server-group: 0 // The DHCP relay agent received a DHCP-DISCOVER message from the DHCP client, and forwarded it to the DHCP server at 11.0.0.1 in DHCP server group 0. *0.230891 Sysname DHCPR/7/DHCPR_DEBUG_EVENT: Begin to deal with DHCP Offer packet. *0.
CHAPTER 56: DHCP DEBUGGING COMMANDS Hops: 0, Transaction ID: 2294688324 Seconds: 0, Broadcast flag: 1 Client IP address: 0.0.0.0 Your IP address: 22.0.0.2 Server IP address: 0.0.0.0 Relay agent IP address: 22.0.0.1 Client hardware address: 00e0-fc14-1601 Server host name: Not Configured, Boot file name: Not Configured DHCP message type: DHCP Ack *0.231063 Sysname DHCPR/7/DHCPR_DEBUG_RELAYPKT: Pkt Sent: send reply interface Vlan-interface22, dest IP: 255.255.255.255, CHardAddr: 00e0.fc14.
Table 144 Description on the fields of the debugging dhcp client packet command Field Description Decode option 43: Original data in Option 43 of the received DHCP message type(DHCPmessagetype) DHCP message type, which can be: ■ DHCP Offer ■ DHCP ACK ■ DHCP NAK mask(subnet mask IP) Subnet mask assigned by the DHCP server lease(lease) Lease assigned by the DHCP server (in seconds) T1ÔºàT1Ôºâ 1/2 of the DHCP client’s lease (in seconds) T2ÔºàT2Ôºâ 7/8 of the DHCP client’s lease (in secon
CHAPTER 56: DHCP DEBUGGING COMMANDS Table 146 Description on the fields of the debugging dhcp client error command Field Description Warning: Deleting the interface Failed to delete the user information on the specified information of specified interface failed! interface Examples Copying socket failed when send release packet! Failed to copy the socket when sending the release packet timer expired, but FSM state(state) is wrong! The timer expires, but the current state of the DHCP client is wr
*0.110343 Sysname DHCPC/7/DHCP_Client: Vlan-interface2: Sending DHCPDISCOVER packet succeeded. *0.110343 Sysname DHCPC/7/DHCP_Client: Vlan-interface2: FSM state transfer(INIT-->SELECTING) successfully. // The DHCP client sent the DHCP-DISCOVER message successfully, and the state of the DHCP client is changed from INIT to SELECTING. *0.111218 Sysname DHCPC/7/DHCP_Client: Vlan-interface2: Receive a packet. *0.111218 Sysname DHCPC/7/DHCP_Client: Vlan-interface2: Receive a DHCP packet...
CHAPTER 56: DHCP DEBUGGING COMMANDS // The DHCP client starts address conflict detection using ARP. *0.111421 Sysname DHCPC/7/DHCP_Client: Vlan-interface2: Sending arp request for allocated address(22.0.0.2) succeeded. // ARP message sent *0.111421 Sysname DHCPC/7/DHCP_Client: Vlan-interface2: Move to BOUND state in 1 seconds if no arp reply is received. // If no ARP reply is received, the state of the DHCP client will be changed to BOUND state after 1 second. *0.
DNS CONFIGURATION COMMANDS 57 n This document only covers IPv4 DNS configuration commands. For IPv6 DNS configuration commands, refer to “IPv6 Basics Configuration Commands” on page 829. display dns domain Syntax View Parameter Description Related command: Example display dns domain [ dynamic ] Any view dynamic: Displays the domain name suffixes dynamically obtained through DHCP or other protocols. Use the display dns domain command to display the domain name suffixes. dns domain.
CHAPTER 57: DNS CONFIGURATION COMMANDS Parameter Description Example None Use the display dns dynamic-host command to display the information in the dynamic domain name resolution cache. # Display the information in the dynamic domain name resolution cache. display dns dynamic-host No Host IP Address 1 www.baidu.com 202.108.249.134 2 www.yahoo.akadns.net 66.94.230.39 3 www.hotmail.com 207.68.172.239 4 www.eyou.com 61.136.62.
display dns server Syntax View Parameter Description Related command: Example display dns server [ dynamic ] Any view dynamic: Displays the DNS server information dynamically obtained through DHCP or other protocols Use the display dns server command to display the DNS server information. dns server. # Display the DNS server information. display dns server Type: D:Dynamic S:Static DNS Server 1 Type S IP Address 169.254.65.
CHAPTER 57: DNS CONFIGURATION COMMANDS Table 151 Description on fields of the display ip host command Field Description Host Host name Age Time to live. 0 means that a static mapping will never age out. You can only manually remove the mappings between host names and IP addresses. Flags Indicates the type of mappings between host names and IP addresses, static or dynamic. Static represents static domain name resolution.
Parameters None Description Use the dns proxy enable command to enable DNS proxy. Use the undo dns proxy enable command to disable DNS proxy. By default, DNS proxy is disabled. Examples # Enable DNS proxy. system-view [Sysname] dns proxy enable dns resolve Syntax dns resolve undo dns resolve View Parameter Description System view None Use the dns resolve command to enable dynamic domain name resolution. Use the undo dns resolve command to disable dynamic domain name resolution.
CHAPTER 57: DNS CONFIGURATION COMMANDS You can configure a maximum of six DNS servers. Related command: n Example display dns server. For details about IPv6 DNS, refer to “IPv6 Basics Configuration Commands” on page 829. # Configure 172.16.1.1 for the DNS server. [Sysname] dns server 172.16.1.
Description Related command: Example Use the reset dns dynamic-host command to clear the information in the dynamic domain name cache. display dns dynamic-host. # Clear the information in the dynamic domain name cache.
CHAPTER 57: DNS CONFIGURATION COMMANDS
IP ACCOUNTING CONFIGURATION COMMANDS 58 display ip count Syntax View Parameter display ip count { inbound-packets | outbound-packets } { exterior | firewall-denied | interior } Any view inbound-packets: Displays information about incoming IP packets. outbound-packets: Displays information about outgoing IP packets. exterior: Displays information about the IP packets in the exterior table. The exterior table records rule-incompliant packets. firewall-denied: Displays information about denied IP packets.
CHAPTER 58: IP ACCOUNTING CONFIGURATION COMMANDS Table 152 Description on the fields of the display ip count command Field Description Protocol Protocol carried in a packet Pkts Number of packets Bytes Number of bytes of packets display ip count rule Syntax View Parameter Description Example display ip count rule Any view None Use the display ip count rule command to display IP accounting rules. # Display IP accounting rules.
Example # Enable IP accounting. system-view [Sysname] ip count enable ip count exterior-threshold Syntax ip count exterior-threshold number undo ip count exterior-threshold View System view Parameter number: Maximum number of accounting entries in the exterior table, in the range of 0 to 8,192. Description Use the ip count exterior-threshold command to configure the maximum number of accounting entries in the exterior table.
CHAPTER 58: IP ACCOUNTING CONFIGURATION COMMANDS Parameter inbound-packets: Counts the incoming IP packets denied by the firewall on the current interface. outbound-packets: Counts the outgoing IP packets denied by the firewall on the current interface. Description Use the ip count firewall-denied command to count the IP packets denied by the firewall on the current interface. Use the undo ip count firewall-denied command to restore the default.
n Example If no firewall is configured on the interface, valid packets refer to all incoming and outgoing IP packets. If a firewall is configured, valid packets refer to only those passing the firewall. # Count incoming IP packets on Ethernet1/0. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] ip count inbound-packets # Specify not to count incoming IP packets on Ethernet1/0.
CHAPTER 58: IP ACCOUNTING CONFIGURATION COMMANDS ip count outbound-packets Syntax ip count outbound-packets undo ip count outbound-packets View Parameter Description Interface view None Use the ip count outbound-packets command to count outgoing IP packets on the current interface. Use the undo ip count outbound-packets command to restore the default. By default, outgoing IP packets on the interface are not counted.
■ If a firewall is configured on an interface and incoming and outgoing IP packets are denied by the firewall, these IP packets are counted in the firewall-denied table. ■ If the source or destination IP address of the IP packets passing the interface (in this case, a firewall may be configured or not) matches a network address in the rule, the packets are counted in the interior table. Otherwise, the packets are counted in the exterior table.
CHAPTER 58: IP ACCOUNTING CONFIGURATION COMMANDS View Parameter User view all: Clears all statistics. firewall: Clears the statistics from the firewall-denied table. exterior: Clears the statistics from the exterior table. interior: Clears the statistics from the interior table. Description Example Use the reset ip count command to clear the statistics of IP packets. # Clear the statistics of all IP packets.
IP ADDRESSING CONFIGURATION COMMANDS 59 display ip interface Syntax View Parameter Description Example display ip interface [ interface-type interface-number ] Any view interface-type interface-number: Specifies an interface by its type and number. Use the display ip interface command to display information about a specified or all Layer 3 interfaces. # Display detailed information about IP for interface Ethernet 1/0.
CHAPTER 59: IP ADDRESSING CONFIGURATION COMMANDS Unknown type: DHCP packet deal mode: 0 global Table 154 Description on fields of the display ip interface command Field Description current state Current physical state of an interface Line protocol current state Current state of the network layer protocol Internet Address IP address of an interface followed by: ■ Primary: Identifies a primary IP address, or ■ Sub: Identifies a secondary IP address.
Table 154 Description on fields of the display ip interface command Field Description DHCP packet deal mode DHCP packet processing mode. This field appears on a DHCP-supporting device and can be one of the following values: ■ global: The DHCP server with the global address pool is enabled on the interface. ■ relay: The DHCP relay agent is enabled on the interface.
CHAPTER 59: IP ADDRESSING CONFIGURATION COMMANDS display ip interface brief ethernet 1/0 *down: administratively down (s): spoofing Interface Physical Protocol IP Address Ethernet1/0 up up 192.168.0.1 Table 155 Description on fields of the display ip interface brief command Field Description *down The interface is administratively shut down with the shutdown command. (s) Spoofing attribute of the interface.
Related command: Example ■ The primary and secondary IP addresses can be located in the same network segment. ■ Before removing the primary IP address, remove all secondary IP addresses. ■ You can assign a secondary IP address only when the interface is not configured to borrow an IP address through IP unnumbered or obtain one through BOOTP, DHCP, or PPP negotiation. display ip interface. Assign Ethernet1/0 a primary IP address and a secondary IP address, with the subnet masks both being 255.
CHAPTER 59: IP ADDRESSING CONFIGURATION COMMANDS
IP PERFORMANCE CONFIGURATION COMMANDS 60 display fib Syntax View Parameter display fib [ | { begin | include | exclude } string | acl acl-number | ip-prefix ip-prefix-name ] Any view | { begin | include | exclude } string: Displays FIB information in the buffer related to the specified string according to a regular expression. ■ The begin keyword specifies to display from the first FIB entry that contains the specified string.
CHAPTER 60: IP PERFORMANCE CONFIGURATION COMMANDS Table 156 Description on the fields of the display fib command Field Description Total number of Routes Total number of routes in the FIB table Destination/Mask Destination address/length of mask Nexthop Address of next hop Flag Flags of routes: ■ U"-Usable route ■ G"-Gateway route ■ H"-Host route ■ B"-Blackhole route ■ D"-Dynamic route ■ S"-Static route ■ R"-Refused route ■ L"-Route generated by ARP or ESIS TimeStamp Time s
U:Useable R:Reject G:Gateway H:Host B:Blackhole L:Generated by ARP or ESIS Destination/Mask 10.2.0.0/16 Nexthop 10.2.1.1 Flag U D:Dynamic TimeStamp t[1150900568] S:Static Interface Eth1/0 Token invalid display fib ip-address Syntax View Parameter display fib ip-address1 [ { mask1 | mask-length1 } [ ip-address2 { mask2 | mask-length2 } | longer ] | longer ] Any view ip-address1, ip-address2: Destination IP address, in dotted decimal notation.
CHAPTER 60: IP PERFORMANCE CONFIGURATION COMMANDS Description Example Use the display fib statistics command to display statistics about the FIB entries. # Display statistics about the FIB entries.
Table 158 Description on the fields of the display icmp statistics command Field Description parameter problem Number of input/output parameter problem packets timestamp Number of input/output time stamp packets information request Number of input information request packets mask requests Number of input/output mask requests mask replies Number of input/output mask replies information reply Number of output information reply packets time exceeded Number of input/output expiration packe
CHAPTER 60: IP PERFORMANCE CONFIGURATION COMMANDS socket state = SS_PRIV Task = RDSO(59), socketid = 1, Proto = 17, LA = 0.0.0.0:1024, FA = 0.0.0.0:0, sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0, socket option = SO_UDPCHECKSUM, socket state = SS_PRIV SOCK_RAW: Task = ROUT(68), socketid = 2, Proto = 65, LA = 0.0.0.0, FA = 0.0.0.0, sndbuf = 32767, rcvbuf = 256000, sb_cc = 0, rb_cc = 0, socket option = 0, socket state = SS_PRIV SS_NBIO SS_ASYNC Task = ROUT(68), socketid = 1, Proto = 2, LA = 0.0.
Description Related command: Example Use the display ip statistics command to display statistics of IP packets. display ip interface and reset ip statistics. # Display statistics of IP packets.
CHAPTER 60: IP PERFORMANCE CONFIGURATION COMMANDS Description Related command: Example Use the display tcp statistics command to display statistics of TCP traffic. display tcp status and reset tcp statistics. # Display statistics of TCP traffic.
Table 161 Description on the fields of the display tcp statistics command Field Description Received packets: Total Total number of packets received Sent packets: packets in sequence Number of packets arriving in sequence window probe packets Number of window probe packets received window update packets Number of window update packets received checksum error Number of checksum error packets received offset error Number of offset error packets received short error Number of received pack
CHAPTER 60: IP PERFORMANCE CONFIGURATION COMMANDS Table 161 Description on the fields of the display tcp statistics command Field Description Packets dropped with MD5 authentication Number of packets dropped with MD5 authentication Packets permitted with MD5 authentication Number of packets permitted with MD5 authentication display tcp status Syntax View Parameter Description Example display tcp status Any view None Use the display tcp status command to display status of all TCP connection for
Example # Display statistics of UDP packets.
CHAPTER 60: IP PERFORMANCE CONFIGURATION COMMANDS Example # Allow Ethernet 1/0 to forward directed broadcasts permitted by ACL 2001. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] ip forward-broadcast acl 2001 ip redirects enable Syntax ip redirects enable undo ip redirects View Parameter Description System view None Use the ip redirects enable command to enable sending ICMP redirect packets. Use the undo ip redirects command to disable sending ICMP redirect packets.
ip unreachables enable Syntax ip unreachables enable undo ip unreachables View Parameter Description System view None Use the ip unreachables enable command to enable the sending of ICMP destination unreachable packets. Use the undo ip unreachables command to disable sending ICMP destination unreachable packets. Sending ICMP destination unreachable packets is enabled by default.
CHAPTER 60: IP PERFORMANCE CONFIGURATION COMMANDS Parameter Description Related command: Example None Use the reset tcp statistics command to clear statistics of TCP traffic. display tcp statistics. # Display statistics of TCP traffic. reset tcp statistics reset udp statistics Syntax View Parameter Description Example reset udp statistics User view None Use the reset udp statistics command to clear statistics of UDP traffic. # Display statistics of UDP traffic.
Example # Enable the protection against Naptha attack. system-view [Sysname] tcp anti-naptha enable tcp mss Syntax tcp mss value undo tcp mss View Parameter Description Interface view value: Maximum size of a packet in bytes, ranging from 128 to 2,048. Use the tcp mss command to configure the maximum size of TCP packets. Use the undo tcp mss command to restore the default. By default, the maximum size of a TCP packet is 1460 bytes.
CHAPTER 60: IP PERFORMANCE CONFIGURATION COMMANDS syn-received: SYN_RECEIVED state of a TCP connection. connected-number number: Maximum number of TCP connections in a certain state. The argument number is in the range of 0 to 500. Description Use the tcp state command to configure the maximum number of TCP connections in a state. When this number is exceeded, the aging of TCP connections in this state will be accelerated. Use the undo tcp state command to restore the default.
n Example The support for this command varies with devices. # Enable the SYN Cookie feature. system-view [Sysname] tcp syn-cookie enable tcp timer check-state Syntax tcp timer check-state time-value undo tcp timer check-state View Parameter Description System view time-value: TCP connection state check interval in seconds, in the range of 1 to 60. Use the tcp timer check-state command to configure the TCP connection state check interval.
CHAPTER 60: IP PERFORMANCE CONFIGURATION COMMANDS View Parameter Description System view time-value: Length of the TCP finwait timer in seconds, ranging from 76 to 3,600. Use the tcp timer fin-timeout command to configure the length of the TCP finwait timer. Use the undo tcp timer fin-timeout command to restore the default. By default, the length of the TCP finwait timer is 675 seconds.
tcp window Syntax tcp window window-size undo tcp window View System view Parameter window-size: Receiving/sending buffer size of TCP connection in KB, ranging from 1 to 32. Description Use the tcp window command to configure the receiving/sending buffer size of TCP connection. Use the undo tcp window command to restore the default. The TCP receiving/sending buffer is 8 KB by default. Related command: Example tcp timer fin-timeout and tcp timer syn-timeout.
CHAPTER 60: IP PERFORMANCE CONFIGURATION COMMANDS
IP UNICAST POLICY ROUTING CONFIGURATION COMMANDS 61 apply default output-interface Syntax apply default output-interface interface-type interface-number [ track track-entry-number ] [ interface-type interface-number [ track track-entry-number ] ] undo apply default output-interface [ interface-type interface-number [ interface-type interface-number ] ] View Parameters policy-based-route view interface-type interface-number: Specifies an interface. track track-entry-number: Specifies a track entry.
CHAPTER 61: IP UNICAST POLICY ROUTING CONFIGURATION COMMANDS Parameters ip-address: IP address of the default next hop. track track-entry-number: Specifies a track entry. The track-entry-number is in the range 1 to 1024. Description Use the apply ip-address default next-hop command to set the default next hop for matched packets. Use the undo apply ip-address default next-hop command to remove the configuration. At most two default next hops can be specified in one command line.
Examples # Set the next hop to 1.1.1.1 for matched packets. system-view [Sysname] policy-based-route aa permit node 11 [Sysname-policy-based-route] apply ip-address next-hop 1.1.1.1 track 1 apply ip-precedence Syntax apply ip-precedence { type | value } undo apply ip-precedence View Parameters policy-based-route view type: Specifies the precedence type of IP packets. value: Specifies a precedence value.
CHAPTER 61: IP UNICAST POLICY ROUTING CONFIGURATION COMMANDS apply output-interface Syntax apply output-interface interface-type interface-number [ track track-entry-number ] [ interface-type interface-number [ track track-entry-number ] ] undo apply output-interface [ interface-type interface-number [ interface-type interface-number ] ] View Parameters policy-based-route view interface-type interface-number: Specifies an interface. track track-entry-number: Specifies a track entry.
Description Examples Use the display ip policy-based-route command to display all system and interface policy routing information. # Display all system and interface policy routing information. display ip policy-based-route Policy Name interface pr02 local pr02 Virtual-Template0 pr01 Ethernet 1/0 Table 165 Description on fields of the display ip policy-based-route command Field Description local System policy routing. pr02 Name of the policy.
CHAPTER 61: IP UNICAST POLICY ROUTING CONFIGURATION COMMANDS Table 166 Description on fields of the display ip policy-based-route setup command Field Description policy-based-route pr01 The referenced policy name is pr01. permit node 1 The match mode is permit and the policy consists of only node 1. if-match acl 3101 Packets satisfying ACL 3101 are matched. apply output-interface Ethernet1/0 The outgoing interface of matched packets is Ethernet1/0.
display policy-based-route Syntax View display policy-based-route [ policy-name ] Any view Parameters policy-name: Policy name, a string of 1 to 19 characters. Description Use the display policy-based-route command to display the configured policy routing information. Examples # Display the configured policy routing information.
CHAPTER 61: IP UNICAST POLICY ROUTING CONFIGURATION COMMANDS if-match packet-length Syntax if-match packet-length min-len max-len undo if-match packet-length View Parameters policy-based-route view min-len: Minimum IP packet length in bytes, in the range of 0 to 65535. max-len: Maximum IP packet length in bytes, in the range of 1 to 65535. max-len must be no less than min-len. Description Use the if-match packet-length command to define a packet length match rule.
■ Related commands: Examples System policy routing is used to route packets generated locally. Unless otherwise required, you are not recommended to enable system policy routing. policy-based-route. # Enable system policy routing and reference policy aaa.
CHAPTER 61: IP UNICAST POLICY ROUTING CONFIGURATION COMMANDS Parameters policy-name: Policy name, a string of 1 to 19 characters. deny: Specifies the match mode of the policy node as deny. When a packet satisfies all rules defined by the if-match clauses, the packet will be refused by the node and will not go to match the next policy node. permit: Specifies the match mode of the policy node as permit. If a packet satisfies all the rules defined by the if-match clauses, the apply clauses are executed.
If no policy name is specified, this command clears all the policy routing statistics. Examples # Clear all the policy routing statistics.
CHAPTER 61: IP UNICAST POLICY ROUTING CONFIGURATION COMMANDS
UDP HELPER CONFIGURATION COMMANDS 62 display udp-helper server Syntax View display udp-helper server [ interface interface-type interface-number ] Any view Parameter interface interface-type interface-number: Displays information of forwarded UDP packets on the specified interface. Description Use the display udp-helper server command to display the information of forwarded UDP packets on the specified interface or all interfaces.
CHAPTER 62: UDP HELPER CONFIGURATION COMMANDS reset udp-helper packet udp-helper enable Syntax udp-helper enable undo udp-helper enable View Parameter Description System view None Use the udp-helper enable command to enable UDP Helper. Use the undo udp-helper enable command to disable UDP Helper. By default, UDP Helper is disabled.
Description Use the udp-helper port command to enable the forwarding of packets with the specified UDP port number. Use the undo udp-helper port command to remove the configured UDP port numbers. By default, the UDP Helper enabled device forwards broadcast packets with any of the six destination port numbers 69, 53, 37, 137, 138 and 49. The configured UDP port numbers (including the default UDP port numbers) will all be removed if UDP Helper is disabled.
CHAPTER 62: UDP HELPER CONFIGURATION COMMANDS
URPF CONFIGURATION COMMANDS 63 ip urpf Syntax ip urpf { loose | strict } [ allow-default-route ] [ acl acl-number ] undo ip urpf View Parameter Interface view loose: Specifies the loose URPF check. strict: Specifies the strict URPF check. allow-default-route: Allows special treatment to default route. acl-number: ACL number, in the range of 2000 to 3999. Description ■ For a basic ACL, the value ranges from 2000 to 2999. ■ For an advanced ACL, the value ranges from 3000 to 3999.
CHAPTER 63: URPF CONFIGURATION COMMANDS
FAST FORWARDING COMMANDS 64 display ip fast-forwarding cache Syntax View Parameter Description Example display ip fast-forwarding cache Any view None Use the display ip fast-forwarding cache command to display the information in the fast forwarding cache. # Display the information in the fast forwarding cache. display ip fast-forwarding cache Fast-Forwarding cache: total 3 items Index SIP SPort DIP DPort Pro Input_If Output_If Flg 412 :0 7.0.0.13 68 8.0.0.1 67 17 Eth1/0 Eth1/1 7 484 :0 8.0.0.
CHAPTER 64: FAST FORWARDING COMMANDS Parameter inbound: Enables or disables fast forwarding only in the inbound direction. outbound: Enables or disables fast forwarding only in the outbound direction. If no parameter is specified, fast forwarding is enabled or disabled in both the inbound and outbound directions. Description Use the ip fast-forwarding command to enable fast forwarding in the inbound and/or outbound direction(s).
reset ip fast-forwarding cache Syntax View Parameter Description Example reset ip fast-forwarding cache User view None Use the reset ip fast-forwarding cache command to clear the information in the fast forwarding cache. # Clear the information in the fast forwarding cache.
CHAPTER 64: FAST FORWARDING COMMANDS
IPV6 BASICS CONFIGURATION COMMANDS 65 display dns ipv6 dynamic-host Syntax View Parameter Description Example display dns ipv6 dynamic-host Any view None Use the display dns ipv6 dynamic-host command to display IPv6 dynamic domain name cache information. # Display IPv6 dynamic domain name cache information. display dns ipv6 dynamic-host No.
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS Example # Display IPv6 DNS server information. display dns ipv6 server Type: D:Dynamic S:Static DNS Server 1 2 Type S S IPv6 Address 1::1 FE80:1111:2222:3333:4444:5555:6666:7777 (Interface Name) Vlan2 Table 171 Description on the fields of the display dns ipv6 server command Field Description DNS Server Sequence number of the DNS server, which is assigned automatically by the system, starting from 1.
Table 172 Description on fields of the display ipv6 fib command Field Description Flag Route flag: ■ U - Usable route ■ G - Gateway route ■ H - Host route ■ B - Blackhole route ■ D - Dynamic route ■ S - Static route Label Label Tunnel ID ID of a tunnel TimeStamp Generation time of a FIB entry Interface Outgoing interface that forwards packets display ipv6 fibcache Syntax View Parameter Description Example display ipv6 fibcache Any view None Use the display ipv6 fibcache command
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS display ipv6 host Host Age aaa 0 bbb 0 Flags static static IPv6Address 2002::1 2002::2 Table 173 Description on fields of the display ipv6 host command Field Description Host Host name Age Time for the entry to live. “0” is displayed in the case of static configuration. Flags Flag indicating the type of mapping between a host name and an IPv6 address. Static indicates a static mapping.
IPv6 is enabled, link-local address is FE80::200:1FF:FE04:5D00 Global unicast address(es): 2001::1, subnet is 2001::/64 10::200:1FF:FE04:5D00, subnet is 10::/64 [AUTOCFG] [valid lifetime 4641s/preferred lifetime 4637s] Joined group address(es): FF02::1:FF00:1 FF02::1:FF04:5D00 FF02::2 FF02::1 MTU is 1500 bytes ND DAD is enabled, number of DAD attempts: 1 ND reachable time is 30000 milliseconds ND retransmit interval is 1000 milliseconds Hosts use stateless autoconfig for addresses Table 174 Descriptio
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS Table 175 Description on fields of display ipv6 interface brief (on a router) Field Description (s) Spoofing attribute of the interface, that is, the link protocol state of the interface is up, but the link does not exist, or the link is established on demand, instead of being permanent.
IPv6 Address FE80::200:5EFF:FE32:B800 Link-layer 0000-5e32-b800 VID Interface State Eth1/0 REACH S N/A T - Age Table 176 Description on fields of the display ipv6 neighbors command Field Description IPv6 Address IPv6 address of a neighbor Link-layer Link layer address (MAC address of a neighbor) VID VLAN to which the interface connected with a neighbor belongs Interface Interface connected with a neighbor State State of a neighbor, including: ■ INCMP: The address is being resolved.
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS display ipv6 neighbors dynamic count Total dynamic entry(ies): 2 display ipv6 pathmtu Syntax View Parameter display ipv6 pathmtu { ipv6-address | all | dynamic | static } Any view ipv6-address: IPv6 address whose PMTU information is to be displayed. all: Displays all PMTU information. dynamic: Displays all dynamic PMTU information. dynamic: Displays all static PMTU information.
socket-id: Displays the information of the socket. The socket ID is in the range 0 to 3072. Description Example Use the display ipv6 socket command to display socket information. # Display the information of all sockets.
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS Description Example Use the display ipv6 statistics command to display statistics of IPv6 packets and ICMPv6 packets. # Display the statistics of IPv6 packets and ICMPv6 packets.
Table 179 Description on fields of the display ipv6 statistics command Field Description Sent packets: Statistics of sent IPv6 packets, including: Total: 0 Local sent out: 0 forwarded: 0 raw packets: 0 discarded: 0 routing failed: 0 fragments: 0 fragments failed: 0 Received packets: ■ Total number of sent packets ■ Number of packets sent locally ■ Number of forwarded packets ■ Number of packets sent via raw socket ■ Number of discarded packets ■ Number of packets failing to be routed
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS Table 179 Description on fields of the display ipv6 statistics command Field Description Received packets: Statistics of received ICMPv6 packets, including Total: 0 checksum error: 0 too short: 0 bad code 0 unreached: 0 too big: 0 hopcount exceeded: 0 reassembly timeout: 0 parameter problem: 0 unknown error type: 0 ■ Total number of received packets ■ Number of packets with checksum errors ■ Number of too small packets ■ Number of packets with
out-of-order packets: 0 (0 bytes) packets with data after window: 0 (0 bytes) packets after close: 0 ACK packets: 0 (0 bytes) duplicate ACK packets: 0, too much ACK packets: 0 Sent packets: Total: 0 urgent packets: 0 control packets: 0 (including 0 RST) window probe packets: 0, window update packets: 0 data packets: 0 (0 bytes) data packets retransmitted: 0 (0 bytes) ACK only packets: 0 (0 delayed) Retransmitted timeout: 0, connections dropped in retransmitted timeout: 0 Keepalive timeout: 0, keepalive
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS Table 180 Description on fields of the display tcp ipv6 statistics command Field Description Sent packets: Statistics of sent packets, including Total: 0 1 Total number of packets urgent packets: 0 2 Number of packets containing an urgent indicator control packets: 0 (including 0 RST) window probe packets: 0 window update packets: 0 3 Number of control packets 4 Number of window probe packets 5 Number of window update packets data packets: 0 (0
Table 181 Description on fields of the display tcp ipv6 status command Field Description TCP6CB IPv6 address of the TCP control block (hexadecimal) Local Address Local IPv6 address Foreign Address Remote IPv6 address State IPv6 TCP connection status, including ■ Closed ■ Listening ■ Syn_Sent ■ Syn_Rcvd ■ Established ■ Close_Wait ■ Fin_Wait1 ■ Closing ■ Last_Ack ■ Fin_Wait2 ■ Time_Wait display udp ipv6 statistics Syntax View Parameter Description Example display udp ipv6
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS Table 182 Description on fields of the display udp ipv6 statistics command Field Description shorter than header Total number of UDP packets whose total length is less than specified by the packet header data length larger than packet Total number of packets whose data length exceeds that specified by the packet header unicast(no socket on port) Total number of unicast packets without any socket received on a port broadcast/multicast(no socket on
Description Use the ipv6 command to enable the IPv6 packet forwarding function. Use the undo ipv6 command to disable the IPv6 packet forwarding function. By default, the IPv6 packet forwarding function is disabled. Example # Enable the IPv6 packet forwarding function.
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS View Parameter Description Interface view None Use the ipv6 address auto link-local command to automatically generate a link-local address for an interface. Use the undo ipv6 address auto link-local command to remove the automatically generated link-local address for an interface. By default, a link-local address will automatically be generated after a site-local or global IPv6 unicast address is configured for an interface.
View Parameter Description Interface view ipv6-address: IPv6 link-local address. The first ten bits of an address must be 1111111010 (binary), that is, the first group of hexadecimals in the address must be FE80 to FEBF. Use the ipv6 address link-local command to configure a link-local address manually for a specified interface. Use the undo ipv6 address link-local command to remove the configured link-local address for the interface. Example # Configure a link-local address for Ethernet1/0.
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS Parameter Description None Use the ipv6 fib-loadbalance-type hash-based command to specify the load sharing mode based on the HASH algorithm for packet forwarding. Use the undo ipv6 fib-loadbalance-type hash-based command to restore the load sharing mode to the default. By default, the load sharing based on polling is adopted, that is, each ECMP route is used in turn to forward packets.
Parameter bucket bucket-size: Number of tokens in a token bucket, in the range of 1 to 200. ratelimit interval: Update period of the token bucket in milliseconds, in the range of 0 to 2,147,483,647. The update period “0” indicates that the number of ICMPv6 error packets sent is not restricted. Description Use the ipv6 icmp-error command to configure the size and update period of a token bucket. Use the undo ipv6 icmp-error command to restore the defaults.
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS Parameter Description mtu-size: Size of the maximum transmission units (MTUs) of an interface in bytes, in the range of 1,280 to 1,500. The default value is 1,500. Use the ipv6 mtu command to set the MTU of IPv6 packets sent over an interface. Use the undo ipv6 mtu command to restore the default MTU. # Set the MTU of IPv6 packets sent over Ethernet1/0 to 1280 bytes.
Description Use the ipv6 nd autoconfig other-flag command to set the other stateful configuration flag (O) flag to 1 so that the host can acquire information other than IPv6 address through stateful autoconfiguration (for example, DHCP server). Use the undo ipv6 nd autoconfig other-flag command to remove the setting so that the host can acquire other information through stateless autoconfiguration. By default, the O flag is set to 0.
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS Parameter Description value: Number of hops, in the range of 0 to 255. When it is set to 0, the Cur Hop Limit field in RA messages sent by the device is 0. That is, the number of hops is determined by the host itself, but not specified by the device. Use the ipv6 nd hop-limit command to configure the hop limit advertised by the device. Use the undo ipv6 nd hop-limit command to restore the default hop limit.
View Interface view Parameter value: Neighbor reachable time in milliseconds, in the range of 1 to 3,600,000. Description Use the ipv6 nd nud reachable-time command to configure the neighbor reachable time on an interface. This time value serves as not only the neighbor reachable time on the local interface, but also the value of the Reachable Timer field in RA messages sent by the local interface.
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] ipv6 nd ra halt ipv6 nd ra interval Syntax ipv6 nd ra interval max-interval-value min-interval-value undo ipv6 nd ra interval View Parameter Interface view max-interval-value: Maximum interval for advertising RA messages in seconds, in the range of 4 to 1,800. min-interval-value: Minimum interval for advertising RA messages in seconds, in the range of 3 to 1,350.
Parameter prefix-length: Prefix length of an IPv6 address. ipv6-prefix: IPv6 address prefix. valid-lifetime: Valid lifetime of a prefix in seconds, in the range of 0 to 4,294,967,295. preferred-lifetime: Preferred lifetime of a prefix used for stateless autoconfiguration in seconds, in the range of 0 to 4,294,967,295. no-autoconfig: Specifies a prefix not to be used for stateless autoconfiguration. If this keyword is not provided, the prefix is used for stateless autoconfiguration.
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS Note that the router lifetime in RA messages should be greater than or equal to the advertising interval. Example # Set the router lifetime in RA messages on Ethernet1/0 to 1,000 seconds.
Example # Configure a static neighbor entry for Layer 3 interface Ethernet1/0. system-view [Sysname] ipv6 neighbor 2000::1 fe-e0-89 interface ethernet1/0 ipv6 neighbors max-learning-num Syntax ipv6 neighbors max-learning-num number undo ipv6 neighbors max-learning-num View Interface view Parameter number: Maximum number of neighbors that can be dynamically learned by an interface, in the range of 1 to 2,048. The default value is 1,024.
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS Example # Configure a static PMTU for a specified IPv6 address. system-view [Sysname] ipv6 pathmtu fe80::12 1300 ipv6 pathmtu age Syntax ipv6 pathmtu age age-time undo ipv6 pathmtu age View Parameter Description System view age-time: Aging time for PMTU in minutes, in the range of 10 to 100. Use the ipv6 pathmtu age command to configure the aging time for a dynamic PMTU. Use the undo ipv6 pathmtu age command to restore the default.
reset ipv6 fibcache Syntax View Parameter Description Example reset ipv6 fibcache User view None Use the reset ipv6 fibcache command to clear FIB cache entries. # Clear FIB cache entries. reset ipv6 fibcache reset ipv6 neighbors Syntax View Parameter reset ipv6 neighbors { all | dynamic | interface interface-type interface-number | static } User view all: Clears the static and dynamic neighbor information on all interfaces.
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS Description Example Use the reset ipv6 pathmtu the command to clear the PMTU information. # Clear all PMTUs. reset ipv6 pathmtu all reset ipv6 statistics Syntax View Parameter Description Example reset ipv6 statistics User view None Use the reset ipv6 statistics command to clear the statistics of IPv6 packets and ICMPv6 packets. # Clear the statistics of IPv6 packets and ICMPv6 packets.
Example # Clear the statistics of all UDP packets. reset udp ipv6 statistics tcp ipv6 timer fin-timeout Syntax tcp ipv6 timer fin-timeout wait-time undo tcp ipv6 timer fin-timeout View Parameter Description System view wait-time: Length of the finwait timer for TCP connections in seconds, in the range of 76 to 3,600. Use the tcp ipv6 timer fin-timeout command to set the finwait timer for TCP connections.
CHAPTER 65: IPV6 BASICS CONFIGURATION COMMANDS system-view [Sysname] tcp ipv6 timer syn-timeout 100 tcp ipv6 window Syntax tcp ipv6 window size undo tcp ipv6 window View System view Parameter size: Size of the TCP sending/receiving buffer in KB (kilobyte), in the range of 1 to 32. Description Use the tcp ipv6 window command to set the size of the TCP sending/receiving buffer. Use the undo tcp ipv6 window command to restore the default.
NAT-PT CONFIGURATION COMMANDS 66 display natpt address-group Syntax View Parameter Description Example display natpt address-group Any view None Use the display natpt address-group command to display the configuration information of a NAT-PT address pool. # Display the configuration information of a NAT-PT address pool. display natpt address-group NATPT IPv4 Address Pool Information: 1: from 1.1.1.1 to 1.1.1.
CHAPTER 66: NAT-PT CONFIGURATION COMMANDS display natpt address-mapping NATPT address mapping(v6bound view): IPv4 Address IPv6 Address 1.1.1.1 3001::0001 2.2.2.2 3001::0002 NATPT V6Server static mapping: IPv4Address IPv6 Address 1.1.1.1^ 6 3001::0003^ Type SOURCE DESTINATION 1270 Pro TCP Table 184 Description on fields of the display natpt address-mapping command Field Description NATPT address mapping (v6bound Displays the static and dynamic IPv6-to-IPv4 mapping.
Table 185 Description on fields of the display natpt aging-time command Field Description icmp -------aging-time value is 20 The timeout time for an ICMP packet is 20 seconds. dns -------aging-time value is 10 The timeout time for a DNS packet is 10 seconds. syn -------aging-time value is 240 The timeout time for a synchronization packet is 240 seconds. finrst -------aging-time value is 5 The timeout time for a finrst packet is 5 seconds.
CHAPTER 66: NAT-PT CONFIGURATION COMMANDS finrst -------aging-time value is frag -------aging-time value is NATPT Statistics: Total Sessions: 0 Expired Sessions: 0 Hits: 0 Misses: 0 Total Fragment Sessions: Expired Fragment Sessions: Fragment Hits: Fragment Misses: Total Address Mapping: 0 Total V6Server Mappings: 0 5 (seconds) 5 (seconds) 0 0 0 0 (static: 0 dynamic: 0 ) NATPT Interfaces: Ethernet1/0 For the explanations to the information displayed above, see the descriptions of related commands
display natpt session Syntax View Parameter display natpt session { all | icmp | tcp | udp } Any view all: Displays the information of all sessions. icmp: Displays the information of ICMP sessions. tcp: Displays the information of TCP sessions. udp: Displays the information of UDP sessions. Description Example Use the display natpt session command to display the information of dynamic NAT-PT sessions. # Display the information of all dynamic NAT-PT sessions.
CHAPTER 66: NAT-PT CONFIGURATION COMMANDS display natpt statistics NATPT Statistics: Total Sessions: 0 Expired Sessions: 0 Hits: 0 Misses: 0 Total Fragment Sessions: Expired Fragment Sessions: Fragment Hits: Fragment Misses: Total Address Mapping: Total V6Server Mappings: 0 0 0 0 0 (static: 0 0 dynamic: 0 ) NATPT Interfaces: Ethernet1/0 Table 188 Description on fields of the display natpt statistic command Field Description Total Sessions Total number of sessions Expired Session Num
Note that: Example ■ If start-ipv4-address equals end-ipv4-address, only one address is available in the address pool. ■ The execution of the undo natpt address-group command may affect some dynamic NAT-PT mappings. ■ Currently, a NAT-PT address pool and an IPv4 NAT address pool do not share any address. ■ When there is only one address in the NAT-PT address pool, the address is applied to only NAPT-PT.
CHAPTER 66: NAT-PT CONFIGURATION COMMANDS Example ■ 10 seconds for a DNS packet ■ 5 seconds for a FINRST packet ■ 5 seconds for a FRAG packet ■ 20 seconds for an ICMP packet ■ 240 seconds for a SYN packet ■ 40 seconds for a UDP packet ■ 86,400 seconds for a TCP packet # Set the NAT-PT session timeout time to 30 seconds for UDP packets and to 45 seconds for ICMP packets.
Parameter Description max-number: Maximum number of sessions, in the range of 0 to 2,048. Use the natpt max-session command to set the maximum number of NAT-PT sessions. Use the undo natpt max-session command to restore the default maximum number of NAT-PT sessions. By default, the maximum number of NAT-PT sessions is 2,048. Example # Configure the system to allow 300 concurrent NAT-PT sessions.
CHAPTER 66: NAT-PT CONFIGURATION COMMANDS natpt turn-off tos Syntax natpt turn-off tos undo natpt turn-off tos View Parameter Description System view None Use the natpt turn-off tos command to set the ToS field in an IPv4 packet translated from IPv6 to 0. Use the undo natpt turn-off tos command to set the ToS field in an IPv4 packet translated from an IPv6 packet to the value of the Traffic Class field in the IPv6 packet.
natpt v4bound dynamic Syntax natpt v4bound dynamic acl number acl-number prefix natpt-prefix undo natpt v4bound dynamic acl number acl-number View Parameter System view acl-number: IPv4 access control list (ACL) number, in the range of 2000 to 2999. natpt-prefix: NAT-PT prefix, 96 bits in length. Description Use the natpt v4bound dynamic command to configure a dynamic IPv4-to-IPv6 mapping. Use the undo natpt v4bound dynamic command to remove the dynamic mapping.
CHAPTER 66: NAT-PT CONFIGURATION COMMANDS protocol-type: Protocol type, including TCP and UDP. ipv4-address-destination: Destination IPv4 address to be mapped. ipv4-port-number: IPv4 port number, in the range of 1 to 12287. ipv6-address-destination: IPv6 address to which the destination IPv4 address is mapped ipv6-port-number: IPv6 port number, in the range of 1 to 12287.
Description Use the natpt v6bound dynamic command to configure a dynamic mapping for packets going from an IPv6 node to an IPv4 node. Use the undo natpt v6bound dynamic command to remove the configured dynamic mapping. Example # Translate the source address of an IPv6 packet that matches IPv6 ACL 2001 into an IPv4 address in address pool 1. system-view [Sysname] natpt address-group 1 2.3.4.5 2.3.4.
CHAPTER 66: NAT-PT CONFIGURATION COMMANDS reset natpt dynamic-mappings reset natpt statistics Syntax View Parameter Description Example reset natpt statistics User view None Use the reset natpt statistics command to clear all NAT-PT statistics information. # Clear all NAT-PT statistics information.
DUAL STACK CONFIGURATION COMMANDS 67 ipv6 Syntax ipv6 undo ipv6 View Parameter Description System view None Use the ipv6 command to enable the IPv6 packet forwarding function. Use the undo ipv6 command to disable the IPv6 packet forwarding function. By default, the function is disabled. Example # Enable the IPv6 packet forwarding function.
CHAPTER 67: DUAL STACK CONFIGURATION COMMANDS Note that: Example ■ Up to 10 global unicast addresses and site-local addresses can be configured on an interface in total. ■ The undo ipv6 address command without parameters removes all IPv6 addresses manually configured, except link-local addresses automatically configured on the interface. # Set the global unicast address of interface Ethernet 1/1 to 2001::1/64.
Description Use the ipv6 address eui-64 command to configure a site-local address or global unicast address in the EUI-64 format on an interface. Use the undo ipv6 address eui-64 command to delete the site-local address or global unicast address in the EUI-64 format on an interface. By default, no site-local or global unicast address in the EUI-64 format is configured for an interface. Example # Configure Ethernet 1/1 to create an IPv6 address in the EUI-64 format.
CHAPTER 67: DUAL STACK CONFIGURATION COMMANDS
TUNNELING CONFIGURATION COMMANDS 68 n A tunnel interface number is in the X format, where X ranges from 0 to 1023. destination Syntax destination { ip-address | ipv6-address } undo destination View Parameter Tunnel interface view ip-address: Destination IPv4 address of a specified tunnel interface. ip-address: Destination IPv6 address of a specified tunnel interface. Description Use the command destination to specify a destination address for the tunnel interface.
CHAPTER 68: TUNNELING CONFIGURATION COMMANDS [Sysname2] interface tunnel 1 [Sysname2-Tunnel1] source 192.100.1.1 [Sysname2-Tunnel1] destination 193.101.1.1 display interface tunnel Syntax View Parameter Description Related command: Example display interface tunnel [ number ] Any view number: Tunnel interface number. If the number argument is not specified, the information of all tunnel interfaces will be displayed.
Table 189 Description on fields of the display interface tunnel command Field Description aggregation ID Link aggregation group ID referenced by a tunnel. If the device supports link aggregation groups, the link aggregation group ID configured in tunnel interface view is displayed. If device does not support, “aggregation ID not set” is displayed. Tunnel source Source address of a tunnel. destination Destination address of a tunnel.
CHAPTER 68: TUNNELING CONFIGURATION COMMANDS ND reachable time is 30000 milliseconds ND retransmit interval is 1000 milliseconds Hosts use stateless autoconfig for addresses Table 190 Description on fields of the display interface tunnel command Field Description Tunnel0 current state: UP The physical layer of the tunnel interface is reachable. Line protocol current state: UP The link layer of the tunnel interface is reachable.
undo interface tunnel number View System view Parameter number: Tunnel interface number, in the range of 0 to 1023. The number of tunnels that can be created is restricted by the total number of interfaces and the memory. Description Use the interface tunnel command to create a tunnel interface and enter tunnel interface view. Use the undo interface tunnel command to remove a specified tunnel interface. By default, there is no tunnel interface on the device.
CHAPTER 68: TUNNELING CONFIGURATION COMMANDS system-view [Sysname] interface tunnel 3 [Sysname-Tunnel3] mtu 10000 source Syntax source { ip-address | ipv6-address | interface-type interface-num } undo source View Parameter Tunnel interface view ip-address: Source IPv4 address of a tunnel interface. ip-address: Source IPv6 address of a tunnel interface. interface-type interface-number: Specifies an interface. The interface types include Ethernet, serial, ATM, tunnel, and loopback.
tunnel-protocol Syntax tunnel-protocol { ipv4-ipv4 | ipv6-ipv4 [ 6to4 | auto-tunnel | isatap ] | ipv6-ipv6 | ipv4-ipv6 } undo tunnel-protocol View Parameter Tunnel interface view ipv4-ipv4: Sets the tunnel to an IPv4 over IPv4 tunnel. Ipv4-ipv6: Sets the tunnel to an IPv4 over IPv6 tunnel. ipv6-ipv4: Sets the tunnel to an IPv6 over IPv4 tunnel. ipv6-ipv4 6to4: Sets the tunnel to IPv6 over IPv4 6to4 tunnel. ipv6-ipv4 auto-tunnel: Sets the tunnel to an automatic IPv4 compatible IPv6 tunnel.
CHAPTER 68: TUNNELING CONFIGURATION COMMANDS
IPV6 UNICAST POLICY ROUTING CONFIGURATION COMMANDS 69 apply default output-interface Syntax apply default output-interface interface-type interface-number undo apply default output-interface [ interface-type interface-number ] View Parameter Description IPv6 policy-based-route view interface-type interface-number: Specifies an interface. Use the apply default output-interface command to set a default outgoing interface for IPv6 packets.
CHAPTER 69: IPV6 UNICAST POLICY ROUTING CONFIGURATION COMMANDS Description Use the apply destination-based-forwarding command to enable destination based forwarding. Use the undo apply destination-based-forwarding command to disable destination based forwarding. By default, destination based forwarding is disabled. With destination based forwarding enabled, IPv6 packets not matching the policy node can be routed through the routing table; otherwise, such packets will be discarded.
apply ipv6-address next-hop Syntax apply ipv6-address next-hop ipv6-address undo apply ipv6-address next-hop [ ipv6-address ] View Parameter Description IPv6 policy-based-route view ipv6-address: IPv6 address of a next hop Use the apply ipv6-address next-hop command to set a next hop for matched IPv6 packets. Use the undo apply ipv6-address next-hop command to remove the next hop. The next hop must be adjacent to the device.
CHAPTER 69: IPV6 UNICAST POLICY ROUTING CONFIGURATION COMMANDS Table 191 Preferences and the corresponding keywords Description Preference value Keyword 4 flash-override 5 critical 6 internet 7 network Use the apply ipv6-precedence command to set a preference for matched IPv6 packets. Use the undo apply ipv6-precedence command to remove the preference.
Example # Specify the interface Serial 2/0 as the outgoing interface for matched IPv6 packets. system-view [Sysname] ipv6 policy-based-route aa permit node 11 [Sysname-pbr6-aa-11] apply output-interface serial 2/0 display ipv6 config policy-based-route Syntax View Parameter Description Example display ipv6 config policy-based-route policy-name Any view policy-name: Policy name, a string of 1 to 19 characters.
CHAPTER 69: IPV6 UNICAST POLICY ROUTING CONFIGURATION COMMANDS display ipv6 policy-based-route Policy Name interface pr02 local pr02 Virtual-Template0 pr01 Ethernet 1/0 Table 193 Description on fields of the display ipv6 policy-based-route command Field Description Local System policy routing pr02 Policy name Virtual-Template0 Policy pr02 applied to Virtual-template0 Ethernet1/0 Policy pr01 applied to Ethernet1/0 display ipv6 policy-based-route setup Syntax View Parameter displa
display ipv6 policy-based-route statistics Syntax View Parameter display ipv6 policy-based-route statistics { interface interface-type interface-number | local } Any view interface interface-type interface-number: Displays IPv6 policy routing statistics on the specified interface. local: Displays IPv6 system policy routing statistics. Description Example Use the display ipv6 policy-based-route statistics command to display IPv6 policy routing statistics.
CHAPTER 69: IPV6 UNICAST POLICY ROUTING CONFIGURATION COMMANDS Example # Permit the packets matching ACL 2000. system-view [Sysname] ipv6 policy-based-route aa permit node 10 [Sysname-pbr6-aa-10] if-match acl6 2000 if-match packet-length Syntax if-match packet-length min-len max-len undo if-match packet-length View Parameter IPv6 policy-based-route view min-len: Minimum IPv6 packet length in bytes, in the range of 0 to 65535.
System policy routing is used to route packets generated locally. Unless otherwise required, you are not recommended to enable system policy routing. Related command: Example ipv6 local policy-based-route. # Enable IPv6 system policy routing and reference a policy named AAA.
CHAPTER 69: IPV6 UNICAST POLICY ROUTING CONFIGURATION COMMANDS node and will not match against the next policy node. If not, the packet will match against the next policy node. permit: Specifies the match mode of the policy node as permit. If a packet satisfies all the rules defined by the if-match clauses, the apply clauses are executed. If not, the packet will match against the next policy node. node node-number: Number of the IPv6 policy node, in the range 0 to 65535.
TERMINAL ACCESS CONFIGURATION COMMANDS 70 auto-close Syntax auto-close time undo auto-close View Terminal template view Parameters time: Automatic link teardown time, in seconds. It ranges from 5 to 240. Description Use the auto-close command to configure the automatic link teardown time. Use the undo auto-close command to restore the default. By default; the automatic link teardown time is 0 seconds, namely, no automatic link teardown is performed.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS Use the undo auto-link command to restore the default. By default, the automatic link establishment time is 0 seconds, namely, no automatic link establishment is performed. The terminal access feature supports the automatic link establishment function. You can enable the function and configure the automatic link establishment time in terminal template view.
system-view [Sysname] rta template abc [Sysname-rta-template-abc] bind vpn-instance vpn1 data protect router-unix Syntax data protect router-unix undo data protect router-unix View Terminal template view Parameters None Description Use the data protect router-unix command to enable data encryption between the router and the FEP. Use the undo data protect command to restore the default. By default, data encryption is disabled between the router and the FEP.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS Example # Enable data read blocking. system-view [Sysname] rta template abc [Sysname-rta-template-abc] data read block data send delay Syntax data send delay milliseconds undo data send delay View Terminal template view Parameters milliseconds: Data send delay, in milliseconds, ranging 1 to 1,000. Description Use the data send delay command to set the data send delay of the terminal.
Description Use the display rta command to display information about terminals. Relate command: reset rta statistics. Example # Display the information about the terminal VTY1. display rta 1 1 VTY 1 APP Index: 0 APP Type: TTY APP Name: (null) APP State: Kept Remote IP: 192.168.0.110 Source IP: 0.0.0.0 Actual Source IP: 0.0.0.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS Interface Used : Async1/0 Current State : Ok Flow Control : Stop Current Debug : 0x3c Current VTY : 0 Current APP : 0 APP Type : TTY APP Name : APP State : Kept Socket RecvBuf Size : 2048 Bytes Socket SendBuf Size : 2048 Bytes TTY Recv Bytes : 1371 Bytes TTY Send Bytes : 63696 Bytes Last Recv Time : 19:39:33 Last Send Time : 03:39:34 Current VTY Recv : 1371 Bytes Current VTY Send : 63696 Bytes Current APP Recv : 55280 Bytes Current APP Send :
Table 197 Description on the fields of the display rta terminal-number brief command Field Description Current VTY Send Data, in bytes, sent by the current VTY Current APP Recv Data, in bytes, received by the current application Current APP Send Data, in bytes, sent by the current application Time from APP is linked Time since the application was connected Encrypt(Router to Unix) Whether to encrypt data Receive Remote Buffer Address Buffer address for receiving remote data Receive Buffer He
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS Table 199 Description on the fields of the display rta all command Field Description APP State Application state # Display terminal access statistics display rta statistics RTA Template Number: 2 RTA TTY Number: 1 RTA APP Number: 1 RTA Listen Port Number: 0 Table 200 Description on the fields of the display rta statistics command Field Description RTA Template Number Number of terminal templates configured on the router RTA TTY Numb
undo driverbuf size View Terminal template view Parameters number: Buffer size, in kilobytes (KB), ranging from 8 to 32. Description Use the driverbuf size command to configure the size of terminal receive buffer. Use the undo driverbuf size command to restore the default setting. By default, the size of terminal receiver buffer is 8 KB. Note that this command takes effect only after the template is reapplied on the interface. Example # Set the terminal buffer size to 8 KB.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS menu hotkey Syntax menu hotkey ascii-code&<1-3> undo menu hotkey View Terminal template view Parameters ascii-code&<1-3>: ASCII value of hotkey, ranging 1 to 255. “&<1-3>” means that you can provide up to three hotkey ASCII values. Description Use the menu hotkey command to configure the menu hotkey. Use the undo menu hotkey command to cancel the menu hotkey configured. By default, no menu hotkey is configured.
Parameters string: Screen code of the terminal, containing 1 to 15 case-insensitive characters. Description Use the menu screencode command to configure a menu screen code. Use the undo menu screencode command to remove the menu screen code. By default, no such a screen code is configured. Some types of terminals provide the screen saving function.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS Related command: Example print information. # Enable the printing of terminal connection information on the terminal system-view [Sysname] rta template abc [Sysname-rta-template-abc] print connection-info print information Syntax print information undo print information View Terminal template view Parameters None Description Use the print information command to enable the router to print characters on the terminal.
Use the undo print menu command to disable the printing of terminal menu information. By default, terminal menu information is printed. This command takes effect only in TTY and Telnet terminal access. Make sure you enable the router to print characters on the terminal before using this command. Related command: Example print information.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS Use the undo redrawkey command to cancel the hotkey configured for terminal redrawing. By default, no hotkey is configured for terminal redrawing. The terminal redrawing hotkey can be set in TTY terminal access only. Terminal redrawing works in a similar way as the screen saving function of VTY switching.
Parameters terminal-number: Terminal number, ranging 1 to 255. Description Use the reset rta statistics command to clear the statistics of a terminal. Related command: Example display rta. # Clear all the statistics about terminal 1. reset rta statistics 1 resetkey Syntax resetkey ascii-code&<1-3> undo resetkey View Terminal template view Parameters ascii-code&<1-3>: ASCII value of a hotkey, ranging 1 to 255. “&<1-3>” means that you can provide up to three ASCII values.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS Parameters mac-address interface interface-type interface-number: Uses the specified interface MAC address as the character string for router authentication. interface-type interface-number: Specifies a port by port type and port number. string string: Uses a user-defined string for router authentication. string is a user-defined string of 1 to 30 characters.
By default, no listening port is configured on the RTC server. Note that only one listening port can be configured. Example # Configure the RTC server listening port number as 9010. system-view [Sysname] rta rtc-server listen-port 9010 rta server enable Syntax rta server enable undo rta server enable View System view Parameters None Description Use the rta server enable command to enable terminal access on the router. Use the undo rta server enable command to disable terminal access.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS By default, no source IP address is configured globally for TCP connections. n Example ■ You can use this command to configure an IP address other than the outbound interface’s IP address of the initiating router as the TCP connection source IP address. Generally, the loopback interface or dialer interface of the router are used as the TCP connection source IP address for dial-up backup and address hiding.
terminal-number: Terminal number, ranging 1 to 255. Description Use the rta terminal command to apply a template on the interface. Use the undo rta terminal command to cancel the template application. By default, no template is applied on the interface. A terminal can be created only after the configured template is applied on the corresponding interface, so as to implement terminal access. Use the terminal-number argument to specify the terminal number.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS system-view [Sysname] rta template abc [Sysname-rta-template-abc] sendbuf bufsize 200 sendbuf threshold Syntax sendbuf threshold value undo sendbuf threshold View Terminal template view Parameters value: Threshold of terminal send buffer, in bytes, ranging 50 to 2,048. Description Use the sendbuf threshold command to set the threshold of the terminal send buffer.
Description Use the tcp command to configure TCP parameters, including receive buffer size, send buffer size, no delay, keepalive interval, and number of keepalives to be sent. Use the undo tcp command to restore the default TCP settings. By default, receive buffer size is 2,048 bytes, send buffer size is 2,048 bytes, delay is enabled, keepalive interval is 50 seconds, and the number of keepalives is 3. If you specify the nodelay keyword, the TCP Nagle algorithm will not be used.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS By default, no hotkey is configured for connectivity test. With the terminal connectivity test hotkey configured on the router, you can press the hotkey to test the TCP connectivity between the terminal and the router and that between the terminal and the FEP. n Example ■ This command takes effect only in Telnet terminal access and TTY terminal access.
vty description Syntax vty vty-number description string undo vty vty-number description View Parameters Terminal template view vty-number: VTY number, ranging 0 to 7. string: VTY description, a string of 1 to 31 characters. Description Use the vty description command to configure a description for a VTY. Use the undo vty description command to remove the description for a VTY. By default, no description is configured for a VTY.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS VTYs and each VTY corresponds to one application. When multiple VTYs are configured on a terminal with the corresponding switching hotkeys, you can press the switching hotkeys to quickly switch between the VTYs without making any selection on the menu. The connection of the original VTY application is not torn down. This way, dynamic switching between the VTYs (namely, different applications) on a terminal is implemented.
system-view [Sysname] rta template abc [Sysname-rta-template-abc] vty 1 password simple abc vty rtc-client remote Syntax vty vty-number rtc-client remote ip-address port-number [ source source-ip ] undo vty vty-number View Parameters Terminal template view vty-number: VTY number, ranging 0 to 7. ip-address: IP address of the RTC server. port-number: Listening port number of the RTC server, ranging 1024 to 50000. source source-ip: Source IP address bound.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS terminal-number: Terminal number corresponding to the RTC client, ranging 1 to 255. Description Use the vty rtc-server remote command to create a VTY to serve as the RTC server. Use the undo vty command to remove the specified VTY. Note that, after this configuration, no more Telnet VTYs, TTY VTYs, or RTC client VTYs can be configured in the template of the VTY.
Example # Set the screen code for VTY 1 to E!9Q. system-view [Sysname] rta template abc [Sysname-rta-template-abc] vty 1 screencode E!9Q vty telnet remote Syntax vty vty-number telnet remote ip-address [ port-number ] [ source source-ip ] undo vty vty-number View Parameters Terminal template view vty-number: VTY number, ranging 0 to 7. ip-address: FEP IP address. port-number: Listening Telnet port on the FEP. It ranges 1 to 50000 and defaults to 23.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS source source-ip: Source IP address bound. Description Use the vty tty remote command to create a VTY for TTY terminal access. Use the undo vty command to remove the specified VTY. Note that, after this configuration, no more RTC client VTYs or RTC server VTYs can be configured in the template of the VTY. Example # Create VTY 1 for TTY terminal access, setting FEP IP address to 1.1.1.1, listening port number to 9010, and source IP address to 2.2.2.
undo vty-switch threshold View Terminal template view Parameters times: Threshold for VTY automatic switching, in times, ranging 1 to 1,0000. Description Use the vty-switch threshold command to configure the threshold for VTY automatic switching. Use the undo vty-switch threshold command to restore the default. By default, no threshold is configured; that is, no switching is performed. Note that this command takes effect only in RTC client terminal access.
CHAPTER 70: TERMINAL ACCESS CONFIGURATION COMMANDS
IP ROUTING TABLE COMMANDS 71 bandwidth-based-sharing Syntax bandwidth-based-sharing undo bandwidth-based-sharing View System view Parameters None Description Use the bandwidth-based-sharing command to enable bandwidth-based load sharing. Use the undo bandwidth-based-sharing command to disable bandwidth-based load sharing. By default, bandwidth-based load sharing is disabled.
CHAPTER 71: IP ROUTING TABLE COMMANDS Parameters vpn-instance vpn-instance-name: Displays routing table information for a VPN instance. The vpn-instance-name argument represents the instance name and is a string of 1 to 31 characters. verbose: Displays detailed routing table information, including that for inactive routes. With this argument absent, the command displays only summary information about active routes. |: Uses a regular expression to filter output information.
display ip routing-table Routing Tables: Public Destinations : 6 Routes : 6 Destination/Mask Proto Pre Cost NextHop Interface 2.2.2.0/24 2.2.2.1/32 127.0.0.0/8 127.0.0.1/32 192.168.80.0/24 192.168.80.10/32 Direct Direct Direct Direct Direct Direct 0 0 0 0 0 0 0 0 0 0 0 0 2.2.2.1 127.0.0.1 127.0.0.1 127.0.0.1 192.168.80.10 127.0.0.
CHAPTER 71: IP ROUTING TABLE COMMANDS Destination: Protocol: Preference: NextHop: RelyNextHop: Tunnel ID: State: Tag: 127.0.0.0/8 Direct 0 127.0.0.1 0.0.0.0 0x0 Active NoAdv 0 Process ID: Cost: Interface: Neighbour: Label: Age: 0 0 InLoopBack0 0.0.0.0 NULL 00h00m36s Destination: Protocol: Preference: NextHop: RelyNextHop: Tunnel ID: State: Tag: 127.0.0.1/32 Direct 0 127.0.0.1 0.0.0.0 0x0 Active NoAdv 0 Process ID: Cost: Interface: Neighbour: Label: Age: 0 0 InLoopBack0 0.0.0.
verbose: Displays detailed routing table information, including that for inactive routes. With this argument absent, the command displays only brief information about active routes. Description Use the display ip routing-table acl command to display information about routes permitted by a specified basic ACL. This command is intended for the follow-up display of routing policies. For more information about routing policy, refer to “Routing Policy Common Configuration Commands” on page 1187.
CHAPTER 71: IP ROUTING TABLE COMMANDS Protocol: Direct Preference: 0 NextHop: 127.0.0.1 RelyNextHop: 0.0.0.0 Tunnel ID: 0x0 State: Active NoAdv Tag: 0 Destination: 10.1.2.0/24 Protocol: Direct Preference: 0 NextHop: 10.1.2.1 RelyNextHop: 0.0.0.0 Tunnel ID: 0x0 State: Active Adv Tag: 0 Destination: 10.1.2.1/32 Protocol: Direct Preference: 0 NextHop: 127.0.0.1 RelyNextHop: 0.0.0.0 Tunnel ID: 0x0 State: Active NoAdv Tag: 0 Destination: 10.1.3.0/24 Protocol: Direct Preference: 0 NextHop: 10.1.3.
Table 204 Description on the fields of the display ip routing-table command Field Description State Route status: ActiveU This is an active unicast route. U means unicast. Blackhole A blackhole route is similar with a reject route except that a router drops packets matching a blackhole route without sending ICMP unreachable messages to the source of the packets. Delete This route is deleted. Gateway This is an indirect route. Hidden This route is hidden.
CHAPTER 71: IP ROUTING TABLE COMMANDS Parameters ip-address: Destination IP address, in dotted decimal format. mask-length: IP address mask length in the range 0 to 32. mask: IP address mask in dotted decimal format. longer-match: Displays the route with the longest prefix. verbose: Displays detailed routing table information, including both active and inactive routes. With this keyword absent, the command displays only brief information about active routes.
Use the display ip routing-table ip-address1 { mask-length | mask } ip-address2 { mask-length | mask } command to display route entries with destination addresses within a specified range. Examples # Display route entries for the destination IP address 11.1.1.1. [Sysname] display ip routing-table Routing Table : Public Summary Count : 4 11.1.1.1 Destination/Mask Proto Pre Cost NextHop Interface 0.0.0.0/0 11.0.0.0/8 11.1.0.0/16 11.1.1.0/24 Static Static Static Static 60 60 60 60 0 0 0 0 0.
CHAPTER 71: IP ROUTING TABLE COMMANDS 1.1.1.0/24 1.1.1.1/32 2.2.2.0/24 3.3.3.0/24 3.3.3.1/32 4.4.4.0/24 4.4.4.1/32 Direct Direct Direct Direct Direct Direct Direct 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1.1.1.1 127.0.0.1 2.2.2.1 3.3.3.1 127.0.0.1 4.4.4.1 127.0.0.
Protocol: Preference: NextHop: RelyNextHop: Tunnel ID: State: Tag: Direct 0 2.2.2.1 0.0.0.0 0x0 Active Adv 0 Destination: 2.2.2.1/32 Protocol: Direct Preference: 0 NextHop: 127.0.0.1 RelyNextHop: 0.0.0.0 Tunnel ID: 0x0 State: Active NoAdv Tag: 0 Process ID: Cost: Interface: Neighbour: Label: Age: 0 0 Vlan2 0.0.0.0 NULL 00h20m52s Process ID: Cost: Interface: Neighbour: Label: Age: 0 0 InLoop0 0.0.0.0 NULL 00h20m52s For detailed description of the above output, see Table 204.
CHAPTER 71: IP ROUTING TABLE COMMANDS Direct Routing table Status : < Inactive> Summary Count : 0 # Display summary information about static routes. display ip routing-table protocol static Public Routing Table : Static Summary Count : 2 Static Routing table Status : < Active> Summary Count : 0 Static Routing table Status Summary Count : 2 Destination/Mask Proto 1.2.3.0/24 Static 3.0.0.0/8 Static : < Inactive> Pre 60 60 Cost 0 0 NextHop 1.2.4.5 2.2.2.
Table 205 Description on the fields of the display ip routing-table statistics command Field Description deleted Number of routes marked as deleted, which will be freed after a period.
CHAPTER 71: IP ROUTING TABLE COMMANDS Examples # Display recursive tunnel information. display ip relay-tunnel Total Number of Relay-tunnel is: 1. Dest/Mask: 40.40.40.40/255.255.255.
View Any view Parameters None Description Use the display ipv6 routing-table command to display brief routing table information, including destination IP address and prefix, protocol type, priority, metric, next hop and outbound interface. The command displays only active routes, namely, the brief information about the current optimal routes.
CHAPTER 71: IP ROUTING TABLE COMMANDS Summary Count : 2 Destination NextHop Interface Destination NextHop Interface : : : : : : ::1/128 ::1 InLoop0 1:1::/64 :: NULL0 Protocol Preference Cost Protocol Preference Cost : Direct : 0 : 0 : Static : 60 : 0 Refer to Table 209 for description about the above output.
Examples # Display brief routing information for the specified destination IPv6 address and prefix.
CHAPTER 71: IP ROUTING TABLE COMMANDS Interface : NULL0 Destination: 300::/64 NextHop : :: Interface : NULL0 Cost : 0 Protocol : Static Preference: 60 Cost : 0 Refer to Table 209 for description about the above output. display ipv6 routing-table ipv6-prefix Syntax View Parameters display ipv6 routing-table ipv6-prefix ipv6-prefix-name [ verbose ] Any view ipv6-prefix-name: Name of the IPv6 prefix list, in the range 1 to 19 characters.
Examples # Display brief information about all direct routes. display ipv6 routing-table protocol direct Direct Routing Table : Summary Count : 1 Direct Routing Table’s Status : < Active > Summary Count : 1 Destination: ::1/128 NextHop : ::1 Interface : InLoop0 Protocol : Direct Preference: 0 Cost : 0 Direct Routing Table’s Status : < Inactive > Summary Count : 0 Refer to Table 209 for description about the above output.
CHAPTER 71: IP ROUTING TABLE COMMANDS display ipv6 routing-table verbose Syntax View display ipv6 routing-table verbose Any view Parameters None Description Use the display ipv6 routing-table verbose command to display detailed information about all active and inactive routes, including the statistics of the entire routing table and information for each route. Examples # Display detailed information about all active and inactive routes.
View Any view Parameters None Description Use the display ipv6 relay-route command to display IPv6 recursive route information. Examples # Display IPv6 recursive route information.
CHAPTER 71: IP ROUTING TABLE COMMANDS load-bandwidth Syntax load-bandwidth bandwidth undo load-bandwidth View Interface view Parameters bandwidth: Specifies the load sharing bandwidth for the interface. Description Use the load-bandwidth bandwidth command to specify the load sharing bandwidth of the interface. Use the undo load-bandwidth command to restore the default. The load sharing bandwidth of an interface defaults to the physical bandwidth of the interface.
10.1.2.2 10.1.3.2 1193501 15914 155000 2048 0 0 Atm1/0/0 Serial2/0/0 # Clear the statistics of bandwidth-based load sharing. reset load-sharing statistics ip address 10.2.1.0 24 There are/is totally 3 route entry(s) to the same destination network. Nexthop Packet(s) Bandwidth[KB] Flow(s) Interface 10.1.1.2 0 100000 0 Ethernet0/0/0 10.1.2.2 0 155000 0 Atm1/0/0 10.1.3.
CHAPTER 71: IP ROUTING TABLE COMMANDS Examples # Clear the routing statistics of all the routing protocols in the routing table.
BGP CONFIGURATION COMMANDS 72 n For routing policy configuration commands, refer to “Routing Policy Common Configuration Commands” on page 1187. aggregate Syntax aggregate ip-address { mask | mask-length } [ as-set | attribute-policy route-policy-name | detail-suppressed | origin-policy route-policy-name | suppress-policy route-policy-name ] * undo aggregate ip-address { mask | mask-length } View Parameters BGP view/BGP-VPN instance view ip-address: Destination IP address of summary route.
CHAPTER 72: BGP CONFIGURATION COMMANDS Table 214 Functions of the keywords Description Keywords Function detail-suppressed This keyword does not suppress the summary route, but it suppresses the advertisement of all the more specific routes. To summarize only some specific routes, use the peer filter-policy command. suppress-policy Used to create a summary route and suppress the advertisement of some summarized routes.
By default, no load balancing is configured. Unlike IGP, BGP has no explicit metric for making load balancing decision. Instead, it implements load balancing using route selection rules. Related commands: Examples display bgp routing-table. # In BGP view, set the number of routes participating in BGP load balancing to 2.
CHAPTER 72: BGP CONFIGURATION COMMANDS bestroute compare-med (BGP/BGP-VPN instance view) Syntax bestroute compare-med undo bestroute compare-med View BGP view/BGP-VPN instance view Parameters None Description Use the bestroute compare-med command to enable the comparison of the MED for paths from each AS. Use the undo bestroute compare-med command to disable this comparison. This comparison is not enabled by default.
The system only compares MED values for paths from peers within the confederation. Paths from external ASs are advertised throughout the confederation without MED comparison. Examples # In BGP view, enable the comparison of the MED for paths from peers within the confederation. system-view [Sysname] bgp 100 [Sysname-bgp] bestroute med-confederation # In BGP-VPN instance view, enable the comparison of the MED for paths from peers within the confederation. (The VPN has been created).
CHAPTER 72: BGP CONFIGURATION COMMANDS Description Use the compare-different-as-med command to enable the comparison of the MED for paths from peers in different ASs. Use the undo compare-different-as-med command to disable the comparison. The comparison is disabled by default. If there are several paths for one destination available, the path with the smallest MED is selected. Do not use this command unless associated ASs adopt the same IGP protocol and routing selection method.
Related commands: Examples confederation nonstandard and confederation peer-as. # Confederation 9 consists of four sub-ASs, namely, 38, 39, 40 and 41. The peer 10.1.1.1 is a member of the confederation while the peer 200.1.1.1 is outside of the confederation. Take sub AS 41 as an example.
CHAPTER 72: BGP CONFIGURATION COMMANDS undo confederation peer-as [ as-number-list ] View BGP view Parameters as-number-list: Sub-AS number list. Up to 32 sub-ASs can be configured in one command line. The expression is as-number-list = as-number &<1-32>, in which as-number specifies a sub-AS number, and &<1-32> indicates up to 32 numbers can be specified. Description Use the confederation peer-as command to specify confederation peer sub-ASs.
suppress: Specifies a suppression threshold from 1 to 20000. The route with a penalty value higher than the threshold is suppressed. The default value is 2000. ceiling: Specifies a ceiling penalty value from 1001 to 20000. The value must be bigger than the suppress value. By default, the value is 16000. route-policy-name: Routing policy name, a string of 1 to 19 characters. half-life-reachable, half-life-unreachable, reuse, suppress and ceiling are mutually dependent.
CHAPTER 72: BGP CONFIGURATION COMMANDS Use the undo default ipv4-unicast command to disable the use of IPv4 unicast address family for all peers. The use of IPv4 unicast address family is enabled by default. Examples # Enable IPv4 unicast address family for all neighbors.
View BGP view/BGP-VPN instance view Parameters med-value: Default MED value, in the range 0 to 4294967295. Description Use the default med command to specify a default MED value. Use the undo default med command to restore the default. By default, the default med-value is 0. Multi-exit discriminator (MED) is an external metric for routes. Different from local preference, MED is exchanged between ASs and will stay in the AS once it enters the AS. The route with a lower MED is preferred.
CHAPTER 72: BGP CONFIGURATION COMMANDS Related commands: Examples import-route (BGP/BGP-VPN instance view). # In BGP view, allow default route redistribution from OSPF into BGP. system-view [Sysname] bgp 100 [Sysname-bgp] default-route imported [Sysname-bgp] import-route ospf 1 # In BGP-VPN instance view, enable redistributing default route from OSPF into BGP (the VPN has been created).
Table 215 Description on the fields of the display bgp group command Field Description Configured hold timer value Holdtime interval Keepalive timer value Keepalive interval Minimum time between advertisement runs Minimum time between advertisement runs Peer Preferred Value Preferred value of the routes from the peer No routing policy is configured No routing policy is configured for the peer Members Detailed information of the members in the peer group Peer IPv4 address of the peer V
CHAPTER 72: BGP CONFIGURATION COMMANDS Table 216 Description on the fields of the display bgp network command Field Description Mask Mask Route-policy Routing policy Short-cut Short-cut route display bgp paths Syntax View display bgp paths [as-regular-expression] Any view Parameters as-regular-expression: AS path regular expression. Description Use the display bgp paths command to display information about BGP paths.
group-name: Name of a peer group to be displayed, a string of 1 to 47 characters. log-info: Displays the log information of the specified peer. verbose: Displays the detailed information of the peer/peer group. Description Examples Use the display bgp peer command to display peer/peer group information. # Display the detailed information of the peer 10.110.25.20. display bgp peer 10.110.25.20 verbose Peer: 10.110.25.20 Local: 2.2.2.2 Type: EBGP link BGP version 4, remote router ID 1.1.1.
CHAPTER 72: BGP CONFIGURATION COMMANDS Table 218 Description on the fields of the display bgp peer command Field Description Peer optional capabilities Optional capabilities supported by the peer, including BGP multiple extension and routing refresh.
Table 219 Description on the fields of the display bgp routing command Field Description BGP Local router BGP Local router ID ID Status codes Status codes: * - valid > - best d - damped h - history i - internal (IGP) s - summary suppressed (suppressed) S - Stale Origin i - IGP (originated in the AS) e - EGP (learned through EGP) ? - incomplete (learned by other means) Network Destination network address Next Hop Next hop IP address MED MULTI_EXIT_DISC attribute LocPrf Local preference valu
CHAPTER 72: BGP CONFIGURATION COMMANDS display bgp routing-table as-path-acl 1 BGP Local router ID is 20.20.20.1 Status codes: * - valid, > - best, d - damped, h - history, i - internal, s - suppressed, S - Stale Origin : i - IGP, e - EGP, ? - incomplete Network NextHop MED LocPrf PrefVal Path/Ogn *> 40.40.40.0/24 30.30.30.1 display bgp routing-table 0 0 300i Total Number of Routes: 2 BGP Local router ID is 2.2.2.
display bgp routing-table community Syntax View Parameters display bgp routing-table community [ aa:nn&<1-13> ] [ no-advertise | no-export | no-export-subconfed ] * [ whole-match ] Any view aa:nn: Community number. Both aa and nn are in the range 0 to 65535. &<1-13>: Argument before it can be entered up to 13 times. no-advertise: Displays BGP routes that are not advertised to any peer. no-export: Displays routes that are not advertised outside the AS.
CHAPTER 72: BGP CONFIGURATION COMMANDS whole-match: Displays routes exactly matching the specified basic-community-list. &<1-16>: Specifies the argument before it can be entered up to 16 times. Description Examples Use the display bgp routing-table community-list command to display BGP routing information matching the specified BGP community list. # Display BGP routing information matching BGP community list 100. display bgp routing-table community-list 100 BGP Local router ID is 1.2.3.
Table 220 Description on the fields of the display bgp routing-table dampened command Field Description From IP address from which the route was received Reuse Reuse time of the route Refer to Table 219 for description on the other fields above. display bgp routing-table dampening parameter Syntax View display bgp routing-table dampening parameter Any view Parameters None Description Use the display bgp routing-table dampening parameter command to display BGP route dampening parameters.
CHAPTER 72: BGP CONFIGURATION COMMANDS Description Examples Use the display bgp routing-table different-origin-as command to display BGP routes originating from different autonomous systems. # Display BGP routes originating from different ASs. display bgp routing-table different-origin-as BGP Local router ID is 2.2.2.
Table 222 Description on the fields of the display bgp routing flap-info command Field Description From Source IP address of the route Flaps Number of routing flaps Duration Duration time of the flap route Reuse Reuse time of the flap route Refer to Table 219 for description on the other fields above.
CHAPTER 72: BGP CONFIGURATION COMMANDS display bgp routing-table regular-expression Syntax View display bgp routing-table regular-expression as-regular-expression Any view Parameters as-regular-expression: AS regular expression. Description Use the display bgp routing-table regular-expression command to display BGP routing information matching the specified AS regular expression. Examples # Display BGP routing information matching AS regular expression 300$.
undo ebgp-interface-sensitive View BGP view/BGP-VPN instance view Parameters None Description Use the ebgp-interface-sensitive command to enable the clearing of EBGP session on any interface that becomes down. Use the undo ebgp-interface-sensitive command to disable the function. This function is enabled by default. Examples # In BGP view, enable the clearing of EBGP session on any interface that becomes down.
CHAPTER 72: BGP CONFIGURATION COMMANDS rip process-id: Filters outgoing routes redistributed from a RIP process. The ID is in the range 1 to 65535. static: Filters static routes. If no routing protocol is specified, all outgoing routes are filtered. Description Use the filter-policy export command to filter outgoing redistributed routes and only the routes permitted by the specified filter can be advertised. Use the undo filter-policy export command to remove the filtering.
Examples # In BGP view, reference ACL 2000 to filter incoming routing information. system-view [Sysname] bgp 100 [Sysname-bgp] filter-policy 2000 import # In BGP-VPN instance view, reference ACL 2000 to filter incoming routing information (the VPN has been created).
CHAPTER 72: BGP CONFIGURATION COMMANDS Description Use the graceful-restart timer restart command to configure the maximum time for a peer to reestablish a BGP session. Use the undo graceful-restart timer restart command to restore the default. By default, the maximum time for a peer to reestablish a BGP session is 150 seconds. Examples # Configure the maximum time for a peer to reestablish a BGP session as 300 seconds.
Parameters group-name: Name of a peer group, a string of 1 to 47 characters. external: Creates an EBGP peer group, which can be the group of another sub AS in a confederation. internal: Creates an IBGP peer group; not supported in BGP-VPN instance view. Description Use the group command to create a peer group. Use the undo group command to delete a peer group. An IBGP peer group is created if neither internal nor external is specified.
CHAPTER 72: BGP CONFIGURATION COMMANDS route-policy-name: Name of a routing policy used to filter redistributed routes, a string of 1 to 19 characters. Description Use the import-route command to configure BGP to redistribute routes from a specified routing protocol and advertise redistributed routes. Use the undo import-route command to disable route redistribution from a routing protocol. By default, BGP does not redistribute routes from other protocols.
network (BGP/BGP-VPN instance view) Syntax network ip-address [ mask | mask-length ] [ short-cut | route-policy route-policy-name ] undo network ip-address [ mask | mask-length ] [ short-cut ] View Parameters BGP view/BGP-VPN instance view ip-address: Destination IP address. mask: Mask of the network address, in dotted decimal notation. mask-length: Mask length, in the range 0 to 32. short-cut: Specifies the route to use the local preference.
CHAPTER 72: BGP CONFIGURATION COMMANDS peer advertise-community (BGP/BGP-VPN instance view) Syntax peer { group-name | ip-address } advertise-community undo peer { group-name | ip-address } advertise-community View Parameters BGP view/BGP-VPN instance view group-name: Name of a peer group, a string of 1 to 47 characters. ip-address: IP address of a peer. Description Use the peer advertise-community command to advertise the community attribute to a peer/peer group.
Use the undo peer advertise-ext-community command to disable the advertisement. By default, no extended community attribute is advertised to a peer/peer group. For related information, refer to “ip extcommunity-list” on page 1205, “if-match extcommunity” on page 1199 and “apply extcommunity” on page 1190. Examples # In BGP view, advertise the extended community attribute to the peer group test.
CHAPTER 72: BGP CONFIGURATION COMMANDS # In BGP-VPN instance view, configure the repeating times of the local AS number as 2 for routes from peer 1.1.1.1 (the VPN has been created). system-view [Sysname] bgp 100 [Sysname-bgp] ipv4-family vpn-instance vpn1 [Sysname-bgp-vpn1] peer 1.1.1.
undo peer { group-name | ip-address } as-path-acl as-path-acl-number { export | import } View Parameters BGP view/BGP-VPN instance view group-name: Name of a peer group, a string of 1 to 47 characters. ip-address: IP address of a peer. as-path-acl-number: AS path ACL number, in the range 1 to 256. export: Filters outgoing routes. import: Filters incoming routes.
CHAPTER 72: BGP CONFIGURATION COMMANDS Description Use the peer capability-advertise conventional command to disable BGP multi-protocol extension and route refresh for a peer/peer group. Use the undo peer capability-advertise command to enable BGP multi-protocol extension and route refresh for a peer/peer group. By default, BGP multi-protocol extension and route refresh are enabled. Examples # In BGP view, disable multi-protocol extension and route refresh for peer 160.89.2.33.
peer connect-interface (BGP/BGP-VPN instance view) Syntax peer { group-name | ip-address } connect-interface interface-type interface-number undo peer { group-name | ip-address } connect-interface View Parameters BGP view/BGP-VPN instance view group-name: Name of a peer group, a string 1 to 47 characters. ip-address: IP address of a peer. interface-type interface-number: Specifies the type and number of the interface.
CHAPTER 72: BGP CONFIGURATION COMMANDS View Parameters BGP view/BGP-VPN instance view group-name: Name of a peer group, a string of 1 to 47 characters. ip-address: IP address of a peer. route-policy-name: Routing policy name, a string of 1 to 19 characters. Description Use the peer default-route-advertise command to advertise a default route to a peer/peer group. Use the undo peer default-route-advertise command to disable default route advertisement to a peer/peer group.
Use the undo peer description command to remove the description information of a peer/peer group. By default, no description information is configured for a peer/peer group. Create a peer/peer group before configuring a description for it. Related commands: Examples display bgp peer. # In BGP view, configure the description information of the peer group test as ISP1.
CHAPTER 72: BGP CONFIGURATION COMMANDS system-view [Sysname] bgp 100 [Sysname-bgp] peer test ebgp-max-hop # In BGP-VPN instance view, allow establishing the EBGP connection with the peer group test that is on an indirectly connected network (the VPN has been created).
Description Use the peer fake-as command to configure a fake local AS number for a peer or peer group. Use the undo peer fake-as command to remove the configuration. By default, no fake local AS number is configured for a peer or peer group. n Examples The peer fake-as command is only applicable to an EBGP peer or peer group. # In BGP view, configure a fake AS number of 200 for the peer group test.
CHAPTER 72: BGP CONFIGURATION COMMANDS Examples # In BGP view, apply the ACL 2000 to filter routes advertised to the peer group test. system-view [Sysname] bgp 100 [Sysname-bgp] peer test filter-policy 2000 export # In BGP-VPN instance view, apply the ACL 2000 to filter routes advertised to the peer group test (the VPN has been created).
peer ignore (BGP/BGP-VPN instance view) Syntax peer { group-name | ip-address } ignore undo peer { group-name | ip-address } ignore View Parameters BGP view/BGP-VPN instance view group-name: Name of a peer group, a string of 1 to 47 characters. ip-address: IP address of a peer. Description Use the peer ignore command to disable session establishment with a peer or peer group. Use the undo peer ignore command to remove the configuration.
CHAPTER 72: BGP CONFIGURATION COMMANDS export: Applies the filter to routes advertised to the specified peer/peer group. import: Applies the filter to routes received from the specified peer/peer group. Description Use the peer ip-prefix command to reference an IP prefix list to filter routes received from or advertised to a peer or peer group. Use the undo peer ip-prefix command to remove the configuration. By default, no IP prefix list is specified.
# In BGP-VPN instance view, save routing information from peer 131.100.1.1(the VPN has been created). system-view [Sysname] bgp 100 [Sysname-bgp] ipv4-family vpn-instance vpn1 [Sysname-bgp-vpn1] peer 131.100.1.1 as-number 200 [Sysname-bgp-vpn1] peer 131.100.1.
CHAPTER 72: BGP CONFIGURATION COMMANDS Parameters group-name: Name of a peer group, a string of 1 to 47 characters. ip-address: IP address of a peer. Description Use the peer next-hop-local command to specify the router as the next hop for routes to a peer/peer group. Use the undo peer next-hop-local command to remove the configuration.
Use the undo peer password command to disable the function. By default, no MD5 authentication is performed for TCP connection establishment. Once MD5 authentication is enabled, both parties must be configured with the same authentication mode and password. Otherwise, the TCP connection will not be set up. Examples # In BGP view, perform MD5 authentication on the TCP connection set up between the local router 10.1.100.1 and the peer router 10.1.100.2.
CHAPTER 72: BGP CONFIGURATION COMMANDS Description Use the peer preferred-value command to assign a preferred value to routes received from a peer or peer group. Use the undo peer preferred-value command to restore the default value. The default preferred value is 0. Routes learned from a peer have an initial preferred value.
Description Use the peer public-as-only command to not keep private AS numbers in BGP updates sent to a peer/peer group. Use the undo peer public-as-only command to keep private AS numbers in BGP updates sent to a peer/peer group. By default, BGP updates carry private AS numbers. The command does not take effect if the BGP update has both public and private AS numbers. The range of private AS number is from 64512 to 65535.
CHAPTER 72: BGP CONFIGURATION COMMANDS peer route-limit (BGP/BGP-VPN instance view) Syntax peer { group-name | ip-address } route-limit limit [ percentage ] undo peer { group-name | ip-address } route-limit View Parameters BGP view/BGP-VPN instance view group-name: Name of a peer group, a string of 1 to 47 characters. ip-address: IP address of a peer. limit: Upper limit of IP prefixes that can be received from the peer or peer group, in the range 1 to 10000.
Parameters group-name: Name of a peer group, a string of 1 to 47 characters. ip-address: IP address of a peer. route-policy-name: Routing policy name, a string of 1 to 19 characters. export: Applies the routing policy to routes outgoing to the peer (or peer group). import: Applies the routing policy to routes incoming from the peer (or peer group). Description Use the peer route-policy command to apply a routing policy to routes incoming from or outgoing to a peer or peer group.
CHAPTER 72: BGP CONFIGURATION COMMANDS Description Use the peer route-update-interval command to specify the interval for sending the same update to a peer/peer group. Use the undo peer route-update-interval command to restore the default value. By default, the interval is 5 seconds for IBGP peers, and 30 seconds for EBGP peers. Examples # In BGP view, specify the interval for sending the same update to peer group test as 10 seconds.
system-view [Sysname] bgp 100 [Sysname-bgp] ipv4-family vpn-instance vpn1 [Sysname-bgp-vpn1] peer 1.1.1.1 substitute-as peer timer (BGP/BGP-VPN instance view) Syntax peer { group-name | ip-address } timer keepalive keepalive hold holdtime undo peer { group-name | ip-address } timer View Parameters BGP view/BGP-VPN instance view group-name: Name of a peer group, a sting of 1 to 47 characters. ip-address: IP address of a peer.
CHAPTER 72: BGP CONFIGURATION COMMANDS preference (BGP/BGP-VPN instance view) Syntax preference { external-preference internal-preference local-preference | route-policy route-policy-name } undo preference View Parameters BGP view/BGP-VPN instance view external-preference: Preference of EBGP route, in the range 1 to 255. internal-preference: Preference of IBGP route, in the range 1 to 255. An IBGP is a route learned from another peer inside AS.
Parameters None Description Use the reflect between-clients command to enable route reflection between clients. Use the undo reflect between-clients command to disable this function. By default, route reflection between clients is enabled. After a route reflector is configured, it reflects the routes of a client to other clients. If the clients of a route reflector are fully meshed, you need disable route reflection between clients to reduce routing costs.
CHAPTER 72: BGP CONFIGURATION COMMANDS system-view [Sysname] bgp 100 [Sysname-bgp] reflector cluster-id 80 refresh bgp Syntax View Parameters refresh bgp { all | ip-address | group group-name | external | internal } { export | import } User view all: Soft-resets all BGP connections. ip-address: Soft-resets the BGP connection to a peer. group-name: Soft-resets connections to a peer group, name of which is a sting of 1 to 47 characters. external: EBGP connection. internal: IBGP connection.
ip-address: Specifies the IP address of a peer with which to reset the connection. flap-info: Clears history information of routing flap. group group-name: Specifies to reset connections with the specified BGP peer group. external: Resets all the EBGP connections. internal: Resets all the IBGP connections. Description Examples Use the reset bgp command to reset specified BGP connections. # Reset all the BGP connections.
CHAPTER 72: BGP CONFIGURATION COMMANDS as-path-acl-number: Clears the flap statistics of routes matching an AS path ACL, number of which is in the range 1 to 256. ip-address: Clears the flap statistics of a route. mask: Network mask, in dotted decimal notation. mask-length: Mask length, in the range 0 to 32. Description Use the reset bgp flap-info command to clear the flap statistics of routes matching the specified filter.
You can specify a router ID manually. If not, the system selects an IP address as the router ID. The selection sequence is the highest IP address among loopback interface addresses; if not available, then the highest IP address of interfaces. It is recommended to specify a loopback interface address as the router ID to enhance network reliability. Only when the interface with the selected Router ID or the manual Router ID is deleted will the system select another ID for the router.
CHAPTER 72: BGP CONFIGURATION COMMANDS [Sysname-bgp] ipv4-family vpn-instance vpn1 [Sysname-bgp-vpn1] summary automatic synchronization (BGP view) Syntax synchronization undo synchronization View BGP view Parameters None Description Use the synchronization command to enable the synchronization between the BGP and IGP routes. Use the undo synchronization command to disable the synchronization. The feature is disabled by default.
Use the undo timer command to restore the default. By default, BGP keepalive and holdtime intervals are 60s and 180s. Note that: Related commands: Examples ■ Timer configured using the peer timer command is preferred to the timer configured using this command. ■ The holdtime interval must be at least three times the keepalive interval. ■ The configured timer applies to all the BGP peers, while it becomes valid only after the corresponding BGP connections are reset.
CHAPTER 72: BGP CONFIGURATION COMMANDS
BGP DEBUGGING COMMANDS 73 debugging bgp all Syntax debugging bgp [ ipv4-address | ipv6-address ] all undo debugging bgp [ ipv4-address | ipv6-address] all View Default Level Parameters User view 1: Monitor level ipv4-address: IPv4 address of a peer. ipv6-address: IPv6 address of a peer. Description Use the debugging bgp all command to enable all BGP debugging. Use the undo debugging bgp all command to disable all BGP debugging. By default, all BGP debugging is disabled.
CHAPTER 73: BGP DEBUGGING COMMANDS // BGP configuration information debugging bgp all *Aug 24 15:31:55:316 2006 Sysname RM/6/RMDEBUG: BGP_TIMER: CR Timer Expired for Peer 10.1.1.2 *Aug 24 15:31:55:316 2006 Sysname RM/6/RMDEBUG: BGP.: 10.1.1.2 Current event is CRTimerExpired. *Aug 24 15:31:55:316 2006 Sysname RM/6/RMDEBUG: BGP.: 10.1.1.2 Current event is Start. *Aug 24 15:31:55:331 2006 Sysname RM/6/RMDEBUG: BGP.: 10.1.1.2 State is changed from IDLE to CONNECT.
Length: 19 *Aug 24 15:32:02:674 2006 Sysname RM/6/RMDEBUG: BGP. : 10.1.1.2 Current event is RecvKeepAliveMessage. *Aug 24 15:32:02:674 2006 Sysname RM/6/RMDEBUG: BGP.: 10.1.1.2 State is changed from OPENCONFIRM to ESTABLISHED. // BGP has established the peer relationship successfully. n The display above is the debugging information shown by executing the debugging bgp all command on Device A.
CHAPTER 73: BGP DEBUGGING COMMANDS Table 224 Description on the fields of the debugging bgp detail command Examples Field Description Received New VPNv4 Route with Ext-Community NULL.Ignoring Route Received a new VPNv4 route with Ext-Community as NULL and therefore ignored the route.
The debugging bgp event command is used to enable BGP event debugging, which is mainly related to events triggering the BGP state machine transitions. After this debugging is enabled, information about all the BGP state machine transitions and the events triggering these transitions will be displayed. If no BGP peer relationship can be established, you can enable this debugging to locate the fault.
CHAPTER 73: BGP DEBUGGING COMMANDS View Default Level Parameters User view 1: Monitor level ipv4-address: IPv4 address of a peer. ipv6-address: IPv6 address of a peer. Description Use the debugging bgp graceful-restart command to enable GR event debugging for BGP. Use the undo debugging bgp graceful-restart command to disable GR event debugging for BGP.
debugging bgp Syntax debugging bgp [ ipv4-address | ipv6-address ] { keepalive | open | packet | raw-packet | route-refresh } [ receive | send ] [ verbose ] } undo debugging bgp [ ipv4-address | ipv6-address ] { keepalive | open | packet | raw-packet | route-refresh } [ receive | send ] [ verbose ] } View Default Level Parameters User view 1: Monitor level ipv4-address: IPv4 address of a peer. ipv6-address: IPv6 address of a peer. keepalive: Enables BGP Keepalive message debugging.
CHAPTER 73: BGP DEBUGGING COMMANDS Table 227 Description on the fields of the debugging bgp open command Field Description Version: X BGP protocol version Local AS: X Local AS number OPT Type: 2 (Capability) Capability negotiation CAP Type: 1 (Multiprotocol) CAP Len: 4 Multiprotocol capability: afi: 1; safi: 1 IPv4-UNC (1/1) CAP Type: Capable of route-refresh 2 (RouteRefresh) CAP Len: 0 Total CAPB Len Total OPT Len :X Total capability length :X Total optional parameter length Tabl
CAP Type: 2 (RouteRefresh) IPv4-UNC (1/1) CAP Len: 0 // Information about the received BGP Open message *0.2683500 4945 RM/6/RMDEBUG: BGP.: 11.1.1.2 Send KEEPALIVE Length 19 // Information about the sent BGP Keepalive message *0.2683609 4945 RM/6/RMDEBUG: BGP.: 11.1.1.2 Recv KEEPALIVE Length: 19 // Information about the received BGP Keepalive message [Sysname-bgp] import-route static *0.2710031 4945 RM/6/RMDEBUG: BGP.: Send UPDATE to 11.1.1.
CHAPTER 73: BGP DEBUGGING COMMANDS // Device A received the BGP Route-refresh message, with a length of 23, address family of 1, sub-address family of 1, and When to Refresh of 0. debugging bgp timer Syntax debugging bgp [ ipv4-address | ipv6-address ] timer undo debugging bgp [ ipv4-address | ipv6-address ] timer View Default Level Parameters User view 1: Monitor level ipv4-address: IPv4 address of a peer. ipv6-address: IPv6 address of a peer.
// The hold timer expired on BGP peer 2.2.2.2. debugging bgp update Syntax debugging bgp update [ acl acl-number | ip-prefix ip-prefix-name] [ receive | send ] [ verbose ] undo debugging bgp update [ acl acl-number | ip-prefix ip-prefix-name] [ receive | send ] [ verbose ] View Default Level Parameters User view 1: Monitor level acl acl-number: Specifies an access control list (ACL) for filtering packet debugging information. The acl-number argument ranges from 2000 to 3999.
CHAPTER 73: BGP DEBUGGING COMMANDS Table 230 Description on the fields of the debugging bgp update command Examples Field Description afi = 196(l2vpn) safi = 128(l2vpn) Address family is 196. Sub-address family is 128 (L2VPN). afi = 155(vpls) safi = 128(vpls) Address family is 155. Sub-address family is 128 (VPLS). For details, refer to the Update message debugging information for specific parameters.
BGP.: Send UPDATE to 11.1.1.2 for following destinations : Origin : Incomplete AS Path : Next Hop : 11.1.1.1 Local Pref : 100 MED : 0 1.1.1.1/32, *Sep 4 16:08:20:473 2006 Sysname RM/6/RMDEBUG: BGP.: Send UPDATE to 11.1.1.2 for following destinations : Origin : Incomplete AS Path : Next Hop : 11.1.1.1 Local Pref : 100 MED : 0 11.1.1.0/24, *Sep 4 16:08:20:473 2006 Sysname RM/6/RMDEBUG: BGP.: Send UPDATE to 11.1.1.2 for following destinations : Origin : Incomplete AS Path : Next Hop : 11.1.1.
CHAPTER 73: BGP DEBUGGING COMMANDS View Default Level Parameters User view 1: Monitor level peer { ipv6-address | ipv6-group-name }: Enables/disables BGP IPv6 update debugging for the specified IPv6 peer/peer group. ip-prefix ip-prefix-name: Filters the output message debugging information with the specified IP prefix list. receive: Enables/disables debugging for received BGP packets. send: Enables/disables debugging for sent BGP packets. verbose: Displays detailed debugging information.
MED Origin AS Path Next Hop 22::22/128, *Sep : 0 : Incomplete : : 100::2 4 16:17:20:708 2006 Sysname RM/6/RMDEBUG: BGP_IPV6.
CHAPTER 73: BGP DEBUGGING COMMANDS Table 231 Description on the fields of the debugging bgp update l2vpn command Examples Field Description afi = 196(l2vpn) safi = 128(l2vpn) Address family is 196. Sub-address family is 128(L2VPN). # In an L2VPN environment, Device A and Device B have established a BGP peer relationship. Enable debugging for BGP Update messages. debugging bgp update l2vpn *0.84372 Sysname RM/7/RMDEBUG: BGP.L2VPN: Send UPDATE to 1.1.1.
receive: Enables/disables the debugging for received BGP labeled route update packets. send: Enables/disables the debugging for sent BGP labeled route update packets. verbose: Displays detailed debugging information. Description Use the debugging bgp update label-route command to enable debugging for BGP labeled route update messages. Use the undo debugging bgp update label-route command to disable debugging for BGP labeled route update messages. By default, this debugging is disabled.
CHAPTER 73: BGP DEBUGGING COMMANDS Local Pref : 100 MED : 0 Origin : Incomplete AS Path : Next Hop : 100::2 22::22/128(1027) // Update message information of IPv6 labeled routes debugging bgp update peer Syntax debugging bgp update peer { ipv4-address | group-name } [ acl acl-number | ip-prefix ip-prefix-name ] [ receive | send ] [ verbose ] undo debugging bgp update peer { ipv4-address | group-name } [ receive | send ] [ verbose ] View Default Level Parameters User view 1: Monitor level ipv4-ad
debugging bgp update vpls Syntax debugging bgp update vpls [ peer { ipv4-address | group-name } ] [ receive | send ] [ verbose ] undo debugging bgp update vpls [ peer { ipv4-address | group-name } ] [ receive | send ] [ verbose ] View Default Level Parameters User view 1: Monitor level peer { ipv4-address | group-name }: Enables/disables BGP VPLS update message debugging for the specified peer/peer group. receive: Enables/disables the debugging for the received BGP packets.
CHAPTER 73: BGP DEBUGGING COMMANDS // Information about the sent VPLS update message *0.92566 Sysname RM/7/RMDEBUG: BGP.VPLS: Recv UPDATE from 1.1.1.1 with following destinations : Update message length : 88 Origin : IGP AS Path : 100 Next Hop : 1.1.1.
Refer to “debugging bgp update vpnv4” on page 1035 for the description of the update message information.
CHAPTER 73: BGP DEBUGGING COMMANDS Local Pref : 100 MED : 0 Ext-Community: <1 : 1> 111.1.1.1/32 (RD 100:1,Label 1024), *Sep 4 16:14:32:22 2006 Sysname RM/6/RMDEBUG: BGP_L3VPN.: Recv UPDATE from 2.2.2.2 with following destinations : Update message length : 92 Local Pref : 100 MED : 0 Ext-Community: <1 : 1> Origin : Incomplete AS Path : Next Hop : 2.2.2.2 111.2.2.2/32 (RD 100:2,Label 1024), *Sep 4 16:14:33:164 2006 Sysname RM/6/RMDEBUG: BGP_L3VPN: L3VPN Process IP Address 111.2.2.
IS-IS CONFIGURATION COMMANDS 74 area-authentication-mode Syntax area-authentication-mode { simple | md5 } password [ ip | osi ] undo area-authentication-mode View Parameters IS-IS view simple: Specifies to send the password in plain text. md5: Specifies to send the password encrypted with MD5. password: Password to be set. For simple authentication mode, the password must be plain text. For md5 authentication mode, the password can be either plain text or ciphertext.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS Examples # Set the area authentication password to hello, and the authentication mode to simple. system-view [Sysname] isis [Sysname-isis-1] area-authentication-mode simple hello auto cost enable Syntax auto-cost enable undo auto-cost enable View IS-IS view Parameters None Description Use the auto-cost enable command to enable interfaces of the current IS-IS process to calculate interface cost automatically.
Parameters value: Bandwidth reference value in Mbps, ranging from 1 to 2147483648. Description Use the bandwidth-reference command to set the bandwidth reference value for calculating link cost. Use the undo bandwidth-reference command to restore the default. By default, the reference value is 100 Mbps.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS level-2: Applies the link cost to Level-2. Description Use the circuit-cost command to set a global link cost. Use the undo circuit-cost command to restore the default. By default, the global link cost is not configured. If no keyword is specified, the specified cost applies to Level-1-2.
Use the undo cost-style command to restore the default. Only packets of narrow cost style can be received and sent by default. Related commands: Examples isis cost. # Configure the router to send only packets of narrow cost style, but receive both narrow and wide cost style ones.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS system-view [Sysname] isis [Sysname-isis-1] default-route-advertise display isis brief Syntax View Parameters display isis brief [ process-id | vpn-instance vpn-instance-name ] Any view process-id: IS-IS process ID, in the range of 1 to 65535. vpn-instance vpn-instance-name: Specifies a VPN instance by its name, a string of 1 to 31 characters. Description Examples Use the display isis brief command to view brief IS-IS configuration information.
Table 233 Description on the fields of the display isis brief command Field Description lsp-refresh Refresh period of LSP Interval between SPFs Interval between SPF calculations display isis debug-switches Syntax View Parameters display isis debug-switches { process-id | vpn-instance vpn-instance-name } Any view process-id: Specifies the ID of an IS-IS process, in the range of 1 to 65535. vpn-instance-name: Specifies a VPN instance name, a string of 1 to 31 characters.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS Restart Interval: 150 SA Bit Supported Total Number of Interfaces = 1 Restart Status: RESTARTING Number of LSPs Awaited: 3 T3 Timer Status: Remaining Time: 239 T2 Timer Status: Remaining Time: 59 IS-IS(1) Level-2 Restart Status Restart Interval: 150 SA Bit Supported Total Number of Interfaces = 1 Restart Status: RESTARTING Number of LSPs Awaited: 3 T3 Timer Status: Remaining Time: 239 T2 Timer Status: Remaining Time: 59 Table 234 Description on the fields of
display isis interface, using the display isis interface verbose command displays other interface related information, such as CSNP packets broadcast intervals, Hello packets broadcast intervals and the number of invalid Hello packets. Examples # Display IS-IS enabled interface information. display isis interface Interface information for ISIS(1) --------------------------------Interface: Ethernet1/0 Id IPV4.State IPV6.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS Table 235 Description on the fields of the display isis interface command Field Description Hello Multiplier Value Number of invalid Hello packets Lsp Timer Value Interval for sending LSP packets Cost Cost Priority Preference Retransmit Timer Value LSP retransmission interval over point-to-point link BFD Whether BFD is enabled display isis license Syntax View display isis license Any view Parameters None Description Use the display isis li
Table 236 n Description on the fields of the display isis license command Field Description ISIS Shell License Values License values of ISIS shell Feature Name Feature name Active Whether the state is active. Controllable Whether support reading configuration through License file. ISIS Protocol IS-IS Protocol IPV6 Whether IPv6 is active or not.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS n Description Examples If no level is specified, then both Level-1 and Level-2 (or Level-1-2) link state databases are displayed by default. Use the display isis lsdb command to display IS-IS link state database. # Display Level-1 LSDB information.
# Display the configuration information of IS-IS mesh-group. [Sysname-Serial2/1] display isis mesh-group Mesh Group information for ISIS(1) ---------------------------------------------------------------------Interface Status Serial2/0 100 Serial2/1 100 display isis name-table Syntax View Parameters display isis name-table [ process-id | vpn-instance vpn-instance-name ] Any view process-id: IS-IS process ID, in the range of 1 to 65535.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS View Parameters Any view verbose: When this parameter is used, the area address advertised in a neighbor’s Hello packet will be displayed. Otherwise the system displays only the summary information. process-id: Specifies an IS-IS process ID, in the range of 1 to 65535. vpn-instance-name: Specifies a VPN instance name, in the range of 1 to 31 characters. Description Use the display isis peer command to display IS-IS neighbor information.
Parameters ipv4: Displays IS-IS IPv4 routing information (the default). verbose: Displays IS-IS detailed IPv4 routing information. process-id: Specifies an IS-IS process ID, in the range of 1 to 65535. vpn-instance-name: Specifies a VPN instance name, in the range of 1 to 31 characters. level-1: Displays Level-1 IS-IS routes. level-2: Displays Level-2 IS-IS routes. n Description Examples If no level is specified, then both Level-1 and Level-2 (Level-1-2) routing information will be displayed.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS Table 240 Description on the fields of the display isis route command Field Description Flags Routing state flag D: Direct route. R: The route has been added into the routing table. L: The route has been broadcast. U: A route’s penetration flag. Setting it to UP can prevent an LSP sent from L2 to L1 from being sent back to L2.
Table 241 Description on the fields of the display isis spf-log command Field Description Duration SPF calculation duration StartTime SPF calculation start time display isis statistics Syntax View Parameters display isis statistics [ level-1 | level-2 | level-1-2 ] [ process-id | vpn-instance vpn-instance-name ] Any view level-1: IS-IS Level-1 statistic information. level-2: IS-IS Level-2 statistic information. level-1-2: IS-IS Level-1-2 statistic information.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS LSP Source ID: 0000.0000.0002 No.
osi: Specifies to check the OSI related fields in a LSP. Whether a password should use ip or osi is not affected by the actual network environment. Description Use the domain-authentication-mode command to configure the routing domain authentication mode to insert the area authentication password into all the sent level-2 packets (LSP, CSNP, and PSNP) in the predefined way and verify the authentication password of the received level-2 pockets.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS rip process-id: Filters outgoing routes redistributed from a RIP process. The process ID is in the range of 1 to 65535. bgp: Filters outgoing routes redistributed from BGP. direct: Filters outgoing redistributed direct routes. static: Filters outgoing redistributed static routes. If no parameter is specified, the system will filter all outgoing redistributed routing information.
Description Use the filter-policy import command to configure IS-IS to filter incoming routing information. Use the undo filter-policy import command to disable IS-IS from filtering incoming routing information. IS-IS does not filter incoming routing information by default. In some cases, only the routing information satisfying certain conditions can be received. You can reference filtering conditions using the filter-policy command. Related commands: Examples filter-policy export (IS-IS view).
CHAPTER 74: IS-IS CONFIGURATION COMMANDS Examples # Enable fast flooding and configure the maximum LSPs be sent as 10 and the delay time as 100 milliseconds. system-view [Sysname] isis [Sysname-isis-1] flash-flood flood-count 10 max-timer-interval 100 graceful-restart (IS-IS view) Syntax graceful-restart undo graceful-restart View IS-IS view Parameters None Description Use the graceful-restart command to enable the IS-IS Graceful Restart capability.
system-view [Sysname] isis 1 [Sysname-isis-1] graceful-restart interval 120 graceful-restart suppress-sa Syntax graceful-restart suppress-sa undo graceful-restart suppress-sa View IS-IS view Parameters None Description Use the graceful-restart suppress-sa command to set the SA (Suppress-Advertisement) bit during restart. Use the undo graceful-restart suppress-sa command to clear the SA bit during restart. By default, the SA bit is cleared during restart.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS View Parameters IS-IS view isis [ process-id ]: Redistributes routes from a specified ISIS process. process-id is in the range of 1 to 65535. ospf [ process-id ]: Redistributes routes from a specified OSPF process. process-id is in the range of 1 to 65535. rip [ process-id ]: Redistributes routes from a specified RIP process. process-id is in the range of 1 to 65535. bgp: Redistributes BGP routes. allow-ibgp: Redistributes IBGP routes.
n Examples Using the import-route bgp command redistributes only EBGP routes. Using the import-route bgp allow-ibgp command redistributes also IBGP routes, but this may cause routing loops. Be cautious with this command. # Redistribute static routes and set the cost to 15.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS system-view [Sysname] isis [Sysname-isis-1] import-route isis level-2 into level-1 isis Syntax isis [ process-id ] [ vpn-instance vpn-instance-name ] undo isis [ process-id ] View Parameters System view process-id: Process ID, ranging from 1 to 65535. The default is 1. vpn-instance-name: VPN instance name, a string of 1 to 31 characters.
level-1: Specifies to set the password for Level-1. level-2: Specifies to set the password for Level-2. ip: Specifies the system to check IP related fields in a LSP. osi: Specifies the system to check OSI related fields in a LSP. Whether a password should use ip or osi is not affected by the actual network environment. n Description This command is not available in loopback interface view. Use the isis authentication-mode command to set the IS-IS authentication mode and password for an interface.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS Description Use the isis circuit-level command to configure link adjacency level for an interface of a level-1-2 router. Use the undo isis circuit-level command to restore the default. An interface can establish level-1-2 adjacency by default. This command is only available on a level-1-2 router.
isis cost Syntax isis cost value [ level-1 | level-2 ] undo isis cost [ level-1 | level-2 ] View Parameters Interface view value: Specifies a cost for SPF calculation on a specified level. The default is 10. The range of cost value differs according to different cost types. ■ For types narrow, narrow-compatible and compatible: The cost value ranges from 1 to 63. ■ For types wide and wide-compatible: The cost value ranges from 1 to 16777215. level-1: Applies the cost to Level-1.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS Description Use the isis dis-name command to configure a name for local LAN. If the local router is the DIS, the name will be advertised in a pseudonode LSP packet. Use the undo isis dis-name command to disable this function. No name is configured by default. Note that this command takes effect only on a router with the dynamic hostname process enabled. This command is not supported on a Point-to-Point interface.
isis enable Syntax isis enable [ process-id ] undo isis enable View Interface view Parameters process-id: Specifies a IS-IS process ID, ranging from 1 to 65535. The default is 1. Description Use the isis enable command to enable an IS-IS routing process on the interface. Use the undo isis enable command to disable this configuration. No IS-IS routing process is enabled on an interface by default.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS An interface is not in any mesh group by default. For an interface not in a mesh group, it follows the normal process to flood the received LSPs to other interfaces. For the NBMA network with high connectivity and multiple point-to-point links, this will cause repeated LSP flooding and bandwidth waste. After an interface is added to a mesh group, it will only flood a received LSP to interfaces not belonging to the same mesh group.
system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] isis peer-ip-ignore isis enable Syntax isis silent undo isis silent View Interface view Parameters None Description Use the isis silent command to disable the interface from sending and receiving IS-IS hello packets. Use the undo isis silent command to restore the default. By default, an interface is not disabled from sending and receiving hello packets. n Examples The feature is not supported on the loopback interface.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS Examples # Configure the serial2/0 interface to send small Hello packets. system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] isis small-hello isis timer csnp Syntax isis timer csnp seconds [ level-1 | level-2 ] undo isis timer csnp [ level-1 | level-2 ] View Parameters Interface view seconds: Specifies the interval in seconds for sending CSNP packets over broadcast network, ranging from 1 to 600.
Parameters seconds: Specifies the interval in seconds for sending Hello packets, ranging from 3 to 255. level-1: Specifies the interval for sending Level-1 Hello packets. level-2: Specifies the time interval for sending Level-2 Hello packets. Description Use the isis timer hello command to specify the interval for sending hello packets. Use the undo isis timer hello command to restore the default. The default hello interval is 10 seconds.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS Description Use the isis timer holding-multiplier command to configure the number of hello intervals, within which if the interface receive no hello packets, its neighbor is considered dead. Use the undo isis timer holding-multiplier command to restore the default. On an interface, the default number of hello intervals is three. You can specify the number of hello intervals for Level-1 and Level-2 neighbors respectively on a broadcast network.
n Examples This command is not available in loopback interface view. # Configure the interval as 500 milliseconds for sending LSPs on interface serial 2/0. system-view [Sysname] interface serial2/0 [Sysname-Serial2/0] isis timer lsp 500 isis timer retransmit Syntax isis timer retransmit seconds undo isis timer retransmit View Interface view Parameters seconds: Specifies the interval in seconds for retransmitting LSP packets, ranging from 1 to 300.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS Parameters level-1: Configures the router to work on Level-1, which means it only calculates routes within the area, and maintains the L1 LSDB. level-1-2: Configures the router to work on Level-1-2, which means it calculates routes and maintains the LSDBs for both L1 and L2. level-2: Configures the router to work on Level-2, which means it calculates routes and maintains the LSDB for L2 only.
is-name map Syntax is-name map sys-id map-sys-name undo is-name map sys-id View Parameters IS-IS view sys-id: System ID or a pseudonode ID of a remote IS. map-sys-name: Specifies a name for the remote IS, a string of 1 to 64 characters. Description Use the is-name map command to map a name to a remote IS. Each remote IS system ID corresponds to only one name. Use the undo is-name map command to remove the configuration. By default, no name is configured for a remote IS.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS log-peer-change (IS-IS view) Syntax log-peer-change undo log-peer-change View IS-IS view Parameters None Description Use the log-peer-change command to enable logging on IS-IS adjacency state changes. Use the undo log-peer-change command to disable the logging. The feature is enabled by default. After the feature is enabled, information about IS-IS adjacency state changes is sent to the configuration terminal.
Description Use the lsp-fragments-extend command to enable LSP fragment extension in a specified mode and level. Use the undo lsp-fragments-extend command to disable this feature. The feature is disabled by default. Note the following: Examples ■ After LSP fragment extension is enabled in an IS-IS process, the MTUs of all the interfaces on which this IS-IS process is enabled must not be less than 512; otherwise, LSP fragment extension will not take effect.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS lsp-length receive Syntax lsp-length receive size undo lsp-length receive View IS-IS view Parameters size: Maximum size of received LSPs, in the range of 512 to 16384 bytes. Description Use the lsp-length receive command to configure the maximum size of received LSPs. Use the undo lsp-length receive command to restore the default. By default, the maximum size of received LSPs is 1497 bytes. Examples # Configure the maximum size of received LSPs.
network-entity Syntax network-entity net undo network-entity net View IS-IS view Parameters net: Network Entity Title (NET) in the format of X...X.XXXX....XXXX.00, with the first part X...X being the area address, the middle part XXXX....XXXX (a total of 12 “X”) being the router’s system ID and the last part 00 being SEL. Description Use the network-entity command to configure the Network Entity Title for an IS-IS routing process. Use the undo network-entity command to delete a NET.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS Description Use the preference command to configure the preference for IS-IS protocol. Use the undo preference command to restore the default. By default, the IS-IS protocol preference is 15. If a routing policy is specified in this command, the preference (if any) set by the routing policy applies to those matched routes. Other routes use the preference set by the preference command.
reset isis peer Syntax View Parameters reset isis peer system-id [ process-id | vpn-instance vpn-instance-name ] User view system-id: Specifies the system ID of an IS-IS neighbor. process-id: Specifies the ID of an IS-IS process, in the range of 1 to 65535. vpn-instance-name: Specifies a VPN instance name, a string of 1 to 31 characters. Description Use the reset isis peer command to clear the data structure information of a specified IS-IS neighbor. The command is disabled by default.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS interlevel: Allows advertising IP address prefixes learnt from different IS-IS levels with the allow keyword specified. external: Allows advertising IP address prefixes learnt from other routing protocols with the allow keyword specified. Description Use the set-overload command to set the overload tag for the current router. Use the undo set-overload command to clear the overload tag. No overload flag is set by default.
system-view [Sysname] isis [Sysname-isis-1] spf-slice-size 1000 summary (IS-IS view) Syntax summary ip-address { mask | mask-length } [ avoid-feedback | generate_null0_route | tag tag | [ level-1 | level-1-2 | level-2 ] ] * undo summary ip-address { mask | mask-length } [ level-1 | level-1-2 | level-2 ] View Parameters IS-IS view ip-address: Destination IP address of a summary route. mask: Mask of the destination IP address, in dotted decimal format.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS system-view [Sysname] isis [Sysname-isis-1] summary 202.0.0.0 255.0.0.0 timer isp-generation Syntax timer lsp-generation maximum-interval [ initial-interval [ incremental-interval ] ] [ level-1 | level-2 ] undo timer lsp-generation [ level-1 | level-2 ] View Parameters IS-IS view maximum-interval: Maximum interval in seconds for generating ISIS LSPs, in the range 1 to 120.
Examples # Set the maximum LSP generation interval to 10 seconds, initial interval to 100 milliseconds and the incremental interval to 200 milliseconds. system-view [Sysname] isis [Sysname-isis-1]timer lsp-generation 10 100 200 # Set the maximum LSP generation interval to 15 seconds.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS Parameters seconds: Specifies the LSP refresh interval in seconds, ranging from 1 to 65534. Description Use the timer lsp-refresh command to set the LSP refresh interval. Use the undo timer lsp-refresh to restore the default. The default is 900 seconds. Using this feature, you can keep LSPs in synchronization for the whole area. Related commands: n Examples timer lsp-max-age.
Examples # Set the maximum SPF calculation interval to 10 seconds, minimum interval to 100 milliseconds and the incremental interval to 200 milliseconds. system-view [Sysname] isis [Sysname-isis-1]timer spf 10 100 200 # Set the maximum SPF calculation interval to 15 seconds.
CHAPTER 74: IS-IS CONFIGURATION COMMANDS
IS-IS DEBUGGING COMMANDS 75 debugging isis Syntax debugging isis { adjacency | all | authentication-error | checksum-error | circuit-information | configuration-error | datalink-receiving-packet | datalink-sending-packet | event | general-error | graceful-restart | ha-events | interface-information | memory-allocating | miscellaneous-errors | receiving-packet-content | self-originate-update | sending-packet-content | snp-packet | spf-event | spf-summary | spf-timer | task-error | timer | traffic-eng { adv
CHAPTER 75: IS-IS DEBUGGING COMMANDS general-error: Enables debugging for IS-IS errors. graceful-restart: Enables debugging for IS-IS GR. ha-events: Enables debugging for data hot backup. This keyword takes effect only on a distributed device. interface-information: Enables IS-IS interface debugging. memory-allocating: Enables debugging for IS-IS memory allocation. miscellaneous-errors: Enables debugging for errors unrelated to IS-IS.
Table 243 Description on the fields of the debugging isis adjacency command Field Description Rxed helloType Hello on circuitName, from SNPA SNPA IS-IS received a hello packet. helloType: Hello packet type: Lan L1, Lan L2, or P2P. circuitName: Interface name SNPA: Source MAC address of the packet. Sending helloType Hello on circuitName IS-IS is sending a hello packet. helloType: Hello packet type: LAN L1, LAN L2, or P2P.
CHAPTER 75: IS-IS DEBUGGING COMMANDS Table 243 Description on the fields of the debugging isis adjacency command Field Description Rxed helloType IIH on circuitName contains Duplicate Ip Address. IIH Discarded The received hello packet was discarded because it contains a duplicate IP address. helloType: Hello packet type: LAN L1, LAN L2, or P2P. circuitName: Interface name Rxed helloType IIH on % circuitName contains The received hello packet was discarded Duplicate Ipv6 Address.
Table 245 Description on the fields of the debugging isis checksum-error command Field Description For all processes of the VPN instance vpn-instance-name , IS-IS Checksum errors debugging is on The LSP checksum error debugging is enabled for all the IS-IS processes of the VPN instance. For the process process-id, IS-IS Checksum errors debugging is on The LSP checksum error debugging is enabled for the IS-IS process.
CHAPTER 75: IS-IS DEBUGGING COMMANDS Table 247 Description on the fields of the debugging isis datalink-receiving-packet command Field Description Circuit NOT operationally ON Interface is not ready for operation. SYS not functional. Ignoring recvd packet System is not functioning and therefore ignores the received packets. Rxed IS-IS PDU on Circuit circuitName, PDU’s type is packetType An IS-IS PDU was received on the interface. circuitName: Interface name packetType: Interface type.
Table 250 Description on the fields of the debugging isis graceful-restart command Field Description RST: levelType T1 Timer Expired on circName, Counter: count GR timer expired. levelType: system type, which can be L1 or L2. count: Number of times GR timer has started. circName: Interface name RST: Restart COMPLETE in millisecond ms GR is complete. millisecond: Length of GR duration in milliseconds.
CHAPTER 75: IS-IS DEBUGGING COMMANDS Table 253 Description on the fields of the debugging isis receiving-packet-content command Field Description Rxed pduLevel CSNP From sourceId (circuitName). IS-IS received a CSNP packet. pduLevel: L1 or L2. sourceId: Source NSAP address of the CSNP packet. circuitName: Name of the interface through which the CSNP packet was received.
Table 254 Description on the fields of the debugging isis self-originate-update command Field Description UPDT: Adding Redist Address ipAddress into pduLevel LSPs, The redistributed route was being added to the local LSPs. UPDT: Updating LSP Option Success IS-IS updated the LSP TLV successfully. UPDT: Error Adding Summary Reachability in pduLevel LSPs IS-IS failed to add a summary address to the local LSPs.
CHAPTER 75: IS-IS DEBUGGING COMMANDS Table 256 Description on the fields of the debugging isis snp-packet command Field Description Sending pduLevel CSNP PDU fails Sending CSNP packets failed. pduLevel: PDU packet level, which can be L1 or L2. Sending CSNP on P2P Interface circuitName A CSNP packet is being sent through the P2P interface. Failed to Send CSNP PDU Sending a CSNP PDU failed. Sending content on circuitName A CSNP PDU is being sent. circuitName: Name of the sending interface.
Table 257 Description on the fields of the debugging isis spf-event command Field Description ISPF—NODE :(L sysLevel)(MT topoType) Create(Exist) NODE. sourceId [Overload] The SPF node was created or the node already exists. sysLevel: system level topoType: topology type sourceId: source system ID. ISIS—procId—ISPF—ADJ Adjacency-related information procId: IS-IS process ID.
CHAPTER 75: IS-IS DEBUGGING COMMANDS Table 257 Description on the fields of the debugging isis spf-event command Field Description TENT: New Distance from RootNode(SourceId: The distance to the root node is updated. sourceId) to The Node(SourceId: sourceId) is sourceId: source system ID. distanceValue. TENT:Equal cost, add node(SourceId: sourceId) The distances from the nodes to the root node to TENT HEAP are the same. sourceId: source system ID. Changed links. ISPF-EVE:Changed Link...
Table 257 Description on the fields of the debugging isis spf-event command Field Description SPF—PRC:Received L sysLevel System Change SpfNode change was sent to PRC for Event for msgString, Change = chgEvent processing. sysLevel: system level msgString: Node change event type.
CHAPTER 75: IS-IS DEBUGGING COMMANDS Table 261 Description on the fields of the debugging isis update-packet command Field Description pdu length: pduLen Length of received PDU Adjacency Usage: adjType Adjacency type Fast Flood levelType LSP before SPF LSPs are fast-flooded before SPF calculation. levelType: LSP level, which can be L1 or L2.
Table 261 Description on the fields of the debugging isis update-packet command Examples Field Description UPDT: Received LSP Not processed on P2P Circuit due to Low Memory, Sending Acknowledgement) The received LSP was dropped due to insufficient memory of the P2P interface and an acknowledgement packet was sent. UPDT: LSP newer than data base copy. The received LSP is newer and the local LSDB is updated. UPDT: Expired Own LSP received. Just Acknowledging.
CHAPTER 75: IS-IS DEBUGGING COMMANDS // The IP address took effect on the IS-IS interface. # Router A and Router B are interconnected and have established an IS-IS adjacency with each other. Router A is elected as the DIS. Enable debugging for the received IS-IS packets on Router A and Router B respectively. ISIS-1-SNP: ISIS-1-SNP: ISIS-1-SNP: ISIS-1-SNP: CSNP Rxed CSNP Rxed Range from 0000.0000.0000.00-00 to ffff.ffff.ffff.ff-ff. L1 CSNP From 0000.0000.0001 (Vlan100). Range from 0000.0000.0000.
ISIS-1-SPF-EVE: Processing LSPs of System :0000.0000.0001.00 ISIS-1-SPF-EVE: Updating Level-1 Forwarding table ISIS-1-SPF-EVE: Level-1 SPF Run Completed // L1 SPF calculation was running and the L1 IS-IS routing table was updated. ISIS-1-SPF-EVE: Running Level -2 SPF Run ISIS-1-SPF-EVE: Adding Self To PATHS ISIS-1-SPF-EVE: Adding To PATHS: 191.01.01.00/ 255.255.255.00,Cost 10, Num ber of next hops 1, Preference 0 ISIS-1-SPF-EVE: Loading Level-2 Adjacencies ISIS-1-SPF-EVE: Adding To PATHS:0000.0000.
CHAPTER 75: IS-IS DEBUGGING COMMANDS
OSPF CONFIGURATION COMMANDS 76 n ■ Refer to “MPLS TE Configuration Commands” on page 1565 for OSPF TE related commands. ■ Refer to “MPLS L2VPN Configuration Commands” on page 1645 and “MPLS L3VPN Configuration Commands” on page 1671.
CHAPTER 76: OSPF CONFIGURATION COMMANDS Examples # Summarize networks 36.42.10.0/24 and 36.42.110.0/24 in Area1 with 36.42.0.0/16 for advertisement to other areas. system-view [Sysname] ospf 100 [Sysname-ospf-100] area 1 [Sysname-ospf-100-area-0.0.0.1] network 36.42.10.0 0.0.0.255 [Sysname-ospf-100-area-0.0.0.1] network 36.42.110.0 0.0.0.255 [Sysname-ospf-100-area-0.0.0.1] abr-summary 36.42.0.0 255.255.0.
tag tag: Specifies a tag value for the summary route, used by a route policy to control route advertisement, in the range 0 to 4294967295. The value defaults to 1. cost cost: Specifies the cost of the summary route, in the range 1 to 16777214. For Type-1 external routes, the cost defaults to the biggest cost among routes that are summarized. For Type-2 external routes, the cost defaults to the value of the biggest cost among routes that are summarized plus 1.
CHAPTER 76: OSPF CONFIGURATION COMMANDS Description Use the authentication-mode command to specify an authentication mode for the OSPF area. Use the undo authentication-mode command to cancel a specified authentication mode. By default, no authentication mode is configured for an OSPF area. Routers that reside in the same area must have the same authentication mode: non-authentication, simple, or MD5. Related commands: Examples ospf authentication-mode.
undo default { cost | limit | tag | type } * View Parameters OSPF view cost: Specifies the default cost for redistributed routes, in the range 0 to 16777214. limit: Specifies the default upper limit of routes redistributed per time, in the range 1 to 2147483647. tag: Specifies the default tag for redistributed routes, in the range 0 to 4294967295. type: Specifies the default type for redistributed routes: 1 or 2.
CHAPTER 76: OSPF CONFIGURATION COMMANDS Related commands: Examples stub (OSPF area view), nssa. # Configure Area1 as a stub area, and specify the cost of the default route advertised to the stub area as 20. system-view [Sysname] ospf 100 [Sysname-ospf-100] area 1 [Sysname-ospf-100-area-0.0.0.1] stub [Sysname-ospf-100-area-0.0.0.
The default-route-advertise summary cost command is applicable only to VPNs, and the default route is redistributed in a Type-3 LSA. The PE router advertises the redistributed default route to the CE router. Related commands: Examples import-route (OSPF view) # Generate a default route in an ASE LSA into the OSPF routing domain (no default route configured on the router).
CHAPTER 76: OSPF CONFIGURATION COMMANDS Parameters process-id: OSPF process ID, in the range 1 to 65535. Description Use the display ospf abr-asbr command to display information about ABR/ASBR. If no process is specified, ABR/ASBR information of all OSPF processes is displayed. If you use this command on routers in a stub area, no ASBR information is displayed. Examples # Display information about ABR/ASBR. display ospf abr-asbr OSPF Process 1 with Router ID 192.168.1.
Related commands: Examples asbr-summary. # Display information about all summarized redistributed routes. display ospf asbr-summary OSPF Process 1 with Router ID 2.2.2.2 Summary Addresses Total Summary Address Count: 1 Summary Address Net : 30.1.0.0 Mask : 255.255.0.0 Tag : 20 Status : Advertise Cost : 10 (Configured) The Count of Route is : 2 Destination 30.1.2.0 30.1.1.0 Net Mask 255.255.255.0 255.255.255.
CHAPTER 76: OSPF CONFIGURATION COMMANDS display ospf brief OSPF Process 1 with Router ID 192.168.1.2 OSPF Protocol Information RouterID: 192.168.1.
Table 264 Description on the fields of the display ospf brief command Field Description Area Area ID in the IP address format Authtype Authentication type of the area: Non-authentication, simple authentication, or MD5 authentication Area flag The type of the area SPF scheduled Count SPF calculation count in the OSPF area Interface IP address of the interface Cost Interface cost State Interface state Type Interface network type MTU Interface MTU Priority Router priority Designated
CHAPTER 76: OSPF CONFIGURATION COMMANDS Sum-Asbr: External: NSSA: 0 Opq-Link: Opq-Area: Opq-As: 0 0 0 0 0 LSAs Originated: 4 Routing Table: Intra Area: 2 LSAs Received: 7 Inter Area: 3 ASE/NSSA: 0 Table 265 Description on the fields of the display ospf cumulative command Field Description IO statistics Statistics about inbound/outbound packets and LSAs Type OSPF packet type Input Packets received Output Packets sent Hello Hell packet DB Description Database Description packet Link
Description Use the display ospf error command to display OSPF error information. If no process is specified, OSPF error information of all OSPF processes is displayed. Examples # Display OSPF error information. display ospf error OSPF Process 1 with Router ID 192.168.80.
CHAPTER 76: OSPF CONFIGURATION COMMANDS Table 266 Description on the fields of the display ospf error command Field Description LS ACK: Unknown LSA type LSAck packets with unknown LSA type LS REQ: Empty request LSR packets with no request information LS REQ: Bad request Bad LSR packets LS UPD: LSA checksum bad LSU packets with wrong LSA checksum LS UPD: Received less recent LSA LSU packets without latest LSA LS UPD: Unknown LSA type LSU packets with unknown LSA type display ospf interfa
Table 267 Description on the fields of the display ospf interface command Field Description DR The DR on the interface’s network segment BDR The BDR on the interface’s network segment display ospf lsdb Syntax View Parameters display ospf [ process-id ] lsdb [ brief | [ { ase | router | network | summary | asbr | nssa | opaque-link | opaque-area | opaque-as } [ link-state-id ] ] [ originate-router advertising-router-id | self-originate ] ] Any view process-id: OSPF process ID, in the range 1 to
CHAPTER 76: OSPF CONFIGURATION COMMANDS Type Router Router Network Sum-Net Sum-Net LinkState ID 192.168.0.2 192.168.0.1 192.168.0.1 192.168.1.0 192.168.2.0 Type Router Sum-Net Sum-Net LinkState ID 192.168.0.1 192.168.2.0 192.168.0.0 Area: 0.0.0.0 AdvRouter 192.168.0.2 192.168.0.1 192.168.0.1 192.168.0.1 192.168.0.2 Area: 0.0.0.1 AdvRouter 192.168.0.1 192.168.0.1 192.168.0.
Table 269 Description on the fields of the display ospf 1 lsdb network command Field Description Type LSA type LS ID DR IP address Adv Rtr Router that advertised the LSA LS Age LSA age time Len LSA length Options LSA options Seq# LSA sequence number Chksum LSA checksum Net Mask Network mask Attached Router ID of the router that established adjacency with the DR, and ID of the DR itself display ospf nexthop Syntax View display ospf [ process-id ] nexthop Any view Parameters pro
CHAPTER 76: OSPF CONFIGURATION COMMANDS display ospf peer Syntax View Parameters display ospf [ process-id ] peer [ verbose | [ interface-type interface-number ] [ neighbor-id ] ] Any view process-id: OSPF process ID, in the range 1 to 65535. verbose: Displays detailed neighbor information. interface-type interface-number: Interface type and number neighbor-id: Neighbor router ID. Description Use the display ospf peer command to display information about OSPF neighbors.
Table 271 Description on the fields of the display ospf peer verbose command Field Description State Neighbor state: Down, Init, Attempt, 2-Way, Exstart, Exchange, Loading or Full Mode Neighbor mode for DD exchange: Master or Slave Priority Router priority DR The DR on the interface’s network segment BDR The BDR on the interface’s network segment MTU Interface MTU Dead timer due in 33 sec Dead timer times out in 33 seconds Neighbor is up for 93:12:38 The neighbor has been up for 93:12
CHAPTER 76: OSPF CONFIGURATION COMMANDS If no OSPF process is specified, OSPF neighbor statistics of all OSPF processes is displayed. Examples # Display OSPF neighbor statistics. display ospf peer statistics OSPF Process 1 with Router ID 1.1.1.1 Neighbor Statistics Area ID 0.0.0.
Examples # Display OSPF request list information. display ospf request-queue OSPF Process 1 with Router ID 1.1.1.1 OSPF Request List The Router’s Neighbor is Router ID 2.2.2.2 Interface 10.1.1.1 Area 0.0.0.0 Request list: Type LinkState ID AdvRouter Router 2.2.2.2 1.1.1.1 Network 192.168.0.1 1.1.1.1 Sum-Net 192.168.1.0 1.1.1.1 Address 10.1.1.
CHAPTER 76: OSPF CONFIGURATION COMMANDS The Router’s Neighbor is Router ID 2.2.2.2 Interface 10.1.1.1 Area 0.0.0.0 Retransmit list: Type LinkState ID AdvRouter Router 2.2.2.2 2.2.2.2 Network 12.18.0.1 2.2.2.2 Sum-Net 12.18.1.0 2.2.2.2 Address 10.1.1.
Total Nets: 2 Intra Area: 1 Inter Area: 1 ASE: 0 NSSA: 0 Table 276 Description on the fields of the display ospf routing command Field Description Destination Destination network Cost Cost to destination Type Route type: intra-area, Transit, stub, Inter-area, Type1 External, Type2 External.
CHAPTER 76: OSPF CONFIGURATION COMMANDS Table 277 Description on the fields of the display ospf vlink command Field Description Cost Interface route cost State Interface state Type Type: virtual link Transit Area Transit area ID if the interface attached to a virtual link Timers Values of timers: Hello, Dead, Poll (NBMA), Retransmit, and Interface transmit delay enable link-local-signaling Syntax enable link-local-signaling undo enable link-local-signaling View OSPF view Parameters N
Use the undo enable command to disable specified logging. OSPF logging is disabled by default. If no keyword is specified, all logging is enabled. Examples # Enable OSPF logging.
CHAPTER 76: OSPF CONFIGURATION COMMANDS export: Filters exported LSAs. Description Use the filter command to configure exported/imported Summary LSAs filtering on an ABR. Use the undo filter command to disable Summary LSA filtering. By default, Summary LSAs filtering is disabled. n Examples This command is only available on an ABR. # Apply IP prefix list my-prefix-list to filter inbound Type-3 LSAs, and ACL 2000 to filter outbound Type-3 LSAs in OSPF area 1.
Related commands: Examples import-route (OSPF view). # Filter redistributed routes using ACL 2000. system-view [Sysname] ospf 100 [Sysname-ospf-100] filter-policy 2000 export filter-policy import (OSPF view) Syntax filter-policy { acl-number | ip-prefix ip-prefix-name | gateway ip-prefix-name } import undo filter-policy import View Parameters OSPF view acl-number: Number of the basic or advanced ACL used to filter routing information by destination address, in the range 2000 to 3999.
CHAPTER 76: OSPF CONFIGURATION COMMANDS Parameters nonstandard: Enables the non-IETF GR capability. ietf: Enables the IETF GR capability. Description Use the graceful-restart command to enable the OSPF Graceful Restart capability. Use the undo graceful-restart command to disable the OSPF Graceful Restart capability. By default, the OSPF Graceful Restart capability is disabled.
Description Use the graceful-restart help command to configure for which OSPF neighbors the current router can serve as a GR Helper. (The neighbors are specified by the ACL or the IP prefix list.) By default, the router can serve as a GR Helper for any OSPF neighbor. Examples # Enable GR Help for OSPF process 1 and configure the router as a GR Helper for OSPF neighbors defined in the ACL 2001.
CHAPTER 76: OSPF CONFIGURATION COMMANDS View Parameters OSPF area view ip-address: IP address of a host cost: Cost of the route, in the range 1 to 65535. Description Use the host-advertise command to advertise a host route. Use the undo host-advertise command to remove a host route. No host route is configured by default. Examples # Configure host route 1.1.1.1 and specify cost 100 for it. system-view [Sysname] ospf 100 [Sysname] area 0 [Sysname-ospf-100-area-0.0.0.0] host-advertise 1.
No route redistribution is configured by default. OSPF prioritize routes as follows: ■ Intra-area route ■ Inter-area route ■ Type1 External route ■ Type2 External route An intra-area route is a route in an OSPF area. An inter-area route is between any two OSPF areas. Both of them are internal routes. An external route is to a destination outside the OSPF AS.
CHAPTER 76: OSPF CONFIGURATION COMMANDS Description Use the log-peer-change command to enable the logging of OSPF neighbor state changes. Use the undo log-peer-change command to disable the logging. The logging is enabled by default. With this feature enabled, information about neighbor state changes is displayed on the terminal until the feature is disabled. Examples # Disable the logging of neighbor state changes for OSPF process 100.
lsa-generation-interval Syntax lsa-generation-interval maximum-interval [ initial-interval [ incremental-interval ] ] undo lsa-generation-interval View Parameters OSPF view maximum-interval: Maximum LSA generation interval in seconds, in the range 1 to 60. initial-interval: Minimum LSA generation interval in milliseconds, in the range 10 to 60000. The default is 0 millisecond.
CHAPTER 76: OSPF CONFIGURATION COMMANDS Description Use the lsdb-overflow-limit command to specify the upper limit of external LSAs in the LSDB. Use the undo lsdb-overflow-limit command to cancel limitation. External LSAs in the LSDB are unlimited by default. Examples # Specify the upper limit of external LSAs as 400000.
Description Use the maximum-routes command to specify the maximum route number of a specified type: inter-area, intra-area, external. Use the undo maximum-routes command to restore the default route maximum value of a specified type. Examples # Specify the maximum number of intra-area routes as 500.
CHAPTER 76: OSPF CONFIGURATION COMMANDS undo nssa View Parameters OSPF area view default-route-advertise: Usable on an NSSA ABR or an ASBR only. If it is configured on an NSSA ABR, the ABR generates a default route in a Type-7 LSA into the NSSA regardless of whether the default route is available. If it is configured on an ASBR, only a default route is available on the ASBR can it generates the default route in a Type-7 LSA into the attached area.
Use the undo opaque-capability command to restore the default. The feature is disabled by default. Examples # Enable advertising and receiving opaque LSAs. system-view [Sysname] ospf 100 [Sysname-ospf-100]opaque-capability enable ospf Syntax ospf [ process-id | router-id router-id | vpn-instance instance-name ]* undo ospf process-id View Parameters System view process-id: OSPF process ID, in the range 1 to 65535. router-id: OSPF router ID, in dotted decimal format.
CHAPTER 76: OSPF CONFIGURATION COMMANDS For simple authentication: ospf authentication-mode simple [ plain | cipher ] password undo ospf authentication-mode simple View Parameters Interface view md5: MD5 authentication. hmac-md5: HMAC-MD5 authentication. simple: Simple authentication. key-id: Authentication key ID, in the range 1 to 255. plain | cipher : Plain or cipher password. If plain is specified, only plain password is supported and displayed upon displaying the configuration file.
[Sysname-ospf-100-area-0.0.0.1] network 131.119.0.0 0.0.255.255 [Sysname-ospf-100-area-0.0.0.1] authentication-mode md5 [Sysname-ospf-100-area-0.0.0.1] quit [Sysname-ospf-100] quit [Sysname] interface serial 2/0 [Sysname-Serial2/0] ospf authentication-mode md5 15 cipher abc # Configure the network 131.119.0.0/16 in area1 to support simple authentication, and set for the interface the authentication password to abc, and password type to cipher.
CHAPTER 76: OSPF CONFIGURATION COMMANDS system-view [Sysname] interface serial2/0 [Sysname-Serial2/0] ospf cost 65 ospf dr-priority Syntax ospf dr-priority priority undo ospf dr-priority View Interface view Parameters priority: DR Priority of the interface, in the range 0 to 255. Description Use the ospf dr-priority command to set the priority for DR/BDR election on an interface. Use the undo ospf dr-priority command to restore the default value. By default, the priority is 1.
system-view [Sysname] ospf mib-binding 100 # Restore the default, that is, bind the first enabled OSPF process to MIB operation system-view [Sysname] undo ospf mib-binding ospf mtu-enable Syntax ospf mtu-enable undo ospf mtu-enable View Interface view Parameters None Description Use the ospf mtu-enable command to enable an interface to add the real MTU into DD packets. Use the undo ospf mtu-enable command to restore the default.
CHAPTER 76: OSPF CONFIGURATION COMMANDS p2mp: Specifies the network type as P2MP. p2p: Specifies the network type as P2P. Description Use the ospf network-type command to set the network type for an OSPF interface. Use the undo ospf network-type command to restore the default network type for an OSPF interface. By default, the network type of an interface depends on its link layer protocol. ■ For Ethernet and FDDI, the default network type is broadcast. ■ For ATM, FR, HDLC and X.
Description Use the ospf timer dead command to set the dead interval. Use the undo ospf timer dead command to restore the default. The dead interval defaults to 40s for Broadcast, P2P interfaces and defaults to 120s for P2MP and NBMA interfaces If an interface receives no hello packet from the neighbor within the dead interval, the interface considers the neighbor down. The dead interval on an interface is at least four times the hello interval.
CHAPTER 76: OSPF CONFIGURATION COMMANDS system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] ospf timer hello 20 ospf timer poll Syntax ospf timer poll seconds undo ospf timer poll View Interface view Parameters seconds: Poll interval in seconds, in the range 1 to 2147483647. Description Use the ospf timer poll command to set the poll interval on an NBMA interface. Use the undo ospf timer poll command to restore the default value.
Use the undo ospf timer retransmit command to restore the default. The interval defaults to 5s. After sending a LSA, an interface waits for an acknowledgement packet. If the interface receives no acknowledgement when the retransmit interval elapses, it will retransmit the LSA. The retransmit interval should not be so small to avoid unnecessary retransmissions. This configuration is not supported on the NULL interface. Examples # Set the LSA retransmit interval to 8 seconds.
CHAPTER 76: OSPF CONFIGURATION COMMANDS undo peer ip-address View Parameters OSPF view ip-address: Neighbor IP address. dr-priority: Neighbor DR priority, in the range 0 to 255, the bigger the value, the higher the priority. Description Use the peer command to specify the IP address of an NBMA neighbor, and the DR priority of the neighbor. Use the undo peer command to remove the configuration. The DR priority of NBMA neighbors defaults to 1. On an X.
route-policy-name: Rout policy name, a string of 1 to 19 characters. value: Priority value, in the range 1 to 255. A smaller value has a higher priority. Description Use the preference command to set the priority of OSPF routes. Use the undo preference command to restore the default. The priority of OSPF internal routes defaults to 10, and the priority of OSPF external routes defaults to 150.
CHAPTER 76: OSPF CONFIGURATION COMMANDS View User view Parameters process-id: OSPF process ID, in the range 1 to 65535. Description Use the reset ospf process command to reset all OSPF processes or a specified process.
Use the undo rfc1583 compatible command to disable the function. By default, RFC1583 routing rules are compatible. On selecting the best route when multiple AS external LSAs describe routes to the same destination, RFC1583 and RFC2328 have different routing rules. Examples # Make RFC1583 routing rules compatible.
CHAPTER 76: OSPF CONFIGURATION COMMANDS undo snmp-agent trap enable ospf [ process-id ] [ ifauthfail | ifcfgerror | ifrxbadpkt | ifstatechange | iftxretransmit | lsdbapproachoverflow | lsdboverflow | maxagelsa | nbrstatechange | originatelsa | vifcfgerror | virifauthfail | virifrxbadpkt | virifstatechange | viriftxretransmit | virnbrstatechange ] * View Parameters System view process-id: OSPF process ID, in the range 1 to 65535. ifauthfail: Interface authentication failure information.
Examples # Enable the sending of SNMP traps for all OSPF processes. system-view [Sysname] snmp-agent trap enable ospf spf-schedule-interval Syntax spf-schedule-interval maximum-interval [ minimum-interval [ incremental-interval ] ] undo spf-schedule-interval View Parameters OSPF view maximum-interval: Maximum SPF calculation interval in seconds, in the range 1 to 60. minimum-interval: Minimum SPF calculation interval in milliseconds, in the range 10 to 60000, which defaults to 0.
CHAPTER 76: OSPF CONFIGURATION COMMANDS View OSPF area view Parameters no-summary: Used only on a stub ABR. With it configured, the ABR advertises only a default route in a Summary LSA into the stub area (Such a stub area is known as a totally stub area). Description Use the stub command to configure an area as a stub area. Use the undo stub command to remove the configuration. No area is a stub area by default.
Examples # Enable a stub-router.
CHAPTER 76: OSPF CONFIGURATION COMMANDS Description Use the vlink-peer command to create and configure a virtual link. Use the undo vlink-peer command to remove a virtual link. As defined in RFC2328, all non-backbone areas must maintain connectivity to the backbone. You can use the vlink-peer command to configure a virtual link to connect an area to the backbone. Note that: ■ The smaller the hello interval is, the faster the network converges and the more network resources are consumed.
RIP CONFIGURATION COMMANDS 77 checkzero Syntax checkzero undo checkzero View RIP view Parameters None Description Use the checkzero command to enable the zero field check on RIP-1 messages. Use the undo checkzero command to disable the zero field check. The zero field check is enabled by default. After the zero field check is enabled, the router discards RIP-1 messages in which zero fields are non-zero. If all messages are trusty, you can disable this feature to spare the processing time of the CPU.
CHAPTER 77: RIP CONFIGURATION COMMANDS By default, the default metric of redistributed routes is 0. When you use the import-route command to redistribute routes from other protocols without specifying a metric, the metric specified by the default cost command applies. Related commands: Examples import-route (RIP view). # Set the default metric for redistributed routes to 3.
Parameters process-id: RIP process number, in the range of 1 to 65535. vpn-instance vpn-instance-name: Specifies a VPN instance name, a string of 1 to 31 characters. Description Examples Use the display rip command to display the current status and configuration information of the specified RIP process. ■ If process-id is not specified, information about all configured RIP processes is displayed.
CHAPTER 77: RIP CONFIGURATION COMMANDS Table 278 Description on the fields of the display rip command Field Description Timeout time RIP timeout time Suppress time RIP suppress interval Garbage-collect time RIP garbage collection interval TRIP retransmit time TRIP retransmit interval for sending update requests and responses TRIP response packets retransmit count Maximum retransmit times for update requests and responses Silent interfaces Number of silent interfaces, which do not periodi
display rip interface Syntax View Parameters display rip process-id interface [ interface-type interface-number ] Any view process-id: RIP process number, in the range of 1 to 65535. interface-type interface-number: Specifies an interface. Description Use the display rip interface command to display the RIP interface information of the RIP process. If no interface is specified, information about all RIP interfaces of the RIP process is displayed.
CHAPTER 77: RIP CONFIGURATION COMMANDS statistics: Displays the route statistics, including total number of routes and number of routes of each neighbor. ip-address { mask | mask-length }: Displays route information about a specified IP address. peer ip-address: Displays all routing information learned from a specified neighbor. Description Examples Use the display rip route command to display the routing information of a specified RIP process. # Display all routing information of RIP process 1.
Table 281 Description on the fields of the display rip route command Field Description Route Flags R - RIP route T - TRIP route P - The route never expires A - The route is aging S - The route is suppressed G - The route is in Garbage-collect state Peer 21.0.0.
CHAPTER 77: RIP CONFIGURATION COMMANDS ip-prefix ip-prefix-name: Name of the IP prefix list used for filtering outbound routes, a string of 1 to 19 characters. protocol: Filters outbound routes redistributed from a specified routing protocol, which can be bgp, direct, isis, ospf, rip, and static. process-id: Process number of the specified routing protocol, in the range of 1 to 65535. You need to specify a process ID when the routing protocol is rip, ospf, or isis.
ip-prefix ip-prefix-name: References an IP prefix list to filter received routes. The ip-prefix-name is a string of 1 to 19 characters. gateway ip-prefix-name: References an IP prefix list to filter routes from the gateway. interface-type interface-number: Specifies an interface. Description Use the filter-policy import command to configure the filtering of incoming routes. Use the undo filter-policy import command to remove the filtering. By default, RIP does not filter incoming routes.
CHAPTER 77: RIP CONFIGURATION COMMANDS Examples # Disable RIP from receiving host routes.
system-view [Sysname] rip 1 [Sysname-rip-1] import-route static cost 4 # Set the default cost for redistributed routes to 3. [Sysname-rip-1] default cost 3 # Redistribute OSPF routes with the cost being the default cost. [Sysname-rip-1] import-route ospf maximum load-balancing (RIP view) Syntax maximum load-balancing number undo maximum load-balancing View RIP view Parameters number: Maximum number of load balanced routes, in the range 1 to 8.
CHAPTER 77: RIP CONFIGURATION COMMANDS RIP runs only on the interfaces attached to the specified network. For an interface not on the specified network, RIP neither receives/sends routes on it nor forwards interface route through it. Therefore, you need to specify the network after enabling RIP to validate RIP on a specific interface. Use the network 0.0.0.0 command to enable RIP on all interfaces. RIP is disabled on an interface by default.
Parameters route-policy-name: Routing policy name with 1 to 19 characters. value: Priority for RIP route, in the range of 1 to 255. The smaller the value, the higher the priority. Description Use the preference command to specify the RIP route priority. Use the undo preference route-policy command to restore the default. By default, the priority of RIP route is 100. You can specify a routing policy using keyword route-policy to set the specified priority to routes matching the routing policy.
CHAPTER 77: RIP CONFIGURATION COMMANDS Parameters process-id: RIP process number, in the range of 1 to 65535. The default is 1. vpn-instance vpn-instance-name: Specifies a VPN instance name, a string of 1 to 31 characters. Description Use the rip command to create a RIP process and enter RIP view. Use the undo rip command to disable a RIP process. By default, no RIP process is enabled. Note that: Examples ■ If no VPN instance is specified, the RIP process will run under public network instance.
password: Plain text authentication string with 1 to 16 characters. Description Use the rip authentication-mode command to configure RIP-2 authentication mode and parameters. Use the undo rip authentication-mode command to cancel authentication. Note that the key string you configured can overwrite the old one if there is any. Related commands: n Examples rip version. With RIPv1, you can configure the authentication mode in interface view.
CHAPTER 77: RIP CONFIGURATION COMMANDS rip metricin Syntax rip metricin value undo rip metricin View Interface view Parameters value: Additional metric added to received routes, in the range of 0 to 16. Description Use the rip metricin command to add a metric to the received routes. Use the undo rip metricin command to restore the default. By default, the additional metric of a received route is 0.
Examples # Configure an additional metric of 12 for RIP routes sent on Ethernet1/0. system-view [Sysname] interface ethernet1/0 [Sysname-Ethernet1/0] rip metricout 12 rip mib-binding Syntax rip mib-binding process-id undo rip mib-binding View System view Parameters process-id: RIP process number, in the range of 1 to 65535. Description Use the rip mib-binding command to bind MIB operations with a specified RIP process. Use the undo rip mib-binding command to restore the default.
CHAPTER 77: RIP CONFIGURATION COMMANDS Related commands: Examples rip input. # Enable Serial 2/0 to receive RIP messages. system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] rip output rip poison-reverse Syntax rip poison-reverse undo rip poison-reverse View Interface view Parameters None Description Use the rip poison-reverse command to enable the poison reverse function. Use the undo rip poison-reverse command to disable the poison reverse function.
n Examples ■ In special cases, make sure it is necessary to disable the split horizon function. ■ In Frame Relay, X.25 and other non-broadcast multi-access (NBMA) networks, split horizon should be disabled if multiple VCs are configured on the primary and secondary interfaces to ensure route advertisement. For detailed information, refer to “Frame Relay Configuration Commands” on page 371 and “LAPB and X.25 Configuration Commands” on page 421.
CHAPTER 77: RIP CONFIGURATION COMMANDS undo rip triggered View Interface view Parameters None Description Use the rip triggered command to enable triggered RIP. Use the undo rip triggered command to disable triggered RIP. By default, the triggered RIP is disabled. Note that triggered RIP can only run on link layer protocols PPP, Frame Relay, and X.25. Examples # Enable triggered RIP.
■ Send RIP-1 broadcast messages ■ Receive RIP-1 broadcast messages ■ Receive RIP-1 unicast messages When RIP-2 runs on the interface in broadcast mode, the interface will: ■ Send RIP-2 broadcast messages ■ Receive RIP-1 broadcast messages ■ Receive RIP-1 unicast messages ■ Receive RIP-2 broadcast messages ■ Receive RIP-2 multicast messages ■ Receive RIP-2 unicast messages When RIP-2 runs on the interface in multicast mode, the interface will: Examples ■ Send RIP-2 multicast messag
CHAPTER 77: RIP CONFIGURATION COMMANDS system-view [Sysname] rip 100 [Sysname-rip-100] silent-interface all [Sysname-rip-100] undo silent-interface ethernet1/0 [Sysname-rip-100] network 131.108.0.0 summary Syntax summary undo summary View RIP view Parameters None Description Use the summary command to enable automatic RIP-2 summarization. Natural masks are used to advertise summary routes so as to reduce the size of routing tables.
timeout-value: Timeout timer time in seconds, in the range of 1 to 3,600. update-value: Update timer time in seconds, in the range of 1 to 3,600. Description Use the timers command to configure RIP timers. By adjusting RIP timers, you can improve network performance. Use the undo timers command to restore the default. By default, the garbage-collect timer is 120 seconds, the suppress timer 120 seconds, the timeout timer 180 seconds, and the update timer 30 seconds.
CHAPTER 77: RIP CONFIGURATION COMMANDS View RIP view Parameters retransmit-count-value: Upper limit for retransmitting an Update Request or Update Response, in the range 1 to 3600. Description Use the trip retransmit count command to configure the upper limit for retransmitting an Update Request or Update Response. Use the undo validate-source-address command to restore the default. The default upper limit is 36.
validate-source-address Syntax validate-source-address undo validate-source-address View RIP view Parameters None Description Use the validate-source-address command to enable the source IP address validation on incoming RIP routing updates. Use the undo validate-source-address command to disable the source IP address validation. The source IP address validation is enabled by default. Generally, disabling the validation is not recommended.
CHAPTER 77: RIP CONFIGURATION COMMANDS Examples ■ If no RIP version is specified for the interface and the global version is RIP-1, the interface inherits RIP-1, and then it can send RIP-1 broadcasts, and receive RIP-1 broadcasts and unicasts. ■ If no RIP version is specified for the interface and the global version is RIP-2, the interface inherits RIP-2, and then it can send RIP-2 multicasts, and receive RIP-2 broadcasts, multicasts and unicasts.
ROUTING POLICY COMMON CONFIGURATION COMMANDS 78 n Routing policy common configuration commands are applicable to both IPv4 and IPv6. apply as-path Syntax apply as-path as-number&<1-10> [ replace ] undo apply as-path View Parameters Routing policy view as-number: Autonomous system number, in the range of 1 to 65535. &<1-10>: Indicates you can enter as-number up to 10 times. replace: Replaces the original AS number.
CHAPTER 78: ROUTING POLICY COMMON CONFIGURATION COMMANDS undo apply comm-list View Routing policy view Parameters comm-list-number: Community list number. The basic community list number ranges from 1 to 99. The advanced community list number ranges from 100 to 199. Description Use the apply comm-list delete command to remove community attributes in BGP routing information specified by the community list. Use the undo apply comm-list command to remove the clause configuration.
no-export: Sets the no-export community attribute for matched BGP routes. Routes with this attribute are not advertised out the autonomous system or confederation, but can be advertised to other sub ASs in the confederation. additive: Adds the specified community attributes to the original community attribute of a matched BGP route. Description Use the apply community command to set the specified community attribute for BGP routes. Use the undo apply community command to remove the apply clause.
CHAPTER 78: ROUTING POLICY COMMON CONFIGURATION COMMANDS system-view [Sysname] route-policy policy1 permit node 10 [Sysname-route-policy] if-match interface serial 2/0 [Sysname-route-policy] apply cost 120 apply cost-type Syntax apply cost-type { external | internal | type-1 | type-2 } undo apply cost-type View Parameters Routing policy view external: IS-IS external route. internal: IS-IS internal route. type-1: Type-1 external route of OSPF. type-2: Type-2 external route of OSPF.
additive: Adds to the original community attribute of a route. Description Use the apply extcommunity command to apply the specified extended community attribute to BGP routes. Use the undo apply extcommunity command to remove the clause configuration. No extended community attribute is set for routing information by default. Examples # Create routing policy policy1 with node 10, matching mode as permit.
CHAPTER 78: ROUTING POLICY COMMON CONFIGURATION COMMANDS apply local-preference Syntax apply local-preference preference undo apply local-preference View Routing policy view Parameters preference: BGP local preference, in the range 0 to 4294967295. Description Use the apply local-preference command to apply the specified local preference to BGP routes. Use the undo apply local-preference command to remove the clause configuration.
system-view [Sysname] route-policy policy1 permit node 10 [Sysname-route-policy] if-match as-path 1 [Sysname-route-policy] apply mpls-label apply origin Syntax apply origin { igp | egp as-number | incomplete } undo apply origin View Parameters Routing policy view igp: Sets the origin of BGP routing information to IGP. egp: Sets the origin of BGP routing information to EGP. as-number: Autonomous system number for EGP routes, in the range of 1 to 65535.
CHAPTER 78: ROUTING POLICY COMMON CONFIGURATION COMMANDS Description Use the apply preference command to set a preference for a routing protocol. Use the undo apply preference command to remove the clause configuration. No preference is set for a routing protocol by default. If you set preferences for routing protocols with the preference command, using the apply preference command will set a new preference for a matched routing protocol.
View Routing policy view Parameters value: Tag value, in the range 0 to 4294967295. Description Use the apply tag command to set a specified tag value for RIP, OSPF or IS-IS routing information. Use the undo apply tag command to remove the clause configuration. No routing tag is set for RIP, OSPF or IS-IS routing information by default.
CHAPTER 78: ROUTING POLICY COMMON CONFIGURATION COMMANDS display ip community-list Syntax View Parameters display ip community-list [ basic-community-list-number | adv-community-list-number ] Any view basic-community-list-number: Basic community list number, in the range of 1 to 99. adv-community-list-number: Advanced community list number, in the range of 100 to 199. Description Use the display ip community-list command to display BGP community list information.
display route-policy Syntax View display route-policy [ route-policy-name ] Any view Parameters route-policy-name: Routing policy name, a string of 1 to 19 characters. Description Use the display route-policy command to display routing policy information. All routing policy information will be displayed if no route-policy-name is specified. Related commands: Examples route-policy. # Display the information of routing policy 1.
CHAPTER 78: ROUTING POLICY COMMON CONFIGURATION COMMANDS This command is one of the if-match clauses of a route policy, used for filtering BGP routing information and specifying match criteria according to the AS path attribute of routing information. Related commands: Examples route-policy, ip as-path acl. # Define as-path-acl 2, allowing routing information containing AS 200 or 300 to pass. Define routing policy test with node 10, and set an if-match clause using the as-path-acl for matching.
Examples # Define community-list 1, allowing routing information with community number 100 or 200 to pass. Then define a routing policy named test, whose node 10 is defined with an if-match clause to reference the community-list for matching.
CHAPTER 78: ROUTING POLICY COMMON CONFIGURATION COMMANDS &<1-16>: Indicates the argument before it can be entered up to 16 times. Description Use the if-match extcommunity command to specify extended community list(s) for matching against the extended community attribute of routing information. Use the undo if-match extcommunity command to remove the match criterion. The match criterion is not configured by default.
if-match mpls-label Syntax if-match mpls-label undo if-match mpls-label View Routing policy view Parameters None Description Use the if-match mpls-label command to specify the MPLS label match criterion. Use the undo if-match mpls-label command to remove the match criterion. The match criterion is not configured by default. Examples # Create a routing policy named policy1 with node 10, matching mode as permit. Match MPLS label of routing updates.
CHAPTER 78: ROUTING POLICY COMMON CONFIGURATION COMMANDS nssa-external-type1or2: OSPF NSSA Type 1 or 2 external routes. Description Use the if-match route-type command to configure a route type match criterion. Use the undo if-match route-type command to remove the match criterion. The match criterion is not configured by default. Examples # Create a routing policy named policy1 with node 10, matching mode as permit. Define an if-match clause to match internal routes.
View Parameters System view as-path-number: AS path ACL number, in the range of 1 to 256. deny: Specifies the matching mode for the AS path ACL as deny. permit: Specifies the matching mode for the AS path ACL as permit. regular-expression: Regular expression of AS path, a string of 1 to 50 characters. BGP routing information contains the AS path attribute field that identifies the autonomous systems through which routing information has passed.
CHAPTER 78: ROUTING POLICY COMMON CONFIGURATION COMMANDS ip community-list adv-comm-list-num { deny | permit } regular-expression undo ip community-list adv-comm-list-num [ regular-expression ] View Parameters System view basic-comm-list-num: Basic community list number, in the range 1 to 99. adv-comm-list-num: Advanced community list number, in the range 100 to 199. regular-expression: Regular expression of advanced community attribute, a string of 1 to 50 characters.
ip extcommunity-list Syntax ip extcommunity-list ext-comm-list-number { deny | permit } { rt route-target }&<1-16> undo ip extcommunity-list ext-comm-list-number View Parameters System view ext-comm-list-number: Extended community list number, in the range 1 to 199. permit: Specifies the matching mode for the extended community list as permit. deny: Specifies the matching mode for the extended community list as deny.
CHAPTER 78: ROUTING POLICY COMMON CONFIGURATION COMMANDS deny: Specifies the matching mode of the routing policy node as deny. If a route satisfies all the if-match clauses of the node, it does not pass the filtering of the node and will not go to the next node. node node-number: Node number, in the range 0 to 65535. The node with a smaller node-number will be tested first when the routing policy is used for filtering routing information.
IPV4 ROUTING POLICY CONFIGURATION COMMANDS 79 apply ip-address next-hop Syntax apply ip-address next-hop ip-address undo apply ip-address next-hop View Routing policy view Parameters ip-address: IP address of the next hop. Description Use the apply ip-address next-hop command to set a next hop for IPv4 routing information. Use the undo apply ip-address next-hop command to remove the clause configuration. No next hop address is set for IPv4 routing information by default.
CHAPTER 79: IPV4 ROUTING POLICY CONFIGURATION COMMANDS Description Related commands: Examples Use the display ip ip-prefix command to display the statistics of an IPv4 address prefix list. If no ip-prefix-name is specified, statistics for all IPv4 address prefix lists will be displayed. ip ip-prefix. # Display the statistics of IPv4 prefix list abc. display ip ip-prefix abc Prefix-list abc Permitted 0 Denied 0 index: 10 permit 1.0.0.
if-match ip Syntax if-match ip { next-hop | route-source } { acl acl-number | ip-prefix ip-prefix-name } undo if-match ip { next-hop | route-source } [ acl | ip-prefix ] View Parameters Routing policy view next-hop: Matches next hop. route-source: Matches source address. acl acl-number: Matches an ACL with a number from 2000 to 2999. ip-prefix ip-prefix-name: Matches an IP prefix list with a name being a string of 1 to 19 characters.
CHAPTER 79: IPV4 ROUTING POLICY CONFIGURATION COMMANDS No IP prefix list based match criterion is configured by default. Related commands: if-match interface, if-match ip next-hop, if-match cost, if-match tag, route-policy, apply ip-address next-hop, apply cost, apply local-preference, apply origin, apply tag. Examples # Create routing policy policy2 with node 10, matching mode as permit. Define an if-match clause to permit routes whose destination addresses match IP prefix list p1.
Use the undo ip ip-prefix command to remove an IPv4 prefix list or an item. No IPv4 prefix list is configured by default. An IPv4 prefix list is used to filter IPv4 addresses. It may have multiple items, each of which specifies a range of IPv4 prefix. The filtering relation among items is logic OR, namely, passing any item means the IPv4 prefix list is passed. If no item is passed, the IP prefix list cannot be passed.
CHAPTER 79: IPV4 ROUTING POLICY CONFIGURATION COMMANDS
IPV6 ROUTING POLICY CONFIGURATION COMMANDS 80 apply ipv6 next-hop Syntax apply ipv6 next-hop ipv6-address undo apply ipv6 next-hop View Routing policy view Parameters ipv6-address: Next hop IPv6 address. Description Use the apply ipv6 next-hop command to apply a next hop to IPv6 routes. Use the undo apply ipv6 next-hop command to remove the clause configuration. No next hop address is set for IPv6 routing information by default.
CHAPTER 80: IPV6 ROUTING POLICY CONFIGURATION COMMANDS Examples # Display the statistics of all the IPv6 prefix lists.
system-view [Sysname] route-policy policy1 permit node 10 [Sysname-route-policy] if-match ipv6 next-hop prefix-list p1 ip ipv6-prefix Syntax ip ipv6-prefix ipv6-prefix-name [ index index-number ] { deny | permit } ipv6-address prefix-length [ greater-equal min-prefix-length ] [ less-equal max-prefix-length ] undo ip ipv6-prefix ipv6-prefix-name [ index index-number ] View Parameters System view ipv6-prefix-name: IPv6 prefix list name, a string of 1 to 19 characters, for uniquely specifyi
CHAPTER 80: IPV6 ROUTING POLICY CONFIGURATION COMMANDS The IPv6 address prefix list is used to filter IPv6 addresses. It may have multiple items, and each of them specifies a range of IPv6 prefix. The filtering relation among items is logic OR, namely, a route passing an item will pass the prefix list. The IPv6 prefix range is determined by prefix-length and [ min-prefix-length, max-prefix-length ].
STATIC ROUTING CONFIGURATION COMMANDS 81 delete static-routes all Syntax View delete [ vpn-instance vpn-instance-name ] static-routes all System view Parameters vpn-instance-name: Name of a VPN instance, a string of 1 to 31 case-sensitive characters. Description Use the delete static-routes all command to delete all static routes. When you use this command to delete static routes, the system will prompt you to confirm the operation before deleting all the static routes.
CHAPTER 81: STATIC ROUTING CONFIGURATION COMMANDS undo ip route-static vpn-instance s-vpn-instance-name&<1-6> dest-address { mask | mask-length } [ gateway-address [ public ] | interface-type interface-number [ gateway-address ] | vpn-instance d-vpn-instance-name gateway-address ] [ preference preference-value ] View Parameters System view vpn-instance s-vpn-instance-name&<1-6>: Specifies the VPN instance name, which is a string of 1 to 31 case-sensitive characters.
When configuring a unicast static route, note that: 1 If the destination IP address and the mask are both 0.0.0.0, the configured route is a default route. If routing table searching fails, the router will use the default route for packet forwarding. 2 Different route management policies can be implemented for different route preference configurations.
CHAPTER 81: STATIC ROUTING CONFIGURATION COMMANDS Examples # Configure a static route, whose destination address is 1.1.1.1/24, next hop address is 2.2.2.2, tag value is 45, and description information is “for internet & intranet”. system-view [Sysname] ip route-static 1.1.1.1 24 2.2.2.2 tag 45 description for internet & intranet # Configure a static route for a VPN instance named vpn1: the destination address is 1.1.1.1/16 and the next hop address is 1.1.1.
IPV6 BGP CONFIGURATION COMMANDS 82 balance (IPv6 address family view) Syntax balance number undo balance View IPv6 address family view Parameters number: Number of BGP routes participating in load balancing, in the range 1 to 8. When it is set to 1, no load balancing is available. Description Use the balance command to configure the number of routes participating in IPv6 BGP load balancing. Use the undo balance command to restore the default. The feature is not available by default.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS Description Use the bestroute as-path-neglect command to configure the IPv6 BGP router to not evaluate the AS_PATH during best route selection. Use the undo bestroute as-path-neglect command to configure the IPv6 BGP router to use the AS_PATH during best route selection. By default, the router takes AS_PATH as a factor when selecting the best route. Examples # Ignore AS_PATH in route selection.
Description Use the bestroute med-confederation command to enable the comparison of the MED for paths from confederation peers for best route selection. Use the undo bestroute med-confederation command to disable the comparison. By default, this comparison is not enabled. With this feature enabled, the system can only compare the MED for paths from peers within the confederation. Paths from external ASs are advertised throughout the confederation without MED comparison.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS dampening (IPv6 address family view) Syntax dampening [ half-life-reachable half-life-unreachable reuse suppress ceiling | route-policy route-policy-name ] * undo dampening View Parameters IPv6 address family view half-life-reachable: Specifies the half-life for active routes, in the range 1 to 45 minutes. By default, the value is 15 minutes. half-life-unreachable: Specifies the half-life for active routes, in the range 1 to 45 minutes.
default local-preference(IPv6 address family view) Syntax default local-preference value undo default local-preference View IPv6 address family view Parameters value: Default local preference, in the range 0 to 4294967295. The larger the value is, the higher the preference is. Description Use the default local-preference command to configure the default local preference. Use the undo default local-preference command to restore the default value. By default, the default local preference is 100.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS value. In the case that all other conditions are the same, the system first selects the route with the smaller MED value as the best route for the autonomous system. Examples # Devices A and B belong to AS100 and device C belongs to AS200. C is the peer of A and B. Configure the MED of A as 25 to make C select the path from B.
Examples # Display the information of the IPv6 peer group aaa.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS Description Examples Use the display bgp ipv6 network command to display IPv6 routes advertised with the network command. # Display IPv6 routes advertised with the network command. display bgp ipv6 network BGP Local Router ID is 1.1.1.2. Local AS Number is 200.
Table 289 Description on the fields of the display bgp ipv6 paths command Field Description Path AS_PATH attribute of the path, recording the ASs it has passed, for avoiding routing loops Origin Origin attribute of the route, which can take on one of the following values: i Indicates the route is interior to the AS. Summary routes and routes defined using the network command are considered IGP routes. e Indicates that a route is learned from the exterior gateway protocol (EGP).
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS Table 290 Description on the fields of the display bgp ipv6 peer command Field Description Peer IPv6 address of the peer V Peer BGP version AS AS number MsgRcvd Messages received MsgSent Messages sent OutQ Messages to be sent PrefRcv Number of prefixes received Up/Down The lasting time of a session/the lasting time of present state (when no session is established) State Peer state display bgp ipv6 routing-table Syntax View Parameters di
Table 291 Description on the fields of the display bgp ipv6 routing-table command Field Description Status codes Status codes: * - valid > - best d - damped h - history i - internal (IGP) s - summary suppressed (suppressed) S - Stale Origin i - IGP (originated in the AS) e - EGP (learned through EGP) ? - incomplete (learned by other means) Network Destination network address PrefixLen Prefix length NextHop Next Hop MED MULTI_EXIT_DISC attribute LocPrf Local preference value Path AS_PA
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS Examples # Display routes filtered through the AS path ACL 20. display bgp ipv6 routing-table as-path-acl 20 BGP Local router ID is 30.30.30.
display bgp ipv6 routing-table community-list Syntax View Parameters display bgp ipv6 routing-table community-list { basic-community-list-number [ whole-match ] | adv-community-list-number }&<1-16> Any view basic-community-list-number: Specifies a basic community-list number, in the range 1 to 99. adv-community-list-number: Specifies an advanced community-list number, in the range 100 to 199. whole-match: Displays routes exactly matching the specified basic-community-list-number.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS BGP Local router ID is 1.1.1.
View Any view Parameters None Description Use the display bgp ipv6 routing-table different-origin-as command to display IPv6 BGP routes originating from different autonomous systems. Examples # Display IPv6 BGP routes from different ASs. display bgp ipv6 routing-table different-origin-as BGP Local router ID is 10.1.4.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS display bgp ipv6 routing-table flap-info BGP Local router ID is 1.1.1.
display bgp ipv6 routing-table peer Syntax View Parameters display bgp ipv6 routing-table peer { ipv4-address | ipv6-address } { advertised-routes | received-routes } [ network-address prefix-length | statistic ] Any view ipv4-address: Specifies the IPv4 peer to be displayed. ipv6-address: Specifies the IPv6 peer to be displayed. advertised-routes: Routing information advertised to the specified peer. received-routes: Routing information received from the specified peer.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS Parameters as-regular-expression: AS regular expression. Description Use the display bgp ipv6 routing-table regular-expression command to display the routes permitted by the specified AS regular expression. Examples # Display routing information matching the specified AS regular expression. display bgp ipv6 routing-table regular-expression ^100 BGP Local router ID is 20.20.20.
ipv6-prefix-name: Specifies the name of an IPv6 prefix list used to match against the destination address field of routing information. The name is a string of 1 to 19 characters. protocol: Filters routes redistributed from the routing protocol. It can be direct, isisv6, ospfv3, ripng, and static at present. If no protocol is specified, all routes will be filtered when advertised. process-id: Process ID of the routing protocol, in the range 1 to 65535.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS Examples # Reference ACL6 2001 to filter all inbound routes. system-view [Sysname] bgp 100 [Sysname-bgp] ipv6-family [Sysname-bgp-af-ipv6] filter-policy 2001 import group (IPv6 address family view) Syntax group ipv6-group-name [ internal | external ] undo group ipv6-group-name View Parameters IPv6 address family view ipv6-group-name: Name of an IPv6 peer group, a string of 1 to 47 characters. internal: Creates an IBGP peer group.
med-value: Applies the MED value to redistributed routes. The value is in the range 0 to 4294967295. If not specified, the cost of the redistributed route is used as its MED in the IPv6 BGP routing domain. route-policy-name: Name of a routing policy used to filter redistributed routes, a string of 1 to 19 characters. Description Use the import-route command to redistribute routes from another routing protocol. Use the undo import-route command to remove the configuration.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS View Parameters IPv6 address family view ipv6-address: IPv6 address. prefix-length: Prefix length of the address, in the range 0 to 128. short-cut: If the keyword is specified for an EBGP route, the route will use the local routing management value rather than that of EBGP routes, so the preference of the route is reduced. route-policy-name: Name of a routing policy, a string of 1 to 19 characters.
Use the undo peer advertise-community command to remove the configuration. By default, no community attribute is advertised to any peer group/peer. Examples # Advertise the community attribute to the peer 1:2::3:4.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS ipv4-address: IPv4 address of a peer. ipv6-address: IPv6 address of a peer. number: Specifies the repeating times of the local AS number, in the range 1 to 10. The default number is 1. Description Use the peer allow-as-loop command to configure IPv6 BGP to allow the local AS number to exist in the AS_PATH attribute of routes from a peer/peer group, and to configure the repeating times of the local AS number.
system-view [Sysname] bgp 100 [Sysname-bgp] ipv6-family [Sysname-bgp-af-ipv6] group test external [Sysname-bgp-af-ipv6] peer test as-number 100 peer as-path-acl (IPv6 address family view) Syntax peer { group-name | ipv4-address | ipv6-address } as-path-acl as-path-acl-number { import | export } undo peer { group-name | ipv4-address | ipv6-address } as-path-acl as-path-acl-number { import | export } View Parameters IPv6 address family view group-name: Name of an IPv4 or IPv6 peer group, a
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS Parameters ipv6-group-name: Name of a peer group, a string of 1 to 47 characters. ipv6-address: IPv6 address of a peer. Description Use the peer capability-advertise route-refresh command to enable IPv6 BGP route-refresh. Use the undo peer capability-advertise route-refresh command to disable the function. By default, route-refresh is enabled. Examples # Disable route-refresh of peer 1:2::3:4.
system-view [Sysname] bgp 100 [Sysname-bgp] ipv6-family [Sysname-bgp-af-ipv6] peer 1:2::3:4 connect-interface loopback 0 peer default-route-advertise Syntax peer { group-name | ipv4-address | ipv6-address } default-route-advertise [ route-policy route-policy-name ] undo peer { group-name | ipv4-address | ipv6-address } default-route-advertise View Parameters IPv6 address family view group-name: Name of an IPv4 or IPv6 peer group, a string of 1 to 47 characters.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS ipv6-address: IPv6 address of a peer. description-text: Description information for the peer/peer group, a string of 1 to 79 characters. Description Use the peer description command to configure the description information for a peer/peer group. Use the undo peer description command to remove the description information of a peer/peer group. By default, no description information is configured for a peer (group).
system-view [Sysname] bgp 100 [Sysname-bgp] ipv6-family [Sysname-bgp-af-ipv6] group test external [Sysname-bgp-af-ipv6] peer test ebgp-max-hop peer enable (IPv6 address family view) Syntax peer { group-name | ipv4-address } enable undo peer { group-name | ipv4-address } enable View Parameters IPv6 address family view group-name: Name of an IPv4 peer group, a string of 1 to 47 characters. The IPv4 peer group should be created beforehand. ipv4-address: IPv4 address of a peer.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS Description Use the peer fake-as command to configure a fake local AS number for a peer or peer group. Use the undo peer fake-as command to remove the configuration. By default, no fake local AS number is configured for a peer or peer group. Examples # Configure a fake AS number of 200 for the peer group test.
peer group (IPv6 address family view) Syntax peer { ipv4-address | ipv6-address } group group-name [ as-number as-number ] undo peer ipv6-address group group-name View Parameters IPv6 address family view group-name: Name of an IPv4 or IPv6 peer group, a string of 1 to 47 characters. ipv4-address: IPv4 address of a peer. ipv6-address: IPv6 address of a peer. as-number: Specifies the AS number of the peer/peer group, in the range 1 to 65535.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS After the peer ignore command is executed, the system terminates the active session(s) with the specified peer or peer group and clears all the related routing information. For a peer group, this means all the sessions with the peer group will be tore down. Examples # Terminate the session with peer 1:2::3:4.
peer keep-all-routes (IPv6 address family view) Syntax peer { group-name | ipv4-address | ipv6-address } keep-all-routes undo peer { group-name | ipv4-address | ipv6-address } keep-all-routes View Parameters IPv6 address family view group-name: Name of an IPv4 or IPv6 peer group, a string of 1 to 47 characters. ipv4-address: IPv4 address of a peer. ipv6-address: IPv6 address of a peer.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS system-view [Sysname] bgp 100 [Sysname-bgp] ipv6-family [Sysname-bgp-af-ipv6] peer 2.2.2.2 label-route-capability peer log-change (IPv6 address family view) Syntax peer { ipv6-group-name | ipv6-address } log-change undo peer { ipv6-group-name | ipv6-address } log-change View Parameters IPv6 address family view ipv6-group-name: Name of a peer group, a string of 1 to 47 characters. ipv6-address: IPv6 address of a peer.
By default, the system sets the next hop of routes advertised to an EBGP peer/peer group to the local router, but does not set for routes outgoing to an IBGP peer/peer group. Examples # Set the next hop of routes advertised to EBGP peer group test to the router itself.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS system-view [Sysname] bgp 100 [Sysname-bgp] ipv6-family [Sysname-bgp-af-ipv6] peer 1:2::3:4 preferred-value 50 peer public-as-only (IPv6 address family view) Syntax peer { ipv6-group-name | ipv6-address } public-as-only undo peer { ipv6-group-name | ipv6-address } public-as-only View Parameters IPv6 address family view ipv6-group-name: Name of a peer group, a string of 1 to 47 characters. ipv6-address: IPv6 address of a peer.
Description Use the peer reflect-client command to configure the router as a route reflector and specify a peer/peer group as a client. Use the undo peer reflect-client command to remove the configuration. By default, neither route reflector nor client is configured. Related commands: Examples reflect between-clients (IPv6 address family view) and reflector cluster-id (IPv6 address family view). # Configure the local device as a route reflector and specify the peer group test as a client.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS system-view [Sysname] bgp 100 [Sysname-bgp] ipv6-family [Sysname-bgp-af-ipv6] peer 1:2::3:4 route-limit 10000 peer route-policy (IPv6 address family view) Syntax peer { group-name | ipv4-address | ipv6-address } route-policy route-policy-name { import | export } undo peer { group-name | ipv4-address | ipv6-address } route-policy route-policy-name { import | export } View Parameters IPv6 address family view group-name: Name of an IPv4 or IPv6 p
undo peer { ipv6-group-name | ipv6-address } route-update-interval View Parameters IPv6 address family view ipv6-group-name: Name of a peer group, a string of 1 to 47 characters. ipv6-address: IPv6 address of a peer. seconds: Specifies the minimum interval for sending the same update to a peer (group) from 5 to 600 seconds. Description Use the peer route-update-interval command to specify the interval for sending the same update to a peer/peer group.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS [Sysname-bgp] ipv6-family [Sysname-bgp-af-ipv6] peer 1:2::3:4 substitute-as peer timer (IPv6 address family view) Syntax peer { ipv6-group-name | ipv6-address } timer keepalive keepalive hold holdtime undo peer { ipv6-group-name | ipv6-address } timer View Parameters IPv6 address family view ipv6-group-name: Name of a peer group, a string of 1 to 47 characters. ipv6-address: IPv6 address of a peer.
View Parameters IPv6 address family view external-preference: Preference of EBGP route learned from an EBGP peer, in the range 1 to 255. internal-preference: Preference of IBGP route learned from an IBGP peer, in the range 1 to 255. local-preference: Preference of IPv6 BGP local route, in the range 1 to 255. route-policy-name: Routing policy name, a string of 1 to 19 characters. The routing policy can set a preference for routes passing it. To the routes filtered out, the default value applies.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS Related commands: Examples reflector cluster-id (IPv6 address family view) and peer reflect-client (IPv6 address family view). # Enable route reflection between clients.
View Parameters User view ipv4-address: Soft-resets the connection with an IPv4 BGP peer. ipv6-address: Soft-resets the connection with an IPv6 BGP peer. all: Soft-resets all IPv6 BGP connections. external: Soft-resets EBGP connections. group ipv6-group-name: Soft-resets connections with a peer group. The name of the peer group is a string of 1 to 47 characters. internal: Soft-resets IBGP connections. export: Performs soft reset in outbound direction. import: Performs soft reset in inbound direction.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS internal: Resets all the IBGP connections. Description Examples Use the reset bgp ipv6 command to reset specified IPv4/IPv6 BGP connections. # Reset all the IPv6 BGP connections. reset bgp ipv6 all reset bgp ipv6 dampening Syntax View Parameters reset bgp ipv6 dampening [ ipv6-address prefix-length ] User view ipv6-address: IPv6 address prefix-length: Prefix length of the address, in the range 0 to 128.
Examples # Clear the flap statistics of the routes matching AS path ACL 10. [Sysname] [Sysname] system-view ip as-path-acl 10 permit ^100.*200$ quit reset bgp ipv6 flap-info as-path-acl 10 router-id Syntax router-id router-id undo router-id View BGP view Parameters router-id: Router ID in IP address format. Description Use the router-id command to specify a router ID for the router. Use the undo router-id command to remove a router ID.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS Description Use the synchronization command to enable the synchronization between IPv6 BGP and IGP. Use the undo synchronization command to disable the synchronization. The feature is disabled by default. With this feature enabled and when a non-BGP router is responsible for forwarding packets in an AS, IPv6 BGP speakers in the AS cannot advertise routing information to other ASs unless all routers in the AS know the latest routing information.
Related commands: Examples peer timer (IPv6 address family view). # Configure keepalive interval and holdtime interval as 60 and 180 seconds.
CHAPTER 82: IPV6 BGP CONFIGURATION COMMANDS
IPV6 IS-IS CONFIGURATION COMMANDS 83 n IPv6 IS-IS supports all the features of IPv4 IS-IS except that it advertises IPv6 routing information instead. This document describes only IPv6 IS-IS exclusive commands. Refer to “IS-IS Configuration Commands” on page 1037 for other IS-IS configuration commands. display isis route ipv6 Syntax View Parameters display isis route ipv6 [ [ level-1 | level-2 ] | verbose ]* [ process-id ] Any view verbose: Displays detailed IPv6 IS-IS routing information.
CHAPTER 83: IPV6 IS-IS CONFIGURATION COMMANDS Next Hop : Direct Interface: Eth0/1/0 Flags: D-Direct, R-Added to RM, L-Advertised in LSPs, U-Up/Down Bit Set Table 296 Description on the fields of the display isis route ipv6 command Field Description Destination IPv6 destination address prefix PrefixLen Length of the prefix Flag/Flags Flag of routing information status D: Direct route R: The route has been added into the routing table. L: The route has been advertised in an LSP.
Table 297 Description on the fields of the display isis route ipv6 verbose command Field Description Interface Outbound interface ExitIndex Outbound interface index ipv6 default-route-advertise Syntax ipv6 default-route-advertise [ [ level-1 | level-2 | level-1-2 ] | route-policy route-policy-name ]* undo ipv6 default-route-advertise [ route-policy route-policy-name ] View Parameters IS-IS view route-policy-name: Specifies the name of a routing policy with a string of 1 to 19 characters.
CHAPTER 83: IPV6 IS-IS CONFIGURATION COMMANDS ipv6 enable Syntax ipv6 enable undo ipv6 enable View IS-IS view Parameters None Description Use the ipv6 enable command to enable IPv6 for the IPv6 IS-IS process. Use the undo ipv6 enable command to disable IPv6. IPv6 is disabled by default.
Common Configuration Commands” on page 1187 for routing policy information. protocol: Filter routes redistributed from the specified routing protocol before advertisement. The routing protocol can be bgp4+, direct, isisv6, ospfv3, ripng or static at present. If no protocol is specified, routes redistributed from all protocols are filtered before advertisement. process-id: Process ID of the routing protocol, ranging from 1 to 65535.
CHAPTER 83: IPV6 IS-IS CONFIGURATION COMMANDS ipv6-prefix-name: Name of an IPv6 prefix list used to filter incoming routes, a string of 1 to 19 characters. route-policy-name: Name of a routing policy used to filter incoming routes, a string of 1 to 19 characters. Description Use the ipv6 filter-policy import command to configure IPv6 IS-IS to filter the received routes. Use the undo ipv6 filter-policy import command to disable the filtering. The filtering is disabled by default.
tag: Specifies an administrative tag number for the redistributed routes, in the range of 1 to 4294967295. allow-ibgp: Allows redistributing IBGP routes. This keyword is optional when the protocol is bgp4+. Description Use the ipv6 import-route command to enable IPv6 IS-IS to redistribute routes from another routing protocol. Use the undo ipv6 import-route command to disable route redistribution. Route redistribution is disabled by default.
CHAPTER 83: IPV6 IS-IS CONFIGURATION COMMANDS Description Use the ipv6 import-route isisv6 level-2 into level-1 to enable IPv6 IS-IS route leaking from Level-2 to Level-1. Use the undo ipv6 import-route isisv6 level-2 into level-1 command to disable the leaking. The leaking is disabled by default. The route leaking feature enables a Level-1-2 router to advertise routes destined to the Level-2 area and other Level-1 areas to the Level-1 and Level-1-2 routers in the local area.
route-policy-name: Name of a routing policy, a string of 1 to 19 characters. Description Use the ipv6 preference command to configure the preference for IPv6 IS-IS protocol. Use the undo ipv6 preference command to configure the default preference for IPv6 IS-IS protocol. The default preference is 15. When a router runs multiple dynamic routing protocols at the same time, the system will assign a preference to each routing protocol.
CHAPTER 83: IPV6 IS-IS CONFIGURATION COMMANDS Use the undo ipv6 summary command to remove the summary route. Route summarization is disabled by default. Configuring summary routes can reduce the size of the route table, LSPs and LSDB. Routes to be summarized can be IS-IS routes or redistributed routes. The cost of a summary route is the smallest cost among all summarized routes. Examples # Configure a summary route of 2002::/32.
IPV6 OSPFV3 CONFIGURATION COMMANDS 84 abr-summary (OSPFv3 area view) Syntax abr-summary ipv6-address prefix-length [ not-advertise ] undo abr-summary ipv6-address prefix-length View Parameters OSPFv3 area view ipv6-address: Destination IPv6 address of the summary route. prefix-length: Prefix length of the destination IPv6 address, in the range 0 to 128. This argument specifies the number of consecutive 1s of the prefix, which defines the network ID.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS View OSPFv3 view Parameters area-id: ID of an area, a decimal integer (in the range of 0 to 4294967295 and changed to IPv4 address format by the system) or an IPv4 address. Description Use the area command to enter OSPFv3 area view. n Examples The undo form of the command is not available. An area is removed automatically if there is no configuration and no interface is up in the area. # Enter OSPFv3 Area 0 view.
undo default-cost View OSPFv3 area view Parameters value: Specifies a cost for the default route advertised to the stub area, in the range of 0 to 65535. The default is 1. Description Use the default-cost command to specify the cost of the default route to be advertised to the stub area. Use the undo-default-cost command to restore the default value. Use of this command is only available on the ABR that is connected to a stub area.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS display ospfv3 Syntax View display ospfv3 [ process-id ] Any view Parameters process-id: Specifies the ID of an OSPFv3 process, ranging from 1 to 65535. Description Use the display ospfv3 command to display OSPFv3 brief information. If no process ID is specified, OSPFv3 brief information about all processes will be displayed. Examples # Display brief information about all OSPFv3 processes.
Table 298 Description on the fields of the display isofv3 command Field Description These LSAs’ checksum Sum Sum of all LSAs’ checksum Number of Unknown LSA Number of unknown LSAs display ospfv3 interface Syntax View Parameters display ospfv3 interface [ interface-type interface-number | statistic ] Any view interface-type interface-number: Interface type and interface number. statistic: Displays the interface statistics.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS Table 299 Description on the fields of the display ospfv3 interface command Field Description Timer interval configured, Hello: 10, Dead: 40, Wait: 40, Retransmit: 5 Time intervals in seconds configured on the interface, Hello: 10, Dead: 40, Wait: 40, Retransmit: 5 Hello due in 00:00:02 Hello packet will be sent in 2 seconds Neighbor Count Number of Neighbors on the interface Adjacent neighbor count Number of Adjacencies on the interface displa
---------------------------------------------------------------Link State ID Origin Router Age SeqNum CkSum Link 0.0.0.0 5.5.5.5 0263 0x80000002 0x823f 1 0.0.0.0 6.6.6.6 0264 0x80000003 0x625a 1 Network-LSA (Area 0.0.0.0) ---------------------------------------------------------------Link State ID Origin Router Age SeqNum CkSum 0.15.0.9 6.6.6.6 0264 0x80000001 0x3498 Intra-Area-Prefix-LSA (Area 0.0.0.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS Table 301 Description on the fields of the display ospfv3 lsdb command Field Description Originating Router Originating Router LS Seq Number LSA Sequence Number Checksum LSA Checksum Length LSA Length Priority Router Priority Options Options Link-Local Address Link-Local Address Number of Prefixes Number of Prefixes Prefix Address prefix Prefix Options Prefix options display ospfv3 lsdb statistic Syntax View display ospfv3 lsdb s
display ospfv3 next-hop Syntax View display ospfv3 [ process-id ] next-hop Any view Parameters process-id: Specifies ID of an OSPFv3 process, ranging from 1 to 65535. Description Use the display ospfv3 next-hop command to display OSPFv3 next hop information. If no process is specified, next hop information of all OSPFv3 processes is displayed. Examples # Display OSPFv3 next hop information. display ospfv3 next-hop Neighbor-Id 1.1.1.1 OSPFv3 Router with ID (2.2.2.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS Examples ■ If no area-id is specified, the neighbor information of all areas is displayed. ■ If no process-id is specified, the information of all processes is displayed. ■ If no interface or neighbor Router-ID is specified, the neighbor information of all interfaces is displayed. # Display the neighbor information of OSPFv3 process 1 on an interface. display ospfv3 1 peer serial 2/0 OSPFv3 Process (1) OSPFv3 Area (0.0.0.
display ospfv3 peer statistic Syntax View display ospfv3 peer statistic Any view Parameters None Description Use the display ospfv3 peer statistic command to display information about all OSPFv3 neighbors on the router, that is, numbers of neighbors in different states. Examples # Display information about all OSPFv3 neighbors. display ospfv3 peer statistic OSPFv3 Router with ID (1.1.1.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS Description Use the display ospfv3 request-list command to display OSPFv3 link state request list. If no process is specified, link state request list information of all OSPFv3 processes is displayed. Examples # Display the information of OSPFv3 link state request list. display ospfv3 request-list OSPFv3 Router with ID (1.1.1.1) (Process 1) Interface Eth1/0 Area-ID 0.0.0.
statistics: Displays link state retransmission list statistics. Description Use the display ospfv3 retrans-list command to display OSPFv3 link state retransmission list. If no process is specified, link state retransmission list information of all OSPFv3 processes is displayed. Examples # Display the information of OSPFv3 link state retransmission list. display ospfv3 retrans-list OSPFv3 Router with ID (2.2.2.2) (Process 1) Interface Eth1/0 Area-ID 0.0.0.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS Parameters process-id: Specifies the ID of an OSPFv3 process, ranging from 1 to 65535. ipv6-address: IPv6 address prefix. prefix-length: Prefix length, in the range 0 to 128. abr-routes: Specifies to display routes to ABR. asbr-routes: Specifies to display routes to ASBR. all: Specifies to display all routes. statistics: Specifies to display the statistics of OSPFv3 routing table.
display ospfv3 statistic Syntax View display ospfv3 statistic Any view Parameters None Description Use the display ospfv3 statistic command to display outbound/inbound OSPFv3 packet statistics on associated interface(s). Examples # Display outbound/inbound OSPFv3 packet statistics on associated interfaces.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS area-id: The ID of an area, a decimal integer (in the range of 0 to 4294967295) that is translated into IPv4 address format by the system or an IPv4 address. Description Examples Use the display ospfv3 topology command to display OSPFv3 topology information. If no process is specified, topology information of all OSPFv3 processes is displayed. # Display OSPFv3 area 1 topology information.
Hello due in 00:00:02 Adjacency state :Full Table 315 Description on the fields of the display ospfv3 vlink command Field Description Virtual Link VLINK1 to router 1.1.1.1 is up The virtual link VLINK1 to router 1.1.1.1 is up Transit area 0.0.0.1 via interface Serial2/0 Interface Serial 2/0 in transit area 0.0.0.1.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS Use the undo filter-policy export command to remove the configuration. If no protocol is specified, all redistributed routes will be filtered. By default, IPv6 OSPFv3 does not filter redistributed routes. n Examples Using the filter-policy export command filters only routes redistributed by the import-route command.
import-route(OSPFv3 view) Syntax import-route { isisv6 process-id | ospfv3 process-id | ripng process-id | bgp4+ [ allow-ibgp ] | direct | static } [ cost value | type type | route-policy route-policy-name ]* undo import-route { isis process-id | ospfv3 process-id | ripng process-id | bgp4+ | direct | static } View Parameters OSPFv3 view isisv6 process-id: Specifies a process ID of ISIS to redistribute ISIS routes with the process ID, in the range 1 to 65535.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS # Configure OSPFv3 process 100 to redistribute the routes found by OSPFv3 process 160. system-view [Sysname] ospfv3 100 [Sysname-ospfv3-100] import-route ospfv3 160 log-peer-change Syntax log-peer-change undo log-peer-change View OSPFv3 view Parameters None Description Use the log-peer-change command to enable the logging on neighbor state changes. Use the undo maximum load-balancing command to disable the logging.
system-view [Sysname] ospfv3 1 [Sysname-ospfv3-1] maximum load-balancing 6 ospfv3 Syntax ospfv3 [ process-id ] undo ospfv3 [ process-id ] View System view Parameters process-id: Specifies the ID of an OSPFv3 process, ranging from 1 to 65535. The process ID defaults to 1. Description Use the ospfv3 command to enable an OSPFv3 process and enter OSPFv3 view. Use the undo ospfv3 command to disable an OSPFv3 process. The system runs no OSPFv3 process by default.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS Description Use the ospfv3 area command to enable an OSPFv3 process on the interface and specify the area for the process. Use the undo ospfv3 area command to disable an OSPFv3 process. OSPFv3 is not enabled on an interface by default. Examples # Enable OSPFv3 process 1 on an interface that belongs to instance 1 and specify area 1 for the process.
Parameters priority: DR priority, in the range 0 to 255. instance-id: ID of the instance an interface belongs to, in the range 0 to 255, which defaults to 0. Description Use the ospfv3 dr-priority command to set the DR priority for an interface of an instance. Use the undo ospfv3 dr-priority command to restore the default value.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS View Parameters Interface view seconds: Dead time in seconds, ranging from 1 to 65535, instance-id: The instance ID of an interface, in the range of 0 to 255, which defaults to 0. Description Use the ospfv3 timer dead command to configure the OSPFv3 neighbor dead time for an interface that belongs to a specified instance. Use the undo ospfv3 timer dead command to restore the default.
Related commands: Examples ospfv3 timer dead. # Configure the hello interval as 20 seconds for an interface of instance 1.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS Parameters seconds: Transmission delay in seconds, ranging from 1 to 3600. The default is 1. instance-id: The instance ID of an interface, in the range of 0 to 255, with the default as 0. Description Use the ospfv3 trans-delay command to configure the transmission delay for an interface with an instance ID. Use the undo ospfv3 trans-delay command to restore the default. The transmission delay defaults to 1s.
system-view [Sysname] OSPFv3 [Sysname-OSPFv3-1] preference 150 router-id Syntax router-id router-id undo router-id View OSPFv3 view Parameters router-id: A 32-bit router ID, in IPv4 address format. Description Use the router-id command to configure the OSPFv3 router ID. Use the undo router-id command to remove a configured router ID. Router ID is the unique identification of an OSPF process in an autonomous system. An OSPFv3 process cannot run without a Router ID.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS Use the undo silent-interface command to restore the default. An interface is able to send OSPFv3 packets by default. Multiple processes can disable the same interface from sending OSPFv3 packets, but use of the silent-interface command takes effect only on interfaces enabled with the current process. Examples # Disable an interface from sending OSPFv3 packets in OSPFv3 processes 100 and 200.
stub(OSPFv3 area view) Syntax stub [ no-summary ] undo stub View OSPFv3 area view Parameters no-summary: This argument is only applicable to the ABR of a stub area. With it configured, the ABR advertises only a default route in a Summary-LSA to the stub area (such an area is called a totally stub area). Description Use the stub command to configure an area as a stub area. Use the undo stub command to remove the configuration. By default, an area is not configured as a stub area.
CHAPTER 84: IPV6 OSPFV3 CONFIGURATION COMMANDS dead seconds: Specifies the neighbor dead time in seconds, ranging from 1 to 32768, with the default as 40. This value must equal to the dead seconds configured on the virtual link peer router, and at least four times the value of hello seconds. instance Instance-id: The instance ID of an virtual link, in the range of 0 to 255, with the default as 0. Description Use the vlink-peer command to create and configure a virtual link.
IPV6 RIPNG CONFIGURATION COMMANDS 85 checkzero Syntax checkzero undo checkzero View RIPng view Parameters None Description Use the checkzero command to enable the zero field check on RIPng packets. Use the undo checkzero command to disable the zero field check. The zero field check is enabled by default. Some fields in RIPng packet headers must be zero. These fields are called zero fields. You can enable the zero field check on RIPng packet headers.
CHAPTER 85: IPV6 RIPNG CONFIGURATION COMMANDS By default, the default metric of redistributed routes is 0. The specified default metric applies to routes redistributed by the import-route command that has no metric specified. Related commands: Examples import-route. # Set the default metric of redistributed routes to 2.
Table 316 Description on the fields of the display ripng command Field Description Number of periodic updates sent Number of periodic updates sent Number of trigger updates sent Number of triggered updates sent display ripng database Syntax View display ripng process-id database Any view Parameters process-id: RIPng process number, in the range of 1 to 65535.
CHAPTER 85: IPV6 RIPNG CONFIGURATION COMMANDS display ripng interface Syntax View Parameters display ripng process-id interface [ interface-type interface-number ] Any view process-id: RIPng process number, in the range of 1 to 65535. interface-type interface-number: Specified an interface. Description Use the display ripng interface command to display the interface information of the RIPng process.
display ripng route Syntax View display ripng process-id route Any view Parameters process-id: RIPng process number, in the range of 1 to 65535. Description Use the display ripng route command to display all RIPng routes and timers associated to each route of a RIPng process. Examples # Display the routing information of RIPng process 100.
CHAPTER 85: IPV6 RIPNG CONFIGURATION COMMANDS filter-policy export Syntax filter-policy { acl6-number | ipv6-prefix ipv6-prefix-name } export [ protocol [ process-id ] ] undo filter-policy export [ protocol [ process-id ] ] View Parameters RIPng view acl6-number: Specifies the number of an ACL to filter advertised routing information, in the range of 2000 to 3999.
ipv6-prefix ipv6-prefix-name: Specifies the name of an IPv6 Prefix list to filter incoming routes, in the range 1 to 19 characters. Description Use the filter-policy import command to filter incoming routing information. Only routes which match the filtering policy can be received. Use the undo filter-policy import command to disable incoming route filtering. By default, RIPng does not filter incoming routing information.
CHAPTER 85: IPV6 RIPNG CONFIGURATION COMMANDS Related commands: Examples ■ You can configure a routing policy to redistribute only needed routes. ■ You can specify a cost for redistributed routes using keyword cost. default cost on page 1280. # Redistribute IPv6-IS-IS routes (process 7) and specify the metric as 7.
preference: RIPng route priority, in the range of 1 to 255. Description Use the preference command to specify the RIPng route priority. Use the undo preference route-policy command to restore the default. By default, the priority of a RIPng route is 100.
CHAPTER 85: IPV6 RIPNG CONFIGURATION COMMANDS [Sysname] undo ripng 100 ripng default-route Syntax ripng default-route { only | originate } [ cost cost ] undo ripng default-route View Parameters Interface view only: Indicates that only the IPv6 default route (::/0) is advertised via the interface. originate: Indicates that the IPv6 default route (::/0) is advertised without suppressing other routes. cost: Metric of the advertised default route, in the range of 1 to 15, with a default value of 1.
Parameters process-id: RIPng process number, in the range of 1 to 65535. Description Use the ripng enable command to enable RIPng on the specified interface. Use the undo ripng enable command to disable RIPng on the specified interface. By default, RIPng is disabled on an interface. Examples # Enable RIPng100 on Ethernet1/0.
CHAPTER 85: IPV6 RIPNG CONFIGURATION COMMANDS Parameters value: Additional metric to advertised routes, in the range of 1 to 16. Description Use the ripng metricout command to configure an additional metric for RIPng routes advertised by an interface. Use the undo rip metricout command to restore the default. The default additional routing metric is 1. Related commands: Examples ripng metricin. # Set the additional metric to 12 for routes advertised by Ethernet1/0.
Description Use the rip split-horizon command to enable the split horizon function. Use the undo rip split-horizon command to disable the split horizon function. By default, the split horizon function is enabled. Note that: n Examples ■ The split horizon function is necessary for preventing routing loops. Therefore, you are not recommended to disable it. ■ In special cases, make sure that it is necessary to disable the split horizon function before doing so.
CHAPTER 85: IPV6 RIPNG CONFIGURATION COMMANDS Examples # Assign an IPv6 address with the 64-bit prefix to Ethernet1/0 and configure a summary with the 35-bit prefix.
garbage-collect timer expires, the route will completely be deleted from the routing table. Note that: Examples ■ You are not recommended to change the default values of these timers under normal circumstances. ■ The lengths of these timers must be kept consistent on all routers and access servers in the network # Configure the update, timeout, suppress, and garbage-collect timers as 5s, 15s, 15s and 30s.
CHAPTER 85: IPV6 RIPNG CONFIGURATION COMMANDS
IPV6 STATIC ROUTING CONFIGURATION COMMANDS 86 delete ipv6 static-routes all Syntax View delete ipv6 static-routes all System view Parameters None Description Use the delete ipv6 static-routes all command to delete all static routes including the default route. When using this command, you will be prompted whether to continue the deletion and only after you confirm the deletion will the static routes be deleted. Related commands: Examples display ipv6 routing-table on page 942 and ipv6 route-static.
CHAPTER 86: IPV6 STATIC ROUTING CONFIGURATION COMMANDS undo ipv6 route-static ipv6-address prefix-length [ interface-type interface-number | nexthop-address ] [ preference preference-value ] View Parameters System view ipv6-address prefix-length: IPv6 address and prefix length. interface-type interface-number: Interface type and interface number of the output interface. nexthop-address: Next hop IPv6 address. preference-value: Route preference value, in the range of 1 to 255. The default is 60.
MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS 87 display multicast boundary Syntax View Parameter display multicast [ vpn-instance vpn-instance-name | all-instance ] boundary [ group-address [ mask | mask-length ] ] [ interface interface-type interface-number ] Any view vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. all-instance: Specifies all VPN instances. group-address: Multicast group address, in the range of 224.0.1.0 to 239.255.255.255.
CHAPTER 87: MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS display multicast forwarding-table Syntax View Parameter display multicast [ vpn-instance vpn-instance-name | all-instance ] forwarding-table [ source-address [ mask { mask | mask-length } ] | group-address [ mask { mask | mask-length } ] | incoming-interface { interface-type interface-number | register } | outgoing-interface { { exclude | include | match } { interface-type interface-number | register } } | statistics ] * [ port-in
Related command: Example multicast forwarding-table downstream-limit, multicast forwarding-table route-limit and display multicast routing-table. # View the multicast forwarding table information in the public network instance. display multicast forwarding-table Multicast Forwarding Table of VPN-Instance: public net Total 1 entry Total 1 entry matched 00001. (172.168.0.2, 227.0.0.
CHAPTER 87: MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS Table 322 Major values of the flags field Value Meaning 0x00008000 Indicates that the (S, G) entry is in the smoothening process after active/standby switchover 0x00010000 Indicates that the (S, G) has been updated during the smoothing process 0x00080000 Indicates that the (S, G) entry has been repeatedly updated and needs to be deleted before a new entry is added 0x00100000 Indicates that an entry is successfully added dis
display multicast routing-table Syntax View Parameter display multicast [ vpn-instance vpn-instance-name | all-instance ] routing-table [ source-address [ mask { mask | mask-length } ] | group-address [ mask { mask | mask-length } ] | incoming-interface { interface-type interface-number | register } | outgoing-interface { { exclude | include | match } { interface-type interface-number | register } } ] * Any view vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters.
CHAPTER 87: MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS display multicast routing-table Multicast routing table of VPN-Instance: public net Total 1 entry 00001. (172.168.0.2, 227.0.0.1) Uptime: 00:00:28 Upstream Interface: Ethernet1/1 List of 2 downstream interfaces 1: Ethernet1/2 2: Ethernet1/0 Table 324 Description on the fields of display multicast routing-table Field Description 00001 Sequence number of the (S, G) entry (172.168.0.2, 227.0.0.
Preference = 1, Order = 1 Running Configuration = ip rpf-route-static 10.10.0.0 16 2.2.2.2 order 1 # View the configuration information of multicast static routes in the public instance. display multicast routing-table static config Multicast Routing Table of VPN-Instance: public net Routes : 1 Mroute 10.10.0.
CHAPTER 87: MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS Example # View all the RPF information of multicast source 192.168.1.55 in the public network. display multicast rpf-info 192.168.1.55 RPF information about source 192.168.1.55: RPF interface: Ethernet1/0, RPF neighbor: 10.1.1.1 Referenced route/mask: 192.168.1.
protocol: Routing protocol, which can have any of the following values: ■ bgp: Specifies the BGP protocol ■ isis: Specifies the IS-IS protocol ■ ospf: Specifies the OSPF protocol ■ rip: Specifies the RIP protocol process-id: Process number of the unicast routing protocol, in the range of 1 to 65535. This argument must be provided if IS-IS, OSPF or RIP is the specified unicast routing protocol. policy-name: Name of the multicast route match rule, a case sensitive string of up to 19 characters.
CHAPTER 87: MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS static route to check whether the route has been successfully configured or whether the route has taken effect. Related command: Example display multicast routing-table static. # Configure a multicast static route to the multicast source 10.1.1.1/24, specifying a router with the IP address of 192.168.1.23 as its RPF neighbor. system-view [Sysname] ip rpf-route-static 10.1.1.1 24 192.168.1.
-2 4.4.4.7 Incoming interface address: 6.6.6.7 Previous-hop router address: 0.0.0.0 Input packet count on incoming interface: 2 Output packet count on outgoing interface: 259 Total number of packets for this source-group pair: 8100 Protocol: PIM Forwarding TTL: 0 Forwarding code: No error Table 327 Description on the fields of the mtracert command Field Description last-hop router Last-hop router (6.6.6.6, 225.2.1.
CHAPTER 87: MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS Use the undo multicast boundary command to remove a multicast forwarding boundary. By default, no multicast forwarding boundary is configured. Note that: Related command: Example ■ A multicast forwarding boundary sets the boundary condition for the multicast groups in the specified range. If the destination address of a multicast packet matches the set boundary condition, the packet will not be forwarded.
Related command: Example display multicast forwarding-table. # Set the maximum number of downstream nodes for a single route in the multicast forwarding table of the public instance to 120. system-view [Sysname] multicast forwarding-table downstream-limit 120 # Set the maximum number of downstream nodes for a single route in the multicast forwarding table of VPN instance mvpn to 60.
CHAPTER 87: MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS multicast load-splitting Syntax multicast load-splitting { source | source-group } undo multicast load-splitting View Parameter System view, VPN instance view source: Specifies to implement per-source load splitting. source-group: Specifies to implement per-source and per-group load splitting simultaneously. Description Use the multicast load-splitting command to enable load splitting of multicast traffic.
Example # Configure route selection based on the longest match in the public instance. system-view [Sysname] multicast longest-match # Configure route selection based on the longest match in VPN instance mvpn.
CHAPTER 87: MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS Use the undo multicast routing-enable command to disable IP multicast routing. IP multicast routing is disabled by default. Note that: Example ■ You must enable IP multicast routing in the public instance or VPN instance before you can carry out other Layer 3 multicast commands in the corresponding instance. ■ The device does not forward any multicast packets before IP multicast routing is enabled.
incoming-interface: Specifies to clear multicast forwarding entries of which the incoming interface is the specified one. interface-type interface-number: Specifies an interface by its type and number. register: Specifies the register interface of PIM-SM. all: Specifies to clear all the forwarding entries from the multicast forwarding table. Description Use the reset multicast forwarding-table command to clear the multicast forwarding table information.
CHAPTER 87: MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS multicast source address, this argument has an effective value range of 0 to 32. The system default is 32 in both cases. incoming-interface: Specifies the incoming interface of multicast routing entries. interface-type interface-number: Specifies an interface by its type and number. register: Specifies the register interface. all: Specifies to clear all the routing entries from the multicast routing table.
IGMP CONFIGURATION COMMANDS 88 display igmp group Syntax View Parameter display igmp [ vpn-instance vpn-instance-name | all-instance ] group [ group-address | interface interface-type interface-number ] [ static | verbose ] Any view vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. all-instance: Specifies all VPN instances. group-address: Multicast group address, in the range of 224.0.1.0 to 239.255.255.255.
CHAPTER 88: IGMP CONFIGURATION COMMANDS Group Address 225.1.1.1 225.1.1.3 225.1.1.2 Last Reporter 20.20.20.20 20.20.20.20 20.20.20.20 Uptime 00:02:04 00:02:04 00:02:04 Expires 00:01:15 00:01:15 00:01:17 # Display the detailed information of multicast group 225.1.1.1 in the public instance. display igmp group 225.1.1.1 verbose Interface group report information of VPN-Instance: public net Ethernet1/0(10.10.1.20): Total 1 IGMP Groups reported Group: 225.1.1.
Example # View the detailed IGMP configuration and operation information on Ethernet 1/0 in the public interface. display igmp interface ethernet 1/0 verbose Ethernet1/0(10.10.1.
CHAPTER 88: IGMP CONFIGURATION COMMANDS display igmp routing-table Syntax View Parameter display igmp [ vpn-instance vpn-instance-name | all-instance ] routing-table [ source-address [ mask { mask | mask-length } ] | group-address [ mask { mask | mask-length } ] ] * Any view vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. all-instance: Specifies all VPN instances. source-address: Multicast source address.
fast-leave (IGMP view) Syntax fast-leave [ group-policy acl-number ] undo fast-leave View Parameter Description Public instance IGMP view, VPN instance IGMP view acl-number: Basic ACL number, in the range of 2000 to 2999. Use the fast-leave command to enable the fast-leave function for multicast group members globally. Use the undo fast-leave command to disable the fast-leave function globally.
CHAPTER 88: IGMP CONFIGURATION COMMANDS Related command: Example igmp enable, and multicast routing-enable on page 1341. # Enable IP multicast routing in the public instance and enter public instance IGMP view. system-view [Sysname] multicast routing-enable [Sysname] igmp [Sysname-igmp] # Enable IP multicast routing in VPN instance mvpn and enter IGMP view for VPN instance mvpn.
igmp fast-leave Syntax igmp fast-leave [ group-policy acl-number ] undo igmp fast-leave View Parameter Description Interface view acl-number: Basic ACL number, in the range of 2000 to 2999. If you do not include this option in your command, this command will take effect for all multicast groups. Use the igmp fast-leave command to enable the fast leave function on the current interface for multicast group members.
CHAPTER 88: IGMP CONFIGURATION COMMANDS By default, no multicast group filter is configured, namely a host can join any multicast group. n Example When you use an advanced ACL as a filter, the source address in the ACL rule is the address of the multicast source specified in the IGMPv3 reports, rather than the source address in the IP packets. # Configure an ACL rule so that hosts on the subnet attached to Ethernet 1/0 can join multicast group 225.1.1.1 only.
View Parameter Description Interface view interval: Maximum response time in seconds for IGMP general queries, with an effective range of 1 to 25. Use the igmp max-response-time command to configure the maximum response time for IGMP general queries on the current interface. Use the undo igmp max-response-time command to restore the maximum response time for IGMP general queries to the system default. By default, the maximum response time for IGMP general queries is 10 seconds.
CHAPTER 88: IGMP CONFIGURATION COMMANDS igmp robust-count Syntax igmp robust-count robust-value undo igmp robust-count View Parameter Description Interface view robust-value: IGMP querier robustness variable, with an effective range of 2 to 5. The IGMP robustness variable determines the number of general queries the IGMP querier sends on startup and the number of IGMP group-specific queries the IGMP querier sends upon receiving an IGMP leave message.
Example # Disable insertion of the Router-Alert option into IGMP messages that leave Ethernet 1/0. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] undo igmp send-router-alert igmp static-group Syntax igmp static-group group-address [ source source-address ] undo igmp static-group { all | group-address [ source source-address ] } View Parameter Interface view all: Specifies to remove all static multicast groups that the current interface has joined.
CHAPTER 88: IGMP CONFIGURATION COMMANDS igmp timer other-querier-present Syntax igmp timer other-querier-present interval undo igmp timer other-querier-present View Parameter Description Interface view interval: IGMP other querier present interval in seconds, in the range of 60 to 300. Use the igmp timer other-querier-present command to configure the IGMP other querier present interval on the current interface.
By default, the IGMP query interval is 60 seconds. Related command: Example timer query (IGMP view), igmp timer other-querier-present, display igmp interface. # Set the IGMP general query interval to 125 seconds on Ethernet 1/0. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] igmp timer query 125 igmp version Syntax igmp version version-number undo igmp version View Parameter Description Interface view version-number: IGMP version, in the range of 1 to 3.
CHAPTER 88: IGMP CONFIGURATION COMMANDS Description Use the last-member-query-interval command to configure the global IGMP last-member query interval. Use the undo last-member-query-interval command to restore the global IGMP last member query interval to the system default. By default, the IGMP last-member query interval is 1 second. Related command: Example igmp last-member-query-interval, robust-count (IGMP view), display igmp interface.
undo require-router-alert View Parameter Description Public instance IGMP view, VPN instance IGMP view None Use the require-router-alert command to configure globally the router to discard IGMP messages that do not carry the Router-Alert option. Use the undo require-router-alert command to restore the system default. By default, the device does not check the Router-Alert option, namely it handles all the IGMP messages it received to the upper layer protocol for processing.
CHAPTER 88: IGMP CONFIGURATION COMMANDS a multicast source address, this argument has an effective value range of 0 to 32. The system default is 32 in both cases. Description Use the reset igmp group command to clear IGMP forwarding entries. Note that: Related command: Example ■ When clearing the IGMP forwarding entries of a VLAN interface, this command also clears the IGMP Snooping forwarding entries for that VLAN. ■ This command cannot clear IGMP forwarding entries of static joins.
Related command: Example igmp robust-count, timer query (IGMP view), last-member-query-interval, timer other-querier-present (IGMP view), display igmp interface. # Set the IGMP querier robustness variable to 3 globally in the public instance.
CHAPTER 88: IGMP CONFIGURATION COMMANDS Use the undo timer other-querier-present command to restore the system default. By default, the IGMP other querier present interval is [ IGMP query interval ] times [ IGMP querier robustness variable ] plus [ maximum response time for IGMP general queries ] divided by two.
version (IGMP view) Syntax version version-number undo version View Parameter Description Public instance IGMP view, VPN instance IGMP view version-number: IGMP version, in the range of 1 to 3. Use the version command to configure the global IGMP version. Use the undo version command to restore the global IGMP version to the system default. The default IGMP version is version 2. Related command: Example igmp version. # Set the global IGMP version to IGMPv1 in the public instance.
CHAPTER 88: IGMP CONFIGURATION COMMANDS
MSDP CONFIGURATION COMMANDS 89 cache-sa-enable Syntax cache-sa-enable undo cache-sa-enable View Parameter Description Public instance MSDP view, VPN instance MSDP view None Use the cache-sa-enable command to enable the SA message cache mechanism. Use the undo cache-sa-enable command to disable the SA message cache mechanism. By default, the SA message cache mechanism is enabled. Example # Enable the SA message cache mechanism in the public instance.
CHAPTER 89: MSDP CONFIGURATION COMMANDS listen: Displays the information of MSDP peers in the listening state. shutdown: Displays the information of MSDP peers in the deactivated state. up: Displays the information of MSDP peers in the in-session state. Description Example Use the display msdp brief command to view the brief information of MSDP peers. # View the brief information of MSDP peers in all states in the public instance.
Description Related command: Example Use the display msdp peer-status command to view the detailed MSDP peer status information. peer connect-interface, peer description, peer mesh-group, peer minimum-ttl, peer request-sa-enable, peer sa-cache-maximum, peer sa-policy, and peer sa-request-policy. # View the detailed status information of the MSDP peer with the address of 10.110.11.11 in the public instance. display msdp peer-status 10.110.11.
CHAPTER 89: MSDP CONFIGURATION COMMANDS Table 332 Description on the fields of the display msdp peer-status command Field Description Connection interface Interface and its IP address used for setting up a TCP connection with the remote MSDP peer Number of sent/received messages Number of SA messages sent and received through this connection Number of discarded Number of discarded outgoing messages output messages Elapsed time since last connection or counters clear Time passed since the informa
Parameter vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. all-instance: Specifies all VPN instances. group-address: Multicast group address in the (S, G) entry, in the range of 224.0.1.0 to 239.255.255.255. source-address: Multicast source address in the (S, G) entry. as-number: AS number, in the range of 1 to 65535. Description Use the display msdp sa-cache command to view the information of (S, G) entries in the MSDP cache.
CHAPTER 89: MSDP CONFIGURATION COMMANDS display msdp sa-count Syntax View Parameter display msdp [ vpn-instance vpn-instance-name | all-instance ] sa-count [ as-number ] Any view vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. all-instance: Specifies all VPN instances. as-number: AS number, in the range of 1 to 65535. Description Use the display msdp sa-count command to view the number of SA messages in the MSDP cache.
encap-data-enable Syntax encap-data-enable undo encap-data-enable View Parameter Description Public instance MSDP view, VPN instance MSDP view None Use the encap-data-enable command to enable register message encapsulation in SA messages. Use the undo encap-data-enable command to disable register message encapsulation in SA messages. By default, an SA message contains only an (S, G) entry. No register message is encapsulated in an SA message.
CHAPTER 89: MSDP CONFIGURATION COMMANDS In addition to controlling SA message creation by using this command, you can also configure a filtering rule for forwarding and receiving SA messages by using the peer sa-policy command. Related command: Example peer sa-policy. # Configure the MSDP peer in the public instance to advertise only the (S, G) entries of multicast sources on the 10.10.0.0/16 subnet and with multicast group address of 225.1.0.0/16 when creating an SA message.
# Enable IP multicast routing in VPN instance mvpn, and enable MSDP in VPN instance mvpn and enter MSDP view of VPN instance mvpn.
CHAPTER 89: MSDP CONFIGURATION COMMANDS Use the undo peer connect-interface command to remove an MSDP peer connection. No MSDP peer connection is created by default. Be sure to carry out this command before you use any other peer command; otherwise the system will prompt that the peer does not exist. Related command: Example static-rpf-peer. # Configure the router with the IP address of 125.10.7.
undo peer peer-address mesh-group View Parameter Public instance MSDP view, VPN instance MSDP view peer-address: MSDP peer address. name: Mesh group name, a string of 1 to 32 characters (case sensitive). Description Use the peer mesh-group command to configure an MSDP peer as a mesh group member. Use the undo peer mesh-group command to remove an MSDP peer as a mesh group member. By default, an MSDP peer does not belong to any mesh group.
CHAPTER 89: MSDP CONFIGURATION COMMANDS system-view [Sysname] msdp [Sysname-msdp] peer 110.10.10.1 minimum-ttl 10 peer request-sa-enable Syntax peer peer-address request-sa-enable undo peer peer-address request-sa-enable View Parameter Description Public instance MSDP view, VPN instance MSDP view peer-address: MSDP peer address. Use the peer request-sa-enable command to enable the device to send SA request messages.
Description Use the peer sa-cache-maximum command to configure the maximum number of SA messages that the device can cache. Use the undo peer sa-cache-maximum command to restore the default setting. By default, the device can cache a maximum of 8,192 SA messages. Related command: Example display msdp sa-count, display msdp peer-status, and display msdp brief. # In the public instance allow the device to cache a maximum of 100 SA messages from the MSDP peer 125.10.7.6.
CHAPTER 89: MSDP CONFIGURATION COMMANDS system-view [Sysname] acl number 3100 [Sysname-acl-adv-3100] rule permit ip source 170.15.0.0 0.0.255.255 destination 225.1.0.0 0.0.255.255 [Sysname-acl-adv-3100] quit [Sysname] msdp [Sysname-msdp] peer 125.10.7.6 connect-interface ethernet 1/0 [Sysname-msdp] peer 125.10.7.
Parameter vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. all-instance: Specifies all VPN instances. peer-address: Address of the MSDP peer with which the TCP connection is to be reset. If you do not provide this argument, the TCP connections with all MSDP peers will be reset.
CHAPTER 89: MSDP CONFIGURATION COMMANDS reset msdp statistics Syntax View Parameter reset msdp [ vpn-instance vpn-instance-name | all-instance ] statistics [ peer-address ] User view vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. all-instance: Specifies all VPN instances. peer-address: Address of the MSDP peer of which the statistics information is to be cleared.
system-view [Sysname] msdp [Sysname-msdp] shutdown 125.10.7.6 static-rpf-peer Syntax static-rpf-peer peer-address [ rp-policy ip-prefix-name ] undo static-rpf-peer peer-address View Parameter Public instance MSDP view, VPN instance MSDP view peer-address: MSDP peer address. rp-policy ip-prefix-name: Specifies a filtering policy based on the RP address in SA messages, where ip-prefix-name is the filtering policy name, a string of 1 to 19 characters (case sensitive).
CHAPTER 89: MSDP CONFIGURATION COMMANDS timer retry Syntax timer retry interval undo timer retry View Parameter Description Public instance MSDP view, VPN instance MSDP view interval: Interval between MSDP peer connection retries, in seconds. The effective range is 1 to 60. Use the timer retry command to configure the interval between MSDP peer connection retries. Use the undo timer retry command to restore the default setting.
PIM CONFIGURATION COMMANDS 90 auto-rp enable Syntax auto-rp enable undo auto-rp enable View Parameter Description Public instance PIM view, VPN instance PIM view None Use the auto-rp enable command to enable auto-RP. Use the undo auto-rp enable command to disable auto-RP. By default, auto-RP is disabled. Related command: Example static-rp (PIM view). # Enable auto-RP in the public instance.
CHAPTER 90: PIM CONFIGURATION COMMANDS Use the undo bsr-policy command to remove the restriction of the BSR address range. By default, there are no restrictions on the BSR address range, namely all the received BSR messages are regarded to be valid. Example # Configure a legal BSR address range in the public instance so that only routers on the segment 10.1.1.0/24 can become the BSR. system-view [Sysname] acl number 2000 [Sysname-acl-basic-2000] rule permit source 10.1.1.0 0.0.0.
c-bsr admin-scope Syntax c-bsr admin-scope undo c-bsr admin-scope View Parameter Description Public instance PIM view, VPN instance PIM view None Use the c-bsr admin-scope command to enable BSR administrative scoping to implement RP-Set distribution based on BSR admin-scope regions. Use the undo c-bsr admin-scope command to disable BSR administrative scoping. By default, BSR administrative scoping is disabled, namely only one BSR exists in each PIM-SM domain.
CHAPTER 90: PIM CONFIGURATION COMMANDS Related command: Example c-bsr group, c-bsr hash-length (PIM view), and c-bsr priority (PIM view). # Configure the router to be a C-BSR for the global scope zone in the public instance, with the priority of 1.
system-view [Sysname] pim [Sysname-pim] c-bsr group 239.0.0.0 255.0.0.0 priority 10 c-bsr hash-length (PIM view) Syntax c-bsr hash-length hash-length undo c-bsr hash-length View Parameter Description Public instance PIM view, VPN instance PIM view hash-length: Hash mask length for RP selection calculation, in the range of 0 to 32. Use the c-bsr hash-length command to configure the global Hash mask length for RP selection calculation.
CHAPTER 90: PIM CONFIGURATION COMMANDS By default, the bootstrap timeout value is determined by this formula: Bootstrap timeout = Bootstrap interval × 2 + 10. n Related command: Example The default bootstrap interval is 60 seconds, so the default bootstrap timeout = 60 × 2 + 10 = 130 (seconds). c-bsr (PIM view) and c-bsr interval (PIM view). # Set the bootstrap timeout time to 150 seconds in the public instance.
View Parameter Description Public instance PIM view, VPN instance PIM view priority: Priority of the C-BSR, in the range of 0 to 255. A larger value of this argument means a higher priority. Use the c-bsr priority command to configure the global C-BSR priority. Use the undo c-bsr priority command to restore the default setting. By default, the C-BSR priority is 0. Related command: Example c-bsr (PIM view), c-bsr global, and c-bsr group. # Set the global C-BSR priority to 5 in the public instance.
CHAPTER 90: PIM CONFIGURATION COMMANDS No C-RPs are configured by default. Note that: Related command: Example ■ If you do not specify a group range for the C-RP, the C-RP will serve all multicast groups. ■ If you wish a router to be a C-RP for multiple group ranges, you need to include these multiple group ranges in multiple rules in the ACL corresponding to the group-policy keyword. ■ If you carry out this command repeatedly on the same interface, the last configuration will take effect.
c-rp holdtime (PIM view) Syntax c-rp holdtime interval undo c-rp holdtime View Parameter Description Public instance PIM view, VPN instance PIM view interval: C-RP timeout in seconds, with an effective range of 1 to 65,535. Use the c-rp holdtime command to configure the global C-RP timeout time, namely the length of time the BSR waits before it must receive a C-RP-Adv message. Use the undo c-rp holdtime command to restore the default setting. By default, the C-RP timeout time is 150 seconds.
CHAPTER 90: PIM CONFIGURATION COMMANDS Use the undo crp-policy command to remove the restrictions in C-RP address ranges and the ranges of served multicast groups. By default, there are no restrictions on C-RP address ranges and the address ranges of served groups, namely all received C-RP messages are accepted. Example # In the public instance, configure a C-RP address range and a range of served multicast groups so that only routers in the address range of 1.1.1.
Candidate RP: 12.12.12.9(LoopBack1) Priority: 0 HoldTime: 150 Advertisement Interval: 60 Next advertisement scheduled at: 00:00:48 Candidate RP: 3.3.3.3(Ethernet1/0) Priority: 20 HoldTime: 90 Advertisement Interval: 50 Next advertisement scheduled at: 00:00:28 Candidate RP: 5.5.5.
CHAPTER 90: PIM CONFIGURATION COMMANDS Description Use the display pim claimed-route command to view the information of unicast routes used by PIM. If an (S, G) is marked SPT, this (S, G) entry uses a unicast route. Example # View the information of all unicast routes used by PIM in the public instance. display pim claimed-route Vpn-instance: public net RPF information about: 172.168.0.0 RPF interface: Ethernet1/1, RPF neighbor: 172.168.0.2 Referenced route/mask: 172.168.0.
crp: Displays the number of C-RP-Adv messages. graft: Displays the number of graft messages. graft-ack: Displays the number of graft-ack messages. hello: Displays the number of hello messages. join-prune: Displays the number of join/prune messages. state-refresh: Displays the number of state refresh messages. Description Use the display pim control-message counters command to view the statistics information of PIM control messages.
CHAPTER 90: PIM CONFIGURATION COMMANDS Table 337 Description on the fields of display pim control-message counters Field Description C-RP C-RP-Adv messages display pim grafts Syntax View Parameter display pim [ vpn-instance vpn-instance-name | all-instance ] grafts Any view vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. all-instance: Specifies all VPN instances.
interface-type interface-number: Displays the PIM information on a particular interface. verbose: Displays the detailed PIM information. Description Example Use the display pim interface command to view the PIM information on the specified interface or all interfaces. # View the PIM information on all interfaces in the public instance. display pim interface Vpn-instance: public net Interface NbrCnt HelloInt Eth1/0 1 30 Eth1/1 0 30 Eth1/2 1 30 DR-Pri 1 1 1 DR-Address 10.1.1.2 172.168.0.
CHAPTER 90: PIM CONFIGURATION COMMANDS Table 340 Description on the fields of the display pim interface verbose command Field Description Interface Interface name and its IP address PIM version Running PIM version PIM mode PIM mode, dense or sparse PIM DR DR IP address PIM DR Priority (configured) Configured priority for DR election PIM neighbor count Total number of PIM neighbors PIM hello interval Hello interval PIM LAN delay (negotiated) Negotiated prune delay PIM LAN delay (conf
Parameter vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. all-instance: Specifies all VPN instances. mode: Displays the information of join/prune messages to send in the specified PIM mode. PIM modes include sm and ssm, which represent PIM-SM and PIM-SSM respectively. flags flag-value: Displays routing entries containing the specified flag. Values and meanings of flag-value are as follows: ■ rpt: Specifies routing entries on the RPT.
CHAPTER 90: PIM CONFIGURATION COMMANDS View Parameter Any view vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. all-instance: Specifies all VPN instances. interface-type interface-number: Displays the PIM neighbor information on a particular interface. neighbor-address: Displays the information of a particular PIM neighbor. verbose: Displays the detailed PIM neighbor information.
Interface: Ethernet1/2 Uptime: 00:00:10 Expiry time: 00:00:30 DR Priority: 1 Generation ID: 0x2ACEFE15 Holdtime: 105 s LAN delay: 500 ms Override interval: 2500 ms State refresh interval: 60 s Neighbor tracking: Disabled display pim routing-table Syntax View Parameter display pim [ vpn-instance vpn-instance-name | all-instance ] routing-table [ group-address [ mask { mask-length | mask } ] | source-address [ mask { mask-length | mask } ] | incoming-interface [ interface-type interface-number | regi
CHAPTER 90: PIM CONFIGURATION COMMANDS match: Displays routing entries of which the OIL includes only the specified interface. mode mode-type: Specifies a PIM mode, where mode-type can have the following values: ■ dm: Specifies PIM-DM. ■ sm: Specifies PIM-SM. ■ ssm: Specifies PIM-SSM. flags flag-value: Displays routing entries containing the specified flag(s).
Total 0 (*, G) entry; 1 (S, G) entry (172.168.0.12, 227.0.0.1) RP: 2.2.2.
CHAPTER 90: PIM CONFIGURATION COMMANDS group-address: Address of the multicast group of which the RP information is to be displayed, in the range of 224.0.1.0 to 239.255.255.255. If you do not provide a group address, this command will display the RP information corresponding to all multicast groups. Description Use the display pim rp-info command to view the RP information.
Table 344 Description on the fields of the display pim rp-info command Field Description RP mapping for this group is: 2.2.2.2 The IP address of the RP serving the current multicast group is 2.2.2.2 hello-option dr-priority (PIM view) Syntax hello-option dr-priority priority undo hello-option dr-priority View Public instance PIM view, VPN instance PIM view Parameter priority: Router priority for DR election, in the range of 0 to 4294967295.
CHAPTER 90: PIM CONFIGURATION COMMANDS This command is effective for both PIM-DM and PIM-SM. Related command: Example pim hello-option holdtime. # Set the global value of the PIM neighbor timeout time to 120 seconds in the public instance.
Parameter Description None Use the hello-option neighbor-tracking command to globally disable join suppression, namely enable neighbor tracking. Use the undo hello-option neighbor-tracking command to enable join suppression. By default, join suppression is enabled, namely neighbor tracking is disabled. This command is effective for both PIM-DM and PIM-SM. Related command: Example pim hello-option neighbor-tracking. # Disable join suppression globally in the public instance.
CHAPTER 90: PIM CONFIGURATION COMMANDS holdtime assert (PIM view) Syntax holdtime assert interval undo holdtime assert View Parameter Description Public instance PIM view, VPN instance PIM view interval: Assert timeout time in seconds, with an effective range of 7 to 2,147,483,647. Use the holdtime assert command to configure the global value of the assert timeout time. Use the undo holdtime assert command to restore the default setting. By default, the assert timeout time is 180 seconds.
Related command: Example holdtime assert (PIM view), pim holdtime assert, and pim holdtime join-prune. # Set the global value of the join/prune timeout time to 280 seconds in the public instance.
CHAPTER 90: PIM CONFIGURATION COMMANDS Description Use the jp-queue-size command to configure the maximum number of (S, G) entries in a join/prune message. Use the undo jp-queue-size command to restore the default setting. By default, a join/prune messages contains a maximum of 1,020 (S, G) entries. When you use this command, take the following into account: Related commands: Example ■ The size of the forwarding table.
Example # Enable IP multicast routing in the public instance and enter public instance PIM view. system-view [Sysname] multicast routing-enable [Sysname] pim [Sysname-pim] # Enable IP multicast routing in VPN instance mvpn and enter PIM view of VPN instance mvpn.
CHAPTER 90: PIM CONFIGURATION COMMANDS View Parameter Description Interface view None Use the pim dm command to enable PIM-DM. Use the undo pim dm command to disable PIM-DM. By default, PIM-DM is disabled. Note that PIM-DM cannot be used for multicast groups in the SSM group range. Related command: pim sm, ssm-policy (PIM view). Example # Enable PIM-DM on Ethernet 1/0.
pim hello-option holdtime Syntax pim hello-option holdtime interval undo pim hello-option holdtime View Parameter Description Interface view interval: PIM neighbor timeout time in seconds, with an effective range of 1 to 65,535. Use the pim hello-option holdtime command to configure the PIM neighbor timeout time on the current interface. Use the undo pim hello-option holdtime command to restore the default setting. By default, the PIM neighbor timeout time is 105 seconds.
CHAPTER 90: PIM CONFIGURATION COMMANDS system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] pim hello-option lan-delay 200 pim hello-option neighbor-tracking Syntax pim hello-option neighbor-tracking undo pim hello-option neighbor-tracking View Parameter Description Interface view None Use the pim hello-option neighbor-tracking command to disable join suppression, namely enable neighbor tracking, on the current interface.
Related command: Example pim hello-option lan-delay, hello-option lan-delay (PIM view), and hello-option override-interval (PIM view). # Set the prune override interval to 2,000 milliseconds on Ethernet 1/0.
CHAPTER 90: PIM CONFIGURATION COMMANDS Use the undo pim holdtime join-prune command to restore the default setting. By default, the join/prune timeout time is 210 seconds. Related command: Example holdtime assert (PIM view), pim holdtime assert, and holdtime join-prune (PIM view). # Set the join/prune timeout time to 280 seconds on Ethernet1/0.
Use the undo pim sm command to disable PIM-SM. By default, PIM-SM is disabled. Related command: Example pim dm. # Enable PIM-SM on Ethernet 1/0. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] pim sm pim state-refresh-capable Syntax pim state-refresh-capable undo pim state-refresh-capable View Parameter Description Interface view None Use the pim state-refresh-capable command to enable the state fresh feature on the interface.
CHAPTER 90: PIM CONFIGURATION COMMANDS Description Use the pim timer graft-retry command to configure the graft retry period. Use the undo pim timer graft-retry command to restore the default setting. By default, the graft retry period is 3 seconds. Example # Set the graft retry period to 80 seconds on Ethernet1/0.
Description Use the pim timer join-prune command to configure on the current interface the interval at which join/prune messages are sent. Use the undo pim timer join-prune command to restore the default setting. By default, the join/prune interval is 60 seconds. Related command: Example timer join-prune (PIM view). # Set the join/prune interval to 80 seconds on Ethernet 1/0.
CHAPTER 90: PIM CONFIGURATION COMMANDS Description Use the probe-interval command to configure the register probe time. Use the undo probe-interval command to restore the default setting. By default, the register probe time is 5 seconds. Related command: Example register-suppression-timeout (PIM view). # Set the probe time to 6 seconds in the public instance.
undo register-suppression-timeout View Public instance PIM view, VPN instance PIM view Parameter interval: Register suppression timeout in seconds, in the range of 1 to 3,600. Description Use the register-suppression-timeout command to configure the register suppression timeout time. Use the undo register-suppression-timeout command to restore the default setting. By default, the register suppression timeout time is 60 seconds.
CHAPTER 90: PIM CONFIGURATION COMMANDS reset pim control-message counters Syntax View Parameter reset pim [ vpn-instance vpn-instance-name | all-instance ] control-message counters [ interface interface-type interface-number ] User view vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. all-instance: Specifies all VPN instances. interface interface-type interface-number: Specifies to reset the PIM control message counter on a particular interface.
source-policy (PIM view) Syntax source-policy acl-number undo source-policy View Parameter Description Public instance PIM view, VPN instance PIM view acl-number: Basic or advanced ACL number, in the range of 2000 to 3999. Use the source-policy command to configure a multicast data filter. Use the undo source-policy command to remove the configured multicast data filter. By default, no multicast data filter is configured.
CHAPTER 90: PIM CONFIGURATION COMMANDS infinity: Disables RPT-to-SPT switchover. group-policy acl-number: Uses this threshold for multicast groups matching the specified multicast policy. In this option, acl-number refers to a basic ACL number, in the range of 2000 to 2999. If you do not include this option in your command, the threshold will apply on all multicast groups.
ssm-policy (PIM view) Syntax ssm-policy acl-number undo ssm-policy View Parameter Description Public instance PIM view, VPN instance PIM view acl-number: Basic ACL number, in the range of 2000 to 2999. Use the ssm-policy command to configure the SSM group range. Use the undo ssm-policy command to restore the system default. By default, the SSM group range is 232.0.0.0/8. This command allows you to define an address range of permitted or denied multicast sources or groups.
CHAPTER 90: PIM CONFIGURATION COMMANDS Example # Set the state refresh interval to 70 seconds in the public instance. system-view [Sysname] pim [Sysname-pim] state-refresh-interval 70 state-refresh-rate-limit (PIM view) Syntax state-refresh-rate-limit interval undo state-refresh-rate-limit View Parameter Description Public instance PIM view, VPN instance PIM view interval: Time to wait before receiving a new refresh message, in seconds and with an effective range of 1 to 65535.
By default, the TTL value of state refresh messages is 255. Related command: Example pim state-refresh-capable, state-refresh-interval (PIM view), and state-refresh-rate-limit (PIM view). # In the public instance configure the device to send PIM state refresh messages with a TTL of 45.
CHAPTER 90: PIM CONFIGURATION COMMANDS ■ Related command: Example You can configure up to 50 static RPs on the same device. display pim rp-info and auto-rp enable. # In the public instance, configure the interface with the IP address 11.110.0.6 to be a static RP that serves the multicast groups defined in ACL 2001, and give priority to this static RP in the case of static/dynamic RP conflict. system-view [Sysname] pim [Sysname-pim] static-rp 11.110.0.
Use the undo timer join-prune command to restore the default setting. By default, the join/prune interval is 60 seconds. Related command: Example pim timer join-prune. # Set the global join/prune interval to 80 seconds in the public instance.
CHAPTER 90: PIM CONFIGURATION COMMANDS
IPV6 MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS 91 display multicast ipv6 boundary Syntax View Parameter display multicast ipv6 boundary [ ipv6-group-address [ prefix-length ] | interface interface-type interface-number ] Any view ipv6-group-address: IPv6 multicast group address, in the range of FFxy::/16, where x and y represent any hexadecimal number from 0 through F. prefix-length: Prefix length of the IPv6 multicast group address, in the range of 8 to 128. The system default is 128.
CHAPTER 91: IPV6 MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS View Parameter Any view ipv6-source-address: IPv6 multicast source address. ipv6-group-address: IPv6 multicast group address, in the range of FFxy::/16, where x and y represent any hexadecimal number from 0 through F. prefix-length: Prefix length of the IPv6 multicast group/source address.
Matched 146754 packets(10272780 bytes), Wrong If 0 packets Forwarded 139571 packets(9769970 bytes) Table 346 Description on the fields of the display multicast ipv6 forwarding-table command Field Description 00001 Sequence number if the (S, G) entry (2000:5::1:1000, FF1E::1234) (S, G) entry in the IPv6 multicast forwarding table MID (S, G) entry ID. Each (S, G) entry has a unique MID Flags Current state of a (S, G) entry.
CHAPTER 91: IPV6 MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS Parameter interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command will display the minimum hop limit required for an IPv6 multicast packet to be forwarded on all interfaces.
outgoing-interface: Displays routing entries whose outgoing interface is the specified ones. exclude: Displays routing entries whose OIL excludes the specified interface. include: Displays routing entries whose OIL includes the specified interface. match: Displays routing entries whose OIL includes only the specified interface. Description Related command: Example Use the display multicast ipv6 routing-table command to display the information of an IPv6 multicast routing table.
CHAPTER 91: IPV6 MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS Related command: Example display multicast ipv6 routing-table and display multicast ipv6 forwarding-table. # Display all RPF information of the multicast source with an IPv6 address 2001::101.
Use the undo multicast ipv6 boundary command to delete a specified IPv6 multicast forwarding boundary or all IPv6 multicast forwarding boundaries. By default, no multicast forwarding boundary is configured. Note that: Related command: Example ■ A multicast forwarding boundary sets the boundary condition for the IPv6 multicast groups in the specified range. If the destination address of an IPv6 multicast packet matches the set boundary condition, the packet will not be forwarded.
CHAPTER 91: IPV6 MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS Related command: Example display multicast ipv6 forwarding-table. # Set the maximum number of downstream nodes for a single route in the IPv6 multicast forwarding table to 120.
source-group: Specifies to implement IPv6 multicast load splitting on a per-source and per-group basis. Description Use the multicast load-splitting command to enable load splitting of IPv6 multicast traffic. Use the undo multicast load-splitting command to disable load splitting of IPv6 multicast traffic. By default, load splitting of IPv6 multicast traffic is disabled. Example # Enable load splitting of IPv6 multicast traffic on a per-source basis.
CHAPTER 91: IPV6 MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS Description Use the multicast ipv6 minimum-hoplimit command to configure the minimum hop limit required for an IPv6 multicast packet to be forwarded. Use the undo multicast minimum-hoplimit command to restore the system default. By default, the minimum hop limit required for an IPv6 multicast packet to be forwarded is 1. Related command: Example display multicast ipv6 minimum-hoplimit.
reset multicast ipv6 forwarding-table Syntax View Parameter reset multicast ipv6 forwarding-table { { ipv6-source-address [ prefix-length ] | ipv6-group-address [ prefix-length ] | incoming-interface { interface-type interface-number | register } } * | all } User view ipv6-source-address: IPv6 multicast source address. ipv6-group-address: IPv6 multicast group address, in the range of FFxy::/16, where x and y represent any hexadecimal number from 0 to F.
CHAPTER 91: IPV6 MULTICAST ROUTING AND FORWARDING CONFIGURATION COMMANDS ipv6-group-address: IPv6 multicast group address, in the range of FFxy::/16, where x and y represent any hexadecimal number from 0 to F. prefix-length: Prefix length of the IPv6 multicast group/source address. For an IPv6 multicast group address, this argument has an effective value range of 8 to 128 for an IPv6 multicast source address, this argument has an effective value range of 0 to 128.
MLD CONFIGURATION COMMANDS 92 display mld group Syntax View Parameter display mld group [ ipv6-group-address | interface interface-type interface-number ] [ static | verbose ] Any view ipv6-group-address: MLD multicast group address, in the range of FFxy::/16 (excluding FFx0::/16, FFx1::/16, FFx2::/16, and FF0y::), where x and y represent any hexadecimal number ranging from 0 to F. interface interface-type interface-number: Displays the information of MLD multicast groups on the specified interface.
CHAPTER 92: MLD CONFIGURATION COMMANDS Last-listener-query-timer-expiry: off Group mode: include Version1-host-present-timer-expiry: off Table 351 Description on the fields of the display mld group command Field Description Group IPv6 multicast group address Uptime Length of time since the IPV6 multicast group was joined Expires Remaining time of the IPv6 multicast group Last reporter IPv6 address of the host that last reported membership for this group Last-listener-query-counter Number
Fast-leave: disabled Startup-query-timer-expiry: off Other-querier-present-timer-expiry: off Table 352 Description on the fields of the display mld group port-info command Field Description Ethernet1/0(FE80::200:AFF:FE01:101): Interface name (IPv6 link-local address) Current MLD version MLD version running on the interface MLD group policy MLD group policy Value of query interval for MLD (in seconds) MLD query interval, in seconds Value of other querier present interval for MLD (in MLD othe
CHAPTER 92: MLD CONFIGURATION COMMANDS Description Example Use the display mld routing-table command to view the MLD routing table information. # View the information of the MLD routing table. display mld routing-table Routing table Total 1 entry 00001.
last-listener-query-interval Syntax last-listener-query-interval interval undo last-listener-query-interval View Parameter Description MLD view interval: Last listener query interval in seconds, in the range of 1 to 5. Use the last-listener-query-interval command to configure the last listener query interval globally. Use the undo last-listener-query-interval command to restore the default configuration. By default, the last listener query interval is 1 second.
CHAPTER 92: MLD CONFIGURATION COMMANDS Example # Globally set the maximum response delay for general queries to 8 seconds. system-view [Sysname] mld [Sysname-mld] max-response-time 8 mld Syntax mld undo mld View Parameter Description System view None Use the mld command to enter MLD view. Use the undo mld command to remove the configurations done in MLD view. This command can take effect only after IPv6 multicast routing is enabled on the device.
Related command: Example ■ This command can take effect only after IPv6 multicast routing is enabled on the device. ■ Other MLD configurations performed on the interface can take effect only after MLD is enabled on the interface. mld. # Enable MLD on Ethernet 1/0.
CHAPTER 92: MLD CONFIGURATION COMMANDS View Parameter Interface view acl6-number: Number of a basic or advanced IPv6 ACL, in the range of 2000 to 3999. version-number: MLD version number, 1 or 2. If you do not specify an MLD version, the configured group filter will apply to MLD reports of both version 1 and version 2. Description Use the mld group-policy command to configure an IPv6 multicast group filter on the current interface to limit access to the IPv6 multicast group.
Example # Set the last listener query interval to 3 seconds on Ethernet 1/0. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] mld last-listener-query-interval 3 mld max-response-time Syntax mld max-response-time interval undo mld max-response-time View Parameter Description Interface view interval: Maximum response delay for MLD general query messages in seconds, in the range of 1 to 25.
CHAPTER 92: MLD CONFIGURATION COMMANDS Description Use the mld require-router-alert command to configure the interface to discard MLD messages without the Router-Alert option. Use the undo mld require-router-alert command to restore the default configuration. By default, the device does not check the Router-Alert option, that is, it forwards all received MLD messages to the upper layer protocol for processing. Related command: Example require-router-alert (MLD view) and mld send-router-alert.
mld send-router-alert Syntax mld send-router-alert undo mld send-router-alert View Parameter Description Interface view None Use the mld send-router-alert command to enable insertion of the Router-Alert option into MLD messages to be sent from the current interface. Use the undo mld send-router-alert command to disable insertion of the Router-Alert option into MLD messages to be sent from the current interface. By default, MLD messages carry the Router-Alert option.
CHAPTER 92: MLD CONFIGURATION COMMANDS If the IPv6 multicast address is in the SSM multicast address range, and if an IPv6 address is specified for the multicast source, multicast messages carrying the (S,G) entry, namely, the source IPv6 address information, can be sent out of this interface. Example # Configure Ethernet 1/0 to be a statically-connected member of the multicast group FF03::101.
system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] mld timer other-querier-present 200 mld timer query Syntax mld timer query interval undo mld timer query View Interface view Parameter interval: query interval, namely the amount of time in seconds between MLD general queries, in the range of 1 to 18,000. Description Use the mld timer query command to configure the query interval on the current interface.
CHAPTER 92: MLD CONFIGURATION COMMANDS Example # Set the MLD version to MLDv2 on Ethernet 1/0. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] mld version 2 require-router-alert (MLD view) Syntax require-router-alert undo require-router-alert View Parameter Description MLD view None Use the require-router-alert command to globally configure the device to discard MLD messages without the Router-Alert option.
prefix-length: Prefix length of the specified multicast source or multicast group. For a multicast source address, this argument has an effective value range of 0 to 128; for a multicast group address, it has an effective value range of 8 to 128. The system default is 128 in both cases. Description Use the reset mld group command to clear MLD forwarding entries.
CHAPTER 92: MLD CONFIGURATION COMMANDS By default, the MLD querier robustness variable is 2. Related command: Example mld robust-count, last-listener-query-interval, timer other-querier-present (MLD view), and display mld interface. # Set the MLD querier robustness variable to 3 globally.
Description Use the timer other-querier-present command to configure the MLD other querier present interval globally. Use the undo timer other-querier-present command to restore the default configuration. By default, the MLD other querier present interval is determined by the following formula: MLD other querier present interval = [ MLD query interval ] times [ MLD querier robustness variable ] plus [ maximum response delay for MLD general queries ] divided by two.
CHAPTER 92: MLD CONFIGURATION COMMANDS version (MLD view) Syntax version version-number undo version View Parameter Description MLD view version-number: MLD version number, 1 or 2. Use the version command to configure the MLD version globally. Use the undo version command to restore the default MLD version. By default, the MLD version is MLDv1. Related command: Example mld version. # Globally set the MLD version to MLDv2.
IPV6 PIM CONFIGURATION COMMANDS 93 bsr-policy (IPv6 PIM view) Syntax bsr-policy acl6-number undo bsr-policy View Parameter Description IPv6 PIM view acl6-number: Basic IPv6 ACL number, in the range of 2000 to 2999. When an IPv6 ACL is defined, the source keyword in the rule command specifies a legal BSR source IPv6 address range. Use the bsr-policy command to configure a legal BSR address range to guard against BSR spoofing.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS hash-length: Hash mask length for RP selection calculation, in the range of 0 to 128. If you do not include this keyword in your command, the corresponding global setting will be used. priority: Priority of the C-BSR, in the range of 0 to 255. If you do not include this keyword in your command, the corresponding global setting will be used. A larger value means a higher priority.
c-bsr holdtime (IPv6 PIM view) Syntax c-bsr holdtime interval undo c-bsr holdtime View Parameter Description IPv6 PIM view interval: Bootstrap timeout in seconds, in the range of 1 to 2,147,483,647. Use the c-bsr holdtime command to configure the bootstrap timeout time, namely the length of time for which the C-BSRs wait for a bootstrap message from the BSR. Use the undo c-bsr holdtime command to restore the default setting.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS n Related command: Example The default bootstrap timeout is 130 seconds, so the default bootstrap interval = (130 - 10) / 2 = 60 (seconds). c-bsr (IPv6 PIM view) and c-bsr holdtime (IPv6 PIM view). # Set the bootstrap interval to 30 seconds.
defining a filtering rule. Any IPv6 multicast group range that matches the permit statement in the ACL will be advertised as an RP served group, while configurations matching other statements like deny will not take effect. priority: Priority of the C-RP, in the range of 0 to 255 and defaulting to 0. A larger value means a lower priority. hold-interval: C-RP timeout time, in seconds. The effective range is 1 to 65,535.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS Parameter interval: C-RP-Adv interval in seconds, with an effective range of 1 to 65,535. Description Use the c-rp advertisement-interval command to configure the interval at which C-RP-Adv messages are sent. Use the undo c-rp advertisement-interval command to restore the default setting. By default, the C-RP-Adv interval is 60 seconds. Related command: Example c-rp (IPv6 PIM view). # Set the global C-RP-Adv interval to 30 seconds.
crp-policy (IPv6 PIM view) Syntax crp-policy acl6-number undo crp-policy View IPv6 PIM view Parameter acl6-number: Advanced IPv6 ACL number, in the range of 3000 to 3999. When the IPv6 ACL is defined, the source keyword in the rule command specifies the IPv6 address of a C-RP and the destination keyword specifies the IPv6 address range of the IPv6 multicast groups that the C-RP will serve.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS display pim ipv6 bsr-info Elected BSR Address: 2004::2 Priority: 0 Hash mask length: 126 State: Elected Uptime: 00:01:10 Next BSR message scheduled at: 00:00:48 Candidate BSR Address: 2004::2 Priority: 0 Hash mask length: 126 State: Elected Candidate RP: 2001::1(LoopBack1) Priority: 0 HoldTime: 130 Advertisement Interval: 60 Next advertisement scheduled at: 00:00:48 Candidate RP: 2002::1(Ethernet1/0) Priority: 20 HoldTime: 90 Advertisement Interva
Parameter Description ipv6-source-address: Displays the information of the IPv6 unicast route to a particular IPv6 multicast source. If you do not provide this argument, this command will display the information about all IPv6 unicast routes used by IPv6 PIM. Use the display pim ipv6 claimed-route command to view the information of IPv6 unicast routes used by IPv6 PIM. If an (S, G) is marked SPT, this (S, G) entry uses an IPv6 unicast route.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS crp: Displays the number of C-RP-Adv messages. graft: Displays the number of graft messages. graft-ack: Displays the number of graft-ack messages. hello: Displays the number of hello messages. join-prune: Displays the number of join/prune messages. state-refresh: Displays the number of state refresh messages. Description Example Use the display pim ipv6 control-message counters command to view the statistics information of IPv6 PIM control messages.
Table 356 Description on the fields of the display pim ipv6 control-message counters command Field Description C-RP C-RP-Adv messages display pim ipv6 grafts Syntax View Parameter Description Example display pim ipv6 grafts Any view None Use the display pim ipv6 grafts command to view the information about unacknowledged graft messages. # View the information about unacknowledged graft messages.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS display pim ipv6 interface ethernet 1/0 verbose Interface; Ethernet1/0, FE80::200:5EFF:FE04:8700 PIM version: 2 PIM mode: Sparse PIM DR: FE80::200:AFF:FE01:101 PIM DR Priority (configured): 1 PIM neighbor count: 1 PIM hello interval: 30 s PIM LAN delay (negotiated): 500 ms PIM LAN delay (configured): 500 ms PIM override interval (negotiated): 2500 ms PIM override interval (configured): 2500 ms PIM neighbor tracking (negotiated): disabled PIM neigh
Table 358 Description on the fields of the display pim ipv6 interface command Field Description PIM J/P hold interval Join/prune timeout time PIM BSR domain border BSR administrative scoping status (enabled/disabled) Number of routers on network not using DR priority Number of routers not using the DR priority field on the subnet where the interface resides Number of routers on network not using LAN delay Number of routers not using the LAN delay field on the subnet where the interface reside
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS ------------------------------------------------------------------------Total (*, G) join(s): 1, (S, G) join(s): 0, (S, G, rpt) prune(s): 1 Table 359 Description on the fields of the display pim join-prune command Field Description Expiry Time: Expiry time of sending join/prune messages Upstream nbr: IPv6 address of the upstream IPv6 PIM neighbor and the interface connecting to it (*, G) join(s) Number of (*, G) joins to send (S, G) join(s) Number
display pim ipv6 routing-table Syntax View Parameter display pim ipv6 routing-table [ ipv6-group-address [ prefix-length ] | ipv6-source-address [ prefix-length ] | incoming-interface [ interface-type interface-number | register ] | outgoing-interface { include | exclude | match } { interface-type interface-number | register } | mode mode-type | flags flag-value | fsm ] * Any view ipv6-group-address: Specifies an IPv6 multicast group by its address, in the range of FFxy::/16, where x and y represent
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS ■ del: Specifies IPv6 multicast routing entries scheduled to be deleted. ■ exprune: Specifies multicast routing entries containing outgoing interfaces pruned by other IPv6 multicast routing protocols. ■ ext: Specifies IPv6 routing entries containing outgoing interfaces contributed by other IPv6 multicast routing protocols. ■ loc: Specifies IPv6 multicast routing entries on routers directly connecting to the same subnet with the IPv6 multicast source.
Table 361 Description on the fields of the display pim ipv6 routing-table command Field Description RPF prime neighbor RPF neighbor of the (S, G) or (*, G) entry Downstream interface(s) information ■ For a (*, G) entry, if this router is the RP, the RPF neighbor of this (*, G) entry is NULL. ■ For a (S, G) entry, if this router directly connects to the IPv6 multicast source, the RPF neighbor of this (S, G) entry is NULL.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS Table 362 Description on the fields of the display pim ipv6 rp-info command Field Description prefix/prefix length The IPv6 multicast group served by the RP RP IPv6 address of the RP Priority RP priority HoldTime Timeout time of the RP Uptime Length of time since the RP was elected Expires Remaining time of the RP embedded-rp Syntax embedded-rp [ acl6-number ] undo embedded-rp [ acl6-number ] View Parameter Description IPv6 PIM view acl6-nu
system-view [Sysname] acl ipv6 number 2000 [Sysname-acl6-basic-2000] rule permit source ff7e:140:20::101 64 [Sysname-acl6-basic-2000] quit [Sysname] pim ipv6 [Sysname-pim6] embedded-rp 2000 hello-option dr-priority (IPv6 PIM view) Syntax hello-option dr-priority priority undo hello-option dr-priority View IPv6 PIM view Parameter priority: Router priority for DR election, in the range of 0 to 4294967295. A larger value of this argument means a higher priority.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS By default, the IPv6 PIM neighbor timeout time is 105 seconds. Related command: Example pim ipv6 hello-option holdtime. # Set the IPv6 PIM neighbor timeout time to 120 seconds globally.
Description Use the hello-option neighbor-tracking command to globally disable join suppression, namely enable neighbor tracking. Use the undo hello-option neighbor-tracking command to enable join suppression. By default, join suppression is enabled, namely neighbor tracking is disabled. Related command: Example pim ipv6 hello-option neighbor-tracking. # Disable join suppression globally.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS View Parameter Description IPv6 PIM view interval: Assert timeout time in seconds, with an effective range of 7 to 2,147,483,647. Use the holdtime assert command to configure the global value of the assert timeout time. Use the undo holdtime assert command to restore the default setting. By default, the assert timeout time is 180 seconds.
jp-pkt-size (IPv6 PIM view) Syntax jp-pkt-size packet-size undo jp-pkt-size View IPv6 PIM view Parameter packet-size: Maximum size of join/prune messages in bytes, with an effective range of 100 to 64000. Description Use the jp-pkt-size command to configure the maximum size of join/prune messages. Use the undo jp-pkt-size command to restore the default setting. By default, the maximum size of join/prune messages is 8,100 bytes. Related command: Example jp-queue-size (IPv6 PIM view).
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS MTU of the network. As a result, the products that do not support fragmentation will drop the join/prune message. ■ The (S, G) join/prune state hold time on the upstream device. If you configure a small queue size, the outgoing interface of the corresponding entry may have been pruned due to timeout before the last join/prune message in a queue reaches the upstream device.
View Parameter Description Interface view None Use the pim ipv6 bsr-boundary command to configure a BSR admin-scope region boundary on the current interface. Use the undo pim ipv6 bsr-boundary command to remove the configured BSR admin-scope region boundary. By default, no BSR admin-scope region boundary is configured. Related command: Example c-bsr (IPv6 PIM view), multicast ipv6 boundary on page 1436. # Configure Ethernet 1/0 to be the boundary of the BSR admin-scope region.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS pim ipv6 hello-option dr-priority Syntax pim ipv6 hello-option dr-priority priority undo pim ipv6 hello-option dr-priority View Interface view Parameter priority: Router priority for DR election, in the range of 0 to 4294967295. A larger value of this argument means a higher priority. Description Use the pim ipv6 hello-option dr-priority command to configure the router priority for DR election on the current interface.
Example # Set the IPv6 PIM neighbor timeout time to 120 seconds on Ethernet 1/0. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] pim ipv6 hello-option holdtime 120 pim ipv6 hello-option lan-delay Syntax pim ipv6 hello-option lan-delay interval undo pim ipv6 hello-option lan-delay View Parameter Description Interface view interval: Prune delay in milliseconds, with an effective range of 1 to 32,767.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS Related command: Example hello-option neighbor-tracking (IPv6 PIM view). # Disable join suppression on Ethernet 1/0.
Use the undo pim ipv6 holdtime assert command to restore the default setting. By default, the assert timeout time is 180 seconds. Related command: Example holdtime join-prune (IPv6 PIM view), pim ipv6 holdtime join-prune, and holdtime assert (IPv6 PIM view). # Set the assert timeout time to 100 seconds on Ethernet 1/0.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS Parameter Description None Use the pim ipv6 require-genid command enable rejection of hello messages without Generation_ID. Use the undo pim ipv6 require-genid command to restore the default configuration. By default, hello messages without Generation_ID are accepted. Example # Enable Ethernet 1/0 to reject hello messages without Generation_ID.
Description Use the pim ipv6 state-refresh-capable command to enable the state fresh feature on the interface. Use the undo pim ipv6 state-refresh-capable command to disable the state fresh feature. By default, the state refresh feature is enabled. Related command: Example state-refresh-interval (IPv6 PIM view), state-refresh-rate-limit (IPv6 PIM view), and state-refresh-hoplimit. # Disable state refresh on Ethernet 1/0.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS Description Use the pim ipv6 timer hello command to configure on the current interface the interval at which hello messages are sent. Use the undo pim ipv6 timer hello command to restore the default setting. By default, hello messages are sent at the interval of 30 seconds. Related command: Example timer hello (IPv6 PIM view). # Set the hello interval to 40 seconds on Ethernet 1/0.
Parameter Description interval: Maximum delay in seconds between hello messages, with an effective range of 1 to 5. Use the pim ipv6 triggered-hello-delay command to configure the maximum delay between hello messages. Use the undo pim ipv6 triggered-hello-delay command to restore the default setting. By default, the maximum delay between hello messages is 5 seconds. Example # Set the maximum delay between hello messages to 3 seconds on Ethernet 1/0.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS Parameter Description acl6-number: Advanced IPv6 ACL number, in the range of 3000 to 3999. Only register messages that match the permit statement of the IPv6 ACL can be accepted by the RP. Use the register-policy command to configure an IPv6 ACL rule to filter register messages. Use the undo register-policy command to remove the configured register filtering rule. By default, no register filtering rule is configured.
register-whole-checksum (IPv6 PIM view) Syntax register-whole-checksum undo register-whole-checksum View Parameter Description IPv6 PIM view None Use the register-whole-checksum command to configure the router to calculate the checksum based on the entire register message. Use the undo register-whole-checksum command to restore the default configuration. By default, the checksum is calculated based only on the header in the register message.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS source-lifetime (IPv6 PIM view) Syntax source-lifetime interval undo source-lifetime View Parameter Description IPv6 PIM view interval: IPv6 multicast source lifetime in seconds, with an effective range of 1 to 65,535. Use the source-lifetime command to configure the IPv6 multicast source lifetime. Use the undo source-lifetime command to restore the default setting. By default, the lifetime of an IPv6 multicast source is 210 seconds.
Example ■ If you specify an advanced ACL, the device filters all received IPv6 multicast packets based on the source and group addresses, and discards packets that fail the match. ■ If this command is executed repeatedly, the last configuration will take effect. # Configure the router to accept IPv6 multicast packets originated from 3121::1 and discard IPv6 multicast packets originated from 3121::2.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS By default, the device switches to the SPT immediately after it receives the first IPv6 multicast packet from the RPT. Note that: Example ■ To adjust the order of an IPv6 ACL that already exists in the group-policy list, you can use the acl6-number argument to specify this IPv6 ACL and set its order-value. This will insert the IPv6 ACL to the position of order-value in the group-policy list.
By default, the IPv6 SSM group range is FF3x::/32, where x represents any legal scope. This command allows you to define an address range of permitted or denied IPv6 multicast sources or IPv6 multicast groups. If the match succeeds, the running multicast mode will be IPv6 PIM-SSM; otherwise the multicast mode will be IPv6 PIM-SM. Example # Configure FF3E:0:8192::/96 as the IPv6 SSM group range.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS Parameter interval: State refresh interval in seconds, with an effective range of 1 to 255. Description Use the state-refresh-interval command to configure the interval between state refresh messages. Use the undo state-refresh-interval command to restore the default setting. By default, the state refresh interval is 60 seconds.
undo static-rp ipv6-rp-address View Parameter IPv6 PIM view ipv6-rp-address: IPv6 address of the static RP to be configured. This address must be a valid, globally scoped IPv6 unicast address. acl6-number: Basic IPv6 ACL number, in the range of 2000 to 2999. If you provide this argument, the configured static RP will serve only those IPv6 multicast groups that pass the filtering; otherwise, the configured static RP will serve the all IPv6 multicast groups.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS View Parameter Description IPv6 PIM view interval: Hello interval in seconds, with an effective range of 1 to 2,147,483,647. Use the timer hello command to configure the hello interval globally. Use the undo timer hello command to restore the default setting. By default, hello messages are sent at the interval of 30 seconds. Related command: Example pim ipv6 timer hello. # Set the global hello interval to 40 seconds.
View Parameter Description IPv6 PIM view interval: Interval in seconds between checks of the traffic rate threshold prior to RPT-to-SPT switchover, in the range of 15 to 65,535. Use the timer spt-switch command to configure the interval between checks of the traffic rate threshold before RPT-to-SPT switchover. Use the undo timer spt-switch command to restore the default setting. By default, the traffic rate threshold is checked at an interval of 15 seconds before RPT-to-SPT switchover.
CHAPTER 93: IPV6 PIM CONFIGURATION COMMANDS
MULTICAST VPN CONFIGURATION COMMANDS 94 display multicast-domain vpn-instance share-group Syntax View display multicast-domain vpn-instance vpn-instance-name share-group Any view Parameters vpn-instance-name: VPN instance name, a case sensitive string of up to 31 characters. Description Use the display multicast-domain vpn-instance share-group command to view the share-group information of the specified VPN instance in the MD.
CHAPTER 94: MULTICAST VPN CONFIGURATION COMMANDS active: Displays the received switch-group information about active multicast domains. group-address: Public network multicast group address, in the range of 224.0.1.0 to 239.255.255.255. source-address: Public network multicast source address. vpn-source-address: VPN multicast source address. mask: Subnet mask of the specified VPN multicast source/group address, 255.255.255.255 by default.
Table 364 Description on the fields of the display multicast-domain vpn-instance switch-group receive command Field Description switch group Switch-group received sender BGP peer address of the PE device that sent the switch-group information ref count Number of VPN multicast groups referenced by the switch-group active count Number of active VPN multicast groups (multicast groups with active receivers) referenced by the switch-group expire time Remaining time of the VPN (S, G) entry refere
CHAPTER 94: MULTICAST VPN CONFIGURATION COMMANDS display multicast-domain vpn-instance mvpn switch-group send MD switch-group information sent by VPN-Instance: mvpn Total 2 switch-groups for 6 entries Total 2 switch-groups for 6 entries matched 226.1.1.0 reference_count: 3 (192.6.1.5, 239.1.1.1) (192.6.1.5, 239.1.1.158) (192.6.1.5, 239.1.2.50) 226.1.1.1 reference_count: 3 (192.6.1.2, 225.1.1.1) (192.6.1.2, 225.1.2.50) (192.6.1.5, 239.1.1.
By default, the backward MDT switching delay is 60 seconds. Note that this command cannot be configured without the previous share-MDT configuration in the VPN instance. Examples # Set the backward MDT switching delay to 80 seconds in VPN instance mvpn.
CHAPTER 94: MULTICAST VPN CONFIGURATION COMMANDS mtunnel-number: Number of the MTI interface to be created, in the range of 0 to 127. Description Use the multicast-domain share-group command to configure a share-group address and associate an MTI with the current VPN instance. Use the undo multicast-domain share-group command to restore the system default. By default, no share-group address is configured and no MTI is associated with a VPN instance.
Parameters switch-delay: MDT switching delay in seconds, namely the delay time for multicast traffic to be switched from the share-MDT to the switch-MDT, in the range of 3 to 60. Description Use the multicast-domain switch-delay command to configure the MDT switching delay. Use the undo multicast-domain switch-delay command to restore the system default. By default, the MDT switching delay time is 5 seconds. Examples # Set the MDT switching delay to 20 seconds in VPN instance mvpn.
CHAPTER 94: MULTICAST VPN CONFIGURATION COMMANDS By default, no switch-group-pool is configured and multicast traffic is never switched to a switch-MDT. Note that: Examples ■ This command cannot be configured without the previous share-MDT configuration in the VPN instance. ■ On a given PE device, the switch-group address range for a VPN must not contain the share-group of any VPN.
MPLS BASICS CONFIGURATION COMMANDS 95 n ■ Currently, these interface types support MPLS capability and LDP capability: serial interface, async interface, Layer 3 Ethernet interface (Ethernet interface, GE interface, and XGE interface), ATM interface, POS interface, Layer 3 virtual Ethernet interface (that is, virtual-Ethernet interface), virtual template, Mp-group interface, MFR interface, tunnel interface, VLAN interface, and virtual dial template (that is, dialer).
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Table 366 Description on the fields of display mpls fast-forwarding cache n Field Description Label Label used as the index of the fast forwarding cache entry Input_If Incoming interface Output_If Outgoing interface Len Length of the pre-header, in bytes Flg Flag for indicating the packet type. It can be IP, MPLS, or L2VPN.
1024 S2/0 2 1 Record(s) Found 0 POP NORMAL ---- Table 367 Description on the fields of the display mpls ilm command Field Description Inlabel Incoming label In-Interface Incoming interface Token NHLFE entry index VRF-Index VRF index Oper Operation type LSP-Type LSP type Swap-Label Label for swapping display mpls interface Syntax View Parameter display mpls interface [ interface-type interface-number ] [ verbose ] Any view interface-type interface-number: Specifies an interface
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Table 368 Description on the fields of the display mpls interface command n Field Description Status Status of the interface TE Attr/TE Attribute Whether TE is enabled on the interface LSPCount Number of LSPs on the interface CR-LSPCount Number of CR-LSPs on the interface FRR Whether FRR is enabled on the interface. If FRR is enabled, the output will also include the bound tunnels.
Table 369 Description on the fields of the display mpls label command Field Description Label alloc state Label allocation status ’.’ means not used ’.’ means that the label is not used ’$’ means used ’$’ means that the label is used Static Label Static labels Dynamic Label Dynamic labels display mpls ldp Syntax View Parameter display mpls ldp [ all [ verbose ] ] [ | { begin | exclude | include } regular-expression ] Any view all: Displays all LDP information.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS DU Re-advertise Timer : 30 Sec DU Re-advertise Flag : On DU Explicit Request : Off Request Retry Flag : On Label Distribution Mode: Ordered Label Retention Mode : Liberal ----------------------------------------------------------------- Table 370 Description on the fields of the display mpls ldp command Field Description LDP Global Information Global LDP information Protocol Version Version of the LDP protocol Neighbor Liveliness GR neighbor Keep
regular-expression: Regular expression, a string of 1 to 80 characters. No blank space is acceptable. Description Related command: Example Use the display mpls ldp cr-lsp command to display information about CR-LSPs established by LDP. display mpls lsp. # Display information about CR-LSPs established by LDP.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS include: Includes the specified string. exclude: Excludes the specified string. regular-expression: Regular expression, a string of 1 to 80 characters. No blank space is acceptable. Description Related command: Example Use the display mpls ldp interface command to display information about specified or all LDP interfaces. mpls ldp (system view), mpls ldp (interface view). # Display information about all LDP interfaces.
Table 372 Description on the fields of the display mpls ldp interface command Field Description Interface Name Name of an LDP-enabled interface LDP ID LDP identifier Transport Address Transport address of the entity, also used for TCP connection Entity Status Status of the entity, active or inactive Interface MTU MTU of the interface Label Advertisement Mode Label advertisement mode, DoD or DU Configured Keepalive Timer Value of the configured Keepalive timer Configured Hello Timer Va
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Related command: Example display mpls ldp. # Display information about all LSPs established by LDP. display mpls ldp lsp LDP LSP Information -------------------------------------------------------------------------SN DestAddress/Mask In/OutLabel Next-Hop In/Out-Interface -------------------------------------------------------------------------- 1 1.1.1.1/32 3/NULL 127.0.0.1 Ser2/0/InL0 2 10.1.1.0/24 3/NULL 10.1.1.1 Ser2/0/Eth1/1 *3 100.1.1.
all: Display information about all peers. Description Related command: Example Use the display mpls ldp peer command to display information about specified or all peers of the current LSR. mpls ldp (system view), mpls ldp (interface view). # Display information about all peers.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Table 375 Description on the fields of the display mpls ldp peer verbose command Field Description Peer LDP ID LDP identifier of the peer Peer Max PDU Length Maximum PDU length of the peer Peer Keepalive Timer Keepalive timer of the peer Peer Loop Detection Whether loop detection is enabled on the peer Peer Path Vector Limit Limit of the path vector hop count configured on the peer Peer FT Flag Whether GR FT is enabled on the peer Reconnect
Negotiated Hello Timer : 45 Sec Hello Message Sent/Rcvd : 3/2 (Message Count) -------------------------------------------------------------------------- Table 376 Description on the fields of the display mpls ldp remote-peer command Field Description LDP Remote Entity Information Information about the remote LDP peer Remote Peer Name Name of the remote peer Remote Peer IP IP address of the remote peer LDP ID Local LDP identifier Transport Address Transport address of the remote peer Confi
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Description Related command: Example Use the display mpls ldp session command to display information about specified or all sessions. mpls ldp (system view), mpls ldp (interface view). # Display information about sessions.
Label Advertisement Mode Label Resource Status(Peer/Local) Peer Discovery Mechanism Session existed time LDP Basic Discovery Source : : : : : Downstream Unsolicited Available/Available Basic 000:00:06 (DDD:HH:MM) Ethernet1/0 Addresses received from peer: (Count: 3) 10.1.1.2 20.1.1.1 2.2.2.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Parameter vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters. |: Filters the output information. begin: Begins with the specified string. include: Includes the specified string. exclude: Excludes the specified string. regular-expression: Regular expression, a string of 1 to 80 characters. No blank space is acceptable.
interface-type interface-number: Specifies an interface by its type and number. in-label-value: Value of the incoming label, in the range 0 to 1048575. out-label-value: Value of the outgoing label, in the range 0 to 1048575. exclude: Excludes the specified FEC. include: Includes the specified FEC. dest-addr: Destination address. mask-length: Length of the mask for the destination address, in the range 0 to 32. vpn-instance-name: Name of the VPN instance, a case-sensitive string of 1 to 31 characters.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Example # Display information about all LSPs. display mpls lsp ----------------------------------------------------------------------LSP Information: L3VPN LSP ----------------------------------------------------------------------FEC In/Out Label In/Out IF Route-Distinguisher Vrf Name 100.1.1.
Table 380 Description on the fields of the display mpls lsp verbose command Field Description LspIndex LSP index number Token Token (the pubic network) LsrType Role of the LSR for the LSP Outgoing Token Token (inter-AS VPN) display mpls lsp statistics Syntax View Parameter Description Example display mpls lsp statistics Any view None Use the display mpls lsp statistics command to display LSP statistics. # Display LSP statistics.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS View Parameters Any view token: NHLFE entry index. The value range varies by device. include text: Specifies NHLFE entries including a specified string. Description Use the display mpls nhlfe command to display information about the NHLFE table. With the token argument not specified, the command displays information about all NHLFE entries. Examples # Display information about a specified NHLFE entry.
Description Use the display mpls route-state command to display route related information. With no VPN instance specified, the command displays route related information of the public network. With the dest-addr dest-mask arguments not specified, the command displays all route related information. Example # Display all route related information.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Example # Display brief information about static LSPs. display mpls static-lsp Name FEC I/O Label lsp1 3.3.3.
Parameter interface-type interface-number: Specifies an interface by its type and number. all: Displays MPLS statistics for all interfaces. Description Use the display mpls statistics interface command to display MPLS statistics for a specified or all interfaces. To display statistics, set the statistics interval first. By default, the interval is 0 and the system does not collect MPLS statistics, in which case the value of every statistical item is 0.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Failed Label Lookup Start Time End Time Statistics for Interface OUT Outgoing Interface Serial2/0 Octets Packets Errors Disables Start Time End Time : 0 : 2004/04/28 : 2004/04/28 : : : : : : : 0 0 0 0 2004/04/28 2004/04/28 10:24:10 10:24:10 10:24:10 10:24:10 Table 386 Description on the fields of display mpls statistics interface Field Description Statistics for Interface IN Statistics for an interface in the incoming direction Incoming Interfac
Description Use the display mpls statistics lsp command to display MPLS statistics for a specified or all LSPs. To display the statistics, set the statistics interval first. By default, the interval is 0 and the system does not collect LSP statistics, in which case the value of every statistical item is 0. Related command: Example statistics interval. # Display MPLS statistics for all LSPs.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS n ■ For an ingress, no statistics is collected in the incoming direction and the start time and end time in the InSegment part of the command output are both 0. ■ Similarly, for an egress, no statistics is collected in the outgoing direction and the start time and end time in the OutSegment part of the command output are both 0.
By default, the interval for label readvertisement in DU mode is 30 seconds. Example # Set the DU mode label readvertisement interval to 100 seconds for the public network LDP. system-view [Sysname] mpls ldp [Sysname-mpls-ldp] du-readvertise timer 100 # Set the DU mode label readvertisement interval to 100 seconds for LDP instance named vpn1.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Description Use the graceful-restart mpls ldp command to gracefully restart MPLS LDP. Note that: Related commands: Example ■ This command is used to test MPLS LDP GR without main/backup failover. It is not recommended in normal cases. ■ The MPLS LDP GR capability is required for this command to take effect. graceful-restart (MPLS LDP view). # Gracefully restart MPLS LDP.
undo graceful-restart timer reconnect View Parameter Description MPLS LDP view timer: Fault Tolerance (FT) reconnect time, in the range 60 to 300 seconds. Use the graceful-restart timer reconnect command to set the FT reconnect time. Use the undo graceful-restart timer reconnect command to restore the default. By default, the FT reconnect time is 300 seconds.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS ■ Example Modifying the LDP recovery time may cause the original sessions to be reestablished. The LSPs based on the sessions will be removed and need to be reestablished. # Set the LDP recovery time to 45 seconds.
undo label advertise View Parameter MPLS view explicit-null: Specifies that the egress does not support PHP and distributes to the penultimate hop an explicit null label, whose value is 0. implicit-null: Specifies that the egress supports PHP and distributes to the penultimate hop an implicit null label, whose value is 3. non-null: Specifies that the egress distributes the label to the penultimate hop normally and does not support PHP.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS The default mode is ordered. n Example You must use the reset mpls ldp command to reset LDP sessions for the configuration to take effect. # Set the label distribution control mode to independent for the public network LDP. system-view [Sysname] mpls ldp [Sysname-mpls-ldp] label-distribution independent # Set the label distribution control mode to independent for LDP instance named vpn1.
loop-detect Syntax loop-detect undo loop-detect View Parameter Description MPLS LDP view/MPLS LDP VPN instance view None Use the loop-detect command to enable loop detection. Use the undo loop-detect command to disable loop detection. By default, loop detection is disabled. Note that you must enable loop detection before enabling LDP on any interfaces. Related command: Example hops-count, path-vectors. # Enable loop detection for the public network LDP.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS By default, only loopback addresses with 32-bit masks can trigger LDP to establish LSPs. Note that: Example ■ With the all keyword specified in the lsp-trigger command, all static and IGP routes can trigger LDP to establish LSPs. ■ Using ip-prefix prefix-name keyword and argument combination in the lsp-trigger command, only IGP routes surviving the IGP route filtering based on an IP address prefix list can trigger LDP to establish LSPs.
md5-password Syntax md5-password { cipher | plain } peer-lsr-id password undo md5-password peer-lsr-id View MPLS LDP view/MPLS LDP VPN instance view Parameter cipher: Displays the password in cipher text. plain: Displays the password in plain text. peer-lsr-id: MPLS LSR ID of the peer. An LSR and its peer use the same password. password: Password string, case sensitive. If you specify the plain keyword, it must be a string of 1 to 16 characters in plain text.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS View Parameter Description System view/interface view None Use the mpls command in system view to enable MPLS for the current node and enter MPLS view. Use the undo mpls command in system view to disable MPLS for the current node. Use the mpls command in interface view to enable MPLS for the interface. Use the undo mpls command in interface view to disable MPLS for the interface. By default, MPLS capability is not enabled.
Use the undo mpls ldp command to disable LDP for the current node and remove all LDP instances Use the mpls ldp vpn-instance command to enable LDP for a VPN instance, create an LDP instance, and enter MPLS LDP VPN instance view. Use the undo mpls ldp vpn-instance command to disable LDP for a VPN instance. Configure the mpls ldp command after configuring MPLS LSR ID and enabling MPLS for the current node. Example # Enable LDP for the current node. System-view [Sysname] mpls lsr-id 1.1.1.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS If the interface is bound to a VPN instance, you must use the mpls ldp vpn-instance command to enable LDP for the VPN instance before enabling LDP on the interface to add the interface into the VPN instance.
mpls ldp remote-peer Syntax mpls ldp remote-peer remote-peer-name undo mpls ldp remote-peer remote-peer-name View Parameter Description System view remote-peer-name: Name of the remote peer, a case-insensitive string of 1 to 32 characters. Use the mpls ldp remote-peer command to create a remote peer entity and enter MPLS LDP remote peer view. Use the undo mpls ldp remote-peer command to remove a remote peer entity. Related command: Example remote-ip. # Create a remote peer entity named BJI.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Example # Set the link Hello timer for local sessions to 100 seconds on interface Ethernet 1/0. System-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] mpls [Sysname-Ethernet1/0] mpls ldp [Sysname-Ethernet1/0] mpls ldp timer hello-hold 100 # Set the targeted Hello timer for remote sessions to 1,000 seconds. System-view [Sysname] mpls ldp remote-peer BJI [Sysname-mpls-ldp-remote-bji] remote-ip 3.3.3.
# Set the targeted Keepalive timer for remote sessions to 1,000 seconds. System-view [Sysname] mpls ldp remote-peer BJI [Sysname-mpls-ldp-remote-bji] remote-ip 3.3.3.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS View Parameter Description System view lsr-id: ID for identifying the LSR, in dotted decimal notation. Use the mpls lsr-id command to configure the ID of an LSR. Use the undo mpls lsr-id command to remove the ID of an LSR. By default, no LSR ID is configured. Your must configure the LSR ID of an LSR before configuring any other MPLS commands. You are recommended to use the address of a loopback interface on the LSR as the ID.
path-vectors Syntax path-vectors pv-number undo path-vectors View Parameter Description MPLS LDP VPN instance view/MPLS LDP view pv-number: Path vector maximum hop count, in the range 1 to 32. Use the path-vectors command to set the path vector maximum hop count. Use the undo path-vectors command to restore the default. By default, the path vector maximum hop count for an instance is 32. Note that this command takes effect only when MPLS LDP is enabled on all interfaces.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS -h ttl-value: Specifies the TTL value for the echo request message. The ttl-value argument ranges from 1 to 255. -m wait-time: Specifies the interval for sending echo request messages. The wait-time argument ranges from 1 to 10,000. -r reply-mode: Specifies the reply mode in response to an echo request message. The reply-mode argument can be 1 or 2. A value of 1 means “Do not response”, while a value of 2 means “Respond using a UDP packet”.
View Parameter Description MPLS LDP remote peer view ip-address: IP address of the remote peer. Use the remote-ip command to configure the LDP remote peer IP address. Use the undo remote-ip command to remove the configuration. Note that the LDP remote peer IP address must be the MPLS LSR ID of the remote peer. Two peers use their respective MPLS LSR ID as the transport addresses to establish the TCP connection. Related command: Example mpls ldp remote-peer.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Description Use the reset mpls ldp command to reset LDP sessions. With no parameters specified, the command resets the sessions of all public network LDP instances. Example # Reset the sessions of all public network LDP instances. reset mpls ldp # Reset the sessions of all LDP instances. reset mpls ldp all # Reset the sessions of LDP instance vpn1.
Parameter index: Index number of the LSP, in the range 0 to 4,294,967,295. all: Specifies all LSPs. lsp-name: Name of the LSP, a string of 1 to 15 characters. Description Related command: Example Use the reset mpls statistics lsp command to clear MPLS statistics for a specified or all LSPs. display mpls statistics lsp. # Clear MPLS statistics for LSP lsp1.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS in-label: Incoming label value, in the range 16 to 1,023. Description Use the static-lsp egress command to configure a static LSP taking the current LSR as the egress. Use the undo static-lsp egress command to remove a static LSP taking the current LSR as the egress. Related command: Example static-lsp ingress, static-lsp transit, display mpls static-lsp. # Configure a static LSP named bj-sh, taking the current LSR as the egress.
Related command: Example ■ If you specify the outgoing interface when configuring a static LSP, you must also specify the outgoing interface when configuring the static IP route. ■ The address of the next hop cannot be any local public network IP address. static-lsp egress, static-lsp transit, display mpls static-lsp. # Configure a static LSP to destination address 202.25.38.1, taking the current LSR as the ingress. system-view [Sysname] static-lsp ingress bj-sh destination 202.25.38.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Related command: Example static-lsp egress, static-lsp ingress. # Configure a static LSP, taking interface Serial 2/0 as the incoming interface and setting the incoming label as 123 and the outgoing label as 253. system-view [Sysname] static-lsp transit bj-sh incoming-interface serial 2/0 inlabel 123 nexthop 202.34.114.
-r reply-mode: Specifies the reply mode in response to an echo request message. The reply-mode argument can be 1 or 2. A value of 1 means “Do not response”, while a value of 2 means “Respond using a UDP packet”. -t time-out: Specifies the timeout interval for the response to an echo request message. The time-out argument ranges from 0 to 65,535 milliseconds. ipv4 dest-addr mask: Specifies the LDP Ipv4 destination address and the mask. The mask argument ranges from 0 to 32.
CHAPTER 95: MPLS BASICS CONFIGURATION COMMANDS Related command: Example ttl propagate. # Specify that the ICMP response be transported back along the LSP when the TTL of an MPLS packet expires system-view [Sysname] mpls [Sysname-mpls] undo ttl expiration pop ttl propagate Syntax ttl propagate { public | vpn } undo ttl propagate { public | vpn } View Parameter MPLS view public: Enables MPLS IP TTL propagation for public network packets.
MPLS TE CONFIGURATION COMMANDS 96 n MPLS TE is available on these interfaces: synchronous/asynchronous serial interface (Serial), asynchronous serial interface (Async), Layer 3 Ethernet interface (Ethernet, GE, XGE), ATM interface, POS interface, Layer 3 virtual Ethernet interface (Virtual-Ethernet), virtual template interface, MP group interface, MFR interface, tunnel interface, and VLAN interface.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS system-view [Sysname] explicit-path path1 [Sysname-explicit-path-path1] add hop 3.3.29.3 exclude after 3.3.10.5 delete hop Syntax View Parameter Description Example delete hop ip-address Explicit path view ip-address: IP address of a node along the explicit path. Use the delete hop command to remove a specified node from the explicit path. # Remove the node identified by 10.0.0.1 from the explicit path PL.
7 8 9 2.1.1.30 1.1.1.30 9.4.4.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS INTF ADDR INTF ADDR INTF ADDR : 10.1.1.1 : 1.1.1.9 : 30.1.1.1 Level-2 Link State Database --------------------------LSPID LSP Seq Num 0000.0000.0001.00-00* 0x0000001c LSP Checksum 0xf1ec LSP Holdtime 687 NLPID : IPV4 AREA ADDR : 00.0005 INTF ADDR : 10.1.1.1 INTF ADDR : 1.1.1.9 INTF ADDR : 30.1.1.1 Router ID : 1.1.1.9 +NBR : 0000.0000.0002.02 COST: 10 Admin Group: 0x00000000 Interface IP Address: 10.1.1.
Table 389 Description on the fields of display isis traffic-eng advertisements Field Description LSP Checksum LSP checksum LSP Holdtime LSP holdtime ATT/P/OL Attach bit (ATT) Partition bit (P) Overload bit (OL) NLPID Network protocol type AREA ADDR IS-IS area address INTF ADDR Interface address Router ID Router ID +NBR Neighbor COST Cost Admin Group Link administrative group attribute Interface IP Address Interface IP address Physical BW Physical bandwidth Reservable BW Rese
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS vpn-instance vpn-instance-name: Specifies a VPN instance. The vpn-instance-name argument is a string of 1 to 31 characters. For the default VPN instance, you do not need to configure this keyword and argument combination. Description Use the display isis traffic-eng link command to display information about TE links for IS-IS. If no IS-IS level is specified, the TE link information of IS-IS Level-1-2 routers is displayed.
Description Use the display isis traffic-eng network command to display information about TE networks for IS-IS. If no IS-IS level is specified, the TE network information in the IS-IS Level-1-2 area is displayed. Example # Display information about TE networks for IS-IS. display isis traffic-eng network TE information for ISIS(1) -------------------------Level-1 Network Information --------------------------DIS Router ID : 89.1.1.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS vpn-instance vpn-instance-name: Specifies a VPN instance. The vpn-instance-name argument is a string of 1 to 31 characters. For the default VPN instance, you do not need to configure this keyword and argument combination. Description Use the display isis traffic-eng statistics command to display the statistics about TE for IS-IS. If no IS-IS level is specified, the statistics about TE in the IS-IS Level-1-2 area is displayed.
Example # Display TE sub-TLV information for IS-IS.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Blockade Multiplier: 4 Graceful Restart: ENABLE Restart Time: 200 sec Recovery Time: 150 sec Table 394 Description on the fields of the display mpls rsvp-te command Field Description LSR ID Label switched Router ID, in the format of X.X.X.
display mpls rsvp-te established Syntax View Parameter display mpls rsvp-te established [ interface interface-type interface-number ] [ | { begin | include | exclude } regular-expression ] Any view interface interface-type interface-number: Specifies an interface by its type and number. |: Filters output by regular expression. begin: Displays information beginning with a defined regular expression. include: Displays information that includes a defined regular expression.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS display mpls rsvp-te peer Syntax View Parameter display mpls rsvp-te peer [ interface interface-type interface-number ] [ | { begin | include | exclude } regular-expression ] Any view interface interface-type interface-number: Specifies an interface by its type and number. |: Filters output by regular expression. begin: Displays information beginning with a defined regular expression.
Table 397 Description on the fields of the display mpls rsvp-te peer command Field Description RSB Count Number of reservation state blocks Hello Type Sent Type of hellos sent to the neighbor: REQ, ACK, or NONE Neighbor Hello Extension State of hello extension: enabled or disabled. This field is displayed only when hello extension is enabled on the interface.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS InLabel : 3 OutLabel : NULL Send Message ID : 1 Recv Message ID : 0 Session AttributeSetupPrio: 7 HoldPrio: 7 SessionFlag: SE Style desired ERO InformationL-Type ERO-IPAddr ERO-PrefixLen ERHOP_STRICT 101.101.101.2 32 RRO InformationRRO-CType: IPV4 RRO-IPAddress: 101.101.101.1 RRO-IPPrefixLen: 32 SenderTspec InformationToken bucket rate: 0.00 Token bucket size: 0.00 Peak data rate: 0.
Table 398 Description on the fields of display mpls rsvp-te psb content Field Description Path message Path message sent from the interface to the next hop at X.X.X.X Resource Available when the RSVP flag is configured Graceful Restart State State of GR: stale or normal. Displayed as --- when not supported by the device.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Table 399 Description on the fields of the display mpls rsvp-te request command Field Description Next Hop Address Next hop address, in the format of X.X.X.
LSP ID: 1 Upstream Label: 3 Token bucket rate: 0.00 Tunnel ID: 1 Token bucket size: 0.00 Table 400 Description on the fields of display mpls rsvp-te reservation Field Description Interface Ethernet1/0 RSVP-TE enabled Ethernet interface Tunnel Dest Tunnel destination, in the format of X.X.X.X Ingress LSR ID Ingress LSR ID, in the format of X.X.X.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Tunnel Dest: 29.29.29.29 Session Tunnel ID: 0 Tunnel ExtID: 19.19.19.19 Next Hop: 101.101.101.2 Resevation Style: SE Style Reservation Incoming Interface: Ethernet1/0 Reservation Interface: Ethernet1/0 Message ID : 2 Filter Spec InformationThe filter number: 1 Ingress LSR ID: 19.19.19.19 Local LSP ID: 1 OutLabel: 3 Graceful Restart State: Stale RRO InformationRRO-Flag is RRO-CType: IPV4 RRO-IPAddress: 101.101.101.
Table 401 Description on the fields of display mpls rsvp-te rsb content Field Description QOS service QoS guarantee/control Resv Message Reservation message received on a particular interface from next hop (X.X.X.X) Graceful Restart State State of GR: stale or normal. Displayed as --- when not supported by the device.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Tunnel Dest: 29.29.29.29 Ingress LSR ID: 19.19.19.19 LSP ID: 1 Session Tunnel ID: 0 Session Name: Tunnel1 Previous Hop Address: 19.19.19.19 Token bucket rate: 0.0 Token bucket size: 0.00 Table 402 Description on fields of the display mpls rsvp-te sender command Field Description Interface Ethernet1/0 RSVP-TE enabled Ethernet interface Tunnel Dest Tunnel destination, in the format of X.X.X.X Ingress LSR ID Ingress LSR ID, in the format of X.X.X.
SendAckCounter: 48 SendPathErrCounter: 0 SendResvErrCounter: 0 SendPathTearCounter: 0 SendResvTearCounter: 0 SendSrefreshCounter: 0 SendAckMsgCounter: 0 SendErrMsgCounter: 0 RecReqFaultCounter: 0 RecAckCounter: 2 RecPathErrCounter: 0 RecResvErrCounter: 0 RecPathTearCounter: 0 RecResvTearCounter: 0 RecSrefreshCounter: 0 RecAckMsgCounter: 0 RecErrMsgCounter: 0 # Display the RSVP-TE statistics of interface Serial 1/0.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Table 403 Description on the fields of the display mpls rsvp-te statistics command Field Description RecAckCounter Number of received Ack messages SendPathErrCounter Number of transmitted PathErr messages RecPathErrCounter Number of received PathErr messages SendResvErrCounter Number of transmitted ResvErr messages RecResvErrCounter Number of received ResvErr messages SendPathTearCounter Number of transmitted PathTear messages RecPathTearCounte
Name Tunnel0 FEC 3.3.3.9/32 I/O Label NULL/100 I/O If -/Eth1/0 Stat Down Table 404 Description on the fields of the display mpls static-cr-lsp command Field Description Name Static CR-LSP name FEC Forwarding equivalence class (FEC) associated with the destination IP address of LSP I/O Label Incoming/outgoing label I/O If Incoming/outgoing interface Stat Current state of the CR-LSP # Display detailed information about all static CR-LSPs.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS ip-address: IP address of an interface. network-lsa: Displays traffic engineering database (TEDB) information in network LSAs. node: Displays the TEDB information on nodes. If no node is specified, the TEDB information on all nodes is displayed. mpls-lsr-id: Specifies a node by its MPLS LSR ID. |: Filters output by regular expression. begin: Displays information beginning with a defined regular expression.
Table 406 Description on the fields of the display mpls te cspf tedb command Field Description Process-Id IGP process ID Area Area to which the router belongs Neighbor Neighbor router ID # Display all TEDB information. display mpls te cspf tedb all Maximum Node Supported: 1000 Maximum Link Supported: 4000 Current Total Node Number: 3 Current Total Link Number: 44 Id MPLS LSR-Id IGP Process-Id Area Link-Count 1 1.1.1.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Table 408 Description on the fields of the display mpls te cspf tedb area command Field Description Link-Count Total number of connected links belonging to a particular IGP protocol process DR MPLS LSR-Id MPLS LSR ID of the DR DR-Address Interface address of the DR Neighbor MPLS LSR ID of the neighbor # Display the TEDB information of all nodes. display mpls te cspf tedb node MPLS LSR-Id: 1.1.1.
[0] : [2] : [4] : [6] : BW Unreserved [0] : [2] : [4] : [6] : 10 (kbps), 10 (kbps), 10 (kbps), 10 (kbps), for Class type 1: 10 (kbps), 10 (kbps), 10 (kbps), 10 (kbps), [1] [3] [5] [7] : : : : 10 10 10 10 (kbps) (kbps) (kbps) (kbps) [1] [3] [5] [7] : : : : 10 10 10 10 (kbps) (kbps) (kbps) (kbps) Table 409 Description on the fields of the display mpls te cspf tedb node command Field Description MPLS LSR-Id MPLS LSR ID of node IGP_Type IGP type Process Id IGP process ID MPLS-TE Link Cou
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS [6] : BW Unreserved [0] : [2] : [4] : [6] : 0 (kbps), for Class type 1: 0 (kbps), 0 (kbps), 0 (kbps), 0 (kbps), [7] : 0 (kbps) [1] [3] [5] [7] 0 0 0 0 (kbps) (kbps) (kbps) (kbps) : : : : Table 410 Description on the fields of display mpls te cspf tedb interface Field Description MPLS LSR-Id MPLS LSR ID of node IGP_Type IGP type Process Id IGP process ID MPLS-TE Link Count Number of MPLS TE links Link[x] Specific link, with the bracketed x
1.1.1.9:1024 1.1.1.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS 12 13 14 15 1 1 1 1 4 5 6 7 0 0 0 0 0 0 0 0 Table 412 Description on the fields of the command Field Description Link ID Link ID Physical Bandwidth Type0 CT0 physical bandwidth Physical Bandwidth Type1 CT1 physical bandwidth Reservable Bandwidth Type0 CT0 reservable bandwidth Reservable Bandwidth Type1 CT1 reservable bandwidth Downstream LSP Count Number of downstream LSPs UpStream LSP Count Number of upstream LSPs IPUpdown Link Status
incoming-interface: Displays all tunnels that use the interface identified by the interface-type interface-number arguments as the incoming interface. outgoing-interface: Displays all tunnels that use the interface identified by the interface-type interface-number arguments as the outgoing interface. interface: Displays all tunnels that use the interface identified by the interface-type interface-number arguments as the incoming or outgoing interface.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Table 414 Description on the fields of the display mpls te tunnel verbose command Field Description No Number LSP-Id LSP ID of tunnel Tunnel-Name Tunnel name configured on the ingress node Destination Destination router ID In-Interface Incoming interface Out-Interface Outgoing interface Tunnel BW Tunnel bandwidth Class Type Service class type Ingress LSR-Id Ingress LSR ID Setup-Priority Setup priority of link Hold-Priority Holding prio
Table 415 Description on the fields of the display mpls te tunnel path command Field Description Tunnel Interface Name Tunnel0 Tunnel interface name, Tunnel0 in this sample output Lsp ID LSP ID Hop 0 Hop 0 on the path Hop 1 Hop 1 on the path Hop 2 Hop 2 on the path display mpls te tunnel statistics Syntax View Parameter Description Example display mpls te tunnel statistics Any view None Use the display mpls te tunnel statistics command to display statistics about MPLS TE tunnels.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Tunnel Desc : Tunnel Interface Tunnel State Desc : CR-LSP is Up Tunnel Attributes : LSP ID : 1.1.1.9:1 Session ID : 0 Admin State : UP Ingress LSR ID : 1.1.1.
Table 417 Description on the fields of display mpls te tunnel-interface command Field Description BackUpBW Flag Backup bandwidth flag BackUpBW Type Backup bandwidth type BackUpBW Backup bandwidth Route Pinning Route pinning function Retry Limit Maximum number of setup retries Retry Interval Retry interval Reopt State of the reoptimization function Reopt Freq Reoptimization interval Back Up Type Backup path type Back Up LSPID Backup LSP ID Auto BW State of the automatic bandwidth
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS LSA [] -----------------------------------------------LSA Type : Opq-Area Opaque Type : 1 Opaque ID : Advertising Router ID : xxx.xxx.xxx.xxx LSA Age : Length : LSA Options : LS Seq Number : CheckSum : Link Type :Point to Point / Point to Multi Point /MultiAccess Link ID : Local Interface Address : xxx.xxx.xxx.xxx Remote Interface Address : xxx.xxx.xxx.
Table 418 Description on the fields of the display ospf mpls-te command Field Description Local Interface Address Local interface address Remote Interface Address Remote interface address TE Metric TE metric Maximum bandwidth Maximum bandwidth Maximum reservable bandwidth Maximum reservable bandwidth Admin Group Administrative group attribute Global Pool Global pool Unreserved BW [0] to [7] Available bandwidths at the eight levels in the global pool Sub Pool Subpool (only significant
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Table 419 Description on the fields of the display ospf traffic-adjustment command Field Description Type Approach to automatic route advertisement: IGP shortcut or forwarding adjacency Neighbor ID Remote neighbor ID Cost Cost State State: up or down Neighbor Ip Address Neighbor IP address Cost Type Cost type Hold time Hold time display tunnel-info Syntax View Parameter display tunnel-info { tunnel-id | all | statistics } Any view tunnel-id:
Table 420 Description on the fields of the display tunnel-info statistics command Field Description LSP Number of LSP tunnels GRE Number of GRE tunnels CRLSP Number of CR-LSP tunnels LOCAL IFNET Number of CE-side interfaces in MPLS L2VPN MPLS LOCAL IFNET Number of outgoing interfaces in CCC remote mode in MPLS L2VPN enable traffic-adjustment Syntax enable traffic-adjustment undo enable traffic-adjustment View Parameter Description OSPF view/IS-IS view None Use the enable traffic-adjustm
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Description Use the enable traffic-adjustment advertise command to enable forwarding adjacency. Use the undo enable traffic-adjustment advertise command to disable forwarding adjacency. By default, forwarding adjacency is disabled. Forwarding adjacency allows OSPF to include static LSP tunnels in SPF calculation but not advertise them to OSPF neighbors. Example # Enable forwarding adjacency when the IGP protocol is OSPF.
View Explicit path view Parameter ip-address: Specifies the IP address of a node on the explicit path. If no IP address is specified, information about all the nodes on the explicit path is displayed. Description Use the list hop command to display information about specified or all nodes on the explicit path. Example # Display information about all nodes on an MPLS TE explicit path.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS mpls rsvp-te Syntax mpls rsvp-te undo mpls rsvp-te View Parameter Description MPLS view, interface view None Use the mpls rsvp-te command to enable RSVP-TE. Use the undo mpls rsvp-te command to disable RSVP-TE. By default, RSVP-TE is disabled. You must enable RSVP-TE before you can configure other RSVP-TE features. Before enabling RSVP-TE, enable MPLS in both system view and interface view. Disabling RSVP-TE in MPLS view disables RSVP-TE on interfaces.
Description Use the mpls rsvp-te authentication command to enable RSVP message authentication on the interface. Use the undo mpls rsvp-te authentication command to disable RSVP message authentication on the interface. The RSVP messages sent out of the interface convey a message authentication digest created using the hash algorithm and the configured authentication key. This authentication key also used by the interface to authenticate received RSVP messages.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Upon expiration of the blockade timeout time, the blockade state on the node is removed. Before you can configure this command, enable RSVP-TE. Related command: Example mpls rsvp-te timer refresh. # Set the blockade multiplier to five.
View Parameter Description MPLS view, interface view None Use the mpls rsvp-te hello command to enable RSVP hello extension. Use the undo mpls rsvp-te hello command to disable RSVP hello extension. By default, RSVP hello extension is disabled. RSVP-TE uses the hello mechanism to detect whether an RSVP neighbor is still alive. Before you can enable RSVP hello extension in interface view, enable RSVP-TE in interface view and RSVP hello extension in MPLS view.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Before you can configure this command, enable RSVP-TE. Related command: Example mpls rsvp-te timer hello. # Set the maximum number of consecutive hello losses before an RSVP neighbor is considered dead to five.
undo mpls rsvp-te reliability View Parameter Description Interface view None Use the mpls rsvp-te reliability command to enable the reliability mechanism of RSVP-TE, that is, the Message_ID extension mechanism. Use the undo mpls rsvp-te reliability command to disable the reliability mechanism. Example # Enable the reliability mechanism of RSVP-TE on interface Ethernet 1/0.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS View Parameter Description Interface view None Use the mpls rsvp-te srefresh command to enable summary refresh. Use the undo mpls rsvp-te srefresh command to restore the default. By default, summary refresh is disabled. Summary refresh (Srefresh) messages refresh path state and reservation state. Enabling summary refresh disables conventional time-driven state refresh. Example # Enable summary refresh on interface Ethernet 1/0.
Parameters restart-time: RSVP-TE GR restart interval in seconds, in the range 60 to 300. Description Use the mpls rsvp-te timer graceful-restart restart command to set the RSVP-TE GR restart interval. Use the undo mpls rsvp-te timer graceful-restart restart command to restore the default. By default, the RSVP-TE GR restart interval is 120 seconds. Examples # Set the RSVP-TE GR restart interval to 200 seconds.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Parameter Description timevalue: Refresh interval, in the range 10 to 65535 seconds. Use the mpls rsvp-te timer refresh command to configure the path/reservation state refresh interval. Use the undo mpls rsvp-te timer refresh command to restore the default. The default path/reservation state refresh interval is 30 seconds. Related command: Example mpls rsvp-te keep-multiplier. # Set the path/reservation state refresh interval to 60 seconds.
Example # Enable RSVP message retransmission on interface Ethernet 1/0, setting the increment value delta to 2 and the initial retransmission interval to 1000 milliseconds. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] mpls rsvp-te timer retransmission increment-va lue 2 retransmit-value 1000 mpls te Syntax mpls te undo mpls te View Parameter Description MPLS view, interface view None Use the mpls te command to enable MPLS TE.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS mpls te affinity property Syntax mpls te affinity property properties [ mask mask-value ] undo mpls te affinity property View Parameter Tunnel interface view properties: Link properties affinity attribute of the tunnel, a 32-bit integer in the range 0x0 to 0xFFFFFFFF. Each affinity bit represents a property with a value of 1 or 0. mask-value: 32-bit mask comprising 0s and 1s, in the range 0x0 to 0xFFFFFFFF.
seconds: Automatic bandwidth adjustment/information collection interval, in the range 300 to 604800 seconds. This value cannot be less than the sampling interval configured by the mpls te timer auto-bandwidth command. max-bandwidth: Upper limit for bandwidth tuning, in the range 1 to 32000000 kbps. min-bandwidth: Lower limit for bandwidth tuning, in the range 1 to 32000000 kbps. Description Use the mpls te auto-bandwidth adjustment command to enable automatic bandwidth adjustment for the tunnel.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Use the undo mpls te backup command to restore the default. By default, tunnel backup is disabled. n Example ■ With backup enabled, the record route flag is automatically set to record reroute regardless of whether the mpls te record-route command is configured. ■ The backup function cannot be used together with these commands: mpls te reoptimization, mpls te auto-bandwidth adjustment, and mpls te resv-style ff. # Enable hot backup on tunnel 0.
Example # Tunnel 0 provides protection for LSPs using BC0 bandwidth without protecting bandwidth. Tunnel 1 provides protection for LSPs using BC1 bandwidth and it can protect 1000 kbps bandwidth.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Parameter down: Sets the threshold in percentages for IGP to flood when the bandwidth is decreasing. When the percentage of available bandwidth decrease exceeds the threshold, the change is flooded and the traffic engineering database (TEDB) is updated. up: Sets the IGP flooding threshold in percentages that applies when the bandwidth is increasing.
mpls te cspf Syntax mpls te cspf undo mpls te cspf View Parameter Description MPLS view None Use the mpls te cspf command to enable CSPF on current node. Use the undo mpls te cspf command to disable CSPF on current node. By default, CSPF is disabled on current node. Before enabling CSPF, enable MPLS TE in MPLS view. CSPF provides an approach to path selection in MPLS domains. You must enable CSPF before configuring other CSPF related functions. Example # Enable CSPF.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS mpls te fast-reroute Syntax mpls te fast-reroute undo mpls te fast-reroute View Parameter Description Tunnel interface view None Use the mpls te fast-reroute command to enable fast reroute (FRR). Use the undo mpls te fast-reroute command to disable FRR. By default, FRR is disabled. After FRR is enabled, the record route flag is automatically set to record reroute with label whether the mpls te record-route label command is configured or not.
You may perform the mpls te fast-reroute bypass-tunnel command multiple times to specify multiple bypass tunnels for the protected interface. At present, a maximum of three bypass tunnels can be specified for a protected interface. When specifying a bypass tunnel, consider the following: n Example ■ The state of the tunnel must be up. ■ The protected interface is not the outgoing interface in the route entries for the LSP of the bypass tunnel.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS mpls te igp metric Syntax mpls te igp metric { absolute value | relative value } undo mpls te igp metric View Parameter Tunnel interface view absolute value: Assigns an absolute metric to the TE tunnel for path calculation. The value argument takes an integer in the range 1 to 65535. This value is directly used for path calculation. relative value: Assigns a relative metric to the TE tunnel for path calculation.
n Example The mpls te igp shortcut command cannot be used together with the mpls te igp advertise command. # Enable OSPF and IS-IS to consider TE tunnel 0 in enhanced SPF calculation when the tunnel is up.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS View Parameter Description Tunnel interface view None Use the mpls te loop-detection command to configure the node to perform loop detection when setting up the MPLS TE tunnel. Use the undo mpls te loop-detection command to disable loop detection. Loop detection is disabled by default. Example # Configure the node to perform loop detection when setting up tunnel 0.
undo mpls te max-reservable-bandwidth View Parameter Interface view bandwidth-value: Maximum reservable bandwidth for RSVP traffic, in the range 1 to 32000000 kbps (global pool bandwidth). bc1 value: Reservable bandwidth in kbps on the interface, in the range 1 to bandwidth-value (subpool bandwidth). Description Use the mpls te max-reservable-bandwidth command to configure the maximum reservable bandwidth. Use the undo mpls te max-reservable-bandwidth command to remove the configuration.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS mpls te path explicit-path Syntax mpls te path explicit-path pathname undo mpls te path View Parameter Description Tunnel interface view pathname: Name of an MPLS-TE explicit path, a string of 1 to 31 characters. Use the mpls te path explicit-path command to associate an explicit path with the tunnel. Use the undo mpls te path command to remove the association. Example # Configure interface Tunnel0 to use the explicit path named path1.
# Use the IGP metrics of links in path calculation for TE tunnels not configured with link metric type. system-view [Sysname] mpls [Sysname-mpls] mpls te path metric-type igp In tunnel interface view: # Use the IGP metrics of links for routing tunnel 0.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS View Parameter Description Tunnel interface view label: Includes the record of labels in the route record. This keyword is not supported when the signaling protocol is CR-LDP. This keyword is not supported when the signaling protocol is CR-LDP. Use the mpls te record-route command to enable route recording or label recording. Use the undo mpls te record-route command to restore the default. By default, route recording and label recording are disabled.
Use the undo mpls te reoptimization command to disable reoptimization on the tunnel. Reoptimization is disabled by default. n The reoptimization function cannot be used together with these commands: mpls te auto-bandwidth adjustment, mpls te route-pinning, mpls te backup, and mpls te resv-style ff. Example # Enable reoptimization, setting the reoptimization (automatic rerouting) frequency to 43200 seconds (12 hours).
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS View Parameter Description Tunnel interface view times: Number of tunnel setup retries, in the range 1 to 4294967295. Use the mpls te retry command to configure the maximum number of tunnel setup retries. Use the undo mpls te retry command to restore the default. The default maximum number of tunnel setup retries is 5.
mpls te signal-protocol Syntax View Parameter mpls te signal-protocol { crldp | rsvp-te | static } Tunnel interface view rsvp-te: Sets the signaling protocol for MPLS TE tunnel establishment to RSVP-TE. crldp: Sets the signaling protocol for MPLS TE tunnel establishment to CR-LDP. static: Sets up the tunnel using a static CR-LSP. Description Use the mpls te signal-protocol command to configure the signaling protocol for MPLS TE tunnel establishment.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS n Example The tie breaker configured in MPLS TE tunnel interface view has higher priority over the one configured in MPLS view. # Configure CSPF to route tunnels over paths with the least bandwidth usage ratio. system-view [Sysname] mpls [Sysname-mpls] mpls te tie-breaking least-fill # Configure CSPF to route tunnel 0 over a path with the least bandwidth usage ratio in MPLS TE interface view.
system-view [Sysname] mpls [Sysname-mpls] mpls te timer auto-bandwidth 600 mpls te timer fast-reroute Syntax mpls te timer fast-reroute [ seconds] undo mpls te timer fast-reroute View Parameter Description MPLS view seconds: FRR polling timer setting for the point of local repair (PLR) to poll available bypass tunnels for the best one. It ranges from 0 to 604800 seconds, with 0 disabling the PLR to poll available bypass tunnels regularly for the best one.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Related command: Example mpls te retry. # Set the interval for re-establishing tunnel 0 to 20 seconds. system-view [Sysname] interface tunnel 0 [Sysname-Tunnel0] mpls te timer retry 20 mpls te tunnel-id Syntax View mpls te tunnel-id tunnel-id Tunnel interface view Parameters tunnel-id: Tunnel ID. The value range and default vary by device. Description Use the mpls te tunnel-id command to configure the tunnel ID.
Example # Configure tunnel 0 to forward only traffic of VPN 1. system-view [Sysname] interface tunnel 0 [Sysname-Tunnel0] mpls te vpn-binding vpn-instance vpn1 # Configure tunnel 0 to forward only traffic that matches ACL 3001.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS Parameter ip-address: Defines a node by its link IP address or router ID in dotted decimal notation. In the strict routing approach, this IP address must be a link IP address. In the loose routing approach, this IP address can be either a link IP address or router ID. include: Includes the specified IP address on the explicit path. loose: Indicates that the next hop is a loose node which is not necessarily directly connected to current node.
reset mpls rsvp-te statistics Syntax View Parameter reset mpls rsvp-te statistics { global | interface [ interface-type interface-number ] User view global: Clears statistics about global RSVP-TE. interface: Clears statistics about RSVP-TE for all interfaces. interface interface-type interface-number: Specifies an interface by its type and number. If an interface is specified, the command clears the statistics about RSVP-TE for the interface.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS View Parameter System view Tunnel-name: Tunnel name comprising 1 to 15 characters. interface-type interface-number: Specifies an interface by its type and number. in-label-value: Incoming label, in the range 16 to 1023. ingress-lsr-id: Ingress LSR ID, in the format of an IP address. tunnel-id: Tunnel ID, in the range 1 to 65534. Description Use the static-cr-lsp egress command to configure a static CR-LSP on the egress node.
Description Use the static-cr-lsp ingress command to configure a static CR-LSP at the ingress node. Use the undo static-cr-lsp ingress command to remove the static CR-LSP. n The next hop address cannot be a local public address when configuring the static CR-LSP on the ingress or a transit node. Example # Configure a static CR-LSP on the ingress node, setting its name to Tunnel3, destination IP address to 202.25.38.1, destination address mask length to 24, next hop IP address to 202.55.25.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS n Example The next hop address cannot be a local public address when configuring the static CR-LSP on the ingress or a transit node. # Configure a static CR-LSP on the transit node, setting its name to tunnel34, incoming interface to Serial 1/0, incoming label to 123, outgoing interface to Serial 1/1, outgoing label to 253, and required bandwidth to 20 kbps.
View Parameter IS-IS view level-1: Enables Level-1 IS-IS TE. level-1-2: Enables Level-1-2 IS-IS TE. level-2: Enables Level-2 IS-IS TE. n If no level is specified, IS-IS TE applies to Level-1-2. Description Use the traffic-eng command to enable IS-IS TE. Use the undo traffic-eng command to restore the default. By default, IS-IS TE is disabled.
CHAPTER 96: MPLS TE CONFIGURATION COMMANDS
MPLS L2VPN CONFIGURATION COMMANDS 97 ccc interface in-label out-label Syntax ccc ccc-connection-name interface interface-type interface-number in-label in-label-value out-label out-label-value { nexthop ip-address | out-interface interface-type interface-number } [ control-word | no-control-word ] undo ccc ccc-connection-name View Parameter System view ccc-connection-name: Name for the CCC connection, a string of 1 to 20 characters. It is used for uniquely identifying a CCC connection on a PE.
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS Currently, only L2VPNs using ATM, PPP, FR, or HDLC encapsulation support the control word option. n Example If the outgoing interface is an Ethernet or VLAN interface, you need to use the nexthop ip-address combination to specify the IP address of the next hop. Otherwise, you need to use the out-interface interface-type interface-number combination to specify the outgoing interface.
View Parameter MPLS L2VPN view/MPLS L2VPN CE view ce-name: Unique name for a CE in the current VPN of the current PE, a string of 1 to 20 characters that cannot include the character of “-”. ce-id: ID for the CE in the VPN. For MSR20 series routers, it is in the range of 0 to 199; for MSR30 and MSR50 series routers, it is in the range 0 to 249. ce-range: Maximum number of CEs that the current PE can support.
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS tunnel-policy-name: Tunneling policy for the VC, a string of 1 to 19 characters. Description Use the connection command to create a Kompella connection. Use the undo connection command to delete a Kompella connection on a CE interface. When creating a Kompella connection, you must specify the ID of the peer CE and the local CE interface.
Example # Display all information about L2VPN in the BGP routing table. display bgp l2vpn all BGP Local router ID : 2.2.2.9, local AS number : 100 Origin codes:i - IGP, e - EGP, ? - incomplete bgp.l2vpn: 1 destination Route Distinguisher: 100:1 CE ID Label Offset Label Base nexthop 1 0 8202 3.3.3.
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS Table 422 Description on the fields of the display bgp l2vpn peer command Field Description MsgSent Number of messages sent OutQ Number of messages waiting to be sent to the peer PrefRcv Number of prefixes received Up/Down Duration that the BGP session is in the current status State Status of the peer # Display detailed information about L2VPN peer 3.3.3.9 in the BGP routing table. display bgp l2vpn peer 3.3.3.9 verbose Peer: 3.3.3.
Table 423 Description on the fields of the display bgp l2vpn peer verbose command Field Description Address family L2VPN L2VPN address family Received Total number of received messages and that of received update messages Sent Total number of sent messages and that of received update messages Maximum allowed prefix number Maximum number of routes allowed Threshold Threshold value Routing policy configured Routing policy specified for the peer # Display L2VPN information with the RD being
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS Table 425 Description on the fields of display bgp l2vpn route-distinguisher ce-id Field Description BGP Local router ID BGP local router ID local AS number Local AS number Origin codes Route origin codes, which can be: i - IGP: Indicates that the network layer reachability information is from within the AS e - EGP: Indicates that the network layer reachability information is learned through EGP ? - incomplete: Indicates that the network layer reac
Table 426 Fields of display bgp l2vpn route-distinguisher ce-id label-offset Field Description as-path AS-PATH of the route label base Label base label range Label range layer-2 mtu Layer 2 MTU encap type Encapsulation type display ccc Syntax View Parameter display ccc [ ccc-name ccc-name | type { local | remote } ] Any view ccc-name: CCC connection name, a string of 1 to 20 characters. type: Specifies the type of the CCC connections. local: Specifies local CCC connections.
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS Remote ccc vc ***Name Type State Intf In-label Out-label Nexthop : : : : : : : : 1, 0 up c1 remote down Serial2/0 (up) 100 200 20.1.1.
up (3), down (0) Interface Encap Type Serial2/0 ppp Serial2/1 ppp Serial2/2 ppp State up up up VC Type CCC bgp-vc static-vc # Display information about interfaces of Kompella L2VPN VCs. display l2vpn ccc-interface vc-type bgp-vc Total ccc-interface of BGP VC: 1 up (1), down (0) Interface Encap Type State VC Type Serial2/1 ppp up bgp-vc # Display information about interfaces of SVC L2VPN VCs that are in the state of UP.
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS Transport VC ID 5 6 7 Client Intf Serial2/0 Serial2/1 Serial2/2 VC State down down down Local VC Label 0 0 0 Remote VC Label 0 0 0 Tunnel Policy lsp3 lsp2 plcy3 Table 429 Description on the fields of the display mpls l2vc command Field Description total ldp vc Total number of Martini VCs Transport VC ID Remote VC ID Client Intf Interface connected with the CE VC State Status of the VC Local VC Label Local VC label Remote VC Label Remote
VC ID 100 ID 0 Addr 3.3.3.
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS display mpls l2vpn VPN Number: 1 vpn-name encap-type route-distinguisher vpn2 atm aal5 500:1 mtu 888 ce(L) ce(R) 0 0 Table 433 Description on the fields of the display mpls l2vpn command Field Description VPN Number Number of created VPNs vpn-name Name of the VPN encap-type Encapsulation type route-distinguisher RD mtu Maximum transmission unit ce(L) Local CE number ce(R) Remote CE number # Display information about L2VPN vpn1
Table 435 Description on the fields of display mpls l2vpn vpn-name local-ce Field Description LB Label block # Display information about remote CEs of L2VPN vpn1. display mpls l2vpn vpn-name vpn1 remote-ce no. ce-id peer-id route-distinguisher LB 1 4 3.3.3.
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS If you do not specify any argument, the command displays information about all Kompella L2VPN connections. Example # Display information about all Kompella L2VPN connections.
Local vc label Remote vc label Tunnel policy Tunnel Type Tunnel ID : : : : : 132100 132097 policy1 lsp 0x226013 Table 438 Description on the fields of display mpls l2vpn connection interface Field Description Conn-type Type of the connection Local vc state Local VC status Remote vc state Remote VC status Local ce-id ID of the local CE Local ce name Name of the local CE Remote ce-id ID of the remote CE Intf(state,encap) Interface name (interface status, interface encapsulation type)
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS display mpls l2vpn forwarding-info Syntax View Parameter display mpls l2vpn forwarding-info [ vc-label ] interface interface-type interface-number [ | { begin | exclude | include } regular-expression ] Any view vc-label: L2VPN VC label, in the range 16 to 4294967295. interface-type interface-number: Specifies an interface by its type and number. |: Filters the output information. begin: Displays information starting with the specified string.
Description Use the display mpls static-l2vc command to display information about static VCs configured on the router. If you specify an interface, the command displays only information about static VCs configured on the CE interface. Example # Display information about all static VCs configured on the router. display mpls static-l2vc total connections: 1, 1 up, 0 down ce-intf state destination tr-label Serial2/0 up 3.3.3.
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS undo l2vpn-family View Parameter Description BGP view None Use the l2vpn-family command to enter BGP L2VPN address family view. Use the undo l2vpn-family command to delete all configurations for the BGP L2VPN address family. Example # Enter BGP L2VPN address family view.
Example # Create a Martini MPLS L2VPN connection. system-view [Sysname] interface serial 2/0 [Sysname-Serial2/0] mpls l2vc 2.2.2.9 999 mpls l2vpn Syntax mpls l2vpn undo mpls l2vpn View Parameter Description System view None Use the mpls l2vpn command to enable MPLS L2VPN. Use the undo mpls l2vpn command to disable MPLS L2VPN and delete all L2VPN configurations. You must use the mpls l2vpn command to enable MPLS L2VPN before configuring the other L2VPN commands.
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS ppp: Uses PPP encapsulation. vlan: Uses VLAN encapsulation. control-word: Enables the control word option. no-control-word: Disables the control word option. Description Use the mpls l2vpn command to create a Kompella VPN and enter MPLS L2VPN view. Use the undo mpls l2vpn command to delete a VPN. The encapsulation type specified here must match that of the CE interface.
no-control-word: Disables the control word option. Description Use the mpls static-l2vc destination command to create a static VC between CEs connected to different PEs. Use the undo mpls static-l2vc command to delete the static VC. Example ■ You must configure the command on both PEs. The destination address is the IP address of the peer PE. The outgoing label and incoming label are respectively the incoming label and outgoing label of the peer.
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS View Parameter User view as-number: Resets L2VPN BGP connections with the peers in the AS with this number. The AS number must be in the range 1 to 65535. ip-address: Resets the L2VPN BGP connection to the peer with this IP address. all: Resets all L2VPN BGP connections. external: Resets L2VPN EBGP sessions. internal: Resets L2VPN IBGP sessions. Description Example Use the reset bgp l2vpn command to reset L2VPN BGP connections.
vpn-target (MPLS L2VPN view) Syntax vpn-target vpn-target&<1-16> [ both | export-extcommunity | import-extcommunity ] undo vpn-target { all | { vpn-target&<1-16> [ both | export-extcommunity | import-extcommunity ] } View Parameter MPLS L2VPN view vpn-target: VPN target extended community attributes to be added to the import or export VPN target extended community list, in the format of nn:nn or IP-address:nn. It can be a string of 3 to 21 characters.
CHAPTER 97: MPLS L2VPN CONFIGURATION COMMANDS
MPLS L3VPN CONFIGURATION COMMANDS 98 n For information about BGP L2VPN address family, refer to “MPLS L2VPN Configuration Commands” on page 1645. apply access-vpn vpn-instance Syntax apply access-vpn vpn-instance vpn-instance-name&<1-6> undo apply access-vpn vpn-instance [ vpn-instance-name ]&<1-6> View Parameter Description Policy routing view vpn-instance-name&<1-6>: VPN instance name, a string of 1 to 31 characters. &<1-6> means that you can enter one to six VPN instance names.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS undo default local-preference View Parameter Description BGP-VPNv4 subaddress family view value: Default value for the local preference, in the range 0 to 4294967295. A greater value represents a higher priority. Use the default local-preference command to set the default value of the local preference. Use the undo default local-preference command to restore the default. By default, the default value of the local preference is 100.
description (VPN instance view) Syntax description text undo description View Parameter Description VPN instance view text: Description for the VPN instance, a string of 1 to 80 characters. Use the description command to configure a description for a VPN instance. Use the undo description command to delete the description. Example # Configure the description of VPN instance vpn1.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS aa:nn&<1-13>: Community number. Both the aa and nn parameters range from 0 to 65535. &<1-13> means that you can enter the parameter combination up to 13 times. no-export-subconfed: A route with this attribute is neither advertised out of the local AS, nor advertised to the other sub-ASs in the confederation. no-advertise: A route with this attribute is not advertised to any other BGP peer.
*>i 123.1.1.1/32 1.1.1.1 Total routes of vpn-instance vpn1: 5 Network NextHop *>i *> *> *>i *> 10.0.0.0 10.1.1.0/24 20.0.0.0 123.1.1.1/32 124.1.1.1/32 1.1.1.1 0.0.0.0 10.1.1.1 1.1.1.1 0.0.0.0 (1024 /NULL ) 0 Label(recv/app) (NULL /1025 ) (NULL /1026 ) (NULL /1024 ) 100 MED LocPrf 0 0 0 0 0 100 100 Table 443 Description on the fields of display bgp vpnv4 all routing-table Field Description BGP Local router ID Router ID of the local BGP router Status codes Route status codes.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS Description Example Use the display bgp vpnv4 group command to display information about a specified or all BGP VPNv4 peer groups. # Display information about BGP VPNv4 peer group a for VPN instance vpn1.
Parameter all: Specifies all VPNv4 peers. vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters. Description Use the display bgp vpnv4 network command to display information about BGP VPNv4 routes injected into a specified or all VPN instances. Example # Display information about BGP VPNv4 routes injected into VPN instance vpn1. display bgp vpnv4 vpn-instance vpn1 network BGP Local Router ID is 1.1.1.1. Local AS Number is 100. Network Mask Route-policy 10.0.0.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS display Address 0x6E72D80 0x6E72CB0 bgp vpnv4 all paths Hash Refcount MED 4 1 0 15 2 0 Path/Origin 200? ? Table 446 Description on the fields of the display bgp vpnv4 paths command Field Description Address Routing address in the local database Hash Hash bucket for storing routes Refcount Number of times that the path is referenced MED Metric for routes Path/Origin AS_PATH and origin attributes of the route, see Table 443.
Table 447 Description on the fields of display bgp vpnv4 vpn-instance peer Field Description Peer IP address of the peer V Version of BGP that the peer runs AS AS number of the peer group MsgRcvd Number of messages received MsgSent Number of messages sent OutQ Number of messages waiting to be sent to the peer PrefRcv Number of received prefixes Up/Down Duration of the BGP session in the current state State Status of the peer # Display detailed information about BGP VPNv4 peers of V
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS Table 448 Description on the fields of the display bgp vpnv4 peer verbose command Field Description Port Local and remote ports of the BGP session Configured Settings of the local timers, including the active hold interval and keepalive interval Received Received active hold interval Negotiated Negotiated active hold interval Peer optional capabilities Optional capabilities of the peer Peer support bgp multi-protocol extended The peer support
display bgp vpnv4 all peer 1.1.1.1 verbose Peer: 1.1.1.1 Local: 2.2.2.2 Type: IBGP link BGP version 4, remote router ID 1.1.1.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS Table 450 Description on the fields of display bgp vpnv4 all peer verbose Field Description Sent Total number of sent messages and the number of sent update messages Maximum allowed prefix number Maximum number of routes that the VPN instance supports Threshold Threshold value Minimum time between advertisement runs Minimum route advertisement interval Optional capabilities Local optional capabilities Route refresh capability Whether the rout
no-export-subconfed: A route with this attribute is neither advertised out of the local AS, nor advertised to the other sub-ASs in the confederation. no-advertise: A route with this attribute is not advertised to any other BGP peer. no-export: A route with this attribute is not advertised out of the local AS or, If existing, confederation. However, it is advertised to the other sub-ASs in the confederation. whole-match: Performs exact matching.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS Table 451 Fields of the above output Field Description Route Distinguisher RD Total number of routes Total number of routes BGP Local router ID Router ID of the local BGP router Status codes Route status codes. For valid values, see Table 443. Origin Route origin codes. For valid values, see Table 443.
display bgp vpnv4 routing-table label Syntax View Parameter display bgp vpnv4 { all | vpn-instance vpn-instance-name } routing-table label Any view all: Specifies all VPNv4 peers. vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters. Description Example Use the display bgp vpnv4 routing-table label command to display information about labeled routes in the BGP routing table. # Display information about labeled routes in the BGP routing table.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS display bgp vpnv4 vpn-instance routing-table Syntax View Parameter display bgp vpnv4 vpn-instance vpn-instance-name routing-table [ network-address [ { mask-length | mask-address } [ longer-prefixes ] ] | as-path-acl as-path-acl-number | cidr | community [ aa:nn ]&<1-13>[ no-export-subconfed | no-advertise | no-export ]* [ whole-match ] | community-list { basic-community-list-number [ whole-match ] | adv-community-list-number }&<1-16> | dampened | dampe
adv-community-list-number: Advanced community list number, in the range 100 to 199. &<1-16>: Specifies that the argument before it can be entered up to 16 times. dampened: Displays information about dampened BGP VPNv4 routes. dampening parameter: Displays information about configured BGP VPNv4 route dampening parameters. different-origin-as: Displays information about routes with different AS origins. flap-info: Displays BGP VPNv4 route flap statistics.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS Table 454 Fields of display bgp vpnv4 vpn-instance routing-table Field Description NextHop Address of the next hop MED Metric associated with the destination network LocPrf Local preference PrefVal Preferred value of the protocol Path/Ogn AS_PATH attribute/route origin of the route, see Table 443.
Destination/Mask 66.1.1.1/32 66.1.1.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS Import VPN Targets : 4:4 5:5 Import Route Policy : poly-1 Description : This is vpn1 Maximum number of Routes : 500 Interfaces : Ethernet1/0 Table 458 Description on the fields of display ip vpn-instance instance-name Field Description VPN-Instance Name and ID Name and ID of the VPN instance CreateTime Time when the VPN instance was created Up time Duration of the VPN instance Route Distinguisher RD of the VPN instance Export VPN Targets Expor
Table 459 Description on the fields of the display ospf sham-link command Field Description RouterId Router ID of the sham link Source-IP Source IP address of the sham link Destination-IP Destination IP address of the sham link State Status of the sham link interface Cost Cost of the sham link # Display information about OSPF sham links in area 1. display ospf sham-link area 1 OSPF Process 100 with Router ID 100.1.1.2 Sham-Link: 3.3.3.3 --> 5.5.5.5 Neighbour State: Full Area: 0.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS t aaa bbb LSP LSP CR-LSP GRE LSP 1 1 1 # Display tunneling policy aaa.
export route-policy Syntax export route-policy route-policy undo export route-policy View Parameter Description VPN instance view route-policy: Name of the export routing policy for the VPN instance, a string of 1 to 19 characters. Use the export route-policy command to apply an export routing policy to a VPN instance. Use the undo export route-policy command to remove the application.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS ospf process-id: Filters OSPF routes to be advertised that are from a specified OSPF process. The process-id argument is in the range 1 to 65535. rip process-id: Filters RIP routes to be advertised that are from a specified RIP process. The process-id argument is in the range 1 to 65535. static: Filters static routes to be advertised. Description Use the filter-policy export command to specify to filter all or certain types of routes to be advertised.
system-view [Sysname] bgp 100 [Sysname] ipv4-family vpnv4 [Sysname-bgp-af-vpnv4] filter-policy 2255 import import route-policy Syntax import route-policy route-policy undo import route-policy View Parameter Description VPN instance view route-policy: Name of the import routing policy for the VPN instance, a string of 1 to 19 characters. Use the import route-policy command to apply an import routing policy to a VPN instance.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS By default, an interface is associated with no VPN instance; it belongs to the public network. When configured on an interface, the ip binding vpn-instance command clears the IP address of the interface. Therefore, you must re-configure the IP address of the interface after configuring the command. Example # Associate interface Ethernet1/0 with VPN instance vpn1.
vpn-instance vpn-instance-name: Associates a VPN instance with an IPv4 address family and enter BGP VPN instance view. The vpn-instance-name argument is a string of 1 to 31 characters. Description Use the ipv4-family command to enter BGP-VPNv4 subaddress family view or BGP VPN instance view. Use the undo ipv4-family command to remove all configurations performed in either of the two views. Before entering BGP VPN instance view, you must create the VPN instance.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS system-view [Sysname] bgp 100 [Sysname] ipv4-family vpnv4 [Sysname-bgp-af-vpnv4] peer 3.3.3.3 advertise-community peer allow-as-loop Syntax peer { group-name | ip-address } allow-as-loop [ number ] undo peer { group-name | ip-address } allow-as-loop View Parameter BGP-VPNv4 subaddress family view/BGP-L2VPN address family view group-name: Name of the peer group, a string of 1 to 47 characters. ip-address: IP address of the peer.
View Parameter BGP-VPNv4 subaddress family view group-name: Name of the peer group, a string of 1 to 47 characters. ip-address: IP address of the peer. aspath-acl-number: AS_PATH filtering list number, in the range 1 to 256. import: Filters the received routes. export: Filters the routes to be advertised. Description Use the peer as-path-acl command to specify to filter routes received from or to be advertised to a specified peer or peer group based on an AS_PATH list.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS Related command: Example peer upe. # In BGP-VPNv4 subaddress family view, specify to advertise default routes of VPN instance vpn1 to peer 1.1.1.1. system-view [Sysname] bgp 100 [Sysname-bgp-af-vpnv4] peer 1.1.1.1 enable [Sysname-bgp-af-vpnv4] peer 1.1.1.1 upe [Sysname-bgp-af-vpnv4] peer 1.1.1.
undo peer { group-name | ip-address } filter-policy acl-number { export | import } View Parameter BGP-VPNv4 subaddress family view group-name: Name of the peer group, a string of 1 to 47 characters. ip-address: IP address of the peer. acl-number: ACL number, in the range 2000 to 3999. export: Filters the routes to be advertised. import: Filters the received routes. Description Use the peer filter-policy command to apply a filtering policy to a peer or peer group.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS [Sysname-bgp] ipv4-family vpnv4 [Sysname-bgp-af-vpnv4] peer 1.1.1.1 group test # In BGP-L2VPN address family view, add peer 1.1.1.1 into peer group test. system-view [Sysname] bgp 100 [Sysname-bgp] group test external [Sysname-bgp] l2vpn-family [Sysname-bgp-af-l2vpn] peer 1.1.1.
View Parameter BGP view/BGP VPN instance view group-name: Name of the peer group, a string of 1 to 47 characters. ip-address: IP address of the peer. Description Use the peer label-route-capability command to enable the exchange of labeled routes with an IPv4 peer or peer group. Use the undo peer label-route-capability command to disable the capability. By default, the device does not advertise labeled routes to an IPv4 peer.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS system-view [Sysname] bgp 100 [Sysname-bgp] ipv4-family vpnv4 [Sysname-bgp-af-vpnv4] peer 1.1.1.1 next-hop-invariable peer next-hop-local Syntax peer { group-name | ip-address } next-hop-local undo peer { group-name | ip-address } next-hop-local View Parameter BGP-VPNv4 subaddress family view/BGP-L2VPN address family view group-name: Name of the peer group, a string of 1 to 47 characters. ip-address: IP address of the peer.
Description Use the peer public-as-only command to make outbound BGP updates carry no private AS numbers. Use the undo peer public-as-only command to make outbound BGP updates carry private AS numbers. By default, a BGP update carries private AS numbers. If a BGP update to be sent carries any public AS number, this command does not take effect. The private AS number ranges from 64512 to 65535.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS peer route-policy (BGP-VPNv4 subaddress family view) Syntax peer { group-name | ip-address } route-policy route-policy-name { export | import } undo peer { group-name | ip-address } route-policy route-policy-name { export | import } View Parameter BGP-VPNv4 subaddress family view group-name: Name of the peer group, a string of 1 to 47 characters. ip-address: IP address of the peer.
UPE is a kind of special VPNv4 peer. It accepts only one default route for each related VPN instance on an SPE, rather than common VPNv4 routes. An SPE is a common VPN peer. Example # Configure peer 1.1.1.1 as a UPE. system-view [Sysname] bgp 100 [Sysname-bgp] ipv4-family vpnv4 [Sysname-bgp-af-vpnv4] peer 1.1.1.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS reflect between-clients Syntax reflect between-clients undo reflect between-clients View Parameter Description BGP-VPNv4 subaddress family view/BGP-L2VPN address family view None Use the reflect between-clients command to enable route reflection between clients. Use the undo reflect between-clients command to disable the function. By default, route reflection between clients is enabled.
By default, the cluster ID is the router ID of an RR in the cluster. Generally, a cluster contains only one RR, in which case the router ID of the RR is used for identifying the cluster. Setting multiple RRs can improve the network reliability. When there is more than one RR in a cluster, use the reflector cluster-id command to configure the same cluster ID for all RRs in the cluster. Example # In BGP-VPNv4 subaddress family view, configure the local router as an RR of a cluster.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS refresh bgp vpn-instance vpn1 all import refresh bgp vpnv4 Syntax View Parameter refresh bgp vpnv4 { ip-address | all | external | group group-name | internal } { export | import } User view ip-address: Performs a soft reset of the BGP VPNv4 connection with a BGP peer identified by this IP address. all: Performs a soft reset of all BGP VPNv4 connections. external: Performs a soft reset of EBGP sessions.
all: Resets all BGP connections. external: Resets EBGP sessions. Description Example Use the reset bgp vpn-instance command to reset the BGP connections of a VPN instance. # Reset all BGP connections of VPN instance vpn1. reset bgp vpn-instance vpn1 all reset bgp vpn-instance dampening Syntax View Parameter reset bgp vpn-instance vpn-instance-name dampening [ network-address [ mask | mask-length ] ] User view vpn-instance-name: Name of the VPN instance, a string of 1 to 31 characters.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS as-path-acl-number: Number of the AS_PATH list, in the range 1 to 256. as-path-regexp: AS_PATH regular expression. Description Use the reset bgp vpn-instance flap-info command to clear the route flap history information about BGP peers of a VPN instance. Example # Clear route flap history information about BGP peer 2.2.2.2 of VPN instance vpn1. reset bgp vpn-instance vpn1 2.2.2.
■ Description 32-bit IP address: 16-bit user-defined number. For example, 192.168.122.15:1. Use the route-distinguisher command to configure a route distinguisher (RD) for a VPN instance. An RD is used to create the routing and forwarding table of a VPN. By prefixing an RD to an IPv4 prefix, you get a VPN IPv4 prefix unique globally. n Example ■ No RD is configured by default; you must configure an RD for each VPN instance. ■ A VPN instance takes effect only after you configure an RD for it.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS ■ A tag configured with the route-tag command has the second highest priority. ■ A tag configured with the default tag command has the lowest priority. A received Type 5 or Type 7 LSA is neglected in route calculation if its tag is the same as the local one. n Related command: Example A configured route tag takes effect after you issue the reset ospf command. import-route (OSPF view) on page 1136.
rr-filter Syntax rr-filter extended-community-list-number undo rr-filter View Parameter Description BGP-VPNv4 subaddress family view/BGP-L2VPN address family view extended-community-list-number: Number of the extended community list supported by the RR group, in the range 1 to 199. Use the rr-filter command to create an RR reflection policy. Use the undo rr-filter command to disable the function.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS cost: Cost for the sham link. It ranges from 1 to 65,535 and defaults to 1. dead-interval: Dead Interval in seconds. It ranges from 1 to 32,768 and defaults to 40. It must be equal to the dead interval of the router on the other end of the virtual link and be at least four times the hello interval. hello-interval: Interval at which the interface sends Hello packets. It ranges from 1 to 8,192 seconds and defaults to 10 seconds.
Example # Create a sham link with the source address of 1.1.1.1 and the destination address of 2.2.2.2. system-view [Sysname] ospf [Sysname-ospf-1] area 0 [Sysname-ospf-1-area-0.0.0.1] sham-link 1.1.1.1 2.2.2.2 tnl-policy (VPN instance view) Syntax tnl-policy tunnel-policy-name undo tnl-policy View Parameter Description VPN instance view tunnel-policy-name: Name of the tunneling policy for the VPN instance, a string of 1 to 19 characters.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS Description Use the tunnel-policy command to establish a tunneling policy and enter tunneling policy view. Use the undo tunnel-policy command to delete a tunneling policy. Related command: Example tunnel select-seq load-balance-number. # Establish a tunneling policy named po1 and enter tunneling policy view.
Example # Define a tunneling policy, specifying that only GRE tunnels can be used and the number of tunnels for load balancing be 2. system-view [Sysname] tunnel-policy po1 [Sysname-tunnel-policy-po1] tunnel select-seq gre load-balance-number 2 vpn-instance-capability simple Syntax vpn-instance-capability simple undo vpn-instance-capability View Parameter Description OSPF multi-instance view None Use the vpn-instance-capability simple command to enable multi-VPN-instance CE.
CHAPTER 98: MPLS L3VPN CONFIGURATION COMMANDS both: Specifies both the export routing information to the destination VPN extended community and the import routing information from the destination VPN extended community. This is the default. export-extcommunity: Specifies the export routing information to the destination VPN extended community. import-extcommunity: Specifies the import routing information from the destination VPN extended community.
VAM SERVER CONFIGURATION COMMANDS 99 authentication-algorithm Syntax authentication-algorithm { none | { md5 | sha-1 }* } undo authentication-algorithm View Parameter VPN domain view none: Specifies not to authenticate protocol packets. md5: Specifies to adopt MD5 (message digest 5) authentication. sha-1: Specifies to adopt SHA-1 (secure hash algorithm 1) algorithm.
CHAPTER 99: VAM SERVER CONFIGURATION COMMANDS View Parameter VPN domain view none: Specifies not to authenticate clients. pap: Specifies to adopt PAP (password authentication protocol) authentication. chap: Specifies to adopt CHAP (challenge authentication protocol) authentication. domain name-string: Specifies the ISP domain for authentication by its name, which is a case-insensitive string of 1 to 24 characters.
Total address-map number: 2 Private-ip Public-ip 10.0.0.1 222.222.222.1 10.0.0.3 222.222.222.3 Type Hub Spoke Holding time 0H 3M 34S 0H 4M 21S # Display mapping information of the VAM clients in all VPN domains. display vam server address-map all VPN: 1 Total address-map number: 2 Private-ip Public-ip Type Holding time 10.0.0.1 222.222.222.1 Hub 0H 3M 34S 10.0.0.3 222.222.222.3 Spoke 0H 4M 21S VPN: 2 Private-ip 20.0.0.1 Total address-map number: 1 Public-ip Type Holding time 222.222.32.
CHAPTER 99: VAM SERVER CONFIGURATION COMMANDS Example # Display statistics of the VAM server.
encryption-algorithm Syntax encryption-algorithm { none | { aes-128 | des | 3des }* } undo encryption-algorithm View Parameter VPN domain view none: Specifies not to encrypt control packets. aes-128: Specifies to adopt AES encryption algorithm, with the key length being 128 bits. des: Specifies to adopt DES encryption algorithm. 3des: Specifies to adopt 3DES encryption algorithm.
CHAPTER 99: VAM SERVER CONFIGURATION COMMANDS public-ip-address: Public IP address of Hub. Description Use the hub private-ip command to specify the IP address of Hub. Use the undo hub private-ip command to remove the IP address of the specified Hub. By default, no Hub IP address is configured. Note that: Related command: Example ■ You can specify only the private IP address of Hub.
Example # Configure the interval for sending keepalive messages from VAM client to VAM server to 30 seconds. system-view [Sysname] vam server vpn 1 [Sysname-vam-server-vpn-1] keepalive interval 30 keepalive retry Syntax keepalive retry retry-times undo keepalive retry View VPN domain view Parameter retry-times: Maximum number of attempts of sending keepalive message from VAM client. It is in the range 1 to 6.
CHAPTER 99: VAM SERVER CONFIGURATION COMMANDS Parameter cipher: Specifies to display pre-shared key in cipher text. simple: Specifies to display pre-shared key in plain text. key-string: Pre-shared key to be specified, a case-sensitive string containing 1 to 31 characters. Description Use the pre-shared-key command to configure a pre-shared key for VAM server. The pre-shared key is used as a public initial key for every encryption algorithm that encrypts VAM control packets.
vam server enable Syntax vam server enable { all | vpn vpn-name } undo vam server enable { all | vpn vpn-name } View Parameter System view all: Specifies all VPN domains whose VAM server function is to be enabled or disabled. vpn vpn-name: Specifies an existing VPN domain. The vpn-name argument indicates the VPN domain name and is a case-insensitive string of 1 to 15 characters. Valid characters are A to Z, a to z, 0 to 9, and “.”.
CHAPTER 99: VAM SERVER CONFIGURATION COMMANDS By default, listening IP address and UDP port number are not configured. Note that the VAM server only accepts the connections of all VPN domains through the configured UDP port. Related command: Example vam server vpn # Configure the listening IP address to 10.1.1.1 and UDP port number to 40000 for a VAM server. system-view [Sysname] vam server ip-address 10.1.1.
100 VAM CLIENT CONFIGURATION COMMANDS client enable Syntax client enable undo client enable View Parameter Description VAM client view None Use the client enable command to enable the VAM client function. Use the undo client enable command to restore the default. By default, the VAM client function is disabled. Related command: Example vam client name, and vam client enable. # Enable the VAM client function on client named spoke.
CHAPTER 100: VAM CLIENT CONFIGURATION COMMANDS Parameter address-map: Refers to the mapping information between public and private network addresses of the VAM client. fsm: Refers to the status information of the VAM client. client-name: VAM client name, a case-insensitive string of 1 to 31 characters. Description Use the display vam client command to display registration information of the VAM client.
Table 464 Description on the fields of the display vam client fsm command Field Description Primary server Public IP address of the primary VAM server Current state Current authentication status of the VAM client Primary server IP address of the primary VAM server Holding time Period of time that the VAM client is up Encryption-algorithm Negotiated encryption algorithm Authentication-algorithm Negotiated authentication algorithm Secondary server Public IP address of the secondary VAM se
CHAPTER 100: VAM CLIENT CONFIGURATION COMMANDS Use the undo pre-shared-key command to delete the configured pre-shared key. That is, no encryption or authentication is performed on protocol packets. No pre-shared key is configured by default. Note that you should configure the same pre-shared keys for all the devices on the same VPN. The VAM server generates keys based on the configured pre-shared key to protect initialization packets.
server primary ip-address Syntax server primary ip-address ip-address [ port port-number ] undo server primary View Parameter VAM client view. ip-address: Public IP address of the primary VAM server. DNS is not supported currently. port-number: Port number of the primary VAM server, in the range 1025 to 65535. It defaults to 40959. Description Use the server primary ip-address command to specify public IP address and UDP port number for the primary VAM server.
CHAPTER 100: VAM CLIENT CONFIGURATION COMMANDS By default, no public IP address or UDP port number is specified for the secondary VAM server. Related command: Example vam client name, and server primary ip-address. # Specify public IP address 1.1.1.2 and port number 50000 for the secondary VAM server. system-view [Sysname] vam client name abc [Sysname-vam-client-name-abc] server secondary ip-address 1.1.1.
View Parameter System view all: Specifies all configured VAM clients. name client-name: Specifies an existing VAM client. The client-name argument indicates the name of the VAM client and is a case-insensitive string of 1 to 31 characters. Valid characters are A to Z, a to z, 0 to 9, and “.”. Description Use the vam client enable command to enable all VAM clients or a specified VAM client. Use the undo vam client enable command to disable all VAM clients or a specified VAM client.
CHAPTER 100: VAM CLIENT CONFIGURATION COMMANDS vpn Syntax vpn vpn-name undo vpn View Parameter Description VAM client view vpn-name: Name of the VPN that a VAM client belongs to, a case-insensitive string of 1 to 15 characters A through Z, a through z, 0 through 9, hyphen (-), and dot (.). Use the vpn command to specify the VPN that a VAM client belongs to. Use the undo vpn command to remove the configuration. By default, a VAM client does not belong to any VPN.
101 IPSEC PROFILE CONFIGURATION COMMANDS display ipsec profile Syntax View Parameter Description display ipsec profile [ name profile-name ] Anyview profile-name: Name of the IPSec profile, a case-insensitive string of 1 to 15 characters. Use the display ipsec profile command to display information about a specified or all IPSec profiles. Note that if the profile-name keyword is not specified, this command will display information about all IPSec profiles.
CHAPTER 101: IPSEC PROFILE CONFIGURATION COMMANDS inbound ESP setting: ESP spi: 23456 (0x5ba0) ESP string-key: ESP encryption hex key: 1234567890abcdef1234567890abcdef1234567812345678 ESP authentication hex key: 1234567890abcdef1234567890abcdef outbound ESP setting: ESP spi: 65432 (0xff98) ESP string-key: ESP encryption hex key: 11223344556677889900aabbccddeeff1234567812345678 ESP authentication hex key: 11223344556677889900aabbccddeeffIPsec Table 466 Description on the fields of the display ipsec p
An IPSec profile sets up an SA through IKE negotiation. You must specify the ESP protocol as a security protocol for IPSec proposals in the IPSec profile. An IPSec profile simplifies the configuration of an IPSec policy. Some parameters are set to the default values. Due to the dynamics of DVPN addresses, the setting by the remote-address keyword for the IKE peer that an IPSec profile references does not take effect on the initiator.
CHAPTER 101: IPSEC PROFILE CONFIGURATION COMMANDS
102 DVPN TUNNEL CONFIGURATION COMMANDS display dvpn session Syntax View Parameter display dvpn session { all | interface interface-type interface-number [ private-ip ip-address ] } Any view All: Displays information about all Spoke-Spoke and Spoke-Hub sessions associated with the VAM client. interface interface-type interface-number: Displays information about DVPN sessions associated with the interface specified by interface-type and interface-number. The interface must be of the type of tunnel.
CHAPTER 102: DVPN TUNNEL CONFIGURATION COMMANDS Private IP: 10.0.0.22 Public IP: 28.1.1.
Related command: Example interface tunnel on page 884 and tunnel-protocol on page 887. # Set the quiet period to 100 seconds for VAM client abc when the attempts for tunneling the Hub reach the maximum value.
CHAPTER 102: DVPN TUNNEL CONFIGURATION COMMANDS string of 1 to 15 characters. &<1-6> means that you can specify the argument for up to 6 times. Description Use the ipsec profile command to configure to reference an IPSec profile on a DVPN tunnel interface. Use the undo ipsec profile command to cancel the reference of an IPSec profile on a DVPN tunnel interface. By default, no IPSec profile exists. That is, DVPN tunnels are not protected.
Related command: Example interface tunnel on page 884. # Set the DVPN keepalive interval to 20 seconds and the maximum number of attempts for transmitting a keepalive packet to 5. system-view [Sysname] interface Tunnel 0 [Sysname-Tunnel0] keepalive 20 5 reset dvpn session Syntax View Parameter reset dvpn session { all | interface interface-type interface-number [ private-ip ip-address ] } User view all: Specifies all Spoke-Spoke and Spoke-Hub tunnels connected with the VAM client.
CHAPTER 102: DVPN TUNNEL CONFIGURATION COMMANDS Related command: Example interface tunnel on page 884. # Configure the DVPN tunnel mode. system-view [Sysname] interface tunnel 0 [Sysname-Tunnel0] tunnel-protocol dvpn udp vam client Syntax vam client client-name undo vam client View Parameter Description Tunnel interface view client-name: Name of the VAM client, a case-insensitive string of 1 to 31 characters.
GRE CONFIGURATION COMMANDS 103 destination Syntax destination { ip-address | ipv6-address } undo destination View Parameter Tunnel interface view ip-address: Destination IPv4 address for a tunnel interface. Ipv6-address: Destination IPv6 address for a tunnel interface. Description Use the destination command to specify the destination address for a tunnel interface. Use the undo destination command to remove the configuration. By default, no destination address is configured for a tunnel interface.
CHAPTER 103: GRE CONFIGURATION COMMANDS display interface tunnel Syntax View Parameter Description display interface tunnel [ number ] Any view number: Tunnel interface number. Use the display interface tunnel command to display information about a specified or all tunnel interfaces. If the number argument is not specified, the command displays information about all tunnel interfaces. Related command: Example source, destination, gre key, gre checksum, and tunnel-protocol on page 887.
Table 468 Description on the fields of the display interface tunnel command Field Description Tunnel source Source address of the tunnel interface destination Destination address of the tunnel interface Tunnel keepalive Whether the GRE keepalive function is enabled Tunnel protocol/transport Tunnel protocol/transport protocol GRE key Secret key for tunnel interfaces use Checksumming of GRE packets Whether GRE packet checksum is enabled Last 300 seconds input Amount of inbound traffic per
CHAPTER 103: GRE CONFIGURATION COMMANDS Table 469 Description on the fields of the display ipv6 interface tunnel command Field Description Tunnel0 current state Status of the physical layer of the tunnel interface, UP or DOWN Line protocol current state Status of the link layer of the tunnel interface, UP or DOWN IPv6 Whether IPv6 is enabled on the tunnel interface link-local address Link-local address of the tunnel interface Global unicast address(es) Global unicast addresses of the tunne
Parameter Description None Use the gre checksum command to enable the GRE packet checksum function so as to verify the validity of packets and discard those invalid packets. Use the undo gre checksum command to disable the GRE packet checksum function. By default, the GRE packet checksum function is disabled. Related command: Example interface tunnel. # Enable the GRE packet checksum function on the tunnel between Sysname1 and Sysname2.
CHAPTER 103: GRE CONFIGURATION COMMANDS interface tunnel Syntax interface tunnel number undo interface tunnel number View Parameter Description System view number: Number of a tunnel interface, in the range 0 to 1023. The volume of tunnels is subject to the total number of interfaces and the capacity of memory. Use the interface tunnel command to create a tunnel interface and enter tunnel interface view. Use the undo interface tunnel command to remove a tunnel interface.
Use the undo keepalive command to disable the keepalive function. By default, the GRE keepalive function is disabled. With the GRE keepalive function enabled on a tunnel interface, the device sends GRE keepalive packets from the tunnel interface periodically. If no response is received from the peer within the specified interval, the device retransmits a keepalive packet.
CHAPTER 103: GRE CONFIGURATION COMMANDS Related command: Example interface tunnel and destination. # Create interface Tunnel5 and configure Serial2/0 (192.100.1.1) as its source interface. system-view [Sysname] interface tunnel 5 [Sysname-Tunnel5] source 192.100.1.1 Or [Sysname-Tunnel5] source serial 2/0 tunnel-protocol gre Syntax tunnel-protocol gre [ ipv6 ] undo tunnel-protocol View Parameter Description Tunnel interface view ipv6: Sets the tunnel mode to GRE over IPv6.
L2TP CONFIGURATION COMMANDS 104 allow l2tp Syntax allow l2tp virtual-template virtual-template-number remote remote-name [ domain domain-name ] undo allow View Parameter L2TP group view virtual-template-number: Number of the virtual interface template for creating a virtual access interface, in the range of 0 to 1023. remote-name: Name of the tunnel peer initiating a connection request, a case sensitive string of 1 to 30 characters.
CHAPTER 104: L2TP CONFIGURATION COMMANDS ■ Related command: Example The allow l2tp command is available for only LNSs. If the tunnel name on the LAC is specified, ensure that it is the same as the tunnel name configured on the LAC. l2tp-group. # Accept the L2TP tunneling request initiated by the peer (LAC) of AS8010 and create a virtual access interface according to virtual template 1.
display l2tp tunnel Syntax View Parameter Description Example display l2tp tunnel Any view None Use the display l2tp tunnel command to display information about L2TP tunnels. # Display information about L2TP tunnels. display l2tp tunnel Total tunnel = 1 LocalTID RemoteTID RemoteAddress Port 2 2284 11.1.1.
CHAPTER 104: L2TP CONFIGURATION COMMANDS A virtual interface template is intended to provide parameters for virtual interfaces to be dynamically created by the router, such as logical MP interfaces and logical L2TP interfaces. Related command: Example allow l2tp. # Create virtual interface template 1 and enter virtual interface template view.
Use the undo l2tp enable command to disable the function. By default, an LNS includes ACCM in control messages. Example # Disable the ACCM function. system-view [Sysname] undo l2tp sendaccm enable l2tpmoreexam enable Syntax l2tpmoreexam enable undo l2tpmoreexam enable View Parameter Description System view None Use the l2tpmoreexam enable command to enable the L2TP multi-instance function. Use the undo l2tpmoreexam enable command to disable the L2TP multi-instance function.
CHAPTER 104: L2TP CONFIGURATION COMMANDS By default, no L2TP group exists. When you use the undo l2tp-group command to remove an L2TP group, all configuration information associated with the group will be deleted. Related command: Example allow l2tp and start l2tp. # Create an L2TP group numbered 2 and enter its view.
undo mandatory-lcp View Parameter Description L2TP group view None Use the mandatory-lcp command to force an LNS to perform LCP negotiation with users. Use the undo mandatory-lcp command to disable the LCP negotiation. By default, an LNS does not perform LCP negotiation with users. When starting a PPP session, a client of NAS-initialized VPN will first negotiate with the network access server (NAS) for LCP parameters.
CHAPTER 104: L2TP CONFIGURATION COMMANDS Related command: Example display l2tp tunnel. # Disconnect all tunnels with the remote name of AS8010. reset l2tp tunnel AS8010 start l2tp Syntax start l2tp ip ip-address&<1-5> { domain domain-name | fullusername user-name } undo start View Parameter L2TP group view ip-address&<1-5>: IP addresses of the tunnel peers (LNSs). &<1-5> means that you can specify up to five IP addresses.
undo tunnel authentication View Parameter Description L2TP group view None Use the tunnel authentication command to enable the L2TP tunnel authentication function. Use the undo tunnel authentication command to disable the L2TP tunnel authentication function. By default, L2TP tunnel authentication function is enabled. Generally, authentication is required at both ends of a tunnel for the sake of security.
CHAPTER 104: L2TP CONFIGURATION COMMANDS system-view [Sysname] l2tp-group 1 [Sysname-l2tp1] tunnel avp-hidden tunnel flow-control Syntax tunnel flow-control undo tunnel flow-control View Parameter Description L2TP group view None Use the tunnel flow-control command to enable the L2TP tunnel flow control function. Use the undo tunnel flow-control command to disable the L2TP tunnel flow control function. By default, the L2TP tunnel flow control function is disabled.
system-view [Sysname] l2tp-group 1 [Sysname-l2tp1] tunnel name itsme tunnel password Syntax tunnel password { simple | cipher } password undo tunnel password View Parameter L2TP group view simple: Displays the password in plain text. cipher: Displays the password in cipher text. password: Password for tunnel authentication, case sensitive. If you specify the simple keyword, you can enter a password only in plain text.
CHAPTER 104: L2TP CONFIGURATION COMMANDS Use the undo tunnel timer hello command to restore the default. By default, the interval is 60 seconds. You can set different hello intervals for the LNS and LAC. Example # Set the hello interval to 99 seconds.
TRAFFIC POLICING (TP) CONFIGURATION COMMANDS 105 display qos car interface Syntax View display qos car interface [ interface-type interface-number ] Any view Parameters interface-type interface-number: Specifies an interface by its type and number. Description Use the display qos car interface command to view parameter configuration and running statistics of CAR at each or all interfaces. If no interface is specified, CAR configuration and running statistics of all interfaces will be displayed.
CHAPTER 105: TRAFFIC POLICING (TP) CONFIGURATION COMMANDS Table 472 Description on the fields of the display qos car command Filed Description CBS Committed Burst Size, i.e. the depth of token bucket carrying burst traffic, in byte EBS Excess Burst Size, i.e.
outbound: Limits rate for the packets sent by the interface. any: Limits rates for all packets that match any rules. acl acl-number: Limits the rate of packets matching the IPv4 ACL, with acl-number being the IPv4 ACL number. It ranges from 2000 to 3999. acl ipv6 acl-number: Limits the rate of packets matching the IPv6 ACL, with acl-number being the IPv6 ACL number. It ranges from 2000 to 3999.
CHAPTER 105: TRAFFIC POLICING (TP) CONFIGURATION COMMANDS You can configure several CAR policies by using the command for several times. And the executing order of the policies depends on the configuration order. Execute the command in interface view, and the setting is valid on the current interface only. Examples # Configure traffic policing for outbound packets that conform to CARL rule 1 at the interface Ethernet1/0. The normal traffic is 200 kbps.
You can define eight DSCP values at most. If the same DSCP is specified for several times, the system by default regards that only one DSCP value has been specified. The DSCP values are related to one another in the way of “OR”. Examples # Configure CARL rule 1 with packet precedence 7.
CHAPTER 105: TRAFFIC POLICING (TP) CONFIGURATION COMMANDS
106 TRAFFIC SHAPING CONFIGURATION COMMANDS display qos gts interface Syntax View display qos gts interface [ interface-type interface-number ] Any view Parameters interface-type interface-number: Specifies an interface by its type and number. Description Use the display qos gts interface command to view GTS configuration and accounting information of certain interface or all interfaces.
CHAPTER 106: TRAFFIC SHAPING CONFIGURATION COMMANDS Table 474 Description on the fields of the display qos gts command Field Description Discarded Number and byte number of discarded packets. Delayed Number and byte number of delayed packets.
Execute the command in interface view, and the setting is effective on the current interface only. Related commands: n Examples acl on page 2087. IPv6 is not supported for traffic shaping for software forwarding. # Configure traffic shaping for the packets that conform to ACL rule 2001 at the Ethernet1/0 interface. The normal traffic is 200 kbps. The burst size, twice of the normal traffic (50000 bytes), is allowed at the first time.
CHAPTER 106: TRAFFIC SHAPING CONFIGURATION COMMANDS
107 LINE RATE CONFIGURATION COMMANDS display qos lr interface Syntax View display qos lr interface [ interface-type interface-number ] Any view Parameters interface-type interface-number: Specifies an interface by its type and number. Description Use the display qos lr interface command to view LR configuration and statistics of an interface or all interfaces. If no interface is specified, the LR configuration and running statistics of all interfaces will be displayed.
CHAPTER 107: LINE RATE CONFIGURATION COMMANDS Table 475 Description on the fields of the display qos lr command Field Description Passed Number and byte number of passed packets. Delayed Number and byte number of delayed packets. Active Shaping Whether the current LR configuration is activated or not.
View Parameters Layer 2 module interface view, port group view inbound: Configures LR for data streams received by the interface. For a device which cannot be installed with an external interface module or when the number of the interfaces is 4 or 9, this argument is not supported. outbound: Configures LR for data streams sent by the interface.
CHAPTER 107: LINE RATE CONFIGURATION COMMANDS
108 DEFINING CLASS COMMANDS display traffic classifier Syntax View Parameters display traffic classifier { system-defined | user-defined } [ tcl-name ] Any view system-defined: Class pre-defined by the system. user-defined: Class pre-defined by the user. tcl-name: Class name, a string of characters in the range 1 to 31. Description Use the display traffic classifier command to view the configuration information about the class.
CHAPTER 108: DEFINING CLASS COMMANDS if-match Syntax if-match [ not ] match-criteria undo if-match [ not ] match-criteria View Parameters Class view not: Specifies to be the rule that does not match the specified matching rule. match-criteria: Class match rules.
Table 477 Values of matching rules for class Value Description rtp start-port start-port-number end-port end-port-number Define RTP port matching rule. start-port-number is the starting RTP port number which is valued in the range 2000 to 65535; end-port-number is the ending RTP port number which is valued in the range 2000 to 65535. qos-local-id local-id-value Define qos-local-id matching rule; local-id-value is the local QoS ID in the range 1 to 4095.
CHAPTER 108: DEFINING CLASS COMMANDS ■ if-match rule 1 ■ if-match rule 2 ■ traffic classifier classA operator or ■ if-match rule 3 ■ if-match classifier classB For a class, you can configure multiple commands which cannot be overwritten. 5 Define DSCP matching rule. ■ For a class, you can configure multiple commands which cannot be overwritten. The DSCP values specified by them are automatically arranged in ascending order.
specified MPLS EXP precedence values are identical with those in the rule (sequence may be different) can the command be deleted. ■ You may configure up to eight MPLS EXP precedence values in one command. If multiple MPLS EXP precedences of the same value are specified, the system regards them as one. Relation between different local priorities is "OR". ■ The MPLS EXP field is specific to MPLS packets, so this matching rule is effective for only the MPLS packets.
CHAPTER 108: DEFINING CLASS COMMANDS system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match acl 3101 # Define a class to match the ACL named flow. system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match acl name flow # Define a class to match IPV6 ACL 3101. system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match ipv6 acl 3101 # Define a class to match the IPv6 ACL named flow.
# Define the match rule of class1 as matching the packets with the DSCP value as 1 or 6. system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match ip-precedence 1 6 # Define the packet whose class match protocol is IP. system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match protocol ip # Define the match rule of class1 as matching the packets whose RTP port number is the even UDP port number between 16384 and 32767.
CHAPTER 108: DEFINING CLASS COMMANDS By default, the relation is operator and. tcl-name shall not be the classes pre-defined by the system. The classes defined by the system include: default-class, ef, af1, af2, af3, af4, ip-prec0, ip-prec1, ip-prec2, ip-prec3, ip-prec4, ip-prec5, ip-prec6, ip-prec7, mpls-exp0, mpls-exp1, mpls-exp2, mpls-exp3, mpls-exp4, mpls-exp5, mpls-exp6, and mpls-exp7. Related commands: Examples qos policy, qos apply policy (interface view), classifier behavior.
109 DEFINING TRAFFIC BEHAVIOR COMMANDS car Syntax car cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size ] ] [ green action ] [ red action ] undo car View Parameters Traffic behavior view cir committed-information-rate: Committed information rate, in the range 8 to 1000000 kbps. cbs committed-burst-size: Committed burst size, number of bits that can be sent in each interval, in the range 1875 to 19375000. It defaults to the traffic passed at CIR in 500 milliseconds.
CHAPTER 109: DEFINING TRAFFIC BEHAVIOR COMMANDS Description Use the car command to configure traffic monitoring for a traffic behavior. Use the undo car command to delete the configuration of traffic monitoring. The policy can be used in the input or outbound direction of the interface. Application of policy including of TP policy on an interface will cause the previous qos car command ineffective.
Queue length 50 (Packets) Marking: Remark MPLS EXP 3 Behavior: USER1 Marking: Remark IP Precedence 3 Committed Access Rate: CIR 200 (kbps), CBS 15000 (byte), EBS 0 (byte) Conform Action: pass Exceed Action: discard Expedited Forwarding: Bandwidth 50 (Kbps) CBS 1500 (Bytes) Table 478 Description on the fields of display traffic behavior user-defined Field Description User Defined Behavior Information Behavior type: user-defined Behavior Behavior name and content: including multiple types Assured
CHAPTER 109: DEFINING TRAFFIC BEHAVIOR COMMANDS undo gts View Parameters Traffic behavior view cir committed-information-rate: CIR, in the range 8 to 1000000 kbps. cbs committed-burst-size: CBS, in the range 1875 to 19375000 bytes, with the default value being the traffic passed at CIR in 500 milliseconds. If the traffic passed at CIR in 500 milliseconds is lower than 1875, 1875 is taken as the default value. ebs excess-burst-size: EBS, in the range 0 to 19375000 bytes.
Parameters cpu: Redirects to CPU. interface: Redirects to specified interface. next-hop: Redirects to the next hop. interface-type interface-number: Specifies an interface by its type and number. Description User the redirect command to configure redirect action for traffic behavior. User the undo redirect command to delete the configuration.
CHAPTER 109: DEFINING TRAFFIC BEHAVIOR COMMANDS remark dot1p Syntax remark dot1p 8021p undo remark dot1p View Traffic behavior view Parameters 8021p: Remarked 802.1p priority value, in the range 0 to 7. Description Use the remark dot1p command to configure the 802.1p priority value of the remarked packet. Use the undo remark dot1p command to remove the 802.1p priority value from the remarked packet. By default, no 802.1p priority is marked.
Table 479 DSCP keywords and values Description Keyword DSCP value (binary) DSCP value (decimal) af32 011100 28 af33 011110 30 af41 100010 34 af42 100100 36 af43 100110 38 cs1 001000 8 cs2 010000 16 cs3 011000 24 cs4 100000 32 cs5 101000 40 cs6 110000 48 cs7 111000 56 ef 101110 46 Use the remark dscp command to set a remarked DSCP value for IP packets belonging to the class. Use the undo remark dscp command to disable DSCP remark.
CHAPTER 109: DEFINING TRAFFIC BEHAVIOR COMMANDS Examples # Remark the DE bit in FR packets to 1. system-view [Sysname] traffic behavior database [Sysname-behavior-database] remark fr-de 1 remark ip-precedence Syntax remark ip-precedence ip-precedence-value undo remark ip-precedence View Traffic behavior view Parameters ip-precedence-value: IP precedence value, in the range 0 to 7. Description Use the remark ip-precedence command to configure IP precedence remark.
system-view [Sysname] traffic behavior database [Sysname-behavior-database] remark mpls-exp 2 remark qos-local-id Syntax remark qos-local-id local-id-value undo remark qos-local-id View Traffic behavior view Parameters local-id-value: Remarked QoS local ID value, in the range 1 to 4095. Description Use the remark qos-local-id command to configure the qos-local-id value of remarked packet. Use the undo remark qos-local-id command to delete the qos-local-id value of remarked packet.
CHAPTER 109: DEFINING TRAFFIC BEHAVIOR COMMANDS Examples # Define a traffic behavior named behavior1.
110 DEFINING POLICY COMMANDS classifier behavior Syntax classifier tcl-name behavior behavior-name undo classifier tcl-name View Parameters Policy view tcl-name: Must be the name of the defined class, a string of characters in the range 1 to 31. behavior-name: Must be the name of the defined behavior., a string of characters in the range 1 to 31. Description Use the classifier behavior command to specify the behavior for the class in the policy.
CHAPTER 110: DEFINING POLICY COMMANDS View Parameters Any view system-defined: Policy pre-defined by the system. user-defined: Policy pre-defined by the user. policy-name: Policy name. If it is not specified, the configuration information of all the policies pre-defined by the system or by the user will be displayed. tcl-name: Class name in the policy.
Table 480 Description on the fields of the display qos policy command Field Description Behavior The behavior in a policy that corresponds with a class. Each behavior can have multiple matching rules. For details, refer to “traffic behavior” on page 1799.
CHAPTER 110: DEFINING POLICY COMMANDS Committed Access Rate: CIR 200 (kbps), CBS 15000 (byte), EBS 0 (byte) Conform Action: pass Exceed Action: discard Conformed: 0/0 (Packets/Bytes) Exceeded : 0/0 (Packets/Bytes) Expedited Forwarding: Bandwidth 50 (Kbps), CBS 1500 (Bytes) Matched : 0/0 (Packets/Bytes) Enqueued : 0/0 (Packets/Bytes) Discarded: 0/0 (Packets/Bytes) Classifier: database Matched : 0/0 (Packets/Bytes) Operator: AND Rule(s) : if-match acl 3131 if-match inbound interface Ethernet1/0 Behavio
Parameters inbound: Inbound direction. outbound: Outbound direction. policy-name: Policy name, a string of characters in the range 1 to 31. dynamic: If this argument is applied when CBQ is applied on an interface, the CBQ bandwidth will be dynamically changed with the change of the interface bandwidth. Description Use the qos apply policy command to apply associated policy to the interface. Use the undo qos apply policy command to delete the associated policy from the interface.
CHAPTER 110: DEFINING POLICY COMMANDS View Parameters Layer 2 interface view/port group view inbound: Inbound direction. policy policy-name: Policy name, a string of characters in the range 1 to 31. Description Use the qos apply policy command to apply associated policy to the interface. Use the undo qos apply policy command to delete the associated policy from the interface. The command is valid when the number of the interfaces on a layer 2 module is 16, 24 or 48.
system-view [Sysname] qos policy user1 [Sysname-qospolicy-user1]
CHAPTER 110: DEFINING POLICY COMMANDS
111 FIFO QUEUING CONFIGURATION COMMANDS qos fifo queue-length Syntax qos fifo queue-length queue-length undo qos fifo queue-length View Interface view Parameters queue-length: Length limit of a queue, in the range 1 to 1024. By default, the length is 75. Description Use the qos fifo queue-length command to set the length limit of FIFO queue. Use the undo qos fifo queue-length command to restore the default value of the queue length. Examples # Set the length of FIFO queue to 100.
CHAPTER 111: FIFO QUEUING CONFIGURATION COMMANDS
112 PQ CONFIGURATION COMMANDS display qos pq interface Syntax View display qos pq interface [ interface-type interface-number ] Any view Parameters interface-type interface-number: Specifies an interface by its type and number. Description Use the display qos pq interface command to view the configuration and statistics of priority queues (PQ) of an interface or all interfaces.
CHAPTER 112: PQ CONFIGURATION COMMANDS Parameters pql-number: Priority queue list number. Description Use the display qos pql command to view contents of specified PQ list (PQL) or all PQ lists. Default items are not displayed. Related commands: Examples qos pq, qos pq pql. # Display PQLs.
Examples # Apply the priority list 12 to the Ethernet 1/0. system-view [Sysname] interface Ethernet1/0 [Sysname-Ethernet1/0] qos pq pql 12 qos pql default-queue Syntax qos pql pql-index default-queue { bottom | middle | normal | top } undo qos pql pql-index default-queue View Parameters System view pql-index: PQL index, in the range 1 to 16. top, middle, normal and bottom: Corresponds to the four levels of priority queue, in descending order. The queue defaults to normal.
CHAPTER 112: PQ CONFIGURATION COMMANDS top, middle, normal and bottom: Corresponds to the four levels of priority queues, in descending order. Description Use the qos pql inbound-interface command to establish classification rules based on interfaces. Use the undo qos pql inbound-interface command to delete the corresponding classification rule. By default, no classification rule is configured. This command can match packets according to which interface the packet comes from.
Table 483 Description on values of queue-key and key-value queue-key key-value Description greater-than Length, 0 to 65535 Any link layer frame greater than the specified value is enqueued. less-than Length, 0 to 65535 Link layer frames greater than the specified value are enqueued. tcp Port number, 0 to 65535 Any IP packet whose source or destination TCP port number is the specified port number will be classified.
CHAPTER 112: PQ CONFIGURATION COMMANDS By default, the length values of the queues are as follows: The default length value of the top queue is 20. The default length value of the middle queue is 40. The default length value of the normal queue is 60. The default length value of the bottom queue is 80. Description Use the qos pql queue command to specify the maximum number of packets that can wait in each of the priority queues, or the length of a PQ.
113 CQ CONFIGURATION COMMANDS display qos cq interface Syntax View display qos cq interface [ interface-type interface-number ] Any view Parameters interface-type interface-number: Specifies an interface by its type and number. Description Use the display qos cq interface command to view configuration and statistics of customized queues (CQ) at interfaces. If no interface is specified, CQ configuration and statistics of all interfaces will be displayed. Related commands: Examples qos cq.
CHAPTER 113: CQ CONFIGURATION COMMANDS Default values will not be displayed. Related commands: Examples qos cq, qos cql default-queue, qos cql inbound-interface, qos cql protocol, qos cql queue, qos cql queue serving. # Display information about a CQL.
qos cql default-queue Syntax qos cql cql-index default-queue queue-number undo qos cql cql-index default-queue View Parameters System view cql-index: CQL index, in the range 1 to 16. queue-number: Queue number, in the range 0 to 16. By default, customized queue number is 1. Description Use the qos cql default-queue command to assign a default queue for those packets that do not match any rule in the CQL. Use the undo qos cql default-queue command to restore to the default queue.
CHAPTER 113: CQ CONFIGURATION COMMANDS Use the undo qos cql inbound-interface command to delete corresponding classification rules. By default, no classification rules are configured. This command matches a packet to a rule according to the interface that the packet comes from. For the same cql-index, this command can be repeatedly used, establishing different classification rules for packets from different interfaces.
Table 484 Descriptions of values of queue-key and key-value queue-key key-value Description udp Port number, 0 to 65535 Any IP packet whose source or destination UDP port number is the specified port number will be classified. -- -- All IP packets are enqueued. When queue-key is tcp or udp, key-value can be port name or the associated port number. Description Use the qos cql protocol command to establish classification rules based on the protocol type.
CHAPTER 113: CQ CONFIGURATION COMMANDS If a queue is full, any newly incoming packet will be dropped. Related commands: Examples qos cql default-queue, qos cql inbound-interface, qos pql protocol, qos cql queue serving, qos cq. # Specify the maximum packets in the queue 4 in CQL 5 to 40.
114 WFQ CONFIGURATION COMMANDS display qos wfq interface Syntax View display qos wfq interface [ interface-type interface-number ] Any view Parameters interface-type interface-number: Specifies an interface by its type and number. Description Use the display qos wfq interface command to view Weighted Fair Queuing (WFQ) configuration and statistics of an interface. If no interface is specified, the WFQ configuration and statistics of all interfaces will be displayed.
CHAPTER 114: WFQ CONFIGURATION COMMANDS qos wfq Syntax qos wfq [ precedence | dscp ] [ queue-length max-queue-length [ queue-number total-queue-number ] ] undo qos wfq View Parameters Interface view precedence: Weight type of IP precedence. dscp: Weight type of DSCP ( DiffServ code point). max-queue-length: Maximum queue length, or maximum number of packets in each queue. It ranges from 1 to 1024 and defaults to 64. Packets out of the range will be discarded. total-queue-number: Sum of queues.
115 CBQ CONFIGURATION COMMANDS display qos cbq interface Syntax View Parameters display qos cbq interface [ { interface-type interface-number } [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ] Any view interface-type interface-number: Specifies an interface by its type and number. pvc: Used for ATM interface only, i.e., policy configuration of specified PVC on specified ATM interface can be displayed. pvc-name: PVC name. vpi/vci: VPI/VCI value pair.
CHAPTER 115: CBQ CONFIGURATION COMMANDS Parameters bandwidth: Maximum bandwidth available on an interface, in the range 1 t o1000000 kbps Description Use the queue max-bandwidth command to configure the maximum bandwidth available on an interface. Use the undo queue max-bandwidth command to restore the default.
When associating the class with the queue af behavior in the policy, the following must be satisfied. The sum of the bandwidth specified for the classes in the same policy to assured forwarding (queue af) and expedited forwarding (queue ef) must be less than or equal to the available bandwidth of the interface where the policy is applied.
CHAPTER 115: CBQ CONFIGURATION COMMANDS In the policy the default class default-class cannot be associated with the traffic behavior queue ef belongs to. The sum of the bandwidth specified for the classes in the same policy to assured forwarding (queue af) and expedited forwarding (queue ef) must be less than or equal to the available bandwidth of the interface where the policy is applied.
Examples # Configure WFQ for default-class and the queue number is 16. system-view [Sysname] traffic behavior test [Sysname-behavior-test] queue wfq 16 [Sysname] qos policy user1 [Sysname-qospolicy-user1] classifier default-class behavior test queue-length Syntax queue-length queue-length undo queue-length queue-length View Traffic behavior view Parameters queue-length: The maximum threshold value of the queue, in the range 1 to 512. The queue length is 64.
CHAPTER 115: CBQ CONFIGURATION COMMANDS Parameters dscp: Uses DSCP value for calculating drop probability for a packet. ip-precedence: Uses IP precedence value for calculating drop probability for a packet. Description Use the wred command to configure drop mode as Weighted Random Early Detection (WRED). Use the undo wred command to remove the configuration. This command can be used only after the queue af or queue wfq command has been configured.
This command can be used only after the wred command has been used to enable WRED drop mode based on DSCP. The configuration of wred dscp will be deleted if the configuration of qos wred is deleted. The configuration of drop parameter gets invalid if the configuration of the queue af command or the queue wfq command is cancelled. Related commands: Examples qos policy, traffic behavior, classifier behavior.
CHAPTER 115: CBQ CONFIGURATION COMMANDS The configuration of drop parameters gets invalid if the configuration of the queue af command or the queue wfq command is cancelled. Related commands: Examples qos policy, traffic behavior, classifier behavior. # Set lower-limit to 20, upper-limit to 40 and discard probability to 15 for the packet with the precedence 3.
116 RTP PRIORITY QUEUE CONFIGURATION COMMANDS display qos rtpq interface Syntax View display qos rtpq interface [ interface-type interface-number ] Any view Parameters interface-type interface-number: Specifies an interface by its type and number. Description Use the display qos rtpq interface command to view information of the current IP RTP Priority queue, including the current RTP queue depth and number of RTP packets dropped.
CHAPTER 116: RTP PRIORITY QUEUE CONFIGURATION COMMANDS View Interface view Parameters pct percent: Percentage of the reserved bandwidth to the available bandwidth. It is in the range 1 to 100 and the default value is 80. Description Use the qos reserved-bandwidth command to set the maximum reserved bandwidth percentage. Use the undo qos reserved-bandwidth command to restore the default value.
Use the undo qos rtpq command to disable the RTP queuing feature of the interface. By default, RTP queuing feature is disabled. This command is applied to the delay-sensitive applications, real-time voice transmission for example. Configured with the qos rtpq command, the system will serve the voice services first among all other services. The parameter bandwidth should be set greater than the service-required bandwidth so as to prevent conflict caused by the burst traffic.
CHAPTER 116: RTP PRIORITY QUEUE CONFIGURATION COMMANDS
117 QOS TOKEN CONFIGURATION COMMANDS qos qmtoken Syntax qos qmtoken token-number undo qos qmtoken View Interface view Parameters token-number: The number of transmitted tokens, in the range 1 to 50. Description Use the qos qmtoken command to configure the number of transmitted tokens. Use the undo qos qmtoken command to disable the token transmission function of QoS. By default, the function of QoS is disabled.
CHAPTER 117: QOS TOKEN CONFIGURATION COMMANDS
118 PRIORITY MAPPING TABLE CONFIGURATION COMMANDS display qos map-table Syntax View display qos map-table [ dot1p-lp ] Any view Parameters dot1p-lp: Mapping table of 802.1p priority to local priority. Description Use the display qos map-table command to display configuration of specified priority mapping table If the type of table is not specified, the configuration information of all mapping tables will be displayed. Related commands: Examples qos map-table dot1p-Ip.
CHAPTER 118: PRIORITY MAPPING TABLE CONFIGURATION COMMANDS qos map-table dot1p-Ip Syntax View qos map-table dot1p-lp System view Parameters dot1p-lp: Mapping table of 802.1p priority to local priority. Description Use the qos map-table command to enter the specified priority mapping table view. Related commands: Examples display qos map-table. # Enter the mapping table view from 802.1p priority to local priority.
Table 488 Parameters in the default mapping table Related commands: Examples 802.1p priority Local priority 4 4 5 5 6 6 7 7 display qos map-table. # Configure the parameters in the mapping table from 802.1p priority to local priority. The local priority corresponding to 802.1p priority 4 and 5 is local priority 1.
CHAPTER 118: PRIORITY MAPPING TABLE CONFIGURATION COMMANDS
119 PORT PRIORITY CONFIGURATION COMMANDS qos priority Syntax qos priority priority-value undo qos priority View Ethernet interface view/port group view Parameters priority-value: Port priority value, in the range 0 to 7. The default value is 0. Description Use the qos priority command to configure the port priority of current port. Use the undo qos priority command to restore to the default value. Port group is supported if the number of the interfaces on a layer 2 module is 16, 24 or 48.
CHAPTER 119: PORT PRIORITY CONFIGURATION COMMANDS
120 PORT PRIORITY TRUST MODE CONFIGURATION COMMANDS display qos trust interface Syntax View display qos trust interface [ interface-type interface-number ] Any view Parameters interface-type interface-number: Specifies an interface by its type and number. Description Use the display qos trust interface command to display the information about the port priority trust mode currently configured. If no interface is specified, the port priority trust mode of all interfaces will be displayed.
CHAPTER 120: PORT PRIORITY TRUST MODE CONFIGURATION COMMANDS Description Use the qos trust command to set to trust 802.1p priority carried with a packet. Use the undo qos trust command to restore the default. By default, 802.1p priority carried with a packet is not trusted. Port group is supported if the number of the interfaces on a layer 2 module is 16, 24 or 48. Execute the command in interface view, and the setting is valid on the current interface only.
121 WRED CONFIGURATION COMMANDS display qos wred interface Syntax View display qos wred interface [ interface-type interface-number ] Any view Parameters interface-type interface-number: Specifies an interface by its type and number. Description Use the display qos wred interface command to view WRED configuration and statistics of an interface. If no interface is specified, WRED configuration and statistics of all interfaces will be displayed.
CHAPTER 121: WRED CONFIGURATION COMMANDS Table 490 Description on the fields of the display qos wred interface command Field Description High limit Higher limit for queue Discard probability Denominator for calculating drop probability # Display the WRED configuration and statistics of the specified interface.
By default, the dropping method of a queue is tail drop. Related commands: Examples qos wfq, display qos wred interface. # Enable WRED on Ethernet 1/0, using IP precedence for calculating the drop probability.
CHAPTER 121: WRED CONFIGURATION COMMANDS [Sysname-Ethernet1/0] qos wred dscp 63 low-limit 20 high-limit 40 di scard-probability 15 qos wred ip-precedence Syntax qos wred ip-precedence ip-precedence low-limit low-limit high-limit high-limit discard-probability discard-prob undo qos wred ip-precedence ip-precedence View Parameters Interface view ip-precedence ip-precedence: Specifies an IP precedence, in the range 0 to 7; low-limit low-limit: Specifies the lower threshold, in the range 1 to 1024.
View Interface view Parameters weighting-constant exponent: Exponent used to calculate the average queue length, in the range 1 to 16. It defaults to 9. Description Use the qos wred weighting-constant command to set exponential used to calculate the average length of WRED queues. Use the undo qos wred weighting-constant command to restore the default. Before you can configure WRED parameters on an interface, you must apply WRED with the qos wred enable command on it.
CHAPTER 121: WRED CONFIGURATION COMMANDS
122 WRED TABLE CONFIGURATION COMMANDS display qos wred table Syntax View display qos wred table [ table-name ] Any view Parameters table-name: Name of the WRED table to be displayed. Description Use the display qos wred table command to display the configuration information of WRED table. If no table name is specified, the configuration information of all WRED tables will be displayed.
CHAPTER 122: WRED TABLE CONFIGURATION COMMANDS Table 492 Description on the fields of the display qos wred table command Field Description Discard probability Denominator for calculating drop probability qos wred queue table Syntax qos wred queue table table-name undo qos wred table table-name View Parameters System view queue: Queue-based table, which randomly drops packets according to the queue the packet belongs to when congestion occurs.
Description Use the qos wred apply command to apply WRED table on an interface. Use the undo qos wred apply command to restore the default dropping method. This command also deletes the application of WRED table. By default, the dropping method of a queue is tail drop. The queue-based WRED table can be applied only on a Layer 2 interface and on a layer 2 interface only the queue-based WRED table can be applied.
CHAPTER 122: WRED TABLE CONFIGURATION COMMANDS system-view [Sysname] qos wred queue table queue-table1 [Sysname-wred-table-queue-table1] queue 1 low-limit 10
123 MPLS QOS CONFIGURATION COMMANDS if-match mpls-exp Syntax if-match [ not ] mpls-exp exp-value-list undo if-match [ not ] mpls-exp View Class view Parameters exp-value-list: EXP value list, in the range 0 to 7. Users can input the eight values repeatedly. Description Use the if-match mpls-exp command to configure the matching rule for EXP domain of MPLS. Use the undo if-match mpls-exp command to delete the matching rule.
CHAPTER 123: MPLS QOS CONFIGURATION COMMANDS queue: Queue number of CQ, in the range 0 to 16. exp-value: EXP domain of MPLS packet, in the range 0 to 7. Up to 8 can be configured, separated with space. Description Use the qos cql protocol mpls exp command to configure CQ classification rule based on the MPLS protocol. Use the undo qos cql protocol mpls exp command to delete the corresponding classification rule.
When multiple rules are present, the device matches packets in the sequence that rules are configured. Related commands: Examples qos pql protocol. # Configure classification rule based on the MPLS protocol CQL 10, and sets the queue top to correspond with EXP value 5.
CHAPTER 123: MPLS QOS CONFIGURATION COMMANDS
124 DAR CONFIGURATION COMMANDS dar max-session-count Syntax dar max-session-count count undo dar max-session-count View System view Parameters count: The maximum number of connections recognizable by DAR, in the range 0 to 65536. It defaults to 65536. Description Use the dar max-session-count command to configure the maximum number of connections recognizable by DAR. Use the undo dar max-session-count command to restore the default value.
CHAPTER 124: DAR CONFIGURATION COMMANDS protocols, including user-defined01, user-defined02, ..., user-defined10. No port number is specified for the user-defined protocol at the initial state. It will be effective only after the port number is specified. At the same time, the dar protocol-rename command can be used to modify the name of user-defined protocol. tcp: Based on TCP. udp: Based on UDP.
Table 493 Protocols of pre-defined ports Protocol name Protocol type Pre-defined port number NetBIOS TCP 137, 138, 139 NetBIOS UDP 137, 138, 139 Netshow TCP 1755 NFS TCP/UDP 2049 NNTP TCP/UDP 119 Notes TCP/UDP 1352 Novadign TCP/UDP 3460, 3461, 3462, 3463, 3464, 3465 NTP TCP/UDP 123 PCAnywhere TCP 5631, 65301 PCAnywhere UDP 22, 5632 POP3 TCP/UDP 110 PPTP TCP 1723 Printer TCP/UDP 515 RCMD TCP 512, 513, 514 RIP UDP 520 RSVP UDP 1698, 1699 RTSP TCP 554
CHAPTER 124: DAR CONFIGURATION COMMANDS Description Use the dar protocol command to configure the port number of DAR application protocol. Use the undo dar protocol command to restore the port number to default value. By default, port number is specified for the protocols except for the ten user-defined protocols, RTP and RTCP. Examples # Set the port number of RTP protocol to 36000, 36001, or 40000 to 40999.
undo dar protocol-statistic View Interface view Parameters time: Time interval between statistics actions , in minute, in the range 1 to 30. By default, it is 5 minutes. Description Use the dar protocol-statistic command to enable DAR packet statistics function. Use the undo dar protocol-statistic command to disable the function.
CHAPTER 124: DAR CONFIGURATION COMMANDS display dar protocol Syntax View Parameters display dar protocol { all | protocol-name } Any view all: Displays information about all protocols. protocol-name: Displays information about specified protocols, in the same range with the protocol-name defined in the dar protocol command. Description Use the display dar protocol command to display configuration information about the DAR protocol.
5555 netbios netshow nfs nntp notes novadign ntp pcanywhere pop3 pptp printer rcmd rip rsvp rtcp rtp rtsp secure-ftp secure-http secure-imap secure-irc secure-ldap secure-nntp secure-pop3 secure-telnet sip skinny smtp snmp socks sqlnet sqlserver ssh streamwork sunrpc syslog telnet tftp user-defined01 user-defined02 tcp udp tcp tcp udp tcp udp tcp udp tcp udp tcp udp tcp udp tcp udp tcp tcp udp tcp udp udp 137 138 139 137 138 139 1755 2049 2049 119 119 1352 1352 3460 3461 3462 3463 3464 3465 3460 346
CHAPTER 124: DAR CONFIGURATION COMMANDS user-defined03 user-defined04 user-defined05 user-defined06 user-defined07 user-defined08 user-defined09 user-defined10 vdolive tcp winmx tcp xwindows tcp 7000 6699 range 6000 6003 Table 495 Description on the fields of the display dar protocol command Field Description Protocol Protocol name TCP/UDP Based on TCP/UDP Port Port number display dar protocol-rename Syntax View display dar protocol-rename Any view Parameters None Description Use the d
display dar protocol-statistic Syntax View Parameters display dar protocol-statistic [ protocol protocol-name | top top-number | all ] [ interface interface-type interface-number ] [ direction { in | out } ] Any view protocol protocol-name: Displays specified protocol, in the same range with the protocol-name defined in the if-match protocol command. top top-number: Displays the newest protocols of the traffic in top-number, in the range 1 to 16.
CHAPTER 124: DAR CONFIGURATION COMMANDS Table 497 Description on the fields of the display dar protocol-statistic command Field Description Packet Count Packet number Byte Count Byte number Bit Rate in 5 min(bps) Bit rate within 5 minutes, in bps Max Bit Rate in 5 min(bps) Maximum bit rate within 5 minutes, in bps if-match protocol Syntax if-match [ not ] protocol protocol-name undo if-match [ not ] protocol protocol-name View Parameters Class view not: Specifies the current rule to not
if-match protocol http Syntax if-match [ not ] protocol http [ url url-string | host hostname-string | mime mime-type ] undo if-match [ not ] protocol http [ url url-string | host hostname-string | mime mime-type ] View Parameters Class view not: Specifies the current rule to not to match the specified matching rule. url: Matches according to the URL in the HTTP packet.
CHAPTER 124: DAR CONFIGURATION COMMANDS system-view [Sysname] traffic classifier http-class [Sysname-classifier-http-class] if-match protocol http host *.abc.com if-match protocol rtp Syntax if-match [ not ] protocol rtp [ payload-type { audio | video | payload-string } * ] undo if-match [ not ] protocol rtp [ payload-type { audio | video | payload-string }* ] View Parameters Class view not: Specifies the current rule to not to match the specified matching rule.
View Parameters User view protocol protocol-name: Deletes statistics information about specified protocol, in the same range with protocol-name in the if-match protocol command. interface-type interface-number: Specifies an interface by its type and number. all: Deletes all statistics information. Description Examples Use the reset dar protocol-statistic command to delete DAR protocol statistics information, i.e. to restore the statistics to 0.
CHAPTER 124: DAR CONFIGURATION COMMANDS
125 FR QOS CONFIGURATION COMMANDS apply policy outbound Syntax apply policy policy-name outbound undo apply policy outbound View Frame relay class view Parameters policy-name: Name of the applied policy. It is a string with 1 to 31 characters. Description Use the apply policy outbound command to set the FR virtual circuit queuing to Class-Based Queuing (CBQ). Use the undo apply policy outbound command to restore the FR virtual circuit queuing to FIFO. By default, FIFO queuing is adopted.
CHAPTER 125: FR QOS CONFIGURATION COMMANDS cbs Syntax cbs [ inbound | outbound ] committed-burst-size undo cbs [ inbound | outbound ] View Parameters Frame relay class view inbound: Sets the committed burst size of the inbound packet, valid only when Frame Relay Traffic Policing (FRTP) is enabled on the interface. outbound: Sets the committed burst size of the outbound packet, valid only when Frame Relay Traffic Shaping (FRTS) is enabled on the interface.
Use the undo cir command to restore the default value. The CIR is the minimum sending rate that can be provided by virtual circuit. It ensures the user could still send data at this rate upon network congestion. Upon network congestion, DCE will send a packet with a BECN flag bit of 1 to DTE. After DTE receives this packet, it gradually reduces the sending rate of virtual circuit from the allowed CIR (CIR ALLOW) to CIR.
CHAPTER 125: FR QOS CONFIGURATION COMMANDS Related commands: Examples cbs, ebs, cir. # Set the CIR ALLOW of the FR class that is named test1 as 64000 bps. system-view [Sysname] fr class test1 [Sysname-fr-class-test1] cir allow 64000 congestion-threshold Syntax congestion-threshold { de | ecn } queue-percentage undo congestion-threshold { de | ecn } View Parameters Frame relay class view de: Discards the FR packet whose DE flag bit is 1 upon congestion.
View Frame relay class view Parameters cql cql-index: Group number of Custom Queuing, ranging from 1 to 16. Description Use the cq command to set the FR virtual circuit queuing to Custom Queuing (CQ). Use the undo cq command to restore the FR virtual circuit queuing to FIFO. By default, the virtual circuit queuing type is FIFO. If you use this command repeatedly on the same FR, the new configuration will overwrite the old one. Related commands: Examples wfq, pq, fr pvc-pq.
CHAPTER 125: FR QOS CONFIGURATION COMMANDS Table 499 Description on the fields of the display fr class-map command Field Description Serial1/0 FR interface The first fr-class FR class on FR interface Serial1/0.1 Subinterface on the FR interface The second fr-class FR class on FR subinterface fr dlci 100 Serial1/0 Virtual circuit on FR interface, specifying the virtual circuit belongs to the main interface or the subinterface.
Examples # Display FR fragment information of all the interfaces. display fr fragment-info interface Serial1/0:1: dlci type size 200 FRF12(End to End) 80 in/out/drop 0/0/0 Table 501 Description on the fields of the display fr fragment-info command Field Description interface Interface dlci DLCI number type Fragment type. Three options are available: FRF.12, FRF.11 Annex C and Motorola fragment.
CHAPTER 125: FR QOS CONFIGURATION COMMANDS display fr switch-table Syntax View Parameters display fr switch-table { all | name switch-name | interface interface-type interface-number } Any view all: All the PVC information name: PVC information of a specified name. switch-name: PVC name, in the range 1 to 256 characters. interface: PVC information of a specified interface. interface-type interface-number: Specifies an interface by its type and number.
inbound: Information about inbound interface applying CBQ. outbound: Information about outbound interface applying CBQ. Description Examples Use the display qos policy interface command to view information about CBQ application on the interface. # Display the information about CBQ application of the virtual circuit with DLCI of 25 on interface MFR1/0.
CHAPTER 125: FR QOS CONFIGURATION COMMANDS Table 504 Description on the fields of the display qos policy interface command Field Description Max number of hashed Max number of hashed queues queues Matched Number of matched packets or bytes for a queue Enqueued Number of enqueued packets or bytes Discarded Number of discarded packets or bytes Discard Method Discard method Assured Forwarding Information of assured forwarding queue Bandwidth The minimum bandwidth of an AF queue display qos
ebs Syntax ebs [ inbound | outbound ] excess-burst-size undo ebs [ inbound | outbound ] View Parameters Frame relay class view inbound: Sets the EBS in inbound direction, valid only when FRTP is enabled on the interface. outbound: Sets EBS in outbound direction, valid only when FRTS is enabled on the interface. excess-burst-size: EBS in bit, ranging from 0 to 16000000. It defaults to 0 bit. Description Use the ebs command to set EBS of FR virtual circuit.
CHAPTER 125: FR QOS CONFIGURATION COMMANDS When the router serves as DCE for switching, the FIFO queue length of DLCI can be set if FRTS has been applied to DLCI. Related commands: Examples fr class. # Set the FIFO queue of the FR class named test1 to hold 80 packets at most.
Parameters de: Discards the FR packet whose DE flag bit is 1 when congestion occurs. ecn: Processes the BECN and FECN flag bits of FR packets when congestion occurs. queue-percentage: Network congestion threshold, the occupation ratio of the interface queue, equal to the percentage of current queue length to the total queue length of the interface, ranging from 1 to 100. By default, it is 100.
CHAPTER 125: FR QOS CONFIGURATION COMMANDS In the view of a FR main interface (or subinterface), this command can only apply a DE rule list to the FR VCs on the main interface or (or subinterface). After a DE rule list is applied to FR virtual circuit, those packets that match the rule list will have their DE flag set to 1. Related commands: Examples fr del inbound-interface, fr del protocol. # In the view of interface Serial 1/0, apply DE rule list 3 to DLCI 100 on the current interface.
fr del protocol Syntax fr del list-number protocol ip [ acl acl-number | fragments | greater-than bytes | less-than bytes | tcp ports | udp ports ] undo fr del list-number protocol ip [ fragments | acl acl-number | less-than bytes | greater-than bytes | tcp ports | udp ports ] View Parameters System view list-number: DE rule list number, ranging from 1 to 10. protocol ip: IP. fragments: All fragmented IP packets. acl acl-number: IP packets meeting ACL matching requirement.
CHAPTER 125: FR QOS CONFIGURATION COMMANDS system-view [Sysname] fr del 1 protocol ip fr pvc-pq Syntax fr pvc-pq [ top-limit middle-limit normal-limit bottom-limit ] undo fr pvc-pq View Parameters Frame relay interface view, MFR interface view top-limit: Length of top priority queue, ranging from 1 to 1024. The value is the number of packets. By default, it is 20. middle-limit: Length of middle priority queue, ranging from 1 to 1024. The value is the number of packets.
fr traffic-policing Syntax fr traffic-policing undo fr traffic-policing View Frame relay interface view, MFR interface view Parameters None Description Use the fr traffic-policing command to enable FRTP function. Use the undo fr traffic-policing command to disable FRTP function. FRTP function is applied to the inbound interface of FR packets on a router. Furthermore, it is only used at the DCE end of a FR network.
CHAPTER 125: FR QOS CONFIGURATION COMMANDS Examples # Enable FRTS on the serial interface Serial 1/0. system-view [Sysname] interface Serial1/0 [Sysname-Serial1/0] fr traffic-shaping fragment Syntax fragment [ fragment-size ] undo fragment [ fragment-size ] View Frame relay class view Parameters fragment-size: Size of a fragment, in byte, ranging from 16 to 1600. By default, the fragment size is of 45 bytes. Description Use the fragment command to enable the FRF.
If the specified FR class does not exist, the command will first create a FR class before associating the FR class with the current virtual circuit or interface. If the specified FR class does exist, the command will associate the FR class with the current virtual circuit or interface without creating a new FR class. The undo command only removes the association between a specified FR class and a virtual circuit or an interface rather than deletes the real FR class.
CHAPTER 125: FR QOS CONFIGURATION COMMANDS undo pvc-pq View Parameters Frame relay class view top: Sets the top PVC PQ , namely, top priority queue, to accept the packets from the VC. middle: Sets the middle PVC PQ , namely, middle priority queue, to accept the packets. normal: Sets the normal PVC PQ , namely, normal priority queue, to accept the packets. bottom: Sets the bottom PVC PQ , namely, normal priority queue, to accept the packets.
View Description Frame relay class view Use the rtpq command to configure to apply Realtime Transport Protocol (RTP) Priority Queuing. Use the undo rtpq command to remove the application. The application of a FR class configured with RTPQ to a PVC results in the creation of a strict priority queue on the PVC. Packets in the port range specified by RTPQ of the destination UDP port will enter RTPQ.
CHAPTER 125: FR QOS CONFIGURATION COMMANDS Examples # Enable the FR traffic shaping function, by adjusting the packets with the BECN flag 1 and the ratio of each adaptation is set to 20. system-view [Sysname] fr class test1 [Sysname-fr-class-test1] traffic-shaping adaptation becn 20 wfq Syntax wfq [ congestive-discard-threshold [ dynamic-queues ] ] undo wfq View Parameters Frame relay class view congestive-discard-threshold: The maximum number of packets allowed in the queue.
802.1X CONFIGURATION COMMANDS 126 display dot1x Syntax View Parameter display dot1x [ sessions | statistics ] [ interface interface-list ] Any view sessions: Displays 802.1x session information. statistics: Displays 802.1x statistics. interface interface-list: Specifies an Ethernet port list, which can contain multiple Ethernet ports.
CHAPTER 126: 802.
Table 506 Descriptions on the fields of the display dot1x command Field Description Handshake is disabled Indicates whether handshake is enabled on the port The port is an authenticator Role of the port Authenticate Mode is Auto Access control mode for the port Port Control Type is Mac-based Access control method for the port Guest VLAN Guest VLAN configured for the port. The value of 0 means that no guest VLAN is configured.
CHAPTER 126: 802.1X CONFIGURATION COMMANDS interface-type represents the port type, interface-number represents the port number, and & <1-10> means that you can provide up to 10 port indexes/port index lists for this argument. The start port number must be smaller than the end number and the two ports must of the same type. Description Use the dot1x command in system view to enable 802.1x globally. Use the undo dot1x command in system view to disable 802.1x globally.
undo dot1x authentication-method View Parameter System view chap: Authenticates supplicants using CHAP. eap: Authenticates supplicants using EAP. pap: Authenticates supplicants using PAP. Description Use the dot1x authentication-method command to set the 802.1x authentication method. Use the undo dot1x authentication-method command to restore the default. By default, CHAP is used. ■ The password authentication protocol (PAP) transports passwords in clear text.
CHAPTER 126: 802.1X CONFIGURATION COMMANDS dot1x guest-vlan vlan-id undo dot1x guest-vlan View Parameter System view/interface view vlan-id: ID of the VLAN to be specified as the guest VLAN, in the range 1 to 4094. interface interface-list: Specifies an Ethernet port list, which can contain multiple Ethernet ports.
Example # Specify port Ethernet 1/0 to use VLAN999 as its guest VLAN. system-view [Sysname] dot1x guest-vlan 999 interface ethernet 1/0 # Specify ports Ethernet 1/2 to Ethernet 1/5 to use VLAN10 as its guest VLAN. system-view [Sysname] dot1x guest-vlan 10 interface ethernet 1/2 to ethernet 1/5 # Specify all ports to use VLAN7 as their guest VLAN. system-view [Sysname] dot1x guest-vlan 7 # Specify port Ethernet 1/7 to use VLAN3 as its guest VLAN.
CHAPTER 126: 802.1X CONFIGURATION COMMANDS dot1x max-user Syntax In system view: dot1x max-user user-number [ interface interface-list ] undo dot1x max-user [ interface interface-list ] In Ethernet interface view: dot1x max-user user-number undo dot1x max-user View Parameter System view/interface view user-number: Maximum number of users to be supported simultaneously. The valid settings and the default may vary by device.
system-view [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1] dot1x max-user 32 dot1x multicast-trigger Syntax dot1x multicast-trigger undo dot1x multicast-trigger View Parameter Description Interface view None Use the dot1x multicast-trigger command to enable the multicast trigger function of 802.1x to send multicast trigger messages to the clients periodically. Use the undo dot1x multicast-trigger command to disable this function.
CHAPTER 126: 802.1X CONFIGURATION COMMANDS auto: Places the specified or all ports in the state of unauthorized initially to allow only EAPOL frames to pass, and turns the ports into the state of authorized to allow access to the network after the users pass authentication. This is the most common choice. unauthorized-force: Places the specified or all ports in the state of unauthorized, denying any access requests from users of the ports.
Parameter macbased: Specifies to use the macbased authentication method. With this method, each user of a port must be authenticated separately, and when an authenticated user goes offline, no other users are affected. portbased: Specifies to use the portbased authentication method.
CHAPTER 126: 802.1X CONFIGURATION COMMANDS After a supplicant fails the authentication, the authenticator refuses further authentication requests from the supplicant in the period dictated by the quiet timer. Related command: Example display dot1x, dot1x timer. # Enable the quiet timer.
undo dot1x supp-proxy-check { logoff | trap } [ interface interface-list ] In Ethernet interface view: dot1x supp-proxy-check { logoff | trap } undo dot1x supp-proxy-check { logoff | trap } View Parameter System view/interface view logoff: Logs off any user trying to login through a proxy. trap: Sends a trap packet to the network management system when detecting that a user is trying to login through a proxy.
CHAPTER 126: 802.1X CONFIGURATION COMMANDS # Specify port Ethernet 1/9 to send a trap packet when detecting that a user is trying to login through a proxy.
response after sending the allowed maximum number of handshake requests, it considers that the supplicant is offline. ■ Quiet timer (quiet-period): When a supplicant fails the authentication, the authenticator refuses further authentication requests from the supplicant in this period of time. ■ Server timeout timer (server-timeout): Once an authenticator sends a RADIUS Access-Request packet to the authentication server, it starts this timer.
CHAPTER 126: 802.1X CONFIGURATION COMMANDS With the interface interface-list argument specified, the command clears 802.1x statistics on the specified ports. With the argument unspecified, the command clears global 802.1x statistics and 802.1x statistics on all ports. Related command: Example display dot1x. # Clear 802.1x statistics on port Ethernet 1/1.
AAA CONFIGURATION COMMANDS 127 access-limit Syntax access-limit { disable | enable max-user-number } undo access-limit View Parameter ISP domain view disable: Specifies that the system does not limit the number of accessing users in the current ISP domain. enable max-user-number: Specifies that the system limits the number of accessing users in the current ISP domain. max-user-number is the maximum number of accessing users in the current ISP domain. The valid range is from 1 to 1024.
CHAPTER 127: AAA CONFIGURATION COMMANDS Parameter hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, which is a string of 1 to 32 characters. local: Performs local accounting. none: Does not perform any accounting. radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, which is a string of 1 to 32 characters. Description Use the accounting default command to specify the default accounting scheme for all types of users.
system-view [Sysname] domain system [Sysname-isp-system] undo accounting default accounting lan-access Syntax accounting lan-access { local | none | radius-scheme radius-scheme-name [ local ] } undo accounting lan-access View Parameter ISP domain view local: Performs local accounting. none: Does not perform any accounting. radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, which is a string of 1 to 32 characters.
CHAPTER 127: AAA CONFIGURATION COMMANDS undo accounting login View Parameter ISP domain view hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, which is a string of 1 to 32 characters. local: Performs local accounting. none: Does not perform any accounting. radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, which is a string of 1 to 32 characters. Description Use the accounting login command to specify the accounting scheme for login users.
Description Use the accounting optional command to enable the accounting optional feature. Use the undo accounting optional command to disable the feature. By default, the feature is disabled. Note that: Example ■ With the accounting optional command configured, a user that will be disconnected otherwise can use the network resources even when there is no available accounting server or the communication with the current accounting server fails.
CHAPTER 127: AAA CONFIGURATION COMMANDS system-view [Sysname] domain system [Sysname-isp-system] accounting portal radius-scheme rd accounting ppp Syntax accounting ppp { hwtacacs-scheme hwtacacs-scheme-name [ local ] | local | none | radius-scheme radius-scheme-name [ local ] } undo accounting ppp View Parameter ISP domain view hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, which is a string of 1 to 32 characters. local: Performs local accounting.
accounting voip Syntax accounting voip radius-scheme radius-scheme-name undo accounting voip View Parameter Description ISP domain view radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, which is a string of 1 to 32 characters. Use the accounting voip command to specify the RADIUS accounting scheme for voice user. Use the undo accounting voip command to restore the default. By default, the default accounting scheme is used for VoIP users.
CHAPTER 127: AAA CONFIGURATION COMMANDS idle-cut minute: Configures the idle cut function. The idle cut period ranges from 1 to 120, in minutes. ip ip-address: Specifies the IP address of the user. The attribute ip command only applies to authentications that support IP address passing, such as 802.1x. If you configure the command to authentications that do not support IP address passing, such as MAC address authentication, the local authentication will fail.
none: Does not perform any authentication. radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, which is a string of 1 to 32 characters. Description Use the authentication default command to specify the default authentication scheme for all types of users. Use the undo authentication default command to restore the default. By default, the authentication scheme is local. Note that: ■ The RADIUS or HWTACACS scheme specified for the current ISP domain must have been configured.
CHAPTER 127: AAA CONFIGURATION COMMANDS radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, which is a string of 1 to 32 characters. Description Use the authentication lan-access command to specify the authentication scheme for LAN access users. Use the undo authentication login command to restore the default. By default, the default authentication scheme is used for LAN access users. Note that the RADIUS scheme specified for the current ISP domain must have been configured.
Use the undo authentication login command to restore the default. By default, the default authentication scheme is used for login users. Note that the RADIUS or HWTACACS scheme specified for the current ISP domain must have been configured. Related command: Example authentication default, hwtacacs scheme, radius scheme. # Configure the default ISP domain system to use the local authentication scheme for login users.
CHAPTER 127: AAA CONFIGURATION COMMANDS system-view [Sysname] domain system [Sysname-isp-system] authentication portal radius-scheme rd authentication ppp Syntax authentication ppp { hwtacacs-scheme hwtacacs-scheme-name [ local ] | local | none | radius-scheme radius-scheme-name [ local ] } undo authentication ppp View Parameter ISP domain view hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, which is a string of 1 to 32 characters.
authentication voip Syntax authentication voip radius-scheme radius-scheme-name undo authentication voip View ISP domain view Parameter radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, which is a string of 1 to 32 characters. Description Use the authentication voip command to specify the authentication RADIUS scheme for VoIP users. Use the undo authentication voip command to restore the default. By default, the default authentication scheme is used for VoIP users.
CHAPTER 127: AAA CONFIGURATION COMMANDS Description Use the authorization command command to specify the authorization scheme for command line users. Use the undo authorization command command to restore the default. By default, the default authorization scheme is used for command line users. Note that the HWTACACS scheme specified for the current ISP domain must have been configured. Related command: Example authorization default, hwtacacs scheme.
Related command: Example ■ The authorization scheme specified with the authorization default command is for all types of users and has a priority lower than that for a specific access mode. ■ RADIUS authorization is special in that it takes effect only when the RADIUS authorization scheme is the same as the RADIUS authentication scheme. In addition, if a RADIUS authorization fails, the error message returned to the NAS says that the server is not responding.
CHAPTER 127: AAA CONFIGURATION COMMANDS Note that the RADIUS scheme specified for the current ISP domain must have been configured. Related command: Example authorization default, radius scheme. # Configure the default ISP domain system to use the local authorization scheme for LAN access users.
Example # Configure the default ISP domain system to use the local authorization scheme for login users. system-view [Sysname] domain system [Sysname-isp-system] authorization login local # Configure the default ISP domain system to use RADIUS authorization scheme rd for login users and to use the local authorization scheme as the backup scheme.
CHAPTER 127: AAA CONFIGURATION COMMANDS authorization ppp Syntax authorization ppp { hwtacacs-scheme hwtacacs-scheme-name [ local ] | local | none | radius-scheme radius-scheme-name [ local ] } undo authorization ppp View Parameter ISP domain view hwtacacs-scheme hwtacacs-scheme-name: Specifies an HWTACACS scheme by its name, which is a string of 1 to 32 characters. local: Performs local authorization. none: Does not perform any authorization.
View Parameter Description ISP domain view radius-scheme radius-scheme-name: Specifies a RADIUS scheme by its name, which is a string of 1 to 32 characters. Use the authorization voip command to specify the authorization scheme for VoIP users. Use the undo authorization voip command to restore the default. By default, the default authorization scheme configured is used for VoIP users.
CHAPTER 127: AAA CONFIGURATION COMMANDS domain isp-name: Specifies all user connections of an ISP domain. The isp-name argument refers to the name of an existing ISP domain and is a case-insensitive string of 1 to 24 characters. interface interface-type interface-number: Specifies all user connections of an interface. Currently, the interface-type argument can be only Layer 2 Ethernet interface and Layer 2 WLAN virtual interface. ip ip-address: Specifies a user connection by IP address.
interface interface-type interface-number: Specifies all user connections of an interface. ip ip-address: Specifies all user connections using the specified IP address. mac mac-address: Specifies all user connections using the specified MAC address. The MAC address must be in the format of H-H-H. ucibindex ucib-index: Specifies all user connections using the specified connection index. The valid range of the ucib-index argument varies by device.
CHAPTER 127: AAA CONFIGURATION COMMANDS Parameter Description Related command: Example isp-name: Name of an existing ISP domain, a case-insensitive string of 1 to 24 characters. Use the display domain command to display the configuration information of a specified ISP domain or all ISP domains. access-limit, domain, state. # Display the configuration information of all ISP domains.
Table 508 Description on the fields of the display domain command Field Description Domain User Template Template for users in the domain Idle-cut Whether idle cut is enabled Self-service Whether self service is enabled Total 2 domain(s).
CHAPTER 127: AAA CONFIGURATION COMMANDS Example # Display information about all local users. display local-user The contents of local user abc: State: Active ServiceType: ftp Idle-cut: Disable Access-limit: Enable Current AccessNum: 0 Bind location: 2.2.2.
Use the undo domain command to remove an ISP domain. By default, the system uses the domain of system. You can view its settings by executing the display domain command. If the specified ISP domain does not exist, the system will create a new ISP domain. All the ISP domains are in the active state when they are created. Related command: Example access-limit, state, display domain. # Create ISP domain aabbcc.net, and enter ISP domain view. system-view [Sysname] domain aabbcc.
CHAPTER 127: AAA CONFIGURATION COMMANDS idle-cut Syntax View Parameter idle-cut { disable | enable minute } ISP domain view disable: Disables the idle cut function. enable minute: Enables the idle cut function. The minute argument refers to the allowed idle duration, in the range 1 to 120 minutes. Description Use the idle-cut command to enable or disable the idle cut function. By default, the function is disabled. Related command: Example domain.
■ Related command: Example You can also configure an IP address pool in ISP domain view for assigning IP addresses to the PPP users in the ISP domain. This applies to the scenario where an interface serves a great amount of PPP users but the address resources are inadequate. For example, an Ethernet interface running PPPoE can accommodate up to 4095 users. However, only one address pool with up to 1024 addresses can be configured on its virtual template (VT).
CHAPTER 127: AAA CONFIGURATION COMMANDS Example # Set the level of user user1 to 3. system-view [Sysname] local-user user1 [Sysname-luser-user1] level 3 local-user Syntax local-user user-name undo local-user { user-name | all [ service-type { dvpn | ftp | lan-access | pad | ppp | ssh | telnet | terminal } } View Parameter System view user-name: Name for the local user, a case-sensitive string of 1 to 55 characters that does not contain the domain name.
local-user password-display-mode Syntax local-user password-display-mode { auto | cipher-force } undo local-user password-display-mode View Parameter System view auto: Displays the password of an accessing user based on the configuration of the user by using the password command. cipher-force: Displays the passwords of all accessing users in cipher text. Description Use the local-user password-display-mode command to set the password display mode for all local users.
CHAPTER 127: AAA CONFIGURATION COMMANDS Description ■ In simple text, it must be a string of 1 to 63 characters that contains no blank space, for example, aabbcc. ■ In cipher text, it must be a string of 24 or 88 characters, for example, _(TT8F]Y5SQ=^Q‘MAF4<1!!. ■ With the simple keyword, you must specify the password in simple text. With the cipher keyword, you can specify the password in either simple or cipher text. Use the password command to configure a password for a local user.
Description Use the self-service-url enable command to enable the self-service server localization function and specify the URL of the self-service server for changing user password. Use the self-service-url disable command or the undo self-service-url command to disable the self-service server localization function. By default, the function is disabled. Note that: Example ■ A self-service RADIUS server, for example, CAMS, is required for the self-service server localization function.
CHAPTER 127: AAA CONFIGURATION COMMANDS terminal: Authorizes the user to use the terminal service, allowing the user to login from the console, AUX or Asyn port. level level: Sets the user level of a Telnet, terminal, or SSH user. The level argument is an integer in the range 0 to 3 and defaults to 0. Description Use the service-type command to specify the service types that a user can use. Use the undo service-type command to delete one or all service types configured for a user.
undo service-type ppp [ call-number | callback-nocheck | callback-number ] View Parameter Local user view call-number call-number: Specifies a caller number for ISDN user authentication, which is a string of 1 to 64 characters. [ : subcall-number ]: Specifies the sub-caller number. The total length of the caller number and the sub-caller number must be less than 62 characters. callback-nocheck: Enables the PPP user callback without authentication feature.
CHAPTER 127: AAA CONFIGURATION COMMANDS By default, an ISP domain is active when created. So does a local user. By blocking an ISP domain, you disable users of the domain that are offline from requesting network services. Note that the online users are not affected. By blocking a user, you disable the user from requesting network services. No other users are affected. Related command: Example domain. # Place the current ISP domain aabbcc.net to the state of blocked.
system-view [Sysname] local-user user1 [Sysname-luser-user1] work-directory cf:
CHAPTER 127: AAA CONFIGURATION COMMANDS
128 RADIUS CONFIGURATION COMMANDS accounting-on enable Syntax accounting-on enable undo accounting-on enable View Parameter Description RADIUS scheme view None Use the accounting-on enable command to enable the accounting-on function. After doing so, when the device reboots, a message will be sent to the RADIUS server to force the users of the device offline. Use the undo accounting-on enable command to disable the accounting-on function. By default, the accounting-on function is disabled.
CHAPTER 128: RADIUS CONFIGURATION COMMANDS accounting-on enable interval Syntax accounting-on enable interval seconds undo accounting-on interval View Parameter Description RADIUS scheme view seconds: Time interval to retransmit accounting-on packet in seconds, ranging from 1 to 15. Use the accounting-on enable interval command to configure the retransmission interval of accounting-on packets. Use the undo accounting-on enable interval command to restore the default.
Description Use the accounting-on enable send command to set the maximum number of accounting-on packet retransmission attempts. Use the undo accounting-on enable send command to restore the default. By default, the maximum number of accounting-on packet retransmission attempts is 5. Note that: Related command: Example ■ This command is applicable to centralized devices only.
CHAPTER 128: RADIUS CONFIGURATION COMMANDS Related command: Example display radius scheme. # Define RADIUS scheme radius1 to send data flows and packets destined for the RADIUS server in kilobytes and kilo-packets.
Table 510 Description on the fields of the display radius scheme command Field Description Primary Auth IP/ Port/ State IP address/access port number/current status of the primary authentication server: (active or block) Primary Acct IP/ Port/ State IP address/access port number/current status of the primary accounting server: (active or block) Second Auth IP/ Port/ State IP address/access port number/current status of the secondary authentication server: (active or block) Second Acct IP/ Port
CHAPTER 128: RADIUS CONFIGURATION COMMANDS AcctStop= = 0 OnLine= = 0 Stop= = 0 Received and Sent packets statistic: Sent PKT total : = 0 Received PKT total: RADIUS received packets statistic: Resend Times Resend total 1 0 2 0 Total 0 Running statistic: RADIUS received messages statistic: Normal auth request , Num= = 0 Succ= = 0 EAP auth request , Num= = 0 Succ= = 0 Account request , Num= = 0 Succ= = 0 Account off request , Num= = 0 Succ= = 0 PKT auth timeout , Num= = 0 Succ= = 0 PKT acct_timeout ,
Table 511 Description on the fields of the display radius statistics command Field Description DEAD The state of idle AuthProc The state of waiting for authentication AuthSucc The state of authenticated AcctStart The state of accounting start RLTSend The state of sending real-time accounting packets RLTWait The state of waiting for real-time accounting AcctStop The state of accounting waiting stopped OnLine The state of online Stop The state of stop Received and Sent packets statis
CHAPTER 128: RADIUS CONFIGURATION COMMANDS Table 511 Description on the fields of the display radius statistics command Field Description State Mismatch Number of errors for mismatching status Other_Error Number of errors of other types No-response-acct-stop packet Number of times that no response was received for stop-accounting packets Discarded No-response-acct-stop Number of stop-accounting packets that were buffered but packet for buffer overflow then discarded due to full memory displa
key (RADIUS scheme view) Syntax key { accounting | authentication } string undo key { accounting | authentication } View Parameter RADIUS scheme view accounting: Sets the shared key for RADIUS accounting packets. authentication: Sets the shared key for RADIUS authentication/authorization packets. string: Shared key, a case-sensitive string of up to 16 characters. Description Use the key command to set the shared key for RADIUS authentication/authorization or accounting packets.
CHAPTER 128: RADIUS CONFIGURATION COMMANDS View Parameter Description RADIUS scheme view ip-address: IP address in dotted decimal notation. It must be an address of the device and cannot be all 0s address, all 1s address, a class D address, a class E address or a loopback address. Use the nas-ip command to set the IP address for the device to use as the source address of the RADIUS packets to be sent to the server. Use the undo nas-ip command to remove the configuration.
Use the undo primary accounting command to restore the defaults. By default, the default IP address is 0.0.0.0, and the default port number 1813. Note that: Related command: Example ■ The IP addresses of the primary and secondary accounting servers cannot be the same. Otherwise, the configuration fails. ■ The RADIUS service port configured on the device and that of the RADIUS server must be consistent. key (RADIUS scheme view), radius scheme, state.
CHAPTER 128: RADIUS CONFIGURATION COMMANDS Related command: Example key (RADIUS scheme view), radius scheme, state. # Set the IP address of the primary authentication/authorization server for RADIUS scheme radius1 to 10.110.1.1 and the UDP port of the server to 1812. system-view [Sysname] radius scheme radius1 [Sysname-radius-radius1] primary authentication 10.110.1.
undo radius nas-ip View Parameter Description System view ip-address: IP address in dotted decimal notation. It must be an address of the device and cannot be all 0s address, all 1s address, a class D address, a class E address or a loopback address. Use the radius nas-ip command to set the IP address for the device to use as the source address of the RADIUS packets to be sent to the server. Use the undo radius nas-ip command to remove the configuration.
CHAPTER 128: RADIUS CONFIGURATION COMMANDS Use the undo radius scheme command to delete a RADIUS scheme. By default, no RADIUS scheme is defined. Note that: Related command: Example ■ The RADIUS protocol is configured scheme by scheme. Every RADIUS scheme must at least specify the IP addresses and UDP ports of the RADIUS authentication/authorization/accounting servers and the parameters necessary for a RADIUS client to interact with the servers.
NAS transmits the request for the specified maximum number, it sends another trap message. ■ Example If the specified maximum number of transmission attempts is odd, the half of the number refers to the smallest integer greater than the half of the number. # Enable the RADIUS trap function for accounting servers.
CHAPTER 128: RADIUS CONFIGURATION COMMANDS Description Related command: Example Use the reset stop-accounting-buffer command to clear the buffered stop-accounting requests, which get no responses. stop-accounting-buffer enable (HWTACACS scheme view), retry stop-accounting (HWTACACS scheme view), user-name-format (HWTACACS scheme view), display stop-accounting-buffer. # Clear the buffered stop-accounting requests for user user0001@aabbcc.net.
system-view [Sysname] radius scheme radius1 [Sysname-radius-radius1] retry 5 retry realtime-accounting Syntax retry realtime-accounting retry-times undo retry realtime-accounting View Parameter Description RADIUS scheme view retry-times: Maximum number of accounting request transmission attempts. It ranges from 1 to 255 and defaults to 5. Use the retry realtime-accounting command to set the maximum number of accounting request transmission attempts.
CHAPTER 128: RADIUS CONFIGURATION COMMANDS retry stop-accounting (RADIUS scheme view) Syntax retry stop-accounting retry-times undo retry stop-accounting View Parameter Description RADIUS scheme view retry-times: Maximum number of stop-accounting request transmission attempts. It ranges from 10 to 65,535 and defaults to 500. Use the retry stop-accounting command to set the maximum number of stop-accounting request transmission attempts.
port-number: UDP port number of the secondary accounting server, which ranges from 1 to 65535 and defaults to 1813. Description Use the secondary accounting command to configure the IP address and UDP port of the secondary RADIUS accounting server. Use the undo secondary accounting command to restore the defaults. Note that: Related command: Example ■ The IP addresses of the primary and secondary accounting servers cannot be the same. Otherwise, the configuration fails.
CHAPTER 128: RADIUS CONFIGURATION COMMANDS Related command: Example key (RADIUS scheme view), radius scheme, state. # Set the IP address of the secondary authentication/authorization server for RADIUS scheme radius1 to 10.110.1.2 and the UDP port of the server to 1812. system-view [Sysname] radius scheme radius1 [Sysname-radius-radius1] secondary authentication 10.110.1.
standard: Specifies the standard RADIUS server, which requires the RADIUS client end and RADIUS server to interact according to the regulation and packet format of the standard RADIUS protocol (RFC 2865/2866 or newer). Description Use the server-type command to specify the RADIUS server type supported by the device. Use the undo server-type command to restore the default. By default, the supported RADIUS server type is standard. Related command: Example radius scheme.
CHAPTER 128: RADIUS CONFIGURATION COMMANDS After the quiet timer times out, the status of the primary server is active again and the status of the secondary server remains the same. If the secondary server fails, the device restores the status of the primary server to active immediately. Related command: Example ■ If the primary server has resumed, the device turns to use the primary server and stops communicating with the secondary server.
Related command: Example reset stop-accounting-buffer, radius scheme, display stop-accounting-buffer. # In RADIUS scheme radius1, enable the device to buffer the stop-accounting requests getting no responses. system-view [Sysname] radius scheme radius1 [Sysname-radius-radius1] stop-accounting-buffer enable timer quiet (RADIUS scheme view) Syntax timer quiet minutes undo timer quiet View Parameter Description RADIUS scheme view minutes: Primary server quiet period, in minutes.
CHAPTER 128: RADIUS CONFIGURATION COMMANDS Use the undo timer realtime-accounting command to restore the default. Note that: ■ For real-time accounting, a NAS must transmit the accounting information of online users to the RADIUS accounting server periodically. This command is for setting the interval. ■ The setting of the real-time accounting interval somewhat depends on the performance of the NAS and the RADIUS server: a shorter interval requires higher performance.
obtain the RADIUS service. The NAS uses the RADIUS server response timeout timer to control the transmission interval. Related command: Example ■ A proper value for the RADIUS server response timeout timer can help improve the system performance. Set the timer based on the network conditions. ■ The maximum total number of all types of retransmission attempts multiplied by the RADIUS server response timeout period cannot be greater than 75. radius scheme, retry.
CHAPTER 128: RADIUS CONFIGURATION COMMANDS Example # Specify the device to include the domain name in the username sent to the RADIUS servers for the RADIUS scheme radius1.
129 HWTACACS CONFIGURATION COMMANDS data-flow-format (HWTACACS scheme view) Syntax data-flow-format { data { byte | giga-byte | kilo-byte | mega-byte } | packet { giga-packet | kilo-packet | mega-packet | one-packet } }* undo data-flow-format { data | packet } View Parameter HWTACACS scheme view data: Specifies the unit for data flows, which can be byte, kilobyte, megabyte, or gigabyte. packet: Specifies the unit for data packets, which can be one-packet, kilo-packet, mega-packet, or giga-packet.
CHAPTER 129: HWTACACS CONFIGURATION COMMANDS Parameter hwtacacs-scheme-name: HWTACACS scheme name. statistics: Displays complete statistics about the HWTACACS server. Description Related command: Example Use the display hwtacacs command to display configuration information or statistics of the specified or all HWTACACS schemes. hwtacacs scheme. # Display configuration information about HWTACACS scheme gy.
Table 513 Description on the fields of the display hwtacacs command Field Description Response-timeout-interval Server response timeout period Acct-stop-PKT retransmit times Number of stop-accounting packet transmission retries Domain-included Whether a user name includes the domain name Data traffic-unit Unit for data flows Packet traffic-unit Unit for data packets display stop-accounting-buffer Syntax View display stop-accounting-buffer hwtacacs-scheme hwtacacs-scheme-name Any view Par
CHAPTER 129: HWTACACS CONFIGURATION COMMANDS Use the undo hwtacacs nas-ip command to remove the configuration. By default, the source IP address of a packet sent to the server is the IP address of the outbound port. Note that: Related command: Example ■ Specifying a source address for the HWTACACS packets to be sent to the server can avoid the situation where the packets sent back by the HWTACACS server cannot reach the device as the result of a physical interface failure.
key (HWTACACS scheme view) Syntax key { accounting | authentication | authorization } string undo key { accounting | authentication | authorization } string View Parameter HWTACACS scheme view accounting: Sets the shared key for HWTACACS accounting packets. authentication: Sets the shared key for HWTACACS authentication packets. authorization: Sets the shared key for HWTACACS authorization packets. string: Shared key, a string of 1 to 16 characters.
CHAPTER 129: HWTACACS CONFIGURATION COMMANDS By default, the source IP address of a packet sent to the server is the IP address of the outbound port. Note that: Related command: Example ■ Specifying a source address for the HWTACACS packets to be sent to the server can avoid the situation where the packets sent back by the HWTACACS server cannot reach the device as the result of a physical interface failure.
Example ■ If you configure the command for more than one time, the last configuration takes effect. ■ You can remove an accounting server only when no active TCP connection for sending accounting packets is using it. # Configure the primary accounting server. system-view [Sysname] hwtacacs scheme test1 [Sysname-hwtacacs-test1] primary accounting 10.163.155.
CHAPTER 129: HWTACACS CONFIGURATION COMMANDS primary authorization Syntax primary authorization ip-address [ port-number ] undo primary authorization View Parameter HWTACACS scheme view ip-address: IP address of the server, a valid unicast address in dotted decimal notation. The default is 0.0.0.0. port-number: Port number of the server. It ranges from 1 to 65535 and defaults to 49. Description Use the primary authorization command to specify the primary HWTACACS authorization server.
authentication: Clears HWTACACS authentication statistics. authorization: Clears HWTACACS authorization statistics. Description Related command: Example Use the reset hwtacacs statistics command to clear HWTACACS statistics. display hwtacacs. # Clear all HWTACACS statistics.
CHAPTER 129: HWTACACS CONFIGURATION COMMANDS Related command: Example reset stop-accounting-buffer, hwtacacs scheme, display stop-accounting-buffer. # Set the maximum number of stop-accounting request transmission attempts to 50.
undo secondary authentication View Parameter HWTACACS scheme view ip-address: IP address of the server, a valid unicast address in dotted decimal notation. The default is 0.0.0.0. port-number: Port number of the server. It ranges from 1 to 65535 and defaults to 49. Description Use the secondary authentication command to specify the secondary HWTACACS authentication server. Use the undo secondary authentication command to remove the configuration.
CHAPTER 129: HWTACACS CONFIGURATION COMMANDS Description Use the secondary authorization command to specify the secondary HWTACACS authorization server. Use the undo secondary authorization command to remove the configuration. Note that: Related command: Example ■ The IP addresses of the primary and secondary authorization servers cannot be the same. Otherwise, the configuration fails. ■ The HWTACACS service port configured on the device and that of the HWTACACS server must be consistent.
Related command: Example reset stop-accounting-buffer, hwtacacs scheme, display stop-accounting-buffer. # In HWTACACS scheme hwt1, enable the device to buffer the stop-accounting requests getting no responses. system-view [Sysname] hwtacacs scheme hwt1 [Sysname-hwtacacs-hwt1] stop-accounting-buffer enable timer quiet (HWTACACS scheme view) Syntax timer quiet minutes undo timer quiet View Parameter Description HWTACACS scheme view minutes: Primary server quiet period, in minutes.
CHAPTER 129: HWTACACS CONFIGURATION COMMANDS Use the undo timer realtime-accounting command to restore the default. Note that: ■ For real-time accounting, a NAS must transmit the accounting information of online users to the HWTACACS accounting server periodically. This command is for setting the interval. ■ The setting of the real-time accounting interval somewhat depends on the performance of the NAS and the HWTACACS server: a shorter interval requires higher performance.
Example # Set the HWTACACS server response timeout timer to 30 seconds for HWTACACS scheme hwt1. system-view [Sysname] hwtacacs scheme hwt1 [Sysname-hwtacacs-hwt1] timer response-timeout 30 user-name-format (HWTACACS scheme view) Syntax View Parameter user-name-format { with-domain | without-domain } HWTACACS scheme view with-domain: Includes the ISP domain name in the username sent to the HWTACACS server.
CHAPTER 129: HWTACACS CONFIGURATION COMMANDS
PACKET FILTER FIREWALL CONFIGURATION COMMANDS 130 n The term “router” in this document refers to a router in a generic sense or a Layer 3 switch running a routing protocol. display firewall ethernet-frame-filter Syntax View Parameter display firewall ethernet-frame-filter { all | dlsw | interface interface-type interface number } Any view all: Displays all the firewall statistics information. dlsw: Displays the firewall statistics information of packets passing the DLSw module.
CHAPTER 130: PACKET FILTER FIREWALL CONFIGURATION COMMANDS Table 515 Description on the fields of display firewall ethernet-frame-filter Field Description Out-bound Policy Indicates an outbound ACL rule has been configured on the interface. display firewall-statistics Syntax View Parameter display firewall-statistics { all | interface interface-type interface-num | fragments-inspect } Any view all: Displays the firewall statistics on all interfaces.
View Parameter System view permit: Sets the default filtering action to “permit”. deny: Sets the default filtering action to “deny”. Description Use the firewall default command to set the default filtering action of the firewall to “permit” or “deny”. By default, the default filtering action is “permit”, which applies to traffic not defined by the ACLs. Example # Set the default filtering mode of the firewall to “deny”.
CHAPTER 130: PACKET FILTER FIREWALL CONFIGURATION COMMANDS name acl-name: Specifies the Layer 2 ACL name, a case-insensitive string of 1 to 32 characters that must start with an English letter a to z or A to Z. To avoid confusion, the word “all” cannot be used as the ACL name. inbound: Filters packets in the inbound direction. outbound: Filters packets in the outbound direction. Description Use the firewall ethernet-frame-filter command to configure Ethernet frame filtering.
firewall fragments-inspect [ high | low ] Syntax firewall fragments-inspect [ high | low ] { number | default } undo firewall fragments-inspect [ high | low ] View Parameter System view high number: Specifies the high watermark value of the number of fragment status records. low number: Specifies the low watermark value of the number of fragment status records. default: Specifies the default number of fragment status records.
CHAPTER 130: PACKET FILTER FIREWALL CONFIGURATION COMMANDS Use the undo firewall ipv6 fragments-inspect command to disable IPv6 fragments inspection. By default, IPv6 fragments inspection is disabled. Example # Enable IPv6 fragments inspection.
firewall packet-filter ipv6 Syntax firewall packet-filter ipv6 { acl6-number | name acl6-name } { inbound | outbound } undo firewall packet-filter ipv6 { inbound | outbound } View Parameter Interface view acl-number: Basic ACL number, in the range 2000 to 2999; advanced ACL number, in the range 3000 to 3999. name acl6-name: Specifies the name of a basic or advanced IPv6 ACL, a case-insensitive string of 1 to 32 characters that must start with an English letter a to z or A to Z.
CHAPTER 130: PACKET FILTER FIREWALL CONFIGURATION COMMANDS Example # Clear all the firewall statistic information. reset firewall ethernet-frame-filter all reset firewall-statistics Syntax View Parameter reset firewall-statistics { all | interface interface-type interface-num } User view all: Clears the firewall statistic information on all interfaces. interface interface-type interface-num: Clears the firewall statistic information of the specified interface.
131 ASPF CONFIGURATION COMMANDS aging-time Syntax aging-time { syn | fin | tcp | udp } seconds undo aging-time { syn | fin | tcp | udp } View Parameter ASPF policy view syn: Specifies that the TCP session will be terminated seconds seconds after a SYN is detected if the session fails to reach the established state. fin: Specifies that the TCP session will be terminated seconds seconds after a FIN is detected. tcp: Specifies, together with the seconds argument, the idle timeout of a TCP session.
CHAPTER 131: ASPF CONFIGURATION COMMANDS # Set the SYN wait timeout period of the TCP session to 20 seconds. [Sysname-aspf-policy-1] aging-time syn 20 # Set the FIN wait timeout period of the TCP session to 10 seconds. [Sysname-aspf-policy-1] aging-time fin 10 # Set the TCP idle timeout period to 3000 seconds. [Sysname-aspf-policy-1] aging-time tcp 3000 # Set the UDP idle timeout period to 110 seconds.
java-blocking: Blocks the Java Applets of packets to the specified network segment, applicable to HTTP only. acl-number: Basic ACL number, in the range 2,000 to 2,999. seconds: Configures the protocol idle timeout period, in seconds. The effective range is 5 to 43,200. Description Use the detect command to configure ASPF detection for the application layer protocol or transport layer protocol. Use the undo detect command to remove the configuration.
CHAPTER 131: ASPF CONFIGURATION COMMANDS Parameter Description Example None Use the display aspf all command to view the information of all the ASPF policies and sessions. # Display the information of all the ASPF policies and sessions.
Description Example Use the display aspf interface command to view the ASPF policy configuration applied on interfaces. # Display the ASPF information on the interface(s).
CHAPTER 131: ASPF CONFIGURATION COMMANDS Description Example Use the display aspf session command to view the information of the current ASPF session. # Display the related information of the current ASPF session. display aspf session [Established Sessions] Session Initiator Responder 212BA84 169.254.1.121:1427 169.254.1.52:0 7148124 100.1.1.1:1027 200.1.1.2:21 Application ftp-data ftp Status TCP_DOWN FTP_CONXN_UP # Display the detailed information of the current ASPF session.
View Parameter Any view application-name: Name of the application to be used for port mapping Available applications include FTP, HTTP, H.323, SMTP, and RTSP. port-number: Port number, in the range 0 to 65535 Description Related command: Example Use the display port-mapping command to view port mapping information. port-mapping. # Display all the information about port mapping.
CHAPTER 131: ASPF CONFIGURATION COMMANDS log enable Syntax log enable undo log enable View Parameter Description ASPF policy view None Use the log enable command to enable the session logging function of an ASPF. Use the undo log enable command to disable the session logging function. By default, the session logging function is disabled.
By default, there is no mapping between the port and the application layer. Related command: Example display port-mapping. # Map port 3456 to the FTP protocol. system-view [Sysname] port-mapping ftp port 3456 reset aspf session Syntax View Parameter Description Example reset aspf session User view None Use the reset aspf session command clear ASPF sessions # Clear ASPF sessions.
CHAPTER 131: ASPF CONFIGURATION COMMANDS
MAC AUTHENTICATION CONFIGURATION COMMANDS 132 n MAC authentication is not supported on the fixed layer 2 interface of FIC-4FSW, DFIC-9FSW and MSR 20 Series Products.
CHAPTER 132: MAC AUTHENTICATION CONFIGURATION COMMANDS Table 520 Description on the fields of the display mac-authentication command Field Description MAC address authentication is Enabled Whether MAC authentication is enabled User name format is MAC address, like xxxxxxxxxxxx The username is in format of MAC address, like xxxxxxxxxxxx Fixed username: Fixed username Fixed password: Password of the fixed username Offline detect period Setting of the offline detect timer Quiet period Setti
defined without the to interface-type interface-number portion comprises only one port. Description Use the mac-authentication command to enable MAC authentication globally or for one or more ports. Use the undo mac-authentication command to disable MAC authentication globally or for one or more ports. By default, MAC authentication is neither enabled globally nor enabled on any port.
CHAPTER 132: MAC AUTHENTICATION CONFIGURATION COMMANDS Description Use the mac-authentication domain command to specify the ISP domain for MAC authentication. Use the undo mac-authentication domain command to restore the default. By default, the default ISP domain (system) is used. Example # Specify the ISP domain for MAC authentication as domain1.
Example # Set the server timeout timer to 150 seconds. systme-view [Sysname] mac-authentication timer server-timeout 150 mac-authentication user-name-format Syntax mac-authentication user-name-format { fixed [ account name ] [ password { cipher | simple } password ] | mac-address [ with-hyphen | without-hyphen ] } undo mac-authentication user-name-format View Parameter System view fixed: Uses the MAC authentication username type of fixed username.
CHAPTER 132: MAC AUTHENTICATION CONFIGURATION COMMANDS and a password in plain text with 16 to 63 characters will be encrypted into a password in cipher text with 88 characters. For a password with 24 characters, the system will determine whether it can decrypt the password. If so, it treats the password as a cipher-text one. Otherwise, it treats it as a plain-text one.
NAT CONFIGURATION COMMANDS 133 connection-limit default action Syntax connection-limit default action [ permit | deny ] undo connection-limit default action View Parameter System view permit: Enables the connection-limit function globally. deny: Disables the connection-limit function globally. Description Use the connection-limit default action command to specify the default connection-limit action globally, either permit or deny.
CHAPTER 133: NAT CONFIGURATION COMMANDS Description Use the connection-limit default amount command to set the limit(s) of user connections globally. Use the undo connection-limit default amount command to restore the default. By default, the upper limit is 100 and the lower limit is 20. Example # Configure the upper limit as 200 and lower limit as 50.
Description Use the connection-limit policy command to create or edit a connection-limit policy and enter connection-limit policy view. Use the undo connection-limit policy command to delete a specified or all connection-limit policies. Note that: Example ■ A connection-limit policy contains a set of rules that define the connection-limit mode, the maximum connection rate and the connection number.
CHAPTER 133: NAT CONFIGURATION COMMANDS Table 521 Description on the fields of the display connection-limit policy all command Field Description limit Number of rules in the policy limit mode Connection-limit mode (all, amount, rate): ■ all: limits both connection number and connection rate. ■ amount: limits connection number only. ■ rate: limits connection rate only.
Example # Display connection-limit statistics. display connection-limit statistics source-ip dest-ip dest-port vpn-instance 192.168.0.210 -------------------------------------------------------------------------------NAT amount upper-limit lower-limit limit-flag 2 200 100 0 source-ip dest-ip dest-port vpn-instance 192.168.0.
CHAPTER 133: NAT CONFIGURATION COMMANDS display nat aging-time Syntax View Parameter Description Example display nat aging-time Any view None Use the display nat aging-time command to display the aging time values of different NAT sessions. # Display the aging time values of different NAT sessions.
View Parameter Description Example Any view None Use the display nat all command to display the configurations of all NAT parameters. # Display the configurations of all NAT parameters. display nat all NAT address-group information: There are currently 1 nat address-group(s) 1 : from 202.110.10.10 to 202.110.10.
CHAPTER 133: NAT CONFIGURATION COMMANDS Table 525 Description on some fields of the display nat all command Field Description Interface:Ethernet1/0, Protocol:6(tcp), An internal server, a WWW server, is configured on interface Ethernet 1/0. Its internal address and port number are 10.110.10.10 and 80 respectively. Its external address and port number are 202.110.10.10 and 8080 respectively. The protocol used is TCP. [global] 202.110.10.10: 8080 [local] 10.110.10.
mask-length: The length of net mask, in the range 1 to 32. destination-port { eq | gt | lt | neq | range } port-number: Displays connection-limit statistics based on the destination port number. You can specify the port(s) in different ways through different keywords: eq (equal to the specified port number), gt (greater than the specified port number), lt (less than the specified port number), neq (not equal to the specified port number), range (port range).
CHAPTER 133: NAT CONFIGURATION COMMANDS Parameter Description Example None Use the display nat log command to view the NAT log configuration. # View the NAT log configuration. display nat log NAT log information: log enable : enable acl 2000 flow-begin : enable flow-active : 10(minutes) Table 527 Description on the fields of the display nat log command: Field Description NAT log information : NAT log configuration log enable : enable acl 2000 Logging data flows matching acl 2000.
display nat server Syntax View Parameter Description Example display nat server Any view None Use the display nat server command to display information about internal servers. # Display information about internal servers. display nat server Server in private network information: There are currently 1 internal server(s) Interface: Ethernet1/0, Protocol: 6(tcp), [global] 202.110.10.10: 8080 [local] 10.110.10.
CHAPTER 133: NAT CONFIGURATION COMMANDS Example # Display the active NAT sessions. display nat session There are currently 1 NAT session: Protocol 1 VPN: 0, GlobalAddr Port 2.2.2.10 12288 status: 4011, InsideAddr Port 192.168.0.210 768 TTL: 00:01:00, DestAddr Port 2.2.2.2 768 Left: 00:00:53 Table 530 Description on the fields of the display nat session command Field Description Protocol Protocol number. 1 represents ICMP.
Table 531 Description on the fields of the display nat statistics command Field Description total NO-PAT session table count Number of No-PAT session entries total SERVER session table count Number of SERVER session entries total STATIC session table count Number of STATIC session entries total FRAGMENT session table count Number of FRAGRANT session entries total session table count HASH by Internet side IP Number of HASH entries calculated based upon the external IP address active PAT sessi
CHAPTER 133: NAT CONFIGURATION COMMANDS per-destination: Limits connections based upon the destination address. per-service: Limits connections based upon the service type. per-source: Limits connections based upon the source address. amount: Limits the number of connections. max-amount: Maximum connection number, in the range 1 to 4294967295 min-amount: Minimum connection number, a value smaller than the upper limit, in the range 0 to 4294967295.
system-view [Sysname] connection-limit policy 1 [Sysname-connection-limit-policy-1] limit mode amount nat address-group Syntax nat address-group group-number start-address end-address undo nat address-group group-number View Parameter System view group-number: Index of an address pool, in the range 0 to 31. start-address: The beginning IP address in an address pool. end-address: The ending IP address in an address pool.
CHAPTER 133: NAT CONFIGURATION COMMANDS View Parameter System view default: Restores the NAT aging time to the default value. dns: Specifies the NAT aging time for DNS, which defaults to 60 seconds. ftp-ctrl: Specifies the NAT aging time for FTP control link, which defaults to 7,200 seconds. ftp-data: Specifies the NAT aging time for FTP data link, which defaults to 300 seconds. icmp: Specifies the NAT aging time for ICMP, which defaults to 60 seconds.
ftp: Supports FTP. ils: Supports ILS. nbt: Supports NBT. pptp: Supports PPTP. Description Use the nat alg command to enable NAT application layer gateway for the specified protocol. Use the undo nat alg command to disable NAT application layer gateway. By default, NAT application layer gateway is enabled. Example # Enable NAT application layer gateway for FTP.
CHAPTER 133: NAT CONFIGURATION COMMANDS system-view [Sysname]undo nat connection-limit-policy 1 nat log enable Syntax nat log enable [ acl acl-number ] undo nat log enable View Parameter Description System view acl acl-number: Enables the NAT log function for the data flows that match the specified ACL. The acl-number parameter ranges from 2,000 to 3,999. Absence of this parameter indicates that NAT log function applies to all data flows.
This command allows you to log active flows regularly. This solves the problem of logging long-last active sessions as logs are normally generated only when a session is established or deleted. Example # Configure the interval between sending NAT active-flow logs as 10 minutes. system-view [Sysname] nat log flow-active 10 # Delete the configured interval.
CHAPTER 133: NAT CONFIGURATION COMMANDS group-number: Number of a predefined address pool. The value range varies by device models. no-pat: Translates IP addresses only, without dealing with the port information. Description Use the nat outbound command to enable NAT and associate an ACL with an address pool. Packets that match the ACL rules will have their internal IP address replaced by an address from the address pool. Use the undo nat outbound command to remove the association.
# Configure the address pool. [Sysname] nat address-group 1 1.10.10.1 1.10.10.20 # Enable NAT. Use the IP addresses from address pool 1 while dealing with TCP/UDP port information.
CHAPTER 133: NAT CONFIGURATION COMMANDS nat server [ vpn-instance vpn-instance-name ] protocol pro-type global { global-address | interface { interface-type interface-number} | current-interface } [ global-port ] inside host-address [ host-port ] undo nat server [ vpn-instance vpn-instance-name ] protocol pro-type global { global-address | interface { interface-type interface-number} | current-interface } global-port1 global-port2 inside host-address1 host-address2 host-port undo nat server [ vpn-ins
global-port: Port number designated for external access, in the range 0 to 65,535. The default and the keyword must match those for host-port. host-address: Internal IP address of the NAT server. Description Use the nat server command to define a translation table for an internal server. Using the address and port combination defined by the global-address and global-port parameters, external users can access internal servers with an IP address of host-address and a port of host-port.
CHAPTER 133: NAT CONFIGURATION COMMANDS [Sysname-vpn-instance] quit [Sysname] interface serial 1/0 [Sysname-Serial1/0] nat server vpn-instance vrf10 protocol tcp globa l 202.110.10.10 inside 10.110.10.11 # Specify a host with an IP address of 10.110.10.12 in VPN vrf10. An external host pings 202.110.10.11 to examine the connectivity to the host. system-view [Sysname] interface serial 1/0 [Sysname-Serial1/0] nat server vpn-instance vrf10 protocol icmp glob al 202.110.10.11 inside 10.110.10.
end-ip: End address of an internal IP address range. The end address must not be smaller than the start address. Global: Specifies an external network address. global-net-address: External network address. Mask: External network mask. mask-length: Length of the external network mask, in the range of 1 to 32. Description Use the nat static command to configure static NAT between an internal IP address and an external IP address. Use the undo nat static command to remove the configuration.
CHAPTER 133: NAT CONFIGURATION COMMANDS reset nat session reset userlog export Syntax View Parameter Description reset userlog export Use view None Use the reset userlog export command to clear the NAT log statistics. Once the NAT log function is enabled, the system will make statistics for NAT logs periodically. Related command: Example display userlog export # Clear the NAT log statistics.
Parameter ip-address: IP address of the NAT log server. The address must be a valid unicast IP address and cannot be a loopback address. udp-port: UDP port number of the NAT log server, ranging from 0 to 65535. Description Use the userlog nat export host command to configure the IP address and UDP port number of the NAT log server that receives NAT logs. Use the undo userlog nat export host command to restore the default setting.
CHAPTER 133: NAT CONFIGURATION COMMANDS userlog nat export version Syntax userlog nat export version version-number undo userlog nat export version View Parameter Description System view version-number: Version number of NAT logs. Currently, the system supports version 1 only. Use the userlog nat export version command to set the version number of NAT logs. Use the undo userlog nat export version command to restore the default. By default, the version number of NAT logs is 1.
PKI CONFIGURATION COMMANDS 134 attribute Syntax attribute id { alt-subject-name { fqdn | ip } | { issuer-name | subject-name } { dn | fqdn | ip } } { ctn | equ | nctn | nequ} attribute-value undo attribute { id | all } View Parameter Certificate attribute group view Id: Sequence number of the certificate attribute rule, in the range 1 to 16. alt-subject-name: Specifies the name of the alternative certificate subject. fqdn: Specifies the FQDN of the entity. ip: Specifies the IP address of the entity.
CHAPTER 134: PKI CONFIGURATION COMMANDS By default, there is no restriction on the issuer name, the subject name and the alternative subject name of a certificate. Note that the attribute of the alternative certificate subject name does not appear as a domain name, and therefore the dn keyword is not available for the attribute. Example # Create a certificate attribute rule, specifying that the DN in the subject name includes the string of abc.
certificate request entity Syntax certificate request entity entity-name undo certificate request entity View PKI domain view Parameter entity-name: Name of the entity for certificate request, a case-insensitive string of 1 to 15 characters. Description Use the certificate request entity command to specify the entity for certificate request. Use the undo certificate request entity command to remove the configuration. By default, no entity is specified for a PKI domain.
CHAPTER 134: PKI CONFIGURATION COMMANDS system-view [Sysname] pki domain 1 [Sysname-pki-domain-1] certificate request from ca certificate request mode Syntax certificate request mode { auto [ key-length key-length | password { cipher | simple } password ]*| manual} undo certificate request mode View Parameter PKI domain view auto: Specifies to request a certificate in auto mode. key-length: Length of the RSA key, in the range 512 to 2048 bits. It is 1024 bits by default.
undo certificate request polling { count | interval } View Parameter PKI domain view count: Maximum number of attempts to poll the status of the certificate request, in the range 1 to 100. minutes: Polling interval, in the range 5 to 168 minutes. Description Use the certificate request polling command to specify the certificate request polling interval and maximum number of attempts. Use the undo certificate request polling command to restore the defaults.
CHAPTER 134: PKI CONFIGURATION COMMANDS Example # Specify the URL of the server for certificate request. system-view [Sysname] pki domain 1 [Sysname-pki-domain-1] certificate request url http://169.254.0.100/certsrv/mscep/mscep.dll common-name Syntax common-name name undo common-name View PKI entity view Parameter name: Common name of an entity, a case-insensitive string of 1 to 31 characters. No comma can be included.
system-view [Sysname] pki entity 1 [Sysname-pki-entity-1] country CN crl check Syntax View Parameter crl check { disable | enable } PKI domain view disable: Disables CRL checking. enable: Enables CRL checking. Description Use the crl check command to enable or disable CRL checking. By default, CRL checking is enabled. CRLs are files issued by the CA to distribute all certificates have been revoked. Revocation of a certificate may occur before the certificate expires.
CHAPTER 134: PKI CONFIGURATION COMMANDS Example # Set the CRL update period to 20 hours. system-view [Sysname] pki domain 1 [Sysname-pki-domain-1] crl update-period 20 crl url Syntax crl url url-string undo crl url View Parameter Description PKI domain view url-string: URL of the CRL distribution point, a case-insensitive string of 1 to 127 characters in the format of ldap: //server_location, where server_location is generally expressed by IP address.
Related command: Example pki retrieval-certificate, pki domain and certificate request polling. # Display the local certificate. display pki certificate local domain 1 Data: Version: 3 (0x2) Serial Number: 10B7D4E3 00010000 0086 Signature Algorithm: md5WithRSAEncryption Issuer: emailAddress=myca@aabbcc.
CHAPTER 134: PKI CONFIGURATION COMMANDS display pki certificate access-control-policy Syntax View Parameter display pki certificate access-control-policy { policy-name | all } Any view policy-name: Name of the certificate attribute-based access control policy, a string of 1 to 16 characters. all: Displays all certificate attribute-based access control policies.
Table 534 Description on the fields of display pki certificate attribute-group Field Description attribute group name Name of the certificate attribute group attribute number Number of the attribute rules subject-name Name of the certificate subject dn Domain of the entity ctn Indicates the contain operations abc Value of attribute 1 issuer-name Name of the certificate issuer fqdn FQDN of the entity nctn Indicates the not-contain operations app Value of attribute 2 display pki cr
CHAPTER 134: PKI CONFIGURATION COMMANDS Table 535 Description on the fields of the display pki crl domain command Field Description Version Version of the CRLs Signature Algorithm Signature algorithm adopted by the CRLs Issuer CA issuing the CRLs Last Update Last update time Next Update Next update time CRL extensions Extensions of CRL X509v3 Authority Key Identifier CA issuing the CRLs.
Parameter Description ip-address: IP address for an entity. Use the ip command to configure the IP address of an entity. Use the undo ip command to remove the configuration. By default, no IP address is specified for an entity. Example # Configure the IP address of an entity as 11.0.0.1. system-view [Sysname] pki entity 1 [Sysname-pki-entity-1] ip 11.0.0.
CHAPTER 134: PKI CONFIGURATION COMMANDS Parameter Description locality-name: Name for the geographical locality, a case-insensitive string of 1 to 31 characters. No comma can be included. Use the locality command to configure the geographical locality of an entity, which can be, for example, a city name. Use the undo locality command to remove the configuration. By default, no geographical locality is specified for an entity. Example # Configure the locality of an entity as city.
Parameter org-unit-name: Organization unit name, a case-insensitive string of 1 to 31 characters. No comma can be included. This argument is intended to distinguish different units in an organization. Description Use the organizational-unit command to specify the name of the organization unit to which this entity belongs. Use the undo organizational-unit command to remove the configuration. By default, no organization unit name is specified for an entity.
CHAPTER 134: PKI CONFIGURATION COMMANDS View Parameter System view group-name: Name for the certificate attribute group, a case-insensitive string of 1 to 16 characters. It cannot be “a”, “al” or “all”. all: Specifies all certificate attribute groups. Description Use the pki certificate attribute-group command to create a certificate attribute group and enter its view. Use the undo pki certificate attribute-group command to delete one or all certificate attribute groups.
Parameter Description Domain-name: PKI domain name, a case-insensitive string of 1 to 15 characters. Use the pki domain command to create a PKI domain and enter PKI domain view or enter the view of an existing PKI domain. Use the undo pki domain command to remove a PKI domain. By default, no PKI domain exists. Example # Create a PKI domain and enter its view.
CHAPTER 134: PKI CONFIGURATION COMMANDS domain-name: Name of the PKI domain, a string of 1 to 15 characters. der: Specifies the certificate format of DER. p12: Specifies the certificate format of P12. pem: Specifies the certificate format of PEM. filename filename: Name of the certificate file, a case-insensitive string of 1 to 127 characters. It defaults to domain-name_ca.cer or domain-name_local.cer, the name for the file to be created to save the imported certificate.
system-view [Sysname] pki request-certificate domain 1 pkcs10 pki retrieval-certificate Syntax View Parameter pki retrieval-certificate { ca | local } domain domain-name System view ca: Downloads a CA certificate. local: Downloads a local certificate. domain-name: Name of the PKI domain used for certificate request. Description Related command: Example Use the pki retrieval-certificate command to retrieve a certificate from the server for certificate distribution. pki domain.
CHAPTER 134: PKI CONFIGURATION COMMANDS pki validate-certificate Syntax View Parameter pki validate-certificate { ca | local } domain domain-name System view ca: Validates the CA certificate. local: Validate the local certificate. domain-name: Name of the PKI domain the certificate to be validated is for, a string of 1 to 15 characters. Description Use the pki validate-certificate command to verify the validity of a certificate.
Example # Configure an MD5 fingerprint for validating the CA root certificate. system-view [Sysname] pki domain 1 [Sysname-pki-domain-1] root-certificate fingerprint md5 12EF53FA355C D23E12EF53FA355CD23E # Configure a SHA1 fingerprint for validating the CA root certificate.
CHAPTER 134: PKI CONFIGURATION COMMANDS undo state View Parameter Description PKI entity view state-name: State or province name, a case-insensitive string of 1 to 31 characters. No comma can be included. Use the state command to specify the name of the state or province where an entity resides. Use the undo state command to remove the configuration. By default, no state or province is specified. Example # Specify the state where an entity resides.
PORTAL CONFIGURATION COMMANDS 135 display portal acl Syntax View Parameter display portal acl { all | dynamic | static } interface interface-type interface-number Any view all: Displays all access control lists (ACLs), including dynamic ACLs and static ACLs. dynamic: Displays dynamic ACLs, namely, ACLs generated after a user passes portal authentication. static: Displays static ACLs, namely, ACLs generated by related configurations.
CHAPTER 135: PORTAL CONFIGURATION COMMANDS MAC Interface VLAN Destination: IP Mask = 000d-88f8-0eab = GigabitEthernet5/0 = 0 = 0.0.0.0 = 0.0.0.
WAIT_USERIPCHANGE_ACK ONLINE WAIT_LOGOUT_ACK WAIT_LEAVING_ACK Message statistics: Msg-Name MSG_AUTHEN_ACK MSG_AUTHOR_ACK MSG_LOGIN_ACK MSG_LOGOUT_ACK MSG_LEAVING_ACK MSG_CUT_REQ MSG_AUTH_REQ MSG_LOGIN_REQ MSG_LOGOUT_REQ MSG_LEAVING_REQ MSG_ARPPKT MSG_TMR_REQAUTH MSG_TMR_AUTHEN MSG_TMR_AUTHOR MSG_TMR_LOGIN MSG_TMR_LOGOUT MSG_TMR_LEAVING MSG_TMR_NEWIP MSG_TMR_USERIPCHANGE MSG_PORT_REMOVE MSG_VLAN_REMOVE MSG_IF_REMOVE MSG_L3IF_SHUT MSG_IP_REMOVE MSG_ALL_REMOVE MSG_IFIPADDR_CHANGE MSG_SOCKET_CHANGE 0 1 0
CHAPTER 135: PORTAL CONFIGURATION COMMANDS Table 537 Description on the fields of the display portal connection statistics command Field Description MSG_AUTHEN_ACK Authentication acknowledgment message MSG_AUTHOR_ACK Authorization acknowledgment message MSG_LOGIN_ACK Accounting acknowledgment message MSG_LOGOUT_ACK Accounting-stop acknowledgment message MSG_LEAVING_ACK Leaving acknowledgment message MSG_CUT_REQ Cut request message MSG_AUTH_REQ Authentication request message MSG_LOGIN_
Related command: Example portal free-rule. # Display the information of authentication-free rule 1. display portal free-rule 1 Rule-Number 1: Source: IP = 2.2.2.0 Mask = 255.255.255.0 MAC = 0000-0000-0000 Interface = any Vlan = 0 Destination: IP = 0.0.0.0 Mask = 0.0.0.
CHAPTER 135: PORTAL CONFIGURATION COMMANDS Table 539 Description on the fields of the display portal interface command Field Description Interface portal configuration Portal configuration on an interface Ethernet 1/0 Portal state on an interface Portal server Portal server applied to an interface Authentication type Authentication mode enabled on an interface Service type Type of service Authentication network Information of an portal authentication subnet address IP address of the po
display portal server statistics Syntax View Parameter display portal server statistics { all | interface interface-type interface-number } Any view all: Displays portal server statistics on all interfaces. interface interface-type interface-number: Displays portal server statistics on the specified interface.
CHAPTER 135: PORTAL CONFIGURATION COMMANDS Table 541 Description on the fields of the display portal server statistics command Field Description ACK_CHALLENGE Challenge acknowledgment message the access device sends to the portal server REQ_AUTH Authentication request message the portal server sends to the access device ACK_AUTH Authentication acknowledgment message the access device sends to the portal server REQ_LOGOUT Logout request message the portal server sends to the access device AC
Connection State: SYN_RECVD: 0 ESTABLISHED: 0 CLOSE_WAIT: 0 LAST_ACK: 0 FIN_WAIT_1: 0 FIN_WAIT_2: 0 CLOSING: 0 Table 542 Description on fields of the display portal tcp-cheat statistics command Field Description TCP Cheat Statistic TCP spoofing statistics Total Opens Total number of opened connections Resets Connections Number of the connections reset through RST packets Current Opens Number of active connections Packets Received Number of received packets Packets Sent Number of sent pac
CHAPTER 135: PORTAL CONFIGURATION COMMANDS 000d-88f8-0eab 2.2.2.2 0 Total 1 user(s) matched, 1 listed.
portal delete-user Syntax View Parameter portal delete-user { ip-address | all | interface interface-type interface-number } System view ip-address: IP address of a user. all: Forces all users to log out. interface interface-type interface-number: Forces all users on the specified interface to log out. Description Related command: Example Use the portal delete-user command to force the users attached to the access device to log out. display portal user. # Force the user whose host IP address is 1.
CHAPTER 135: PORTAL CONFIGURATION COMMANDS all: Specifies all authentication-free rules. Description Use the portal free-rule command to configure a portal authentication-free rule, namely, to specify a source filtering condition or destination filtering condition. Use the undo portal free-rule command to remove the authentication-free rule.
portal server Syntax portal server server-name ip ip-address [ key key-string | port port-id | url url-string ] * undo portal server server-name [ key | port | url ] View Parameter System view server-name: Name of the portal server, a case-sensitive string of 1 to 32 characters. ip-address: IP address of the portal server. key-string: Shared key required for communication with the portal server, a case-sensitive string of 1 to 16 characters.
CHAPTER 135: PORTAL CONFIGURATION COMMANDS system-view [Sysname] portal server pts ip 192.168.0.111 key portal url http://1 92.168.0.111/portal portal server method Syntax portal server server-name method { direct | layer3 | redhcp } [ service-type { normal | plus } ] undo portal View Parameter Interface view server-name: Name of the portal server, a case-sensitive string of 1 to 32 characters. Method: Specifies an authentication method. ■ direct: Direct authentication.
View Parameter User view all: Clears portal connection statistics on all interfaces. interface interface-type interface-number: Clears the portal connection statistics on the specified interface. Description Example Use the reset portal connection statistics command to clear the portal connection statistics on the specified interface or all interfaces. # Clear the portal connection statistics on Ethernet 1/0.
CHAPTER 135: PORTAL CONFIGURATION COMMANDS
RSH CONFIGURATION COMMANDS 136 rsh Syntax View Parameter rsh host [ user username ] command remote-command User view host: IP address or host name of the remote host, a string of 1 to 20 characters. user username: Specifies the username for remote login, which is a string of 1 to 20 characters. If you specify no username, the system name of the device, which can be set by using the sysname command, applies. remote-command: Command to be executed remotely.
CHAPTER 136: RSH CONFIGURATION COMMANDS 2001-12-09 2003-06-22 2003-06-23 2003-06-23 2003-06-22 2001-09-02 2003-06-21 2004-01-02 2004-01-02 2001-07-30 2004-07-13 16:26 1,740 wrshdnt.cnt 11:14 452,230 wrshdnt.htm 18:18 4,803 wrshdnt_header.htm 18:18 178 wrshdnt_filelist.xml 11:13 156,472 wrshdnt.pdf 15:41 49,152 wrshdrdr.exe 10:32 69,632 wrshdrun.exe 15:54 196,608 wrshdsp.exe 15:54 102,400 wrshdnt.exe 18:05 766 wrshdnt.ico 09:10 3,253 INSTALL.
COMMON CONFIGURATION COMMANDS 137 display time-range Syntax View Parameter display time-range { time-name | all } Any view time-name: Time range name comprising 1 to 32 characters. It is case insensitive and must start with an English letter. To avoid confusion, this name cannot be all. all: All existing time ranges. Description Use the display time-range command to display the configuration and state of a specified or all time ranges.
CHAPTER 137: COMMON CONFIGURATION COMMANDS Parameter time-name: Time range name comprising 1 to 32 characters. It is case insensitive and must start with an English letter. To avoid confusion, this name cannot be all. start-time: Start time of a periodic time range, in hh:mm format as 24-hour time, where hh is hours and mm is minutes. Its value ranges from 00:00 to 23:59. end-time: End time of the periodic time range, in hh:mm format as 24-hour time, where hh is hours and mm is minutes.
absolute time range that is active between January 1, 2004 00:00 and December 31, 2004 23:59, you may use the time-range test from 00:00 01/01/2004 to 23:59 12/31/2004 command. ■ Compound time range created using the time-range time-name start-time to end-time days { from time1 date1 [ to time2 date2 ] | to time2 date2 } command. A time range thus created recurs on the day or days of the week only within the specified period.
CHAPTER 137: COMMON CONFIGURATION COMMANDS
138 IPV4 ACL CONFIGURATION COMMANDS acl Syntax acl number acl-number [ name acl-name ] [ match-order { auto | config } ] undo acl { all | name acl-name | number acl-number } View Parameter n System view acl-number: IPv4 ACL number in the range 2000 to 5999, where: ■ 2000 to 2999 for basic IPv4 ACLs ■ 3000 to 3999 for advanced IPv4 ACLs ■ 4000 to 4999 for Ethernet frame header ACLs ■ 5000 to 5999 for user-defined ACLs The MSR 20 Series Routers do not support the last range, that 5000 to 59
CHAPTER 138: IPV4 ACL CONFIGURATION COMMANDS Example ■ You can specify a name for an IPv4 ACL only when you create the ACL. After creating an ACL, you cannot specify a name for it, nor can you change or remove the name of the ACL. ■ The name of an IPv4 ACL must be unique among IPv4 ACLs. However, an IPv4 ACL and an IPv6 ACL can share the same name.
Parameter source-acl-number: Number of an existing IPv4 ACL, which must be in the following ranges (the available ACL number ranges varies by device): ■ 2000 to 2999 for basic IPv4 ACLs ■ 3000 to 3999 for advanced IPv4 ACLs ■ 4000 to 4999 for Ethernet frame header ACLs ■ 5000 to 5999 for user-defined ACLs source-acl-name: Name of an existing IPv4 ACL, a case insensitive string of 1 to 32 characters. It must start with an English letter and cannot be the English word of all to avoid confusion.
CHAPTER 138: IPV4 ACL CONFIGURATION COMMANDS Parameter Description Example acl-name: Name of the IPv4 ACL, a case insensitive string of 1 to 32 characters. It must start with an English letter and cannot be the English word of all to avoid confusion. Use the acl name command to enter the view of an existing IPv4 ACL by specifying its name. # Enter the view of the IPv4 ACL named flow.
system-view [Sysname] acl number 5000 [Sysname-acl-user-5000] description This acl is used in eth 0 display acl Syntax View Parameter display acl { acl-number | all | name acl-name } Any view acl-number: IPv4 ACL number in the range 2000 to 5999, where: ■ 2000 to 2999 for basic IPv4 ACLs ■ 3000 to 3999 for advanced IPv4 ACLs ■ 4000 to 4999 for Ethernet frame header ACLs ■ 5000 to 5999 for user-defined ACLs all: All IPv4 ACLs.
CHAPTER 138: IPV4 ACL CONFIGURATION COMMANDS Table 545 Description on the fields of the display acl command Field Description rule 5 comment This rule is The description of ACL rule 5 is "This rule is used in eth 1.
fragment: Indicates that the rule applies only to non-first fragments. Without this keyword, the rule applies to both fragments and non-fragments logging: Specifies to log matched packets. The log provides information about ACL rule number, whether packets are permitted or dropped, upper layer protocol that IP carries, source/destination address, source/destination port number, and number of packets. source { sour-addr sour-wildcard | any }: Specifies a source address.
CHAPTER 138: IPV4 ACL CONFIGURATION COMMANDS rule (in advanced IPv4 ACL view) Syntax rule [ rule-id ] { deny | permit } protocol [ destination { dest-addr dest-wildcard | any } | destination-port operator port1 [ port2 ] | dscp dscp | established | fragment | icmp-type { icmp-type icmp-code | icmp-message } | logging | precedence precedence | reflective | source { sour-addr sour-wildcard | any } | source-port operator port1 [ port2 ] | time-range time-name | tos tos | vpn-instance vpn-instance-name
Table 546 Parameters for advanced IPv4 ACL rules Parameter Function Description reflective Specifies the rule to be reflective. A rule with the reflective keyword can be defined only for TCP, UDP, or ICMP packets and its statement can only be permit. vpn-instance vpn-instance-name Specifies a VPN instance. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters.
CHAPTER 138: IPV4 ACL CONFIGURATION COMMANDS Table 548 Parameters for advanced IPv4 ACL rules Parameter Function Description icmp-type { icmp-type icmp-code | icmp-message } Specifies the ICMP message type and code. The icmp-type argument ranges from 0 to 255. The icmp-code argument ranges from 0 to 255. The icmp-message argument specifies a message name. For available ICMP messages, see Table 549. The following table provides the ICMP messages that you can specify in advanced IPv4 ACL rules.
When defining ACL rules, you need not assign them IDs. The system can automatically assign rule IDs starting with 0 and increasing in certain rule numbering steps. A rule ID thus assigned is greater than the current highest rule ID. For example, if the rule numbering step is five and the current highest rule ID is 28, the next rule will be numbered 30. For detailed information about step, refer to “step (for IPv4)” on page 2100 and “step (for IPv6)” on page 2116.
CHAPTER 138: IPV4 ACL CONFIGURATION COMMANDS time-range time-name: Specifies the time range in which the rule can take effect. The time-name argument comprises 1 to 32 characters. It is case insensitive and must start with an English letter. To avoid confusion, this name cannot be all. type type-code type-wildcard: Defines a link layer protocol. The type-code argument is a 16-bit hexadecimal number indicating frame type.
l2: Sets the offset from the beginning of the Layer 2 frame header. time-range time-name: Specifies the time range in which the rule can take effect. The time-name argument is a case-insensitive string of 1 to 32 characters. The name must begin with an English letter and cannot be all to avoid confusion. rule-string: Defines a match pattern in hexadecimal format. Its length must be a multiple of two. rule-mask: Defines a match pattern mask in hexadecimal format.
CHAPTER 138: IPV4 ACL CONFIGURATION COMMANDS text: IPv4 ACL rule description, a string of up to 127 characters. Description Use the rule comment command to create or modify an ACL rule description, for example to describe the purpose of the ACL rule or the parameters it contains. You will fail to do that if the specified rule does not exist. Use the undo rule comment command to remove the ACL rule description. By default, no rule description is created.
When defining rules in an IPv4 ACL, you do not necessarily assign them numbers. The system can do this automatically in steps. For example, if the default step applies, rules you created are automatically numbered 0, 5, 10, 15, and so on. One benefit of rule numbering step is that it allows you to insert new rules between existing ones as needed. For example, after creating four rules numbered 0, 5, 10, 15 in an ACL configured with the step of five, you can still insert a rule numbered 1.
CHAPTER 138: IPV4 ACL CONFIGURATION COMMANDS
139 IPV6 ACL CONFIGURATION COMMANDS acl ipv6 Syntax acl ipv6 number acl6-number [ name acl6-name ] [ match-order { auto | config } ] undo acl ipv6 { all | name acl6-name | number acl6-number } View Parameter System view acl6-number: IPv6 ACL number.
CHAPTER 139: IPV6 ACL CONFIGURATION COMMANDS Example ■ You can specify a name for an IPv6 ACL only when you create the ACL. After creating an ACL, you cannot specify a name for it, nor can you change or remove the name of the ACL. ■ The name of an IPv6 ACL must be unique among IPv6 ACLs. However, an IPv4 ACL and an IPv6 ACL can share the same name.
View Parameter System view source-acl6-number: Number of an existing IPv6 ACL, which must be in the following ranges (the available ACL number ranges varies by device): ■ 2000 to 2999 for basic IPv6 ACLs ■ 3000 to 3999 for advanced IPv6 ACLs source-acl6-name: Name of an existing IPv6 ACL, a case insensitive string of 1 to 32 characters. It must start with an English letter and cannot be the English word of all to avoid confusion.
CHAPTER 139: IPV6 ACL CONFIGURATION COMMANDS Description Example Use the acl ipv6 name command to enter the view of an existing IPv6 ACL by specifying its name. # Enter the view of the IPv6 ACL named flow.
■ 2000 to 2999 for basic IPv6 ACLs ■ 3000 to 3999 for advanced IPv6 ACLs ■ 10000 to 42767 for simple IPv6 ACLs all: All IPv6 ACLs. name acl6-name: Specifies the name of the ACL, which is a case insensitive string of 1 to 32 characters. It must start with an English letter and cannot be the English word of all to avoid confusion. Description Use the display acl ipv6 command to display information about specified or all IPv6 ACLs. The output will be displayed in matching order.
CHAPTER 139: IPV6 ACL CONFIGURATION COMMANDS name acl6-name: Specifies the name of the ACL, which is a case insensitive string of 1 to 32 characters. It must start with an English letter and cannot be the English word of all to avoid confusion. Description Example Use the reset acl ipv6 counter command to clear statistics about specified or all basic and advanced IPv6 ACLs. # Clear the statistics about IPv6 ACL 2001.
Use the undo rule command to remove an IPv6 ACL rule or parameters from the rule. With the undo rule command, if no parameters are specified, the entire ACL rule is removed; if other parameters are specified, only the involved information is removed. You will fail to create or modify a rule if its permit/deny statement is exactly the same as another rule. In addition, if the ACL match order is set to auto rather than config, you cannot modify ACL rules.
CHAPTER 139: IPV6 ACL CONFIGURATION COMMANDS Table 551 Match criteria and other rule information for advanced IPv6 ACL rules Parameter Function Description source { source source-prefix | source/source-prefix | any } Specifies a source IPv6 address. The source and source-prefix arguments specify an IPv6 source address and its prefix length in the range 1 to 128. destination { dest dest-prefix | dest/dest-prefix | any } Specifies a destination IPv6 address.
Table 552 TCP/UDP-specific match criteria for advanced IPv6 ACL rules Parameter Function Description source-port operator port1 [ port2 ] Defines the source port in the UDP/TCP packet. The operator argument can be lt (lower than), gt (greater than), eq (equal to), or range (inclusive range). destination-port operator port1 [ port2 ] The port1 and port2 arguments each specify a Defines the destination port in the TCP or UDP port, represented by a number in the range 0 to 65535.
CHAPTER 139: IPV6 ACL CONFIGURATION COMMANDS Table 554 Available ICMPv6 messages Description ICMPv6 message Type Code neighbor-advertisement 136 0 neighbor-solicitation 135 0 network-unreachable 1 0 packet-too-big 2 0 port-unreachable 1 4 router-advertisement 134 0 router-solicitation 133 0 unknown-ipv6-opt 4 2 unknown-next-hdr 4 1 Use the rule command to create an IPv6 ACL rule or modify the rule if it has existed.
any } | source-port operator port1 [ port2 ] | tcp-type { tcpurg | tcpack | tcppsh | tcprst | tcpsyn | tcpfin } ] * undo rule [ addr-flag | destination | destination-port | dscp | frag-type | icmp6-type | source | source-port | tcp-type ] * View Parameter Simple IPv6 ACL view protocol: Protocol carried on IPv6. It can be a number in the range 0 to 255, or in words, gre (47), icmpv6 (58), ipv6, ipv6-ah (51), ipv6-esp (50), ospf (89), tcp (6), udp (17).
CHAPTER 139: IPV6 ACL CONFIGURATION COMMANDS Table 556 TCP/UDP-specific parameters for simple IPv6 ACL rules Parameter Function Description source-port operator port1 [ port2 ] Defines a UDP or TCP source port against which UDP or TCP packets are matched. The operator argument can be lt (lower than), gt (greater than), eq (equal to), and range (inclusive range). destination-po Defines a UDP or TCP destination rt operator port against port1 [ port2 ] which UDP or TCP packets are matched.
Table 558 ICMPv6 messages definable in simple IPv4 ACL rules Description ICMPv6 message ICMPv6 TYPE ICMPv6 CODE neighbor-advertisement Type=136 Code=0 neighbor-solicitation Type=135 Code=0 network-unreachable Type=1 Code=0 packet-too-big Type=2 Code=0 port-unreachable Type=1 Code=4 router-advertisement Type=134 Code=0 router-solicitation Type=133 Code=0 unknown-ipv6-opt Type=4 Code=2 unknown-next-hdr Type=4 Code=1 Use the rule command to create an IPv6 ACL rule.
CHAPTER 139: IPV6 ACL CONFIGURATION COMMANDS By default, no rule description is created. Example # Define a rule in IPv6 ACL 2000 and create a description for the rule. system-view [Sysname] acl ipv6 number 2000 [Sysname-acl6-basic-2000] rule 0 permit source 2030:5060::9050/64 [Sysname-acl6-basic-2000] rule 0 comment This rule is used in eth 1 # Define a rule in IPv6 ACL 3000 and create a description for the rule.
system-view [Sysname] acl ipv6 number 2000 [Sysname-acl6-basic-2000] step 2 # Set the rule numbering step to 2 for IPv6 ACL 3000.
CHAPTER 139: IPV6 ACL CONFIGURATION COMMANDS
IPSEC CONFIGURATION COMMANDS 140 ah authentication-algorithm Syntax ah authentication-algorithm { md5 | sha1 } undo ah authentication-algorithm View Parameter IPSec proposal view md5: Uses MD5. sha1: Uses SHA1. Description Use the ah authentication-algorithm command to specify the authentication algorithm for the authentication header (AH) protocol. Use the undo ah authentication-algorithm command to restore the default. By default, MD5 is used.
CHAPTER 140: IPSEC CONFIGURATION COMMANDS Parameter Description None Use the cryptoswitch fabric enable command to enable the encryption switch fabric. Use the undo cryptoswitch fabric enable command to disable the encryption switch fabric. ■ If an encryption card is bound, IPSec processing is performed by the card as long as it works properly.
Table 559 Description on the fields of the display encrypt-card fast-switch command Field Description encrypt-card Fast-Forwarding cache Encryption card fast forwarding cache Index Index number of the encryption card fast forwarding entry SourIP Source IP address of the data flow SourPort Source port number of the data flow DestIP Destination IP address of the data flow DestPort Destination port number of the data flow Prot Protocol number TdbID Identification of the SA ENC/DEC Acti
CHAPTER 140: IPSEC CONFIGURATION COMMANDS mapss1234567890-10000 isakmp peerr1234567890 IPsec-Policy-Name Mode acl Local-Address Remote-Address -----------------------------------------------------------------------map-2 manual 3000 255.255.255.255 255.255.255.
outbound ESP setting: ESP spi: 65432 (0xff98) ESP string-key: ESP encryption hex key: 11223344556677889900aabbccddeeff1234567812345678 ESP authentication hex key: 11223344556677889900aabbccddeeff Table 561 Description on the fields of the display ipsec policy command Field Description security data flow Access control list referenced by the IPSec policy proposal name Name of the proposal referenced by the IPSec policy inbound/outbound ah/esp setting AH/ESP settings in the inbound/outbound dire
CHAPTER 140: IPSEC CONFIGURATION COMMANDS -----------------------------------------------------test-tplt300 2200 Table 562 Description on the fields of display ipsec policy-template brief Field Description Policy-template-Name Name and sequence number of the IPSec policy template separated by hyphen acl Access control list referenced by the IPSec policy template Remote Address Remote IP address display ipsec proposal Syntax View Parameter Description Related command: Example display ipsec
View Parameter Any view brief: Displays brief information about all SAs. duration: Displays the global SA lifetime information. policy: Displays detailed information about SAs created by using a specified IPSec policy. policy-name: Name of the IPSec policy, a string 1 to 15 characters. seq-number: Sequence number of the IPSec policy, in the range 1 to 10000. remote ip-address: Displays detailed information about the SA with a specified remote address.
CHAPTER 140: IPSEC CONFIGURATION COMMANDS ----------------------------IPsec policy name: "r2" sequence number: 1 mode: isakmp ----------------------------connection id: 3 encapsulation mode: tunnel perfect forward secrecy: None tunnel: local address: 2.2.2.2 remote address: 1.1.1.2 flow: (11 times matched) sour addr: 192.168.2.0/255.255.255.0 dest addr: 192.168.1.0/255.255.255.
Table 565 Description on the fields of the display ipsec sa command Field Description sa remaining key duration Remaining lifetime of the SA max received sequence-number Maximum sequence number of the received packets (relevant to the anti-replay function provided by the security protocol) udp encapsulation used Whether NAT traversal is enabled for the SA for nat traversal outbound Information of the outbound SA max sent sequence-number Maximum sequence number of the sent packets (relevant to
CHAPTER 140: IPSEC CONFIGURATION COMMANDS display ipsec session tunnel-id 5 -----------------------------------------------------------total sessions : 1 -----------------------------------------------------------tunnel-id : 5 session idle duration/total duration (sec) : 30/300 session flow : (4 times matched) Sour Addr : 12.12.12.2 Dest Addr : 13.13.13.
replay packet: 0 packet too long: 0 wrong SA: 0 Table 567 Description on the fields of the display ipsec statistics command Field Description input/output security packets Number of inbound IPSec protected packets and number of outbound IPSec protected packets input/output security bytes Number of inbound IPSec protected bytes and number of outbound IPSec protected bytes input/output dropped security packets Number of inbound IPSec protected packets that are discarded by the device and number
CHAPTER 140: IPSEC CONFIGURATION COMMANDS Dest Addr : 44.44.44.0/255.255.255.
Parameter Description None Use the encrypt-card fast-switch command to enable encryption card fast switching. Use the undo encrypt-card fast-switch command to disable encryption card fast switching. By default, encryption card fast switching is disabled. Related command: Example display encrypt-card fast-switch. # Enable encryption card fast switching.
CHAPTER 140: IPSEC CONFIGURATION COMMANDS undo esp encryption-algorithm View Parameter IPSec proposal view 3des: Uses triple DES (3DES) in cipher block chaining (CBC) mode as the encryption algorithm. The 3DES algorithm uses a 168-bit key for encryption. aes: Uses advanced encryption standard (AES) in CBC mode as the encryption algorithm. The AES algorithm uses a 128- bit, 192-bit, or 256-bit key for encryption.
View Parameter Description IPSec policy view/IPSec policy template view peer-name: IKE peer name, a string of 1 to 15 characters. Use the ike-peer command to reference an IKE peer in an IPSec policy or IPSec policy template configured through IKE negotiation. Use the undo ike peer command to remove the reference of an IKE peer. Note that this command applies to only IKE negotiation mode. Related command: Example ipsec policy-template. # Configure a reference to an IKE peer in an IPSec policy.
CHAPTER 140: IPSEC CONFIGURATION COMMANDS Related command: Example ■ An encryption card interface can be bound with multiple IPSec policy groups or IPSec policies, provided that those policies and policy groups have different names. An IPSec policy group or IPSec policy can be bound to multiple encryption cards. ■ An IPSec policy template cannot be bound to an encryption card interface, but an IPSec policy originating from an IPSec policy template can.
Parameter Description None Use the ipsec cpu-backup enable command to enable the IPSec module backup function. Use the undo ipsec cpu-backup enable command to disable the IPSec CPU backup function. By default, the IPSec module backup function is disabled. Example # Enable the IPSec module backup function.
CHAPTER 140: IPSEC CONFIGURATION COMMANDS system-view [Sysname] interface serial 2/2 [Sysname-Serial2/2] ipsec policy pg1 ipsec policy (system view) Syntax ipsec policy policy-name seq-number [ isakmp | manual ] undo ipsec policy policy-name [ seq-number ] View Parameter System view policy-name: Name for the IPSec policy, a case insensitive string of 1 to 15 characters. Valid characters are English letters and numbers. No minus sign (-) can be included.
ipsec policy isakmp template Syntax ipsec policy policy-name seq-number isakmp template template-name undo ipsec policy policy-name [ seq-number ] View Parameter System view policy-name: Name for the IPSec policy, a case insensitive string of 1 to 15 characters. Valid characters are English letters and numbers. No minus sign (-) can be included. seq-number: Sequence number for the IPSec policy, in the range 1 to 10000. template-name: Name for the IPSec policy template to be referenced.
CHAPTER 140: IPSEC CONFIGURATION COMMANDS seq-number: Sequence number for the IPSec policy template, in the range 1 to 10000. Description Use the ipsec policy-template command to create an IPSec policy template and enter the IPSec policy template view. Use the undo ipsec policy-template command to delete the specified IPSec policy template(s). By default, no IPSec policy template exists.
Example # Create an IPSec proposal named newprop1. system-view [Sysname] ipsec proposal newprop1 ipsec sa global-duration Syntax ipsec sa global-duration { time-based seconds | traffic-based kilobytes } undo ipsec sa global-duration { time-based | traffic-based } View Parameter System view seconds: Time-based global SA lifetime in seconds, in the range 180 to 604,800. kilobytes: Traffic-based global SA lifetime in kilobytes, in the range 256 to 4,194,303.
CHAPTER 140: IPSEC CONFIGURATION COMMANDS undo ipsec session idle-time View Parameter Description System view Seconds: IPSec session idle timeout in seconds, in the range of 60 to 3,600. Use the ipsec session idle-time command to set the idle timeout for IPSec sessions. Use the undo ipsec session idle-time command to restore the default. By default, the IPSec session idle timeout is 300 seconds. Example # Set the IPSec session idle timeout to 600 seconds.
Related command: Example ■ The local Diffie-Hellman group must be the same as that of the peer. ■ This command can be used only when the SAs are to be set up through IKE negotiation. ipsec policy-template, ipsec policy (system view). # Enable and configure PFS for IPSec policy policy1.
CHAPTER 140: IPSEC CONFIGURATION COMMANDS [Sysname] ipsec policy policy1 100 manual [Sysname-ipsec-policy-manual-policy1-100] proposal prop1 reset encrypt-card fast-switch Syntax View Parameter Description reset encrypt-card fast-switch User view None Use the reset encrypt-card fast-switch command to clear encryption card fast switching entries. Note that: Related command: Example ■ This command clears all the fast switching entries.
policy-name: Name of the IPSec policy, a case sensitive string of 1 to 15 alphanumeric characters. seq-number: Sequence number of the IPSec policy, in the range 1 to 10000. If no seq-number is specified, all the policies in the IPSec policy group named policy-name are specified. remote ip-address: Specifies ip-address as the remote address, in dotted decimal notation. Description Use the reset ipsec sa command to clear an specified or all SAs set up manually or through IKE negotiation.
CHAPTER 140: IPSEC CONFIGURATION COMMANDS View Parameter Description Related command: Example User view integer: ID of the IPSec tunnel, in the range1 to 2,000,000,000. Use the reset ipsec session command to clear the sessions of a specified or all IPSec tunnels. display ipsec session. # Clear all IPSec sessions. reset ipsec session # Clear the sessions of IPSec tunnel 5.
ah: Uses AH. esp: Uses ESP. hex-key: Authentication key for the SA, in hexadecimal format. The length of the key is 16 bytes for MD5 and 20 bytes for SHA1. Description Use the sa authentication-hex command to configure an authentication key for an SA. Use the undo sa authentication-hex command to remove the configuration. Note that: Related command: Example ■ This command applies to only manual IPSec policies.
CHAPTER 140: IPSEC CONFIGURATION COMMANDS Use the undo sa duration command to restore the default. By default, the time-based global SA lifetime is 3,600 seconds, and traffic-based SA lifetime is 1,843,200 kilobytes. Note that: Related command: Example ■ When negotiating to set up an SA, IKE prefers the lifetime of the IPSec policy that it uses. If the IPSec policy is not configured with its lifetime, IKE uses the global SA lifetime.
Note that: Related command: Example ■ This command applies to only manual IPSec policies. ■ When configuring an IPSec policy, you need to set the parameters of both the inbound and outbound SAs. ■ The encryption key for the inbound SA at the local end must be the same as that for the outbound SA at the remote end, and the encryption key for the outbound SA at the local end must be the same as that for the inbound SA at the remote end. ipsec policy (system view).
CHAPTER 140: IPSEC CONFIGURATION COMMANDS Related command: Example ■ SA parameters of IKE negotiated IPSec policies are subject to IKE, which is also responsible for establishing SAs. ■ When configuring an IPSec policy, you need to set the parameters of both the inbound and outbound SAs.
Related command: Example ■ When configuring an IPSec policy, you need to set the parameters of both the inbound and outbound SAs. ■ The key for the inbound SA at the local end must be the same as that for the outbound SA at the remote end, and the key for the outbound SA at the local end must be the same as that for the inbound SA at the remote end. ■ Both ends of an IPSec tunnel must be configured with the same key in the same format. ipsec policy (system view).
CHAPTER 140: IPSEC CONFIGURATION COMMANDS transform Syntax transform { ah | ah-esp | esp } undo transform View Parameter IPSec proposal view ah: Uses the AH protocol. ah-esp: Uses ESP first and then AH. esp: Uses the ESP protocol. Description Use the transform command to specify the security protocol for an IPSec proposal. Use the undo transform command to restore the default. By default, the ESP protocol is used.
Description Use the tunnel local command to configure the local address of an IPSec tunnel. Use the undo tunnel local command to remove the configuration. By default, no local address is configured for an IPSec tunnel. Note that: Related command: Example ■ This command applies to only manual IPSec policies. ■ The local address, if not configured, will be the address of the interface to which the IPSec policy is applied. ipsec policy (system view).
CHAPTER 140: IPSEC CONFIGURATION COMMANDS Example # Set the remote address of the IPSec tunnel to 10.1.1.2. system-view [Sysname] ipsec policy policy1 10 manual [Sysname-ipsec-policy-policy1-10] tunnel remote 10.1.1.
141 IKE CONFIGURATION COMMANDS authentication-algorithm Syntax authentication-algorithm { md5 | sha } undo authentication-algorithm View Parameter IKE proposal view md5: Uses HMAC-MD5. sha: Uses HMAC-SHA1. Description Use the authentication-algorithm command to specify the authentication algorithm for an IKE proposal. Use the undo authentication-algorithm command to restore the default. By default, an IKE proposal uses the SHA1 authentication algorithm.
CHAPTER 141: IKE CONFIGURATION COMMANDS Description Use the authentication-method command to specify the authentication method to be used by an IKE proposal. Use the undo authentication-method command to restore the default. By default, an IKE proposal uses the pre-shared key authentication method. Related command: Example ike proposal, display ike proposal. # Specify that IKE proposal 10 uses the pre-shared key authentication method.
group5: Uses the 1536-bit Diffie-Hellman group for key negotiation in phase 1. group14: Uses the 2048-bit Diffie-Hellman group for key negotiation in phase 1. Description Use the dh command to specify the DH group to be used in key negotiation phase 1 for an IKE proposal. Use the undo dh command to restore the default. By default, group1, the 768-bit Diffie-Hellman group, is used. Related command: Example ike proposal, display ike proposal. # Specify 768-bit Diffie-Hellman for IKE proposal 10.
CHAPTER 141: IKE CONFIGURATION COMMANDS display ike peer Syntax View Parameter Description Related command: Example display ike peer [ peer-name ] Any view peer-name: Name of the IKE peer, a string of 1 to 15 characters. Use the display ike peer command to display information about a specified or all IKE peers. ike peer (system view). # Display information about all IKE peers.
Description Use the display ike proposal command to display the settings of all IKE proposals. This command displays the configuration information of all IKE proposals in the descending order of proposal priorities. Related command: Example authentication-method on page 1721, ike proposal, encryption-algorithm on page 1725, authentication-algorithm on page 1721, dh, sa duration. # Display the settings of IKE proposals.
CHAPTER 141: IKE CONFIGURATION COMMANDS Example # Display brief information about the current IKE SAs. display ike sa total phase-1 SAs: 1 connection-id peer flag phase doi ---------------------------------------------------------1 202.38.0.2 RD|ST 1 IPSEC 2 202.38.0.
diffie-hellman group: GROUP1 nat traversal: NO # Display detailed information about the IKE SA with the connection ID of 2. display ike sa verbose connection-id 2 --------------------------------------------connection id: 2 transmitting entity: initiator --------------------------------------------local ip: 4.4.4.4 local id type: IPV4_ADDR local id: 4.4.4.4 remote ip: 4.4.4.5 remote id type: IPV4_ADDR remote id: 4.4.4.
CHAPTER 141: IKE CONFIGURATION COMMANDS dpd Syntax dpd dpd-name undo dpd View IKE Peer view Parameter dpd-name: DPD name, a string of 1 to 15 characters. Description Use the dpd command to apply a DPD to an IKE peer. Use the undo dpd command to remove the application. By default, no DPD is applied to an IKE peer. Example # Apply DPD dpd1 to IKE peer peer1.
Related command: Example ike proposal and display ike proposal. # Use 56-bit DES in CBC mode as the encryption algorithm for IKE proposal 10. system-view [Sysname] ike proposal 10 [Sysname-ike-proposal-10] encryption-algorithm des-cbc exchange-mode Syntax exchange-mode { aggressive | main } undo exchange-mode View Parameter IKE Peer view aggressive: Aggressive mode main: Main mode. Description Use the exchange-mode command to select an IKE negotiation mode.
CHAPTER 141: IKE CONFIGURATION COMMANDS Description Use the id-type command to select the type of the ID in IKE negotiation. Use the undo id-type command to restore the default. By default, the type of IP address is used in IKE negotiation. Note that: Related command: Example ■ In main mode, only the ID type of IP address can be used in performing IKE negotiation and creating an SA. ■ In aggressive mode, either type can be used.
Parameter Description name: Name of the local gateway for IKE negotiation, a string of 1 to 32 characters. Use the ike local-name command to configure a name for the local gateway. Use the undo ike local-name command to restore the default.
CHAPTER 141: IKE CONFIGURATION COMMANDS ike peer (system view) Syntax ike peer peer-name undo ike peer peer-name View Parameter Description System view peer-name: IKE peer name, a string of 1 to 15 characters. Use the ike peer command to create an IKE peer and enter IKE peer view. Use the undo ike peer command to delete an IKE peer. Example # Create an IKE peer named peer1 and enter IKE peer view.
Example # Create IKE proposal 10 and enter IKE proposal view. system-view [Sysname] ike proposal 10 [Sysname-ike-proposal-10] ike sa keepalive-timer interval Syntax ike sa keepalive-timer interval seconds undo ike sa keepalive-timer interval View Parameter Description System view seconds: Transmission interval of ISAKMP SA keepalives in seconds, in the range 20 to 28,800. Use the ike sa keepalive-timer interval command to set the ISAKMP SA keepalive interval.
CHAPTER 141: IKE CONFIGURATION COMMANDS By default, no keepalive packet is sent. Note that the keepalive timeout configured at the local end must be longer than the keepalive interval configured at the remote end. Since it seldom occurs that more than three consecutive packets are lost on a network, the keepalive timeout can be configured to be three times of the keepalive interval. Related command: Example ike sa keepalive-timer interval. # Set the keepalive timeout to 20 seconds.
Description Use the interval-time command to set the DPD query triggering interval for a DPD. Use the undo interval-time command to restore the default. By default, the DPD query triggering interval is 10 seconds. Example # Set the DPD query triggering interval for dpd2 to 1 second.
CHAPTER 141: IKE CONFIGURATION COMMANDS Description Use the local-address command to configure the IP address of the local gateway in IKE negotiation. Use the undo local-address command to remove the configuration. By default, the master address of the interface referencing the IPSec policy is used as the local gateway IP address for IKE negotiation. This command is required only when you want to specify a special address for the local gateway.
Description Use the peer command to set the subnet type of the peer gateway for IKE negotiation. Use the undo peer command to restore the default. By default, the subnet is a single one. You can use this command to enable interoperability with a Netscreen device. Example # Set the subnet type of the peer gateway to multiple.
CHAPTER 141: IKE CONFIGURATION COMMANDS Description Use the remote-address command to configure the remote IP address of the IPSec tunnel. Use the undo remote-address command to remove the configuration. Note that the ip-address configured with the remote-address command must agree with the IP address configured with the local-address command. Related command: Example id-type ip, local-address. # Configure the remote IP address as 10.0.0.1.
View Parameter Description User view connection-id: Connection ID of the IPSec tunnel to be cleared, in the range 1 to 2000000000. Use the reset ike sa command to clear the IPSec tunnel set up by IKE. Note that: Related command: Example ■ If connection-id is not specified, all the SAs set up in phase 1 will be cleared.
CHAPTER 141: IKE CONFIGURATION COMMANDS Before an SA expires, IKE will negotiate a new SA. As soon as the new SA is set up, it takes effect immediately and the old one will be cleared automatically when it expires. Related command: Example ike proposal and display ike proposal. # Specify the ISAKMP SA lifetime for IKE proposal 10 as 600 seconds (10 minutes).
SSH2.0 CONFIGURATION COMMANDS 142 display public-key local Syntax View Parameter display public-key local { dsa | rsa } public Any view dsa: Displays the public key(s) of DSA local key pair(s). rsa: Displays the public key(s) of RSA local key pair(s). Description Related command: Example Use the display public-key local command to display information about the public key(s) of the local key pair(s). public-key local create. # Display the public key information of RSA local key pair(s).
CHAPTER 142: SSH2.
display public-key peer name idrsa ===================================== Key name : idrsa Key type : RSA Key module: 1024 ===================================== Key Code: 30819D300D06092A864886F70D010101050003818B00308187028181009C46A87102 16CEC0C01C7CE136BA76C79AA6040E79F9E305E453998C7ADE8276069410803D5974 F708496947AB39B3F39C5CE56C95B6AB7442D56393BF241F99A639DD02D9E29B1F5C 1FD05CC1C44FBD6CFFB58BE6F035FAA2C596B27D1231D159846B7CB9A7757C5800FA DA9FD72F65672F4A549EE99F63095E11BD37789955020123
CHAPTER 142: SSH2.0 CONFIGURATION COMMANDS Example # Display the source IP address of the SFTP client. display sftp client source The source IP address you specified is 192.168.0.1 display ssh client source Syntax View Parameter Description display ssh client source Any view None Use the display ssh client source command to display the source IP address or source interface currently set for the SSH client.
SSH server key generating interval : 0 hour(s) SSH Authentication retries : 3 time(s) SFTP Server: Disable SFTP Server Idle-Timeout: 10 minute(s) Table 576 Description on fields of the display ssh server status command Field Description SSH Server Whether the SSH server function is enabled SSH version SSH protocol version When the SSH supports SSH1, the protocol version is 1.99. Otherwise, the protocol version is 2.0.
CHAPTER 142: SSH2.0 CONFIGURATION COMMANDS Parameter None Description Use the display ssh server-info command to display the mappings between host public keys and SSH servers saved on a client. Example # Display the mappings between host public keys and SSH servers saved on the client. display ssh server-info Server Name(IP) Server public key name ______________________________________________________ 192.168.0.1 abc_key01 192.168.0.
peer-public-key end Syntax View Parameter Description Related command: Example peer-public-key end Public key view None Use the peer-public-key end command to return from public key view to system view. public-key peer. # Exit public key view.
CHAPTER 142: SSH2.0 CONFIGURATION COMMANDS public-key-code end Syntax View Parameter Description public-key-code end RSA key code view None Use the public-key-code end command to return from public key code view to public key view and to save the configured public key. The system verifies the key before saving it. If the key contains illegal characters, the system displays an error message and discards the key. If the key is legal, the system saves it.
bits and defaults to 1024. If the key pair already exists, the system will ask you whether you want to overwrite it. ■ Related command: Example The configuration of this command can survive a reboot. You only need to configure it once. public-key local destroy, display public-key local. # Create local RSA key pair. system-view [Sysname] public-key local create rsa The range of public key size is (512 ~ 2048). NOTES: If the key modulus is greater than 512, It may take a few minutes.
CHAPTER 142: SSH2.0 CONFIGURATION COMMANDS Parameter dsa: DSA key pair. rsa: RSA key pair. Description Related command: Example Use the public-key local destroy command to destroy the local key pair(s). public-key local create. # Destroy local RSA key pair. system-view [Sysname] public-key local destroy rsa Warning: Confirm to destroy these keys? [Y/N]:y # Destroy local DSA key pair.
system-view [Sysname] public-key local export rsa ssh2 ---- BEGIN SSH2 PUBLIC KEY ---Comment: "rsa-key-20061105" AAAAB3NzaC1yc2EAAAADAQABAAAAgKRkxFoZ+T72Srs9c60+j2yrkd0AHBsXBh0Uq+iN vE12PaYR1On4 x+aNlwe9fjW1PYgzH+DRkTpiMrn3j2pIs7gaJXvefTW94rbVWJ94uiSDk1NLX1JcoTtW nQcVhft3mUZ+ J0jBEhAcw4bROe7/qr6l7VTCo9FBZ0XgKuHroovX ---- END SSH2 PUBLIC KEY ---- # Display the RSA local public key in OpenSSH format.
CHAPTER 142: SSH2.
public-key peer import sshkey Syntax public-key peer keyname import sshkey filename undo public-key peer keyname View Parameter System view keyname: Public key name, a string of 1 to 64 characters. filename: Public key file name. The value range varies by device models. Description Use the public-key peer import sshkey command to import a peer public key from the public key file. Use the undo public-key peer import sshkey command to remove the setting.
CHAPTER 142: SSH2.0 CONFIGURATION COMMANDS ■ des: Encryption algorithm des-cbc. prefer-ctos-hmac: Preferred HMAC algorithm from client to server, defaulted to sha1. ■ md5: HMAC algorithm hmac-md5. ■ md5-96: HMAC algorithm hmac-md5-96. ■ sha1: HMAC algorithm hmac-sha1. ■ sha1-96: HMAC algorithm hmac-sha1-96. prefer-kex: Preferred key exchange algorithm, defaulted to dh-group-exchange. ■ dh-group-exchange: Key exchange algorithm diffie-hellman-group-exchange-sha1.
Description Use the sftp client ipv6 source command to specify the source IPv6 address or source interface for an SFTP client. Use the undo sftp client ipv6 source command to remove the configuration. By default, the client uses the interface address specified by the route of the device to access the SFTP server. Example # Specify the source IPv6 address of the SFTP client as 2:2::2:2.
CHAPTER 142: SSH2.0 CONFIGURATION COMMANDS Parameter server: IPv6 address or name of the server, a string of 1 to 46 characters. port-number: Port number of the server, in the range 0 to 65535. The default is 22. identity-key: Specifies the algorithm for publickey authentication, either dsa or rsa. The default is dsa. prefer-ctos-cipher: Preferred encryption algorithm from client to server, defaulted to aes128. ■ 3des: Encryption algorithm 3des-cbc. ■ aes128: Encryption algorithm aes128-cbc.
sftp server enable Syntax sftp server enable undo sftp server enable View Parameter Description System view None Use the sftp server enable command to enable SFTP server. Use the undo sftp server enable command to disable SFTP server. By default, SFTP server is disabled. Related command: display ssh server. Example # Enable SFTP server.
CHAPTER 142: SSH2.0 CONFIGURATION COMMANDS ssh client authentication server Syntax ssh client authentication server server assign publickey keyname undo ssh client authentication server server assign publickey View Parameter System view server: IP address or name of the server, a string of 1 to 80 characters. assign publickey keyname: Specifies the name of the host public key of the server, which is a string of 1 to 64 characters.
server later, it can use the locally saved public host key of the server to authenticate the server. With the first authentication function disabled, an SSH client cannot access any server whose public host key it does not know. In this case, you must configure the public host key of the server to be accessed and specify the public key name on the client at first. Example # Enable the first authentication function.
CHAPTER 142: SSH2.0 CONFIGURATION COMMANDS interface interface-type interface-number: Specifies a source interface by its type and number. Description Use the ssh client source command to specify the source IPv4 address or source interface of the SSH client. Use the undo ssh client source command to remove the configuration. By default, an SSH client uses the IP address or interface specified by the route to access the SSH server. Related command: Example display ssh client source.
ssh server authentication-timeout Syntax ssh server authentication-timeout time-out-value undo ssh server authentication-timeout View Parameter Description System view time-out-value: Authentication timeout period in seconds, in the range 1 to120. Use the ssh server authentication-timeout command to set the SSH user authentication timeout period on the SSH server. Use the undo ssh server authentication-timeout command to restore the default.
CHAPTER 142: SSH2.0 CONFIGURATION COMMANDS system-view [Sysname] ssh server compatible-ssh1x enable ssh server enable Syntax ssh server enable undo ssh server enable View Parameter Description System view None Use the ssh server enable command to enable SSH server. Use the undo ssh server enable command to disable SSH server. By default, SSH server is disabled. Example # Enable SSH server.
system-view [Sysname] ssh server rekey-interval 3 ssh user Syntax ssh user username service-type stelnet authentication-type { password | { any | password-publickey | publickey } assign publickey keyname } ssh user username service-type { all | sftp } authentication-type { password | { any | password-publickey | publickey } assign publickey keyname work-directory directory-name } undo ssh user username View Parameter System view username: SSH username, a string of 1 to 80 characters.
CHAPTER 142: SSH2.0 CONFIGURATION COMMANDS Related command: Example ■ For a publickey authentication user, you must configure the username and the public key on the device. For a password authentication user, you can configure the account information on either the device or the remote authentication server such as a RADIUS server. ■ If you use the ssh user command to configure a public key for a user who has already had a public key, the new one overwrites the old one.
prefer-ctos-hmac: Preferred HMAC algorithm from client to server, defaulted to sha1. ■ md5: HMAC algorithm hmac-md5. ■ md5-96: HMAC algorithm hmac-md5-96. ■ sha1: HMAC algorithm hmac-sha1. ■ sha1-96: HMAC algorithm hmac-sha1-96. prefer-kex: Preferred key exchange algorithm, defaulted to dh-group-exchange. ■ dh-group-exchange: Key exchange algorithm diffie-hellman-group-exchange-sha1. ■ dh-group1: Key exchange algorithm diffie-hellman-group1-sha1.
CHAPTER 142: SSH2.0 CONFIGURATION COMMANDS Parameter server: IPv6 address or name of the server, a string of 1 to 46 characters. port-number: Port number of the server, in the range 0 to 65535. The default is 22. identity-key: Specifies the algorithm for publickey authentication, either dsa or rsa. The default is dsa. prefer-ctos-cipher: Preferred encryption algorithm from client to server, defaulted to aes128. ■ 3des: Encryption algorithm 3des-cbc. ■ aes128: Encryption algorithm aes128-cbc.
■ Preferred HMAC algorithm from server to client: SHA1-96.
CHAPTER 142: SSH2.
143 SFTP CONFIGURATION COMMANDS bye Syntax View Parameter Description bye SFTP client view None Use the bye command to terminate the connection with a remote SFTP server and return to system view. This command functions as the exit and quit commands. Example # Terminate the connection with the remote SFTP server. sftp-client> bye Bye [Sysname] cd Syntax View Parameter Description n Example cd [ remote-path ] SFTP client view remote-path: Name of a path on the server.
CHAPTER 143: SFTP CONFIGURATION COMMANDS cdup Syntax View Parameter Description Example cdup SFTP client view None Use the cdup command to return to the upper-level directory. # From the current working directory /new1, return to the upper-level directory. sftp-client> cdup Current Directory is: / delete Syntax View Parameter Description delete remote-file&<1-10> SFTP client view remote-file&<1-10>: Name of a file on the server.
-l: Displays in list form detailed information of the files and folder of the specified directory remote-path: Name of the directory to be queried. Description Use the dir command to display file and folder information under a specified directory. With the -a and -l keyword not specified, the command displays detailed information of files and folder under the specified directory in a list form.
CHAPTER 143: SFTP CONFIGURATION COMMANDS View Parameter SFTP client view remote-file: Name of a file on the remote SFTP server. local-file: Name for the local file. Description Use the get command to download a file from a remote SFTP server and save it locally. If you do not specify the local-file argument, the file will be saved locally with the same name as that on the remote SFTP server. Example # Download file temp1.c and save it as temp.c locally. sftp-client> get temp1.c temp.
-l: Displays in list form detailed information of the files and folder of the specified directory remote-path: Name of the directory to be queried. Description Use the ls command to display file and folder information under a specified directory. With the -a and -l keyword not specified, the command displays detailed information of files and folder under the specified directory in a list form.
CHAPTER 143: SFTP CONFIGURATION COMMANDS remote-file: Name for the file on a remote SFTP server. Description Use the put command to upload a local file to a remote SFTP server. If you do not specify the remote-file argument, the file will be saved remotely with the same name as the local one. Example # Upload local file temp.c to the remote SFTP server and save it as temp1.c. sftp-client> put temp.c temp1.c Local file:temp.c ---> Remote file: /temp1.
remove Syntax View Parameter Description remove remote-file&<1-10> SFTP client view remote-file&<1-10>: Name of a file on an SFTP server. &<1-10> means that you can provide up to 10 filenames, which are separated by space. Use the remove command to delete a specified file from a remote server. This command functions as the delete command. Example # Delete file temp.c from the server. sftp-client> remove temp.c The following files will be deleted: /temp.
CHAPTER 143: SFTP CONFIGURATION COMMANDS Parameter Description Example remote-path&<1-10>: Name of the directory on the remote SFTP server. &<1-10> means that you can provide up to 10 filenames that are separated by space. Use the rmdir command to delete a specified directory from an SFTP server. # On the SFTP server, delete directory temp1 in the current directory.
SSL CONFIGURATION COMMANDS 144 ciphersuite Syntax View Parameter ciphersuite [ rsa_3des_ede_cbc_sha | rsa_aes_128_cbc_sha | rsa_aes_256_cbc_sha | rsa_des_cbc_sha | rsa_rc4_128_md5 | rsa_rc4_128_sha ] * SSL server policy view rsa_3des_ede_cbc_sha: Specifies the key exchange algorithm of RSA, the data encryption algorithm of 3DES_EDE_CBC and the MAC algorithm of SHA.
CHAPTER 144: SSL CONFIGURATION COMMANDS client-verify enable Syntax client-verify enable undo client-verify enable View Parameter Description SSL server policy view None Use the client-verify enable command to enable certificate-based SSL client authentication, that is, to enable the SSL server to perform certificate-based authentication of the client during the SSL handshake process. Use the undo client-verify enable command to restore the default.
display ssl client-policy Syntax View Parameter display ssl client-policy { policy-name | all } Any view policy-name: SSL client policy name, a string of 1 to 16 characters. all: Displays information about all SSL client policies. Description Example Use the display ssl client-policy command to view information about a specified or all SSL client policies. # Display information about SSL client policy policy1.
CHAPTER 144: SSL CONFIGURATION COMMANDS RSA_RC4_128_SHA RSA_DES_CBC_SHA RSA_3DES_EDE_CBC_SHA RSA_AES_128_CBC_SHA RSA_AES_256_CBC_SHA Handshake Timeout: 3600 Close-mode: wait disabled Session Timeout: 3600 Session Cachesize: 500 Client-verify: disabled Table 581 Description on the fields of the display ssl server-policy command Field Description SSL Server Policy SSL server policy name PKI Domain PKI domain to which the SSL server policy belongs Ciphersuite Cipher suites supported by the SSL s
undo pki-domain View Parameter Description SSL server policy view/SSL client policy view domain-name: Name of a PKI domain, a string of 1 to 15 characters. Use the pki-domain command to specify a PKI domain for an SSL server policy or SSL client policy. Use the undo pki-domain command to restore the default. By default, no PKI domain is configured for an SSL server policy or SSL client policy by default. Example # Configure SSL server policy policy1 to use the PKI domain named server-domain.
CHAPTER 144: SSL CONFIGURATION COMMANDS rsa_rc4_128_sha: Specifies the key exchange algorithm of RSA, the data encryption algorithm of 128-bit RC4, and the MAC algorithm of SHA. Description Use the prefer-cipher command to specify the preferred cipher suite for an SSL client policy. Use the undo prefer-cipher command to restore the default. By default, the preferred cipher suite for an SSL client policy is rsa_rc4_128_md5.
ssl client-policy Syntax ssl client-policy policy-name undo ssl client-policy { policy-name | all } View Parameter System view policy-name: SSL client policy name, a case-insensitive string of 1 to 16 characters, which cannot be “a”, “al” and “all”. all: Specifies all SSL client policies. Description Use the ssl client-policy command to create an SSL policy and enter its view. Use the undo ssl client-policy command to remove a specified or all SSL client policies.
CHAPTER 144: SSL CONFIGURATION COMMANDS system-view [Sysname] ssl server-policy policy1 [Sysname-ssl-server-policy-policy1] version Syntax version { ssl3.0 | tls1.0 } undo version View Parameter SSL client policy view ssl3.0: Specifies SSL 3.0. tls1.0: Specifies TLS 1.0. Description Use the version command to specify the SSL protocol version for an SSL client policy. Use the undo version command to restore the default.
BACKUP CENTER CONFIGURATION COMMANDS 145 display standby flow Syntax View Parameter Description Example display standby flow Any view None Use the display standby flow command to display statistics about traffic on the main interfaces participating in load sharing. # Display statistics about the traffic on the main interfaces participating in load sharing.
CHAPTER 145: BACKUP CENTER CONFIGURATION COMMANDS display standby state Syntax View Parameter Description Example display standby state Any view None Use the display standby state command to display the state information of the main and backup interfaces. # Display the state information of the main and backup interfaces.
Table 585 Backup states of the backup interface State Description UPDELAY The backup interface is experiencing a delay before it transits from the non-working state to the working state to take over. DOWN The backup interface cannot work normally. DOWNDELAY The backup interface is experiencing a delay before it transits from the working state to the non-working state. At this time, the backup interface is probably still working.
CHAPTER 145: BACKUP CENTER CONFIGURATION COMMANDS Description Use the standby bandwidth command to configure the bandwidth available for transmission on the main interface. Use the undo standby bandwidth command to restore the default. By default, the available bandwidth used for setting the thresholds is 0 kbps. Note that: Use this command after backup interfaces are specified.
the main interface, you cannot configure the standby track command on both the main interface and its backup interface; if you have associated an interface with a Track object, you cannot configure the interface as the main interface or a backup interface. Related commands: Example standby track. # Specify interface Serial 2/1 to back up interface Serial 2/0, and assign it the priority of 50.
CHAPTER 145: BACKUP CENTER CONFIGURATION COMMANDS Related command: Example ■ The value of the enable-threshold must be bigger than that of the disable-threshold. ■ If a backup interface has been started, the execution of the undo standby threshold command shuts down all backup interfaces. ■ Use this command on main interfaces. ■ Use this command after backup interfaces are specified. standby interface and standby bandwidth.
standby timer flow-check Syntax standby timer flow-check interval undo standby timer flow-check View Parameter Description Interface view interval: Specifies flow check interval, in the range 30 to 600 seconds. Use the standby timer flow-check command to configure the interval for checking the traffic size on the main interface. Use the undo standby timer flow-check command to restore the default. By default, the interval for checking the traffic size on the main interface is 30 seconds.
CHAPTER 145: BACKUP CENTER CONFIGURATION COMMANDS Related commands: n Examples ■ This command and the standby interface command cannot be configured at the same time. That is, if you have configured the standby interface command on the main interface, you cannot configure the standby track command on both the main interface and its backup interface; if you have associated an interface with a Track object, you cannot configure the interface as the main interface or a backup interface.
IPV4-BASED VRRP CONFIGURATION COMMANDS 146 n The interfaces that VRRP involves can only be Layer 3 Ethernet interfaces and VLAN interfaces unless otherwise specified. display vrrp Syntax View Parameter display vrrp [ verbose ] [ interface interface-type interface-number [ vrid virtual-router-id ] ] Any view verbose: Displays detailed state information of VRRP. interface interface-type interface-number: Displays VRRP state information of the specified interface.
CHAPTER 146: IPV4-BASED VRRP CONFIGURATION COMMANDS display vrrp verbose IPv4 Standby Information: Run Method : VIRTUAL-MAC Virtual IP Ping : Enable Interface : Ethernet1/0 VRID : 1 Admin Status : UP Config Pri : 100 Preempt Mode : YES Auth Type : NONE Track IF : Ethernet1/1 Track Object : 1 Virtual IP : 10.10.10.2 Virtual MAC : 0000-5e00-0101 Master IP : 10.10.10.1 Adver.
Parameter interface interface-type interface-number: Displays VRRP statistics of the specified interface. interface-type interface-number specifies an interface by its type and number. vrid virtual-router-id: Displays statistics of the specified VRRP group. virtual-router-id specifies a standby group by its group number, in the range 1 to 255. Description Use the display vrrp statistics command to display statistics about VRRP.
CHAPTER 146: IPV4-BASED VRRP CONFIGURATION COMMANDS Table 589 Description on the fields of the display vrrp statistics command Field Description Auth Type Mismatch Number of packets with authentication failures due to mismatching authentication types Packet Length Errors Number of packets with VRRP packet length errors Address List Errors Number of packets with virtual IP address list errors Become Master Number of times that the router worked as the master Priority Zero Pkts Rcvd Number o
View Parameter Interface view virtual-router-id: VRRP standby group number, in the range 1 to 255. simple: Plain text authentication mode. md5: Authentication header (AH) authentication using the MD5 algorithm. key: Authentication key, case sensitive. Description ■ When simple authentication applies, the authentication key is in plain text with a length of 1 to 8 characters.
CHAPTER 146: IPV4-BASED VRRP CONFIGURATION COMMANDS Parameter real-mac: Associates the real MAC address of the interface with the virtual IP address of the standby group. virtual-mac: Associates the virtual MAC address of the router with the virtual IP address of the standby group. Description Use the vrrp method command to set the mappings between the virtual IP addresses and the MAC addresses of the standby groups. Use the undo vrrp method command to restore the default mapping.
vrrp un-check ttl Syntax vrrp un-check ttl undo vrrp un-check ttl View Parameter Description Interface view None Use the vrrp un-check ttl command to disable TTL check on VRRP packets. Use the undo vrrp un-check ttl command to enable TTL check on VRRP packets. By default, TTL check on VRRP packets is enabled. Example # Disable TTL check on VRRP packets.
CHAPTER 146: IPV4-BASED VRRP CONFIGURATION COMMANDS resulting in frequent master/backup state transition of the standby group members. Preemption delay is introduced to solve this problem. With a preemption delay set, if the backup member does not receive the packet from the master member duly, it waits for a period to see whether it can receive any packet from the master. If the specified period elapses but it still receives no packet from the master, it becomes the master.
vrrp vrid timer advertise Syntax vrrp vrid virtual-router-id timer advertise adver-interval undo vrrp vrid virtual-router-id timer advertise View Parameter Interface view virtual-router-id: VRRP standby group number, in the range 1 to 255. adver-interval: Interval at which the master in the specified standby group sends VRRP advertisements. It ranges from 1 to 255 seconds.
CHAPTER 146: IPV4-BASED VRRP CONFIGURATION COMMANDS reduced priority-reduced: Specifies the value by which the priority decreases. priority-reduced ranges from 1 to 255 and defaults to 10. Description Use the vrrp vrid track command to specify the Track object to be monitored. When the status of the monitored Track object changes to negative, the priority of the router decreases by a specified value. Use the undo vrrp vrid track command to cancel the specified Track object.
Description Use the vrrp vrid track interface command to configure to track the specified interface. Use the undo vrrp vrid track interface command to disable tracking the specified interface. By default, no interface is being tracked. Note that: Example ■ Before executing the command, create a standby group on an interface and configure the virtual IP address of the standby group. ■ When the router is the owner of the IP address, you cannot perform the configuration.
CHAPTER 146: IPV4-BASED VRRP CONFIGURATION COMMANDS Use the undo vrrp vrid virtual-router-id virtual-ip virtual-address command to remove a virtual IP address from a standby group. By default, no standby group is created. Note that: Example ■ The system removes a standby group after you delete all the virtual IP addresses in it. ■ The virtual IP address of the standby group cannot be 0.0.0.0, 255.255.255.255, loopback address, non A/B/C address and other illegal IP addresses such as 0.0.0.1.
147 VRRP CONFIGURATION COMMANDS FOR IPV6 display vrrp ipv6 Syntax View Parameter display vrrp ipv6 [ verbose ] [ interface interface-type interface-number [ vrid virtual-router-id ] ] Any view verbose: Displays detailed state information of VRRP. interface interface-type interface-number: Displays VRRP state information of the specified interface. interface-type interface-number specifies an interface by its type and number.
CHAPTER 147: VRRP CONFIGURATION COMMANDS FOR IPV6 display vrrp ipv6 verbose IPv6 Standby Information: Run Method : VIRTUAL-MAC Virtual IP Ping : Enable Interface : Ethernet1/0 VRID : 1 Adver.
Parameter interface interface-type interface-number: Displays VRRP statistics information of the specified interface. interface-type interface-number specifies an interface by its type and number. vrid virtual-router-id: Displays statistics information of the specified VRRP group. virtual-router-id specifies a standby group by its group number, in the range 1 to 255. Description Use the display vrrp ipv6 statistics command to display statistics about VRRP for IPv6.
CHAPTER 147: VRRP CONFIGURATION COMMANDS FOR IPV6 Table 591 Description on the fields of the display vrrp ipv6 statistics command Field Description Invalid Auth Type Number of packets with authentication failures due to invalid authentication types Auth Type Mismatch Number of packets with authentication failures due to mismatching authentication types Packet Length Errors Number of packets with VRRP packet length errors Address List Errors Number of packets with virtual IPv6 address list er
undo vrrp ipv6 method View Parameter System view real-mac: Associates the real MAC address of the interface with the virtual IPv6 address of the standby group. virtual-mac: Associates the virtual MAC address with the virtual IPv6 address. Description Use the vrrp ipv6 method command to set the mappings between the virtual IPv6 addresses and the MAC addresses of the standby groups. Use the undo vrrp ipv6 method command to restore the default mapping.
CHAPTER 147: VRRP CONFIGURATION COMMANDS FOR IPV6 vrrp ipv6 vrid authentication-mode Syntax vrrp ipv6 vrid virtual-router-id authentication-mode simple key undo vrrp ipv6 vrid virtual-router-id authentication-mode View Parameter Interface view virtual-router-id: VRRP standby group number, in the range 1 to 255. simple: Sets the authentication mode to plain text authentication. key: Authentication key of 1 to 8 case-sensitive characters in plain text.
timer delay delay-value: Sets preemption delay. The delay-value argument ranges from 0 to 255 and defaults to 0, in seconds. Description Use the vrrp ipv6 vrid preempt-mode command to configure preemption on the router and configure its preemption delay in the specified standby group. Use the undo vrrp ipv6 vrid preempt-mode command to disable preemption on the router in the specified standby group.
CHAPTER 147: VRRP CONFIGURATION COMMANDS FOR IPV6 Use the undo vrrp ipv6 vrid priority command to restore the default. By default, the priority of a router in a standby group is 100. Example ■ Before executing the command, create a standby group on an interface and configure the virtual IPv6 address of the standby group. ■ In VRRP, the role that a router plays in a standby group depends on its priority. A higher priority means that the router is more likely to become the master.
[Sysname-Ethernet1/0] vrrp ipv6 vrid 1 virtual-ip fe80::2 link-local [Sysname-Ethernet1/0] vrrp ipv6 vrid 1 timer advertise 500 vrrp ipv6 vrid track Syntax vrrp ipv6 vrid virtual-router-id track interface interface-type interface-number [ reduced priority-reduced ] undo vrrp ipv6 vrid virtual-router-id track [ interface interface-type interface-number ] View Parameter Interface view virtual-router-id: VRRP standby group number, in the range 1 to 255.
CHAPTER 147: VRRP CONFIGURATION COMMANDS FOR IPV6 vrrp ipv6 vrid virtual-ip Syntax vrrp ipv6 vrid virtual-router-id virtual-ip virtual-address [link-local] undo vrrp ipv6 vrid virtual-router-id [ virtual-ip virtual-address [ link-local ] ] View Parameter Interface view virtual-router-id: VRRP standby group number, in the range 1 to 255. virtual-address: Virtual IPv6 address. link-local: Indicates that the virtual IPv6 address of the standby group is a link local address.
DEVICE MANAGEMENT COMMANDS 148 n There are many types of storage media such as Flash, compact Flash (CF), universal serial bus (USB), and hard disk. Different devices support different types of storage device. CF card is exemplified in this document. File names in this document comply with the following rules ■ Path + file name (namely, a full file name): File on a specified path. A full file name consists of 1 to 135 characters.
CHAPTER 148: DEVICE MANAGEMENT COMMANDS bootrom Syntax View Parameter bootrom { backup | read | restore | update file file-url } [ slot slot-number-list ] [ all | part ] User view read: Reads Boot ROM. restore: Restores Boot ROM. backup: Backs up Boot ROM. update file file-url: Upgrades Boot ROM. file-url represents name of the file to be upgraded. slot slot-number-list: Specifies a list of slot numbers of cards, in the format of { slot-number [ to slot-number ] }&<1-7>.
Parameter Description None Use the buzzer enable command to enable the alarm buzzer function. Use the undo buzzer enable command to disable the alarm buzzer function. By default, the alarm buzzer function is enabled. n Example This command is applicable on MSR 50 series routers only. # Enable the temperature alarm buzzer.
CHAPTER 148: DEVICE MANAGEMENT COMMANDS display cpu-usage Syntax View Parameter display cpu-usage [ task ] [ number [ offset ] [ verbose ] [ from-device ] ] Any view task: Displays CPU usage of each task. number: Number of CPU usage statistics records to be displayed. offset: Offset between the serial number of the first CPU usage statistics record to be displayed and that of the last CPU usage record to be displayed. verbose: Specifies to display detailed information of CPU usage statistics.
CPU Usage Stat. Tick : 0x1da0(CPU Tick High) 0x62a5077f(CPU Tick Low) Actual Stat. Cycle : 0x0(CPU Tick High) 0x3d5b5ad1(CPU Tick Low) TaskName b2X0 VIDL TICK STMR DrTF DrTm bCN0 ...omitted... CPU 0% 97% 0% 0% 0% 0% 0% Runtime(CPU Tick High/CPU Tick Low) 0/ ce77f 0/3bc6e650 0/ 23ec62 0/ ad24 0/ 28b6b 0/ 18a28 0/ d840e # Display the last fifth and sixth records of the CPU usage statistics history. display cpu-usage 2 4 ===== CPU usage info (no: 0 idx: 58) ===== CPU Usage Stat.
CHAPTER 148: DEVICE MANAGEMENT COMMANDS View Parameter Any view cf-card: Displays information of a compact Flash (CF). usb: Displays information of a universal serial bus (USB). slot slot-number: Displays detailed information of the specified card. The slot-number argument represents the slot number of a card and the value range varies with devices. verbose: Displays detailed information.
DSP DSP DSP DSP 0: 1: 2: 3: Normal Normal Normal Normal Slot 1 Status: Normal Type: SIC-2FXS Hardware: 2.2 Driver: 2.0 CPLD: 2.0 DSP: Normal[DSP VER: 2.0] Slot 5 Status: Normal Type: FIC-2VE1 Hardware: 3.0 Driver: 2.0 CPLD: 1.0 FDSP: Normal [DSP VER: 2.0] VCPMA: Normal [PCB VER: 3.0 VPM0: Normal [PCB VER: 2.0 DSP 0: Normal DSP 1: Normal DSP 2: Normal DSP 3: Normal VPM1: Normal [PCB VER: 2.0 DSP 0: Normal DSP 1: Normal DSP 2: Normal DSP 3: Normal CPLD VER: 1.0 CPLD VER: 2.0 FPGA VER: 2.
CHAPTER 148: DEVICE MANAGEMENT COMMANDS Table 594 Description on fields on the display device command Field Description FDSP DSP status (FDSP version) of the current card VCPM VCPM status (PCB, CPLD, FPGA version of VCPM) of the current main board VCPMA VCPM status (PCB, CPLD, FPGA version of VCPM) of the current interface card VPMx VPM status (PCB, CPLD, DSP version of VPM) of the current card DSP DSP status (DSP version) of the current card VCPM, VCPMA, VPM, FDSP and DSP status includes
Table 595 Cards that support manufacture information display SIC MIM SIC-2BSV Example FIC ESM DFIC-24O24S # Display manufacturing information of a device.
CHAPTER 148: DEVICE MANAGEMENT COMMANDS Table 597 Description on fields on the display environment command Field Description System Temperature information (degree centigrade) Temperature information of system cards (degree centigrade) Board Card number Temperature Current temperature Lower limit Lower limit of temperature Upper limit Upper limit of temperature display fan Syntax View Parameter Description Example display fan [ fan-id ] Any view fan-id: Built-in fan number.
Register Date: 2006-10-10 15:50:28 Trade Code : 121234A757C06A000693 Table 598 Descriptions on the fields of the display license command Field Description Software license information Software license information of a device Serial Number Serial number of a device Register Date Register date and time Trade Code Trade code (that is, manufacturing serial number) display memory Syntax View Parameter Description Example display memory Any view None Use the display memory command to display th
CHAPTER 148: DEVICE MANAGEMENT COMMANDS display Power 1 State: Power 2 State: Power 3 State: power Absent Normal Absent The above information indicates that power supply 2 works normally, and power supply 1 and power supply 3 are absent. display reboot-type Syntax View display reboot-type [ slot slot-number ] Any view Parameter slot slot-number: Displays reboot type of the specified card, where slot-number represents the slot number of a card. The value range varies with devices.
license register Syntax View license register serial-number User view Parameter serial-number: Specifies the serial number of a card, in the format of XXXXX-XXXXX-XXXXX-XXXXX-XXXXX-XXXXX-XXXXX, in which X represents a character. The character can be a letter (case sensitive), a number, + or (/). Description Use the license register command to register the software serial number for a device. The serial number can be obtained by purchasing letter of authorization.
CHAPTER 148: DEVICE MANAGEMENT COMMANDS reboot Start to check configuration with next startup configuration file, please wait ...... This command will reboot the device. Current configuration will be lost in next startup if you continue. Continue? [Y/N]:y This will reboot device. Continue? [Y/N]:y #Nov 20 12:00:42:698 2006 Sysname COMMONSY/4/REBOOT: Reboot device by command. %Nov 20 12:00:42:699 2006 Sysname DEV/4/SYSTEM REBOOT: System is rebooting now. Now rebooting, please wait...
A confirmation is required when you carry out this command. If you fail to make a confirmation within 30 seconds or enter “N” to cancel the operation, the command will not be carried out. Example # Clear the 16-bit index saved but not used in the current system. reset unused porttag Current operation will delete all unused port tag(s).
CHAPTER 148: DEVICE MANAGEMENT COMMANDS c Example ■ After you execute the above command, the device will prompt you to confirm the configuration. You must enter or to make the configuration take effect. The original configuration will be overwritten at the same time. ■ If a date (month/day/year or year/month/day) later than the current date is specified for the schedule reboot at command, the device will be rebooted at the reboot time.
By default, the scheduled reboot function is disabled. Note that: c Example ■ The reboot wait time can be in the format of hh:mm (hours:minutes) or mm (absolute minutes). The absolute minutes cannot exceed 30 x 24 x 60 minutes, namely, 30 days. ■ The precision of the device timer is 1 minute. One minute before the reboot time, the device will prompt “REBOOT IN ONE MINUTE” and will be rebooted in one minute.
CHAPTER 148: DEVICE MANAGEMENT COMMANDS Description Use the temperature-alarm enable command to enable the temperature alarm function. Use the undo temperature-alarm enable command to disable the temperature alarm function. By default, the temperature alarm function is enabled. Example # Enable the temperature alarm function.
NQA CLIENT CONFIGURATION COMMANDS 149 data-fill Syntax data-fill string undo data-fill View ICMP-echo/UDP-echo/UDP-jitter test type view Parameter string: String of fill characters of a probe packet, in the range 1 to 200. It is case sensitive. Description Use the data-fill command to configure the string of fill characters of a probe packet. Use the undo data-fill command to restore the default.
CHAPTER 149: NQA CLIENT CONFIGURATION COMMANDS data-size Syntax data-size size undo data-size View ICMP-echo/UDP-echo/UDP-jitter test type view Parameter size: Size of a probe packet in bytes, in the range 20 to 8100 for an ICMP-echo or a UDP-echo test and in the range 68 to 8100 for a UDP-jitter test. Description Use the data-size command to configure the size of a probe packet sent, namely, the size of a packet sent (IP header and ICMP header excluded) in a probe.
destination ip Syntax destination ip ip-address undo destination ip View Parameter Description DLSw/FTP/HTTP/ICMP-echo/SNMP/TCP/UDP-echo/UDP-jitter test type view ip-address: Destination IP address of a test operation. Use the destination ip command to configure a destination IP address for a test operation. Use the undo destination ip command to remove the configured destination IP address. By default, no destination IP address is configured for a test operation.
CHAPTER 149: NQA CLIENT CONFIGURATION COMMANDS system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type udp-echo [Sysname-nqa-admin-test-udp-echo] destination port 9000 display nqa Syntax View Parameter display nqa { result | history } [ admin-name operation-tag ] Any view result: Displays the results of the last test. history: Displays the history records of a test.
Negative SD average: 0 Negative DS average: 0 Negative SD square sum: 0 Negative DS square sum: 0 SD lost packet(s): 0 DS lost packet(s): 0 Lost packet(s) for unknown reason: 10 Table 600 Description on the fields of the display nqa result command Field Description Destination IP address IP address of the destination Send operation times Number of probe packets sent Receive response times Number of response packets received Min/Max/Average round trip time Minimum/maximum/average roundtrip ti
CHAPTER 149: NQA CLIENT CONFIGURATION COMMANDS Table 600 Description on the fields of the display nqa result command Field Description Positive DS square sum Sum of the square of positive jitter delays from the destination to the source Min negative SD Minimum absolute value of negative jitter delays from the source to the destination Min negative DS Minimum absolute value of negative jitter delays from the destination to the source Max negative SD Maximum absolute value of negative jitter d
Table 601 Description on the fields of the display nqa history command Field Description Response Roundtrip delay of a test packet in the case of a successful test, timeout time in the case of timeout, or 0 in the case of a test failure (in milliseconds) Status Status value of test results, including: Time ■ Succeeded ■ Unknown error ■ Internal error ■ Timeout Time when the test is completed filename Syntax filename filename undo filename View Parameter Description FTP test type vi
CHAPTER 149: NQA CLIENT CONFIGURATION COMMANDS Parameter interval: Interval between two consecutive tests, in milliseconds, in the range 0 to 604800000. If the interval is 0, it indicates that only one test is performed. Description Use the frequency command to configure the interval between two consecutive tests for a test group. Use the undo frequency command to restore the default.
[Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] history-records 10 http-version Syntax http-version v1.0 undo http-version View Parameter Description HTTP test type view v1.0: The HTTP version is 1.0 in an HTTP test. Use the http-version command to configure the HTTP version used in an HTTP test. Use the undo http-version command to restore the default. By default, HTTP 1.0 is used in an HTTP test. Example # Configure the HTTP version as 1.0 in an HTTP test.
CHAPTER 149: NQA CLIENT CONFIGURATION COMMANDS nqa Syntax nqa entry admin-name operation-tag undo nqa { all | entry admin-name operation-tag } View Parameter System view admin-name: Specifies the name of the administrator who creates the NQA test operation, a string of 1 to 32 characters, with “-” excluded. It is case-insensitive. operation-tag: Specifies the tag of a test operation, a string of 1 to 32 characters, with “-” excluded. It is case-insensitive. all: All NQA test groups.
Example # Enable the NQA client. system-view [Sysname] nqa agent enable nqa agent max-concurrent Syntax nqa agent max-concurrent number undo nqa agent max-concurrent View Parameter Description System view number: Maximum number of the tests that the NQA client can simultaneously perform, in the range 1 to 50 Use the nqa agent max-concurrent command to configure the maximum number of tests that the NQA client can simultaneously perform.
CHAPTER 149: NQA CLIENT CONFIGURATION COMMANDS Description Use the nqa schedule command to configure the test start time and test period for a test group. Use the undo nqa schedule command to stop the test for the test group. Note that a test group is not allowed to enter test group view or test type view after it is scheduled. Example # Start a test for the test group with the administrator name admin and operation tag test.
Description Use the operation command to configure the HTTP operation type. Use the undo operation command to restore the default. By default, the HTTP operation type is get. Example # Configure the HTTP operation type as post.
CHAPTER 149: NQA CLIENT CONFIGURATION COMMANDS Parameter Description password: Password used to log onto the FTP server, a string of 1 to 32 characters. It is case sensitive. Use the password command to configure a password used to log onto the FTP server. Use the undo password command to remove the configured password. By default, no password is configured for logging onto the FTP server.
Example # Configure the number of probes in an ICMP-echo test as 10. system-view [Sysname] nqa entry admin-test [Sysname-nqa-admin-test] type icmp-echo [Syaname-nqa-admin-test-icmp-echo] probe count 10 probe packet-interval Syntax probe packet-interval packet-interval undo probe packet-interval View UDP-jitter test type view Parameter packet-interval: Interval for consecutive packets sent, in milliseconds, in the range 10 to 1000.
CHAPTER 149: NQA CLIENT CONFIGURATION COMMANDS Example # Configure the number of consecutive packets in a UDP-jitter probe as 100.
Example # Configure the timeout time in a DHCP probe as 10000 milliseconds.
CHAPTER 149: NQA CLIENT CONFIGURATION COMMANDS [Sysname-nqa-admin-test-tcp] reaction 1 checked-element probe-fail threshold-type consecutive 3 action-type trigger-only reaction trap Syntax reaction trap { probe-failure consecutive-probe-failures | test-complete | test-failure cumulate-probe-failures } undo reaction trap { probe-failure | test-complete | test-failure } View Parameter Any NQA test type view probe-failure consecutive-probe-failures: Specifies to send a trap to the network management
Description Use the route-option bypass-route command to enable the routing table bypass function to test the direct connectivity to the direct destination. Use the undo route-option bypass-route command to disable the routing table bypass function. By default, the routing table bypass function is disabled. Note that after this function is enabled, the routing table is not searched, and the packet is directly sent to the destination in a directly connected network.
CHAPTER 149: NQA CLIENT CONFIGURATION COMMANDS system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] source interface ethernet 1/0 source ip Syntax source ip ip-address undo source ip View Parameter Description DLSw/FTP/HTTP/ICMP-echo/SNMP/TCP/UDP-echo/UDP-jitter test type view ip-address: Source IP address of a test operation.
By default, no source port number is specified. Example # Configure the source port number of a probe request as 8000. system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type udp-echo [Sysname-nqa-admin-test-udp-echo] source port 8000 tos Syntax tos value undo tos View DLSw/FTP/HTTP/ICMP-echo/SNMP/TCP/UDP-echo/UDP-jitter test type view Parameter value: Value of the ToS field in the IP header in an NQA probe packet, in the range 0 to 255.
CHAPTER 149: NQA CLIENT CONFIGURATION COMMANDS By default, the maximum number of hops that a probe packet can traverse in a network is 20. Note that after you configure the routeopt bypass-route command, the maximum number of hops a probe packet traverses in the network is 1. Example # Configure the maximum number of hops that a probe request can traverse in a network as 16.
url Syntax url url undo url View Parameter Description HTTP test type view url: Website an HTTP test visits, a string of 1 to 185 characters. It is case sensitive. Use the url command to configure the website an HTTP test visits. Use the undo url command to remove the configured website an HTTP test visits. Note that the character string of the configured URL cannot contain spaces. Example # Configure the website that an HTTP test visits as /index.htm.
CHAPTER 149: NQA CLIENT CONFIGURATION COMMANDS vpn-instance (ICMP-echo test type view) Syntax vpn-instance instance undo vpn-instance View Parameter Description ICMP-echo test type view instance: VPN instance name, a string of 1 to 31 characters. It is case sensitive. Use the vpn-instance command to specify a VPN instance. Use the undo vpn-instance command to remove the specified VPN instance. By default, no VPN instance is specified. Example # Specify the VPN instance vpn1.
150 NQA SERVER CONFIGURATION COMMANDS n You only need to configure the NQA server for UDP-jitter, TCP, and UDP-echo tests. display nqa server status Syntax View Parameter Description Example display nqa server status Any view None Use the display nqa server status command to display NQA server status. # Display NQA server status. display nqa server status nqa server is: enabled tcp-connect: IP Address Port Status 2.2.2.2 2000 active udp-echo: IP Address Port Status 3.3.3.
CHAPTER 150: NQA SERVER CONFIGURATION COMMANDS Table 602 Description on the fields of the display nqa server status command Field Description Status Listening service status: active: Listening service is ready; inactive: Listening service is not ready. nqa server enable Syntax nqa server enable undo nqa server enable View Parameter Description System view None Use the nqa server enable command to enable the NQA server. Use the undo nqa server enable command to disable the NQA server.
Note that: Related command: Example ■ You need to configure the command on the NQA server for TCP tests only. ■ The IP address and port number must be consistent with those on the NQA client and must be different from those for an existing listening service. ■ The IP address must be that of an interface on the NQA server. Otherwise, the configuration will be invalid. nqa server enable. # Create a TCP listening service by using the IP address 169.254.10.2 and port 9000.
CHAPTER 150: NQA SERVER CONFIGURATION COMMANDS system-view [Sysname] nqa server udp-echo 169.254.10.
NETSTREAM CONFIGURATION COMMANDS 151 display ip netstream cache Syntax View Parameter Description Example display ip netstream cache Any view None Use the display ip netstream cache command to view configuration and status information about the NetStream cache. # Display information about the NetStream cache.
CHAPTER 151: NETSTREAM CONFIGURATION COMMANDS Table 603 Description on the fields of the display ip netstream cache command Field Description Inactive stream entry Number of inactive NetStream streams Stream entry been created Number of NetStream cache entries that have been created Last statistics reset time This field is displayed only when the reset ip netstream statistics command; otherwise, the Last statistics reset time never field is displayed.
Table 604 Description on the fields of the display ip netstream export command Field Description Version 5 export information Statistics for exported version 5 statistics packets Stream source interface Source interface of exported UDP packets Stream destination IP(UDP) Destination address and port number of exported UDP packets Exported stream number Number of exported streams Exported UDP datagram number(failed number) Number of exported UDP packets (number of failed sending attempts) Ve
CHAPTER 151: NETSTREAM CONFIGURATION COMMANDS Parameter inbound: Enables NetStream statistics in the inbound direction of an interface. outbound: Enables NetStream statistics in the outbound direction of an interface. Description Use the ip netstream command to enable NetStream statistics in the inbound or outbound direction of the interface. Use the undo ip netstream command to disable Netstream statistics in the inbound or outbound direction of the interface.
Example # Enter NetStream AS aggregation view. system-view [Sysname] ip netstream aggregation as [Sysname-aggregation-as] ip netstream export host Syntax ip netstream export host ip-address udp-port undo ip netstream export host [ ip-address ] View Parameter System view, NetStream aggregation view ip-address: Destination IP address for NetStream UDP packets. udp-port: Destination port number for NetStream UDP packets, in the range 0 to 65535.
CHAPTER 151: NETSTREAM CONFIGURATION COMMANDS View Parameter Description System view, NetStream aggregation view interface-type interface-number: Specifies a source interface for NetStream UDP packets by its type and number. Use the ip netstream export source interface command to configure the source interface for NetStream UDP packets. Use the undo ip netstream export source command to remove the configured source interface.
Example # Set the NetStream statistics packet version number to 5 and the AS option to origin-as. system-view [Sysname] ip netstream export version 5 origin-as ip netstream max-entry Syntax ip netstream max-entry max-entries undo ip netstream max-entry View Parameter Description System view max-entries: NetStream cache size. The value ranges from 1000 to 1000000 and defaults to 10000.
CHAPTER 151: NETSTREAM CONFIGURATION COMMANDS Example # Set the active aging timer to 60 minutes. system-view [Sysname] ip netstream timeout active 60 ip netstream timeout inactive Syntax ip netstream timeout inactive seconds undo ip netstream timeout inactive View Parameter Description System view seconds: Sets the length of the inactive aging timer for NetStream cache entries, in the range 10 to 600 seconds. The default value is 30 seconds.
NTP CONFIGURATION COMMANDS 152 display ntp-service sessions Syntax View Parameter Description Example display ntp-service sessions [ verbose ] Any view verbose: Displays the detailed information of all NTP sessions. Use the display ntp-service sessions command to view the information of all NTP sessions. Without the verbose keyword, this command will display only the brief information of all NTP service sessions. # View the brief information of NTP service sessions.
CHAPTER 152: NTP CONFIGURATION COMMANDS Table 605 Description on the fields of the display ntp-service sessions command Field Description now The length of time in minutes from when the last NTP message was received or when the local clock was last updated to the current time The time is in second by default. If the time length is greater than 2048 seconds, it is displayed in minute; if greater than 300 minutes, in hour; if greater than 96 hours, in day.
Table 606 Description on the fields of the display ntp-service status command Field Description Clock status Status of the system clock Clock stratum Stratum level of the local clock Reference clock ID After the system clock is synchronized to a remote time server or a local reference source, this field indicates the address of the remote time server or the identifier of the local clock source: ■ When the local clock has a stratum level of 1, the value of this field is “LOCL”; ■ When the loc
CHAPTER 152: NTP CONFIGURATION COMMANDS Table 607 Description on the fields of the display ntp-service trace command Field Description server IP address of the NTP server stratum The stratum level of the corresponding system clock offset The clock offset relative to the upper-level clock synch distance The synchronization distance relative to the upper-level clock refid Identifier of the primary reference source.
[Sysname-acl-basic-2001] rule permit source 10.10.0.0 0.0.255.255 [Sysname-acl-basic-2001] quit [Sysname] ntp-service access peer 2001 ntp-service authentication enable Syntax ntp-service authentication enable undo ntp-service authentication enable View Parameter Description System view None Use the ntp-service authentication enable command to enable NTP authentication. Use the undo ntp-service authentication enable command to disable NTP authentication. By default, NTP authentication is disabled.
CHAPTER 152: NTP CONFIGURATION COMMANDS c Example CAUTION: ■ Presently the system supports only the MD5 algorithm for key authentication. ■ You can set a maximum of 1,024 keys for each device. ■ If an NTP authentication key is specified as a trusted key, the key automatically changes to not trusted after you delete the key. In this case, you do not need to execute the undo ntp-service reliable authentication-keyid command.
version number: Specifies the NTP version, where number is in the range of 1 to 3 and defaults to 3. Description Use the ntp-service broadcast-server command to configure the device to work in the NTP broadcast server mode. Use the undo ntp-service broadcast-server command to remove the device as an NTP broadcast server. Example # Configure the device to work in the broadcast server mode and send NTP broadcast messages on Ethernet 1/0, using key 4 for encryption, and set the NTP version to 3.
CHAPTER 152: NTP CONFIGURATION COMMANDS ntp-service max-dynamic-sessions Syntax ntp-service max-dynamic-sessions number undo ntp-service max-dynamic-sessions View Parameter Description System view number: Maximum number of dynamic NTP sessions to be set up, in the range of 0 to 100. Use the ntp-service max-dynamic-sessions command to set the maximum number of dynamic NTP sessions.
ntp-service multicast-server Syntax ntp-service multicast-server [ ip-address ] [ authentication-keyid keyid | ttl ttl-number | version number ] * undo ntp-service multicast-server [ ip-address ] View Parameter Interface view ip-address: Multicast IP address, defaulting to 224.0.1.1. authentication-keyid keyid: Specifies the key ID to be used for sending multicast messages to multicast clients, where keyid is in the range of 1 to 4294967295.
CHAPTER 152: NTP CONFIGURATION COMMANDS Description Use the ntp-service refclock-master command to configure the local clock as a reference source for other devices. Use the undo ntp-service refclock-master command to remove the local clock as a reference source. n Example The stratum level of a clock defines the clock precision. The value range is 1 to 16. The clock precision decreases from stratum 1 to stratum 16.
View Parameter Description System view interface-type interface-number: Specifies an interface by its interface type and interface number. Use the ntp-service source-interface command to specify an interface for sending NTP messages. Use the undo ntp-service source-interface command to remove the configured interface for sending NTP messages.
CHAPTER 152: NTP CONFIGURATION COMMANDS version number: Specifies the NTP version, where number is in the range of 1 to 3 and defaults to 3. Description Use the ntp-service unicast-peer command to designate a symmetric-passive peer for the device. Use the undo ntp-service unicast-peer command to remove the symmetric-passive peer designated for the device. No symmetric-passive peer is designated for the device by default.
authentication-keyid keyid: Specifies the key ID to be used for sending NTP messages to the NTP server, where keyid is in the range of 1 to 4294967295. priority: Specifies this NTP server as the first choice under the same condition. source-interface interface-type interface-number: Specifies an interface for sending NTP messages. In an NTP message the local device sends to the NTP server, the source IP address is the primary IP address of this interface.
CHAPTER 152: NTP CONFIGURATION COMMANDS
RMON CONFIGURATION COMMANDS 153 display rmon alarm Syntax View Parameter Description Related command: Example display rmon alarm [ entry-number ] Any view entry-number: Index of an RMON alarm entry, in the range 1 to 65535. If no entry is specified, the configuration of all alarm entries is displayed. Use the display rmon alarm command to display the configuration of the specified or all RMON alarm entries. rmon alarm. # Display the configuration of all RMON alarm table entries.
CHAPTER 153: RMON CONFIGURATION COMMANDS Table 608 Description on the fields of the display rmon alarm command Field Description When startup enables How can an alarm be triggered Latest value The last sampled value display rmon event Syntax View Parameter Description display rmon event [ entry-number ] Any view entry-number: Index of an RMON event entry, in the range 1 to 65535. If no entry is specified, the configuration of all event entries is displayed.
display rmon eventlog Syntax View Parameter Description display rmon eventlog [ entry-number ] Any view entry-number: Index of an event entry, in the range 1 to 65535. If no entry number is specified, the log information for all event entries is displayed. Use the display rmon eventlog command to display log information for the specified or all event entries.
CHAPTER 153: RMON CONFIGURATION COMMANDS Description Related command: Example Use the display rmon history command to display RMON history control entry and last history sampling information, including bandwidth utilization, number of bad packets, and total packet number. rmon history. # Display RMON history entry information for interface Ethernet 1/0. display rmon history ethernet 1/0 History control entry 1 owned by user1 is VALID Samples interface : Ethernet1/0
Table 611 Description on the fields of the display rmon history command Field Description utilization Bandwidth utilization during the sampling period display rmon prialarm Syntax View display rmon prialarm [ entry-number ] Any view Parameter entry-number: Private alarm entry index, in the range 1 to 65535. If no entry is specified, the configuration of all private alarm entries is displayed.
CHAPTER 153: RMON CONFIGURATION COMMANDS Table 612 Description on the fields of the display rmon prialarm command Field Description When startup enables How can an alarm be triggered This entry will exist The lifetime of the entry, which can be forever or span the specified period Latest value The last sampled value display rmon statistics Syntax View Parameter Description Related command: Example display rmon statistics [ interface-type interface-number ] Any view interface-type interface-n
Table 613 Description on the fields of the display rmon statistics command Field Description etherStatsMulticastPkts The number of multicast packets received by the interface during the statistical period etherStatsUndersizePkts The number of undersize packets received by the interface during the statistical period etherStatsOversizePkts The number of oversize packets received by the interface during the statistical period etherStatsFragments The number of undersize packets with CRC errors re
CHAPTER 153: RMON CONFIGURATION COMMANDS falling-threshold threshold-value2 event-entry2: Sets the falling threshold, where threshold-value2 represents the falling threshold, in the range -2147483648 to +2147483647 and event-entry2 represents the index of the event triggered when the falling threshold is reached. It ranges from 0 to 65535, with 0 meaning no corresponding event is triggered and no event action is taken when an alarm is triggered.
# Remove the alarm table entry with the index of 15. system-view [Sysname] undo rmon alarm 15 rmon event Syntax rmon event entry-number [ description string ] { log | log-trap log-trapcommunity | none | trap trap-community } [ owner text ] undo rmon event entry-number View Parameter System view entry-number: Event entry index, in the range 1 to 65,535. description string: Event description, a string of 1 to 127 characters. log: Logs the event when it occurs.
CHAPTER 153: RMON CONFIGURATION COMMANDS Example # Create event 10 in the RMON event table. system-view [Sysname] rmon event 10 log owner user1 rmon history Syntax rmon history entry-number buckets number interval sampling-interval [ owner text] undo rmon history entry-number View Parameter Ethernet interface view entry-number: History control entry index, in the range 1 to 65535. buckets number: History table size for the entry, in the range 1 to 65,535.
system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] undo rmon history 15 rmon prialarm Syntax rmon prialarm entry-number prialarm-formula prialarm-des sampling-interval { absolute | changeratio | delta } rising-threshold threshold-value1 event-entry1 falling-threshold threshold-value2 event-entry2 entrytype { forever | cycle cycle-period } [ owner text ] undo rmon prialarm entry-number View Parameter System view entry-number: Index of a private alarm entry, in the range 1
CHAPTER 153: RMON CONFIGURATION COMMANDS Description Use the rmon prialarm command to create an entry in the private alarm table of RMON. Use the undo rmon prialarm command to remove a private alarm entry from the private alarm table of RMON. The following is how the system handles private alarm entries: 1 Samples the private alarm variables in the private alarm formula at the specified sampling interval. 2 Performs calculation on the sampled values with the formula.
rmon statistics Syntax rmon statistics entry-number [ owner text ] undo rmon statistics entry-number View Parameter Ethernet interface view entry-number: Index of statistics entry, in the range 1 to 65535. owner text: Owner of the entry, a string of 1 to 127 characters. It is case sensitive and space is supported. Description Use the rmon statistics command to create an entry in the RMON statistics table.
CHAPTER 153: RMON CONFIGURATION COMMANDS
SNMP CONFIGURATION COMMANDS 154 display snmp-agent local-switch fabricid Syntax View Parameter Description display snmp-agent local-switch fabricid Any view None Use the display snmp-agent local-switch fabricid command to display the local SNMP agent switch fabric ID. SNMP switch fabric ID identifies an SNMP entity uniquely within an SNMP domain. SNMP switch fabric is an indispensable part of an SNMP entity. It provides the SNMP message allocation, message handling, authentication, and access control.
CHAPTER 154: SNMP CONFIGURATION COMMANDS Community name: bb Group name: bb Storage-type: nonVolatile Table 614 Descriptions on the fields of display snmp-agent community Field Description Community name Community name Group name SNMP group name Acl The number of the ACL in use Storage-type Storage type, which could be: ■ volatile: Information will be lost if the system is rebooted ■ nonVolatile: Information will not be lost if the system is rebooted ■ permanent: Modification permitted,
Table 615 Descriptions on the fields of the display snmp-agent group command Field Description Notifyview The notify MIB view associated with the SNMP group, the view with entries that can generate Trap messages Storage-type Storage type, which includes: volatile, nonVolatile, permanent, readOnly, and other. For detailed information, refer to Table 614.
CHAPTER 154: SNMP CONFIGURATION COMMANDS View Type:excluded View status:active Table 616 Descriptions on the fields of the display snmp-agent mib-view command Field Description View name MIB view name MIB Subtree MIB subtree corresponding to the MIB view Subtree mask MIB subtree mask Storage-type Storage type View Type View type, which can be “included” or “excluded” Included indicates that all nodes of the MIB tree are included in current view.
Table 617 Descriptions on the fields of the display snmp-agent statistics command Field Description Messages which were for an unsupported version Number of packets from a device with an SNMP version that is not supported by the current SNMP agent Messages which used a SNMP community name not known Number of packets that use an unknown community name Messages which represented an illegal operation for the community supplied Number of packets with operations that breach the access right of a commu
CHAPTER 154: SNMP CONFIGURATION COMMANDS Description Use the display snmp-agent sys-info command to display the current SNMP system information. If no keyword is specified, all SNMP agent system information will be displayed. Example # Display the current SNMP agent system information. display snmp-agent sys-info The contact person for this managed node: Hangzhou H3C Technology Co., Ltd.
In the above output, enable indicates that the module is enabled with the Trap sending whereas disable indicates the Trap sending is disabled. By default, Trap sending is enabled on all modules that can send Trap messages. Use the snmp-agent trap enable command to manually configure whether the Trap sending is enabled or not.
CHAPTER 154: SNMP CONFIGURATION COMMANDS Parameter Description None Use the enable snmp trap updown command to enable the sending of Trap messages for interface state change (linkup/linkdown Trap messages). Use the undo enable snmp trap updown command to disable the sending of linkup/linkdown SNMP Trap messages on an interface. By default, the sending of linkup/linkdown SNMP Trap messages is enabled.
snmp-agent community Syntax snmp-agent community { read | write } community-name [ acl acl-number | mib-view view-name ] * undo snmp-agent community community-name View Parameter System view read: Indicates that the community has read only access right to the MIB objects, that is, the community can only inquire MIB information. write: Indicates that the community has read and write access right to the MIB objects, that is, the community can configure MIB information.
CHAPTER 154: SNMP CONFIGURATION COMMANDS snmp-agent group Syntax The following syntax applies to SNMPv1 and SNMP v2c: snmp-agent group { v1 | v2c } group-name [ read-view read-view ] [ write-view write-view ] [ notify-view notify-view ] [ acl acl-number ] undo snmp-agent group { v1 | v2c } group-name The following syntax applies to SNMPv3: snmp-agent group v3 group-name [ authentication | privacy ] [ read-view read-view ] [ write-view write-view ] [ notify-view notify-view ] [ acl acl-number ] undo
Example # Create an SNMP group group1 on an SNMPv3 enabled device, no authentication, no privacy. system-view [Sysname] snmp-agent group v3 group1 snmp-agent local-switch fabricid Syntax snmp-agent local-switch fabricid switch fabricid undo snmp-agent local-switch fabricid View Parameter Description System view switch fabricid: Engine ID, an even number of hexadecimal characters, in the range 10 to 64.
CHAPTER 154: SNMP CONFIGURATION COMMANDS set-operation: Enables logging of SNMP SET operation. Description Use the snmp-agent log command to enable SNMP logging. Use the undo snmp-agent log command to restore the default. By default, SNMP logging is disabled. If a specified SNMP logging is enabled, when NMS performs a specified operation to SNMP Agent, the latter records the operation-related information and saves it to the information center. Example # Enable logging of SNMP GET operation.
You can use the display snmp-agent mib-view command to view the access right of the default view. Also, you can use the undo snmp-agent mib-view command to remove the default view, after that, however, you cannot read or write all MIB nodes on Agent. Related command: Example snmp-agent group. # Create a MIB view mibtest, which includes all objects of the subtree mib2. system-view [Sysname] snmp-agent mib-view included mibtest 1.3.6.
CHAPTER 154: SNMP CONFIGURATION COMMANDS version: The SNMP version in use. Description ■ all: Specifies SNMPv1, SNMPv2c, and SNMPv3. ■ v1: SNMPv1. ■ v2c: SNMPv2c. ■ v3: SNMPv3. Use the snmp-agent sys-info command to configure system information, including the contact information, the location, and the SNMP version in use. Use the undo snmp-agent sys-info contact command and the undo snmp-agent sys-info location command to restore the default.
ipv6 ipv6-address: Specifies the IPv6 address of the Trap host that receives Trap messages. vpn-instance vpn-instance-name: Specifies the VPN where the host receiving Traps resides, where vpn-instance-name indicates the VPN instance name and is a string of 1 to 31 characters. It is case sensitive and is applicable only in a network supporting IPv4. udp-port port-number: Specifies the number of the port that receives Trap messages.
CHAPTER 154: SNMP CONFIGURATION COMMANDS snmp-agent trap enable Syntax snmp-agent trap enable [ bgp | configuration | flash | fr | isdn | mpls | ospf [ process-id ] [ ospf-trap-list ] | standard [ authentication | coldstart | linkdown | linkup | warmstart ]* | system | voice | vrrp [ authfailure | newmaster ] ] undo snmp-agent trap enable [ bgp | configuration | flash | fr | mpls | ospf [ process-id ] [ ospf-trap-list ] | standard [ authentication | coldstart | linkdown | linkup | warmstart ]* | sys
Description Use the snmp-agent trap enable command to enable the device to send Trap messages globally. Use the undo snmp-agent trap enable command to disable the device from sending Trap messages. By default, the device is enabled to send all types of Trap messages. Note that: To enable an interface to send SNMP Trap packets when its state changes, you need to enable the Link up/down Trap packet transmission function on an interface and globally.
CHAPTER 154: SNMP CONFIGURATION COMMANDS system-view [Sysname] snmp-agent trap if-mib link extended snmp-agent trap life Syntax snmp-agent trap life seconds undo snmp-agent trap life View Parameter Description System view seconds: Time-out time, in the range 1 to 2,592,000 seconds. Use the snmp-agent trap life command to configure the life time for Traps, which will be discarded when their life time expires.
Example # Configure the size of the Trap queue to 200. system-view [Sysname] snmp-agent trap queue-size 200 snmp-agent trap source Syntax snmp-agent trap source interface-type { interface-number | interface-number.subnumber } undo snmp-agent trap source View Parameter Description System view interface-type { interface-number | interface-number.subnumber }: Specifies the interface type and interface number. The parameter interface-number represents the main interface number.
CHAPTER 154: SNMP CONFIGURATION COMMANDS The following syntax applies to SNMPv3: snmp-agent usm-user v3 user-name group-name [ authentication-mode { md5 | sha } auth-password [ privacy-mode { aes128 | des56 } priv-password ] ] [ acl acl-number ] undo snmp-agent usm-user v3 user-name group-name { local | switch fabricid switch fabricid-string } View System view Parameter v1: SNMPv1. v2c: SNMPv2c. v3: SNMPv3. user-name: User name, a string of 1 to 32 characters. It is case sensitive.
For SNMPv1 and SNMPv2c, this command means adding of a new SNMP group. For SNMPv3, this command adds a new user to an SNMP group. Related command: Example snmp-agent group, snmp-agent community, snmp-agent local-switch fabricid. # Add a user John to the SNMP group Johngroup. Configure the security model to be authentication, the authentication protocol to be HMAC-MD5-96, and the authentication password to be hello.
CHAPTER 154: SNMP CONFIGURATION COMMANDS
FILE SYSTEM CONFIGURATION COMMANDS 155 n ■ A file name cannot be longer than 64 characters (including drive letter and a string terminator. If the drive letter is “CF: /”, the file name can be at most [ 64-1-4 ] = 59 characters in length; or, errors will occur in file operation. Typically, the file name is recommended to be not more than 16 characters. ■ A file name cannot contain ASCII characters (ASCII>=128) or invisible characters (ASCII<33).
CHAPTER 155: FILE SYSTEM CONFIGURATION COMMANDS Parameter fileurl-source: Name of the source file. fileurl-dest: Name of the target file. Description Example Use the copy command to copy a file. # Copy file testcfg.cfg and save it as tt.cfg. copy testcfg.cfg tt.cfg Copy cf:/config.cfg to cf:/tt.cfg?[Y/N]:y %Copy file cf:/testcfg.cfg to cf:/tt.cfg...Done.
Parameter /all: Displays all files (including those in the recycle bin). file-url: Name of the file or directory to be displayed. Asterisks (*) are acceptable as wildcards. For example, to display files with the .txt extension under the current directory, you may use the dir *.txt command. Description Use the dir command to display information about all visible files and folders in the current directory.
CHAPTER 155: FILE SYSTEM CONFIGURATION COMMANDS A batch file does not support hot backup. Each configuration command in a batch file must be a standard configuration command, meaning the valid configuration information which can be displayed with the display current-configuration command after this command is configured successfully; otherwise, this command may not be executed correctly. Example # Execute the batch file test.bat in the root directory. system-view [Sysname] execute test.
fixdisk cf: %Fixdisk cf: completed. format Syntax View Parameter Description c Example format device User view device: Storage device name. Use the format command to format a storage device. CAUTION: Formatting a device results in loss of all the files and these files cannot be restored. In particular, if there is startup configuration file on a CF card, formatting the storage device results in loss of the startup configuration file. # Format the CF card.
CHAPTER 155: FILE SYSTEM CONFIGURATION COMMANDS mkdir test/mytest %Created dir cf:/test/mytest more Syntax View Parameter Description more file-url User view file-url: File name. Use the more command to display the contents of the specified file. So far, this command is valid only for .txt files. Example # Display the contents of file test.txt. more test.txt AppWizard has created this test application for you.
Description Use the mount command to mount a hot swappable storage device, such as a CF card, a USB device, etc (excluding Flash). This command is effective only when the device is in unmounted state. By default, a storage device is in the mounted state, that is, you can use it without mounting it. Note that: Related command: n Example ■ Do not remove the storage device or swap the board when mounting or unmounting the device, or when you are processing files on the storage device.
CHAPTER 155: FILE SYSTEM CONFIGURATION COMMANDS Example # Move the file cf:/test/sample.txt to cf:/sample.txt. move cf:/test/sample.txt cf:/sample.txt Move cf:/test/sample.txt to cf:/sample.txt ?[Y/N]:y % Moved file cf:/test/sample.txt to cf:/sample.txt pwd Syntax View Parameter Description pwd User view None Use the pwd command to display the current path. If the current path is not set, the operation will fail. Example # Display the current path.
Parameter Description /force: Empties the recycle bin. Use the reset recycle-bin command to permanently remove deleted file or files from the recycle bin. Unlike this command, the delete file-url command only moves files to the recycle bin. Example # Empty the recycle bin. reset recycle-bin Clear cf:/tt.cfg ?[Y/N]:y Clearing files from cf may take a long time. Please wait... . %Cleared file cf:/~/tt.cfg.
CHAPTER 155: FILE SYSTEM CONFIGURATION COMMANDS By default, a storage device is in the mounted state, that is, you can use it without mounting it. Note that: Related command: Example ■ Do not remove the storage device or swap the board when mounting or unmounting the device, or when you are processing files on the storage device. Otherwise, the file system could be damaged.
156 CONFIGURATION FILE MANAGEMENT COMMANDS backup startup-configuration Syntax View Parameter backup startup-configuration to dest-addr [dest-filename ] User view dest-addr: IP address or name of a TFTP server. The address cannot be an IPv6 address. dest-filename: Target filename used to save the next startup configuration file on the server. Description Use the backup startup-configuration command to backup the startup configuration file (for next startup) using a filename you specify.
CHAPTER 156: CONFIGURATION FILE MANAGEMENT COMMANDS Parameter Description by-linenum: Identifies each line of displayed information with a line number. Use the display saved-configuration command to display the initial configuration file saved in the storage device. In case the device malfunctions after being powered on, if you find some configurations are not validated or incorrect, you may use this command to identify the problem.
display startup Syntax View Parameter Description Related command: Example display startup Any view None Use the display startup command to display the configuration file used at this startup and the one used for next startup. startup saved-configuration. # Display the configuration file used at this startup and the one used for next startup (main/backup attribute not supported). display startup Current startup saved-configuration file: Next startup saved-configuration file: cf:/testcfg.
CHAPTER 156: CONFIGURATION FILE MANAGEMENT COMMANDS has both the main and backup attributes, the command erases its backup attribute. c Related command: Example CAUTION: This command will permanently delete the configuration file on the device. Use it with caution. save, display saved-configuration. # Erase the configuration file saved in the storage device. (main/backup attribute not supported) reset saved-configuration The saved configuration will be erased.
existing file or not. In addition, both the main board and the backup board are assumed to use the storage device of the same type when checking filename or downloading the configuration file (both to the root directory of the main board or backup board); otherwise, the restoration fails. Example # Download the configuration file config.cfg for the next startup from the TFTP server whose IP address is .2.2.2.2. restore startup-configuration from 2.2.2.2 config.
CHAPTER 156: CONFIGURATION FILE MANAGEMENT COMMANDS ■ Related command: Example The reset saved-configuration backup command erases the configuration file which has the backup attribute only; while for the configuration file which has both the main and backup attributes, the command erases its backup attribute. reset saved-configuration, display current-configuration on page 2412, display saved-configuration.
Description Use the startup saved-configuration command to specify a configuration file for next startup. Use the undo startup saved-configuration command to start up with an empty configuration, which means startup with the initial configuration of the system. If the configuration file has main/backup attribute, this command erases the attribute but does not delete the file. The specified file must be ended with a .cfg extension and saved in the root directory of the storage device.
CHAPTER 156: CONFIGURATION FILE MANAGEMENT COMMANDS
157 FTP SERVER CONFIGURATION COMMANDS display ftp-server Syntax View Parameter Description display ftp-server Any view None Use the display ftp-server command to display the FTP server configuration of the device. After configuring FTP parameters, you may verify them with this command. Related command: Example ftp timeout and ftp update. # Display the FTP server configuration.
CHAPTER 157: FTP SERVER CONFIGURATION COMMANDS Description Example Use the display ftp-user command to display the detailed information of current FTP users. # Display the detailed information of FTP users. display ftp-user UserName HostIP aaaa 5.5.5.
Use the undo ftp server command to disable the FTP server. By default, the FTP server is disabled to prevent attacks. Example # Disable the FTP server. system-view [Sysname] undo ftp server % Close FTP server ftp timeout Syntax ftp timeout minute undo ftp timeout View Parameter Description System view minute: Idle-timeout timer in minutes, in the range 1 to 35791. The default is 30 minutes. Use the ftp timeout command to set the idle-timeout timer.
CHAPTER 157: FTP SERVER CONFIGURATION COMMANDS Use the undo ftp update command to restore the default, namely, the normal mode. Example # Set the FTP update mode to normal.
158 FTP CLIENT CONFIGURATION COMMANDS n ■ ■ You must use the ftp command to enter FTP client view for configurations under this view. For details, refer to “ftp” on page 2378. The prompt information in the examples of this section varies with devices. ascii Syntax View Parameter Description ascii FTP client view None Use the ascii command to set the file transfer mode to ASCII for the FTP connection. FTP provides two file transfer modes: ASCII and binary.
CHAPTER 158: FTP CLIENT CONFIGURATION COMMANDS FTP usprovides two file transfer modes: ASCII and binary. To transfer text files, use the ASCII mode; to transfer program files, use the binary mode. By default, the transfer mode is ASCII mode. Example # Set the file transfer mode to binary. [ftp] binary 200 Type set to I. bye Syntax View Parameter Description Example bye FTP client view None Use the bye command to disconnect from the remote FTP server and exit to user view.
View Parameter Description Example FTP client view None Use the cdup command to exit the current directory and enter the upper directory of the FTP server. # Change the current working directory path to the upper directory. [ftp] cdup 200 CDUP command successful. close Syntax View Parameter Description close FTP client view None Use the close command to terminate the connection to the FTP server, but remain in FTP client view. This command is equal to the disconnect command.
CHAPTER 158: FTP CLIENT CONFIGURATION COMMANDS Examples # The device serves as the FTP client. Enable FTP client debugging and use the active mode to download file sample.file from the current directory of the FTP server. terminal monitor terminal debugging ftp 192.168.1.46 Trying 192.168.1.46 ... Press CTRL+K to abort Connected to 192.168.1.46. 220 FTP service ready. User(192.168.1.46:(none)):ftp 331 Password required for ftp. Password: 230 User logged in.
Description Use the delete command to delete a specified file on the remote FTP server. To do this, you must be a user with the delete permission on the FTP server. Example # Delete file temp.c. [ftp] delete temp.c 250 DELE command successful. dir Syntax View Parameter dir [ remotefile [ localfile ] ] FTP client view remotefile: Name of the file or directory on the remote FTP server. localfile: Name of the local file to save the displayed information.
CHAPTER 158: FTP CLIENT CONFIGURATION COMMANDS View Parameter Description FTP client view None Use the disconnect command to disconnect from the remote FTP server but remain in FTP client view. This command is equal to the close command. Example # Disconnect from the remote FTP server but remain in FTP client view. [ftp] disconnect 221 Server closing.
interface interface-type interface-number: Specifies the source interface by its type and number. The primary IP address configured on this interface is the source address of the transmitted packets. If no primary IP address is configured on the source interface, the connection fails. ip source-ip-address: The source IP address of the current FTP client. This source address must be the one that has been configured on the device.
CHAPTER 158: FTP CLIENT CONFIGURATION COMMANDS FTP. If no primary IP address is configured on the source interface, the connection fails. ip source-ip-address: Source IP address of the FTP connection. It must be an IP address configured on the device. Description Use the ftp client source command to configure the source address of the transmitted FTP packets from the FTP client. Use the undo telnet client source command to restore the default.
source ipv6 source-ipv6-address: Specifies a source IPv6 address for transmitted FTP packets. This address must be an IPv6 address that has been configured on the device. -i interface-type interface-number: Specifies the type and number of the egress interface.
CHAPTER 158: FTP CLIENT CONFIGURATION COMMANDS 227 Entering Passive Mode (192,168,1,50,17,163). 125 ASCII mode data connection already open, transfer starting for testcfg.cfg. .....226 Transfer complete. FTP: 5190 byte(s) received in 7.754 second(s), 669.00 byte(s)/sec. lcd Syntax View Parameter Description Example lcd FTP client view None Use the lcd command to display the local directory of the FTP client. # Display the local directory.
logfile mainar.bin arbasicbtm.bin ftp test bb.cfg testcfg.cfg 226 Transfer complete. FTP: 87 byte(s) received in 0.132 second(s) 659.00 byte(s)/sec. # View the information of directory logfile, and save the result to file aa.txt. [ftp] ls logfile aa.txt 227 Entering Passive Mode (192,168,1,50,17,166). 125 ASCII mode data connection already open, transfer starting for logfile. .....226 Transfer complete. FTP: 9 byte(s) received in 0.094 second(s) 95.00 byte(s)/sec. # View the content of file aa.
CHAPTER 158: FTP CLIENT CONFIGURATION COMMANDS Description Use the open command to log onto the IPv4 FTP server under FTP client view. At login, you will be asked to enter the username and password for accessing the FTP server. If your input is correct, the login succeeds; otherwise, it fails. Related command: Example close # In FTP client view, log onto the FTP server with the IP address of 192.168.1.50.. ftp [ftp] open 192.168.1.50 Trying 192.168.1.50 ...
Connected to 3000::200. 220 Welcome! User(3000::200:(none)): MY_NAME 331 Please specify the password. Password: 230 Login successful. passive Syntax passive undo passive View Parameter Description FTP client view None Use the passive command to set the data transmission mode to passive. Use the undo passive command to set the data transmission mode to active. The default transmission mode is passive. Example # Set the data transmission mode to passive.
CHAPTER 158: FTP CLIENT CONFIGURATION COMMANDS pwd Syntax View Parameter Description Example pwd FTP client view None Use the pwd command to display the working directory on the remote FTP server. # Display the working directory on the remote FTP server. [ftp] pwd 257 "cf:/temp" is current directory. quit Syntax View Parameter Description Example quit FTP client view None Use the quit command to disconnect from the remote FTP server and exit to user view.
[ftp] remotehelp 214-Here is a list of available ftp commands Those with ’*’ are not yet implemented. USER PASS ACCT* CWD CDUP SMNT* PORT PASV TYPE STRU* MODE* RETR APPE* ALLO* REST* RNFR* RNTO* ABOR* MKD PWD LIST NLST SITE* SYST NOOP* XCUP XCWD XMKD XPWD XRMD 214 Direct comments to H3C company. QUIT STOR DELE STAT* REIN* STOU* RMD HELP # Display the help information for the user command. [ftp] remotehelp user 214 Syntax: USER .
CHAPTER 158: FTP CLIENT CONFIGURATION COMMANDS Table 621 Description on the fields of the remotehelp command Field Description NLST List file description SITE* Orient a parameter SYST Display system parameters STAT* State HELP Help NOOP* No operation XCUP Extension command, the same meaning as CUP XCWD Extension command, the same meaning as CWD XMKD Extension command, the same meaning as MKD XPWD Extension command, the same meaning as PWD XRMD Extension command, the same meanin
Parameter username: Other login username. password: Login password. Description Use the user command to relog onto the currently accessing FTP server with other username after you have logged onto the FTP server. Before using this command, you must configure the corresponding username and password on the FTP server; otherwise, you login fails and the FTP connection is closed. Example # User ftp1 has logged onto the FTP server and relogs onto the current FTP server with the username of ftp2.
CHAPTER 158: FTP CLIENT CONFIGURATION COMMANDS
159 TFTP CLIENT CONFIGURATION COMMANDS display tftp client configuration Syntax View Parameter Description Related command: Example display tftp client configuration Any view None Use the display tftp client configuration command to display the configuration information of the TFTP client. tftp client source. # Display the current configuration information of the TFTP client. display tftp client configuration The source IP address is 192.168.0.
CHAPTER 159: TFTP CLIENT CONFIGURATION COMMANDS Description Use the tftp-server acl command to reference an ACL to control access to the TFTP server. Users can use the configured rules in ACL to allow or prevent the use of TFTP server in a network. Use the undo tftp-server acl command to remove the access restriction. For more information about ACL, refer to “IPv4 ACL Configuration Commands” on page 2087 and “IPv6 ACL Configuration Commands” on page 2103.
Description Use the tftp command to upload files from the local device to a TFTP server or download files from the TFTP server to the local device. ■ If no destination file name is specified, the saved file uses the source file name. ■ The priority of the source address specified with this command is higher than that with the tftp client source command. If you use the tftp client source command to specify the source address first and then with the tftp command, the latter one is adopted.
CHAPTER 159: TFTP CLIENT CONFIGURATION COMMANDS Use the undo telnet client source command to restore the default. By default, a device uses the IP address of the interface determined by the routing protocol as the source IP address to communicate with a TFTP server.
destination-filename: Destination filename. If not specified, this filename is the same as the source filename. Description Use the tftp ipv6 command to download a specified file from a TFTP server or upload a specified local file to a TFTP server. This command applies to IPv6 network. Example # Download filetoget.txt from TFTP server. tftp ipv6 fe80::250:daff:fe91:e058 -i ethernet 1/0 get fil etoget.
CHAPTER 159: TFTP CLIENT CONFIGURATION COMMANDS
SYSTEM MAINTAINING COMMANDS 160 ping Syntax View Parameter ping [ ip ] [ -a source-ip | -c count | -f | -h ttl | -i interface-type interface-number | -m interval | -n | -p pad | -q | -r | -s packet-size | -t timeout | -tos tos | -v | -vpn-instance vpn-instance-name ] * remote-system Any view ip: Supports IPv4 protocol. -a source-ip: Specifies the source IP address of an ICMP echo request. It must be a legal IP address configured on the device.
CHAPTER 160: SYSTEM MAINTAINING COMMANDS -q: Presence of this parameter indicates that only statistics are displayed. By default, all information is displayed. -r: Records routes. By default, routes are not recorded. -s packet-size: Specifies length (in bytes) of an ICMP echo request, in the range 20 to 8100. The default value is 56. -t timeout: Specifies the timeout value (in milliseconds) of an ICMP echo request, in the range 0 to 65535. It defaults to 2000.
View Parameter Any view -a source-ipv6: Specifies the source IPv6 address of an ICMP echo request. It must be a legal IPv6 address configured on the device. -c count: Specifies the number of times that an ICMPv6 echo request is sent, in the range 1 to 4294967295. The default value is 5. -m interval: Specifies the interval (in milliseconds) to send an ICMPv6 echo reply, in the range 1 to 65535. The default value is 200 ms.
CHAPTER 160: SYSTEM MAINTAINING COMMANDS The “hop limit” field in this prompt information has the same meaning as the “ttl” field in the prompt information displayed by the IPv4 ping command, indicating the TTL value in the ICMPv6 echo request. tracert Syntax View Parameter tracert [ -a source-ip | -f first-ttl | -m max-ttl | -p port | -q packet-number | -vpn-instance vpn-instance-name | -w timeout ] * remote-system Any view -a source-ip: Specifies the source IP address of a tracert packet.
press CTRL_C to break 1 128.3.112.1 10 ms 10 ms 10 ms 2 128.32.210.1 19 ms 19 ms 19 ms 3 128.32.216.1 39 ms 19 ms 19 ms 4 128.32.136.23 19 ms 39 ms 39 ms 5 128.32.168.22 20 ms 39 ms 39 ms 6 128.32.197.4 59 ms 119 ms 39 ms 7 131.119.2.5 59 ms 59 ms 39 ms 8 129.140.70.13 80 ms 79 ms 99 ms 9 129.140.71.6 139 ms 139 ms 159 ms 10 129.140.81.7 199 ms 180 ms 300 ms 11 129.140.72.17 300 ms 239 ms 239 ms 12 * * * 13 128.121.54.72 259 ms 499 ms 279 ms 14 * * * 15 * * * 16 * * * 17 * * * 18 18.26.0.
CHAPTER 160: SYSTEM MAINTAINING COMMANDS tracert ipv6 3002::1 traceroute to 3002::1 30 hops max,60 bytes packet 1 3003::1 30 ms 10 ms 10 ms 2 3002::1 10 ms 11 ms 9 ms
161 SYSTEM DEBUGGING COMMANDS debugging Syntax debugging { all [ timeout time ] | module-name [ option ] } undo debugging { all | module-name [ option ] } View Parameter User view all: All debugging functions. timeout time: Specifies the timeout time for the debugging all command. When all debugging is enabled, the system automatically executes the undo debugging all command after the time. The value ranges from 1 to 1440, in minutes. module-name: Module name, such as ARP or ATM.
CHAPTER 161: SYSTEM DEBUGGING COMMANDS terminal. For the detailed description on the terminal debugging and terminal monitor commands, refer to “terminal debugging” on page 2445 and “terminal monitor” on page 2447. Related command: Example display debugging. # Enable IP packet debugging.
BASIC CONFIGURATION COMMANDS 162 clock datetime Syntax View Parameter clock datetime time date User view time: Current time in the format of HH:MM:SS, where HH is hours in the range 0 to 23, MM is minutes in the range 0 to 59, and SS is seconds in the range 0 to 59. The zeros in the argument can be omitted except for indicating 0 hours. date: Current date in the format of MM/DD/YYYY or YYYY/MM/DD.
CHAPTER 162: BASIC CONFIGURATION COMMANDS View Parameter User view zone-name: Name of the summer time, a string of 1 to 32 characters. It is case sensitive. start-time: Start time, in the format of HH:MM:SS (hours/minutes/seconds). The zeros in the argument can be omitted except for indicating 0 hours. start-date: Start date, in the format of MM/DD/YYYY (months/days/years) or YYYY/MM/DD. end-time: End time, in the format of HH:MM:SS (hours/minutes/seconds).
clock summer-time repeating Syntax clock summer-time zone-name repeating start-time start-date end-time end-date add-time undo clock summer-time View Parameter User view zone-name: Name of the daylight saving time, a string of 1 to 32 characters. start-time: Start time, in the format of HH:MM:SS (hours/minutes/seconds). The zeros in the argument can be omitted except for indicating 0 hours.
CHAPTER 162: BASIC CONFIGURATION COMMANDS specifies to adopt daylight saving time from 00:00:00 of June 6 until 00:00:00 of October 1 each year from 2007 (2007 inclusive). The daylight saving time adds one hour to the current device time. After the configuration takes effect, use the display clock command to view the result. The information such as log file and debug adopts the local time modified by time-zone and daylight saving time.
After the configuration takes effect, use the display clock command to view the result. The information such as log file and debug adopts the local time modified by time-zone and daylight saving time. Related command: Example clock datetime, clock summer-time one-off, clock summer-time repeating, display clock. # Set the name of the local time zone to Z5, five hours ahead of UTC time.
CHAPTER 162: BASIC CONFIGURATION COMMANDS Table 622 Default level of the commands Example Command level Commands Manage (3) FTP, XMODEM, TFTP, file system operation commands # Set the command level of the interface command to 0. system-view [Sysname] command-privilege level 0 view system interface configure-user count Syntax configure-user count number undo configure-user count View Parameter Description System view number: Number of users, the value range varies with devices.
Description Use the display clipboard command to view the contents of the clipboard. To copy the specified content to the clipboard: Example ■ Move the cursor to the starting position of the content and press the combination (“,” is an English comma). ■ Move the cursor to the ending position of the content and press the combination (“,” is an English dot) to copy the specified content to the clipboard. # View the content of the clipboard.
CHAPTER 162: BASIC CONFIGURATION COMMANDS Related command: Example configure-user count. # Display the users entering system view at the same time. display configure-user Idx UI Delay Type Userlevel + 178 VTY 0 01:10:16 TEL 3 + 179 VTY 1 00:00:00 TEL 3 Following are more details. VTY 0 : Location: 192.168.1.59 VTY 1 : Location: 192.168.1.54 + : User-interface is active. F : User-interface is active and work in async mode.
text: Regular expression in a case-insensitive string with space allowed. Table 623 Special characters in regular expression Description Character Meaning Note ^ Starting sign, the string following it appears only at the beginning of a line. Regular expression “^user” matches a string begins with “user”, not “Auser”. $ Ending sign, the string before it appears only at the end of a line. Regular expression “user$” matches a string ends with “user”, not “userA”.
CHAPTER 162: BASIC CONFIGURATION COMMANDS controller # controller pri-set # controller pri-set # controller using e1 # return E1 6/0 E1 6/1 E1 6/2 E1 6/3 # Display the configuration beginning with “user”.
display history-command Syntax View Parameter Description display history-command Any view None Use the display history-command command to display commands saved in the history buffer. The system will save validated history commands performed last in current user view to the history buffer, which can save up to ten commands by default. You can use the history-command max-size command to set the size of the history buffer. Refer to “history-command max-size” on page 2460 for related configuration.
CHAPTER 162: BASIC CONFIGURATION COMMANDS Hotkeys CTRL_A CTRL_B CTRL_C CTRL_D CTRL_E CTRL_F CTRL_H CTRL_K CTRL_N CTRL_P CTRL_R CTRL_V CTRL_W CTRL_X CTRL_Y CTRL_Z CTRL_] ESC_B ESC_D ESC_F ESC_N ESC_P ESC_< ESC_> =System hotkeys= Function Move the cursor to the beginning of the current line. Move the cursor one character left. Stop current command function. Erase current character. Move the cursor to the end of the current line. Move the cursor one character right.
system-view [Sysname] user-interface vty 0 [Sysname-ui-vty0] display this # user-interface con 0 user-interface vty 0 history-command max-size 256 user-interface vty 1 4 # return display version Syntax View Parameter Description display version Any view None Use the display version command to view system version information.
CHAPTER 162: BASIC CONFIGURATION COMMANDS header Syntax header { incoming | legal | login | motd | shell } text undo header { incoming | legal | login | motd | shell } View Parameter System view incoming: Banner displayed when a user logs onto a terminal user interface by user name and password. If authentication is required, the banner is displayed after authentication. legal: Authorization banner before login. login: Login banner at authentication. motd: Banner displayed before login.
************************************************************************** * All rights reserved (2004-2006) * * Without the owner’s prior written consent, * * No decompiling or reverse-switch fabricering shall be allowed. * ************************************************************************** Welcome to legal(header legal) Press Y or ENTER to continue, N to exit.
CHAPTER 162: BASIC CONFIGURATION COMMANDS system-view [Sysname] hotkey ctrl_t display tcp status # Display the configuration of hotkeys.
Description Example Use the quit command to exit to a lower-level view. If the current view is user view, the quit command terminates the current connection and reconnects to the device. # Switch from Ethernet 1/0 interface view to system view, and then to user view.
CHAPTER 162: BASIC CONFIGURATION COMMANDS ■ System: provides service configuration commands, including routing and commands at each level of the network for providing services. ■ Manage: influences the basic operation of the system and the system support modules for service support.
cipher: Cipher text password. password: Password, a string of characters. It is case-sensitive string. Description ■ For simple password, it is a string of 1 to 16 characters. ■ For cipher password, it is a string of 1 to 16 characters in plain text or 24 characters in cipher text. For example, the simple text “1234567” corresponds to the cipher text “(TT8F]Y5SQ=^Q‘MAF4<1!!”. Use the super password command to set the password needed to switch from a lower user level to a higher one.
CHAPTER 162: BASIC CONFIGURATION COMMANDS View System view Parameter sysname: Name of the device, a string of 1 to 30 characters. Description Use the sysname command to set the name of the device. Use the undo sysname demand to restore the device name to the default. The default name varies with devices by default. Modifying device name affects the prompt of the CLI. For example, if the device name is Sysname, the prompt of user view is . Example # Set the name of the device to R2000.
INFORMATION CENTER CONFIGURATION COMMANDS 163 display channel Syntax View Parameter display channel [ channel-number | channel-name ] Any view channel-number: Displays information of the channel with a specified number, where channel-number represents the channel number, in the range 0 to 9. channel-name: Displays information of the channel with a specified name, where channel-name represents the channel name, which could be a default name or one that is defined by the user.
CHAPTER 163: INFORMATION CENTER CONFIGURATION COMMANDS Table 625 Description on the fields of the display channel command Field Description channel name A specified channel name, which varies with user’s configuration. For more information, refer to “info-center channel name” on page 2432.
enabled,max buffer size 1024, current buffer size 256, current messages 216, dropped messages 0, overwritten messages 0 channel number : 3, channel name : trapbuffer logfile: channel number:9, channel name:channel9 Information timestamp setting: log - date, trap - date, debug - date, loghost - date Table 626 Description on the fields of the display info-center command Field Description Information Center The current state of the information center, which could be enabled or disabled.
CHAPTER 163: INFORMATION CENTER CONFIGURATION COMMANDS display logbuffer Syntax View Parameter display logbuffer [ level severity | size buffersize ] * [ | { begin | exclude | include } text ] Any view level severity: Displays information of the log with specified level, where severity represents information level, in the range 0 to 7.
Table 628 Meanings of characters in text Description Example Character Meaning Remarks + Addition, used to match a subexpression before it one or multiple times zo+ can map to “zo” and “zoo”, but not “z”. - Hyphen. It connects two values (the For example, “1-9” means numbers smaller one before it and the bigger from 1 to 9 (inclusive); “a-h” means one after it) to indicate a range from a to h (inclusive). together with [ ]. [] Selects one character from the group.
CHAPTER 163: INFORMATION CENTER CONFIGURATION COMMANDS Table 629 Descriptions on the fields of the display logbuffer command Field Description Channel name The channel name of the log buffer, defaults to logbuffer Dropped messages The number of dropped messages Overwritten messages The number of overwritten messages (when the buffer size is not big enough to hold all messages, the latest messages overwrite the old ones). Current messages The number of the current messages.
Description n Example Use the display logfile buffer command to display contents of the log file buffer. The support for the command varies with devices. # Display the contents of the log file buffer. display logfile buffer %@387986%Jun 20 10:52:03 2006 Sysname %%10IC/7/SYS_RESTART: System restarted -H3C Platform Software %@387988#Jun 20 10:52:48:494 2006 Sysname ENTITY/5/CPU THRESHOLD REACHED: Trap 1.3.6.1.4.1.2011.10.2.6.2.0.
CHAPTER 163: INFORMATION CENTER CONFIGURATION COMMANDS display trapbuffer Syntax View Parameter Description display trapbuffer [ size buffersize ] Any view size buffersize: Displays specified number of the latest trap messages in a trap buffer, where buffersize represents the number of the latest trap messages in a trap buffer, in the range 1 to 1,024. Use the display trapbuffer command to display the state and the trap information recorded.
Parameter channel-number: Specifies a channel number, in the range 0 to 9. channel-name: Specifies a channel name, a string of 1 to 30 characters. It should not start with a number, an underscore (-), a forward slash (/), or a backward slash (). The channel name is not case sensitive. Description Use the info-center channel name command to name a channel with a specified channel number.
CHAPTER 163: INFORMATION CENTER CONFIGURATION COMMANDS info-center enable Syntax info-center enable undo info-center enable View Parameter Description System view None Use the info-center enable command to enable information center. Use the undo info-center enable command to disable the information center. The system outputs information to the log host or the console only after the information center is enabled first. By default, the information center is enabled.
By default, information output to the log buffer is enabled with channel 4 (logbuffer) as the default channel and a maximum buffer size of 512. Note that the info-center logbuffer command takes effect only after the information center is enabled with the info-center enable command. Example # Enable the system to output information to the log buffer with a default buffer size of 50.
CHAPTER 163: INFORMATION CENTER CONFIGURATION COMMANDS Description Use the info-center logfile frequency command to configure the frequency with which the system saves the log file. Use the undo info-center logfile frequency command to restore the default frequency. By default, the frequency with which the system saves the log file varies with devices. n Example The support for the command varies with devices. # Configure the frequency with which the system saves the log file as 60,000 seconds.
Parameter Description dir-name: The name of the directory where a log file is saved, a string of 1 to 64 characters. Use the info-center logfile switch-directory command to configure the directory where a log file is saved. For a device supporting CF partition, the directory to save a log file is the logfile directory in the second partition (cf1:) of the storage device. Ensure that the directory is created first before saving a log file into it.
CHAPTER 163: INFORMATION CENTER CONFIGURATION COMMANDS Use the undo info-center loghost command to restore the default configurations on a log host. By default, output of system information to the log host is disabled. When it is enabled, the default channel name will be loghost and the default channel number will be 2. Note that: Example ■ The info-center loghost command takes effect only after the information center is enabled with the info-center enable command.
info-center monitor channel Syntax info-center monitor channel { channel-number | channel-name } undo info-center monitor channel View Parameter System view channel-number: Specifies a channel number, in the range 0 to 9. channel-name: Specifies a channel name, which could be a default name or one that is defined by the user. The user needs to specify a channel name first before using it as a self-defined channel name. For more information, refer to “info-center channel name” on page 2432.
CHAPTER 163: INFORMATION CENTER CONFIGURATION COMMANDS Use the undo info-center snmp channel command to restore the default channel to output system information to the SNMP NMS. By default, output of system information to the SNMP NMS is enabled with a default channel name of snmpagent and a default channel number of 5. For more information, refer to the display snmp-agent commands in “SNMP Configuration Commands” on page 2329.
Use the undo info-center source command to remove the specified output rules. By default, the output rules for the system information are listed in Table 633. This command can be used to filter and redirect system information. For example, the user can set to output log information with severity higher than warnings to the log host, and information with severity higher than informational to the log buffer.
CHAPTER 163: INFORMATION CENTER CONFIGURATION COMMANDS info-center synchronous Syntax info-center synchronous undo info-center synchronous View Parameter Description System view None Use the info-center synchronous command to enable synchronous information output. Use the undo info-center synchronous command to disable the synchronous information output. By default, the synchronous information output is disabled.
Parameter debugging: Sets the timestamp format of the debugging information. log: Sets the timestamp output format of the log information. trap: Sets the timestamp output format of the trap information. boot: The time taken to boot up the system, in the format of xxxxxx.yyyyyy, in which xxxxxx represents the most significant 32 bits of the time taken to boot up the system (in milliseconds) whereas yyyyyy is the least significant 32 bits.
CHAPTER 163: INFORMATION CENTER CONFIGURATION COMMANDS Use the undo info-center timestamp loghost command to restore the default. By default, the time stamp format for log information sent to the log host is date. Example # Set not to include the year information in the output information to the log host.
View Parameter Description Any view None Use the logfile save command to manually save the log buffer contents into the log file. By default, the system automatically saves the log file based on a frequency configured by the info-center logfile frequency command into a directory configured by the info-center logfile switch-directory command. Example # Set to manually save the log buffer contents into the log file.
CHAPTER 163: INFORMATION CENTER CONFIGURATION COMMANDS undo terminal debugging View Parameter Description User view None Use the terminal debugging command to enable the display of debug information on the current terminal. Use the undo terminal debugging command to disable the display of debug information on the current terminal. By default, the display of debug information on the current terminal is disabled.
terminal monitor Syntax terminal monitor undo terminal monitor View Parameter Description User view None Use the terminal monitor command to enable the monitoring of system information on the current terminal. Use the undo terminal monitor command to disable the monitoring of system information on the current terminal. ■ Note that the terminal monitor command must be configured first before the log, trap, and debug information can be displayed using the corresponding commands.
CHAPTER 163: INFORMATION CENTER CONFIGURATION COMMANDS Note that the trap information is displayed (using the terminal trapping command) only after the monitoring of system information is enabled on the current terminal first (using the terminal monitor command). Example #Enable the display of trap information on the current terminal.
USER INTERFACE CONFIGURATION COMMANDS 164 acl Syntax For basic and advanced ACL, use the following commands: acl [ ipv6 ] acl-number { inbound | outbound } undo acl [ ipv6 ] acl-number { inbound | outbound } For layer 2 ACL, use the following commands: acl acl-number inbound undo acl acl-number inbound View Parameter VTY user interface view ipv6: When this keyword is present, the command supports IPv6; otherwise, it supports IPv4.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS system-view [Sysname] user-interface vty 0 [Sysname-ui-vty0] undo acl 2001 outbound activation-key Syntax activation-key character undo activation-key View Parameter Description User interface view character: Shortcut key for starting terminal sessions, a single character (or its corresponding ASCII code value in the range 0 to 127) or a string of 1 to 3 characters.
************************************************************************** User interface con0 is available. Please press ENTER. # Enter at the prompt of "Please press ENTER". You will see the terminal session being started. %Mar 2 18:40:27:981 2005 Sysname SHELL/5/LOGIN: Console login from con0 auto-execute command Syntax auto-execute command command undo auto-execute command View Parameter Description User interface view command: Command to be automatically executed.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS sure? [Y/N] ]:y [Sysname-ui-vty0]-4] # Telnet to the device again, the display brief interface loopback command will be executed automatically before the telnet connection breaks. And the following information will be displayed: *************************************************************************** All rights reserved (2004-2006) * * Without the owner’s prior written consent, * * No decompiling or reverse-switch fabricering shall be allowed.
system-view [Sysname] user-interface vty 0 [Sysname-ui-vty0] authentication-mode none # Set to use password authentication when users use VTY 0 interface to log onto the device. The authentication password is 321. system-view [Sysname] user-interface vty 0 [Sysname-ui-vty0] authentication-mode password [Sysname-ui-vty0] set authentication password cipher 321 # Set to use username and password authentication when users use VTY 0 interface to log onto the device.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS display history-command Syntax View Parameter Description display history-command Any view None Use the display history-command command to view the valid history commands that have been executed recently. Currently, the system can display up to 256 history commands. Related command: Example history-command max-size. # Display history commands.
If the summary keyword is present, the command displays all the number and type of user interfaces. Example # Display information about user interface 0. display user-interface 0 Idx Type Tx/Rx Modem Privi Auth Int + 0 CON 0 9600 3 N + : Current user-interface is active. F : Current user-interface is active and work in async mode. Idx : Absolute index of user-interface. Type : Type and relative index of user-interface. Privi: The privilege of user-interface.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS Table 635 Description on the fields of the display user-interface summary command Field Description User interface type Type of user interface (CON/TTY/AUX/VTY) 0:X 0 represents the absolute number of the user interface. X means this user interface is not used; U means this user interface is in use; the number of the character X and U indicates the total number of user interfaces. character mode users.
Table 636 Description on the fields of the display users command Field Description Userlevel User authority or level: 0 for visit, 1 for monitor, 2 for system, and 3 for manage.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS ping -c 20 192.168.1.49 PING 192.168.1.49: 56 data bytes, press a to break Reply from 192.168.1.49: bytes=56 Sequence=1 ttl=255 time=3 ms Reply from 192.168.1.49: bytes=56 Sequence=2 ttl=255 time=3 ms # Enter , if the task terminates immediately and the system retur ns to the current view, the configuration is correct. --- 192.168.1.49 ping statistics --2 packet(s) transmitted 2 packet(s) received 0.
mode; if either one of these two arguments is omitted, it indicates that no flow control is performed in the direction specified by the omitted argument. For example, if you configure flow-control hardware in, the system automatically sets the local device not to perform flow control on the remote device. n Examples The command is only applicable to asynchronous serial interfaces including AUX and Console ports.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS Description ■ For TTY user interfaces, the value range varies with devices, and normally starts from 1. ■ For VTY user interfaces, the value ranges from 0 to 4. Use the free user-interface command to disconnect with the specified user interface. Note that you cannot use this command to terminate your own connection. Example # Terminate the connection with user interface VTY1.
Parameter minutes: Specifies timeout time in minutes, in the range 0 to 35791, defaulting to 10 minutes. seconds: Specifies timeout time in seconds, in the range 0 to 59, defaulting to 0 seconds. Description Use the idle-timeout command to set the idle-timeout timer. When it expires, the user connection is terminated. Use the undo idle-timeout command to restore the default. The default idle-timeout is 10 minutes.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS locked ! Password: modem Syntax modem { both | call-in | call-out } undo modem { both | call-in | call-out } View Parameter User interface view both: Enables both dial in and dial out. call-in: Enables dial in. call-out: Enables dial out. Description Use the modem command to enable the modem to dial in or dial out. Use the undo modem command to disable this function. By default, dial in and dial out are disabled on the modem.
Description Use the modem auto-answer command to set the answering mode to auto-answer. Use the undo modem auto-answer command to restore the default, or manual answer. n Example This command takes effect on the AUX port and other asynchronous interfaces only, and cannot be applied to the Console port. # Set the answering mode to auto-answer.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS mark: Mark parity check. none: No parity check. odd: Odd parity check. space: Space parity check. Description Use the parity command to set the check bit of the user interface. Use the undo parity command to restore the default, or none. n Example The command is only applicable to asynchronous serial interfaces including AUX and Console ports. # Perform odd parity check on the AUX interface.
system-view [Sysname] user-interface vty 0 4 [Sysname-ui-vty0-4] authentication-mode scheme [Sysname-ui-vty0-4] protocol inbound ssh redirect disconnect Syntax redirect disconnect View User interface view Parameter Description n Example None Use the redirect disconnect command to manually terminate a redirected telnet connection. ■ The redirect commands are supported on the AUX and TTY user interfaces only.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS Related command: Example telnet, display tcp statistics on page 793. # Enable redirection on user interface TTY 7. system-view [Sysname] user-interface tty 7 [Sysname-ui-tty7] redirect enable redirect listen-port Syntax redirect listen-port port-number undo redirect listen-port View Parameter Description User interface view port-number: Number of the listening port, in the range 2000 to 50000.
Description Use the redirect refuse-negotiation command to disable Telnet option negotiation when establishing redirected Telnet connection. Use the undo redirect refuse-negotiation command to enable Telnet option negotiation when establishing redirected Telnet connection. By default, Telnet option negotiation is enabled. n Example ■ The redirect commands are supported on the AUX and TTY user interfaces only.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS redirect return-deal from-terminal Syntax redirect return-deal from-terminal undo redirect return-deal from-terminal View Parameter Description User interface view None Use the redirect return-deal from-telnet command to let the device that redirects Telnet connection process the carriage returns received from the terminal (a PC connected to the console port for example), meaning to substitute 0x0d for 0x0d 0x0a and 0x0d 0x00.
n Example ■ The redirect commands are supported on the AUX and TTY user interfaces only. ■ Execute the command after using the redirect enable command to enable redirection on the user interface. # Set the idle timeout for the redirected telnet connection to 200 seconds.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS Parameter all: Sends messages to all user interfaces. num1: Absolute number of a user interface. The value range varies with devices, and normally starts from 0. num2: Relative number of a user interface, in the following rules: Description ■ For the AUX port, the value is 0. ■ For the Console port, the value is 0. ■ For TTY user interfaces, the value range varies with devices, and normally starts from 1.
1234567 for example. A cipher text password, or the encrypted version of the plain text password, comprises 24 characters, such as _(TT8F]Y5SQ=^Q‘MAF4<1!!. Description Use the set authentication password command to set a local authentication password. Use the undo set authentication password command to remove the local authentication password. No local authentication password is set by default.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS Example ■ This command is not supported on the AUX port if the device has only a AUX port and no Console port. ■ This command cannot be used on the user interface from which you log in. # Disable terminal services on the VTYs 0 through 4.
n Example The command is only applicable to asynchronous serial interfaces including AUX and Console ports. # Set the transmission rate on the user interface AUX 0 to 19200 bps. system-view [Sysname] user-interface aux 0 [Sysname-ui-aux0] speed 19200 stopbits Syntax stopbits { 1 | 1.5 | 2 } undo stopbits View Parameter User interface view 1: 1 stop bit. 1.5: 1.5 stop bits. 2: 2 stop bits. Description Use the stopbits command to set the stop bits on the user interface.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS Use the undo terminal type command to restore the default. By default, the terminal display type is ANSI. Note that the system supports two types of terminal display: ANSI and VT100.
quit super telnet tracert undo Exit from current command view Privilege current user a specified priority level Establish one TELNET connection Trace route function Undo a command or set to its default status # Enable user 1 to access level 3 commands. system-view [Sysname] local-user user1 New local user added.
CHAPTER 164: USER INTERFACE CONFIGURATION COMMANDS system-view [Sysname] user-interface vty 0 3 [Sysname-ui-vty0-3]
MAC ADDRESS TABLE MANAGEMENT CONFIGURATION COMMANDS 165 n Interfaces that MAC address table management involves can only be Layer 2 Ethernet interfaces. display mac-address Syntax display mac-address blackhole [ vlan vlan-id ] [ count ] display mac-address [ mac-address [ vlan vlan-id ] | [ dynamic | static ] [ interface interface-type interface-number ] [ vlan vlan-id ] [ count ] ] View Parameter Any view blackhole: Displays blackhole MAC address entries.
CHAPTER 165: MAC ADDRESS TABLE MANAGEMENT CONFIGURATION COMMANDS display mac-address 00e0-fc01-0101 MAC ADDR VLAN ID STATE PORT INDEX 00e0-fc01-0101 1 Learned GigabitEthernet1/0 AGING TIME(s) AGING Table 637 Description on the fields of the display mac-address command Field Description MAC ADDR MAC address VLAN ID ID of the VLAN to which the MAC address belongs STATE State of a MAC address, which could be Config static, Config dynamic, Learned and Blackhole.
Description Example Use the display mac-address mac-learning command to display MAC address learning status of the specified or all Ethernet interfaces. # Display MAC address learning status of all Ethernet interfaces.
CHAPTER 165: MAC ADDRESS TABLE MANAGEMENT CONFIGURATION COMMANDS Related command: Example ■ As your MAC address entries configuration cannot survive a reboot, save it after completing the configuration. The dynamic MAC address table entries however will be lost whether you save the configuration or not. ■ You cannot configure a static or dynamic MAC address entry on an aggregation port. display mac-address.
Use the undo mac-address [ { blackhole | dynamic | static } mac-address interface interface-type interface-number vlan vlan-id ] command to remove one or all MAC address entries. Use the undo mac-address [ blackhole | dynamic | static ] [ mac-address ] vlan vlan-id command to remove a MAC address entry, MAC address entries of a specified type, or all MAC address entries for a VLAN.
CHAPTER 165: MAC ADDRESS TABLE MANAGEMENT CONFIGURATION COMMANDS Related command: Example ■ You may need to disable MAC address learning sometimes to prevent the MAC address table from being saturated, for example, when your device is being attacked by a great deal of packets with different source MAC addresses. This somewhat affects update of the MAC address table.
The default maximum number of MAC addresses that can be learned on a port varies with devices. When the upper limit is reached, frames received with unknown destination MAC addresses on a port are forwarded by default. The command takes effect on the current port only when executed in interface view. Related command: Example mac-address (system view), mac-address (Ethernet interface view), mac-address timer. # Set the maximum number of MAC addresses that can be learned on port Ethernet 1/0 to 600.
CHAPTER 165: MAC ADDRESS TABLE MANAGEMENT CONFIGURATION COMMANDS
POE CONFIGURATION COMMANDS 166 n The support for the commands in this document varies with devices. apply poe-profile Syntax apply poe-profile { index index | name profile-name } undo apply poe-profile { index index | name profile-name } View Parameter PoE interface view index index: Specifies the index number of the PoE configuration file. The index number ranges from 1 to 100. name profile-name: Specifies the name of the PoE configuration file. The file name consists of 1 to 15 characters.
CHAPTER 166: POE CONFIGURATION COMMANDS display poe device Syntax View Parameter Description Example display poe device Any view None Use the display poe device command to display the mapping between ID, module, and slot of the power sourcing equipment (PSE). # Display the mapping between ID, module, and slot of each PSE. (The information displayed varies with devices.
Port Port Port Port Port Port Port Port Port Port Port Operating Status IEEE Class Detection Status Power Mode Current Power Average Power Peak Max Power Current Voltage PD Description : : : : : on : 1 : delivering-power : signal 11592 mW 11610 mW 11684 mW 15400 mW : 244 mA : 51.
CHAPTER 166: POE CONFIGURATION COMMANDS Table 640 Description on fields of the display poe interface ethernet command Field Description Port Power Mode Power mode of a PoE interface: ■ signal: Power is supplied over signal cables. ■ spare: Power is supplied over spare cables. Different models of device support different power supply modes.
Table 641 Description on fields of the display poe interface command Field Description Operating Status Operating state of a PoE interface ■ off: PoE is disabled. ■ on: Power is supplied for a PoE interface normally. ■ power lack: The guaranteed remaining power of the PSE is not high enough to supply power for a critical PoE interface. ■ power-deny: The PSE refuses to supply power. The power required by the powered device (PD) is higher than the configured power.
CHAPTER 166: POE CONFIGURATION COMMANDS # Display the power information of all PoE interfaces. display poe interface power Interface CurPower PeakPower MaxPower PD Description (W) (W) (W) GE2/25 4.4 4.5 4.6 IP Phone on Room 309 for Peter.... GE2/26 4.4 4.5 15.4 IP Phone on Room 409 for Peter Pan GE2/27 15.0 15.3 15.4 Acess Point on Room 509 for Peter GE2/28 0 0 0 IP Phone on Room 609 for Peter....
Table 643 Description on fields of the display poe power-usage command Field Description PoE Current Power Total consumption power of the PSE PoE Max Power Maximum PoE power PoE Max Guaranteed Power Guaranteed maximum PoE power, namely, the maximum power supplied to critical PSEs.
CHAPTER 166: POE CONFIGURATION COMMANDS PSE PSE PSE PSE PSE PSE PSE PSE PSE PSE PSE PSE Average Power Peak Power Max Power Remaining Guaranteed CPLD Version Software Version Hardware Version Legacy Detection Utilization-threshold Pse-policy Mode Pd-policy Mode PD Disconnect Detect Mode : 20 W : 240 W : 200 W : 120 W : 100 : 200 : 100 : disable : 80 : disable : disable : DC Table 644 Description on fields of the display poe pse command Field Description PSE ID ID of the PSE PSE Slot No Slot nu
Parameter Description Example None Use the display poe-power command to display the information of the PoE power. # Display information of the PoE power.
CHAPTER 166: POE CONFIGURATION COMMANDS Table 645 Description on fields of the display poe-power command Field Description PoE Power Status PoE power state: ■ Normal ■ Absent ■ Off ■ Master ■ Slave ■ Balance ■ Redundant ■ Alarm ■ Faulty The PoE power state varies with devices. display poe-profile Syntax View Parameter display poe-profile [ index index | name profile-name ] Any view index index: Specifies the index number of the PoE configuration file.
Table 646 Description on fields of the display poe-profile command Field Description Poe-profile Name of the PoE configuration file Index Index number of the PoE configuration file ApplyNum Number of PoE interfaces to which a PoE configuration file is applied Interface Shortened form of the PoE interface to which the PoE configuration is applied Configuration Configurations of the PoE configuration file poe-profile(s) created Number of PoE configuration files port(s) applied Sum of the
CHAPTER 166: POE CONFIGURATION COMMANDS Table 648 Description on fields of the display poe-profile name command Field Description Interface Shortened form of the PoE interface to which the PoE configuration is applied Configuration Configurations of the PoE configuration file port(s) applied Sum of the number of PoE interfaces to which all PoE configuration files are respectively applied display poe-profile interface Syntax View Parameter Description Example display poe-profile interface in
View Parameter System view ac: Specifies the PD disconnection detection mode as ac mode. dc: Specifies the PD disconnection detection mode as dc mode. Description Use the poe disconnect command to configure a PD disconnection detection mode. Use the undo poe disconnect command to restore the default PD disconnection detection mode. The default PD disconnection detection mode depends on the device model. Note that a change to the PD disconnection detection mode may lead to a power-off of some PDs.
CHAPTER 166: POE CONFIGURATION COMMANDS # Enable PoE through a PoE configuration file on a PoE interface. system-view [Sysname] poe-profile abc [Sysname-poe-profile-abc-1] poe enable [Sysname-poe-profile-abc-1] quit [Sysname] interface ethernet 1/1 [Sysname-Ethernet1/1]apply poe-profile name abc poe enable pse Syntax poe enable pse pse-id undo poe enable pse pse-id View Parameter Description System view pse-id: PSE ID. pse-id indicates number of the slot where a PoE interface locates.
By default, the PSE is disabled from detecting nonstandard PDs. Example # Enable PSE 2 to detect nonstandard PDs. system-view [Sysname] poe legacy enable pse 2 poe max-power Syntax poe max-power max-power undo poe max-power View PoE interface view/PoE-profile file view Parameter max-power: Maximum power in milliwatts allocated to a PoE interface. The range of this argument varies with devices.
CHAPTER 166: POE CONFIGURATION COMMANDS Parameter max-power: Maximum power in watts of the PSE. The support for the value varies with devices. pse pse-id: Specifies a PSE ID. The support for this argument varies with devices. pse-id indicates number of the slot where a PoE interface locates. Description Use the poe max-power command to configure the maximum power for the PSE. Use the undo poe max-power command to restore the default maximum power of the PSE.
Example ■ In the signal mode, lines in Category 3 and 5 twisted pair cables used for transmitting data are also used for supplying DC power. ■ In the spare mode, lines in Category 3 and 5 twisted pair cables not in use are used for supplying DC power. # Set the PoE mode to signal (power over signal cables). system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0]poe mode signal # Set the PoE mode to signal (power over signal cables) through a PoE configuration file.
CHAPTER 166: POE CONFIGURATION COMMANDS Parameter Description None Use the poe pd-policy priority command to configure a PD power management priority policy. Use the undo poe pd-policy priority command to remove the PD power management priority policy. By default, no PD power management priority policy is configured.
■ Example If two PoE interfaces have the same priority level, the PoE interface with a smaller ID has the higher priority level. The support for the PoE interface priority level varies with devices. # Set the power priority of Ethernet 1/0 to critical. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] poe priority critical # Set the power priority of Ethernet 1/0 to critical through a PoE configuration file.
CHAPTER 166: POE CONFIGURATION COMMANDS poe pse-policy priority Syntax poe pse-policy priority undo poe pse-policy priority View Parameter Description System view None Use the poe pse-policy priority command to configure a PSE power management priority policy. Use the undo poe pse-policy priority command to remove the PSE power management priority policy. By default, no PSE power management priority policy is configured. Example # Configure a PSE power management priority policy.
poe utilization-threshold Syntax poe utilization-threshold utilization-threshold-value [ pse pse-id ] undo poe utilization-threshold [ pse pse-id ] View Parameter System view utilization-threshold-value: Power alarm threshold in percentage, in the range 1 to 99. pse pse-id: Specifies a PSE ID. The support for this argument varies with devices. pse-id indicates number of the slot where a PoE interface locates.
CHAPTER 166: POE CONFIGURATION COMMANDS Use the undo poe-profile command to delete the specified PoE configuration file. If no index is specified, the system will automatically assign an index to the PoE configuration file, starting from 1. If a PoE configuration file is already applied to a PoE interface, you cannot delete it. To delete the file, you must first execute the undo apply poe-profile command to remove the application of the PoE configuration file to the PoE interface.
OAP MODULE CONFIGURATION COMMANDS 167 n NOTE: In some regions, the OAP modules are sold as “OSM” modules. They are identical in function. oap connect slot Syntax View Parameter Description oap connect slot slot-number User view slot-number: Number of the slot where an OAP module locates. Use the oap connect slot command to switch from the command line interface on the router to the Linux OS on an OAP module.
CHAPTER 167: OAP MODULE CONFIGURATION COMMANDS oap reboot slot Syntax View Parameter Description c oap reboot slot slot-number User view slot-number: Number of the slot where an OAP module locates. Use the oap reboot slot command to restart an OAP module, which equals to resetting the OAP module by pressing the Reset button on the OAP module.
ACFP CONFIGURATION COMMANDS 168 acfp enable Syntax acfp enable undo acfp enable View System view Parameters None Description Use the acfp enable command to enable ACFP. Use the undo acfp enable command to disable ACFP. ACFP is disabled by default. Example # Enable ACFP.
CHAPTER 168: ACFP CONFIGURATION COMMANDS Example # Display the information about all the ACFP clients. display acfp client-info ACFP client total number: 1 ClientID: 4 Description: IPS Hw-Info: 1.0 OS-Info: Linux Kernel 2.4.20-8 App-Info: 2.0 Client IP: 10.1.1.
out-interface interface-type interface-number: Displays all the policies that use the specified interface as the outbound interface, where interface-type interface-number is the interface type and interface number. active: Displays active policies only. inactive: Displays inactive policies only. Description Use the display acfp policy-info command to display the ACFP policy information.
CHAPTER 168: ACFP CONFIGURATION COMMANDS Table 651 Description on the fields of the display acfp policy-info command Field Description In-Interface Inbound interface of the packet Out-Interface Outbound interface of the packet Dest-Interface Interface connected to the ACFP client display acfp rule-cache Syntax View Parameters display acfp rule-cache [ in-interface interface-type interface-number | out-interface interface-type interface-number ] * Any view in-interface interface-type interfa
Table 652 Description on the fields of the display acfp rule-cache command Field Description Idx Hash index SIP Source IP address SPort Source port number DIP Destination IP address DPort Destination port number Pro Protocol of the packet, in the range of 0 to 255 InIf Inbound interface of the packet OutIf Outbound interface of the packet Precedence Packet precedence, a number in the range of 0 to 7 Tos Type of service, a number in the range of 0 to 15 DSCP Differentiated servic
CHAPTER 168: ACFP CONFIGURATION COMMANDS Note the following: Example ■ When you use this command to display ACFP rule information in order of policy, if you specify neither client ID nor policy index, the rule information of all the policies will be displayed. ■ When you use this command to display ACFP rule information in order of outbound/inbound interface, if you specify no interface, the rule information for all the inbound interfaces or outbound interfaces will be displayed.
Table 653 Description on the fields of the display acfp rule-info command Field Description Tos Type of service, a number in the range of 0 to 15 Pre Packet precedence, a number in the range of 0 to 7 DSCP Differentiated services codepoint, containing 0 to 63 characters for Be, Ef, Af11, Af12, Af13, Af21, Af22, Af23, Af31, Af32, Af33, Af41, Af42, Af43, Cs1, Cs2, Cs3, Cs4, Cs5, Cs6, Cs7 and 0 to 63 numbers for other modes Action Action: permit, deny, mirror, and redirect Status Rule status:
CHAPTER 168: ACFP CONFIGURATION COMMANDS reset acfp rule-cache Syntax View Parameters reset acfp rule-cache [ in-interface interface-type interface-number | out-interface interface-type interface-number ] * User view in-interface interface-type interface-number: Clears the ACFP rule cache for the specified inbound interface, where interface-type interface-number is the interface type and interface number.
ACSEI SERVER CONFIGURATION COMMANDS 169 acsei server enable Syntax acsei server enable undo acsei server enable View System view Parameters None Description Use the acsei server enable command to enable ACSEI server. Use the undo acsei server enable command to disable ACSEI server. By default, ACSEI server is disabled. Examples # Enable ACSEI server.
CHAPTER 169: ACSEI SERVER CONFIGURATION COMMANDS acsei timer clock-sync Syntax acsei timer clock-sync minutes undo acsei timer clock-sync View ACSEI server view Parameters minutes: Value of the synchronization timer that is used for clock synchronization from ACSEI server to ACSEI client. It ranges from 0 to 1440 (in minutes), where value 0 specifies to inhibit the clock synchronization from ACSEI server to ACSEI client.
system-view [Sysname] acsei server [Sysname-acsei-server] acsei timer monitor 6 acsei client close Syntax View acsei client close client-id ACSEI server view Parameters client-id: ID of the ACSEI client to be closed, in the range of 1 to 10. (An ACSEI client ID is assigned by the ACSEI server.) Description Use the acsei client close command to close a specified ACSEI client. Examples # Close the ACSEI client with ID of 1.
CHAPTER 169: ACSEI SERVER CONFIGURATION COMMANDS carrying the ACSEI client, and the last registration time of the ACSEI client. Summary information of multiple ACSEI clients is displayed in order of registration time. If executed without the client-id argument, the command displays summary information about all the ACSEI clients. Examples # Display the summary of ACSEI client 1.
the client, so that when there’s no ACSEI client information, the command displays the information keywords only. If executed without the client-id argument, the command displays information about all the ACSEI clients in order of registration time. Examples # Display information about ACSEI client 5. display acsei client info 1 client ID: 1 client Description: Hardware: System Software: Application Software: CPU: Intel(R) Pentium(R) M processor 1.40GHz PCB Version: 3.00 CPLD Version: 1.
CHAPTER 169: ACSEI SERVER CONFIGURATION COMMANDS Table 656 Description on the fields of the display acsei client info command Field Description client Description ACSEI client description Hardware Hardware version of the ACSEI client System Software System software name and version of the ACSEI client Application Software Application name and version of the ACSEI client CPU CPU information of the ACSEI client PCB Version PCB version of the ACSEI client CPLD Version CPLD version of the
170 ACSEI CLIENT CONFIGURATION COMMANDS n ■ Multiple kinds of ACSEI clients have been developed at present. Different ACSEI clients need different configuration. The following commands are available for the ACSEI client running on an OAP module. ■ The following commands can be executed in any directory of the Linux system. You can use the oap connect slot command in user view of the device to enter the Linux system of the OAP module.
CHAPTER 170: ACSEI CLIENT CONFIGURATION COMMANDS Description Use the acsei-client debug enable command to enable debugging for ACSEI client. By default, debugging for ACSEI client is disabled. Examples # Enable debugging for ACSEI client.
Examples # Configure not to start up ACSEI client automatically when the system is started up. oap connect slot 6 Connected to OAP! [root@localhost ~]# chkconfig acseid off chkconfig acseid on Syntax View chkconfig acseid on Any directory of the Linux system Parameters None Description Use the chkconfig acseid on command to configure to start up ACSEI client automatically, that is, configure to start up ACSEI client simultaneously with the system.
CHAPTER 170: ACSEI CLIENT CONFIGURATION COMMANDS # Execute conditional restart of ACSEI client (when ACSEI client is stopped).
Stopping acseic-daemon: [ Starting acseic-daemon: [ OK OK ] ] # Restart a stopped ACSEI client. oap connect slot 6 Connected to OAP! [root@localhost ~]# service acseid status acseic-daemon is stopped [root@localhost ~]# service acseid restart Stopping acseic-daemon: [FAILED] Starting acseic-daemon: [ OK ] service acseid start Syntax View service acseid start Any directory of the Linux system Parameters None Description Use the service acseid start command to start an ACSEI client.
CHAPTER 170: ACSEI CLIENT CONFIGURATION COMMANDS Examples # Query the running status of an ACSEI client that is running. oap connect slot 6 Connected to OAP! [root@localhost ~]# service acseid status acseic-daemon (pid 2849) is running... # Query the running status of an ACSEI client that is stopped.
TRACK CONFIGURATION COMMANDS 171 display track Syntax View Parameters display track { track-entry-number | all } Any view track-entry-number: Displays information about the specified Track object, in the range 1 to 1024. all: Displays information about all the Track objects. Description Examples Use the display track command to display Track object information. # Display information about all the Track objects.
CHAPTER 171: TRACK CONFIGURATION COMMANDS View Parameters System view track-entry-number: Track object ID, in the range 1 to 1024. admin-name: Name of the administrator creating the NQA operation, a string of 1 to 32 characters, case-insensitive. operation-tag: NQA operation tag, a string of 1 to 32 characters, case-insensitive. item-num: Reaction entry ID, in the range 1 to 10.
IPX CONFIGURATION COMMANDS 172 display ipx interface Syntax View Parameter Description display ipx interface [ interface-type interface-number ] Any view interface-type interface-number: Displays the IPX information of an interface. Use the display ipx interface command to display IPX information on a specified interface. If no interface is specified, information about all IPX interfaces will be displayed. Example # Display IPX information on the interface Ethernet 1/1.
CHAPTER 172: IPX CONFIGURATION COMMANDS Table 658 Description on the fields of the display ipx interface command Field Description Update change only is disabled The triggered update feature is disabled. Forwarding of IPX type 20 propagation packet is disabled Forwarding of IPX type 20 propagation packet is disabled. Delay of this IPX interface Delay value of the current interface in ticks (a tick is 1/18 second).
Table 659 Description on the fields of the display ipx routing-table command Field Description Dest_Ntwk_ID Destination network ID of the route Proto Protocol type of the route Pre Preference of the route Ticks Delay time of the route in ticks (a tick is 1/18 second) Hops Hop value of the route Nexthop The next hop of the route Interface Outgoing interface of the route display ipx routing-table verbose Syntax View display ipx routing-table [ network ] verbose Any view Parameter Netw
CHAPTER 172: IPX CONFIGURATION COMMANDS Table 660 Description on the fields of the display ipx routing-table verbose command Field Description Routes Total number of routes Destination Network ID Destination network ID of the route Protocol Protocol type of the route Preference Preference of the route Ticks Delay time of the route in ticks (a tick is 1/18 second) Hops Hop value of the route Nexthop The next hop of the route Time Aging time of the route: 0 for directly connected route
display ipx routing-table statistics Syntax View Parameter Description Example display ipx routing-table statistics Any view None Use the display ipx routing-table statistics command to display IPX routing statistics. # Display IPX routing statistics.
CHAPTER 172: IPX CONFIGURATION COMMANDS order { network | type }: Displays sorted service information. The network keyword indicates that information is sorted by network. The type keyword indicates that information is sorted by type. type service-type: Displays information about a specified service type ID, which is in the range of 0x1 to 0xFFFF. verbose: Displays detailed about service information. Description Use the display ipx service-table command to display IPX service information.
Parameter Description Example None Use the display ipx statistics command to display IPX packet statistics. # Display IPX packet statistics.
CHAPTER 172: IPX CONFIGURATION COMMANDS Table 663 Description on the fields of the display ipx statistics command Field Description SAP: Statistics of SAP packets, including the number of received general request packets, the number of received specific request packets, the number of received GNS request packets, the number of sent general response packets, the number of sent specific response packets, the number of sent GNS packets, the number of sent packets with periodic updates, and the number
ipx encapsulation Syntax ipx encapsulation [ dot2 | dot3 | ethernet-2 | snap ] undo ipx encapsulation View Parameter Interface view dot2: Specifies the encapsulation format as Ethernet_802.2. dot3: Specifies the encapsulation format as Ethernet_802.3. ethernet-2: Specifies the encapsulation format as Ethernet_II. snap: Specifies the encapsulation format as Ethernet_SNAP. Description Use the ipx encapsulation command to specify an IPX frame encapsulation format for the current interface.
CHAPTER 172: IPX CONFIGURATION COMMANDS Example # Enable Ethernet 1/0 to forward type 20 broadcast packets. system-view [Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] ipx netbios-propagation ipx network Syntax ipx network network-number undo ipx network View Parameter Description Interface view network-number: IPX network ID in hexadecimal format. It ranges from 0x1 to 0xFFFFFFFD. Leading 0s can be omitted.
Note that RIP only redistributes active static routes, rather than inactive routes. Example # Enable static route redistribution to RIP. system-view [Sysname] ipx rip import-route static ipx rip mtu Syntax ipx rip mtu bytes undo ipx rip mtu View Interface view Parameter bytes: Maximum RIP updating packet size in bytes, ranging from 432 to 1,500. Description Use the ipx rip mtu command to configure the maximum RIP updating packet size.
CHAPTER 172: IPX CONFIGURATION COMMANDS Use the undo ipx rip multiplier command to restore the default. The default is 3 times the update interval. A timer is set for each routing entry to keep track of elapsed time since the route was received. Every time the updating packet containing the route is received, the timer is reset to zero. If a RIP route is not updated within the aging period, the system will regard the route as invalid and will delete it from the routing table.
Parameter dest-network: Destination network ID of the IPX static route, an 8-digit hexadecimal number, ranging from 0x1 to 0xFFFFFFFE. network.node: Next hop address of the IPX static route. network is an 8-digit hexadecimal number in the range 0x1 to 0xFFFFFFFD. The 48-bit node consists of three 4-digit hexadecimal numbers, separated by “-”; when entered, the leftmost 0s can be omitted. interface-type interface-number: Type and number of the outgoing interface that must support PPP encapsulation.
CHAPTER 172: IPX CONFIGURATION COMMANDS Description Use the ipx route load-balance-path command to specify the maximum number of equivalent routes to the same destination. Use the undo ipx route load-balance-path command to restore the default. The default is 1. This number is the maximum active equivalent route number of the system. If a newly configured number is smaller than the previous, the system will change the excessive active routes to inactive routes.
View Parameter Description Interface view None Use the ipx sap disable command to disable IPX SAP on the current interface. Use the undo ipx sap disable command to enable IPX SAP on the current interface. By default, the SAP is enabled on the interface after IPX is enabled. Example # Disable SAP on the interface Ethernet 1/0.
CHAPTER 172: IPX CONFIGURATION COMMANDS Parameter Description None Use the ipx sap gns-load-balance command to configure the router to respond to GNS requests in the Round-robin method. Use the undo ipx sap gns-load-balance command to configure the router to respond with the nearest server. By default, the Round-Robin mode is used, that is, the router informs the clients of servers in turn lest a server shoulders too much pressure. Related command: Example ipx sap gns-disable-reply.
undo ipx sap mtu View Parameter Description Interface view bytes: Maximum SAP packet size in bytes, ranging from 480 to 1,500. Use the ipx sap mtu command to configure the maximum size of SAP updating packets. Use the undo ipx sap mtu command to restore the default. By default, the value is 480 bytes. The size of the IPX header plus SAP header is 32 bytes, so a 480-byte SAP updating packet contains 7 service information items (64 bytes each).
CHAPTER 172: IPX CONFIGURATION COMMANDS ipx sap timer update Syntax ipx sap timer update seconds undo ipx sap timer update View Parameter Description System view seconds: SAP updating interval, ranging from 10 to 60,000 seconds. Use the ipx sap timer update command to specify the IPX SAP updating interval. Use the undo ipx sap timer update command to restore the default. By default, the update interval is 60 seconds.
hop hop-count: Number of hops to reach the server, ranging from 1 to 15. Note that hop count more than or equal to 16 implies the service is unreachable. preference preference: Preference of service information, ranging from 1 to 255. The smaller the value, the higher the preference. By default, the preference of the static service information items is 60 and is configurable, and the preference of the dynamic items is 500 and cannot be configured. all: Deletes all static service information items.
CHAPTER 172: IPX CONFIGURATION COMMANDS View Parameter Description Interface view ticks: Delay in ticks, ranging from 0 to 30,000. One tick is 1/18 second (approximately 55 ms). Use the ipx tick command to specify a delay for sending IPX packets on the interface. Use the undo ipx tick command to restore the default. By default, the delay on an Ethernet or a VLAN interface is 1 tick, that on an asynchronous serial port is 30 ticks, and that on a synchronous serial port is 6 ticks.
Parameter network.node: Destination address. The argument network is an eight-bit hexadecimal number ranging from 0x1 to 0xFFFFFFFD. The argument node is a 48-bit value represented by a triplet of four-digit hexadecimal numbers separated by “-”. The 0s in front can be omitted when inputting. -c count: Number of ping packets to be sent. By default, the value is 5. This value ranges from 1 to 4,294,967,295. -t timeout: Timeout interval of ping packets in milliseconds.
CHAPTER 172: IPX CONFIGURATION COMMANDS Description Related command: Example Use the reset ipx routing-table statistics protocol command to clear the statistics of a specified IPX route type. display ipx routing-table statistics. # Display IPX routing statistics. display ipx routing-table statistics Routing tables: Proto/State route active added Direct 1 1 1 Static 9 9 14 RIP 0 0 0 Default 0 0 0 deleted 0 5 0 0 freed 0 5 0 0 Total 5 5 10 10 15 # Clear IPX static route statistics.
VOIP CONFIGURATION COMMANDS 173 n The voice subscriber line in this chapter refers to a digital or analog subscriber line, unless otherwise specified. address Syntax address { ip ip-address | ras | sip { ip ip-address [ port port-number ] | proxy } } undo address { ip | ras | sip { ip | proxy } } View Parameter VoIP entity view ip ip-address: IP address of the terminating gateway, namely, the destination address of a VoIP entity.
CHAPTER 173: VOIP CONFIGURATION COMMANDS [Sysname-voice] dial-program [Sysname-voice-dial] entity 10 voip [Sysname-voice-dial-entity10] match-template 12345 [Sysname-voice-dial-entity10] address ip 10.1.1.2 area Syntax area { custom | europe | north-america } undo area View Parameter Voice view custom: Busy tone defined by users. europe: Busy tone compliant with Europe standard. north-america: Busy tone compliant with North America standard.
Parameter Description string: Area ID, a string of 1 to 31 characters, which consists of digits 0 through 9 and the pound sign #. Use the area-id command to configure the area ID of the voice GW. Use the undo area-id command to remove the specified area ID. By default, no area ID is configured. The voice area ID is set in VoIP entity view and will be automatically added to the beginning of called numbers when making calls. If SIP is specified for routing, this command is invalid.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Example # Set the number of busy tone periods to 3. system-view [Sysname] voice-setup [Sysname-voice] subscriber-line 1/0 [Sysname-voice-line1/0] busytone-t-th 3 cid display Syntax cid display undo cid display View Parameter Description Analog FXS voice subscriber line view None Use the cid display command to enable caller identity delivery (CID) on an analog FXS voice subscriber line. Use the undo cid display command to disable CID.
Example ■ If a number is configured in the number template for the POTS entity associated with the local FXO interface, the interface substitutes this number for the calling number and sends it to the called side. ■ If wildcard dots (.) are used in the number configured in the number template for the POTS entity associated with the local FXO interface, the interface substitutes zeros for the calling number’s digits in the place of dots, for example, 1000 for 1...
CHAPTER 173: VOIP CONFIGURATION COMMANDS undo cid type View Parameter Analog FXS voice subscriber line view complex: Caller identification information is transmitted in multiple-data message format (MDMF). simple: Caller identification information is transmitted in single-data message format (SDMF). Description Use the cid type command to configure the format of message (which carries the calling number information) transmitted over the FXS voice subscriber line.
generated, the toneless intervals will make both parties in conversation feel uncomfortable. Related command: Example line and vad-on. # Disable comfortable noise function on subscriber line 1/0.
CHAPTER 173: VOIP CONFIGURATION COMMANDS g729r8: G.729 (the voice compression technology using conjugate algebraic-code-excited linear-prediction), requiring a bandwidth of 8 kbps. Description Use the compression command to configure the voice compression method and the preference level. Use the undo compression command to restore the default value.
Table 665 G.711 algorithm (A-law and µ-law) Packet assembly interval Packet Bytes length coded in a (bytes) time unit IP Network bandwidth IP Packet length (bytes)IP+ PPP Network bandwidth IP+PPP Coding latency 10 ms 80 120 96 kbps 126 100.8 kbps 10 ms 20 ms 160 200 80 kbps 206 82.4 kbps 20 ms 30 ms 240 280 74.7 kbps 286 76.3 kbps 30 ms G.711 algorithm (A-law and µ-law): media stream bandwidth 64kbps, minimum packet assembly interval 10 ms. Table 666 G.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Table 668 G.726 r16 algorithm Packet assembly interval Packet Bytes length coded in a (bytes) time unit IP Network bandwidth IP Packet length (bytes) IP+PPP Network bandwidth IP+PPP Coding latency 110 ms 220 18.9 kbps 266 19.3 kbps 110 ms 260 G.726 r16 algorithm: media stream bandwidth 16 kbps, minimum packet assembly interval 10 ms. Table 669 G.
Table 672 G.729 algorithm Packet assembly interval Packet Bytes length coded in a (bytes) time unit IP Network bandwidth IP Packet length (bytes) IP+PPP Network bandwidth IP+PPP Coding latency 10 ms 10 50 40 kbps 56 44.8 kbps 10 ms 20 ms 20 60 24 kbps 66 26.4 kbps 20 ms 30 ms 30 70 18.7 kbps 76 20.3 kbps 30 ms G.729 algorithm: media stream bandwidth 8 kbps, minimum packet assembly interval 10 ms.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Example # Configure to use g723r53 coding/decoding algorithm first, then the g729r8.
Table 674 Countries or regions with supported call progress tones Code Country name (including customization) IN India ID Indonesia IR Iran IE Ireland IEU Ireland (UK style) IL Israel IT Italy JP Japan JO Jordan KE Kenya KR Korea Republic LB Lebanon LU Luxembourg MO Macau MY Malaysia MX Mexico NP Nepal NL Netherlands NZ New Zealand NG Nigeria NO Norway PK Pakistan PA Panama PH Philippines PL Poland PT Portugal RU Russian Federation SA Saudi Arab
CHAPTER 173: VOIP CONFIGURATION COMMANDS Description Use the cptone country-type command to configure the current device to play the call progress tones of a specified country or region or play the customized call progress tones. Use the undo cptone country-type command to restore the default. By default, the call progress tones of China are specified. c Example CAUTION: The configuration of the cptone country-type command will take effect on all voice interfaces of all cards on the device.
Example Set the amplitude of the busy tone to 1,200.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Description Use the default entity compression command to globally configure a default codec. Use the undo default entity compression command to remove the configuration. By default, the codec with the first priority is g729r8, that with the second priority is g711alaw, that with the third priority is g711ulaw, and that with the fourth priority is g723r53.
g729: Specifies the packetization period for g729 codec. It ranges from10 to 180 milliseconds and defaults to 30 milliseconds. time-length: Packetization period for a codec. Description Use the default entity payload-size command to configure the default packetization period for a codec. Use the undo default entity payload-size command to restore the default. Example # Set the packetization period for G.711 codec to 30 milliseconds.
CHAPTER 173: VOIP CONFIGURATION COMMANDS default subscriber-line Syntax default subscriber-line { receive | transmit } gain value undo default subscriber-line { receive | transmit } gain View Parameter Voice view receive gain: Indicates the default receive gain on all subscriber lines. transmit gain: Indicates the default transmit gain on all subscriber lines. Value: Value of gain on subscriber lines, in the range of -14.0 to +13.9 dB (keeps one digit after the decimal point), and defaults to 0.
By default, the delay signal duration is 400 milliseconds. Related command: Example em-signal. # Set the delay signal duration in the delay start mode to 500 seconds.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Parameter send-dtmf milliseconds: Specifies a delay (in milliseconds) before the originating side sends DTMF signals in the immediate start mode. The value ranges from 50 to 5,000. Description Use the delay send-dtmf command to configure a delay before the originating side sends DTMF signals in the immediate start mode. Use the undo delay send-dtmf command to restore the default.
[Sysname-voice-line1/0] em-signal wink [Sysname-voice-line1/0] delay send-wink 700 delay wink-hold Syntax delay wink-hold milliseconds undo delay wink-hold View E&M voice subscriber line view Parameter wink-hold milliseconds: Specifies duration (in milliseconds) the terminating side sends wink signals in the wink start mode. The value ranges from 100 to 3,000. Description Use the delay wink-hold command to configure duration the terminating side sends wink signals in the wink start mode.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Use the undo delay wink-rising command to restore the default. By default, the maximum amount of time the originating side waits for a wink signal after sending a seizure signal is 3,000 milliseconds in the wink start mode. Related command: Example em-signal. # Set the maximum amount of time the originating side waits for a wink signal after sending a seizure signal in the wink start mode to 2,000 milliseconds.
Use the undo description command to delete the voice entity description string. By default, no description is configured for the voice entity. You can use the description command to add a description to a voice entity, which has no effect on the performance of the voice entity interface. You can view this description with the display command. Example # Add the description local-entity 10 to voice entity 10.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Description Example Use the dial-program command to enter the voice dial program view. # Enter the dial program view system-view [Sysname] voice-setup [Sysname-voice] dial-program display voice call-info Syntax View Parameter display voice call-info { brief | mark tag | verbose } Any view brief: Displays the brief information of the call information table.
Table 675 Description on fields of the display voice call-info command Field Description ViIfIndex Index of the voice interface from which the call is originated Module ID ID of a voice module that the call passes through Call direction Call direction of the call Reference Numbers Number of times of referencing the call information table of a call entity Voice entity involved in the call.
CHAPTER 173: VOIP CONFIGURATION COMMANDS CallerAddr CallerAddrSubst CallInfoTabIndex Call Leg Number ...Active Service INCOMING CALLLEG INCOMING LEG[0] { Spl Protocol LocalRef IfIndex IpAddress IpPort LegState ConnectState } : : : 0 : 2 : 0 NUMBER : 1 OUTGOING CALLLEG OUTGOING LEG[0] { Spl Protocol LocalRef IfIndex IpAddress IpPort LegState ConnectState } NUMBER : 1 : : : : : : : : : : : : : : LGS 0x0002 2884067 0.0.0.0 0 IN_STATE_ACTIVE CONN_STATE_ACTIVE LGS 0x0003 2884064 0.0.0.
Table 676 Description on fields of the display voice cmc command Field Description GblCallID Indicates the global ID of the call. CalledAddr Indicates the called number of the call. CalledAddrSubst Indicates the called number after substitution CallerAddr Indicates the caller number of the call. CallerAddrSubst Indicates the caller number after substitution CallInfoTabIndex Indicates the call information index of the call.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Example # Display the current default values and the system-default values.
display voice entity Syntax View Parameter display voice entity { all | mark entity-tag | pots | voip } Any view all: Displays all voice entities. pots: Displays all POTS entities. mark entity-tag: Displays the voice entity specified by a tag (in the range of 1 to 2147483647). voip: Displays all VoIP entities. Description Use the display voice entity command to view the configuration information of voice entities.
CHAPTER 173: VOIP CONFIGURATION COMMANDS cmc: Displays statistics about CMC. h225: Displays statistics about H.225 messages. h245: Displays statistics about H.245 messages. ras: Displays statistics about ras messages. socket: Displays statistics about socket messages. timer: Displays timeout statistics. Description Example Use the display voice ipp command to display statistics about the IPP module. # Display statistics about H.225 messages of the IPP module.
Table 679 Description on fields of the display voice ipp statistic command Field Description Setup Statistics of Setup messages CallProceeding Statistics of CallProceeding messages Alerting Statistics of Alerting messages Connect Statistics of Connect messages ReleaseComplete Statistics of ReleaseComplete messages FacilityIndUserInput Statistics of UserInput messages FacilityTCSRequest Statistics of TCS Request messages FacilityTCSAck Statistics of TCS Acknowledgement messages Facili
CHAPTER 173: VOIP CONFIGURATION COMMANDS Description Use the display voice iva statistic command to view the call statistics between IVA module and other modules. The command can display information such as the total number of call message, number of successful call message, number of failed call message of ISDN, CMC and VIM in IVA module. You can also use the keywords (such as isdn, cmc) to display the statistics of the corresponding modules.
display voice subscriber-line 5/0 Current information ----- subscriber-line5/0 Type = Analog E&M Immediate-Start Status = UP Call Status = BUSYTONE ...Description = subscriber-line5/0 Interface Private Line = None Cng = Enable Echo Canceller = Enable Echo Canceller Tail-Length = 32 Nlp On = Enable Fax Detect Mode = CNG/CED Ring Generate = Enable Receive Gain = 0.0 Transmit Gain = 0.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Table 681 Description on fields of the display voice subscriber-line command Field Description Type Type of voice subscriber line Status Status of voice subscriber line Call Status Call status of voice subscriber line Description Description of voice subscriber line Private-line Private line dial number of voice subscriber line CNG Comfortable noise configuration on voice subscriber line EchoCancel Echo duration configuration on voice subscriber
dscp media Syntax dscp media dscp-value undo dscp media View Parameter Description POTS/VoIP entity view dscp-value: DSCP value in the range of 0 to 63 or the keyword af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, and ef. Use the dscp media command to set the DSCP value in the ToS field in the IP packets that carry the RTP stream of the voice entity. Use the undo dscp media command to restore the default DSCP.
CHAPTER 173: VOIP CONFIGURATION COMMANDS system-view [Sysname] voice-setup [Sysname-voice] dtmf amplitude -8.0 dtmf sensitivity-level Syntax dtmf sensitivity-level { high | low } undo dtmf sensitivity-level View Parameter Analog FXS/FXO voice subscriber line view high: Sets the DTMF detection sensitivity high. In this mode, the reliability is low and detection errors may occur. low: Sets the DTMF detection sensitivity low.
Use the undo dtmf time command to restore the default. By default, the persisting time of sending DTMF and the interval for sending DTMF are both 120 milliseconds. Note that the configuration will apply to the whole interface once you carry out the command. Example # Set the persisting time of sending DTMF digits to 200 milliseconds, and the interval to 300 milliseconds.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Table 682 Meaning of the index numbers Index Meaning Value range Remarks 1 1 to 4,999, with The upper limit of the maximum a default of 458 value of ROWMAX or COLMAX, whichever is larger. This limit is used for detecting the inter-digit delay. A detected digit is regarded ended only when max (ROWMAX, COLMAX) < 1. 2 The lower limit of COLMAX/ROWMAX, where ROWMAX < COLMAX. An input signal is recognized as a DTMF digit only when 10 x (COLMAX/ROWMAX) > 2.
Table 682 Meaning of the index numbers Index Meaning Value range Remarks 10 The frequency of the first extra frequency point specified for detection. 300 to 3,400 Hz, with a default of 300 Hz. In addition, it must be a frequency 100 Hz greater than or less than the row and column frequency groups. 11 The frequency of the second extra frequency point specified for detection. 300 to 3,400 Hz, with a default of 3,200 Hz.
CHAPTER 173: VOIP CONFIGURATION COMMANDS tail-length milliseconds: Echo duration in milliseconds, that is, the time that elapses from when a subscriber speaks to when he hears the echo. It ranges from 0 to 64, with a default of 32. Description Use the echo-canceller command to enable echo cancellation and set the echo duration. Use the undo echo-canceller command to disable the EC function. By default, the EC function is disabled.
Use the undo echo-canceller command to restore the default. By default, the convergence rate of comfort noise amplitude is 0, the maximum amplitude of comfort noise is 256, the comfort noise mixture proportion control factor is 100, and the threshold of two-way talk is 1. Related command: Example echo-canceller. # Set the convergence rate of comfort noise amplitude to 50.
CHAPTER 173: VOIP CONFIGURATION COMMANDS View Parameter E&M voice subscriber line view delay: When using the delay start mode, the calling end occupies the trunk line, and the called end, such as PBX, will also enter the hook-off state to respond the caller till it is ready for receiving the called number. immediate: Immediate start mode. The caller end hooks off to seize the line through line E and sends the called number.
Use the undo entity command to remove the existing voice entity. In a global view, use the entity command to enter a voice entity view, and use quit to return to the dial program view. n Related command: Example The entity-number assigned to a VoIP or POTS entity must be unique among all VoIP and POTS entities. line. # Create and enter the voice entity view to configure a POTS voice entity whose identification is 10.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Example # Enable fast connection for VoIP voice entity 10. system-view [Sysname] voice-setup [Sysname-voice] dial-program [Sysname-voice-dial] entity 10 voip [Sysname-voice-dial-entity10] fast-connect hookoff-mode Syntax hookoff-mode { delay | immediate } undo hookoff-mode View Parameter Analog FXO voice subscriber line view delay: Specifies the FXO voice subscriber line to operate in the delay off-hook mode.
Use the undo hookoff-mode command to remove the binding. By default, no FXS voice subscriber line is bound to the FXO voice subscriber line. After an FXS voice subscriber line is bound to the FXO voice subscriber line, the off-hook/on-hook state of these two lines will be consistent.
CHAPTER 173: VOIP CONFIGURATION COMMANDS impedance Syntax impedance { country-name | R550 | R600 | R650 | R700 | R750 | R800 | R850 | R900 | R950 } undo impedance View Parameter Analog FXO voice subscriber line view country-name: Specifies a country so that its impedance standard is used.
line Syntax line line-number undo line View Parameter Description POTS entity view line-number: Number of a subscriber line. Use the line command to associate the voice entity with a specified voice subscriber line. Use the undo line command to remove this association. By default, there is no association between a voice entity and a voice subscriber line. Example # Associate voice entity 10 and voice subscriber line 1/0.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Table 683 Meanings of the characters in string n Description Character Meaning 0-9 Numbers from 0 to 9. Each means a digit. # and * Each means a valid digit. . A wildcard. It can match any digit of a valid number. For example, 555. . . . matches any string that begins with 555 and with four additional characters. ! The character or characters right in front of it does not appear or appears once. For example, 56!1234 can match 51234 and 561234.
are used to match the actual numbers in the received call packets to complete the calls. When configuring a POTS entity, use the match-template command to define the number template to be bound to the local voice entity. When configuring a VoIP entity, use the match-template command to define the number template on the called side. n Example In E1 voice, “T”, “#”, and “*” are not supported currently. # Specify 5557922 as a telephone number of voice entity 10.
CHAPTER 173: VOIP CONFIGURATION COMMANDS [Sysname-voice] subscriber-line 1/0 [Sysname-subscriber-line 1/0] undo nlp-on outband Syntax outband { h225 | h245 | nte } undo outband View Parameter POTS/VoIP entity view h225: Adopts H.225 out-of-band to transmit DTMF. h245: Adopts H.245 out-of-band to transmit DTMF. nte: Adopts named telephone event (NTE) to transmit DTMF. Description Use the outband command to configure out-of-band DTMF transmission.
g726r16: Packetization period in milliseconds for g726r16 codec, an integral multiple of 10 in the range of 10 to 110, with a default of 30. g726r24: Packetization period in milliseconds for g726r24 codec, an integral multiple of 10 in the range of 10 to 70, with a default of 30. g726r32: Packetization period in milliseconds for g726r32 codec, an integral multiple of 10 in the range of 10 to 50, with a default of 30.
CHAPTER 173: VOIP CONFIGURATION COMMANDS specific: Uses the specific algorithm provided by the voice gateway. Description Use the plc-mode command to configure a packet loss compensation mode for the analog FXS/FXO voice subscriber line. Use the undo plc-mode command to restore the default. By default, the gateway-specific algorithm is used for packet loss compensation. Example # Configure the voice gateway to use the universal packet loss compensation algorithm.
register-number Syntax register-number undo register-number View Parameter Description POTS entity view None Use the register-number command to enable the VoIP gateway to register numbers of a voice entity with an H.323 gatekeeper or SIP server. Use the undo register-number command to disable a gateway from registering numbers of a voice entity with an H.323 gatekeeper or SIP server. By default, the VoIP gateway registers numbers of the POTS voice entity with an H.323 gatekeeper (GK) or SIP server.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Related command: Example display voice iva statistic. # Clear calling statistics on CMC module. reset voice cmc statistic reset voice ipp statistic Syntax View Parameter Description Related command: Example reset voice ipp statistic User view None Use the reset voice ipp statistic command to reset IPP statistics. display voice ipp statistic. # Clear IPP statistics.
Parameter value: Value of the payload type field in RTP packets, in the range of 96 to 127. Description Use the rtp payload-type nte command to configure the payload type field in RTP packets in the case of DTMF relay using NTE. Use the undo rtp payload-type nte command to restore the default. By default, the payload type field in RTP packets is set to 101 in the case of DTMF relay using NTE.
CHAPTER 173: VOIP CONFIGURATION COMMANDS send-ring Syntax send-ring undo send-ring View Parameter Description Voice entity view None Use the send-ring command to enable the local end to play ringback tone. Use the undo send-ring command to disable the local end to play ringback tone. By default, the local end does not play ringback tone. In VoIP view, this command is applicable only after the fast connection function is enabled.
Example # Change the status of voice entity 4 to DOWN. system-view [Sysname] voice-setup [Sysname-voice] dial-program [Sysname-voice-dial] entity 4 pots [Sysname-voice-dial-entity4] shutdown shutdown (voice subscriber line view) Syntax shutdown undo shutdown View Parameter Description FXS/FXO/E&M voice subscriber line view None Use the shutdown command to set the voice subscriber line DOWN. Use the undo shutdown command to restore the default status of the voice subscriber line.
CHAPTER 173: VOIP CONFIGURATION COMMANDS threshold ranges from 0 to 200. Normally, the signal amplitude on the links without traffic is in the range of 2 to 5. time-length: Silence duration for automatic on-hook. Upon expiration of this duration, the system goes on-hook automatically. It ranges from 2 to 7,200 seconds. Description Use the silence-th-span command to set the silence duration for automatic on-hook. Use the undo silence-th-span command to restore the default.
View Parameter Description Voice view line-number: Voice subscriber line number. Use the subscriber-line command to enter analog FXS, FXO, and E&M, or digital E1/T1 voice subscriber line view. Use the subscriber-line line-number command to enter the voice subscriber line view.
CHAPTER 173: VOIP CONFIGURATION COMMANDS timer first-dial Syntax timer first-dial seconds undo timer first-dial View Parameter Description FXS/FXO voice subscriber line view seconds: Maximum interval in seconds between off-hook and dialing the first digit, in the range of 1 to 300. Use the timer first-dial command to configure the maximum interval between off-hook and dialing the first digit. Use the undo timer first-dial command to restore the default setting.
off-hook, the bound FXO voice subscriber line goes off-hook, too. When the FXS voice subscriber line in the off-hook state needs to connect the FXO voice subscriber line to originate a call over PSTN, the FXO voice subscriber line must first perform an on-hook operation, and then perform an off-hook operation to send the called number. Related command: Example hookoff-mode. # Set the interval from on-hook to off-hook for FXO voice subscriber line 1/0 to 600 milliseconds.
CHAPTER 173: VOIP CONFIGURATION COMMANDS View Parameter E&M voice subscriber line view seconds: Maximum duration in seconds the system waits for a digit, in the range of 3 to 600. infinity: Infinite time. Description Use the timer wait-digit command to configure the maximum time duration the system waits for a digit. Use the undo timer wait-digit command to restore the default time settings. By default, the maximum time duration the system waits for a digit is 5 seconds.
system-view [Sysname] voice-setup [Sysname-voice] subscriber-line 1/0 [Sysname-voice-line1/0] transmit gain -6.7 tunnel-on Syntax tunnel-on undo tunnel-on View Parameter Description VoIP entity view None Use the tunnel-on command to enable tunnel function. Use the undo tunnel-on command to disable tunnel function. By default, the tunnel function is disabled. Tunnel function can assist in negotiating process of such nonstandard H.245 message as transmitting DTMF digit transparently.
CHAPTER 173: VOIP CONFIGURATION COMMANDS undo type View Parameter Description Analog E&M voice subscriber line view 1, 2, 3 and 5: Correspond respectively to the four signal types of analog E&M subscriber lines, i.e. type 1, 2, 3 and 5. Use the type command to configure the analog E&M subscriber line signal type. Use the undo type command to cancel the existing settings. By default, the analog E&M subscriber line signal type is type 5.
system-view [Sysname] voice-setup [Sysname-voice] dial-program [Sysname-voice-dial] entity 10 pots [Sysname-voice-dial-entity10] vad-on vi-card busy-tone-detect Syntax vi-card busy-tone-detect { auto index line-number | custom area-number index argu f1 f2 p1 p2 p3 p4 p5 p6 p7 } undo vi-card busy-tone-detect custom index View Parameter Voice view index: Index of busy tone type, in the range of 0 to 3. line-number: Voice subscriber line number.
CHAPTER 173: VOIP CONFIGURATION COMMANDS When detecting a busy tone on the FXO interface, the system will automatically calculate the parameters related to busy tone detection. You can use the display current-configuration command to displays the settings of these parameters. c Related commands: Examples CAUTION: After you use the vi-card busy-tone-detect custom command to configure the parameters related to the busy tone detection, these parameters do not take effect immediately.
freq1 and freq2: Two frequencies in Hz. The frequency range is related to the combination mode. In the case of frequency superimposition or alternation, the two frequencies fall in the range of 300 Hz to 3,400 Hz. In the case of frequency modulation, the two frequencies fall in the range of 300 Hz to 3,400 Hz, and the sum of and the absolute difference between the two frequencies also fall in this range. time1: Make time for the first make-to-break ratio in milliseconds, in the range of 30 to 8,192.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Related command: c Example display version on page 2417, and display device on page 2251. CAUTION: You can use this command to reset only the analog voice cards of SIC and MIM. To reset digital voice card and FIC analog voice card, carry out the reboot slot slot-number command in system view. # Reset the voice card of slot 3.
Example # Disable the tunnel function on the called gateway. system-view [Sysname] voice-setup [Sysname-voice] undo voip called-tunnel enable voip called-start Syntax voip called-start { fast | normal } undo voip called-start View Parameter Voice view fast: The called GW initializes calls in a fast way. normal: The called GW initializes calls in a non-fast way. Description Use the voip call-start command to configure a call initialization mode for the called GW.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Description Use the voip timer command to set the duration for switching from a VoIP entity to a backup POTS entity after a VoIP call failure. Use the undo voip timer command to restore the default. By default, the duration for switching from a VoIP entity to a backup POTS entity after a call failure is 5 seconds. Example # Configure the duration for switching from a VoIP entity to a backup POTS entity after a call failure to 3 seconds.
Table 684 DSCP values Description Keyword DSCP value in binary DSCP value in decimal cs3 011000 24 cs4 100000 32 cs5 101000 40 cs6 110000 48 cs7 111000 56 default 101110 46 ef 101110 46 Use the vqa dscp command to globally set the DSCP subfield in the ToS field in IP packets that carry the RTP stream or voice signaling. Use the undo dscp media command to restore the default. By default, the DSCP subfield is set to ef, namely, 101110.
CHAPTER 173: VOIP CONFIGURATION COMMANDS Example # Set the duration of monitoring DSP buffered data to 270 milliseconds.
DIAL PLAN CONFIGURATION COMMANDS 174 caller-permit Syntax caller-permit calling-string undo caller-permit { calling-string | all } View Parameter POTS/VoIP/VoFR entity view all: Specifies all calling numbers. calling-string: Calling number permitted to originate a call to the local voice entity, in the format of { [ + ] string [ $ ] }| $, with a maximum length of 32 characters. The following describes the symbols in the format: ■ +: Plus sign.
CHAPTER 174: DIAL PLAN CONFIGURATION COMMANDS Table 685 Description of characters in a string n Character Meaning % Indicates the sub-expression before it appears multiple times or does not appear. For example, 9876(54)% can match 9876, 987654, 98765454, 9876545454, and so on. [] Indicates a range for matching. For example, [1-36A] indicates a single character among 1, 2, 3, 6, and A can be matched. () Indicates a string of characters. For example, (123) indicates the character string 123.
View Parameter POTS entity view string: Prefix code, a character string consisting of up to 31 characters that can include 0 through 9, #, and *. Table 686 describes these characters: Table 686 Description of characters in the string argument Description Character Meaning 0-9 Digits 0 through 9. , One comma represents a pause of 500 milliseconds and it can be positioned anywhere in a number. # and * Indicates a valid digit each.
CHAPTER 174: DIAL PLAN CONFIGURATION COMMANDS Related command: Example number-substitute. # Display the configuration information of all number substitution rule lists.
Example # Set the dot match rule of number substitution rule list 20 to right-left.
CHAPTER 174: DIAL PLAN CONFIGURATION COMMANDS max-number: Maximum number of call connections in a maximum-call-connection set, in the range of 1 to 120. all: Specifies all the maximum-call-connection sets. Description Use the max-call command to configure maximum-call-connection sets. Use the undo max-call command to remove the specified maximum-call-connection set or all maximum-call sets. By default, no maximum-call-connection sets are configured.
while the latter is used to configure a serial number for a maximum-call-connection set and the maximum number of call connections. Related command: Example max-call (in voice dial program view). # Bind voice entity 10 to maximum-call-connection set 1.
CHAPTER 174: DIAL PLAN CONFIGURATION COMMANDS number-priority Syntax number-priority peer enable undo number-priority peer View Voice dial program view Parameters None Description Use the number-priority peer enable command to match a number against a voice entity match template first. Use the undo number-priority peer command to restore the default. By default, a number starting with “*” or “#” will first match against a service feature code.
system-view [Sysname] voice-setup [Sysname-voice] dial-program [Sysname-voice-dial] number-substitute 1 [Sysname-voice-dial-substitute1] priority Syntax priority priority-order undo priority View Parameter Description Voice entity view priority-order: Priority of a voice entity, in the range of 0 to 10. The smaller the value, the higher the priority. Use the priority command to configure the priority of a voice entity.
CHAPTER 174: DIAL PLAN CONFIGURATION COMMANDS Description Use the private-line command to configure the private line auto ring-down (PLAR) function. Use the undo private-line command to disable the private line auto ring-down function. This function is disabled by default. This command is applicable to FXO, FXS, analog E&M interface and digital E1 voice interface.
Table 687 Meanings of characters in the string argument Character Meaning 0-9 Digit 0 through 9. # and * Valid digit each. . Wildcard, which can match any valid digit. For example, 555.... can match any number beginning with 555 and ending up with four additional characters. ! The character or sub-expression before the sign does not appear or appears only once. For example, 56!1234 can match 51234 and 561234.
CHAPTER 174: DIAL PLAN CONFIGURATION COMMANDS ■ For the left-right dot match rule, digits which the dots in the output-number argument correspond to are extracted from left to right according to the number of dots in the output-number argument to replace the dots in the output-number argument one by one. The digits that are not extracted in the input-number argument are discarded.
Table 690 Input numbering plan Numbering plan Description isdn ISDN telephone numbering plan national National numbering plan private Private numbering plan reserved Reserved numbering plan telex Telex numbering plan unknown Unknown numbering plan output-numbering-plan: Numbering plan for an output number involved in number substitution. For the values, see Table 691.
CHAPTER 174: DIAL PLAN CONFIGURATION COMMANDS # Configure number substitution rule 2 for number substitution rule list 1 as follows: ■ Input number: 92 ■ Output number: 2 [Sysname-voice-dial-substitute1] rule 2 ^92 2 # Configure number substitution rule 3 for number substitution rule list 1 as follows: ■ Input number: 93 ■ Output number: 3 [Sysname-voice-dial-substitute1] rule 3 ^93 3 # Configure number substitution rule 3 for number substitution rule list 1 as follows: ■ Input number: 93
Table 692 Meanings of integers Description Integer Meaning Description 1 Exact match The more digits of a digit string are matched from left to right, the higher the precision is. The system stops using the rule once a digit cannot be matched uniquely. 2 Priority Voice entity priorities are divided into 11 levels numbered from 0 to 10. The smaller the value is, the higher the priority is. That means level 0 has the highest priority.
CHAPTER 174: DIAL PLAN CONFIGURATION COMMANDS View Parameter Description Voice dial program view max-number: Maximum number of voice entities found, in the range 1 to 128. Use the select-rule search-stop command to configure the maximum number of voice entities found. Use the undo select-rule search-stop command to restore the maximum number of voice entities found to 128. By default, the maximum number of voice entities found is 128.
Table 693 Meanings of values Description Value Meaning 3 VoFR voice entity Use the select-rule type-first command to configure a rule for voice entity type selection priority. Use the undo select-rule type-first command to remove a rule for voice entity type selection priority. By default, voice entities are not selected according to their types. The command is used to configure the sequence of voice entity type selection priority.
CHAPTER 174: DIAL PLAN CONFIGURATION COMMANDS system-view [Sysname] voice-setup [Sysname-voice] dial-program [Sysname-voice-dial] entity 10 pots [Sysname-voice-dial-entity10] select-stop send-number Syntax send-number { digit-number | all | truncate } undo send-number View Parameter POTS entity view digit-number: Number of digits (that are extracted from the end of a number) to be sent, in the range of 0 to 31. It is not greater than the total number of digits of the called number.
substitute (subscriber line view/voice entity view) Syntax substitute { called | calling } list-number undo substitute { called | calling } View Parameter POTS/VoIP/VoFR voice view/Subscriber line voice entity view called: Applies the number substitution rule to a called number. calling: Applies the number substitution rule to a calling number. list-number: Serial number of a number substitution rule list configured by using the number-substitute command), in the range of 1 to 2147483647.
CHAPTER 174: DIAL PLAN CONFIGURATION COMMANDS substitute (voice dial program view) Syntax substitute { incoming-call | outgoing-call } { called | calling } list-number undo substitute { incoming-call | outgoing-call } { called | calling } { list-number | all } View Parameter Voice dial program view incoming-call: Binds the calling/called number of incoming calls to the number substitution rule list.
# Apply number substitution rule lists 5, 6, and 8 to called numbers of outgoing calls.
CHAPTER 174: DIAL PLAN CONFIGURATION COMMANDS
E1 AND T1 CONFIGURATION COMMANDS 175 ani Syntax ani { all | ka } undo ani View Parameter R2 CAS view all: Specifies the remote end to send the category of the calling party and calling number. ka: Specifies the remote end to send only the category of the calling party. Description Use the ani command to enable the terminating point to request calling party information (service category and calling number) from the originating point during call connection.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS ani-offset Syntax ani-offset number undo ani-offset View Parameter Description R2 CAS view number: Number of digits to be collected, in the range of 1 to10. Use the ani-offset command to configure the number of called number digits that need to be collected prior to requesting calling party information. Use the undo ani-offset command to restore the default value.
By default, the originating party requires the terminating party to send answer signal. This command applies to R2 signaling only. The R2 line signaling coding schemes in some countries do not include answer signal sending. To accommodate to such schemes, you must configure the answer enable command on the originating point. This allows the terminating point to set up calls after a specified time period. Related command: Example re-answer enable and timer dl re-answer.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS View E1/T1 interface view Parameter ts-set-number: Number of a created timeslot (TS) group, in the range of 0 to 30. The number of a T1 timeslot group ranges from 0 to 23. Description Use the cas command to enter R2 CAS view, digital E&M signaling view, or digital LGS signaling view. After entering a signaling view, you may configure signaling parameters as desired.
During R2 line signaling exchange, trunk circuit reset is sometimes controlled by the called party (terminating point). The practice in some countries in this case is that after the terminating point receives a clear-forward signal from the originating point, it sends back a clear-back signal as an acknowledgement and then a release-guard signal to indicate that the line at the terminating point side is fully released. Related command: Example mode.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS TS 8 TS 9 TS 10 TS 11 TS 12 TS 13 TS 14 TS 15 TS 17 TS 18 Description Private Line Cng Echo Canceller Echo Canceller Tail-Length Nlp On Fax Detect Mode Ring Generate Receive Gain Transmit Gain DTMF Threshold Digital PCM Type = = = = = = = = = = = = = = = = = = = = = = IDLE IDLE IDLE IDLE IDLE IDLE IDLE IDLE IDLE IDLE subscriber-line5/0:0 Interface None Enable Enable 32 Enable CNG/CED Enable 0.0 0.
undo dl-bits { answer | blocking | clear-back | clear-forward | idle | seize | seizure-ack | release-guard } { received | transmit } View Parameter R2 CAS view answer: Answer signal of R2 line signaling. blocking: Blocking signal of R2 line signaling. clear-back: Clear-back signal of R2 line signaling. clear-forward: Clear-forward signal of R2 line signaling. idle: Idle signal of R2 line signaling. seize: Seizure signal of R2 line signaling.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS Related command: Example seizure-ack enable and answer enable. # Set the ABCD bit pattern for received R2 idle signal to 1101, and to 1011 for transmitted R2 idle signal.
value: 0 or 1. 0 indicates that DTMF detection is sensitive while “1” indicates that DTMF detection is insensitive. Description Use the dtmf threshold digital command to set the DTMF detection sensitivity. Use the undo dtmf threshold digital command to restore the default DTMF detection sensitivity. By default, the DTMF detection is insensitive. The more sensitive the DTMF detection is, the larger the tolerance of DTMF collection is.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS system-view [Sysname] controller e1 1/0 [Sysname-e1 1/0] timeslot-set 0 timeslot-list 1-31 signal r2 [Sysname-e1 1/0] cas 0 [Sysname-cas1/0:0] final-callednum enable force-metering enable Syntax force-metering enable undo force-metering enable View Parameter Description R2 CAS view None Use the force-metering enable command to enable R2 metering signal processing.
Description Use the group-b enable command to enable R2 signaling to use Group B signals to complete registers exchange. Use the undo group-b enable command to disable R2 signaling from using Group B signals to complete registers exchange. By default, Group B signals are used to complete registers exchange. This command applies to R2 signaling only.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS After configuring a target match template with the match-template command for a voice entity, you need to associate the entity with a logical interface to indicate from which interface the traffic destined for the target should be routed. Related command: Example timeslot-set, entity on page 2594, and pri-set. # Associate a POTS entity with a TS group on an E1 interface.
Use the undo mode command to restore the default. By default, ITU-T R2 signaling applies. This command applies to R2 signaling only. The R2 signaling standards implemented in different countries and regions may vary. They are called ITU variants. To accommodate to the R2 signaling in a country or region, you may use the mode command. The system can automatically select the appropriate subscriber line state, service category, metering signal, and signal values of C and D bits, and so on.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS Companding laws are adopted to quantize signals unevenly for the purpose of reducing noise and improving signal-to-noise ratio. Underpinning this approach are the statistics about voice signals, which indicate that lower power signals are more likely present than high power signals. According to CCITT, when devices in two countries use different companding schemes to communicate, the side using µ-law is responsible for converting signals to A-law.
When creating a PRI set on a T1 interface, note the following: n Example ■ TS24 is used as D channel for signaling transmission, and other timeslots as B channels for data transmission. You may randomly bind these timeslots into a PRI set (as the D channel, TS24 is automatically bound). This PRI set is logically equivalent to an ISDN PRI interface in the form of 23B + D. ■ For the created PRI set, the system automatically creates a serial interface named serial number:23.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS [Sysname-e1 1/0] cas 0 [Sysname-cas 1/0:0] re-answer enable register-value Syntax register-value { billingcategory | callcreate-in-groupa | callingcategory | congestion | demand-refused | digit-end | nullnum | req-billingcategory | req-callednum-and-switchgroupa | req-callingcategory | reqcurrentcallednum-in-groupc | req-currentdigit | req- firstcallednum-in-groupc | req-firstcallingnum | req-firstdigit | req-lastfirstdigit | req-lastseconddigit | req-l
req-callingcategory value: Specifies the send calling category signal value, in the range 1 to 16. req-currentcallednum-in-groupc value: Specifies the send current called number signal in Group C state, in the range 1 to 16. req-currentdigit value: Specifies the send current digit signal, in the range 1 to 16. req-firstcallednum-in-groupc value: Specifies the send first digit signal value in Group C state, in the range 1 to 16.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS You may set a signal value to 16 to indicate that the signal function does not exist. For example, if the send last digit signal is not available in a national R2 signaling variant, you may set the value for req-lastfirstdigit to 16. The purpose of the register-value command is to assign values for signals requesting responses from the remote end.
You may use this command to adapt values of bits C and D to different line signaling coding schemes. The settings of bits A and B in this command however are not necessarily the real ones during transmission. Related command: Example cas and reverse. # Set bits C and D of R2 line signaling to 11.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS undo seizure-ack enable View Parameter Description R2 CAS view None Use the seizure-ack enable command to configure the originating point to require the terminating point to send seizure acknowledgement signal during R2 line signaling exchange. Use the undo seizure-ack enable command to restore the default. By default, the originating point requires the terminating point to send seizure acknowledgement signal. This command applies to R2 signaling only.
min: Selects the timeslot with the smallest number from currently available timeslots. minpoll: Selects the timeslot with the lowest number from available timeslots in the first timeslot polling; in later pollings, selects in ascending order timeslots with numbers greater than the one picked out in the previous polling. Suppose TS1 and TS3 are not available. In the first polling, TS2 will be picked out for use and in the next polling, TS4.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS system-view [Sysname] controller e1 1/0 [Sysname-e1 1/0] timeslot-set 5 timeslot-list 1-31 signal r2 [Sysname-e1 1/0] cas 5 [Sysname-cas1/0:5] sendring ringbusy enable signal-value Syntax signal-value { received idle | received seize | transmit idle | transmit seize } ABCD undo signal-value { received idle | received seize | transmit idle | transmit seize } View Parameter Digital E&M voice subscriber line view received idle: Indicates the re
undo special-character character number View Parameter R2 CAS view character: Special character, which can be a pound sign (#) or asterisk (*), A, B, C, or D. number: Code of register signal, in the range 11 to 16. Description Use the special-character command to configure the special characters acceptable during register signal exchange. Use the undo special-character command to remove the configured special characters. By default, no special characters are configured.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS 23: Indicates the subscriber line is created for the ISDN PRI set created on a T1 interface. Description Use the subscriber line command to enter E1/T1 voice subscriber line view. Upon creation of a TS group on an E1/T1 interface, the system automatically creates a logical voice subscriber line numbered in the form of E1/T1 interface number:TS group number.
Use undo tdm-clock command to restore the default. By default, the TDM clock source for an E1 or T1 interface is the internal clock. When digital voice E1/T1 interfaces perform TDM timeslot interchange, it is important for them to achieve clock synchronization to prevent frame slips and bit errors. Depending on your configurations on E1/T1 interfaces, the system adopts different clocking approaches.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS timeout time of answer signals for internal function call in a module is configured at the terminating point. clear-back time: Timeout time in milliseconds of R2 clear-back signal, in the range of 100 to 60,000 with a default of .10,000. After the terminating point sends a clear-back signal, it should recognize the forward signal sent back by the originating point within the timeout time.
Parameter Description time: Delay before sending a DTMF signal in milliseconds, in the range of 50 to 10,000. Use the timer dtmf command to configure the delay from when the originating point receives a seizure acknowledgement signal to when it starts sending DTMF signals. Use the undo timer dtmf command to restore the default. By default, the delay is 50 milliseconds. This command applies to R2 signaling only.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS This command applies to R2 signaling only. When the terminating point sends a backward register pulse signal, A-3 for example, the signal must persist for a specified time period. When the originating point receives the signal, it sends back a Group II forward signal. When the originating point recognizes the pulse signal, A4, A6, or A15, it stops sending any forward signal, and terminates the register signal exchange.
timer ring Syntax timer ring { ringback | ringbusy } time undo timer ring { ringback | ringbusy } View Parameter R2 CAS view ringback time: Sets the duration in milliseconds of playing ringback tone, in the range of 1,000 to 90,000. ringbusy time: Sets the duration in milliseconds of playing busy tone, in the range of 1,000 to 90,000. Description Use the timer ring command to configure the duration of playing a signal tone when R2 signaling is adopted.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS timeslots-list: Timeslot range. Timeslots are numbered 1 through 31 for an E1 interface and 1 through 24 for a T1 interface. TS 16 for an E1 interface (or TS24 for a T1 interface) is used to transmit control signaling. signal: Specifies a signaling mode for the TS group, which should be consistent with that adopted by the central office.
Parameter timeslots-list: Timeslot range. Timeslots are numbered 1 through 31 on an E1 interface and 1 through 24 on a T1 interface. You may specify a single timeslot by specifying a number, a range of timeslots by specifying a range in the form of number1-number2, or several discrete timeslots by specifying number1, number2-number3. Examples are 1-14, 15, 17-31. dual: Bidirectional trunk. in: Incoming trunk. out: Outgoing trunk.
CHAPTER 175: E1 AND T1 CONFIGURATION COMMANDS query: Queries status of the trunk circuit of specified timeslots to see whether the circuit is busy, open, or blocked in real time. reset: Resets the trunk circuit of specified timeslots when it cannot automatically reset. You may need to do this if the state of an administratively blocked or opened circuit cannot recover for example. timeslots timeslots-list: Specifies a timeslot range.
FAX OVER IP CONFIGURATION COMMANDS 176 default entity fax Syntax default entity fax baudrate { 2400 | 4800 | 9600 | 14400 | disable | voice } default entity fax ecm default entity fax level level default entity fax local-train threshold threshold default entity fax nsf-on default entity fax protocol { standard-t38 | t38 } [ hb-redundancy number | lb-redundancy number ] default entity fax protocol pcm { g711alaw | g711ulaw } default entity fax train-mode { local | ppp } undo default entity fax { baudrate |
CHAPTER 176: FAX OVER IP CONFIGURATION COMMANDS local-train threshold threshold: Specifies the threshold percentage of fax local training (in the range of 0 to 100). The default value is 10. nsf-on: Enables NSF message transmission. It is disabled by default. protocol: Specifies the transport protocol of the fax. By default, the T.38 fax protocol is applied. Both hb-redundancy number and lb-redundancy number default to 0. ■ standard-t38: Adopts the standard T.38 (UDP) fax protocol, which supports H.
Parameter Description Example None Use the display voice fax statistics command to view the FoIP statistics. # Display the FoIP statistics.
CHAPTER 176: FAX OVER IP CONFIGURATION COMMANDS ECM : Non-ECM: 0 0 } Statistics about release reason: { WAIT_DP_BEG_DEMODULATE_TIMEOUT WAIT_DP_BEG_MODULATE_TIMEOUT WAIT_DP_END_DEMODULATE_TIMEOUT WAIT_DP_END_MODULATE_TIMEOUT WAIT_FRAMEACK_TIMEOUT WAIT_T30MSG_PSTN_TIMEOUT WAIT_T30MSG_IP_TIMEOUT SPOOL_TIME_OVER GET_INVALID_T30MESSAGE IPP_CALL_RELEASE NORMAL_RELEASE UNKNOWN_REASON } : : : : : : : : : : : : 0 0 0 0 0 0 0 0 0 0 0 0 Table 696 Description on fields of the display voice fax statistics co
Table 696 Description on fields of the display voice fax statistics command Field Description SPOOL_TIME_OVER Statistics of the number of connections released in the case that the number of spooling attempts exceeds the maximum GET_INVALID_T30MESSAGE Statistics of the number of connections released owing to invalid T.
CHAPTER 176: FAX OVER IP CONFIGURATION COMMANDS Use the undo fax baudrate command to restore the default maximum fax baud rate. Note that if the baud rate is set to a value other than “disable” and “voice”, the rate is negotiated first in accordance with the corresponding fax protocol. Here the rate refers to the allowed maximum rate, instead of the actual rate. Example # Configure the gateway to negotiate the fax rate in accordance with the V.29 fax protocol.
fax level Syntax fax level level undo fax level View POTS/VoIP/VoFR entity view Parameter level: Level of the energy transmitted by a gateway carrier in dBm, in the range of -60 to -3. The greater the value is, the higher the energy is. The smaller the value is, the higher the attenuation is. Description Use the fax level command to configure the transmit energy level of a gateway carrier. Use the undo fax level command to restore the default.
CHAPTER 176: FAX OVER IP CONFIGURATION COMMANDS performed between two facsimile terminals and is transparent to the gateways. Therefore, for the point-to-point training, the gateway does not participate in rate training and the threshold is invalid. n Example When the local training mode is adopted, the local training threshold configured with the fax local-train threshold command is valid.
[Sysname-voice-dial] entity 10 pots [Sysname-voice-dial-entity10] fax nsf-on fax protocol Syntax fax protocol { t38 | standard-t38 } [ hb-redundancy number | lb-redundancy number ] fax protocol pcm { g711alaw | g711μlaw } undo fax protocol View Parameter POTS/VoIP entity view t38: Uses T.38 fax protocol. With this protocol, a fax connection can be set up quickly. standard-t38: Uses the standard T38 protocol, which supports H.323 and SIP.
CHAPTER 176: FAX OVER IP CONFIGURATION COMMANDS Example ■ Increasing the number of redundant packets will improve reliability of network transmission and reduce packet loss ratio. A great amount of redundant packets, however, can increase bandwidth consumption to a great extent and thereby, in the case of low bandwidth, affect the fax quality seriously. Therefore, the number of redundant packets should be selected properly according to the network bandwidth.
reset voice fax statistics Syntax View Parameter Description Example reset voice fax statistics User view None Use the reset voice fax statistics command to clear FoIP statistics. # Clear FoIP statistics. reset voice fax statistics voip h323-conf tcs-t38 Syntax voip h323-conf tcs-t38 undo voip h323-conf tcs-t38 View Parameter Description Voice view None Use the voip h323-conf tcs-t38 command to enable the voice gateway in H.323 slow-start mode to contain the T.
CHAPTER 176: FAX OVER IP CONFIGURATION COMMANDS Example # Disable the voice gateway in H.323 slow-start mode from containing T.38 capability description in its capability set.
H.323 CONFIGURATION COMMANDS 177 area-id Syntax area-id string undo area-id [string ] View Parameter Description Gatekeeper client view string: Area ID, a digit string that is 1 to 31 characters in length. The pound signs (#) can be used as delimiters in the string. Use the area-id command to assign an area ID to the H.323 gateway. Use the undo-area-id command to remove the specified or all area IDs. By default, no area ID is assigned to the H.323 gateway.
CHAPTER 177: H.323 CONFIGURATION COMMANDS Parameter Description Example None Use the display voice gateway command to display the registration state information of the voice gateway, such as the registration state, gateway alias, and local telephone number list of the gateway. # Display the registration state information of the voice gateway.
Description Use the gk-client command to enter gatekeeper client view to configure voice and gatekeeper parameters. Use the quit command to exit this view. Related command: Example area-id, gk-2nd-id, gk-id, gw-address, gw-id, and ras-on. # Enter gatekeeper client view.
CHAPTER 177: H.323 CONFIGURATION COMMANDS [Sysname-voice-gk] gk-id gk-center gk-addr 1.1.1.1 [Sysname-voice-gk] gk-2nd-id gk-backup gk-addr 1.1.1.2 gk-id Syntax gk-id gk-name gk-addr gk-ipaddress [ ras-port ] undo gk-id View Parameter Gatekeeper client view gk-name: Gatekeeper name, a string of 1 to 128 case sensitive characters. gk-ipaddress: IP address of gatekeeper. ras-port: RAS port used by the gatekeeper, an integer in the range 1 to 65535. The default is 1719.
Use the undo gk-security call enable command to disable security calling on the voice gateway. By default, security calling is enabled. c Example CAUTION: Disable security calling for the voice gateway if the called gatekeeper cannot handle call tokens. # Disable security calling for the voice gateway.
CHAPTER 177: H.323 CONFIGURATION COMMANDS undo gw-address View Parameter Description Gatekeeper client view ip-address: Source IP address to be bound to the voice gateway. Use the gw-address command to bind a source IP address with the voice gateway. Use the undo gw-address command to remove the binding. By default, no source IP address is bound to the voice gateway. c Related command: Example CAUTION: ■ Use this command before configuring the ras-on command.
Related command: Example area-id, gk-2nd-id, gk-id, gw-address, and ras-on. # Assign the alias citya-gw to the gateway. system-view [Sysname] voice-setup [Sysname-voice] gk-client [Sysname-voice-gk] gw-id citya-gw ras-on Syntax ras-on undo ras-on View Parameter Description Gatekeeper client view None Use the ras-on command to activate gatekeeper client to register with the gatekeeper. Use the undo ras-on command to deactivate gatekeeper client.
CHAPTER 177: H.323 CONFIGURATION COMMANDS View Parameter Description Voice view descriptor: H.323 descriptor, comprising 1 to 64 characters. Use the voip h323-descriptor command to configure an H.323 descriptor for the voice gateway. Use the undo voip h323-descriptor command to restore the default H.323 descriptor. By default, the descriptor is Wqldg0Hcwfydz. You are recommended to use the default descriptor.
SIP CONFIGURATION COMMANDS 178 display voice sip call-statistics Syntax View Parameter Description Example display voice sip call-statistics Any view None Use the display voice sip call-statistics command to display the statistics about all SIP calls. # Display the statistics about all SIP calls.
CHAPTER 178: SIP CONFIGURATION COMMANDS transaction locate failures: user not registered: user not available: request with missing headers: response-no To tag in response: response - invalid via: messages without headers rcvd: SDP decode failures: registration timeouts: retransmitted requests received: transaction timeouts: 0 0 0 0 0 0 0 0 0 0 0 Table 698 Description on fields of the display voice sip call-statistics command Field Description TPT Message Statistics about SIP transport layer mess
Table 698 Description on fields of the display voice sip call-statistics command Field Description response - invalid via Statistics of response messages with an invalid via field in SIP messages without headers Statistics of received messages without headers in SIP rcvd SDP decode failures Statistics of SDP decoding failures in SIP registration timeouts Statistics of registration timeouts in SIP retransmitted requests received Statistics of received transmission requests in SIP transaction
CHAPTER 178: SIP CONFIGURATION COMMANDS View Parameter Description POTS/VoIP entity view None Use the outband sip command to configure the SIP out-of-band transmission. Use the undo outband sip command to restore the default DTMF transmission mode. By default, the inband DTMF transmission mode is adopted. Example # Configure the out-of-band SIP DTMF transmission for VoIP entity 10.
register-enable Syntax register-enable { off | on } undo register-enable View Parameter SIP client view off: Disables the SIP registration function. on: Enables the SIP registration function. Description Use the register-enable on command to enable the SIP registration function. Use the register-enable off command or the undo register-enable command to disable the SIP registration function. By default, the SIP registration function is disabled. Example # Enable the SIP registration function.
CHAPTER 178: SIP CONFIGURATION COMMANDS By default, no registrar information is configured on the SIP UA. You can use this command only when the SIP registration function is disabled. Example # Configure the IP address 169.54.5.10, the port number 1120, and the aging time 120 seconds for the master registrar. system-view [Sysname] voice-setup [Sysname-voice] sip [Sysname-voice-sip] registrar ipv4 169.54.5.
undo sip-comp { callee | from } View Parameter SIP client view callee: Extracts the called number from the To field. from: Configures the device to use the IP address in the To field as the IP address in the From field when sending a SIP request for interoperability with other vendors. By default, the From field indicates the calling address and the To field indicates the called address. Description Use the sip-comp command to configure SIP compatibility.
CHAPTER 178: SIP CONFIGURATION COMMANDS [Sysname-voice] sip [Sysname-voice-sip] sip-comp agent company 1.0 sip-comp server Syntax sip-comp server product-name product-version undo sip-comp server View SIP client view Parameters server product-name product-version: Indicates the content of the Server header field in SIP response messages.
By default, IP address is used. Example # Set the domain name of the SIP device to hello.com. system-view [Sysname] voice-setup [Sysname-voice] sip [Sysname-voice-sip] sip-domain hello.com source-ip Syntax source-ip ip-address undo source-ip View Parameter Description SIP client view ip-address: IPv4 address. Use the source-ip command to configure the source IP address bound to the packets sent by the UA. Use the undo source-ip command to remove the configuration.
CHAPTER 178: SIP CONFIGURATION COMMANDS cipher: Displays the password of the current user in cipher text. simple: Displays the password of the current user in plain text. password: Password used for authentication, a case-sensitive string of 1 to 16 characters or 24 characters. When you specify the cipher keyword but enter a password in plain text mode or when specify the simple keyword, the password may contain 1 to 16 characters.
wildcard-register enable Syntax wildcard-register enable undo wildcard-register View Parameter Description SIP client view None Use the wildcard-register enable command to enable fuzzy (wildcard) telephone number registration. Use the undo wildcard-register command to disable fuzzy (wildcard) telephone number registration. By default, fuzzy telephone number registration is disabled. When configuring a match template in a POTS entity, you may use a number containing the wildcards of dot (.
CHAPTER 178: SIP CONFIGURATION COMMANDS
VOFR CONFIGURATION COMMANDS 179 address Syntax address { vofr-dynamic serial interface-number dlci-number | vofr-static serial interface-number dlci-number cid-number } undo address { vofr-dynamic | vofr-static } View Parameter VoFR entity view vofr-dynamic: Specifies a VoFR entity to adopt the dynamic call mode. vofr-static: Specifies a VoFR entity to adopt the FRF.11 trunk mode. serial interface-number: Specifies the destination interface of a VoFR entity.
CHAPTER 179: VOFR CONFIGURATION COMMANDS [Sysname-voice-dial] entity 4 vofr [Sysname-voice-dial-entity4] match-template 12345 [Sysname-voice-dial-entity4] address vofr-dynamic serial1/0 100 call-mode Syntax call-mode { dynamic | static } undo call-mode View Parameter VoFR entity view dynamic: Adopts the dynamic call mode. static: Adopts the FRF.11 trunk mode.
View Parameter Interface DLCI view max-poll: Selects circuit IDs cyclically in descending order min-poll: Selects circuit IDs cyclically in ascending order Description Use the cid select-mode command to configure the CID selection mode which the originating side of a VoFR call adopts. Use the undo cid select-mode command to restore the default. By default, CIDs are cyclically selected in descending order. In the dynamic mode, it is possible that multiple voice channels share one DLCI.
CHAPTER 179: VOFR CONFIGURATION COMMANDS Table 700 Description on fields of the display fr vofr-info command Field Description interface(dlci) Frame relay interface name (DLCI number) vofr-mode VoFR call control protocol, for example, VoFR nonstandard-compatible and VoFR-Huawei-compatible.
By default, the inband DTMF transmission mode is adopted. Example # Configure the out-of-band DTMF transmission mode for VoFR entity 10. system-view [Sysname] voice-setup [Sysname-voice] dial-program [Sysname-voice-dial] entity 10 vofr [Sysname-voice-dial-entity10] outband vofr seq-number Syntax seq-number undo seq-number View Parameter Description VoFR entity view None Use the seq-number command to configure the VoFR packets sent by the local voice gateway to carry a sequence number.
CHAPTER 179: VOFR CONFIGURATION COMMANDS timestamp Syntax timestamp undo timestamp View Parameter Description VoFR entity view None Use the timestamp command to configure VoFR packets sent by the local voice gateway to carry a timestamp. Use the undo timestamp command to restore the default. By default, the VoFR packets sent by the local voice gateway do not carry any timestamp. Example # Configure voice packets sent by VoFR entity 10 to carry a timestamp.
[Sysname-voice-dial] entity 2222 vofr [Sysname-voice-dial-entity2222] call-mode static [Sysname-voice-dial-entity2222] trunk-id 3333 voice bandwidth Syntax voice bandwidth reserved-bps [ reserved ] undo voice bandwidth View Parameter Frame relay class view reserved-bps: Reserved voice bandwidth in bps, in the range of 8,000 to 45,000,000. reserved: Reserves a VoFR voice bandwidth. Description Use the voice bandwidth command to reserve a VoFR voice bandwidth.
CHAPTER 179: VOFR CONFIGURATION COMMANDS sub-channel status. If the keepalive keyword is configured, network congestion is considered occurring when one end fails to receive any KeepAlive message within a period of time. In this case, the active call control sub-channel will be deactivated, and no voice call can be set up any longer. If the keepalive keyword is not configured, the control sub-channel status is synchronized with the PVC status. huawei-compatible: Adopts the Huawei-compatible mode.
vofr frf11-timer Syntax vofr frf11-timer time undo vofr frf11-timer View Voice view Parameter time: Trunk Wait timer length in the FRF.11 trunk mode in seconds, in the range of 10 to 600. Description Use the vofr frf11-timer command to configure the trunk wait timer length in the FRF.11 trunk mode. Use the undo vofr frf11-timer command to restore the default. By default, the trunk wait timer length is 30 seconds. This command has global significance. The configuration is valid for all FRF.
CHAPTER 179: VOFR CONFIGURATION COMMANDS
VOICE RADIUS CONFIGURATION COMMANDS 180 aaa-client Syntax View Parameter Description Example aaa-client Voice view None Use the aaa-client command to enter voice AAA client view. # Enter voice AAA client view. system-view [Sysname] voice-setup [Sysname-voice] aaa-client [Sysname-voice-aaa] accounting Syntax accounting undo accounting View Parameter Description Access number view None Use the accounting command to enable the RADIUS accounting function for users who dial some access number.
CHAPTER 180: VOICE RADIUS CONFIGURATION COMMANDS With the RADIUS accounting function enabled, the RADIUS server will perform accounting for all users who use this access number. With the function disabled, the RADIUS server will not perform accounting for users who dial the access number. Related command: Example gw-access-number, acct-method, and accounting-did. # Enable the RADIUS accounting function for users who dial the access number 17909.
system-view [Sysname] voice-setup [Sysname-voice] aaa-client [Sysname-voice-aaa] accounting-did # Disable the accounting function for all one-stage dialing users.
CHAPTER 180: VOICE RADIUS CONFIGURATION COMMANDS authentication Syntax authentication undo authentication View Parameter Description Access number view None Use the authentication command to enable the RADIUS authentication function for users who dial some access number. Use the undo authentication command to disable the RADIUS authentication function. By default, the RADIUS authentication function is disabled for users who dial access numbers.
View Parameter Description Voice AAA client view None Use the authentication-did command to enable the authentication function for all one-stage dialing users. Use the undo authentication-did command to disable the authentication function. By default, the authentication function is disabled for all one-stage dialing users. This command is applicable to only one-stage dialing users, instead of two-stage dialing users.
CHAPTER 180: VOICE RADIUS CONFIGURATION COMMANDS With this function enabled, called numbers will be sent to the RADIUS server for authorization after users who dial some access number to make IP calls pass authentication. You must enable the authentication function (by using the authentication command) before the authorization function. Otherwise, the authorization command is unavailable. Related command: Example gw-access-number and authentication.
Example # Enable the authorization function for one-stage dialing users. system-view [Sysname] voice-setup [Sysname-voice] aaa-client [Sysname-voice-aaa] authentication-did [Sysname-voice-aaa] authorization-did # Disable the authorization function for one-stage dialing users.
CHAPTER 180: VOICE RADIUS CONFIGURATION COMMANDS # Restore the default method of collecting digits of called numbers for the access number 17909. [Sysname-voice-dial-anum17909] undo callednumber receive-method card-digit Syntax card-digit card-digit undo card-digit View Parameter Description Access number view card-digit: Number of digits in a card number, in the range of 1 to 31.
undo cdr { all | buffer | duration | threshold } View Parameter Voice AAA client view buffer size-number: Specifies the number of CDRs that can be saved in the buffer. The size-number argument ranges from 0 to 500, with a default of 50. The value “0” indicates that no CDR can be saved. duration time-length: Specifies the lifetime of CDRs in seconds. The time-length argument ranges from 0 to 2,147,483,647, with a default of 86,400. The value “0” indicates that no CDR can be saved.
CHAPTER 180: VOICE RADIUS CONFIGURATION COMMANDS display voice access-number Syntax View Parameter Description display voice access-number Any view None Use the display voice access-number command to display the configuration information and access numbers in voice AAA client view.
Table 701 Description on fields of the display voice access-number command Field Description accounting-method Accounting method, including start-ack, start-no-ack, and stop-only. See “acct-method” on page 2723. accounting-did Accounting function for one-stage dialing users ■ on: Enabled ■ off: Disabled See “authentication-did” on page 2724. authentication-did Authentication function for one-stage dialing users ■ on: Enabled ■ off: Disabled See “authentication-did” on page 2724.
CHAPTER 180: VOICE RADIUS CONFIGURATION COMMANDS Table 701 Description on fields of the display voice access-number command Field Description password digit Number of digits in a password, displayed only in the card number/password process. See “password-digit” on page 2737. redialing times Number of redial attempts, displayed in the card number/password process or caller number process with IVR. See “redialtimes” on page 2740.
The system finds call records by the search condition. If the voice gateway fails to find a call record or the found record is null, the voice gateway will give prompt information. Related command: Example cdr. # Display call records by calling number.
CHAPTER 180: VOICE RADIUS CONFIGURATION COMMANDS Table 702 Description on fields of the display voice call-history-record command Field Description Incoming Call Leg Information of the incoming call leg CallingNumber Calling number SignalType Signaling protocol (for example, R2, E&M, H.
Related command: Example reset voice radius statistic. # Display statistics of messages exchanged between the voice RADIUS module, CMC module, and AAA module.
CHAPTER 180: VOICE RADIUS CONFIGURATION COMMANDS Table 703 Description on fields of the display voice radius statistic command Field Description AcctRsp_PstnCaller Accounting_Response message for PSTN caller AcctRsp_VoipCaller Accounting_Response message for VoIP caller AcctRsp_PstnCalled Accounting_Response message for PSTN callee AcctRsp_VoipCalled Accounting_Response message for VoIP callee Account_Ok Accounting_Ok message Account_Failure Accounting_Failure message Cut Cut message
An access number can contain up to 31 characters, but no unacceptable characters such as a letter. At most 100 access numbers can be configured for the voice gateway. The shortest match and exact match are preferred for access number match.
CHAPTER 180: VOICE RADIUS CONFIGURATION COMMANDS Use the undo password-digit command to restore the default number of digits in a password for some access number in the card number/password process. This command is unavailable for the caller number process with IVR. By default, the number of digits in a password for some access number in the card number/password process is 6.
is implemented by identifying the calling number. If the authentication succeeds, the voice gateway plays prompt tones, requiring the user to dial a called number. In addition, you can configure the number of redial attempts by using the redialtimes command, and the language in which the prompt tones are played by using the selectlanguage command. Description Use the process-config command to specify a dialing process for an access number.
CHAPTER 180: VOICE RADIUS CONFIGURATION COMMANDS redialtimes Syntax redialtimes redialtimes-number undo redialtimes View Parameter Description Access number view redialtimes-number: Number of redial attempts, in the range of 0 to 10. In the card number/password process, this argument may refer to the times of reselecting a language or redialing a card number, password, or a called number.
reset voice radius statistic Syntax View Parameter Description Related command: Example reset voice radius statistic User view None Use the reset voice radius statistic command to clear statistics of messages exchanged between the voice RADIUS module, CMC module, and AAA module. display voice radius statistic. # Clear the statistics of messages exchanged between the voice RADIUS module, CMC module, and AAA module.
CHAPTER 180: VOICE RADIUS CONFIGURATION COMMANDS [Sysname-voice-dial] gw-access-number 17909 [Sysname-voice-dial-anum17909] process-config voice-caller [Sysname-voice-dial-anum17909] selectlanguage english
