Service Manual

ManualsBrandsDell ManualsserversDell Force10 MXL Blade

Dell Networking Command Line Reference Guide for

the MXL 10/40GbE Switch I/O Module

9.9(0.0)

Summary of content (1283 pages)

PAGE 1
Dell Networking Command Line Reference Guide for the MXL 10/40GbE Switch I/O Module 9.9(0.
PAGE 2
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your computer. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. Copyright © 2015 Dell Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws.
PAGE 3
Contents 1 About this Guide............................................................................................................ 42 Objectives........................................................................................................................................................................ 42 Audience..........................................................................................................................................................................
PAGE 4
banner exec...................................................................................................................................................................... 74 banner login......................................................................................................................................................................75 banner motd...........................................................................................................................................
PAGE 5
show processes cpu....................................................................................................................................................... 104 show processes ipc flow-control..................................................................................................................................... 107 show processes memory................................................................................................................................................
PAGE 6
show ip access-lists........................................................................................................................................................ 138 show ip accounting access-list....................................................................................................................................... 139 Standard IP ACL Commands..........................................................................................................................................
PAGE 7
match interface...............................................................................................................................................................184 match ip address.............................................................................................................................................................185 match ip next-hop............................................................................................................................................
PAGE 8
7 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM)... 252 member vlan.................................................................................................................................................................. 252 ip access-group..............................................................................................................................................................253 show acl-vlan-group .....................................................
PAGE 9
bgp default local-preference.......................................................................................................................................... 280 bgp enforce-first-as........................................................................................................................................................ 281 bgp fast-external-failover..........................................................................................................................................
PAGE 10
neighbor route-map....................................................................................................................................................... 308 neighbor route-reflector-client....................................................................................................................................... 308 neighbor shutdown......................................................................................................................................................
PAGE 11
clear ip bgp ipv6 unicast soft......................................................................................................................................... 348 debug ip bgp ipv6 unicast soft-reconfiguration.............................................................................................................. 349 ipv6 prefix-list................................................................................................................................................................
PAGE 12
show interface pfc statistics.......................................................................................................................................... 383 show qos priority-groups................................................................................................................................................383 show stack-unit stack-ports ets details..........................................................................................................................
PAGE 13
lease...............................................................................................................................................................................422 netbios-name-server......................................................................................................................................................423 netbios-node-type..........................................................................................................................................
PAGE 14
hash-algorithm ecmp..................................................................................................................................................... 444 hash-algorithm seed.......................................................................................................................................................445 ip ecmp-group........................................................................................................................................................
PAGE 15
debug frrp...................................................................................................................................................................... 474 description......................................................................................................................................................................474 disable...............................................................................................................................................
PAGE 16
default interface.............................................................................................................................................................500 description......................................................................................................................................................................501 duplex (1000/10000 Interfaces)...........................................................................................................................
PAGE 17
tdr-cable-test.................................................................................................................................................................549 show tdr........................................................................................................................................................................ 550 UDP Broadcast...........................................................................................................................................
PAGE 18
show ip interface............................................................................................................................................................ 581 show ip management-route........................................................................................................................................... 583 show ip protocols.....................................................................................................................................................
PAGE 19
show ipv6 cam stack-unit............................................................................................................................................... 616 show ipv6 control-plane icmp......................................................................................................................................... 617 show ipv6 fib stack-unit..................................................................................................................................................
PAGE 20
debug ip bgp keepalives................................................................................................................................................. 646 debug ip bgp notifications.............................................................................................................................................. 646 debug ip bgp updates..................................................................................................................................................
PAGE 21
show ip bgp ipv6 unicast dampened-paths.................................................................................................................... 673 show ip bgp ipv6 unicast detail....................................................................................................................................... 674 show ip bgp ipv6 unicast extcommunity-list...................................................................................................................
PAGE 22
show ip bgp ipv6 unicast filter-list................................................................................................................................... 701 show ip bgp ipv6 unicast flap-statistics...........................................................................................................................701 show ip bgp ipv6 unicast inconsistent-as.......................................................................................................................
PAGE 23
hello padding.................................................................................................................................................................. 730 hostname dynamic......................................................................................................................................................... 730 ignore-lsp-errors.............................................................................................................................................
PAGE 24
lacp port-priority............................................................................................................................................................. 761 lacp system-priority........................................................................................................................................................762 port-channel mode...........................................................................................................................................
PAGE 25
show running-config lldp................................................................................................................................................ 789 LLDP-MED Commands.................................................................................................................................................. 789 advertise med guest-voice.............................................................................................................................................
PAGE 26
name...............................................................................................................................................................................816 protocol spanning-tree mstp........................................................................................................................................... 816 revision......................................................................................................................................................
PAGE 27
track resolution ipv6 route........................................................................................................................................847 39 Open Shortest Path First (OSPFv2 and OSPFv3)..................................................... 849 OSPFv2 Commands.......................................................................................................................................................849 area default-cost....................................................
PAGE 28
show config.................................................................................................................................................................... 874 show ip ospf...................................................................................................................................................................875 show ip ospf asbr........................................................................................................................................
PAGE 29
redistribute..................................................................................................................................................................... 916 router-id.......................................................................................................................................................................... 917 show crypto ipsec policy..........................................................................................................................
PAGE 30
show ip pim tib...............................................................................................................................................................949 show running-config pim............................................................................................................................................... 950 IPv6 PIM-Sparse Mode Commands................................................................................................................................
PAGE 31
spanning-tree pvst......................................................................................................................................................... 982 spanning-tree pvst err-disable........................................................................................................................................984 tc-flush-standard.....................................................................................................................................................
PAGE 32
show qos policy-map.....................................................................................................................................................1010 show qos policy-map-input............................................................................................................................................ 1011 show qos policy-map-output.........................................................................................................................................
PAGE 33
47 Remote Monitoring (RMON)................................................................................... 1040 rmon alarm................................................................................................................................................................... 1040 rmon collection history.................................................................................................................................................. 1041 rmon collection statistics................
PAGE 34
aaa authentication enable............................................................................................................................................. 1068 aaa authentication login................................................................................................................................................1069 access-class...........................................................................................................................................................
PAGE 35
show ip ssh...................................................................................................................................................................1099 show ip ssh client-pub-keys.......................................................................................................................................... 1100 show ip ssh rsa-authentication....................................................................................................................................
PAGE 36
show snmp engineID..................................................................................................................................................... 1125 show snmp group.......................................................................................................................................................... 1125 show snmp user......................................................................................................................................................
PAGE 37
show system stack-ports.............................................................................................................................................. 1156 show system stack-unit stack-group............................................................................................................................. 1157 stack-unit stack-group..................................................................................................................................................
PAGE 38
action-manifest install.............................................................................................................................................. 1181 action-manifest remove...........................................................................................................................................1182 action-manifest show.............................................................................................................................................. 1183 enable.
PAGE 39
tunnel dscp................................................................................................................................................................... 1207 tunnel destination......................................................................................................................................................... 1207 tunnel flow-label..........................................................................................................................................
PAGE 40
dei honor...................................................................................................................................................................... 1228 dei mark........................................................................................................................................................................1229 member................................................................................................................................................
PAGE 41
show config.................................................................................................................................................................. 1254 show vrrp..................................................................................................................................................................... 1255 track....................................................................................................................................................
PAGE 42
1 About this Guide This guide provides information about the Dell Networking Operating System (OS) command line interface (CLI). This guide also includes information about the protocols and features found in the Dell OS and on the Dell Networking systems supported by the Dell OS.
PAGE 43
x|y Keywords and parameters separated by a bar require you to choose one option. x||y Keywords and parameters separated by a double bar allows you to choose any or all of the options. Information Icons This book uses the following information symbols: NOTE: The Note icon signals important operational information. CAUTION: The Caution icon signals information about situations that could result in equipment damage or loss of data.
PAGE 44
2 CLI Basics This chapter describes the command line interface (CLI) structure and command modes. The Dell operating software commands are in a text-based interface that allows you to use the launch commands, change command modes, and configure interfaces and protocols. Accessing the Command Line When the system boots successfully, you are positioned on the command line in EXEC mode and not prompted to log in. You can access the commands through a serial console port or a Telnet session.
PAGE 45
In this case, the user is “admin” on vty2. Navigating the CLI The Dell Networking Operating System (OS) displays a command line interface (CLI) prompt comprised of the host name and CLI mode. • Host name is the initial part of the prompt and is “Dell” by default. You can change the host name with the hostname command. • CLI mode is the second part of the prompt and reflects the current CLI mode.
PAGE 46
using a partial keyword: Example The following is an example of typing ip ? at the prompt: Dell(conf)#ip ? igmp Internet Group Management Protocol route Establish static routes telnet Specify telnet options When entering commands, you can take advantage of the following timesaving features: • The commands are not case-sensitive. • You can enter partial (truncated) command keywords. For example, you can enter int gig int interface for the interface gigabitethernet interface command.
PAGE 47
Using the Keyword no Command To disable, delete or return to default values, use the no form of the commands. For most commands, if you type the keyword no in front of the command, you disable that command or delete it from the running configuration. In this guide, the no form of the command is described in the Syntax portion of the command description.
PAGE 48
Command Modes To navigate and launch various CLI modes, use specific commands. Navigation to these modes is described in the following sections. EXEC Mode When you initially log in to the switch, by default, you are logged in to EXEC mode. This mode allows you to view settings and enter EXEC Privilege mode, which is used to configure the device. When you are in EXEC mode, the > prompt is displayed following the host name prompt, which is “Dell” by default.
PAGE 49
Prompt Interface Type Dell(conf-ifnu-0)# Null Interface then zero Dell(conf-ifpo-0)# Port-channel interface number Dell(conf-ifvl-0)# VLAN Interface then VLAN number (range 1–4094) Dell(conf-ifma-0/0)# Management Ethernet interface then slot/port information Dell(conf-ifrange)# Designated interface range (used for bulk configuration).
PAGE 50
1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the protocol spanning-tree mstp command. You can return to CONFIGURATION mode by using the exit command. Per-VLAN SPANNING TREE (PVST+) Plus Mode To enable and configure the Per-VLAN Spanning Tree (PVST+) protocol, use PVST+ mode. For more information, refer to Per-VLAN Spanning Tree Plus (PVST+). NOTE: The protocol name is PVST+, but the plus sign is dropped at the CLI prompt. To enter PVST+ mode: 1.
PAGE 51
2. Use the route-map map-name [permit | deny] [sequence-number] command. The prompt changes to include (config-route-map). You can return to CONFIGURATION mode by using the exit command. ROUTER OSPF Mode To configure OSPF, use ROUTER OSPF mode. For more information, refer to Open Shortest Path First (OSPF). To enter ROUTER OSPF mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the router ospf {process-id} command. The prompt changes to include (conf-router_ospf-id).
PAGE 52
3 File Management This chapter contains command line interface (CLI) commands needed to manage the configuration files as well as other file management commands. The commands in this chapter are supported by the Dell Networking Operating System (OS). boot system Tell the system where to access the Dell Networking OS image used to boot the system.
PAGE 53
Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced the support for bmp-boot on the MXL switch. 8.3.19.0 Introduced on the S4820T. 8.3.17.0 Introduced on the MXL switch. 8.3.11.1 Introduced on the Z9000. 8.3.7.0 Introduced on the S4810. To display these changes in the show bootvar command output, save the running configuration to the startup configuration (using the copy command) and reload system.
PAGE 54
Command Modes Command History Usage Information To copy the running configuration Enter the keywords running-config. To copy the startup configuration Enter the keywords startup-config. To copy a file on the external FLASH Enter the keyword slot0:// then the filename. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 55
In this copy scp: flash: example, specifying SCP in the first position indicates that the target is to be specified in the ensuing prompts. Entering flash: in the second position indicates that the target is the internal Flash. The source is on a secure server running SSH, so you are prompted for the user datagram protocol (UDP) port of the SSH server on the remote host. Example Dell#copy scp: flash: Address or name of remote host []: 10.11.199.
PAGE 56
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#dir Directory of flash: 1 drwx 4096 Jan 01 2 drwx 2048 Mar 06 3 drwx 4096 Feb 25 4 drwx 4096 Feb 25 5 d--- 4096 Feb 25 6 -rwx 720969768 Mar 05 7 -rwx 4260 Mar 03 8 -rwx 31969685 Mar 05 DellS-XL-8-3-16-148.
PAGE 57
HTTP Copy via CLI Copy one file to another location. Dell Networking OS supports IPv4 and IPv6 addressing for FTP, TFTP, and SCP (in the hostip field). Syntax copy http://10.16.206.77/sample_file flash://sample_filecopy flash:// sample_file http://10.16.206.77/sample_file You can copy from the server to the switch and vice-versa. Parameters copy http: flash: Address or name of remote host []: 10.16.206.
PAGE 58
If the FTP server is not reachable, the application coredump is aborted. The Dell Networking OS completes the coredump process and waits until the upload is complete before rebooting the system. Related Commands logging coredump server — designates a server to upload kernel coredumps. logging coredump server Designate a server to upload core dumps. Syntax logging coredump server {ipv4-address} username name password [type] password Parameters {ipv4-address } Enter the server IPv4 address (A.B.C.D).
PAGE 59
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#pwd flash: Dell# Related Commands cd – changes the directory. rename Rename a file in the local file system. Syntax Parameters Command Modes Command History rename url url url Enter the following keywords and a filename: • For a file on the internal Flash, enter flash:// then the filename.
PAGE 60
Command Modes Command History Usage Information EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.1) Added bootvar as a new parameters. 9.0.2.0 Introduced on the S6000. 9.0.0.0 Introduced on the Z9000. 8.3.19.0 Introduced on the S4820T. 8.3.12.0 Introduced on the S4810. 8.3.16.0 Introduced on the MXL 10/40GbE Switch IO Module. Restoring factory defaults deletes the existing startup configuration and all persistent settings (stacking, fan-out, and so forth).
PAGE 61
Example (all stack units) Dell#restore factory-defaults stack-unit all clear-all ************************************************************** * Warning - Restoring factory defaults will delete the existing * * startup-config and all persistent settings (stacking, fanout, etc.)* * All the units in the stack will be split into standalone units. * * After restoration the unit(s) will be powercycled immediately.
PAGE 62
Unit Nvram Config -----------------------1 Success Power-cycling the unit(s). Dell# show boot system Displays information about boot images currently configured on the system. Syntax show boot system stack-unit {0-5 | all} Parameters Defaults 0–5 Enter this information to display the boot image information of only the entered stack-unit. all Enter the keyword all to display the boot image information of all the stack-units in the stack.
PAGE 63
• Command Modes Command History For a file on the external Flash, enter usbflash:// then the filename. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 64
Dell# Command Fields - - network network rw rw tftp: scp: Field Description size(b) Lists the size (in bytes) of the storage location. If the location is remote, no size is listed. Free(b) Lists the available size (in bytes) of the storage location. If the location is remote, no size is listed. Feature Displays the formatted DOS version of the device. Type Displays the type of storage. If the location is remote, the word network is listed.
PAGE 65
Usage Information Example Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. NOTE: A filepath that contains a dot ( . ) is not supported.
PAGE 66
configured 66 File Management fvrp for the current FVRP configuration host for the current host configuration hardwaremonitor for hardware-monitor action-on-error settings igmp for the current IGMP configuration interface for the current interface configuration line for the current line configuration load-balance for the current port-channel load-balance configuration logging for the current logging configuration mac for the current MAC ACL configuration mac-addresstable for the curren
PAGE 67
status Command Modes Command History (OPTIONAL) Enter the keyword status to display the checksum for the running configuration and the start-up configuration. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show running-config Current Configuration ...
PAGE 68
Example Dell#show startup-config ! Version E8-3-16-29 ! Last configuration change at Thu Apr 26 19:19:02 2012 by default ! Startup-config last updated at Thu Apr 26 19:19:04 2012 by default ! boot system stack-unit 0 primary system: A: boot system stack-unit 0 secondary tftp://10.11.200.241/ dt-m1000e-5-c2 boot system gateway 10.11.209.
PAGE 69
Command Fields Lines Beginning With Description Dell Force10 Network... Name of the operating system Dell Force10 Operating... OS version number Dell Force10 Application... Software version Copyright (c)... Copyright information Build Time... Software build’s date stamp Build Path... Location of the software build files loaded on the system Dell Force10 uptime is... Amount of time the system has been up System image...
PAGE 70
tftp: After entering the keyword tftp:, you can either follow it with the location of the source file in this form: //hostlocation/filepath or press Enter to launch a prompt sequence. flash: After entering the keyword flash:, you can either follow it with the location of the source file in this form: //filepath or press Enter to launch a prompt sequence.
PAGE 71
flash After entering the keyword flash you can either follow it with the location of the source file in this form://filepath, or press Enter to launch a prompt sequence. usbflash After entering the keyword usbflash you can either follow it with the location of the source file in this form://filepath, or press Enter to launch a prompt sequence. A: Enter this keyword to upgrade the bootflash partition A. B: Enter this keyword to upgrade the bootflash partition B.
PAGE 72
Command History Usage Information Example Version 9.5.(0.0) Version Description 9.5(0.0) Introduced on the Z9000, S6000, S4820T, S4810, and MXL. You can enter this command in the following ways: • verify md5 flash://img-file • verify md5 flash://img-file • verify sha256 flash://img-file • verify sha256 flash://img-file Without Entering the Hash Value for Verification using SHA256 Dell# verify sha256 flash://FTOS-SE-9.5.0.0.bin SHA256 hash for FTOS-SE-9.5.0.0.
PAGE 73
4 Control and Monitoring The Dell Networking OS supports the following control and monitoring commands. asset-tag Assign and store a unique asset-tag to the stack member. Syntax asset-tag stack-unit unit id Asset-tag ID To remove the asset tag, use no stack-unit unit-id Asset-tag ID command. Parameters stack-unit unit-id Enter the keywordsstack-unit then the unit-id to assign a tag to the specific member. The range is from 0 to 5.
PAGE 74
Command Modes Command History Usage Information CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. You must save the configuration and reload the system to implement ASF. When you enter the command, the system sends a message stating that the new mode is enabled when the system reloads. banner exec Configure a message that is displayed when your enter EXEC mode.
PAGE 75
Related Commands banner login — sets a banner for login connections to the system. banner motd — sets a Message of the Day banner. exec-banner — Enables the display of a text string when you enter EXEC mode. line — enables and configures the console and virtual terminal lines to the system. banner login Set a banner to display when logging on to the system.
PAGE 76
13d21h10m: STKUNIT0-M:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on line console This is the banner Related Commands banner motd — sets a Message of the Day banner. exec-banner — enables the display of a text string when you enter EXEC mode. banner motd Set a message of the day (MOTD) banner. Syntax banner motd c line c Parameters c Enter a delineator character to specify the limits of the text banner. The delineator is a percent character (%).
PAGE 77
Usage Information This command clears alarms that are no longer active. If an alarm situation is still active, it is seen in the system output. clear command history Clear the command history log. Syntax clear command history Command Modes EXEC Privilege Command History Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show command-history — displays a buffered log of all the commands all users enter along with a time stamp.
PAGE 78
Command Modes Command History Example EXEC Privilege Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#configure Dell(conf)# debug cpu-traffic-stats Enable the collection of computer processor unit (CPU) traffic statistics. Syntax debug cpu-traffic-stats Defaults Disabled Command Modes EXEC Privilege Command History Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 79
disable Return to EXEC mode. Syntax Parameters disable [level] level Defaults 1 Command Modes EXEC Privilege Command History (OPTIONAL) Enter a number for a privilege level of the Dell OS. The range is from 0 to 15. The default is 1. Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. do Allows the execution of most EXEC-level commands from all CONFIGURATION levels without returning to the EXEC level.
PAGE 80
Proceed with reload [confirm yes/no]: n Dell(conf-if-te-3/1)# enable Enter EXEC Privilege mode or any other privilege level configured. After entering this command, you may need to enter a password. Syntax enable [level] Parameters level Defaults 15 Command Modes EXEC Command History Usage Information (OPTIONAL) Enter a number for a privilege level of the Dell Networking OS. The range is from 0 to 15. The default is 15. Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.
PAGE 81
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Replaces the enable xfp-power-updates command. To enable polling and to configure the polling frequency, use this command. enable secure Creates configurable MXL mode Full–Switch modewhere Chassis Management Controller (CMC) access to MXL is bypassed for the elements critical to the security certifications. Syntax enable secure To disable the secure mode, use no enable secure command.
PAGE 82
Related Commands exit — returns to the lower command mode. exec-banner Enable the display of a text string when the user enters EXEC mode. Syntax exec-banner Defaults Enabled on all lines (if configured, the banner appears). Command Modes LINE Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 83
Example Dell con0 is now available Press RETURN to get started. Dell> exit Return to the lower command mode. Syntax Command Modes Command History Related Commands exit • EXEC Privilege • CONFIGURATION • LINE • INTERFACE • PROTOCOL GVRP • SPANNING TREE • MULTIPLE SPANNING TREE • MAC ACCESS LIST • ACCESS-LIST • PREFIX-LIST • ROUTER OSPF • ROUTER RIP Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. end — returns to EXEC Privilege mode.
PAGE 84
230 User logged in ftp> pwd 257 Current directory is "flash:" ftp> dir 200 Port set okay 150 Opening ASCII mode data connection size date time name -------- ------ ------ -------512 Jul-20-2004 18:15:00 tgtimg 512 Jul-20-2004 18:15:00 diagnostic 512 Jul-20-2004 18:15:00 other 512 Jul-20-2004 18:15:00 tgt 226 Transfer complete 329 bytes received in 0.018 seconds (17.95 Kbytes/s) ftp> Related Commands ftp-server topdir — sets the directory to be used for incoming FTP connections.
PAGE 85
password password Enter the keyword password then a string up to 40 characters long as the password. Without specifying an encryption type, the password is unencrypted. encryption-type (OPTIONAL) After the keyword password, enter one of the following numbers: Defaults Not enabled. Command Modes CONFIGURATION Command History • 0 (zero) for an unecrypted (clear text) password • 7 (seven) for a hidden text password Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 86
Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The password is listed in the configuration file; you can view the password by entering the show running-config ftp command in EXEC mode. Use the ip ftp password command when you use the ftp: parameter in the copy command. Related Commands copy — copy files.
PAGE 87
ip ftp username Assign a user name for outgoing FTP connection requests. Syntax Parameters ip ftp username username username Enter a text string as the user name up to 40 characters long. Defaults No user name is configured. Command Modes CONFIGURATION Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Configure a password with the ip ftp password command.
PAGE 88
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For VLAN interface, enter the keyword vlan then a number from 1 to 4094. Defaults The IP address on the system that is closest to the Telnet address is used in the outgoing packets. Command Modes CONFIGURATION Command History Related Commands Version Description 8.3.16.
PAGE 89
Parameters console 0 Enter the keyword console 0 to configure the console port. The console option is <0-0>. vty number Enter the keyword vty then a number from 0 to 9 to configure a virtual terminal line for Telnet sessions. The system supports 10 Telnet sessions. end-number (OPTIONAL) Enter a number from 1 to 9 as the last virtual terminal line to configure. You can configure multiple lines at one time.
PAGE 90
If the login concurrent-session clear-line enable command is configured, you are provided with an option to clear any of your existing sessions after a successful login authentication. When you reach the maximum concurrent session limit, you can still login by clearing any of your existing sessions.
PAGE 91
login statistics Enable and configure user login statistics on console and virtual terminal lines. Syntax login statistics {enable | time-period days} no login statistics {enable | time-period days} Parameters enable Enables user login statistics. By default, the system displays the login statistics for the last 30 days. time-period days Sets the number of days for which the system stores the user login statistics. The range is from 1 to 30.
PAGE 92
Escape character is '^]'. Login: admin Password: Last successful login: Wed Feb 5 14:05:28 IST 2015 on console There were 2 unsuccessful login attempt(s) since the last successful login. There were 3 unsuccessful login attempt(s) for user admin in last 12 day(s). The preceding message shows that the user had previously logged in to the system using the console line.
PAGE 93
• continuous: transmit echo request continuously datagram size Enter the ICMP datagram size. The range is from 36 to 15360 bytes. The default is 100. timeout Enter the interval to wait for an echo reply before timing out. The range is from 0 to 3600 seconds. The default is 2 seconds. source Enter the IPv4 or IPv6 source ip address or the source interface. For IPv6 addresses, you may enter global addresses only. Enter the IP address in A.B.C.D format.
PAGE 94
Command Modes Command History • EXEC • EXEC Privilege Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you enter the ping command without specifying an IP address (Extended Ping), you are prompted for a target IP address, a repeat count, a datagram size (up to 1500 bytes), a timeout (in seconds), and for Extended Commands.
PAGE 95
send Send messages to one or all terminal line users. Syntax Parameters send [*] | [line ] | [console] | [vty] * Enter the asterisk character * to send a message to all tty lines. line Send a message to a specific line. The range is from 0 to 11. console Enter the keyword console to send a message to the primary terminal line. vty Enter the keyword vty to send a message to the virtual terminal. Defaults none Command Modes EXEC Command History Usage Information Version Description 9.9(0.
PAGE 96
Command History Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. If you do not specify parameters and enter service timestamps, it appears as service timestamps debug uptime in the running-configuration. To view the current options set for the service timestamps command, use the show runningconfig command. show alarms View alarms. Syntax show alarms Command Modes Command History Example • EXEC • EXEC Privilege Version Description 8.3.16.
PAGE 97
Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information One trace log message is generated for each command. No password information is saved to this file. Example Dell#show command-history [4/20 10:27:23]: CMD-(CLI):[enable]by default from console [4/20 10:27:23]: CMD-(CLI):[configure terminal]by default from console - Repeated 1 time.
PAGE 98
Defaults none Command Modes Command History • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Reload the system to reset the command-tree counters.
PAGE 99
show cpu-traffic-stats View the CPU traffic statistics. Syntax Parameters show cpu-traffic-stats [port number | all] port number (OPTIONAL) Enter the port number to display traffic statistics on that port only. The range is from 1 to 1568. all (OPTIONAL) Enter the keyword all to display traffic statistics on all the interfaces receiving traffic, sorted based on the traffic. Defaults all Command Modes EXEC Command History Usage Information Version Description 8.3.16.
PAGE 100
OSPF packet debugging is on DHCP: DHCP debugging is on Dell# show environment View system component status (for example, temperature or voltage). Syntax show environment [all | stack-unit unit-id] Parameters Command Modes Command History all Enter the keyword all to view all components. stack-unit unit-id Enter the keyword stack-unit then the unit-id to display information on a specific stack member. The range is from 0 to 5.
PAGE 101
Example (thermalsensor) Dell#show environment thermal-sensor -- Thermal Sensor Readings (deg C) -Unit Sensor0 Sensor1 Sensor2 Sensor3 Sensor4 Sensor5 Sensor6 Sensor7 Sensor8 Sensor9 --------------------------------------------------------0 50 52 53 53 54 48 57 57 53 56 * Management Unit Dell# show inventory Display the switch type, components (including media), and Dell Networking OS version including hardware identification numbers and configured protocols.
PAGE 102
0 47 0 48 0 49 0 50 0 51 0 52 0 53 0 54 0 55 0 56 Dell# Related Commands QSFP QSFP 40GBASE-SR4 MLJ004Y 40GBASE-SR4 MLJ004Y Media not present or accessible Media not present or accessible Media not present or accessible Media not present or accessible QSFP 40GBASE-SR4 MK50012 QSFP 40GBASE-SR4 MK50012 QSFP 40GBASE-SR4 MK50012 QSFP 40GBASE-SR4 MK50012 No No No No No No show interfaces — displays a specific interface configuration.
PAGE 103
Use the show login statistics all command to view the successful and failed login details of all users in the last 30 days or the custom defined time period. You can use this command only if you have system or security administrator rights. Use the show login statistics user user-id command to view the successful and failed login details of a specific user in the last 30 days or the custom defined time period.
PAGE 104
The following is sample output of the show login statistics unsuccessful-attempts timeperiod days command. Dell#show login statistics unsuccessful-attempts time-period 15 There were 0 unsuccessful login attempt(s) for user admin in last 15 day(s). The following is sample output of the show login statistics unsuccessful-attempts user login-id command. Dell#show login statistics unsuccessful-attempts user admin There were 3 unsuccessful login attempt(s) for user admin in last 12 day(s).
PAGE 105
Parameters management-unit 1-99 [details] (OPTIONAL) Display processes running in the control processor. The 1-99 variable sets the number of tasks to display in order of the highest CPU usage in the past five (5) seconds. Add the keyword details to display all running processes (except sysdlp). Refer to Example (management-unit). stack-unit 0–5 (OPTIONAL) Enter the keyword stack-unit then the stack member ID. The range is from 0 to 5.
PAGE 106
PID Runtime(ms) Process 0x763a7000 96806080 KP 0x760d5000 26384050 frrpagt 0x762da000 491370 F10StkMgr 0x762f9000 665580 lcMgr 0x7631d000 37580 dla 0x76348000 452110 sysAdmTsk 0x76367000 1751990 timerMgr 0x76385000 14460 PM 0x7629d000 347970 diagagt 0x763c7000 0 evagt 0x763eb000 90800 ipc 0x77ee9000 5 tme 0x77eec000 0 ttraceIpFlow 0x77eee000 20 linkscan_user_threa 0x77ff6000 0 isrTask 0x7811a000 0 tDDB 0x7811c000 22980 GC 0x7811e000 0 bshell_reaper_threa 0x78365000 10 tSysLog 0x78367000 1106980 tTimerTask 0
PAGE 107
xstp f10appioserv pim f10appioserv igmp f10appioserv mrtm f10appioserv l2mgr f10appioserv l2pm f10appioserv arpm Dell# 2740224 225280 1007616 225280 401408 225280 5496832 225280 1036288 225280 172032 225280 192512 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 9801728 208896 7757824 208896 7639040 208896 11124736 208896 16134144 208896 7483392 208896 7057408 Example (stack-unit) Dell#show process memory stack-unit 0 Total: 2147483648, MaxUsed: 378433536, CurrentUsed: 378433536, CurrentFree: 176905
PAGE 108
Parameters Defaults cp (OPTIONAL) Enter the keyword cp to view the control processor’s SWPQ statistics. none Command Modes Command History Usage Information • EXEC • EXEC Privilege Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 109
ACL0 ARPMGR0 LACP0 RTM0 RTM0 Dell# PIM0 MRTM0 IFMGR0 OTM0 OTM0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 10 100 25 60 60 10 100 25 60 60 show processes memory Display memory usage information based on the running processes. Syntax Parameters Command Modes Command History Usage Information show processes memory {management-unit | stack unit {0–5 | all | summary}} management-unit Enter the keyword management-unit for CPU memory usage of the stack management unit.
PAGE 110
show processes memory output Description Max Maximum dynamic memory allocated Current Current dynamic memory in use Field The output for the show process memory command displays the memory usage statistics running on CP part (sysd) of the system. The sysd is an aggregate task that handles all the tasks running on the MXL 10/40GbE Switch IO Module’s CP. The output of the show memory command and this command differ based on which the Dell OS processes are counted.
PAGE 111
Defaults Command Modes Command History Example summary (OPTIONAL) Enter the keyword summary to display brief information about IFM clients. ifagt number Enter the keyword ifagt then the number of an interface agent to display software pipe and IPC statistics.
PAGE 112
show system Display the current status of all stack members or a specific member. Syntax show system [brief | stack-unit unit-id] Parameters Command Modes Command History Example (brief) brief (OPTIONAL) Enter the keyword brief to view an abbreviated list of system information. stack-unit unit-id (OPTIONAL) Enter the keyword stack-unit then the stack member ID for information on that stack member. The range is 0 to 5. • EXEC • EXEC Privilege Version Description 9.9(0.
PAGE 113
Mfg Date : 2012-01-05 Serial Number : DELL123456 Part Number : 0NVH81X01 Piece Part ID : N/A PPID Revision : N/A Service Tag : N/A Expr Svc Code : N/A Chassis Svce Tag: RTWB200 Fabric Id : C2 Asset tag : test PSOC FW Rev : 0xb ICT Test Date : 0-0-0 ICT Test Info : 0x0 Max Power Req : 31488 Fabric Type : 0x3 Fabric Maj Ver : 0x1 Fabric Min Ver : 0x0 SW Manageability: 0x4 HW Manageability: 0x1 Max Boot Time : 6 minutes Link Tuning : unsupported Auto Reboot : enabled Burned In MAC : 00:01:e8:43:de:e1 No Of MAC
PAGE 114
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Without the page or stack-unit option, the command output is continuous. Use Ctrl-z to interrupt the command output. The save option works with other filtering commands. This allows you to save specific information of a show command. The save entry must always be the last option.
PAGE 115
Directory of flash: 1 drwx 4096 2 drwx 2048 3 drwx 4096 4 drwx 4096 5 d--4096 6 -rwx 10303 7 -rwx 7366 8 -rwx 4 9 -rwx 12829 10 drwx 4096 11 -rwx 7689 Jan May Jan Jan Jan Mar Apr Feb Feb Mar Feb 01 16 24 24 24 15 20 19 18 08 21 1980 2012 2012 2012 2012 2012 2012 2012 2012 2012 2012 01:00:00 10:49:01 19:38:32 19:38:32 19:38:34 18:37:20 10:57:02 07:05:02 02:24:14 22:58:54 04:45:40 +01:00 +01:00 +01:00 +01:00 +01:00 +01:00 +01:00 +01:00 +01:00 +01:00 +01:00 . ..
PAGE 116
ARP statistics: Rcvd: 43988 requests, 24518 replies, 10 wrong interface Sent: 42 requests, 6 replies (0 proxy) Related Commands show version — Displays the Dell Networking OS version. show system — Displays the current switch status. show environment — Displays the system component status. show processes memory — Displays memory usage based on running processes. telnet Connect through Telnet to a server. The Telnet client and server in the Dell Networking Operating System (OS) support IPv4 connections.
PAGE 117
terminal xml Enable XML mode in Telnet and SSH client sessions. Syntax terminal xml To exit XML mode, use the terminal no xml command. Defaults Command Modes Command History Usage Information Disabled • EXEC • EXEC Privilege Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command enables the XML input mode where you can either cut and paste XML requests or enter the XML requests line-by-line.
PAGE 118
Example (IPv4) Dell#traceroute www.force10networks.com Translating "www.force10networks.com"...domain server (10.11.0.1) [OK] Type Ctrl-C to abort. ----------------------------------------------Tracing the route to www.force10networks.com (10.11.84.18), 30 hops max, 40 byte packets ----------------------------------------------TTL Hostname Probe1 Probe2 Probe3 1 10.11.199.190 001.000 ms 001.000 ms 002.000 ms 2 gwegress-sjc-02.force10networks.com (10.11.30.126) 005.000 ms 001.000 ms 001.000 ms 3 fw-sjc-01.
PAGE 119
Usage Information Each time you issue this command, it replaces the previously configured address of the same family. The no virtual-ip command takes an address/prefix-length argument, so that the desired address only is removed. If you enter the no virtual-ip command without any specified address, the IPv4 virtual addresses are removed. Example Dell#virtual-ip 10.11.197.99/16 write Copy the current configuration to either the startup-configuration file or the terminal.
PAGE 120
5 802.1X An authentication server must authenticate a client connected to an 802.1X switch port. Until the authentication, only extensible authentication protocol over LAN (EAPOL) traffic is allowed through the port to which a client is connected. After authentication is successful, normal traffic passes through the port. The Dell Networking operating software supports remote authentication dial-in service (RADIUS) and active directory environments using 802.1X Port Authentication.
PAGE 121
Defaults Disabled Command Modes EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. dot1x auth-fail-vlan Configure an authentication failure VLAN for users and devices that fail 802.1X authentication. Syntax dot1x auth-fail-vlan vlan-id [max-attempts number] To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id [maxattempts number] command.
PAGE 122
dot1x auth-server Configure the authentication server to RADIUS. Syntax dot1x auth-server radius Defaults none Command Modes CONFIGURATION Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. dot1x auth-type mab-only To authenticate a device with MAC authentication bypass (MAB), only use the host MAC address.
PAGE 123
Defaults Disabled Command Modes CONFIGURATION Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. dot1x authentication (Interface) — Enables dot1x on an interface. dot1x authentication (Interface) Enable dot1x on an interface. Enable dot1x both globally and at the interface level. Syntax dot1x authentication To disable dot1x on an interface, use the no dot1x authentication command.
PAGE 124
Usage Information 1X authentication is enabled when an interface is connected to the switch. If the host fails to respond within a designated amount of time, the authenticator places the port in the guest VLAN. If a device does not respond within 30 seconds, it is assumed that the device is not 802.1X capable. Therefore, a guest VLAN is allocated to the interface and authentication, for the device, occurs at the next reauthentication interval (dot1x reauthentication).
PAGE 125
dot1x mac-auth-bypass Enable MAC authentication bypass. If 802.1X times out because the host did not respond to the Identity Request frame, the system attempts to authenticate the host based on its MAC address. Syntax dot1x mac-auth-bypass To disable MAC authentication bypass on a port, use the no dot1x mac-auth-bypass command. Defaults Disabled Command Modes INTERFACE Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 126
Defaults 128 hosts can be authenticated on a single authenticator port. Command Modes INTERFACE Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. dot1x host-mode — Enables single-host or multi-host authentication. dot1x port-control Enable port control on an interface.
PAGE 127
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. dot1x reauthentication Enable periodic reauthentication of the client. Syntax dot1x reauthentication [interval seconds] To disable periodic reauthentication, use the no dot1x reauthentication command. Parameters interval seconds Defaults 3600 seconds (1 hour) Command Modes INTERFACE Command History (Optional) Enter the keyword interval then the interval time, in seconds, after which reauthentication is initiated.
PAGE 128
dot1x server-timeout Configure the amount of time after which exchanges with the server time-out. Syntax dot1x server-timeout seconds To return to the default, use the no dot1x server-timeout command. Parameters seconds Defaults 30 seconds Command Modes INTERFACE Command History Usage Information Enter a time-out value in seconds. The range is from 1 to 300, where 300 is implementation dependant. The default is 30. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 129
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. dot1x tx-period Configure the intervals at which EAPOL PDUs the Authenticator PAE transmits. Syntax dot1x tx-period seconds To return to the default, use the no dot1x tx-period command. Parameters seconds Defaults 30 seconds Command Modes INTERFACE Command History Enter the interval time, in seconds, that EAPOL PDUs are transmitted. The range is from 1 to 65535.
PAGE 130
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To display CoS mapping information only for the specified supplicant, enter a supplicant’s MAC address using the mac-address option. You can display the CoS mapping information applied to traffic from authenticated supplicants on 802.1Xenabled ports that are in Single-Hot, Multi-Host, and Multi-Supplicant authentication modes.
PAGE 131
• mac-address Defaults Command Modes Command History For a 40–Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. (Optional) MAC address of a supplicant. none • EXEC • EXEC privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information If you enable 802.1X multi-supplicant authentication on a port, additional 802.
PAGE 132
Mac-Auth-Bypass: Mac-Auth-Bypass Only: Tx Period: Quiet Period: ReAuth Max: Supplicant Timeout: Server Timeout: Re-Auth Interval: Max-EAP-Req: Host Mode: Auth PAE State: Backend State: Dell# Enable Enable 3 seconds 60 seconds 2 30 seconds 30 seconds 3600 seconds 2 SINGLE_HOST Authenticated Idle Dell#show dot1x interface tengigabitethernet 0/32 mac-address 00:00:00:00:00:10 Supplicant Mac: 0 0 0 0 0 10 Lookup for Mac: 802.
PAGE 133
6 Access Control Lists (ACL) Access control lists (ACLs) are supported by the Dell Networking Operating System (OS).
PAGE 134
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. remark Enter a description for an ACL entry. Syntax remark [remark-number] [description] Parameters remark-number Enter the remark number. The range is from 0 to 4294967290. NOTE: You can use the same sequence number for the remark and an ACL rule. description Defaults Enter a description of up to 80 characters. Not configured.
PAGE 135
resequence access-list Re-assign sequence numbers to entries of an existing access-list. Syntax Parameters Defaults Command Modes Command History resequence access-list {ipv4 | mac} {access-list-name StartingSeqNum Stepto-Increment} ipv4 | mac Enter the keyword ipv4 or mac to identify the access list type to resequence. access-list-name Enter the name of a configured IP access list. StartingSeqNum Enter the starting sequence number to resequence. The range is from 0 to 4294967290.
PAGE 136
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you have exhausted all the sequence numbers, this feature permits re-assigning a new sequence number to entries of an existing prefix list. Related Commands seq — Assigns a sequence number to a deny or permit filter in an IP access list while creating the filter. show config Display the current ACL configuration.
PAGE 137
access-class Apply a standard ACL to a terminal line. Syntax Parameters access-class access-list-name [ipv4 | ipv6] access-list-name Enter the name of a configured Standard ACL, up to 140 characters. ipv4 Enter the keyword ipv4 to configure an IPv4 access class. ipv6 Enter the keyword ipv6 to configure an IPv6 access class. Defaults Not configured. Command Modes LINE Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.
PAGE 138
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip access-group Apply an egress IP ACL to an interface. Syntax ip access-group access-list-name {in | out} [implicit-permit] [vlan vlanid] Parameters access-list-name Enter the name of a configured access list, up to 140 characters. in Enter the keyword in to apply the ACL to incoming traffic. out Enter the keyword out to apply the ACL to the outgoing traffic.
PAGE 139
Parameters access-list-name Enter the name of a configured MAC ACL, up to 140 characters. interface interface Enter the keyword interface then the one of the following keywords and slot/ port or number information: in Command Modes Command History • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 140
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip accounting access-lists Description “Extended IP...” Displays the name of the IP ACL. “seq 5...” Displays the filter. If the keywords count or byte were configured in the filter, the number of packets or bytes the filter processes is displayed at the end of the line. “order 4” Displays the QoS order of priority for the ACL entry.
PAGE 141
byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. dscp Enter this keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 142
forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Related Commands ip access-list standard — configures a standard ACL. permit — configures a permit filter. ip access-list standard Create a standard IP access list (IP ACL) to filter based on IP address. Syntax ip access-list standard access-list-name Parameters access-list-name Enter a string up to 140 characters long as the ACL name.
PAGE 143
• Parameters Use the no permit {source [mask] | any | host ip-address} command. source Enter the IP address in dotted decimal format of the network from which the packet was sent. mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter.
PAGE 144
packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval. If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs.
PAGE 145
lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
PAGE 146
forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Related Commands deny — configures a filter to drop packets. permit — configures a filter to forward packets. seq — assigns a sequence number to a deny or permit filter in an IP access list while creating the filter. Extended IP ACL Commands When an ACL is created without any rule and then applied to an interface, ACL behavior reflects an implicit permit.
PAGE 147
lowest; lower order numbers have a higher priority) If you did not use the keyword order, the ACLs have the lowest order by default (255). monitor OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. fragments Enter the keyword fragments to use ACLs to control packet fragments. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 148
Related Commands deny tcp — assigns a filter to deny TCP packets. deny udp — assigns a filter to deny UDP packets. ip access-list extended — creates an extended ACL. deny icmp To drop all or specific internet control message protocol (ICMP) messages, configure a filter.
PAGE 149
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added the support for flow-based monitoring on the MXL 10/40GbE Switch IO Module. 9.3(0.0) Added the support for logging ACLs on the MXL 10/40GbE Switch IO Module. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only.
PAGE 150
host ip-address Enter the keyword host then the IP address to specify a host IP address. dscp Enter this keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63.
PAGE 151
The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled. Command Modes Command History Usage Information CONFIGURATION-IP ACCESS-LIST-EXTENDED Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added the support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platforms. 9.3(0.0) Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module platforms. 8.3.16.
PAGE 152
8 0001111101000000 1111111111111111 8000 8000 1 Total Ports: 4001 Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM. Dell# Data Mask From To 1 0000000000000000 1111110000000000 0 #Covered 1023 1024 Total Ports: 1024 Related Commands deny — assigns a filter to deny IP traffic. deny udp — assigns a filter to deny UDP traffic. deny udp To drop user datagram protocol (UDP) packets meeting the filter criteria, configure a filter.
PAGE 153
destination Enter the IP address of the network or host to which the packets are sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 154
1 2 3 4 5 6 7 8 0000111110100000 0000111111000000 0001000000000000 0001100000000000 0001110000000000 0001111000000000 0001111100000000 0001111101000000 1111111111100000 1111111111000000 1111100000000000 1111110000000000 1111111000000000 1111111100000000 1111111111000000 1111111111111111 4000 4032 4096 6144 7168 7680 7936 8000 4031 4095 6143 7167 7679 7935 7999 8000 32 64 2048 1024 512 256 64 1 Total Ports: 4001 Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM.
PAGE 155
permit (for Extended IP ACLs) To pass IP packets meeting the filter criteria, configure a filter. Syntax permit {source mask | any | host ip-address} {destination mask | any | host ip-address} [count [bytes]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 156
Usage Information Version Description 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platforms. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 157
any Enter the keyword any to match and drop specific Ethernet traffic on the interface. host ip-address Enter the keyword host and then enter the IP address to specify a host IP address. destination Enter the IP address of the network or host to which the packets are sent. dscp Enter the keyword dscp to deny a packet based on the DSCP value. The range is 0 to 63.
PAGE 158
MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode.
PAGE 159
port port • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port parameter) Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent.
PAGE 160
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module platform. The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the “Quality of Service” chapter of the Dell Networking OS Configuration Guide. The switch cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented. Most ACL rules require one entry in the CAM.
PAGE 161
Related Commands ip access-list extended — creates an extended ACL. permit — assigns a permit filter for IP packets. permit udp — assigns a permit filter for UDP packets. permit udp To pass UDP packets meeting the filter criteria, configure a filter.
PAGE 162
fragments Enter the keyword fragments to use ACLs to control packet fragments. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
PAGE 163
6 0001111000000000 1111111100000000 7680 7935 256 7 0001111100000000 1111111111000000 7936 7999 64 8 0001111101000000 1111111111111111 8000 8000 1 Total Ports: 4001 Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM. Dell# Data Mask From To 1 0000000000000000 1111110000000000 0 #Covered 1023 1024 Total Ports: 1024 Related Commands ip access-list extended — creates an extended ACL. permit — assigns a permit filter for IP packets.
PAGE 164
host ip-address Enter the keyword host and then enter the IP address to specify a host IP address or hostname. operator (OPTIONAL) Enter one of the following logical operands: port port • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port parameter.) (OPTIONAL) Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535.
PAGE 165
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for the flow-based monitoring on the MXL 10/40GbE Switch IO Module. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only. The following applies: • The seq sequence-number command is applicable only in an ACL group.
PAGE 166
Port-channel and VLAN interfaces. As per the stipulated rules in the ACL, the traffic on the Interface/VLAN members or Portchannel members will be permitted or denied. The switch supports both Ingress and Egress MAC ACLs. clear counters mac access-group Clear counters for all or a specific MAC ACL. Syntax clear counters mac access-group [mac-list-name] Parameters Command Modes Command History mac-list-name (OPTIONAL) Enter the name of a configured MAC access list.
PAGE 167
In case of applying a MAC ACL to traffic entering or exiting a VLAN interface. Enter the VLAN interface mode and apply the mac acl in the following manner. mac access-group access-list-name {in | out} Related Commands 1. If the MAC ACL is applied on VLAN, none of the VLAN members should have an access list applied for that VLAN. 2. If the MAC ACL is applied on a Physical or Port Channel interface, the VLAN in which this port is associated should not have an access list applied. 3.
PAGE 168
show mac accounting access-list Display MAC access list configurations and counters (if configured). Syntax show mac accounting access-list access-list-name interface interface in | out Parameters access-list-name Enter the name of a configured MAC ACL, up to 140 characters.
PAGE 169
deny To drop packets with a the MAC address specified, configure a filter. Syntax deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log [interval minutes] [threshold—in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no deny {any | mac-source-address mac-source-address-mask} command.
PAGE 170
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 171
permit To forward packets from a specific source MAC address, configure a filter. Syntax permit {any | mac-source-address [mac-source-address-mask]} [count [byte]] | log [interval minutes] [threshold-in-msgs[count] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit {any | mac-source-address mac-source-address-mask} command.
PAGE 172
When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval. If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses.
PAGE 173
threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes..
PAGE 174
Extended MAC ACL Commands When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit. The following commands configure Extended MAC ACLs. The Switch supports both Ingress and Egress MAC ACLs. deny To drop packets that match the filter criteria, configure a filter.
PAGE 175
byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. Defaults Not configured. Command Modes CONFIGURATION-MAC ACCESS LIST-EXTENDED Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. permit — configures a MAC address filter to pass packets. seq — configures a MAC address filter with a specified sequence number.
PAGE 176
Related Commands mac access-list standard — configures a standard MAC access list. show mac accounting access-list — displays MAC access list configurations and counters (if configured). permit To pass packets matching the criteria specified, configure a filter.
PAGE 177
Defaults Not configured. Command Modes CONFIGURATION-MAC ACCESS LIST-EXTENDED Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. deny — configures a MAC ACL filter to drop packets. seq — configure a MAC ACL filter with a specified sequence number. seq Configure a filter with a specific sequence number.
PAGE 178
• llc - is the IEEE 802.3 frame format. • snap - is the IEEE 802.3 SNAP frame format. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. Defaults Not configured. Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 179
deny To drop packets meeting the criteria specified, configure a filter. Syntax Parameters deny ip-prefix [ge min-prefix-length] [le max-prefix-length] ip-prefix Specify an IP prefix in the network/length format. For example, 35.0.0.0/ 8 means match the first 8 bits of address 35.0.0.0. ge min-prefixlength (OPTIONAL) Enter the keyword ge and then enter the minimum prefix length, which is a number from zero (0) to 32.
PAGE 180
show ip prefix-list summary — displays a summary of the configured prefix lists. permit Configure a filter that passes packets meeting the criteria specified. Syntax permit ip-prefix [ge min-prefix-length] [le max-prefix-length] Parameters Command Modes Command History Usage Information ip-prefix Specify an IP prefix in the network/length format. For example, 35.0.0.0/8 means match the first 8 bits of address 35.0.0.0.
PAGE 181
ip-prefix /nn (OPTIONAL) Specify an IP prefix in the network/length format. For example, 35.0.0.0/8 means match the first 8 bits of address 35.0.0.0. ge min-prefixlength (OPTIONAL) Enter the keyword ge and then enter the minimum prefix length, which is a number from zero (0) to 32. le max-prefix-length (OPTIONAL) Enter the keyword le and then enter the maximum prefix length, which is a number from zero (0) to 32.
PAGE 182
Parameters Command Modes Command History Example prefix-name • EXEC • EXEC Privilege (OPTIONAL) Enter a text string as the name of the prefix list, up to 140 characters. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show ip prefix-list detail Ip Prefix-list with the last deletion/insertion: PL_OSPF_to_RIP ip prefix-list PL_OSPF_to_RIP: count: 3, range entries: 1, sequences: 5 - 25 seq 5 permit 1.1.1.
PAGE 183
continue To a route-map entry with a higher sequence number, configure a route-map. Syntax Parameters continue [sequence-number] sequence-number Defaults Not configured Command Modes ROUTE-MAP Command History Usage Information (OPTIONAL) Enter the route map sequence number. The range is from 1 to 65535. The default is: no sequence number Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 184
description Add a description to this route map. Syntax description description Parameters description Defaults none Command Modes ROUTE-MAP Command History Related Commands Enter a description to identify the route map (80 characters maximum). Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. route-map — Enables a route map. match interface To match routes whose next hop is on the interface specified, configure a filter.
PAGE 185
match ip route-source — redistributes routes that match routes advertised by other routers. match metric — redistributes routes that match a specific metric. match route-type — redistributes routes that match a route type. match tag — redistributes routes that match a specific tag. match ip address To match routes based on IP addresses specified in an access list, configure a filter. Syntax Parameters match ip address prefix-list-name prefix-list-name Defaults Not configured.
PAGE 186
Command Modes Command History Related Commands ROUTE-MAP Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. match interface — redistributes routes that match the next-hop interface. match ip address — redistributes routes that match an IP address. match ip route-source — redistributes routes that match routes advertised by other routers. match metric — redistributes routes that match a specific metric.
PAGE 187
match metric To match on a specified value, configure a filter. Syntax Parameters match metric metric-value metric-value Defaults Not configured. Command Modes ROUTE-MAP Command History Related Commands Enter a value to match. The range is from zero (0) to 4294967295. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. match interface — redistributes routes that match the next-hop interface.
PAGE 188
Related Commands match interface — redistributes routes that match the next-hop interface. match ip address — redistributes routes that match an IP address. match ip next-hop — redistributes routes that match the next-hop IP address. match ip route-source — redistributes routes that match routes advertised by other routers. match metric — redistributes routes that match a specific metric. match tag — redistributes routes that match a specific tag.
PAGE 189
Parameters Defaults map-name Enter a text string of up to 140 characters to name the route map for easy identification. permit (OPTIONAL) Enter the keyword permit to set the route map default as permit. If you do not specify a keyword, the default is permit. deny (OPTIONAL) Enter the keyword deny to set the route map default as deny. sequence-number (OPTIONAL) Enter a number to identify the route map for editing and sequencing with other route maps.
PAGE 190
set metric To assign a new metric to redistributed routes, configure a filter. Syntax set metric [+ | -] metric-value To delete a setting, use the no set metric command. Parameters + (OPTIONAL) Enter + to add a metric-value to the redistributed routes. - (OPTIONAL) Enter - to subtract a metric-value from the redistributed routes. metric-value Enter a number as the new metric value. The range is from zero (0) to 4294967295. Defaults Not configured.
PAGE 191
Related Commands set automatic-tag — computes the tag value of the route. set metric — specifies the metric value assigned to redistributed routes. set tag — specifies the tag assigned to redistributed routes. set tag To specify a tag for redistributed routes, configure a filter. Syntax Parameters set tag tag-value tag-value Defaults Not configured. Command Modes ROUTE-MAP Command History Related Commands Enter a number as the tag. The range is from zero (0) to 4294967295.
PAGE 192
show route-map Display the current route map configurations. Syntax show route-map [map-name] Parameters Command Modes Command History map-name • EXEC • EXEC Privilege (OPTIONAL) Enter the name of a configured route map, up to 140 characters. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 193
lowest; lower order numbers have a higher priority) If you did not use the keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
PAGE 194
deny (for Extended IP ACLs) Configure a filter that drops IP packets meeting the filter criteria. Syntax deny {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host ip-address} [count [byte]] [dscp value] [order] [monitor] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 195
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 196
source Enter an IP address in dotted decimal format of the network from which the packet was received. mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes.
PAGE 197
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 198
operator port port • syn: synchronize sequence numbers • urg: urgent field (OPTIONAL) Enter one of the following logical operand: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port command) Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535.
PAGE 199
Usage Information Version Description 9.3(0.0) Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module platforms. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. You can configure either count (packets) or count (bytes).
PAGE 200
Total Ports: 1024 Related Commands deny — assigns a filter to deny IP traffic. deny udp — assigns a filter to deny UDP traffic. deny udp To drop user datagram protocol (UDP) packets meeting the filter criteria, configure a filter.
PAGE 201
order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority) If you did not use the keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments.
PAGE 202
Total Ports: 4001 Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM. Dell# Data Mask From To 1 0000000000000000 1111110000000000 0 #Covered 1023 1024 Total Ports: 1024 Related Commands deny — assigns a filter to deny IP traffic. deny tcp — assigns a filter to deny TCP traffic. deny arp (for Extended MAC ACLs) Configure an egress filter that drops ARP packets on egress ACL supported line cards. (For more information, refer to your line card documentation).
PAGE 203
Enter the keyword opcode and then enter the number of the ARP opcode. The range is from 1 to 23. count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 204
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 205
byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) If you did not use the keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments.
PAGE 206
deny ether-type (for Extended MAC ACLs) Configure an egress filter that drops specified types of Ethernet packets on egress ACL supported line cards. (For more information, refer to your line card documentation).
PAGE 207
interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The time interval range is from of 1 to 10 minutes. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
PAGE 208
• Parameters Use the no deny {any | mac-source-address mac-source-address-mask} command. any Enter the keyword any to specify that all routes are subject to the filter. mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match).
PAGE 209
both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port.
PAGE 210
monitor Defaults (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. By default, 10 ACL logs are generated, if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
PAGE 211
permit (for Standard IP ACLs) To permit packets from a specific source IP address to leave the switch, configure a filter. Syntax permit {source [mask]| any | host ip-address} [no-drop] [count [byte]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit {source [mask] | any | host ip-address} command.
PAGE 212
Usage Information Version Description 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platforms. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platforms. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 213
The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. any Enter the keyword any to match and drop specific Ethernet traffic on the interface. vlan vlan-id Enter the keyword vlan and then enter the VLAN ID to filter traffic associated with a specific VLAN. The range is 1 to 4094 and 1 to 2094 for ExaScale (you can use IDs 1 to 4094). To filter all VLAN traffic, specify VLAN 1.
PAGE 214
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added the support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. 8.1.1.0 Introduced on the E-Series ExaScale. 7.4.1.0 Added the monitor option. 6.5.
PAGE 215
permit ether-type (for Extended MAC ACLs) Configure a filter that allows traffic with specified types of Ethernet packets. This command is supported only on 12-port GE line cards with SFP optics. For specifications, refer to your line card documentation.
PAGE 216
threshold-in msgs count (OPTIONAL) Enter the threshold-in msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
PAGE 217
MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode.
PAGE 218
fragments Enter the keyword fragments to use ACLs to control packet fragments. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
PAGE 219
permit udp To pass UDP packets meeting the filter criteria, configure a filter. Syntax permit udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte]] [order] [fragments] [threshold-in-msgs [count]] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 220
Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled. Command Modes CONFIGURATION-IP ACCESS-LIST-EXTENDED Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only.
PAGE 221
Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM. Dell# Data Mask From To 1 0000000000000000 1111110000000000 0 #Covered 1023 1024 Total Ports: 1024 Related Commands ip access-list extended — creates an extended ACL. permit — assigns a permit filter for IP packets. permit tcp — assigns a permit filter for TCP packets. permit (for Extended IP ACLs) To pass IP packets meeting the filter criteria, configure a filter.
PAGE 222
the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
PAGE 223
permit To forward packets from a specific source MAC address, configure a filter. Syntax permit {any | mac-source-address [mac-source-address-mask]} [count [byte]] | log [interval minutes] [threshold-in-msgs[count] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit {any | mac-source-address mac-source-address-mask} command.
PAGE 224
When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval. If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses.
PAGE 225
threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes..
PAGE 226
permit tcp To pass TCP packets meeting the filter criteria, configure a filter. Syntax permit tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [bit] [dscp] [operator port [port]] [count [byte]] [order] [fragments][log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 227
mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 228
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 229
Parameters sequence-number Enter a number from 0 to 4294967290. deny Enter the keyword deny to drop all traffic meeting the filter criteria.. permit Enter the keyword permit to forward all traffic meeting the filter criteria. destination-macaddress macaddress-mask Enter a MAC address and mask in the nn:nn:nn:nn:nn format. For the MAC address mask, specify which bits in the MAC address must match.
PAGE 230
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. 8.1.1.0 Introduced on the E-Series ExaScale. 7.4.1.0 Added the monitor option. 6.5.
PAGE 231
forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). NOTE: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead. seq ether-type Configure an egress filter with a specific sequence number that filters traffic with specified types of Ethernet packets.
PAGE 232
lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255). log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
PAGE 233
When you use the log option, the CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details. You cannot include IP, TCP, or UDP (Layer 3) filters in an ACL configured with ARP or Ether-type (Layer 2) filters. Apply Layer 2 ACLs to interfaces in Layer 2 mode. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 234
byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. dscp (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values. order (OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255).
PAGE 235
specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
PAGE 236
port port • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port parameter.) (OPTIONAL) Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent.
PAGE 237
Usage Information The order option is relevant in the context of the Policy QoS feature only. The following applies: • The seq sequence-number command is applicable only in an ACL group. • The order option works across ACL groups that have been applied on an interface via the QoS policy framework. • The order option takes precedence over seq sequence-number. • If sequence-number is not configured, the rules with the same order value are ordered according to their configuration order.
PAGE 238
• Parameters Use the no permit udp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} command. source address Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format. The range is /0 to /128. The :: notation specifies successive hexadecimal fields of zero. mask Enter a network mask in /prefix format (/x).
PAGE 239
Usage Information Version Description 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 240
mask Enter a network mask in /prefix format (/x). any Enter the keyword any to specify that all routes are subject to the filter. host ipv6-address Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zero.
PAGE 241
Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled. Command Modes ACCESS-LIST Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.
PAGE 242
• Parameters Use the no permit icmp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} command. source address Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. The :: notation specifies successive hexadecimal fields of zero. mask Enter a network mask in /prefix format (/x).
PAGE 243
packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval. If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs.
PAGE 244
threshold-in-msgs (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
PAGE 245
port Defaults • lt = less than • range = inclusive range of ports (you must specify two ports for the port command) Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP count (OPTIONAL) Enter the keyword count to count the packets that filter the processes.
PAGE 246
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 247
• port Defaults range = inclusive range of ports (you must specify two ports for the port command) Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21= FTP • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent.
PAGE 248
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 249
Defaults interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The time interval range is from 1 to 10 minutes. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
PAGE 250
To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command syntax if you know the filter’s sequence number • Use the no deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command count OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. dscp (OPTIONAL) Enter the keyword dscp to match to the IP DSCP values.
PAGE 251
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress directions. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 252
7 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM) This chapter describes the access control list (ACL) virtual local area network (VLAN) group and content addressable memory (CAM) enhancements. member vlan Add VLAN members to an ACL VLAN group. Syntax member vlan {VLAN-range} Parameters VLAN-range Enter the member VLANs using comma-separated VLAN IDs, a range of VLAN IDs, a single VLAN ID, or a combination.
PAGE 253
ip access-group Apply an egress IP ACL to the ACL VLAN group. Syntax Parameters ip access-group {group name} out implicit-permit group-name Enter the name of the ACL VLAN group where you want the egress IP ACLs applied, up to 140 characters. out Enter the keyword out to apply the ACL to outgoing traffic.
PAGE 254
Usage Information When an ACL-VLAN-Group name or the Access List Group Name contains more than 30 characters, the name is truncated in the show acl-vlan-group command output. Examples The following sample illustrates the output of the show acl-vlan-group command. NOTE: Some group names and some access list names are truncated.
PAGE 255
Usage Information After CAM configuration for ACL VLAN groups is performed, you must reboot the system to enable the settings to be stored in nonvolatile storage. During the initialization of CAM, the chassis manager reads the NVRAM and allocates the dynamic VCAP regions. The following table describes the output fields of this show command: Example Field Description Chassis Vlan Cam ACL Details about the CAM blocks allocated for ACLs for various VLAN operations at a system-wide, global level.
PAGE 256
Command Modes Command History Usage Information CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL platform. The VLAN ContentAware Processor (VCAP) application is a pre-ingress CAP that modifies the VLAN settings before packets are forwarded. To support the ACL CAM optimization functionality, the CAM carving feature is enhanced. A total of four VACP groups are present, of which two are for fixed groups and the other two are for dynamic groups.
PAGE 257
Example: Field Description CAM-Region Type of area in the CAM block that is used for ACL VLAN groups Total CAM space Total amount of space in the CAM block Used CAM Amount of CAM space that is currently in use Available CAM Amount of CAM space that is free and remaining to be allocated for ACLs Dell#show cam-usage Stackunit|Portpipe|CAM Partition|Total CAM|Used CAM|AvailableCAM ========|========|==============|=========|========|======== 0 | 0 | IN-L3 ACL | 512 | 1 | 511 | | IN-V6 ACL | 0 | 0 | 0
PAGE 258
member vlan 1-100 ip access-group test in Dell#show running-config acl-vlan-group ! acl-vlan-group Test member vlan 1-100 ip access-group test in Test acl-vlan-group Create an ACL VLAN group. Syntax acl-vlan-group {group name} To remove an ACL VLAN group, use the no acl-vlan-group {group name} command. Parameters group-name Specify the name of the ACL VLAN group. The name can contain a maximum 140 characters.
PAGE 259
Parameters detail Display information in a line-by-line format to display the names in their entirety. Without the detail option, the output is displayed in a table style and information may be truncated. Default No default behavior or values Command Modes EXEC EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform. Usage Information The output for this command displays in a line-by-line format.
PAGE 260
Usage Information 260 Enter a description for each ACL VLAN group that you create for effective and streamlined administrative and logging purposes.
PAGE 261
8 Bidirectional Forwarding Detection (BFD) Bidirectional forwarding detection (BFD) is a detection protocol that provides fast forwarding path failure detection. The Dell Networking Operating System (OS) implementation is based on the standards specified in the IETF Draft draft-ietf-bfdbase-03 and supports BFD on all Layer 3 physical interfaces including virtual local area network (VLAN) interfaces and portchannels.
PAGE 262
ROUTER ISIS INTERFACE (BFD for VRRP only) Command History Usage Information Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. All neighbors inherit the timer values configured with the bfd neighbor command except in the following cases: • Timer values configured with the isis bfd all-neighbors commands in INTERFACE mode override timer values configured with the bfd neighbor command.
PAGE 263
bfd enable (Configuration) Enable BFD on all interfaces. Syntax bfd enable Disable BFD using the no bfd enable command. Defaults BFD is disabled by default. Command Modes CONFIGURATION Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. bfd enable (Interface) Enable BFD on an interface. Syntax bfd enable Defaults BFD is enabled on all interfaces when you enable BFD from CONFIGURATION mode.
PAGE 264
role [active | passive] Enter the role that the local system assumes: • Active — The active system initiates the BFD session. Both systems can be active for the same session. • Passive — The passive system does not initiate a session. It only responds to a request for session initialization from the active system. The default is Active. Defaults Refer to Parameters. Command Modes INTERFACE Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 265
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Protocol Liveness is a feature that notifies the BFD Manager when a client protocol (for example, OSPF and ISIS) is disabled. When a client is disabled, all BFD sessions for that protocol are torn down. Neighbors on the remote system receive an Admin Down control packet and are placed in the Down state.
PAGE 266
ipv6 ospf bfd all-neighbors Establish BFD sessions with all OSPFv3 neighbors on a single interface or use non-default BFD session parameters. Syntax ipv6 ospf bfd all-neighbors [disable | [interval interval min_rx min_rx multiplier value role {active | passive}]] To disable all BFD sessions on an OSPFv3 interface implicitly, use the no ipv6 ospf bfd allneighbors [disable | [interval interval min_rx min_rx multiplier value role {active | passive}]]command in interface mode..
PAGE 267
Parameters disable (OPTIONAL) Enter the keyword disable to disable BFD on this interface. interval milliseconds (OPTIONAL) Enter the keywords interval to specify non-default BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 200. min_rx milliseconds Enter the keywords min_rx to specify the minimum rate at which the local system would like to receive control packets from the remote system. The range is from 50 to 1000. The default is 200.
PAGE 268
Defaults none Command Modes ROUTER BGP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you enable a BFD session with a specified BGP neighbor or peer group using the bfd neighbor command, the default BFD session parameters are used (interval: 200 milliseconds, min_rx: 200 milliseconds, multiplier: 3 packets, and role: active) if you have not specified parameters with the bfd neighbor command.
PAGE 269
• The neighbor does not inherit the global BFD disable values configured with the bfd all-neighbor command or configured for the peer group to which the neighbor belongs. • The neighbor only inherits the global timer values configured with the bfd all-neighbor command: interval, min_rx, and multiplier.
PAGE 270
O R - OSPF - Static Route (RTM) LocalAddr * 10.1.3.2 Example (Detail) RemoteAddr 10.1.3.1 Interface State Rx-int Tx-int Mult Clients Gi 1/3 Up 300 250 3 C Dell#show bfd neighbors detail Session Discriminator: 1 Neighbor Discriminator: 1 Local Addr: 10.1.3.2 Local MAC Addr: 00:01:e8:02:15:0e Remote Addr: 10.1.3.
PAGE 271
9 Border Gateway Protocol IPv4 (BGPv4) For detailed information about configuring BGP, refer to the BGP chapter in the Dell Networking OS Configuration Guide.
PAGE 272
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. aggregate-address To minimize the number of entries in the routing table, summarize a range of prefixes. Syntax aggregate-address ip-address mask [advertise-map map-name] [as-set] [attribute-map map-name] [summary-only] [suppress-map map-name] Parameters ip-address mask Enter the IP address and mask of the route to be the aggregate address.
PAGE 273
In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed. The opposite is also true: routes meeting the permit clause are suppressed. If the route is injected via the network command, that route still appears in the routing table if the summary-only parameter is configured in the aggregate-address command. The summary-only parameter suppresses all advertisements.
PAGE 274
Defaults Disabled (that is, the software only compares MEDs from neighbors within the same AS). Command Modes ROUTER BGP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Any update without a MED attribute is the least preferred route. If you enable this command, use the clear ip bgp * command to recompute the best path.
PAGE 275
Dell(conf)#router bgp 1 Dell(conf-router_bgp)#bgp asnotation asplain Dell(conf-router_bgp)#ex Dell(conf)#do show run |grep bgp router bgp 1 bgp four-octet-as-support Dell(conf)# Related Commands bgp four-octet-as-support — enables 4-byte support for the BGP process. bgp bestpath as-path ignore Ignore the AS PATH in BGP best path calculations. Syntax bgp bestpath as-path ignore To return to the default, enter the no bgp bestpath as-path ignore command.
PAGE 276
bgp bestpath med confed Enable MULTI_EXIT_DISC (MED) attribute comparison on paths learned from BGP confederations. Syntax bgp bestpath med confed To disable MED comparison on BGP confederation paths, enter the no bgp bestpath med confed command. Defaults Disabled Command Modes ROUTER BGP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 277
Command Modes Command History Usage Information ROUTER BGP Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Configuring this option retains the current best-path. When sessions are then reset, the oldest received path is chosen as the best-path. bgp client-to-client reflection Allows you to enable route reflection between clients in a cluster.
PAGE 278
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When a BGP cluster contains only one route reflector, the cluster ID is the route reflector’s router ID. For redundancy, a BGP cluster may contain two or more route reflectors. Assign a cluster ID with the bgp cluster-id command. Without a cluster ID, the route reflector cannot recognize route updates from the other route reflectors within the cluster.
PAGE 279
Related Commands bgp four-octet-as-support — enables 4-byte support for the BGP process. bgp confederation peers Specify the autonomous systems (ASs) that belong to the BGP confederation. Syntax bgp confederation peers as-number [...as-number] To return to the default, use the no bgp confederation peers command. Parameters as-number Enter the AS number. The range is from 0 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format). ...
PAGE 280
Parameters half-life (OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half after the half-life period expires. The range is from 1 to 45. The default is 15 minutes. reuse (OPTIONAL) Enter a number as the reuse value, which is compared to the flapping route’s Penalty value. If the Penalty value is less than the reuse value, the flapping route is once again advertised (or no longer suppressed).
PAGE 281
value, the more the route is preferred. The range is from 0 to 4294967295. The default is 100. Defaults 100 Command Modes ROUTER BGP Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information All routers apply the bgp default local-preference command setting within the AS. To set the local preference for a specific route, use the set local-preference command in ROUTE-MAP mode.
PAGE 282
bgp fast-external-failover Enable the fast external failover feature, which immediately resets the BGP session if a link to a directly connected external peer fails. Syntax bgp fast-external-failover To disable fast external failover, use the no bgp fast-external-failover command. Defaults Enabled Command Modes ROUTER BGP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 283
bgp graceful-restart To support graceful restart as a receiver only, enable graceful restart on a BGP neighbor, a BGP node, or designate a local router. Syntax bgp graceful-restart [restart-time seconds] [stale-path-time seconds] [role receiver-only] To return to the default, use the no bgp graceful-restart command. Parameters restart-time seconds Enter the keyword restart-time then the maximum number of seconds to restart and bring-up all the peers. The range is from 1 to 3600 seconds.
PAGE 284
Usage Information In Non-Deterministic mode, paths are compared in the order in which they arrive. This method can lead to the system choosing different best paths from a set of paths, depending on the order in which they are received from the neighbors because MED may or may not get compared between adjacent paths. In Deterministic mode (no bgp non-deterministic-med), the system compares MED between adjacent paths within an AS group because all paths in the AS group are from the same AS.
PAGE 285
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. BGP uses regular expressions (regex) to filter route information. In particular, the use of regular expressions to filter routes based on AS-PATHs and communities is common. In a large-scale configuration, filtering millions of routes based on regular expressions can be quite CPU intensive, as a regular expression evaluation involves generation and evaluation of complex finite state machines.
PAGE 286
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Peering sessions are reset when you change the router ID of a BGP router. bgp soft-reconfig-backup To avoid the peer from resending messages, use this command only when route-refresh is not negotiated. Syntax bgp soft-reconfig-backup To return to the default setting, use the no bgp soft-reconfig-backup command. Defaults Off Command Modes ROUTER BGP Command History Version Description 9.9(0.
PAGE 287
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. capture bgp-pdu max-buffer-size — specifies a size for the capture buffer. show capture bgp-pdu neighbor — displays BGP packet capture information. capture bgp-pdu max-buffer-size Set the size of the BGP packet capture buffer. This buffer size pertains to both IPv4 and IPv6 addresses.
PAGE 288
soft (OPTIONAL) Enter the keyword soft to configure and activate policies without resetting the BGP TCP session, that is, BGP Soft Reconfiguration. NOTE: If you enter the clear ip bgp ip-address soft command, both inbound and outbound policies are reset. Command Modes Command History Related Commands in (OPTIONAL) Enter the keyword in to activate only inbound policies. out (OPTIONAL) Enter the keyword out to activate only outbound policies. EXEC Privilege Version Description 9.9(0.
PAGE 289
Parameters ip-address mask (OPTIONAL) Enter an IP address in dotted decimal format and the prefix mask in slash format (/x) to reset only that prefix. filter-list as-pathname (OPTIONAL) Enter the keywords filter-list then the name of a configured AS-PATH list. regexp regularexpression (OPTIONAL) Enter the keyword regexp then regular expressions. Use one or a combination of the following: • . = (period) any single character (including a white space).
PAGE 290
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug ip bgp Display all information on BGP, including BGP events, keepalives, notifications, and updates. Syntax debug ip bgp [ip-address | peer-group peer-group-name] [in | out] To disable all BGP debugging, use the no debug ip bgp command.
PAGE 291
debug ip bgp dampening View information on routes being dampened. Syntax debug ip bgp dampening [in | out] To disable debugging, use the no debug ip bgp dampening command. Parameters Command Modes Command History Related Commands in (OPTIONAL) Enter the keyword in to view only inbound dampened routes. out (OPTIONAL) Enter the keyword out to view only outbound dampened routes. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 292
debug ip bgp keepalives Display information about BGP keepalive messages. Syntax debug ip bgp [ip-address | peer-group peer-group-name] keepalives [in | out] To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-groupname] keepalives [in | out] command. Parameters Command Modes Command History Usage Information ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
PAGE 293
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To remove all configured debug commands for BGP, enter the no debug ip bgp command. debug ip bgp soft-reconfiguration Enable soft-reconfiguration debug. Syntax debug ip bgp {ip-address | peer-group-name} soft-reconfiguration To disable, use the no debug ip bgp {ip-address | peer-group-name} softreconfiguration command.
PAGE 294
Command Modes Command History Usage Information ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group-name (OPTIONAL) Enter the name of the peer group to disable or enable all routers within the peer group. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To remove all configured debug commands for BGP, enter the no debug ip bgp command.
PAGE 295
To remove the description, use the no description {description} command. Parameters description Defaults none Command Modes ROUTER BGP Command History Related Commands Enter a description to identify the BGP protocol (80 characters maximum). Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. router bgp — enters ROUTER mode on the switch. max-paths Configure the maximum number of parallel routes (multipath support) BGP supports.
PAGE 296
To disable, use the no neighbor [ip-address | peer-group-name] activate command. Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group-name (OPTIONAL) Enter the name of the peer group. activate Enter the keyword activate to enable the neighbor/peer group in the new AFI/ SAFI. Defaults Disabled Command Modes CONFIGURATION-ROUTER-BGP-ADDRESS FAMILY Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.
PAGE 297
neighbor advertisement-interval Set the advertisement interval between BGP neighbors or within a BGP peer group. Syntax neighbor {ip-address | peer-group-name} advertisement-interval seconds To return to the default value, use the no neighbor {ip-address | peer-group-name} advertisement-interval command. Parameters Defaults Command Modes Command History ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
PAGE 298
neighbor allowas-in Set the number of times an AS number can occur in the AS path. Syntax neighbor {ip-address | peer-group-name} allowas-in number To return to the default value, use the no neighbor {ip-address | peer-group-name} allowas-in command. Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
PAGE 299
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you apply a route map to a BGP peer or neighbor with the neighbor default-originate command configured, the software does not apply the set filters in the route map to that BGP peer or neighbor. neighbor description Assign a character string describing the neighbor or group of neighbors (peer group).
PAGE 300
in Enter the keyword in to distribute only inbound traffic. out Enter the keyword out to distribute only outbound traffic. Defaults Not configured. Command Modes ROUTER BGP Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Other BGP filtering commands include: neighbor filter-list, ip as-path access-list, and neighbor route-map.
PAGE 301
neighbor fall-over Enable or disable fast fall-over for BGP neighbors. Syntax neighbor {ipv4-address | peer-group-name} fall-over To disable, use the no neighbor {ipv4-address | peer-group-name} fall-over command. Parameters ipv4-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group. Defaults Disabled. Command Modes ROUTER BGP Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 302
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This feature advertises to BGP neighbors through a capability advertisement. In Receiver Only mode, BGP saves the advertised routes of peers that support this capability when they restart. neighbor local-as To accept external routes from neighbors with a local AS number in the AS number path, configure Internal BGP (IBGP) routers.
PAGE 303
Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group. maximum Enter a number as the maximum number of prefixes allowed for this BGP router. The range is from 1 to 4294967295. threshold (OPTIONAL) Enter a number to be used as a percentage of the maximum value. When the number of prefixes reaches this percentage of the maximum value, the software sends a message. The range is from 1 to 100 percent. The default is 75.
PAGE 304
Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Configure the same password on both BGP peers or a connection does not occur. When you configure MD5 authentication between two BGP peers, each segment of the TCP connection between them is verified and the MD5 digest is checked on every segment sent on the TCP connection.
PAGE 305
Usage Information You can assign up to 256 peers to one peer group. When you add a peer to a peer group, it inherits all the peer group’s configured parameters.
PAGE 306
neighbor peer-group passive Enable passive peering on a BGP peer group, that is, the peer group does not send an OPEN message, but responds to one. Syntax neighbor peer-group-name peer-group passive [limit sessions] To delete a passive peer-group, use the no neighbor peer-group-name peer-group passive command. Parameters peer-group-name Enter a text string up to 16 characters long as the name of the peer group.
PAGE 307
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To accept 4-byte formats before entering a 4 byte AS Number, configure your system. If the number parameter is the same as the AS number used in the router bgp command, the remote AS entry in the neighbor is considered an internal BGP peer entry. This command creates a peer and the newly created peer is disabled (Shutdown).
PAGE 308
neighbor route-map Apply an established route map to either incoming or outbound routes of a BGP neighbor or peer group. Syntax neighbor {ip-address | peer-group-name} route-map map-name {in | out} To remove the route map, use the no neighbor {ip-address | peer-group-name} routemap map-name {in | out} command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group. map-name Enter the name of an established route map.
PAGE 309
Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. A route reflector reflects routes to the neighbors assigned to the cluster. Neighbors in the cluster do not need not to be fully meshed. By default, when you use no route reflector, the internal BGP (IBGP) speakers in the network must be fully meshed.
PAGE 310
The neighbor shutdown command terminates all BGP sessions on the BGP neighbor or BGP peer group. Use this command with caution as it terminates the specified BGP sessions. When a neighbor or peer group is shut down, use the show ip bgp summary command to confirm its status. Related Commands show ip bgp summary — displays the current BGP configuration. show ip bgp neighbors — displays the current BGP neighbors. neighbor soft-reconfiguration inbound Enable soft-reconfiguration for BGP.
PAGE 311
To return to the default values, use the no neighbor {ip-address | peer-group-name} timers command. Parameters Defaults Command Modes Command History Usage Information ip-address Enter the IP address of the peer router in dotted decimal format. peer-group-name Enter the name of the peer group to set the timers for all routers within the peer group. keepalive Enter a number for the time interval, in seconds, between keepalive messages sent to the neighbor routers. The range is from 1 to 65535.
PAGE 312
Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Loopback interfaces are up constantly and the BGP session may need one interface constantly up to stabilize the session. The neighbor update-source command is not necessary for directly connected internal BGP sessions.
PAGE 313
To remove a network, use the no network ip-address mask [route-map map-name] command. Parameters ip-address Enter an IP address in dotted decimal format of the network. mask Enter the mask of the IP address in the slash prefix length format (for example, / 24). The mask appears in command outputs in dotted decimal format (A.B.C.D). route-map mapname (OPTIONAL) Enter the keyword route-map then the name of an established route map.
PAGE 314
Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Although the system does not generate a route due to the backdoor config, there is an option for injecting/ sourcing a local route in the presence of network backdoor config on a learned route. redistribute Redistribute routes into BGP.
PAGE 315
internal and applied outbound to an EBGP peer/peer-group, the advertised routes corresponding to those peer/peer-groups have the IGP cost set as MED. If you do not configure the default-metric command, in addition to the redistribute command, or there is no route map to set the metric, the metric for redistributed static and connected is “0”. To redistribute the default route (0.0.0.0/0), configure the neighbor default-originate command.
PAGE 316
router bgp To configure and enable BGP, enter ROUTER BGP mode. Syntax router bgp as-number To disable BGP, use the no router bgp as-number command. Parameters as-number Defaults Not enabled. Command Modes CONFIGURATION Command History Usage Information Enter the AS number. The range is from 1 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format). Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 317
00000000 00000001 0181a1e4 0181a25c 41af9400 00000000 PDU[2] : len 19, captured 00:34:51 ago ffffffff ffffffff ffffffff ffffffff 00130400 PDU[3] : len 19, captured 00:34:51 ago ffffffff ffffffff ffffffff ffffffff 00130400 [. . .] Outgoing packet capture enabled for BGP neighbor 20.20.20.
PAGE 318
Parameters Command Modes Command History Usage Information ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. network (OPTIONAL) Enter the network address (in dotted decimal format) of the BGP network to view information only on that network. network-mask (OPTIONAL) Enter the network mask (in slash prefix format) of the BGP network address.
PAGE 319
*> 4.24.187.12/30 *> 4.24.202.0/30 *> 4.25.88.0/30 *> 5.0.0.0/9 *> 5.0.0.0/10 *> 5.0.0.0/11 --More-Related Commands 63.114.8.33 63.114.8.33 63.114.8.33 63.114.8.33 63.114.8.33 63.114.8.33 0 0 0 0 0 0 0 0 0 18508 18508 18508 18508 18508 18508 209 i 209 i 209 3561 3908 i ? ? ? show ip bgp community — views the BGP communities. neighbor maximum-prefix — controls the number of network prefixes received. show ip bgp cluster-list View BGP neighbors in a specific cluster.
PAGE 320
Origin codes: i - IGP, e - EGP, ? - incomplete Network * I 10.10.10.1/32 * I *>I * I * I * I * I 10.19.75.5/32 * I *>I * I * I * I * I 10.30.1.0/24 * I *>I * I * I * I Next Hop 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.
PAGE 321
All routes with the NO_EXPORT (0xFFFFFF01) community attribute must not be advertised outside a BGP confederation boundary. Command Modes Command History Usage Information • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To view the total number of COMMUNITY attributes found, use the show ip bgp summary command. The text line above the route table states the number of COMMUNITY attributes found.
PAGE 322
*>i 6.151.0.0/1 --More-- 205.171.0.16 100 0 209 7170 1455 i show ip bgp community-list View routes that a specific community list affects. Syntax show ip bgp [ipv4 unicast] community-list community-list-name [exact-match] Parameters Command Modes Command History Usage Information ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. community-listname Enter the name of a configured IP community list (maximum 140 characters).
PAGE 323
Network Dell# Next Hop Metric LocPrf Weight Path show ip bgp dampened-paths View BGP routes that are dampened (non-active). Syntax Command Modes Command History Usage Information Example show ip bgp [ipv4 unicast] dampened-paths • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp damp command shown in the following example.
PAGE 324
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 325
NdAFWLen 0 : NdAfNH : NdAFRedRttP 0x41a0d400 : NdRecCtxAdd 1101110868 NdRedCtxAddrLen 255 : NdAfRedMkrP 0x41a19e88 : AFAggRttP 0x41a0d600 : AfAggCtxAddr 1101111028 : AfAggrCtxAddrLen 255 AfNumAggrPfx 0 : AfNumAggrASSet 0 : AfNumSuppmap 0 : AfNumAggrValidPfx 0 : AfMPathRttP 0x41a0d700 MpathCtxAddr 1101111140 : MpathCtxAddrlen 255 : AfEorSet 0x41a19f98 : NumDfrdPfx 0 AfActPeerHd 0x41a1a3a4 : AfExtDist 1101112312 : AfIntDist 200 : AfLocDist 200 AfNumRRc 0 : AfRR 0 : AfNetRttP 0x41a0d300 : AfNetCtxAddr 11011123
PAGE 326
Parameters Command Modes Command History Usage Information Example ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. as-path-name Enter an AS-PATH access list name. The range is 140 characters. • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp filter-list hello command shown in the following example.
PAGE 327
*>I * I * I * I * I * I * I Dell# 6.1.5.1 6.1.6.1 6.1.20.1 6.1.20.0/24 192.100.11.2 192.100.8.2 192.100.9.2 192.100.10.2 20000 20000 20000 20000 20000 20000 20000 9999 9999 9999 9999 9999 9999 9999 0 0 0 0 0 0 0 ? ? ? ? ? ? ? show ip bgp flap-statistics View flap statistics on BGP routes.
PAGE 328
Usage Information Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp flap command shown in the following example. Field Description Network Displays the network ID to which the route is flapping. From Displays the IP address of the neighbor advertising the flapping route. Flaps Displays the number of times the route flapped. Duration Displays the hours:minutes:seconds since the route first flapped.
PAGE 329
Example Field Description Metric Displays the BGP route’s metric, if assigned. LocPrf Displays the BGP LOCAL_PREF attribute for the route. Weight Displays the route’s weight. Path Lists all the ASs the route passed through to reach the destination network. Dell>show ip bgp inconsistent-as BGP table version is 280852, local router ID is 10.1.2.
PAGE 330
flap-statistics (OPTIONAL) Enter the keywords flap-statistics to view flap statistics on the neighbor’s routes. routes (OPTIONAL) Enter the keyword routes to view only the neighbor’s feasible routes. received-routes [network [networkmask] (OPTIONAL) Enter the keywords received-routes then either the network address (in dotted decimal format) or the network mask (in slash prefix format) to view all information received from neighbors.
PAGE 331
The Lines Beginning with: Description Sent messages The line displays the number of BGP messages sent, the number of notifications (error messages), and the number of messages waiting in a queue for processing. Received updates This line displays the number of BGP updates received and sent. Soft reconfiguration This line indicates that soft reconfiguration inbound is configured. Minimum time Displays the minimum time, in seconds, between advertisements.
PAGE 332
MULTIPROTO_EXT(1) ROUTE_REFRESH(2) CISCO_ROUTE_REFRESH(128) Capabilities advertised to neighbor for IPv4 Unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) ROUTE_REFRESH(2) GRACEFUL_RESTART(64) CISCO_ROUTE_REFRESH(128) Route map for incoming advertisements is test Maximum prefix set to 4 with threshold 75 For address family: IPv4 Unicast BGP table version 34, neighbor version 34 5 accepted prefixes consume 20 bytes Prefix advertised 0, denied 4, withdrawn 0 Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by pe
PAGE 333
Path source: I - internal, a - aggregate, c - confed-external, r redistributed n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete Network D 70.70.21.0/24 D 70.70.22.0/24 D 70.70.23.0/24 D 70.70.24.0/24 Dell# Related Commands Next Hop 100.10.10.2 100.10.10.2 100.10.10.2 100.10.10.2 Metric LocPrf Weight Path 0 0 100 200 0 0 100 200 0 0 100 200 0 0 100 200 ? ? ? ? show ip bgp — views the current BGP routing table.
PAGE 334
show ip bgp paths View all the BGP path attributes in the BGP database. Syntax show ip bgp paths [regexp regular-expression] Parameters regexp regularexpression Enter a regular expression then use one or a combination of the following characters to match: • . = (period) any single character (including a white space). • * = (asterisk) the sequences in a pattern (zero or more sequences). • + = (plus) the sequences in a pattern (one or more sequences).
PAGE 335
0x1efe7d5c 0x1efe7c9c 0x1efe7b1c 0x1efe7d1c 0x1efe7c5c 0x1efe7cdc 0x1efe7c1c 0x1efe7bdc 0x1efe7b5c 0x1efe7adc 0x1efe7e9c 0x1efe7b9c Dell# 239 283 287 295 339 351 395 451 491 883 983 1003 10000 6 336 20000 10000 6 10000 6 6 78 0 2 120 10000 6 0 42 ? {102 103} ? ? 13 ? {92 93} ? 12 ? {82 83} ? {72 73} ? ? i 33 ? i show ip bgp paths as-path View all unique AS-PATHs in the BGP database.
PAGE 336
0x1ea3c02c Dell# 1021 4 show ip bgp paths community View all unique COMMUNITY numbers in the BGP database. Syntax show ip bgp paths community Command Modes Command History Usage Information Example 336 • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp paths community command shown in the following example.
PAGE 337
286:3033 517:5104 show ip bgp peer-group Allows you to view information on the BGP peers in a peer group. Syntax Parameters Command Modes Command History Usage Information Example ( ) show ip bgp [ipv4 unicast] peer-group [peer-group-name [detail | summary]] ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. peer-group-name (OPTIONAL) Enter the name of a peer group to view information about that peer group only.
PAGE 338
Peer-group pg1 BGP version 4 Minimum time between advertisement runs is 30 seconds For address family: IPv4 Unicast BGP neighbor is pg1 Number of peers in this group 4 Update packing has 4_OCTECT_AS support enabled Add-path support enabled Peer-group members (* - outbound optimized): 1.1.1.5 1.1.1.6 10.10.10.2* 20.20.20.
PAGE 339
• . = (period) any single character (including a white space). • * = (asterisk) the sequences in a pattern (zero or more sequences). • + = (plus) the sequences in a pattern (one or more sequences). • ? = (question mark) sequences in a pattern (either zero or one sequences). NOTE: Enter an escape sequence (CTRL+v) prior to entering the ? regular expression.
PAGE 340
*>I *>I *>I *>I i *>I *>I *>I *>I *>I *>I *>I 4.19.16.0/23 4.21.80.0/22 4.21.82.0/24 4.21.252.0/23 1.1.1.2 1.1.1.2 1.1.1.2 1.1.1.2 0 0 0 0 100 100 100 100 0 0 0 0 2914 2914 2914 2914 701 174 174 701 6167 4200 4200 6389 6167 6167 i 16559 i 16559 i 8063 19198 4.23.180.0/24 4.36.200.0/21 4.67.64.0/22 4.78.32.0/21 6.1.0.0/16 6.2.0.0/22 6.3.0.0/18 1.1.1.2 1.1.1.2 1.1.1.2 1.1.1.2 1.1.1.2 1.1.1.2 1.1.1.
PAGE 341
Field Description AS Displays the AS number of the neighbor. MsgRcvd Displays the number of BGP messages that neighbor received. MsgSent Displays the number of BGP messages that neighbor sent. TblVer Displays the version of the BGP table that was sent to that neighbor. InQ Displays the number of messages from that neighbor waiting to be processed. OutQ Displays the number of messages waiting to be sent to that neighbor.
PAGE 342
show running-config bgp To display the current BGP configuration, use this feature. Syntax show running-config bgp Defaults none Command Modes EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. timers bgp Adjust the BGP Keep Alive and Hold Time timers. Syntax timers bgp keepalive holdtime To return to the default, use the no timers bgp command.
PAGE 343
debug ip bgp dampening View information on routes being dampened. Syntax debug ip bgp ipv4 multicast dampening To disable debugging, use the no debug ip bgp ipv4 multicast dampening command. Parameters Command Modes dampening Enter the keyword dampening to clear route flap dampening information. EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 344
The higher the administrative distance assigned to a route means that your confidence in that route is low. Routes assigned an administrative distance of 255 are not installed in the routing table. Routes from confederations are treated as internal BGP routes. show ip bgp dampened-paths View BGP routes that are dampened (non-active). Syntax show ip bgp [ipv4 unicast] dampened-paths Command Modes Command History Usage Information Example • EXEC • EXEC Privilege Version Description 9.9(0.
PAGE 345
set extcommunity rt To set Route Origin community attributes in Route Map, use this feature. Syntax set extcommunity rt {as4 ASN4:NN [non-trans] | ASN:NNNN [non-trans] | IPADDR:NN [non-trans]} [additive] To delete the Route Origin community, use the no set extcommunity command. Parameters as4 ASN4:NN Enter the keyword as4 then the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value).
PAGE 346
ASN:NNNN Enter the 2-octet AS specific extended community number in the format ASN:NNNN (2-byte AS number:4-byte community value). IPADDR:NN Enter the IP address specific extended community in the format IPADDR:NN (4byte IPv4 Unicast Address:2-byte community value). non-trans (OPTIONAL) Enter the keywords non-trans to indicate a non-transitive BGP extended community.
PAGE 347
Example Field Description Community Displays the extended community attributes in this BGP path. Dell#show ip bgp paths extcommunity Total 1 Extended Communities Address 0x41d57024 Hash Refcount Extended Community 12272 1 RT:7:200 SoO:5:300 SoO:0.0.0.3:1285 Dell# show ip bgp extcommunity-list View information on all routes with Extended Community attributes.
PAGE 348
bgp soft-reconfig-backup To avoid the peer from resending messages, use this command only when route-refresh is not negotiated. Syntax bgp soft-reconfig-backup To return to the default setting, use the no bgp soft-reconfig-backup command. Defaults Disabled Command Modes ROUTER BGP Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 349
Command Modes Command History EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug ip bgp ipv6 unicast soft-reconfiguration Enable soft-reconfiguration debugging for IPv6 unicast routes.
PAGE 350
Command Modes Command History Related Commands CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ipv6 prefix-list — View the selected IPv6 prefix-list. show ipv6 prefix-list Displays the specified IPv6 prefix list. Syntax show ipv6 prefix-list detail {prefix-list name} | summary Parameters detail Display a detailed description of the selected IPv6 prefix list. prefix-list name Enter the name of the prefix list.
PAGE 351
Parameters ipv6-address prefixlength (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros. summary Command Modes Command History Display a summary of RPF routes. EXEC Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 352
10 Content Addressable Memory (CAM) Content addressable memory (CAM) commands are supported on the Dell Networking operating software on the platform. WARNING: If you are using these features for the first time, contact Dell Networking Technical Assistance Center (TAC) for guidance. CAM Profile Commands The CAM profiling feature allows you to partition the CAM to best suit your application.
PAGE 353
• IPv6 L3 ACL (ipv6acl): 0 • L3 QoS (ipv4qos): 1 • L2 QoS (l2qos): 1 • L2PT (L2PT): 0 • MAC ACL (IpMacAcl): 0 • VmanDualQos: 0 • EcfmAcl: 0 • nlbclusteracl: 0 • FcoeAcl: 4 • iscsiOptAcl: 2 l2acl number Enter the keyword l2acl and then the number of l2acl blocks. The range is from 1 to 8. ipv4acl number Enter the keyword ipv4acl and then the number of FP blocks for IPv4. The range is from 0 to 8. ipv6acl number Enter the keyword ipv6acl and then the number of FP blocks for IPv6.
PAGE 354
Command Modes Command History Usage Information Openflow number Enter the keyword openflow and then the number of FP blocks for open flow (multiples of 4). The range is from 0 to 8. fcoeacl number Enter the keyword fcoeacl and then the number of FP blocks for FCOE ACL. The range is from 0 to 6. Iscsioptacl number Enter the keyword iscsioptacl and then the number of FP blocks for iSCSI optimization ACL. The range is from 0 to 2.
PAGE 355
cam-optimization Optimize CAM utilization for QoS Entries by minimizing require policy-map CAM space. Syntax Parameters cam-optimization [qos] qos Optimize CAM usage for QoS. Defaults Disabled. Command Modes CONFIGURATION Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 356
FcoeAcl : iscsiOptAcl : ipv4pbr : vrfv4Acl : Openflow : fedgovacl : nlbclusteracl: 0 0 0 0 0 0 0 -- stack-unit 0 -Current Settings(in block sizes) 1 block = 128 entries L2Acl : 6 Ipv4Acl : 4 Ipv6Acl : 0 Ipv4Qos : 2 L2Qos : 1 L2PT : 0 IpMacAcl : 0 VmanQos : 0 VmanDualQos : 0 EcfmAcl : 0 FcoeAcl : 0 iscsiOptAcl : 0 ipv4pbr : 0 vrfv4Acl : 0 Openflow : 0 fedgovacl : 0 nlbclusteracl: 0 -- stack-unit 1 -Current Settings(in block sizes) 1 block = 128 entries L2Acl : 6 Ipv4Acl : 4 Ipv6Acl : 0 Ipv4Qos : 2 L2Qos :
PAGE 357
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The display reflects the settings implemented with the cam-acl-egress command.
PAGE 358
11 Control Plane Policing (CoPP) The Dell Networking OS supports the following CoPP commands. control-plane-cpuqos To manage control-plane traffic, enter control-plane mode and configure the switch. Syntax control-plane-cpuqos Defaults Not configured. Command Modes CONFIGURATION Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 359
policy-map-input — creates an input policy map. service-policy rate-limit-protocols Apply a policy for the system to rate limit control protocols on a per-protocol basis. Syntax Parameters service-policy rate-limit-protocols policy-name policy-name Enter the service-policy name, using a string up to 32 characters. Defaults Not configured. Command Modes CONTROL-PLANE-CPUQOS Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 360
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command applies the service-policy based on the type of protocol defined in the ACL rules. Create ACL and QoS policies prior to enabling this command.
PAGE 361
show ipv6 protocol-queue-mapping Display the queue mapping for each configured IPv6 protocol. Syntax show ipv6 protocol-queue-mapping Defaults Not configured. Command Modes EXEC Privilege Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 362
12 Data Center Bridging (DCB) Data center bridging (DCB) refers to a set of IEEE Ethernet enhancements that provide data centers with a single, robust, converged network to support multiple traffic types, including local area network (LAN), server, and storage traffic. The Dell Networking Operating System (OS) commands for data center bridging features include 802.1Qbb priority-based flow control (PFC), 802.1Qaz enhanced transmission selection (ETS), and the data center bridging exchange (DCBX) protocol.
PAGE 363
Parameters {ets-conf | ets-reco | pfc} Enter the PFC and ETS TLVs advertised, where: • ets-conf: enables the advertisement of ETS configuration TLVs. • ets-reco: enables the advertisement of ETS recommend TLVs. • pfc: enables the advertisement of PFC TLVs. Defaults All PFC and ETS TLVs are advertised. Command Modes PROTOCOL LLDP Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 364
the priority group. The sum of the allocated bandwidth to all queues in a priority group must be 100% of the bandwidth on the link. ETS-assigned bandwidth allocation applies only to data queues, not to control queues. The configuration of bandwidth allocation and strict-queue scheduling is not supported at the same time for a priority group. If you configure both, the configured bandwidth allocation is ignored for priority-group traffic when you apply the output policy on an interface.
PAGE 365
stack-unit all Enter the stack unit identification. Indicates the specific the stack unit or units. Entering all shows the status for all stacks. stack-port all Enter the port number of a port in a switch stack. Default None Command Modes CONFIGURATION mode Command History Version Description 9.3(0.0) Introduced on the MXL platform. Usage Information You can configure up to a maximum of four lossless (PFC) queues.
PAGE 366
Example Dell(conf-if-te-0/0)#dcb-policy buffer-threshold test dcbx port-role Configure the DCBX port role the interface uses to exchange DCB information. Syntax dcbx port-role {config-source | auto-downstream | auto-upstream | manual} To remove DCBX port role, use the no dcbx port-role {config-source | auto-downstream | auto-upstream | manual} command.
PAGE 367
• cee: configures the port to use CDD (Intel 1.01). • cin: configures the port to use Cisco-Intel-Nuova (DCBX 1.0). • ieee-v2: configures the port to use IEEE 802.1az (Draft 2.5). Defaults Auto Command Modes INTERFACE PROTOCOL LLDP Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. DCBX requires that you enable LLDP to advertise DCBX TLVs to peers.
PAGE 368
description Enter a text description of the DCB policy (PFC input or ETS output). Syntax description text To remove the text description, use the no description command. Parameters Defaults text Enter the description of the output policy. The maximum is 32 characters. none Command Modes Command History • DCB INPUT POLICY • DCB OUTPUT POLICY Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.
PAGE 369
To remove the configured iSCSI priority, use the no iscsi priority-bits command. Parameters priority-bitmap Defaults 0x10 Command Modes PROTOCOL LLDP Command History Usage Information Enter the priority-bitmap range. The range is from 1 to FF. Version 9.2(0.0) Introduced on the M I/O Aggregator. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command is available at the global level only.
PAGE 370
Usage Information Version Description 9.3(0.0) Introduced on the MXL platform. For each priority, you can specify the shared buffer threshold limit, the ingress buffer size, buffer limit for pausing the acceptance of packets, and the buffer offset limit for resuming the acceptance of received packets. When PFC detects congestion on a queue for a specified priority, it sends a pause frame for the 802.1p priority traffic to the transmitting device.
PAGE 371
pfc no-drop queues Configure the port queues that still function as no-drop queues for lossless traffic. Syntax pfc no-drop queues queue-range To remove the no-drop port queues, use the no pfc no-drop queues command. Parameters queue-range Enter the queue range. Separate the queue values with a comma; specify a priority range with a dash; for example, pfc no-drop queues 1,3 or pfc no-drop queues 2-3. The range is from 0 to 3. Defaults No lossless queues are configured.
PAGE 372
Parameters value Enter the priority list value. Separate priority values with a comma; specify a priority range with a dash; for example, priority-list 3,5-7. The range is from 0 to 7. Defaults none Command Modes PRIORITY-GROUP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default: • All 802.1p priorities are grouped in priority group 0.
PAGE 373
scheduler Configure the method used to schedule priority traffic in port queues. Syntax scheduler value To remove the configured priority schedule, use the no scheduler command. Parameters value Enter schedule priority value. The valid values are: • strict: strict-priority traffic is serviced before any other queued traffic. • werr: weighted elastic round robin (werr) provides low-latency scheduling for priority traffic on port queues.
PAGE 374
Example Dell(conf)#do show dcb stack-unit 0 port-set 0 DCB Status :Enabled PFC Queue Count :2 Total Buffer[lossy + lossless] (in KB):7982 PFC Total Buffer (in KB) :5872 PFC Shared Buffer (in KB) :832 PFC Available Buffer (in KB) :4860 Dell (conf)# show interface dcbx detail Displays the DCBX configuration on an interface. Syntax show interface port-type slot/port dcbx detail Parameters port-type Enter the port type. slot/port Enter the slot/port number.
PAGE 375
Field Description Local DCBX Compatibility mode DCBX version accepted in a DCB configuration as compatible. In auto-upstream mode, a port can only receive a DCBX version supported on the remote peer. Local DCBX Configured mode DCBX version configured on the port: CEE, CIN, IEEE v2.5, or Auto (port autoconfigures to use the DCBX version received from a peer). Peer Operating version DCBX version that the peer uses to exchange DCB parameters.
PAGE 376
Example Field Description PFC TLV Statistics: Input PG TLV Pkts Number of PG TLVs received. PFC TLV Statistics: Output PG TLV Pkts Number of PG TLVs transmitted. PFC TLV Statistics: Error PG TLV Pkts Number of PG error packets received. Application Priority TLV Statistics: Input Appln Priority TLV pkts Number of Application TLVs received. Application Priority TLV Statistics: Output Appln Priority TLV pkts Number of Application TLVs transmitted.
PAGE 377
Local DCBX Status ----------------DCBX Operational Version is 0 DCBX Max Version Supported is 0 Sequence Number: 2 Acknowledgment Number: 2 Protocol State: In-Sync Peer DCBX Status: ---------------DCBX Operational Version is 0 DCBX Max Version Supported is 255 Sequence Number: 2 Acknowledgment Number: 2 Total DCBX Frames transmitted 27 Total DCBX Frames received 6 Total DCBX Frame errors 0 Total DCBX Frames unrecognized 0 show interface ets Displays the ETS configuration applied to egress traffic on an int
PAGE 378
Field Description Max Supported TC Group Maximum number of priority groups supported. Number of Traffic Classes Number of 802.1p priorities currently configured. Admin mode ETS mode: on or off. When on, the scheduling and bandwidth allocation configured in an ETS output policy or received in a DCBX TLV from a peer can take effect on an interface. Admin Parameters ETS configuration on local port, including priority groups, assigned dot1p priorities, and bandwidth allocation.
PAGE 379
4 0% ETS 5 0% ETS 6 0% ETS 7 0% ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Remote Parameters: ------------------Remote is disabled Local Parameters: -----------------Local is enabled TC-grp Priority# Bandwidth TSA 0 0,1,2,3,4,5,6,7 100% ETS 1 0% ETS 2 0% ETS 3 0% ETS 4 0% ETS 5 0% ETS 6 0% ETS 7 0% ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Oper status is init Conf TLV Tx Status
PAGE 380
Remote Parameters: ------------------Remote is disabled Local Parameters : -----------------Local is enabled TC-grp Priority# 0 0,1,2,3,4,5,6,7 1 2 3 4 5 6 7 Bandwidth 100% 0% 0% 0% 0% 0% 0% 0% TSA ETS ETS ETS ETS ETS ETS ETS ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Oper status is init Conf TLV Tx Status is disabled Traffic Class TLV Tx Status is disabled 0 Input Conf TLV Pkts, 0 Output Conf TLV Pkts, 0 Error Conf TLV Pkts 0 Input Traffic
PAGE 381
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To clear the PFC TLV counters, use the clear pfc counters interface port-type slot/ port command. The following describes the show interface pfc summary command shown in the following example. Field Description Interface Interface type with stack-unit and port number. Admin mode is on Admin is enabled PFC admin mode is on or off with a list of the configured PFC priorities.
PAGE 382
Field Description Application Priority TLV: Remote FCOE Priority Map Status of FCoE advertisements in application priority TLVs from the remote peer port: enabled or disabled. Application Priority TLV: Remote ISCSI Priority Map Status of iSCSI advertisements in application priority TLVs from the remote peer port: enabled or disabled. PFC TLV Statistics: Input TLV pkts Number of PFC TLVs received. PFC TLV Statistics: Output TLV pkts Number of PFC TLVs transmitted.
PAGE 383
0 Input TLV pkts, 1 Output TLV pkts, 0 Error pkts, 0 Pause Tx pkts, 0 Pause Rx pkts show interface pfc statistics Displays counters for the PFC frames received and transmitted (by dot1p priority class) on an interface. Syntax Parameters show interface port-type slot/port pfc statistics port-type Enter the port type. slot/port Enter the slot/port number. NOTE: This command also enables you to view information corresponding to a range of ports.
PAGE 384
Usage Information Example Version Description 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
PAGE 385
Number of Traffic Classes is 1 Admin mode is on Admin Parameters: -------------------Admin is enabled TC-grp Priority# Bandwidth TSA -----------------------------------------------0 0,1,2,3,4,5,6,7 100% ETS 1 2 3 4 5 6 7 8 - dcb pfc-shared-buffer-size Configure the maximum amount of shared buffer size for PFC packets in kilobytes. Syntax Parameters dcb pfc-shared—buffer—size KB KB Enter a number in the range of 0 to 7787. Default None.
PAGE 386
dcb pfc-total-buffer-size Configure the total buffer size for PFC in kilobytes. Syntax dcb pfc-total—buffer—size KB Parameters KB Enter a number in the range of 0 to 7787. Default The default is 6592KB. Command Modes CONFIGURATION mode Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.9(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Configure the maximum buffer available for PFC traffic.
PAGE 387
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL platform. Usage Information When you enter the profile name, you enter the DCB buffer threshold configuration mode. You can specify the shared buffer threshold limit, the ingress buffer size, buffer limit for pausing the acceptance of packets, and the buffer offset limit for resuming the acceptance of received packets.
PAGE 388
dcb {ets | pfc} enable Enable priority flow control or enhanced transmission selection on interface. Syntax dcb {ets | pfc} enable • To disable ETS on interface, use “no dcb ets enable” command. • To disable PFC on interface, use “no dcb pfc enable” command. Defaults Enable Command Modes INTERFACE Command History Usage Information Limitations Version Description 9.9(0.0) Introduced on the FN IOM. 9.3 (0.1) Introduced on S6000, S4810, and S4820T.
PAGE 389
Version Description 9.3(0.0) Introduced on the MXL platform. Usage Information You can configure a maximum of four lossless (PFC) queues. By configuring four lossless queues, you can configure four different priorities and assign a particular priority to each application that your network is used to process. For example, you can assign a higher priority for time-sensitive applications and a lower priority for other services, such as file transfers.
PAGE 390
priority-pgid Assign 802.1p priority traffic to a priority group in a DCB map. FC Flex IO Modules with MXL Syntax priority-pgid dot1p0_group-num dot1p1_group-num dot1p2_group-num dot1p3_group-num dot1p4_group-num dot1p5_group-num dot1p6_group-num dot1p7_group-num Parameters dot1p0_group-num Enter the priority group number for each 802.1p class of traffic in a DCB map.
PAGE 391
qos-policy-buffer Create a QoS policy buffer and enter the configuration mode to configure the no-drop queues, ingress buffer size, buffer limit for pausing, and buffer offset limit for resuming.
PAGE 392
Usage Information You must apply this buffer policy at the interface level for the attributes to be applicable in conjunction with the DCB input policy. For each QoS policy buffer, you can specify the shared buffer threshold limit, the ingress buffer size, buffer limit for pausing the acceptance of packets, and the buffer offset limit for resuming the acceptance of received packets. When PFC detects congestion on a queue for a specified priority, it sends a pause frame for the 802.
PAGE 393
Command History Example sharedthresholdweight on the queue % of available shared buffer that can be consumed by the queue. 0 No dynamic sharing; shared buffer = 0. 1 0.77% 2 1.54% 3 3.03% 4 5.88% 5 11.11% 6 20% 7 33.33% 8 50% 9 66.67% 10 80% 11 88.89% Version Description 9.9(0.0) Introduced on the MXL. Dell(conf-if-te-1/8)#Service-class buffer shared-threshold-weight queue5 4 queue7 6 show qos dcb-map Display the DCB parameters configured in a specified DCB map.
PAGE 394
The following table describes the show qos dcb-map output shown in the example below. Example Field Description State Complete: All mandatory DCB parameters are correctly configured. In progress: The DCB map configuration is not complete. Some mandatory parameters are not configured. PFC Mode PFC configuration in DCB map: On (enabled) or Off. PG Priority group configured in the DCB map. TSA Transmission scheduling algorithm used by the priority group: Enhanced Transmission Selection (ETS).
PAGE 395
0 Pause Tx pkts, 0 Pause Rx pkts stack unit 1 stack-port all Admin mode is On Admin is enabled, Priority list is 4-5 Local is enabled, Priority list is 4-5 Link Delay 45556 pause quantum 0 Pause Tx pkts, 0 Pause Rx pkts Data Center Bridging (DCB) 395
PAGE 396
13 Debugging and Diagnostics The basic debugging and diagnostic commands are supported by the Dell Networking Operating System (OS). This chapter contains the following sections: • Offline Diagnostic Commands • Hardware Commands Offline Diagnostic Commands The offline diagnostics test suite is useful for isolating faults and debugging hardware. While tests are running, the Dell operating system results are saved as a text file (TestReport-SU-X.txt) in the flash directory.
PAGE 397
level2 Enter the keyword level2 to run Level 2 diagnostics. Level 2 diagnostics are a full set of diagnostic tests with no support for automatic partitioning. Level 2 diagnostics are used primarily for on-board loopback tests and more extensive component diagnostics. Various components on the board are put into Loopback mode and test packets are transmitted through those components. These diagnostics also perform snake tests using VLAN configurations.
PAGE 398
Parameters number Defaults none Command Modes EXEC Privilege Command History Usage Information Enter the stack-unit number. The range is from 0 to 5. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The system reboots when the off-line diagnostics complete. This reboot is an automatic process. A warning message appears when the offline stack-unit command is implemented.
PAGE 399
Hardware Commands These commands display information from a hardware sub-component or ASIC. clear hardware stack-unit Clear statistics from selected hardware components. Syntax Parameters clear hardware stack-unit 0–5 {counters | unit 0–1 counters | cpu dataplane statistics | cpu party-bus statistics | stack-port 0–52} stack-unit 0–5 Enter the keywords stack-unit then 0 to 5 to select a particular stack member and then enter one of the following command options to clear a specific collection of data.
PAGE 400
Parameters stack-unit 0–5 Enter the keywords stack-unit then 0 to 5 to select a particular stack member and then enter one of the following command options to clear a specific collection of data. port-set 0–0 counters Enter the keywords port-set along with a port-pipe number, then the keyword counters to clear the system-flow counters on the selected port-pipe. Defaults none Command Modes EXEC Privilege Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.
PAGE 401
port-set 0–0 Defaults none Command Modes EXEC Privilege Command History Enter the keyword port-set with a port-pipe number. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show hardware stack-unit Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
PAGE 402
stack-port 33–56 Enter the keywords stack-port and a stacking port number to select a stacking port for which to display statistics. Identify the stack port number as you would to identify a 10G port that was in the same place in one of the rear modules. NOTE: You can identify stack port numbers by physical inspection of the rear modules. The numbering is the same as for the 10G ports. You can also inspect the output of the show system stack-ports command.
PAGE 403
rxPkt(COS5) rxPkt(COS6) rxPkt(COS7) rxPkt(UNIT0) transmitted txRequested noTxDesc txError txReqTooLarge txInternalError txDatapathErr txPkt(COS0) txPkt(COS1) txPkt(COS2) txPkt(COS3) txPkt(COS4) txPkt(COS5) txPkt(COS6) txPkt(COS7) txPkt(UNIT0) Dell# :0 :0 :0 :0 :1696 :1696 :0 :0 :0 :0 :0 :0 :0 :0 :0 :0 :0 :0 :0 :0 Example Dell#show hardware stack-unit 0 cpu party-bus statistics Input Statistics: 8189 packets, 8076608 bytes 0 dropped, 0 errors Output Statistics: 366 packets, 133100 bytes 0 errors Dell# Ex
PAGE 404
Example (register) Dell#show hardware stack-unit 0 unit 0 register 0x0f180d34 ALTERNATE_EMIRROR_BITMAP_PARITY_CONTROL.ipipe0 = 0x00000001 0x0f180d35 ALTERNATE_EMIRROR_BITMAP_PARITY_STATUS_INTR.ipipe0 = 0x00000000 0x0f180d36 ALTERNATE_EMIRROR_BITMAP_PARITY_STATUS_NACK.ipipe0 = 0x00000000 0x0018070c ARB_EOP_DEBUG.ipipe0 = 0x00000000 0x00180312 ARB_RAM_DBGCTRL.ipipe0 = 0x00000000 0x03300000 ASF_PORT_SPEED.cpu0 = 0x00000000 0x03322000 ASF_PORT_SPEED.xe0 = 0x00000000 0x03326000 ASF_PORT_SPEED.
PAGE 405
The linkStatus of Front End Port 7 is FALSE The linkStatus of Front End Port 8 is FALSE The linkStatus of Front End Port 9 is FALSE The linkStatus of Front End Port 10 is FALSE The linkStatus of Front End Port 11 is FALSE The linkStatus of Front End Port 12 is FALSE The linkStatus of Front End Port 13 is FALSE The linkStatus of Front End Port 14 is FALSE The linkStatus of Front End Port 15 is FALSE The linkStatus of Front End Port 16 is FALSE The linkStatus of Front End Port 17 is FALSE The linkStatus of Fr
PAGE 406
Example (Queue2/ Buffer-Info) Dell#show hardware stack-unit 0 buffer unit 0 interface all queue 6 bufferinfo Buffer Stats for Front End Ports ================================ ----- Buffer Stats for Interface Te 0/0 Queue 6 ----Maximum Shared Limit: 7667 Default Packet Buffer allocate for the Queue: 8 Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 0/1 Queue 6 ----Maximum Shared Limit: 7667 Default Packet Buffer allocate for the Queue: 8 Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 0/
PAGE 407
• Command Modes For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. priority-group Enter the keyword priority-group followed by id for specific priority group or keyword all. queue Enter the keyword queue followed by id for specific queue or keyword all. buffer-info To display total buffer information for the interface, enter the keywords bufferinfo. EXEC EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.
PAGE 408
----- Buffer Stats for Interface Te 1/1 Queue Maximum Shared Limit: 29514 Default Packet Buffer allocate for the Queue: Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/1 Queue Maximum Shared Limit: 29514 Default Packet Buffer allocate for the Queue: Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/1 Queue Maximum Shared Limit: 29514 Default Packet Buffer allocate for the Queue: Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/1 Queue Maximum Shared Limit: 29514 Default Pack
PAGE 409
Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 410
show hardware stack-unit buffer-stats-snapshot (Total Buffer Information) View the buffer statistics tracking resource information depending on the type of buffer information, such as device-level details, port-level counters, queue-based snapshots, or priority group-level snapshot in the egress and ingress direction of traffic.
PAGE 411
--------------------------------------MCAST 3 0 Unit 1 unit: 3 port: 5 (interface Fo 1/148) --------------------------------------Q# TYPE Q# TOTAL BUFFERED CELLS --------------------------------------MCAST 3 0 Unit 1 unit: 3 port: 9 (interface Fo 1/152) --------------------------------------Q# TYPE Q# TOTAL BUFFERED CELLS --------------------------------------MCAST 3 0 Unit 1 unit: 3 port: 13 (interface Fo 1/156) --------------------------------------Q# TYPE Q# TOTAL BUFFERED CELLS -------------------------
PAGE 412
Parameters Command Modes buffer-statssnapshot unit number Display the historical snapshot of buffer statistical values unit Enter the keyword unit along with a port-pipe number. interface interface Enter any of the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
PAGE 413
snapshot for unicast packets for the specific interface Unit 0 unit: 0 port: 1 (interface Fo 0/0) --------------------------------------Q# TYPE Q# TOTAL BUFFERED CELLS --------------------------------------UCAST 10 0 Dell#show hardware buffer-stats-snapshot resource interface fortyGigE 0/0 queue ucast all Unit 0 unit: 0 port: 1 (interface Fo 0/0) --------------------------------------Q# TYPE Q# TOTAL BUFFERED CELLS --------------------------------------UCAST 0 0 UCAST 1 0 UCAST 2 0 UCAST 3 0 UCAST 4 0 UCAS
PAGE 414
1 2 3 4 5 6 7 0 0 0 0 0 0 0 0 0 0 0 0 0 0 show hardware system-flow Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe. Syntax show hardware system-flow layer2 stack-unit 0–5 port-set 0–0 [counters] Parameters acl | qos For the selected stack member and stack member port-pipe, display which system flow entry the packet hits and what queue the packet takes as it dumps the raw system flow tables.
PAGE 415
25 Dell# Example (noncounters) Dell#show hardware system-flow layer2 stack-unit 0 port-set 0 ############## FP Entry for redirecting STP BPDU to CPU Port ################ EID 2048: gid=1, slice=15, slice_idx=0x00, prio=0x800, flags=0x82, Installed tcam: color_indep=0, higig=0, higig_mask=0, KEY=0x00000000 00000000 00000000 0180c200 00000000 00000000 00000000 , FPF4=0x00 MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000 , 0x00 action={act=Drop, param0=0(0x00), param1=0(0x00)}, action={ac
PAGE 416
action={act=Drop, param0=0(0x00), param1=0(0x00)}, action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)}, action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)}, action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)}, meter=NULL, counter={idx=3, mode=0x01, entries=1} ################# FP Entry for redirecting ARP Replies to RSM ############# EID 2043: gid=1, slice=15, slice_idx=0x04, prio=0x7fb, flags=0x82, Installed tcam: color_indep=0, higig=0, higig_mask=0, KEY=0x00000000 00000000 00000000 00000000
PAGE 417
Example displaying Dell#show hardware drops interface tengigabitethernet 2/1 internal drops for the Drops in Interface Te 2/1: specific interface --- Ingress Drops --Ingress Drops : 0 IBP CBP Full Drops : 0 PortSTPnotFwd Drops : 0 IPv4 L3 Discards : 0 Policy Discards : 0 Packets dropped by FP : 0 (L2+L3) Drops : 0 Port bitmap zero Drops : 0 Rx VLAN Drops : 0 --- Ingress MAC counters--Ingress FCSDrops : 0 Ingress MTUExceeds : 0 --- MMU Drops --Ingress MMU Drops : 0 HOL DROPS(TOTAL) : 0 HOL DROPS on COS0 : 0
PAGE 418
14 Dynamic Host Configuration Protocol (DHCP) Dynamic host configuration protocol (DHCP) is an application layer protocol that dynamically assigns IP addresses and other configuration parameters to network end-stations (hosts) based on the configuration policies the network administrators determine. An MXL switch can operate as a DHCP server or DHCP client. As a DHCP client, the switch requests an IP address from a DHCP server.
PAGE 419
debug ip dhcp server Display the Dell Networking OS debugging messages for DHCP. Syntax Parameters debug ip dhcp server [events | packets] events Enter the keyword events to display the DHCP state changes. packet Enter the keyword packet to display packet transmission/reception. Defaults none Command Modes EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 420
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. disable Disable the DHCP server. Syntax disable DHCP Server is disabled by default. To enable the system to be a DHCP server, use the no disable command. Defaults Disabled Command Modes DHCP Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 421
domain-name Assign a domain to clients based on the address pool. Syntax Parameters domain-name name name Defaults none Command Modes DHCP Command History Give a name to the group of addresses in a pool. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. excluded-address Prevent the server from leasing an address or range of addresses in the pool.
PAGE 422
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. host For manual (rather than automatic) configurations, assign a host to a single-address pool. Syntax host address Parameters address/mask Defaults none Command Modes DHCP Command History Enter the host IP address and subnet mask. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 423
netbios-name-server Specify the NetBIOS windows internet naming service (WINS) name servers, in order of preference, that are available to Microsoft dynamic host configuration protocol (DHCP) clients. Syntax Parameters netbios-name-server address [address2...address8] address Defaults none Command Modes DHCP Command History Enter the address of the NETBIOS name server. You may enter up to eight, in order of preference. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 424
Parameters network/ prefixlength Defaults none Command Modes DHCP Command History Specify a range of addresses. Prefix-length range is from 17 to 31. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp binding Display the DHCP binding table. Syntax show ip dhcp binding Defaults none Command Modes EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 425
show ip dhcp conflict Display the address conflict log. Syntax Parameters show ip dhcp conflict address address Defaults none Command Modes EXEC Privilege Command History Display a particular conflict log entry. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp server Display the DHCP server statistics.
PAGE 426
Command History Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The ip address dhcp command enables an Ethernet interface to acquire a DHCP server-assigned dynamic IP address. This setting persists after a switch reboot. If you enter the shutdown command on the interface, DHCP transactions are stopped and the dynamically-acquired IP address is saved.
PAGE 427
Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug ip dhcp clients events Enable the display of log messages for the following events on DHCP client interfaces: IP address acquisition, IP address release, Renewal of IP address and lease time, and Release of an IP address.
PAGE 428
Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. release dhcp interface Release the dynamically-acquired IP address on an Ethernet interface while retaining the DHCP client configuration on the interface.
PAGE 429
Command History Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When you enter the renew dhcp command, a new dynamic IP address is acquired on the specified Ethernet interface for the renewed lease time. To display the currently configure dynamic IP address and lease time, enter the show ip dhcp lease command. show ip dhcp client statistics Display DHCP client statistics, including the number of DHCP messages sent and received on an interface.
PAGE 430
Defaults Display DHCP lease information on all DHCP client-enabled interfaces on the switch. Command Modes EXEC Privilege Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Commands to Configure Secure DHCP DHCP, as defined by RFC 2131, provides no authentication or security mechanisms. Secure DHCP is a suite of features that protects networks that use dynamic address allocation from spoofing and attacks.
PAGE 431
Related Commands arp inspection — enables dynamic ARP inspection on a VLAN. clear ip dhcp snooping Clear the DHCP binding table. Syntax clear ip dhcp snooping binding Defaults none Command Modes EXEC Privilege Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp snooping — displays the contents of the DHCP binding table.
PAGE 432
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When enabled, no learning takes place until you enable snooping on a VLAN. After disabling DHCP snooping, the binding table is deleted, and Option 82, IP Source Guard, and Dynamic ARP Inspection are disabled. Introduced in the Dell Networking OS version 7.8.1.0, DHCP snooping was available for Layer 3 only and dependent on DHCP Relay Agent (ip helper-address). The Dell Networking OS version 8.2.1.
PAGE 433
ipv6 dhcp snooping database write-delay To set time interval for storing the snooping binding entries in a file. Syntax [no] ipv6 dhcp snooping database write-delay value To disable the storing of snooping binding entries in a file, use the no ipv6 dhcp snooping writedelay command. Parameters value Defaults none Command Modes CONFIGURATION Command History The range is from 5 to 21600. The value of the minutes range is from 5 min. to 15 days. Version Description 9.9(0.
PAGE 434
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp snooping — displays the contents of the DHCP binding table. IPv6 DHCP Snooping Binding Create a static DHCP snooping binding entry in the snooping database.
PAGE 435
ip dhcp snooping database renew Renew the binding table. Syntax ip dhcp snooping database renew Defaults none Command Modes Command History • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 dhcp snooping database renew To load the binding entries from the file to DHCPv6 snooping binding database.
PAGE 436
ipv6 dhcp snooping trust Configure an interface as trusted for DHCP snooping. Syntax [no] ipv6 dhcp snooping trust To disable dhcp snooping trusted capability on this interface, use the no ipv6 dhcp snooping trust command. Command Modes Command History INTERFACE Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL. ip dhcp source-address-validation Enable the IP Source Guard.
PAGE 437
Command Modes CONFIGURATION Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When enabled, the system begins creating entries in the binding table for the specified VLANs. NOTE: Learning only happens if there is a trusted port in the VLAN. Related Commands ip dhcp snooping trust — configures an interface as trusted. ipv6 dhcp snooping vlan Enable ipv6 DHCP Snooping on VLAN or range of VLANs.
PAGE 438
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp relay secondary-subnet Enable DHCP relay secondary- subnet on all the interfaces. Syntax [no] ip dhcp relay seconday-subnet To disable the dhcp relay secondary- subnet, use theno ip dhcp relay secondary-subnet command. Defaults Disabled. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 439
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. clear ip dhcp snooping — clears the contents of the DHCP binding table. show ipv6 DHCP snooping Display the DHCPv6 snooping database. Syntax show ipv6 dhcp snooping Defaults none Command Modes EXEC Privilege Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL.
PAGE 440
ipv6 DHCP snooping verify mac-address Configure to enable verify source mac-address against ipv6 DHCP packet mac address. Syntax [no] ipv6 dhcp snooping verify mac-address To disable verify source mac-address against ipv6 DHCP packet mac address, use the no ipv6 dhcp snooping verify mac-address command. Defaults Disabled Command Modes CONFIGURATION Command History 440 Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL.
PAGE 441
15 Equal Cost Multi-Path (ECMP) Equal cost multi-path (ECMP) is supported on the Dell Networking OS. ecmp-group Provides a mechanism to monitor traffic distribution on an ECMP link bundle. A system log is generated when the standard deviation of traffic distribution on a member link exceeds a defined threshold. Syntax ecmp-group {ecmp-group-id interface interface | link-bundle-monitor} To remove the selected interface, use the ecmp-group no interface command.
PAGE 442
xor4|xor8|xor16}|lsb | xor1 | xor2 | xor4 | xor8 | xor16}[[hg {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16}]| [lag {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16 }][stack-unit|linecard number | port-set number] | [hg—seed value] | [seedvalue] To return to the default hash algorithm, use the no hash-algorithm command. To return to the default ECMP hash algorithm, use the no hash-algorithm ecmp algorithm-value command.
PAGE 443
• lag {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16} xor16: Use CR16 — 16 bit XOR Enter the keyword hg then one of the following options available in the stack-unit and linecard provisioned devices:: • crc16: Use CRC16_BISYNC — 16 bit CRC16-bisync polynomial (default) • crc16cc: Use CRC16_CCITT — 16 bit CRC16 using CRC16-CCITT polynomial • crc32MSB: Use CRC32_UPPER — MSB 16 bits of computed CRC32 • crc32LSB: Use CRC32_LOWER — LSB 16 bits of computed CRC32 • xor1: Use
PAGE 444
• % Error: This command is not supported in the current microcode configuration In addition, the linecard number ip-sa-mask value ip-da-mask value option has the following behavior to maintain bi-directionality: • When hashing is done on both IPSA and IPDA, the ip-sa-mask and ip-da-mask values must be equal. (Single Linecard).
PAGE 445
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The hash value calculated with the hash-algorithm command is unique to the entire chassis. The default ECMP hash configuration is crc-lower. This command takes the lower 32 bits of the hash key to compute the egress port and is the “fall-back” configuration if you have not configured anything else. The different hash algorithms are based on the number of ECMP group members and packet values.
PAGE 446
ip ecmp-group Enable and specify the maximum number of ecmp that the L3 CAM hold for a route, By default, when maximum paths are not configured, the CAM can hold a maximum of 16 ecmp per route. Syntax ip ecmp-group {maximum-paths | {number} {path-fallback} To negate a command, use the no ip ecmp-group maximum-paths command. Parameters maximum-paths Specify the maximum number of ECMP for a route. The range is 2 to 64. path-fallback Use the keywords path-fallback to enable this feature.
PAGE 447
To exit from ECMP group mode, use the exit command. Command Modes Command History • ECMP-GROUP • PORT-CHANNEL INTERFACE Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show config Display the ECMP configuration. Syntax show config Command Modes CONFIGURATION-ECMP-GROUP Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 448
16 FC FLEXIO FPORT The switch is a blade switch which is plugged into the Dell M1000 Blade server chassis.The blade module contains two slots for pluggable flexible module. With single FC Flex IO module, 4 ports are supported, whereas 8 ports are supported with both FC Flex IO modules. Each port can operate in 2G, 4G or 8G Fiber Channel speed. The topology-wise, FC Flex IOM is directly connected to a FC Storage.
PAGE 449
feature fc Enable feature fc with FPort functionality. Syntax Parameters Command Modes Command History feature fc fport domain-id range Range Enter the range from 1 to 239. CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Enable remote-fault-signaling rx off command in FCF FPort mode on interfaces connected to the Compellent and MDF storage devices.
PAGE 450
show fcoe-map — displays the fabric parameters. fc alias Create a zone alias name. Syntax fc alias ZoneAliasNamemember name To delete a zone alias name, use the no fc zone ZoneAliasName command. Parameters Command Modes Command History ZoneAliasNameme mber name Enter the zone alias name. Enter the WWPN, port ID, or domain/port. CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL and IOA. 9.1(1.0) Introduced on the S5000.
PAGE 451
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.0) Introduced on the S5000. Example Dell(conf)#fc zoneset test1 Dell(conf-fc-zoneset-test1)#member ? WORD Zone Name Dell(conf-fc-zoneset-test1)#member Related Commands show fc zoneset — displays the configured and active zoneset. show fcoe-map — displays the fabric parameters.
PAGE 452
To remove an FCoE map from an Ethernet interface, enter the no fcoe-map map-name command in Interface configuration mode. NOTE: In FCF F mode, you can create only 1 FCoE map. It doesn’t get created automatically. If you try to create more than 1 map, an error message is displayed. Related Commands show fcoe-map — displays the Fibre Channel and FCoE configuration parameters in FCoE maps. fabric Apply an FCoE map on a fabric-facing Fibre Channel (FC) port.
PAGE 453
active-zoneset Activate the zoneset. Syntax active-zoneset zoneset_name To change to the default zone behavior, use the no active-zoneset zoneset_name command. Parameters Command Modes Command History zoneset_name Enter the zoneset name. FC FABRIC CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.0) Introduced on the S5000.
PAGE 454
Port Id 01:35:00 Port Name 10:00:8c:7c:ff:17:f8:01 Node Name 20:00:8c:7c:ff:17:f8:01 Class of Service 8 IP Address Symbolic Port Name Brocade-1860 | 3.0.3.
PAGE 455
9 2 00:00:00:88 11 2 00:00:00:77 Dell# 02:09:00 32:11:0e:fc:00:00:00:88 22:11:0e:fc: 02:0b:00 31:11:0e:fc:00:00:00:77 21:11:0e:fc: show fc switch Display the switch configuration for Fibre Channel capability. Syntax show fc switch Parameters None Command Modes Command History Usage Information Example • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.0(1.3) Introduced on the S5000.
PAGE 456
• Command History Example EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.0) Introduced on the S5000.
PAGE 457
Command Modes • EXEC • EXEC Privilege Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.0) Introduced on the S5000. Dell#show fc zone ZoneName ZoneMember ======================================================= brcd_sanb brcd_cna1_wwpn1 sanb_p2tgt1_wwpn Dell# Related Commands fc zone — creates a zone. show fc alias Display the configured alias.
PAGE 458
show fcoe-map Display the Fibre Channel and FCoE configuration parameters in FCoE maps. Syntax show fcoe-map Parameters None Command Modes Command History Usage Information • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1.1.0 Introduced on the S5000.
PAGE 459
17 FIPS Cryptography To configure federal information processing standards (FIPS) cryptography, use the following commands on the switch. fips mode enable Enable the FIPS cryptography mode on the platform. Syntax fips mode enable To disable the FIPS cryptography mode, use the no fips mode enable command. Default Disabled Command Modes CONFIGURATION Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 460
Example Dell#show fips status FIPS Mode : Disabled Dell# Dell#show fips status FIPS Mode : Enabled Dell# show ip ssh Display information about established SSH sessions Syntax show ip ssh Defaults none Command Modes EXEC EXEC Privilege Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 461
Parameters hostname (OPTIONAL) Enter the IP address or the hostname of the remote device. ipv4 address (OPTIONAL) Enter the IP address in dotted decimal format A.B.C.D. ipv6 address prefixlength (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128 NOTE: The :: notation specifies successive hexadecimal fields of zeros. -c encryption cipher Enter the following encryption cipher to use. (For v2 clients only.
PAGE 462
Example If FIPS mode is not enabled: Dell#ssh 10.11.8.12 ? -c Encryption cipher to use (for v2 client -l User name option -m HMAC algorithm to use (for v2 clients only) -p SSH server port option (default 22) -v SSH protocol version Dell#ssh 10.11.8.12 -c ? 3des-cbc Force ssh to use 3des-cbc encryption cipher Dell#ssh 10.11.8.
PAGE 463
18 FIP Snooping In a converged Ethernet network, the switch can operate as an intermediate Ethernet bridge to snoop on Fibre Channel over Ethernet initialization protocol (FIP) packets during the login process on Fibre Channel over Ethernet (FCoE) forwarders (FCFs). Acting as a transit FIP snooping bridge, the switch uses dynamically-created ACLs to permit only authorized FCoE traffic to be transmitted between an FCoE end-device and an FCF.
PAGE 464
port-channelnumber Command Modes Command History Enter the port channel number of the FIP packet statistics to be cleared. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. feature fip-snooping Enable FCoE transit and FIP snooping on a switch. Syntax feature fip-snooping To disable the FCoE transit feature, use the no feature fip-snooping command.
PAGE 465
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The maximum number of FCFs supported per FIP snooping-enabled VLAN is four. The maximum number of FIP snooping sessions supported per ENode server is 16. fip-snooping fc-map Configure the FC-MAP value FIP snooping uses on all VLANs. Syntax fip-snooping fc-map fc-map-value To return the configured FM-MAP value to the default value, use the no fip-snooping fc-map command.
PAGE 466
show fip-snooping config Display the FIP snooping status and configured FC-MAP values. Syntax show fip-snooping config Command Modes Command History Example • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 467
Example Field Description VLAN VLAN ID number the session uses. FC-ID Fibre Channel session ID the FCF assigns. Dell# show fip-snooping enode Enode MAC Enode Interface FCF MAC VLAN FC-ID ----------------------- ---------- ----d4:ae:52:1b:e3:cd Te 0/8 54:7f:ee:37:34:40 100 62:00:11 show fip-snooping fcf Display information on the FCFs in FIP-snooped sessions, including the FCF interface and MAC address, FCF interface, VLAN ID, FC-MAP value, FKA advertisement period, and number of ENodes connected.
PAGE 468
show fip-snooping sessions Display information on FIP-snooped sessions on all VLANs or a specified VLAN, including the ENode interface and MAC address, the FCF interface and MAC address, VLAN ID, FCoE MAC address and FCoE session ID number (FC-ID), worldwide node name (WWNN) and the worldwide port name (WWPN).
PAGE 469
show fip-snooping statistics Display statistics on the FIP packets snooped on all interfaces, including VLANs, physical ports, and port channels. Syntax Parameters Command Modes Command History Usage Information show fip-snooping statistics [interface vlan vlan-id | interface port-type port/slot | interface port-channel port-channel-number] vlan-id Enter the VLAN ID of the FIP packet statistics displays. port-type port/slot Enter the port-type and slot number of the FIP packet statistics displays.
PAGE 470
Example Field Description Number of FLOGI Accepts Number of FIP FLOGI accept frames received on the interface. Number of FLOGI Rejects Number of FIP FLOGI reject frames received on the interface. Number of FDISC Accepts Number of FIP FDISC accept frames received on the interface. Number of FDISC Rejects Number of FIP FDISC reject frames received on the interface. Number of FLOGO Accepts Number of FIP FLOGO accept frames received on the interface.
PAGE 471
Number Number Number Number Number Number Number Number Number Number Number Number Example (Port Channel) of of of of of of of of of of of of Multicast Discovery Advertisement :0 Unicast Discovery Advertisement :0 FLOGI Accepts :0 FLOGI Rejects :0 FDISC Accepts :0 FDISC Rejects :0 FLOGO Accepts :0 FLOGO Rejects :0 CVL :0 FCF Discovery Timeouts :0 VN Port Session Timeouts :0 Session failures due to Hardware Config :0 Dell# show fip-snooping statistics interface port-channel 22 Number of Vlan Requests :0
PAGE 472
show fip-snooping vlan Display information on the FCoE VLANs on which FIP snooping is enabled. Syntax show fip-snooping vlan Command Modes Command History Example 472 • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 473
19 Force10 Resilient Ring Protocol (FRRP) FRRP is a proprietary protocol for that offers fast convergence in a Layer 2 network without having to run the spanning tree protocol (STP). The resilient ring protocol is an efficient protocol that transmits a high-speed token across a ring to verify the link status. All the intelligence is contained in the master node with practically no intelligence required of the transit mode. Important Points to Remember • FRRP is media- and speed-independent.
PAGE 474
Example Dell#clear frrp Clear frrp statistics counter on all ring [confirm] yes Dell#clear frrp 4 Clear frrp statistics counter for ring 4 [confirm] yes Dell# Related Commands show frrp — displays the resilient ring protocol configuration. debug frrp Clear the FRRP statistics counters. Syntax debug frrp {event | packet | detail} [ring-id] [count number] To disable debugging, use the no debug frrp {event | packet | detail} {ring-id} [countnumber] command.
PAGE 475
To remove the ring description, use the no description [Word] command. Parameters Word Enter a description of the ring. Maximum: 255 characters. Defaults none Command Modes CONFIGURATION (conf-frrp) Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. disable Disable the resilient ring protocol. Syntax disable To enable the Resilient Ring Protocol, use the no disable command.
PAGE 476
• secondary interface control-vlan vlan-id 40-Gigabit Ethernet interface: enter the keyword fortyGigE then the slot/port information Enter the keyword secondary to configure the secondary interface then one of the following interfaces and slot/port information: • Fast Ethernet interface: enter the keyword FastEthernet then the slot/port information. • Port Channel interface: enter the keyword port-channel then a number. The range is from 1 to 128.
PAGE 477
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. mode Set the Master or Transit mode of the ring. Syntax mode {master | transit} To reset the mode, use the no mode {master | transit} command. Parameters master Enter the keyword master to set the Ring node to Master mode. transit Enter the keywordtransit to set the Ring node to Transit mode. Defaults Mode None Command Modes CONFIGURATION (conf-frrp) Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 478
show frrp Display the resilient ring protocol configuration. Syntax show frrp [ring-id [summary]] | [summary] Parameters ring-id Enter the ring identification number. The range is from 1 to 255 summary (OPTIONAL) Enter the keyword summary to view just a summarized version of the Ring configuration. Defaults none Command Modes EXEC Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 479
timer Set the hello interval or dead interval for the Ring control packets. Syntax timer {hello-interval milliseconds}| {dead-interval milliseconds} To remove the timer, use the no timer {hello-interval [milliseconds]}| {deadinterval milliseconds} command. Parameters hello-interval milliseconds Enter the keyword hello-interval then the time, in milliseconds, to set the hello interval of the control packets.
PAGE 480
20 GARP VLAN Registration (GVRP) The Dell Networking Operating System (OS) supports the basic GVRP commands. The generic attribute registration protocol (GARP) mechanism allows the configuration of a GARP participant to propagate through a network quickly. A GARP participant registers or de-registers its attributes with other participants by making or withdrawing declarations of attributes. At the same time, based on received declarations or withdrawals, GARP handles attributes of other participants.
PAGE 481
clear gvrp statistics Clear GVRP statistics on an interface. Syntax Parameters clear gvrp statistics interface interface interface interface Defaults none Command Modes EXEC Command History Related Commands Enter the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 482
Defaults Disabled. Command Modes EXEC Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. disable Globally disable GVRP. Syntax disable To re-enable GVRP, use the no disable command. Defaults Enabled. Command Modes CONFIGURATION-GVRP Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 483
NOTE: Designate the milliseconds in multiples of 100. leave-all Enter the keywords leave-all then the number of milliseconds to configure the leave-all time. The range is from 100 to 2147483647 milliseconds. The default is 1000 milliseconds. NOTE: Designate the milliseconds in multiples of 100. Defaults As above. Command Modes CONFIGURATION-GVRP Command History Usage Information Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 484
gvrp registration Configure the GVRP register type. Syntax gvrp registration {fixed | normal | forbidden} To return to the default, use the gvrp register normal command. Parameters fixed Enter the keyword fixed then the VLAN range in a comma-separated VLAN ID set. normal Enter the keyword normal then the VLAN range in a comma-separated VLAN ID set. This setting is the default. forbidden Enter the keyword forbidden then the VLAN range in a comma-separated VLAN ID set.
PAGE 485
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. disable — globally disables GVRP. show config Display the global GVRP configuration. Syntax show config Command Modes CONFIGURATION-GVRP Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. gvrp enable — enables GVRP on physical interfaces and LAGs. protocol gvrp — accesses the GVRP protocol.
PAGE 486
show gvrp Display the GVRP configuration. Syntax show gvrp [brief | interface] Parameters Defaults brief (OPTIONAL) Enter the keyword brief to display a brief summary of the GVRP configuration. interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 487
Parameters interface interface summary Defaults Command Modes Command History Usage Information Enter the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
PAGE 488
show vlan Display the global VLAN configuration. Syntax show vlan Command Modes Command History Example • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 489
21 Internet Group Management Protocol (IGMP) The IGMP commands are supported by the Dell Networking Operating System (OS). IGMP Snooping Commands The Dell Networking OS supports IGMP Snooping version 2 and 3 on all Dell Networking systems. Important Points to Remember for IGMP Snooping • The Dell Networking OS supports version 1, version 2, and version 3 hosts.
PAGE 490
To remove the feature, use the no ip igmp access-group access-list command. Parameters access-list Enter the name of the extended ACL (16 characters maximum). Defaults Not configured Command Modes INTERFACE (conf-if-interface-slot/port) Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The access list accepted is an extended ACL.
PAGE 491
Command Modes Command History INTERFACE Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip igmp query-interval Change the transmission frequency of IGMP general queries the Querier sends. Syntax ip igmp query-interval seconds To return to the default values, use the no ip igmp query-interval command.
PAGE 492
ip igmp version Manually set the version of the router to IGMPv2 or IGMPv3. Syntax ip igmp version {2 | 3} Parameters 2 Enter the number 2 to set the IGMP version number to IGMPv2. 3 Enter the number 3 to set the IGMP version number to IGMPv3. Defaults 2 (that is, IGMPv2) Command Modes INTERFACE Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 493
To disable IGMP snooping fast leave, use the no igmp snooping fast-leave command. Defaults Not configured. Command Modes INTERFACE VLAN — (conf-if-vl-n) Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Queriers normally send some queries when a leave message is received prior to deleting a group from the membership database. There may be situations when you require a fast deletion of a group.
PAGE 494
Parameters milliseconds Defaults 1000 milliseconds Command Modes INTERFACE VLAN Command History Usage Information Enter the interval in milliseconds. The range is from 100 to 65535. The default is 1000 milliseconds. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This last-member-query-interval is also the interval between successive Group-Specific Query messages. To change the last-member-query interval, use this command.
PAGE 495
ip igmp snooping querier Enable IGMP querier processing for the VLAN interface. Syntax ip igmp snooping querier To disable IGMP querier processing for the VLAN interface, use the no ip igmp snooping querier command. Defaults Not configured. Command Modes INTERFACE VLAN — (conf-if-vl-n) Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 496
22 Interfaces The commands in this chapter are supported by Dell Networking Operating System (OS). This chapter contains the following sections: • Basic Interface Commands • Port Channel Commands Basic Interface Commands The following commands are for Physical, Loopback, and Null interfaces. clear counters Clear the counters used in the show interfaces commands for all virtual router redundancy protocol (VRRP) groups, virtual local area networks (VLANs), and physical interfaces, or selected ones.
PAGE 497
vrrp vrid] (OPTIONAL) Enter the keyword vrrp to clear the counters of all VRRP groups. To clear the counters of a specified group, enter a VRID number from 1 to 255. vrrp [vrf instance] (OPTIONAL) Enter the keyword vrrp to clear the counters of all VRRP groups. To clear the counters of VRRP groups in a specified VRF instance, enter the name of the instance (32 characters maximum).
PAGE 498
Version Description 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. On the switch, after you enter the clear counters command and verify the results with the show interfaces command, the line rate is not reset to 0.00%. Example Dell#clear dampening tengigabitethernet 1/2 Clear dampening counters on tengig 1/2 [confirm] y Dell# Related Commands show interfaces dampening — displays interface dampening information.
PAGE 499
% Error: Unsupported command. Dell(conf-if-te-0/26)# Example (Successful) Dell#config Dell(config)#interface tengigabitethernet 0/5 Dell(conf-if-0/5)#cx4-cable-length long Dell(conf-if-0/5)#show config ! interface TenGigabitEthernet 0/4 no ip address cx4-cable-length long shutdown Dell(conf-if-0/5)#exit Dell(config)# Related Commands show config – displays the configuration of the selected interface. dampening Configure dampening on an interface.
PAGE 500
all static/dynamic Layer 2 and Layer 3 protocols. The penalty is exponentially decayed based on the half-life timer. After the penalty decays below the reuse threshold, the interface enables. The configured parameters are as follows: • suppress-threshold should be greater than reuse-threshold • max-suppress-time should be at least 4 times half-life NOTE: You cannot apply dampening on an interface that is monitoring traffic for other interfaces.
PAGE 501
Example Dell(conf-if-te-1/5)#show config ! interface TenGigabitEthernet 1/5 description testconfig no ip address portmode hybrid switchport rate-interval 8 mac learning-limit 10 no-station-move no shutdown Dell(conf-if-te-1/5)# Dell(conf)#default interface tengigabitethernet 1/5 Dell(conf-if-te-1/5)#show config ! interface TenGigabitEthernet 1/5 no ip address shutdown Dell(conf-if-te-1/5)# Related Commands show running-config – displays the current configuration.
PAGE 502
Related Commands show interfaces description — displays the description field of the interfaces. duplex (1000/10000 Interfaces) Configure duplex mode on any physical interfaces where the speed is set to 1000/10000. Syntax duplex {half | full} To return to the default setting, use the no duplex command. Parameters half Enter the keyword half to set the physical interface to transmit only in one direction. full Enter the keyword full to set the physical interface to transmit in both directions.
PAGE 503
Defaults Command Modes Command History Usage Information tx on Enter the keywords tx on to send control frames from this port to the connected device when a higher rate of traffic is received. This is the default value on the send side. tx off Enter the keywords tx off so that flow control frames are not sent from this port to the connected device when a higher rate of traffic is received.
PAGE 504
• You cannot configure half duplex when the flow control configuration is on (default is rx on tx on). The following error is returned: Cannot configure half duplex when flowcontrol is on, config ignored NOTE: The flow control must be off (rx off tx off) before configuring the half duplex. Example (partial) Dell(conf-if-tengig-0/1)#show config ! interface TenGigabitEthernet 0/1 no ip address switchport no negotiation auto flowcontrol rx off tx on no shutdown ...
PAGE 505
show interfaces — displays the negotiated flow control parameters. interface Configure a physical interface on the switch. Syntax Parameters interface interface interface Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Enter one of the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 506
interface loopback Configure a Loopback interface. Syntax interface loopback number To remove a loopback interface, use the no interface loopback number command. Parameters number Defaults Not configured. Command Modes CONFIGURATION Command History Enter a number as the interface number. The range is from 0 to 16383. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 507
Usage Information You cannot delete a Management port. The Management port is enabled by default (no shutdown). To assign an IP address to the Management port, use the ip address command. Example Dell(conf)#interface managementethernet 0/0 Dell(conf-if-ma-0/0)# interface null Configure a Null interface on the switch. Syntax Parameters interface null number number Enter zero (0) as the Null interface number.
PAGE 508
Parameters interface, interface,... Enter the keywords interface range and one of the interfaces — slot/port, port-channel, or VLAN number. Select the range of interfaces for bulk configuration. You can enter up to six comma-separated ranges. Spaces are not required between the commas. Comma-separated ranges can include VLANs, portchannels, and physical interfaces. Slot/Port information must contain a space before and after the dash.
PAGE 509
Usage Information Only VLAN and port-channel interfaces created using the interface vlan and interface portchannel commands can be used in the interface range command. Use the show running-config command to display the VLAN and port-channel interfaces. VLAN or port-channel interfaces that are not displayed in the show running-config command cannot be used with the bulk configuration feature of the interface range command.
PAGE 510
required between the commas. Comma-separated ranges can include VLANs, portchannels, and physical interfaces. Slot/Port information must contain a space before and after the dash. For example, interface range tengigabitethernet 0/1 - 5 is valid; interface range tengigabitethernet 0/1-5 is NOT valid. Defaults none Command Modes CONFIGURATION Command History Example (Single Range) • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
PAGE 511
Command History Example (Single Range) Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This example shows the macro named test that was defined earlier. Dell(config)#interface range macro test Dell(config-if-range-te-0/0-3,te-5/0-8)# Related Commands interface range — configures a range of command (bulk configuration).
PAGE 512
intf-type cr4 autoneg Set the interface type as CR4 with auto-negotiation enabled. Syntax intf-type cr4 autoneg If you configure intf-type cr4 autoneg, use the no intf-type cr4 autoneg command to set the interface type as cr4 with autonegotiation disabled. Defaults Not configured Command Modes CONFIGURATION Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 513
Usage Information When you configure keepalive, the system sends a self-addressed packet out of the configured interface to verify that the far end of a WAN link is up. When you configure no keepalive, the system does not send keepalive packets and so the local end of a WAN link remains up even if the remote end is down.
PAGE 514
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, Dell Networking OS distributes incoming traffic based on a hash algorithm using the following criteria: • IP source address • IP destination address • TCP/UDP source port • TCP/UDP destination port load-balance hg Choose the traffic flow parameters the hash calculation uses while distributing the traffic across internal higig links.
PAGE 515
tunnel [ipv4-overipv4 | ipv4-overgre-ipv4 | mac-inmac] • dest-module-id — Use dest-module-id field in hash calculation. • vlan — Use vlan field in hash calculation . • ethertype — Use Ethertype field in hash calculation. • source-dest-mac — Use SMAC and DMAC fields in hash calculation. To use tunnel key fields in hash computation, enter the keyword tunnel then one of the parameters: • ipv4-over-ipv4 — Use ipv4-over-ipv4 field in hash calculation.
PAGE 516
The following are the monitor command menu options. Example (Single Interface) Key Description systest-3 Displays the host name assigned to the system. monitor time Displays the amount of time since the monitor interface command was entered. time Displays the amount of time the chassis is up (since last reboot). m Change the view from a single interface to all interfaces on the line card or visaversa. c Refresh the view. b Change the counters displayed from Packets on the interface to Bytes.
PAGE 517
mtu Set the link maximum transmission unit (MTU) (frame size) for an Ethernet interface. Syntax mtu value To return to the default MTU value, use the no mtu command. Parameters value Defaults 1554 Command Modes INTERFACE Command History Usage Information Enter a maximum frame size in bytes. The range is from 594 to 9252. MXL Switch Range is from 594 to 12000. The default is 1554. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.
PAGE 518
Layer 2 Overhead Link MTU and IP MTU Delta Untagged Packet with VLAN-Stack Header 22 bytes Tagged Packet with VLAN-Stack Header 26 bytes negotiation auto Enable auto-negotiation on an interface. Syntax negotiation auto To disable auto-negotiation, use the no negotiation auto command. Defaults Enabled. Command Modes INTERFACE Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.
PAGE 519
Example (Master/ Slave) Dell(conf)# int tengig 0/0 Dell(conf-if)#neg auto Dell(conf-if-autoneg)# ? end Exit from configuration mode exit Exit from autoneg configuration mode mode Specify autoneg mode no Negate a command or set its defaults show Show autoneg configuration information Dell(conf-if-autoneg)#mode ? forced-master Force port to master mode forced-slave Force port to slave mode Dell(conf-if-autoneg)# Example (Master/ Slave, partial) Dell#show interfaces configured TenGigabitEthernet 1/8 is up,
PAGE 520
Related Commands speed (for 1000/10000 interfaces) — sets the link speed to 1000, 10000, or auto-negotiate the speed. portmode hybrid To accept both tagged and untagged frames, set a physical port or port-channel. A port configured this way is identified as a hybrid port in report displays. Syntax portmode hybrid To return a port to accept either tagged or untagged frames (non-hybrid), use the no portmode hybrid command.
PAGE 521
Example (tagged hybrid) Dell(conf)#interface tengig 0/2 Dell(conf-if-te-0/2)#no shut Dell(conf-if-te-0/2)#portmode hybrid Dell(conf-if-te-0/2#sw Dell(conf-if-te-0/2)#int vlan 10 Dell(conf-if-vl-10)#int tengig 0/2 Dell(conf-if-vl-20)# untag tengig 0/2 Dell (conf-if-vl-20)# Dell(conf)#do show interfaces switchport tengigabitethernet 3/2 Codes: U x G i V - Untagged, T - Tagged Dot1x untagged, X - Dot1x tagged GVRP tagged, M - Trunk, H - VSN tagged Internal untagged, I - Internal tagged, v - VLT untagged, VL
PAGE 522
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The output of the show interfaces command displays the configured rate interval, along with the collected traffic data. Related Commands show interfaces — displays information on physical and virtual interfaces. remote-fault-signaling rx Brings the interface up or down when a Remote Fault Indication (RFI) error is detected.
PAGE 523
Example Dell(conf-if)#show conf ! interface TenGigabitEthernet 1/7 no ip address switchport no shutdown Dell(conf-if)# show config (from INTERFACE RANGE mode) Display the bulk configured interfaces (interface range). Syntax show config Command Modes CONFIGURATION INTERFACE (conf-if-range) Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 524
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a VLAN interface, enter the keyword vlan then a number from 1 to 4094. NOTE: This command also enables you to view information corresponding to a range of ports. However, for Open Networking (ON) platforms the notation for specifying port range in the command is different from how you specify in non-ON platforms.
PAGE 525
Line Description Hardware is... Interface hardware information, assigned MAC address, and current address. Interface index... Displays the interface index number used by SNMP to identify the interface. Internet address... States whether an IP address is assigned to the interface. If an IP address is assigned, that address is displayed. MTU 1554... Displays link and IP MTU information. LineSpeed Displays the interface’s line speed, duplex mode, and Slave. ARP type:...
PAGE 526
Line Description Rate information... Estimate of the input and output traffic rate over a designated interval (30 to 299 seconds). Traffic rate is displayed in bits, packets per second, and percent of line rate. Time since... Elapsed time since the last interface status change (hh:mm:ss format).
PAGE 527
Output Statistics: 180384 packets, 11926850 bytes, 0 underruns 172622 64-byte pkts, 7762 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 7762 Multicasts, 87726 Broadcasts, 84896 Unicasts 0 throttles, 0 discarded, 0 collisions Rate info (interval 299 seconds): Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Output 00.00 Mbits/sec, 0 packets/sec, 0.
PAGE 528
• Command History EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show interfaces configured TenGigabitEthernet 1/8 is up, line protocol is up Hardware is Force10Eth, address is 00:01:e8:05:f7:fc Current address is 00:01:e8:05:f7:fc Interface index is 474791997 Internet address is 1.1.1.
PAGE 529
NOTE: This command also enables you to view information corresponding to a range of ports. However, for Open Networking (ON) platforms the notation for specifying port range in the command is different from how you specify in non-ON platforms. For non-ON platforms, you can specify multiple ports as slot/portrange. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1 - 4.
PAGE 530
• For Loopback interfaces, enter the keyword loopback then a number from 0 to 16383. • For the management interface on the RPM, enter the keyword ManagementEthernet then the slot/port information. The slot range is 0-0 and the port range is 0. • For the Null interface, enter the keywords null 0. • For a Port Channel interface, enter the keywords port-channel then a number. The range is 1 to 128.
PAGE 531
TenGigabitEthernet TenGigabitEthernet TenGigabitEthernet TenGigabitEthernet TenGigabitEthernet Related Commands 0/4 0/5 0/6 0/7 0/8 NO admin NO admin NO admin NO YES down down down up up down down down down up show interfaces – displays information on a specific physical interface or virtual interface. show interfaces stack-unit Display information on all interfaces on a specific MXL switch stack member.
PAGE 532
Time since last interface status change: 5d5h23m !-------------output truncated ----------------! Related Commands show hardware stack-unit — displays data plane and management plane input/output statistics. show interfaces — displays information on a specific physical interface or virtual interface. show interfaces status Display a summary of interface information or specify a stack unit and interface to display status information for that specific interface only.
PAGE 533
Te 0/3 Te 0/4 Te 0/5 Te 0/6 Te 0/7 Te 0/8 Dell# Related Commands Down Down Down Down Down Up Auto Auto -Auto Auto -Auto Auto -Auto Auto -Auto Auto -10000 Mbit Full -- show interfaces — displays information on a specific physical interface or virtual interface. show interfaces switchport Display only virtual and physical interfaces in Layer 2 mode. This command displays the Layer 2 mode interfaces’ IEEE 802.1Q tag status and VLAN membership.
PAGE 534
Usage Information Example The following describes the show interfaces switchport command for the following example. Items Description Name Displays the interface’s type, slot, and port number. 802.1QTagged Displays whether if the VLAN tagged (“True”), untagged (“False”), or hybrid (“Hybrid”), which supports both untagged and tagged VLANs by port 13/0. Vlan membership Lists the VLANs to which the interface is a member. Starting with the Dell Networking OS version 7.6.
PAGE 535
show interfaces transceiver Display the physical status and operational status of an installed transceiver. The output also displays the transceiver’s serial number. Syntax Parameters show interfaces {tengigabitethernet slot/port | fortyGigE slot/ port}transceiver tengigabitethernet For a 10G interface, enter the keyword tengigabitethernet then the slot/ port information. NOTE: This command also enables you to view information corresponding to a range of ports.
PAGE 536
Interfaces Line Description RX Power High Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+. Temp Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+. Voltage Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+. Bias Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+. TX Power Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
PAGE 537
Line Description Rx Power Present receiving (Rx) power of the SFP. This value is either average Rx power or OMA. This depends on the Rx Power measurement type displayed above. If this crosses Rx power alarm/warning thresholds, the Rx power high alarm/warning flag is set to true. If it falls below the low alarm/warning thresholds, the Rx power low alarm/warning flag is set to true. Data Ready state Bar This field indicates that the transceiver has achieved power up and data is ready.
PAGE 538
Example Line Description Rx Power High Warning Flag This can be either true or false, depending on the Current Tx power value displayed above. Temperature Low Warning Flag This can be either true or false, depending on the Current Temperature value displayed above. Voltage Low Warning Flag This can be either true or false, depending on the Current Voltage value displayed above.
PAGE 539
SFP 1 Voltage Low Warning threshold = 2.900V SFP 1 Bias Low Warning threshold = 2.000mA SFP 1 TX Power Low Warning threshold = 0.079mW SFP 1 RX Power Low Warning threshold = 0.016mW =================================== SFP 1 Temperature = 39.930C SFP 1 Voltage = 3.293V SFP 1 Tx Bias Current = 6.894mA SFP 1 Tx Power = 0.328mW SFP 1 Rx Power = 0.
PAGE 540
Related Commands interface — configures a physical interface on the switch. show ip interface — displays Layer 3 information about the interfaces. show interfaces — displays information on a specific physical interface or virtual interface. shutdown Disable an interface. Syntax shutdown To activate an interface, use the no shutdown command. Defaults The interface is disabled. Command Modes INTERFACE Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.
PAGE 541
To return to the default setting, use the no speed {1000 | 10000 | auto} command. Parameters 1000 Enter the keyword 1000 to set the interface’s speed to 1000 Mb/s. 10000 Enter the keyword 10000 to set the interface’s speed to 10000 Mb/s. Autonegotiation is enabled. For more information, refer to negotiation auto. auto Enter the keyword auto to set the interface to auto-negotiate its speed. Autonegotiation is enabled. For more information, refer to negotiation auto.
PAGE 542
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Splitting a 40G port into 4x10G port is supported on standalone and stacked units. • You cannot use split ports as stack-link to stack a switch. • The split ports switch unit cannot be a part of any stacked system. • The unit number with the split ports must be the default (stack-unit 0).
PAGE 543
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Defaults Not configured. Command Modes INTERFACE PORTCHANNEL Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 544
group Group two LAGs in a supergroup (“fate-sharing group” or “failover group”). Syntax group group_number port-channel number port-channel number To remove an existing LAG supergroup, use the no group group_number command. Parameters group_number Enter an integer from 1 to 32 that uniquely identifies this LAG fate-sharing group. port-channel number Enter the keywords port-channel then an existing LAG number. Enter this keyword/variable combination twice, identifying the two paired LAGs.
PAGE 545
Usage Information Port Channel interfaces are logical interfaces and can be either in Layer 2 mode (by using the switchport command) or Layer 3 mode (by configuring an IP address). You can add a Port Channel in Layer 2 mode to a VLAN. A Port Channel can contain both 100/1000 interfaces and GE interfaces. Based on the first interface configured in the Port Channel and enabled, the Dell Networking OS determines if the Port Channel uses 100 Mb/s or 1000 Mb/s as the common speed.
PAGE 546
port-channel failover-group To configure a LAG failover group, access PORT-CHANNEL FAILOVER-GROUP mode. Syntax port-channel failover-group To remove all LAG failover groups, use the no port-channel failover-group command. Defaults none Command Modes CONFIGURATION Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 547
show interfaces port-channel Display information on configured Port Channel groups. Syntax Parameters show interfaces port-channel [channel-number] [brief] channel-number For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. NOTE: This command also enables you to view information corresponding to a range of ports.
PAGE 548
Field Description Input 0 IP packets... Displays the number of packets with IP headers, VLAN tagged headers, and MPLS headers. The number of packets may not add correctly because a VLAN tagged IP packet counts as both a VLAN packet and an IP packet. 0 64-byte... Displays the size of packets and the number of those packets entering that interface. This information is displayed over two lines. Received 0... Displays the type and number of errors or other specific packets received.
PAGE 549
Field Description • Example (brief) up — if the port channel is enabled (no shutdown) Uptime Displays the age of the port channel in hours:minutes:seconds. Ports Lists the interfaces assigned to this port channel. (untitled) Displays the status of the physical interfaces (up or down). • In Layer 2 port channels, an * (asterisk) indicates which interface is the primary port of the port channel. The primary port sends out interface PDU.
PAGE 550
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The interface must be enabled to run the test or an error message is generated: Dell#tdr-cable-test tengigabitethernet 5/2 %Error: Interface is disabled Te 5/2 Related Commands show tdr — displays the results of the TDR test. show tdr Display the TDR test results.
PAGE 551
Example Dell#show tdr tengigabitethernet 1/7 Time since last test: 00:00:02 Pair A, Length: OK Status: Terminated Pair B, Length: 92 (+/- 1) meters, Status: Short Pair C, Length: 93 (+/- 1) meters, Status: Open Pair D, Length: 0 (+/- 1) meters, Status: Impedance Mismatch Related Commands tdr-cable-test — runs the TDR test.
PAGE 552
ip udp-helper udp-port — enables the UDP broadcast feature on an interface. show ip udp-helper — displays the configured UDP helper(s) on all interfaces. ip udp-broadcast-address Configure an IP UDP address for broadcast. Syntax ip udp-broadcast-address address To delete the configuration, use the no ip udp-broadcast-address address command. Parameters address Defaults Not configured. Command Modes INTERFACE (config-if) Command History Enter an IP broadcast address in dotted decimal format (A.B.C.
PAGE 553
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. If you configure the ip helper-address command and ip udp-helper udp-port command, the behavior is that the UDP broadcast traffic with port numbers 67/68 is unicast relayed to the DHCP server per the ip helper-address configuration. This occurs regardless if the ip udp-helper udp-port command contains port numbers 67/68 or not.
PAGE 554
23 IPv4 Routing The basic IPv4 commands are supported by Dell Networking Operating System (OS). arp To associate an IP address with a multicast MAC address in the switch when you configure multicast mode of the network load balancing (NLB), use the address resolution protocol (ARP). Syntax arp ip-address multicast-mac-address interface To remove an ARP address, use the no arp ip-address command. Parameters ip-address Enter an IP address in dotted decimal format.
PAGE 555
Usage Information For multicast mode of NLB, to associate an IP address with a multicast MAC address in the switch, use address resolution protocol (ARP) by entering the arp ip-address multicast-mac-address command in Global configuration mode. This setting causes the multicast MAC address to be mapped to the cluster IP address for NLB mode of operation of the switch. You cannot use Class D or Class E IP addresses or zero IP address (0.0.0.0) when creating a static ARP.
PAGE 556
arp timeout Set the time interval for an ARP entry to remain in the ARP cache. Syntax arp timeout minutes Parameters minutes Defaults 240 minutes (4 hours) Command Modes INTERFACE Command History Related Commands Enter the number of minutes. The range is from 0 to 35790. The default is 240 minutes. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show interfaces — displays the ARP timeout value for all available interfaces.
PAGE 557
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. clear host Remove one or all dynamically learned host table entries. Syntax Parameters Command Modes Command History clear host name name Enter the name of the host to delete. Enter * to delete all host table entries. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 558
clear ip route Clear one or all routes in the routing table. Syntax clear ip route {* | ip-address mask} Parameters Command Modes Command History Related Commands * Enter an asterisk (*) to clear all learned IP routes. ip-address mask Enter a specific IP address and mask in dotted decimal format to clear that IP address from the routing table. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 559
count value Defaults none Command Modes EXEC Privilege Command History Usage Information • For the Management interface, enter the keyword ManagementEthernet then the slot/port information. The slot range is from 0 to 1 and the port range is 0. • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 560
8C to 14.4.4.2 00:12:40 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0 00:12:40 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B: 8C to 14.4.4.2 00:12:42 : %RELAY-I-PACKET: BOOTP REPLY (Unicast) received at interface 14.4.4.1 BOOTP Reply, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 113.3.3.
PAGE 561
Command History Example Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ICMP: ICMP: ICMP: ICMP: ICMP: ICMP: ICMP: ICMP: echo request rcvd from src 40.40.40.40 src 40.40.40.40, dst 40.40.40.40, echo src 40.40.40.40, dst 40.40.40.40, echo echo request sent to dst 40.40.40.40 echo request rcvd from src 40.40.40.40 src 40.40.40.40, dst 40.40.40.40, echo src 40.40.40.40, dst 40.40.40.40, echo echo request sent to dst 40.
PAGE 562
Usage Information The following describes the debug ip packet command in the following example. Field Description s= Lists the source address of the packet and the name of the interface (in parentheses) that received the packet. d= Lists the destination address of the packet and the name of the interface (in parentheses) through which the packet is being sent out on the network. len Displays the packet’s length.
PAGE 563
• Internet control message protocol (icmp) but not the ICMP message type (from 0 to 255) • Any internet protocol (ip) • Transmission Control Protocol (tcp) but not on the rst, syn, or urg bits • User Datagram Protocol (udp) In the case of ambiguous access control list rules, the debug ip packet access-control command is disabled. A message appears identifying the error (refer to the Example below).
PAGE 564
To disable the interface from receiving directed broadcast packets, use the no ip directedbroadcast command. Defaults Disabled (that is, the interface does not receive directed broadcast packets) Command Modes INTERFACE Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip domain-list Configure names to complete unqualified host names.
PAGE 565
ip domain-lookup To address resolution (that is, DNS), enable dynamic host-name. Syntax ip domain-lookup To disable DNS lookup, use the no ip domain-lookup command. Defaults Disabled. Command Modes CONFIGURATION Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To fully enable DNS, also specify one or more domain name servers with the ip name-server command.
PAGE 566
To enable dynamic resolution of hosts, use the following steps: • specify a domain name server with the ip name-server command • enable DNS with the ip domain-lookup command To view current bindings, use the show hosts command. Related Commands ip domain-list — configures additional names. ip helper-address Specify the address of a DHCP server so that DHCP broadcast messages can be forwarded when the DHCP server is not on the same subnet as the client.
PAGE 567
Defaults Enabled; the hops field in the DHCP message header is incremented by default. Command Modes CONFIGURATION Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command disables the incrementing of the hops field when boot requests are relayed to a DHCP server through the Dell Networking OS.
PAGE 568
• For a Management Ethernet interface, enter the keyword managementethernet. NOTE: When you configure the capability to enable the loopback IP address to be sent for easy debugging and diagnosis (IP addresses of the devices for which the ICMP source interface is configured), the source IP address of the outgoing ICMP error message is modified, although the packets are not sent out using the configured interface.
PAGE 569
ipv6 icmp source-interface Enable the ICMP error and unreachable messages to be sent with the source interface IP address, such as the loopback address, instead of the hops of the preceding devices along the network path to be used for easy debugging and diagnosis of network disconnections and reachability problems with IPv6 packets.
PAGE 570
Example Dell(conf)#ipv6 icmp source-interface tengigabitethernet 0/1 Dell(conf)# ip max-frag-count Set the maximum number of fragments allowed in one packet for packet re-assembly. Syntax ip max-frag-count count To place no limit on the number of fragments allowed, use the no ip max-frag-count command. Parameters count Enter a number for the number of fragments allowed for re-assembly. The range is from 2 to 256. Defaults No limit is set on number of fragments allowed.
PAGE 571
Usage Information The system does not support sending DNS queries over a VLAN. DNS queries are sent out on all other interfaces, including the Management port. ip proxy-arp Enable proxy ARP on an interface. Syntax ip proxy-arp To disable proxy ARP, use the no ip proxy-arp command. Defaults Enabled. Command Modes INTERFACE Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 572
• distance (OPTIONAL) Enter the value of the distance metric assigned to the route. The range is from 1 to 255. permanent (OPTIONAL) Enter the keyword permanent to specify that the route must not be removed even if the interface assigned to that route goes down. The route must be currently active to be installed in the routing table. If you disable the interface, the route is removed from the routing table. tag tag-value (OPTIONAL) Enter the keyword tag then a number to assign to the route.
PAGE 573
ip tcp initial-time Define the wait duration in seconds for the TCP connection to be established. Syntax ip tcp initial-time <8-75> To restore the default behavior, which causes the wait period to be set as eight seconds, use the no ip tcp initial-time command. Parameters Command Modes Command History Usage Information <8-75> Wait duration in seconds for the TCP connection to be established. CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.
PAGE 574
Command Modes Command History INTERFACE Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. management route Configure a static route that points to the Management interface or a forwarding router.
PAGE 575
Parameters Command Modes Command History Usage Information interface interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For the Management interface, enter the keyword managementethernet then the slot/port information. • For a Port Channel interface, enter the keyword port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 576
Example Row Heading Description CPU Lists which CPU the entries are stored on. Dell>show arp Protocol Address Age(min) Hardware Address Interface VLAN CPU ----------------------------------------------------Internet 10.11.8.6 167 00:01:e9:45:00:03 Ma 0/0 CP Internet 10.11.68.14 124 00:01:e9:45:00:03 Ma 0/0 CP Internet 10.11.209.254 0 00:01:e9:45:00:03 Ma 0/0 CP Example (Private VLAN) NOTE: In this example, Line 1 shows community VLAN 200 (in primary VLAN 10) in a PVLAN. Line 2 shows primary VLAN 10.
PAGE 577
Command Modes Command History Related Commands • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Module arp retries — sets the number of ARP retries in case the system does not receive an ARP reply in response to an ARP request. show hosts View the host table and DNS configuration. Syntax Command Modes Command History Usage Information show hosts • EXEC • EXEC Privilege Version Description 9.9(0.
PAGE 578
Field Description • Example ?? — the entry is suspect. TTL Displays the amount of time until the entry ages out of the cache. For dynamically learned entries only. Type Displays IP as the type of entry. Address Displays the IP addresses assigned to the host.
PAGE 579
Command Modes Command History Usage Information Example • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip cam command shown in the following example. Field Description Destination Displays the destination route of the index. EC Displays the number of equal cost multipaths (ECMP) available for the default route for non-Jumbo line cards.
PAGE 580
Example (ECMPGroup) Dell#show ip cam stack-unit 0 po 0 ecmp-group detail Example (MemberInfo) Dell#show ip cam stack-unit 0 po 0 ecmp-group member-info detail Destination EC CG ----------------1.1.1.2 0 0 2.1.1.2 0 0 1.1.1.1 0 0 2.1.1.1 0 0 1.1.1.0 0 0 2.1.1.0 0 0 100.1.1. 0 1 100.1.1. 0 1 0.0.0.
PAGE 581
Example Field Description Gateway Displays either the word “direct” and an interface for a directly connected route or the remote IP address used to forward the traffic. First-Hop Displays the first hop IP address. Mac-Addr Displays the MAC address. Port Displays the egress-port information. VId Displays the VLAN ID. If no VLAN is assigned, zero (0) is listed. EC Displays the number of ECMP paths.
PAGE 582
Command History Usage Information Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip interface command shown in the following example. Lines Description TenGigabitEthernet 0/0... Displays the interface’s type, slot/port, and physical and line protocol status. Internet address... States whether an IP address is assigned to the interface.
PAGE 583
GigabitEthernet GigabitEthernet GigabitEthernet GigabitEthernet 1/3 1/4 1/5 1/6 unassigned unassigned 10.10.10.1 unassigned YES YES YES NO Manual Manual Manual Manual up up up administratively down up up up down show ip management-route View the IP addresses assigned to the Management interface.
PAGE 584
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show ip protocols Routing Protocol is "bgp 1" Cluster Id is set to 20.20.20.3 Router Id is set to 20.20.20.
PAGE 585
Command Modes Command History Usage Information Example • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip route all command in the following example.
PAGE 586
Gateway of last resort is not set Destination Gateway Dist/Metric Last Change ----------- ------- ----------- ----------R 3.0.0.0/8 via 100.10.10.10, So 2/8 120/1 00:07:12 via 101.10.10.10, So 2/9 100.10.10.0/24 Direct, So 2/8 0/0 00:08:54 > R 100.10.10.0/24 Direct, So 2/8 120/0 00:08:54 C 101.10.10.0/24 Direct, So 2/9 0/0 00:09:15 > R 101.10.10.
PAGE 587
R R R R C Related Commands ----------2.1.0.0/24 2.1.1.0/24 2.1.2.0/24 2.1.3.0/24 2.1.4.0/24 ------via 2.1.4.1, Te via 2.1.4.1, Te via 2.1.4.1, Te via 2.1.4.1, Te Direct, Te 4/4 4/4 4/4 4/4 4/4 ----------- ----------120/2 3d0h 120/2 3d1h 120/1 3d0h 120/1 3d1h 0/0 3d1h ip prefix-list — enters CONFIGURATION-IP PREFIX-LIST mode and configures a prefix list. show ip prefix-list summary — displays a summary of the configured prefix lists.
PAGE 588
Related Commands show ip route — displays information about the routes found in the switch. show ip traffic View IP, ICMP, UDP, TCP and ARP traffic statistics. Syntax show ip traffic Command Modes EXEC Privilege Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip traffic summary shown in the following example. Keyword Definition unknown protocol...
PAGE 589
Keyword Definition ...socket full The applications buffer is full and the incoming packet are dropped. The F10 Monitoring MIB provides access to the following statistics. Example • IP Statistics: Bcast: Received: Object = f10BcastPktRecv, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.1 • IP Statistics: Bcast: Sent: Object = f10BcastPktSent, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.2 • IP Statistics: Mcast: Received: Object = f10McastPktRecv, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.
PAGE 590
Usage Information The following describes the show tcp statistics cp command shown in the following example. Field Description Rcvd: Displays the number and types of TCP packets received by the switch. 0 checksum error... 590 IPv4 Routing • Total = total packets received • no port = number of packets received with no designated port Displays the number of packets received with the following: • checksum errors • bad offset to data • too short 329 packets...
PAGE 591
Example Field Description 0 Keepalive.... Lists the number of keepalive packets in timeout, the number keepalive probes and the number of TCP connections dropped during keepalive.
PAGE 592
24 Internet Protocol Security (IPSec) Internet protocol security (IPSec) is an end-to-end security scheme for securing IP communications by authenticating and encrypting all packets in a session. Use IPSec between hosts, gateways, or hosts and gateways. IPSec uses a series of protocol functions to achieve information security: • Authentication Headers (AH) — Connectionless integrity and origin authentication for IP packets.
PAGE 593
• esp-authentication esp-encryption Defaults none Command Modes CONFIGURATION Command History Usage Information Example null — Causes an encryption policy configured for the area to not be inherited on the interface. Enter the keywords esp-authentication then the transform type of operation to apply to traffic. The transform type represents the encryption or authentication applied to traffic. • md5 — Use Message Digest 5 (MD5) authentication.
PAGE 594
seq-num Defaults none Command Modes CONFIGURATION Command History Enter the sequence number assigned to the crypto policy entry. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command creates a crypto policy entry and enters the crypto policy configuration mode for configuring the flow parameters.
PAGE 595
ipv6 Enter the source IPv6 address. ip Enter the source IPv4 address. port-num Enter the source port number. The range is from 0 to 65535 dest-ip Enter the destination IP address. dest-port-num Enter the destination port number. The range is from 0 to 65535. Defaults none Command Modes CONFIG-CRYPTO-POLICY Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information UDP is not supported.
PAGE 596
auth Indicates the ESP authentication transform set key string. Defaults none Command Modes CONF-CRYPTO-POLICY Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. • This command is only available in the ipsec-manual model. • The key information entry is associated with the global method for enabling clear text or encrypted display in the running config.
PAGE 597
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 598
Command History 598 Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 599
25 IPv6 Access Control Lists (IPv6 ACLs) IPv6 ACLs and IPv6 Route Map commands are supported on Dell Networking switch. NOTE: For IPv4 ACL commands, refer to the Access Control Lists (ACL) chapter. Important Points to Remember • Certain platforms require manual CAM usage space allotment. For more information, refer to the cam-acl (Configuration) command. • Egress IPv6 ACL and IPv6 ACL on the Loopback interface is not supported. • Reference to an empty ACL permits any traffic.
PAGE 600
l2acl 1-10 ipv4acl 1-10 ipv6acl 0-10 ipv4qos 1-10 l2qos 1-10 Command Modes Command History Usage Information Allocate space to support IPv6 ACLs. Enter all of the profiles and a range. Enter the CAM profile name then the amount to be allotted. The total space allocated must equal 13. The ipv6acl range must be a factor of 2. CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 601
The total amount of space allowed is 16 FP Blocks. System flow requires three blocks and these blocks cannot be reallocated. When configuring space for IPv6 ACLs, the total number of Blocks must equal 13. Ranges for the CAM profiles are from 1 to 10, except for the ipv6acl profile which is from 0 to 10. The ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).
PAGE 602
for OSPFv3, in addition to the CoPP support for VRRP, BGP, and ICMP that existed in Dell Networking OS releases 9.3(0.0) and earlier Related Commands show config — views the current configuration. ipv6 control-plane egress-filter Enable egress Layer 3 ACL lookup for IPv6 CPU traffic. Syntax ipv6 control-plane egress-filter Defaults Not enabled. Command Modes EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 603
log OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in-msgs (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated.
PAGE 604
message-type (OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type. The range is from 0 to 255 for ICMP type and from 0 to 255 for ICMP code. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 605
forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). show cam-acl Show space allocated for IPv6 ACLs. Syntax Command Modes Command History Example show cam-acl • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 606
Openflow fedgovacl : : 0 0 Dell# Related Commands cam-acl — configures CAM profiles to support IPv6 ACLs. show cam-acl-egress Show information on FP groups allocated for egress ACLs. Syntax show cam-acl-egress Command Modes Command History Example • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 607
26 IPv6 Basics This chapter describes IPv6 basic commands. clear ipv6 fib Clear (refresh) all forwarding information base (FIB) entries on a linecard or stack unit. Syntax Parameters Command Modes Command History clear ipv6 fib linecard slot | stack-unit unit-number slot Enter the slot number to clear the FIB for a linecard. unit-number Enter the stack member number. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 608
clear ipv6 mld_host Clear the IPv6 MLD host counters and reset the elapsed time. Syntax clear ipv6 mld_host Command Modes EXEC Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 address autoconfig Configure IPv6 address auto-configuration for the management interface. Syntax ipv6 address autoconfig To disable the address autoconfig operation on the management interface, use the no ipv6 address autoconfig command.
PAGE 609
ipv6 address Configure an IPv6 address to an interface. Syntax ipv6 address {ipv6-address prefix-length} To remove the IPv6 address, use the no ipv6 address {ipv6-address prefix-length} command. Parameters ipv6-address prefixlength Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 610
Parameters ipv6-address prefixlength Enter the IPv6 prefix in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros. Defaults none Command Modes CONFIGURATION Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 611
ipv6 flowlabel-zero Configure system to set the flow label field in the packets to zero. Syntax ipv6 flowlabel-zero To disable the 0 from being set in the field and allow the rotocol operations to fill the field, use the no ipv6 flowlabel-zero command. Default Disabled Command Modes CONFIGURATION Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 612
Parameters ipv6-address Enter the IPv6 address (X:X:X:X::X) of the name server to be used. NOTE: The :: notation specifics successive hexadecimal fields of zeros. ipv6-address2... ipv6-address6 Defaults none Command Modes CONFIGURATION Command History Usage Information (OPTIONAL) Enter up to five more IPv6 addresses, in the x:x:x:x::x format, of name servers to be used. Separate the IPv6 addresses with a space. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 613
Parameters ipv6-RDNSSaddress Enter the IPv6 Recursive DNS Server’s (RDNSS) address. You can specify up to 4 IPv6 RDNSS server addresses. lifetime Enter the lifetime in seconds. The amount of time the IPv6 host can use the IPv6 RDNSS address for name resolution. The range is 0 to 4294967295 seconds. When you specify the maximum lifetime value of 4294967295 or infinite, the lifetime does not expire. A value of 0 indicates to the host that the RDNSS address should not be used.
PAGE 614
Command Modes Command History Usage Information valid-lifetime | infinite Enter the amount of time that the prefix is advertised, or enter infinite for an unlimited amount of time. The range is from 0 to 4294967295. The default is 2592000. The maximum value means that the preferred lifetime does not expire for the valid-life time parameter. preferred-lifetime | infinite Enter the amount of time that the prefix is preferred, or enter infinite for an unlimited amount of time.
PAGE 615
• For a VLAN interface, enter the keyword VLAN then the vlan number. The range is from 1 to 4094. If you configure a static IPv6 route using an egress interface and enter the ping command to reach the destination IPv6 address, the ping operation may not work. Configure the IPv6 route using a next-hop IPv6 address in order for the ping command to detect the destination address. ipv6-address (OPTIONAL) Enter the forwarding router IPv6 address in the x:x:x:x::x format.
PAGE 616
Dell(conf)#ipv6 route 44::0 /64 tengigabitethernet 0/1 ? X:X:X:X::X Forwarding router's address Dell(conf)#ipv6 route 44::0 /64 tengigabitethernet 0/1 66::1 Dell(conf)# Related Commands show ipv6 route — views the IPv6 configured routes. ipv6 unicast-routing Enable IPv6 Unicast routing. Syntax ipv6 unicast-routing To disable unicast routing, use the no ipv6 unicast-routing command. Defaults Enabled Command Modes CONFIGURATION Command History Usage Information Version Description 9.9(0.
PAGE 617
summary (OPTIONAL) Enter the keyword summary to display a table listing network prefixes and the total number prefixes which can be entered into the IPv6 CAM. index (OPTIONAL) Enter the index in the IPv6 CAM. ipv6-address Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 618
show ipv6 fib stack-unit View all FIB entries. Syntax show ipv6 fib stack-unit unit-number [summary | ipv6-address] Parameters slot-number Enter the number of the stack unit. The range is from 0 to 5. summary (OPTIONAL) Enter the keyword summary to view a summary of entries in IPv6 cam. ipv6-address Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes. The range is from /0 to /128.
PAGE 619
[managementethernet slot/port] [port-channel number] [tengigabitethernet slot | slot/port] [fortyGigE slot | slot/port] [vlan vlan-id] Parameters Defaults Command Modes Command History interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a Loopback interface, enter the keyword Loopback then a number from 0 to 16383. • For the Null interface, enter the keyword null then zero (0).
PAGE 620
Remaining lifetime: infinite Global Anycast address(es): Joined Group address(es): ff02::1 ff02::2 ff02::1:ff00:2 ff02::1:ffa7:497e ND MTU is 0 ICMP redirects are not sent DAD is enabled, number of DAD attempts: 3 ND reachable time is 39610 milliseconds ND base reachable time is 30000 milliseconds ND advertised reachable time is 0 milliseconds ND advertised retransmit interval is 0 milliseconds ND router advertisements are sent every 198 to 600 seconds ND router advertisements live for 1800 seconds ND adver
PAGE 621
ND MTU is 0 ICMP redirects are not sent DAD is enabled, number of DAD attempts: 3 ND reachable time is 20410 milliseconds ND base reachable time is 30000 milliseconds ND advertised reachable time is 0 milliseconds ND advertised retransmit interval is 0 milliseconds ND router advertisements are sent every 198 to 600 seconds ND router advertisements live for 1800 seconds ND advertised hop limit is 64 IPv6 hop limit for originated packets is 64 Dell# show ipv6 mld_host Display the IPv6 MLD host counters.
PAGE 622
show ipv6 route Displays the IPv6 routes. Syntax show ipv6 route [ipv6-address prefix-length] [hostname] [all] [bgp as number] [connected] [isis tag] [list prefix-list name] [ospf process-id] [rip] [static] [summary] Parameters ipv6-address prefixlength (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 623
Field Example Description • IA = OSPF inter-area • N1 = OSPF NSSA external type 1 • N2 = OSPF NSSA external type 2 • E1 = OSPF external type 1 • E2 = OSPF external type 2 • i = IS-IS • L1 = IS-IS level-1 • L2 = IS-IS level-2 • IA = IS-IS inter-area • * = candidate default • > = non-active route • + = summary routes Destination Identifies the route’s destination IPv6 address.
PAGE 624
trust ipv6-diffserv Allows the dynamic classification of IPv6 DSCP. Syntax trust ipv6-diffserv To remove the definition, use the no trust ipv6-diffserv command. Defaults none Command Modes CONFIGURATION-POLICY-MAP-IN Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you configure trust IPv6 diffserv, matched bytes/packets counters are not incremented in the show qos statistics command.
PAGE 625
27 IPv6 Border Gateway Protocol (IPv6 BGP) IPv6 Border Gateway Protocol (IPv6 BGP) is supported on Dell Networking platforms. This chapter includes the following sections: • IPv6 BGP Commands • IPv6 MBGP Commands IPv6 BGP Commands BGP is an external gateway protocol that transmits interdomain routing information within and between autonomous systems (AS). BGP version 4 (BGPv4) supports classless interdomain routing and the aggregation of routes and AS paths.
PAGE 626
aggregate-address Summarize a range of prefixes to minimize the number of entries in the routing table. Syntax aggregate-address ipv6-address prefix-mength [advertise-map map-name] [asset] [attribute-map map-name] [summary-only] [suppress-map map-name] Parameters ipv6-address prefixlength Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the / x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 627
In the show ip bgp ipv6 unicast command, aggregates contain an ‘a’ in the first column and routes suppressed by the aggregate contain an ‘s’ in the first column. bgp always-compare-med Allows you to enable comparison of the MULTI_EXIT_DISC (MED) attributes in the paths from different external ASs. Syntax bgp always-compare-med To disable comparison of MED, use the no bgp always-compare-med command. Defaults Disabled (that is, the software only compares MEDs from neighbors within the same AS).
PAGE 628
bgp bestpath med confed Enable MULTI_EXIT_DISC (MED) attribute comparison on paths learned from BGP confederations. Syntax bgp bestpath med confed To disable MED comparison on BGP confederation paths, use the no bgp bestpath med confed command. Defaults Disabled. Command Modes ROUTER BGP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 629
To disable client-to-client reflection, use the no bgp client-to-client reflection command. Defaults Enabled when a route reflector is configured. Command Modes ROUTER BGP Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Route reflection to clients is not necessary if all client routers are fully meshed.
PAGE 630
bgp confederation identifier Configure an identifier for a BGP confederation. Syntax bgp confederation identifier as-number To delete a BGP confederation identifier, use the no bgp confederation identifier as-number command. Parameters as-number Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Enter the AS number. The range is from 1 to 65535. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 631
After specifying autonomous systems numbers for the BGP confederation, recycle the peers to update their configuration. Related Commands bgp confederation identifier — configures a confederation ID. bgp dampening Enable BGP route dampening and configure the dampening parameters. Syntax Parameters bgp dampening [half-life reuse suppress max-suppress-time] [route-map mapname] half-life (OPTIONAL) Enter the number of minutes after which the Penalty is decreased.
PAGE 632
bgp default local-preference Change the default local preference value for routes exchanged between internal BGP peers. Syntax bgp default local-preference value To return to the default value, use the no bgp default local-preference command. Parameters value Defaults 100 Command Modes ROUTER BGP Command History Enter a number to assign to routes as the degree of preference for those routes.
PAGE 633
bgp fast-external-fallover Enable the fast external fallover feature, which immediately resets the BGP session if a link to a directly connected external peer fails. Syntax bgp fast-external-fallover To disable fast external fallover, use the no bgp fast-external-fallover command. Defaults Enabled. Command Modes ROUTER BGP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 634
bgp graceful-restart Enable graceful restart on a BGP neighbor, a BGP node, or designate a local router to support graceful restart as a receiver only. Syntax bgp graceful-restart [restart-time seconds] [stale-path-time seconds] [role receiver-only] To return to the default, enter the no bgp graceful-restart command.
PAGE 635
Usage Information The bgp log-neighbor-changes command appears in the show config command output. Related Commands show config — views the current configuration. bgp non-deterministic-med Compare MEDs of paths from different autonomous systems (ASs). Syntax bgp non-deterministic-med To return to the default, use the no bgp non-deterministic-med command. Defaults Disabled (that is, paths/routes for the same destination but from different ASs does not have their MEDs compared).
PAGE 636
Usage Information This command is a knob to disable BGP next-hop resolution using BGP learned routes. During the next-hop resolution, only the first route that the next-hop resolves through is verified for the route’s protocol source and is checked if the route is learned from BGP or not. For this command to take effect and to keep the BGP database consistent, you need the clear ip bgp command. Execute the clear ip bgp command right after executing this command.
PAGE 637
Parameters ip-address Enter an IP address in dotted decimal format to reset only that BGP neighbor. Defaults The router ID is the highest IP address of the Loopback interface or, if no Loopback interfaces are configured, the highest IP address of a physical interface on the router. Command Modes ROUTER BGP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 638
direction {both | rx | tx} Defaults Enter the keyword direction and a direction — either rx for inbound, tx for outbound, or both. Not configured. Command Modes Command History Related Commands • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. capture bgp-pdu max-buffer-size — enables route reflection between the route reflector and the clients.
PAGE 639
clear ip bgp * (asterisk) Reset all BGP sessions in the specified category. The soft parameter (BGP Soft Reconfiguration) clears the policies without resetting the TCP connection. Syntax Parameters clear ip bgp * [ipv4 multicast soft [in | out] | ipv6 unicast soft [in | out] | soft [in | out]] * Enter an asterisk ( * ) to reset all BGP sessions. ipv4 multicast soft [in | out] (OPTIONAL) Enter the keywords ipv4 multicast soft [in | out] to set options within the specified IPv4 address family.
PAGE 640
multicast (OPTIONAL) Enter the keyword multicast to select the multicast option within the selected address family. Multicast is supported on IPv4 only. soft (OPTIONAL) Enter the keyword soft to configure and activate policies without resetting the BGP TCP session; that is, BGP Soft Reconfiguration. NOTE: If you enter clear ip bgp ipv6-address soft, both inbound and outbound policies are reset. Command Modes Command History in (OPTIONAL) Enter the keyword in to activate only inbound policies.
PAGE 641
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. clear ip bgp peer-group Reset a peer-group’s BGP sessions. Syntax Parameters Command Modes Command History clear ip bgp peer-group peer-group-name peer-group-name Enter the peer group name to reset the BGP sessions within that peer group. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 642
clear ip bgp ipv6 flap-statistics Clear BGP flap statistics, which includes number of flaps and the time of the last flap. Syntax clear ip bgp ipv6 unicast flap-statistics [ipv6-address | filter-list aspath-name | regexp regular-expression] Parameters ipv6-address (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 643
ipv4-neighbor-addr | ipv6-neighboraddr Clear and reapply policies for a neighbor. peer-group name Clear and reapply policies for all BGP routers in the specified peer group. ipv6 unicast Clear and reapply policies for all IPv6 unicast routes. in Reapply only inbound policies. NOTE: If you enter soft, without an in or out option, both inbound and outbound policies are reset. out Reapply only outbound policies.
PAGE 644
Usage Information To view information on both incoming and outgoing routes, do not include the in and out parameters in the debugging command. The in and out parameters cancel each other; for example, if you enter debug ip bgp in and then enter debug ip bgp out, you do not see information on the incoming routes. Entering a no debug ip bgp command removes all configured debug commands for BGP. Related Commands debug ip bgp events — views information about BGP events.
PAGE 645
debug ip bgp ipv6 dampening View information on dampened (non-active) IPv6 routes. Syntax debug ip bgp ipv6 unicast dampening [in | out] To disable debugging, use the no debug ip bgp ipv6 unicast dampening command. Parameters Command Modes Command History in (OPTIONAL) Enter the keyword in to view only inbound dampened routes. out (OPTIONAL) Enter the keyword out to view only outbound dampened routes. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 646
Usage Information This command turns on BGP soft-reconfiguration inbound debugging for IPv6 unicast routes. If no neighbor is specified, debug is turned on for all neighbors. Related Commands show ip bgp ipv6 unicast dampened-paths — views BGP dampened routes. debug ip bgp keepalives Allows you to view information about BGP keepalive messages.
PAGE 647
NOTE: The :: notation specifies successive hexadecimal fields of zeros. Command Modes Command History Usage Information peer-group peergroup-name (OPTIONAL) Enter the keywords peer-group then the name of the peer group. in (OPTIONAL) Enter the keyword in to view BGP notifications received from neighbors. out (OPTIONAL) Enter the keyword out to view BGP notifications sent to neighbors. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 648
Usage Information Entering a no debug ip bgp command removes all configured debug commands for BGP. default-metric Allows you to change the metrics of redistributed routes to locally originated routes. Use this command with the redistribute command. Syntax default-metric number To return to the default setting, use the no default-metric command. Parameters number Defaults 0 Command Modes ROUTER BGP Command History Enter a number as the metric to be assigned to routes from other protocols.
PAGE 649
Related Commands Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. router bgp — enters ROUTER mode on the switch. distance bgp Configure three administrative distances for routes. Syntax distance bgp external-distance internal-distance local-distance To return to default values, use the no distance bgp command.
PAGE 650
To return to the default values, use the no maximum-paths command. Parameters ebgp Enter the keyword ebgp to enable multipath support for External BGP routes. ibgp Enter the keyword ibgp to enable multipath support for Internal BGP routes. number Enter a number as the maximum number of parallel paths. The range is from 1 to 16. The default is 1. Defaults 1 Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.
PAGE 651
neighbor advertisement-interval Set the advertisement interval between BGP neighbors or within a BGP peer group. Syntax neighbor {ipv6-address | peer-group-name} advertisement-interval seconds To return to the default value, use the no neighbor {ipv6-address | peer-group-name} advertisement-interval command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 652
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. bgp four-octet-as-support — enables 4-Byte support for the BGP process. neighbor default-originate Inject the default route to a BGP peer or neighbor.
PAGE 653
NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group. text Enter a continuous text string up to 80 characters. Defaults Not configured. Command Modes ROUTER BGP Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor distribute-list Distribute BGP information using an established prefix list.
PAGE 654
neighbor ebgp-multihop Attempt and accept BGP connections to external peers on networks that are not directly connected. Syntax neighbor {ipv6-address | peer-group-name} ebgp-multihop [ttl] To disallow and disconnect connections, use the no neighbor {ipv6-address | peer-groupname} ebgp-multihop [ttl] command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group.
PAGE 655
Usage Information When you enable fall-over, BGP keeps track of IP or IPv6 reachability to the peer remote address and the peer local address. Whenever either address becomes unreachable (for examle, no active route exists in the routing table for peer IP or IPv6 destination/local address), BGP brings down the session with the peer. Related Commands show ip bgp ipv6 unicast neighbors — displays IPv6 routing information exchanged by BGP neighbors.
PAGE 656
maximum Enter a number as the maximum number of prefixes allowed for this BGP router. The range is from 1 to 4294967295. threshold (OPTIONAL) Enter a number to be used as a percentage of the maximum value. When the number of prefixes reaches this percentage of the maximum value, the software sends a message. The range is from 1 to 100 percent. The default is 75. warning-only (OPTIONAL) Enter the keyword warning-only to set the router to send a log message when the maximum value is reached.
PAGE 657
neighbor next-hop-self Allows you to configure the router as the next hop for a BGP neighbor. (This command is used for IBGP). Syntax neighbor {ipv6-address | peer-group-name} next-hop-self To return to the default setting, use the no neighbor {ipv6-address | peer-group-name} next-hop-self command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name (OPTIONAL) Enter the name of the peer group.
PAGE 658
Usage Information You can assign up to 64 peers to one peer group. When you add a peer to a peer group, it inherits all the peer group’s configured parameters.
PAGE 659
neighbor remote-as — assigns a indirectly connected AS to a neighbor or peer group. neighbor shutdown — disables a peer or peer group. neighbor peer-group passive Enable passive peering on a BGP peer group; that is, the peer group does not send an OPEN message, but does respond to one. Syntax neighbor peer-group-name peer-group passive To delete a passive peer-group, use the no neighbor peer-group-name peer-group passive command. Parameters peer-group-name Defaults Not configured.
PAGE 660
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If the number parameter is the same as the AS number used in the router bgp command, the remote AS entry in the neighbor is considered an internal BGP peer entry. This command creates a peer and the newly created peer is disabled (shutdown). Related Commands router bgp — enters the ROUTER BGP mode and configure routes in an AS.
PAGE 661
neighbor route-map Apply an established route map to either incoming or outbound routes of a BGP neighbor or peer group. Syntax neighbor {ipv6-address | peer-group-name} route-map map-name {in | out} To remove the route map, use the no neighbor {ipv6-address | peer-group-name} routemap map-name {in | out} command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 662
peer-group-name Enter the name of the peer group. All routers in the peer group receive routes from a route reflector. Defaults Not configured. Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The first time you enter this command it configures the neighbor as a route reflector and members of the route-reflector cluster.
PAGE 663
neighbor shutdown Disable a BGP neighbor or peer group. Syntax neighbor {ipv6-address | peer-group-name} shutdown To enable a disabled neighbor or peer group, use the no neighbor {ipv6-address | peergroup-name} shutdown command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group to disable or enable all routers within the peer group.
PAGE 664
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command enables soft-reconfiguration for the specified BGP neighbor. BGP stores all updates for inbound IPv6 unicast routes the neighbor receives but does not reset the peer-session. CAUTION: Inbound update storage is a memory-intensive operation.
PAGE 665
NOTE: The :: notation specifies successive hexadecimal fields of zeros. Defaults Command Modes Command History Usage Information peer-group-name Enter the name of the peer group to set the timers for all routers within the peer group. keepalive Enter a number for the time interval, in seconds, between keepalive messages sent to the neighbor routers. the range is from 1 to 65535. the default is 60 seconds.
PAGE 666
Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Loopback interfaces are up constantly and the BGP session may need one interface constantly up to stabilize the session. The neighbor update-source command is not necessary for directly connected internal BGP sessions.
PAGE 667
To remove a network, use the no network ip-address mask [route-map map-name] command. Parameters ipv6-address prefixlength Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros. mask Enter the mask of the IP address in the slash prefix length format (for example, / 24). The mask appears in command outputs in dotted decimal format (A.B.C.D).
PAGE 668
Usage Information Though the system does not generate a route due to backdoor config, there is an option for injecting/ sourcing a local route in presence of network backdoor config on a learned route. redistribute Redistribute routes into BGP. Syntax redistribute {connected | static} [route-map map-name] To disable redistribution, use the no redistribution {connected | static} command. Parameters connected Enter the keyword connected to redistribute routes from physically connected interfaces.
PAGE 669
metric (OPTIONAL) Assign metric to an interface for use with IPv6 information. metric-type (OPTIONAL) The external link type associated with the default route advertised into a routing domain. You must specify one of the following: route-map mapname • external • internal (default) (OPTIONAL) Enter the keywords route-map then the name of an established route map. If the route map is not configured, the default is deny (to drop all routes). Defaults Not configured.
PAGE 670
Usage Information When you enter the redistribute ospf process-id command without any other parameters, the system redistributes all OSPF internal routes, external type 1 routes, and external type 2 routes. router bgp Enter ROUTER BGP mode to configure and enable BGP. Syntax router bgp as-number To disable BGP, use the no router bgp as-number command. Parameters as-number Defaults Not enabled. Command Modes CONFIGURATION Command History Enter the AS number. The range is from 1 to 65535.
PAGE 671
show config View the current ROUTER BGP configuration. Syntax show config Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 672
• Command History Usage Information EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you enable the bgp non-deterministic-med command, the show ip bgp command output for a BGP route does not list the INACTIVE reason. show ip bgp ipv6 unicast cluster-list View BGP neighbors in a specific cluster.
PAGE 673
(0xFFFFFF01) community attribute must not be advertised outside a BGP confederation boundary. Command Modes Command History Usage Information • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To view the total number of COMMUNITY attributes found, use the show ip bgp ipv6 unicast summary command. The text line above the route table states the number of COMMUNITY attributes found.
PAGE 674
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast detail Display BGP internal information for IPv6 Unicast address family. Syntax show ip bgp ipv6 unicast detail Defaults none Command Modes Command History • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 675
show ip bgp ipv6 unicast filter-list View the routes that match the filter lists. Syntax Parameters Command Modes Command History show ip bgp ipv6 unicast filter-list as-path-name as-path-name • EXEC • EXEC Privilege Enter the name of an AS-PATH. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast flap-statistics View flap statistics on BGP routes.
PAGE 676
• Command History EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast inconsistent-as View routes with inconsistent originating autonomous system (AS) numbers; that is, prefixes that are announced from the same neighbor AS but with a different AS-Path. Syntax show ip bgp ipv6 unicast inconsistent-as Command Modes Command History • EXEC • EXEC Privilege Version Description 9.9(0.
PAGE 677
routes (OPTIONAL) Enter the keyword routes to view only the neighbor’s feasible routes. received-routes [network [networkmask] (OPTIONAL) Enter the keywords received-routes then either the network address (in dotted decimal format) or the network mask (in slash prefix format) to view all information received from neighbors. NOTE: You must configure the neighbor soft-reconfiguration inbound command prior to viewing all the information received from the neighbors.
PAGE 678
Example Lines Beginning With Description Soft reconfiguration This line indicates that soft reconfiguration inbound is configured. Minimum time Displays the minimum time, in seconds, between advertisements. (List of inbound and outbound policies) Displays the policy commands configured and the names of the Route map, ASPATH ACL, or Prefix list configured for the policy. For address family: Displays IPv6 Unicast as the address family.
PAGE 679
Notification History 'OPEN error/Bad AS' Sent : 0 Recv: 1 Local host: 5ffe:10::4, Local port: 179 Foreign host: 5ffe:10::3, Foreign port: 35470 Notification History 'Connection Reset' Sent : 1 Recv: 0 BGP neighbor is 5ffe:11::3, remote AS 1, external link BGP version 4, remote router ID 5.5.5.
PAGE 680
• Command History Example EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 681
4000::60 9000::4:2 9000::5:2 9000::6:2 9000::7:2 9000::8:2 9000::9:2 9000::a:2 9000::b:14 Dell# 18508 18508 1 2 3 18508 18508 18508 18508 0 0 35 35 35 35 44 35 29 0 0 32 32 32 32 19 32 29 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 never Active never Active 00:16:42 0 00:16:39 0 00:16:41 0 00:16:42 0 00:16:41 0 00:16:43 0 00:13:01 0 show ip bgp next-hop View all next hops (using learned routes only) with current reachability and flap status.
PAGE 682
• ? = (question mark) sequences in a pattern (either 0 or 1 sequences). NOTE: You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression. Command Modes Command History • EXEC • EXEC Privilege • [ ] = (brackets) a range of single-character patterns. • ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified. • $ = (dollar sign) the end of the output string.
PAGE 683
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp paths extcommunity View all unique extended community information in the BGP database. Syntax Command Modes Command History show ip bgp paths extcommunity • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp regexp Allows you to view the subset of BGP routing table matching the regular expressions specified.
PAGE 684
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. timers bgp Allows you to adjust the BGP network timers for all neighbors. Syntax timers bgp keepalive holdtimer To return to the default values, use the no timers bgp command. Parameters Defaults Command Modes Command History Related Commands keepalive Enter the time interval (in seconds) between which the system sends keepalive messages. The range is from 1 to 65535. The default is 60 seconds.
PAGE 685
unicast Enter the keyword unicast to specify multicast as SAFI. Defaults IPv6 Unicast Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. After this command is executed, all subsequent commands apply to this address family.
PAGE 686
Usage Information At least one of the routes included in the aggregate address must be in the BGP routing table for the configured aggregate to become active. Do not add the as-set parameter to the aggregate. If routes within the aggregate are constantly changing, the aggregate flaps to keep track of the changes in the AS_PATH. In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed.
PAGE 687
Parameters * Enter the character * to clear all peers. ipv6-address prefixlength Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros. Command Modes Command History dampening (OPTIONAL) Enter the keyword dampening to clear route flap dampening information.
PAGE 688
Command Modes Command History filter-list list (OPTIONAL) Enter the keywords filter-list then the name of a configured AS-PATH list (maximum 16 characters). regexp regexp (OPTIONAL) Enter the keyword regexp then regular expressions. Use one or a combination of the following: • . (period) matches on any single character, including white space. • * (asterisk) matches on sequences in a pattern (zero or more sequences). • + (plus sign) matches on sequences in a pattern (one or more sequences).
PAGE 689
To disable debugging, use the no debug ip bgp ipv6 unicast peer-group peer-groupname updates [in | out] command. Parameters Command Modes Command History peer-group peergroup-name Enter the keywords peer-group then the name of the peer-group. updates Enter the keyword updates to view BGP update information. in (OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors. out (OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors.
PAGE 690
distance bgp Define an administrative distance for routes. Syntax distance bgp external-distance internal-distance local-distance To return to default values, use the no distance bgp command. Parameters Defaults Command Modes Command History Usage Information external-distance Enter a number to assign to routes learned from a neighbor external to the AS. The range is from 1 to 255. The default is 20. internal-distance Enter a number to assign to routes learned from a router within the AS.
PAGE 691
activate Enter the keyword activate to enable the identified neighbor or peer group in the new AFI/SAFI. Defaults Disabled. Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information By default, when a neighbor/peer group configuration is created in the Router BGP context, it is enabled for the IPv6/Unicast AFI/SAFI.
PAGE 692
neighbor default-originate Inject the default route to a BGP peer or neighbor. Syntax neighbor {ipv6-address | peer-group-name} default-originate [route-map mapname] To remove a default route, use the no neighbor {ipv6-address | peer-group-name} default-originate command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 693
Command Modes Command History Related Commands ROUTER BGPV6-ADDRESS FAMILY Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor filter-list — assigns a AS-PATH list to a neighbor or peer group. neighbor route-map — assigns a route map to a neighbor or peer group. neighbor filter-list Configure a BGP filter based on the AS-PATH attribute.
PAGE 694
To return to the default values, use the no neighbor {ipv6-address | peer-group-name} maximum-prefix maximum [threshold] [warning-only] command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group. maximum Enter a number as the maximum number of prefixes allowed for this BGP router. The range is from 1 to 4294967295.
PAGE 695
Usage Information If you configure the set ipv6 next-hop command in ROUTE-MAP mode, its configuration takes precedence over the neighbor next-hop-self command. neighbor remove-private-as Remove private AS numbers from the AS-PATH of outgoing updates. Syntax neighbor {ipv6-address | peer-group-name} remove-private-as To return to the default, use the no neighbor {ipv6-address | peer-group-name} removeprivate-as command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format.
PAGE 696
Command Modes Command History Usage Information ROUTER BGPV6-ADDRESS FAMILY Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted. If you identify a peer group by name, the peers in that peer group inherit the characteristics in the Route map used in this command.
PAGE 697
network Specify the networks for the BGP process and enter them in the BGP routing table. Syntax network ipv6-address [route-map map-name] To remove a network, use the no network ipv6-address [route-map map-name] command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. route-map mapname (OPTIONAL) Enter the keywords route-map then the name of an established route map.
PAGE 698
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you do not configure the default-metric command, in addition to the redistribute command, or there is no route map to set the metric, the metric for redistributed static and connected is “0”. To redistribute the default route (0::0/0), configure the neighbor default-originate command.
PAGE 699
Command Modes Command History • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast community View information on all routes with community attributes or view specific BGP community groups.
PAGE 700
show ip bgp ipv6 unicast community-list View routes that are affected by a specific community list. Syntax show ip bgp ipv6 unicast community-list community-list-name Paramters Command Modes Command History community-listname • EXEC • EXEC Privilege Enter the name of a configured IP community list. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 701
Example R2_Training#show ip bgp ipv6 unicast detail Detail information for BGP Node bgpNdP 0x41a17000 : NdTmrP 0x41a17000 : NdKATmrP 0x41a17014 : NdTics 327741 : NhLocAS 1 : NdState 2 : NdRPMPrim 1 : NdListSoc 13 NdAuto 1 : NdEqCost 1 : NdSync 0 : NdDefOrg 0 NdV6ListSoc 14 NdDefDid 0 : NdConfedId 0 : NdMedConfed 0 : NdMedMissVal -1 : NdIgnrIllId 0 : NdRRC2C 1 : NdClstId 33686273 : NdPaTblP 0x41a19088 NdASPTblP 0x41a19090 : NdCommTblP 0x41a19098 : NhOptTransTblP 0x41a190a0 : NdRRClsTblP 0x41a190a8 NdPktPA 0
PAGE 702
filter-list as-pathname (OPTIONAL) Enter the keywords filter-list then the name of a configured AS-PATH ACL. regexp regularexpression Enter a regular expression then use one or a combination of the following characters to match: • . = (period) any single character (including a white space). • * = (asterisk) the sequences in a pattern (0 or more sequences). • + = (plus) the sequences in a pattern (1 or more sequences). • ? = (question mark) sequences in a pattern (either 0 or 1 sequences).
PAGE 703
• Command History EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast neighbors Allows you to view the information exchanged by BGP neighbors.
PAGE 704
Example Lines Beginning With Description BGP version Displays the BGP version (always version 4) and the remote router ID. BGP state Displays the neighbor’s BGP state and the amount of time in hours:minutes:seconds it has been in that state.
PAGE 705
3 opens, 2 notifications, 0 updates 43 keepalives, 0 route refresh requests Minimum time between advertisement runs is 30 seconds Minimum time before advertisements start is 0 seconds Capabilities received from neighbor for IPv6 Unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) CISCO_ROUTE_REFRESH(128) Capabilities advertised to neighbor for IPv6 Unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) CISCO_ROUTE_REFRESH(128) For address family: IPv6 Unicast BGP table version 12, neighbor version 12 2 accepted prefixes con
PAGE 706
show ip bgp ipv6 unicast peer-group Allows you to view information on the BGP peers in a peer group. Syntax show ip bgp ipv6 unicast peer-group [peer-group-name [summary]] Parameters Command Modes Command History Related Commands peer-group-name (OPTIONAL) Enter the name of a peer group to view information about that peer group only. summary (OPTIONAL) Enter the keyword summary to view status information of the peers in that peer group.
PAGE 707
Field Description network entries Displays the number of network entries, route paths, and the amount of memory used to process those entries. BGP path attribute entries Displays the number of BGP path attributes and the amount of memory used to process them. BGP AS-PATH entries Displays the number of BGP AS_PATH attributes processed and the amount of memory used to process them.
PAGE 708
5ffe:11::3 Dell# 708 1 IPv6 Border Gateway Protocol (IPv6 BGP) 27 0 12 0 0 00:00:55 2
PAGE 709
28 iSCSI Optimization Internet small computer system interface (iSCSI) optimization enables quality-of-service (QoS) treatment for iSCSI storage traffic. To configure and verify the iSCSI optimization feature, use the following Dell Networking Operating System (OS) commands. advertise dcbx-app-tlv Configure DCBX to send iSCSI TLV advertisements. Syntax advertise dcbx-app-tlv iscsi To disable DCBX iSCSI TLV advertisements, use the no advertise dcbx-app-tlv iscsi command. Defaults Disabled.
PAGE 710
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. iscsi cos Set the QoS policy that is applied to the iSCSI flows. Syntax iscsi cos {enable | disable | dot1p vlan-priority-value [remark] | dscp dscp-value [remark]} To disable the QoS policy, use the no iscsi cos dscp command.
PAGE 711
Parameters enable Defaults Disabled. Command Modes CONFIGURATION Command History Usage Information Enter the keyword enable to enable the iSCSI optimization feature. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When you enable the iSCSI feature using the iscsi enable command, flow control settings are set to rx on tx off on all interfaces.
PAGE 712
iscsi target port Configure the iSCSI target ports and optionally, the IP addresses on which iSCSI communication is monitored. Syntax iscsi target port [tcp-port-2...tcp-port-16]ip-address [ip-address] To remove the configured iSCSI target ports or IP addresses, use the no iscsi target port command. Parameters tcpport-2...tcpport- 16 Enter the tcp-port number of the iSCSI target ports. The tcp-port-n is the TCP port number or a list of TCP port numbers on which the iSCSI target listens to requests.
PAGE 713
-----------------------------------------------TCP Port Target IP Address 3260 860 Related Commands • show iscsi sessions — displays information about active iSCSI sessions on the switch. • show iscsi sessions detailed — displays detailed information about active iSCSI sessions on the switch. • show run iscsi — shows run iscsi. show iscsi session Display information about active iSCSI sessions on the switch.
PAGE 714
Parameters Command Modes Command History Example isid • EXEC • EXEC Privilege Enter the session’s iSCSi ID to display detailed information about the specified iSCSi session. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell# show isci session detailed Session 0 : --------------------------------------------------Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1 Initiator:iqn.2010-11.com.ixia.
PAGE 715
• show iscsi sessions — show iscsi session — displays detailed information about active iSCSI sessions on the switch. • show iscsi sessions detailed — displays detailed information on active iSCSI sessions on the switch.
PAGE 716
29 Intermediate System to Intermediate System (ISIS) The Dell Networking OS supports the intermediate system to intermediate system (IS-IS) protocol for IPv4 and IPv6. IS-IS is an interior gateway protocol that uses a shortest-path-first algorithm. IS-IS facilitates the communication between open systems, supporting routers passing both IP and OSI traffic. A router is considered an intermediate system. Networks are partitioned into manageable routing domains, called areas.
PAGE 717
advertise Leak routes between levels (distribute IP prefixes between Level 1 and Level 2 and vice versa). Syntax advertise {level1-into-level2 | level2-into-level1} prefix-list-name To return to the default, use the no advertise {level1-into-level2 | level2-intolevel1}[prefix-list-name] command. Parameters Defaults Command Modes Command History Usage Information level1-into-level2 Enter the keywords level1-into-level2 to advertise Level 1 routes into Level 2 LSPs. This setting is the default.
PAGE 718
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To prevent the link state database from receiving incorrect routing information from unauthorized routers, use the area-password command on routers within an area. The configured password injects into Level 1 LSPs, CSNPs, and PSNPs. Related Commands • domain-password — allows you to set the authentication password for a routing domain.
PAGE 719
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. clns host Define a name-to-network service mapping point (NSAP) that you use with commands that require NSAPs and system IDs. Syntax Parameters clns host name nsap name Enter an alphanumeric string to identify the name-to-NSAP mapping. nsap Enter a specific NSAP address that is associated with the name parameter. Defaults Not configured.
PAGE 720
To display all debugging information in one output, use this command. To turn off debugging, you normally enter separate no forms of each command. To disable all debug messages for IS-IS at once, enter the no debug isis command. debug isis adj-packets Enable debugging on adjacency-related activity such as hello packets that are sent and received on IS-IS adjacencies. Syntax debug isis adj-packets [interface] To turn off debugging, use the no debug isis adj-packets [interface] command.
PAGE 721
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug isis snp-packets To debug IS-IS complete sequence number PDU (CSNP) and partial sequence number PDU (PSNP) packets, enable debugging on a specific interface and provides diagnostic information. Syntax debug isis snp-packets [interface] To turn off debugging, use the no debug isis snp-packets [interface] command.
PAGE 722
debug isis update-packets Enable debugging on link state PDUs (LSPs) that a router detects. Syntax debug isis update-packets [interface] To turn off debugging, use the no debug isis update-packets [interface] command. Parameters Command Modes Command History interface (OPTIONAL) Identifies the interface type slot/port as one of the following: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
PAGE 723
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you use this command to redistribute routes into a routing domain, the router becomes an autonomous system (AS) boundary router. An AS boundary router does not always generate a default route into a routing domain. The router still requires its own default route before it can generate one. How a metric value assigned to a default route advertises depends on the metric-style command configuration.
PAGE 724
Parameters Defaults weight The administrative distance value indicates the reliability of a routing information source. The range is from 1 to 255. (A higher relative value indicates lower reliability. Routes with smaller values are given preference.) The default is 115. ip-address mask (OPTIONAL) Enter an IP address in dotted decimal format and enter a mask in either dotted decimal or /prefix format. prefix-list (OPTIONAL) Enter the name of a prefix list name.
PAGE 725
Related Commands Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. • distribute-list out — suppresses networks from being advertised in updates. • redistribute — redistributes routes from one routing domain to another routing domain. distribute-list out Suppress network prefixes from being advertised in outbound updates.
PAGE 726
distribute-list redistributed-override Suppress flapping of routes when the same route is redistributed into IS-IS from multiple routers in the network. Syntax distribute-list redistributed-override in To return to the default, use the no distribute-list redistributed-override in command. Defaults none Command Modes Command History Usage Information • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 727
graceful-restart ietf Enable graceful restart on an IS-IS router. Syntax graceful-restart ietf To return to the default, use the no graceful-restart ietf command. Parameters ietf Enter ietf to enable graceful restart on the IS-IS router. Defaults Graceful restart disabled. Command Modes ROUTER ISIS Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 728
graceful-restart t1 Set the graceful restart wait time before unacknowledged restart requests are generated. This wait time is the interval before the system sends a restart request (an IIH with RR bit set in Restart TLV) until the CSNP is received from the helping router. Syntax graceful-restart t1 {interval seconds | retry-times value} To return to the default, use the no graceful-restart t1 command. Parameters interval Enter the keyword interval to set the wait time.
PAGE 729
graceful-restart t3 Configure the overall wait time before graceful restart completes. Syntax graceful-restart t3 {adjacency | manual} seconds To return to the default, use the no graceful-restart t3 command. Parameters adjacency Enter the keyword adjacency so that the restarting router receives the remaining time value from its peer and adjusts its T3 value so if you have configured this option. manual Enter the keyword manual to specify a time value that the restarting router uses.
PAGE 730
Command Modes Command History Related Commands ROUTER ISIS Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. graceful-restart t3 — configures the overall wait time before graceful restart completes. hello padding Use to turn ON or OFF padding for LAN and point-to-point hello PDUs or to selectively turn padding ON or OFF for LAN or point-topoint hello PDUs.
PAGE 731
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To build name-to-systemID mapping tables through the protocol, use this command. All show commands that display systems also display the hostname. Related Commands clns host — defines a name-to-NSAP mapping. ignore-lsp-errors Ignore LSPs with bad checksums instead of purging those LSPs.
PAGE 732
Usage Information Related Commands Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To assign a network entity title to enable IS-IS, use the net command. • net — configures an IS-IS network entity title (NET) for the routing process. • router isis — enables the IS-IS routing protocol. ipv6 router isis Enable the IPv6 IS-IS routing protocol and specify an IPv6 IS-IS process. Syntax ipv6 router isis [tag] To disable IS-IS routing, use the no router isis [tag] command.
PAGE 733
Parameters level-1 You can form a Level 1 adjacency if there is at least one common area address between this system and neighbors. You cannot form Level 2 adjacencies on this interface. level-1-2 You can form a Level 1 and Level 2 adjacencies when the neighbor is also configured as Level-1-2 and there is at least one common area, if not, a Level 2 adjacency is established. This setting is the default.
PAGE 734
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The default values of this command are typically satisfactory transmission times for a specific interface on a designated intermediate system. To maintain database synchronization, the designated routers send CSNPs. You can configure Level 1 and Level 2 CSNP intervals independently. isis csnp-interval Configure the IS-IS complete sequence number PDU (CSNP) interval on an interface.
PAGE 735
Parameters multiplier Specifies an integer that sets the multiplier for the hello holding time. Never configure a hello-multiplier lower than the default (3). The range is from 3 to 1000. The default is 3. level-1 (OPTIONAL) Select this value to configure the hello multiplier independently for Level 1 adjacencies. This value is the default. level-2 (OPTONAL) Select this value to configure the hello multiplier independently for Level 2 adjacencies.
PAGE 736
To return to the default values, use the no ipv6 isis metric [default-metric] [level-1 | level-2] command. Parameters default-metric Metric assigned to the link and used to calculate the cost from each other router via the links in the network to other destinations. You can configure this metric for Level 1 or Level 2 routing. The range is from 0 to 16777215. The default is 10.
PAGE 737
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell Networking recommends configuring metrics on all interfaces. Without configuring this command, the IS-IS metrics are similar to hop-count metrics. isis network point-to-point Enable the software to treat a broadcast interface as a point-to-point interface. Syntax isis network point-to-point To disable the feature, use the no isis network point-to-point command. Defaults Not enabled.
PAGE 738
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To protect your network from unauthorized access, use this command to prevent unauthorized routers from forming adjacencies. You can assign different passwords for different routing levels by using the keywords level-1 and level-2.
PAGE 739
is-type Configure IS-IS operating level for a router. Syntax is-type {level-1 | level-1-2 | level-2-only} To return to the default values, use the no is-type command. Parameters level-1 Allows a router to act as a Level 1 router. level-1-2 Allows a router to act as both a Level 1 and Level 2 router. This setting is the default. level-2-only Allows a router to act as a Level 2 router. Defaults level-1-2 Command Modes ROUTER ISIS Command History Usage Information Version Description 9.9(0.
PAGE 740
lsp-gen-interval Set the minimum interval between successive generations of link-state packets (LSPs). Syntax lsp-gen-interval [level-l | level-2] interval seconds [initial_wait_interval seconds [second_wait_interval seconds]] To restore default values, use the no lsp-gen-interval [level-l | level-2] interval seconds [initial_wait_interval seconds [second_wait_interval seconds]] command. Parameters level-l (OPTIONAL) Enter the keywords level-1 to apply the configuration to generation of Level-1 LSPs.
PAGE 741
Parameters size Defaults 1497 bytes. Command Modes ROUTER ISIS Command History Usage Information The maximum LSP size, in bytes. The range is from 128 to 1497 for Non-Jumbo mode and from 128 to 9195 for Jumbo mode. The default is 1497. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The link MTU and the LSP MTU size must be the same.
PAGE 742
max-area-addresses Configure manual area addresses. Syntax max-area-addresses number To return to the default values, use the no max-area-addresses command. Parameters number Defaults 3 addresses Command Modes ROUTER ISIS Command History Usage Information Set the maximum number of manual area addresses. The range is from 3 to 6. The default is 3. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 743
maximum-paths Allows you to configure the maximum number of equal cost paths allowed in a routing table. Syntax maximum-paths number To return to the default values, use the no maximum-paths command. Parameters Defaults Command Modes Command History number Enter a number as the maximum number of parallel paths an IP routing installs in a routing table. The range is from 1 to 16. The default is 4.
PAGE 744
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you enter the metric-style wide command, the system generates and accepts only new-style TLVs. The router uses less memory and other resources rather than generating both old-style and new-style TLVs. The new-style TLVs have wider metric fields than old-style TLVs. Related Commands isis metric — configures a metric for an interface. multi-topology Enables multi-topology IS-IS.
PAGE 745
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. passive-interface Suppress routing updates on an interface. This command stops the router from sending updates on that interface. Syntax passive-interface interface To delete a passive interface configuration, use the no passive-interface interface command. Parameters interface Defaults Not configured.
PAGE 746
To end redistribution or disable any of the specified keywords, use the no redistribute {static | connected | rip} [metric metric-value] [metric-type {external | internal}] [level-1 | level-1-2 | level-2] [route-map map-name] command. Parameters Defaults Command Modes Command History Usage Information connected Enter the keyword connected to redistribute active routes into IS-IS. rip Enter the keyword rip to redistribute RIP routes into IS-IS.
PAGE 747
How a metric value assigned to a redistributed route is advertised depends on how on the configuration of the metric-style command. If the metric-style command is set for Narrow or Transition mode and the metric value in the redistribute command is set to a number higher than 63, the metric value advertised in LSPs is 63. If the metric-style command is set for Wide mode, the metric value in the redistribute command is advertised.
PAGE 748
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information BGP to IS-IS redistribution supports “match” options using route maps. You can set the metric value, level, and metric-type of redistributed routes by the redistribution command. You can “set” more advanced options using route maps.
PAGE 749
• route-map mapname external map-name is an identifier for a configured route map. The route map should filter imported routes from the source routing protocol to the current routing protocol. If you do not specify a map-name, all routes are redistributed. If you specify a keyword, but fail to list route map tags, no routes are imported. Defaults Command Modes Command History Usage Information Refer to Parameters.
PAGE 750
You can configure only one IS-IS routing process to perform Level 2 routing. A level-1-2 designation performs Level 1 and Level 2 routing at the same time. Related Commands • ip router isis — configures IS-IS routing processes for IP on interfaces and attaches an area designator to the routing process. • net — configures an IS-IS network entity title (NET) for a routing process. • is-type — assigns a type for a given area.
PAGE 751
Example (RouterIsis) The bold section identifies that Multi-Topology IS-IS is enabled in Transition mode. Dell(conf-router_isis)#show config ! router isis clns host ISIS 49.0000.0001.F100.E120.0013.00 log-adjacency-changes net 49.0000.0001.F100.E120.0013.
PAGE 752
Usage Information The following describes the show isis database command shown in the following example. Field Description IS-IS Level-1/ Level-2 Link State Database Displays the IS-IS link state database for Level 1 or Level 2. LSPID Displays the LSP identifier. The first six octets are the System ID of the originating router. The first six octets are the System ID of the originating router. The next octet is the pseudonode ID. If this byte is not zero, the LSP describes system links.
PAGE 753
IS-IS Level-1 Link State Database LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL ISIS.00-00 * 0x0000002B 0x853B 1075 0/0/0 Area Address: 49.0000.0001 NLPID: 0xCC 0x8E IP Address: 10.1.1.1 IPv6 Address: 1011::1 Topology: IPv4 (0x00) IPv6 (0x8002) Metric: 10 IS OSPF.00 Metric: 10 IS (MT-IPv6) OSPF.00 Metric: 10 IP 15.1.1.0 255.255.255.0 Metric: 10 IPv6 (MT-IPv6) 1511::/64 Metric: 10 IPv6 (MT-IPv6) 2511::/64 Metric: 10 IPv6 (MT-IPv6) 1011::/64 Metric: 10 IPv6 1511::/64 Metric: 10 IP 10.1.1.0 255.255.255.
PAGE 754
T3 Timeout Value T2 Timeout Value T1 Timeout Value Adjacency wait time : : : : 30 30 (level-1), 30 (level-2) 5, retry count: 1 30 Operational Timer Value ====================== Current Mode/State : T3 Time left : T2 Time left : Restart ACK rcv count : Restart Req rcv count : Suppress Adj rcv count : Restart CSNP rcv count : Database Sync count : Dell# Normal/RUNNING 0 0 (level-1), 0 0 (level-1), 0 0 (level-1), 0 0 (level-1), 0 0 (level-1), 0 0 (level-1), 0 (level-2) (level-2) (level-2) (level-2) (level
PAGE 755
• Command Modes Command History Example • EXEC • EXEC Privilege For a VLAN, enter the keyword vlan then a number from 1 to 4094. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell>show isis int GigabitEthernet 0/7 is up, line protocol is up MTU 1497, Encapsulation SAP Routing Protocol: IS-IS Circuit Type: Level-1-2 Interface Index 37847070, Local circuit ID 1 Level-1 Metric: 10, Priority: 64, Circuit ID: systest-3.
PAGE 756
• Command Modes Command History Usage Information • EXEC • EXEC Privilege For a VLAN, enter the keyword vlan then a number from 1 to 4094. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Use this command to confirm that the neighbor adjacencies are operating correctly. If you suspect that they are not, you can verify the specified area addresses of the routers by using the show isis neighbors command.
PAGE 757
Command Modes Command History Example • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The bold section identifies that Multi-Topology IS-IS is enabled. Dell#show isis protocol IS-IS Router: System Id: F100.E120.0013 IS-Type: level-1-2 Manual area address(es): 49.0000.0001 Routing for area address(es): 49.0000.
PAGE 758
Usage Information Example 758 Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show isis traffic command shown in the following example. Item Description Level-1/Level-2 Hellos (sent/rcvd) Displays the number of Hello packets sent and received. PTP Hellos (sent/ rcvd) Displays the number of point-to-point Hellos sent and received. Level-1/Level-2 LSPs sourced (new/refresh) Displays the number of new and refreshed LSPs.
PAGE 759
spf-interval Specify the minimum interval between shortest path first (SPF) calculations. Syntax spf-interval [level-l | level-2] interval seconds [initial_wait_interval seconds [second_wait_interval seconds]] To restore default values, use the no spf-interval [level-l | level-2] interval seconds [initial_wait_interval seconds [second_wait_interval seconds]] command.
PAGE 760
30 Link Aggregation Control Protocol (LACP) This chapter contains commands for Dell Networks’s implementation of the link aggregation control protocol (LACP) for creating dynamic link aggregation groups (LAGs) — known as port-channels in the Dell Networking Operating System (OS). NOTE: For static LAG commands, refer to theInterfaces chapter), based on the standards specified in the IEEE 802.3 Carrier sense multiple access with collision detection (CSMA/CD) access method and physical layer specifications.
PAGE 761
• For a Ten-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Optionally, enter an in or out parameter: Defaults Command Modes Command History • Receive enter in • Transmit enter out none • EXEC • EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 762
Defaults 32768 Command Modes INTERFACE Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. lacp system-priority Configure the LACP system priority. Syntax lacp system-priority priority-value Parameters priority-value Defaults 32768 Command Modes INTERFACE Command History Enter the port-priority value. The higher the value number, the lower the priority. The range is from 1 to 65535. The default is 32768.
PAGE 763
Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. LACP Modes Mode Function active An interface is in an active negotiating state in this mode. LACP runs on any link configured in the active state and also automatically initiates negotiation with other ports by initiating LACP packets. passive An interface is not in an active negotiating state in this mode.
PAGE 764
Parameters Defaults port-channelnumber Enter a port-channel number. The range is from 1 to 128. sys-id (OPTIONAL) Enter the keywords sys-id and the value that identifies a system. counters (OPTIONAL) Enter the keyword counters to display the LACP counters. Without a Port Channel specified, the command clears all Port Channel counters. Command Modes Command History Example (PortChannel-Number) • EXEC • EXEC Privilege Version 8.3.16.
PAGE 765
31 Layer 2 This chapter describes commands to configure Layer 2 features. This chapter contains: • MAC Addressing Commands MAC Addressing Commands The following commands are related to configuring, managing, and viewing MAC addresses. clear mac-address-table Clear the MAC address table. Syntax Parameters clear mac-address-table dynamic {address mac-address | all | interface interface | vlan vlan-id} address macaddress Enter the keyword address then a MAC address in nn:nn:nn:nn:nn:nn format.
PAGE 766
mac-address-table aging-time Specify an aging time for MAC addresses to remove from the MAC address table. Syntax mac-address-table aging-time seconds To delete the configured aging time, use the no mac-address-table aging-time seconds command. Parameters seconds Defaults 1800 seconds Command Modes CONFIGURATION Command History Enter either zero (0) or a number as the number of seconds before MAC addresses are relearned. To disable aging of the MAC address table, enter 0.
PAGE 767
mac-address-table station-move refresh-arp Ensure that address resolution protocol (ARP) refreshes the egress interface when a station move occurs due to a topology change. Syntax [no] mac-address-table station-move refresh-arp Defaults Enabled Command Modes CONFIGURATION Command History Usage Information Version 9.9(0.0) Modified the default option from none to Enabled. Version 9.2(0.0) Introduced on the M I/O Aggregator. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 768
If you do not specify the vlan option, the MAC address counters are not VLAN-based. That is, the sum of the addresses learned on all VLANs (not having any learning limit configuration) is counted against the MAC learning limit. MAC Learning Limit violation logs and actions are not available on a per-VLAN basis. With the keyword no-station-move option, MAC addresses learned through this feature on the selected interface persist on a per-VLAN basis, even if received on another interface.
PAGE 769
mac learning-limit station-move-violation Specify the actions for a station move violation. Syntax mac learning-limit station-move-violation {log | shutdown-both | shutdownoffending | shutdown-original} To disable a configuration, use the no mac learning-limit station-move-violation command, then the configured keyword. Parameters log Enter the keyword log to generate a syslog message on a station move violation.
PAGE 770
show cam mac stack-unit Display the content addressable memory (CAM) size and the portions allocated for MAC addresses and for MAC ACLs. Syntax show cam mac stack-unit unit_number port-set port-pipe count [vlan vlan-id] [interface interface] Parameters stack-unit unit_number (REQUIRED) Enter the keyword linecard then a stack member number to select the linecard for which to gather information. The range is 0 to 5.
PAGE 771
Command Modes Command History Usage Information static (OPTIONAL) Enter the keyword static to display only those MAC addresses specifically configured on the switch. Optionally, you can also add one of these combinations: address/mac-address, interface/interface, or vlan vlan-id. address macaddress (OPTIONAL) Enter the keyword address then a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
PAGE 772
Example Dell#show mac-address-table VlanId Mac Address Type 20 00:00:c9:ad:f6:12 Dynamic Dell# Usage Information Interface Te 0/3 State Active The following describes the show mac-address-table command shown in the following example. Column Heading Description VlanId Displays the VLAN ID number. Mac Address Displays the MAC address in nn:nn:nn:nn:nn:nn format. Type Lists whether the MAC address was manually configured (Static), learned (Dynamic), or associated with a specific port (Sticky).
PAGE 773
Parameters Command Modes Command History Example vlan vlan-id • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword vlan then the VLAN ID to display the MAC address assigned to the VLAN. The range is from 1 to 4094. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 774
Example Dell#show mac learning-limit Interface Learning Dynamic Slot/port Limit MAC count Dell# Static Unknown MAC count SA Drops Virtual LAN (VLAN) Commands The following commands configure and monitor virtual LANs (VLANs). VLANs are a virtual interface and use many of the same commands as physical interfaces. You can configure an IP address and Layer 3 protocols on a VLAN called Inter-VLAN routing. FTP, TFTP, ACLs and SNMP are not supported on a VLAN.
PAGE 775
Command Modes Command History Usage Information CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To return VLAN 1 as the Default VLAN, use the (default-vlan-id 1) command. The Default VLAN contains only untagged interfaces. Related Commands interface vlan — configures a VLAN.
PAGE 776
Usage Information To display information about a named VLAN, enter the show vlan command with the name parameter or the show interfaces description command. Related Commands description — assigns a descriptive text string to the interface. interface vlan — configures a VLAN. show vlan — displays the current VLAN configurations on the switch. show config Display the current configuration of the selected VLAN.
PAGE 777
name vlan-name Command Modes Command History Usage Information • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword name then the name configured for the VLAN. Only information on the VLAN named is displayed. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show vlan command shown in the following example.
PAGE 778
Codes: * - Default VLAN, G - GVRP VLANs, R - Remote Port Mirroring VLANs, P Primary, C - Community, I - Isolated Q: U - Untagged, T - Tagged x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack, H - VSN tagged i - Internal untagged, I - Internal tagged, v - VLT untagged, V - VLT tagged NUM Status Description Q Ports 1 Inactive a 2 Inactive * 20 Active U Te 0/3,5,13,53-56 1002 Active T Te 0/3,13,55-56 Dell# Example (VLAN ID) Dell# show vlan id 40 Codes: * - Default VLAN, G - GVRP VLANs, R -
PAGE 779
To remove a tagged interface from a VLAN, use the no tagged interface command. Parameters interface Enter the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
PAGE 780
Command Modes Command History Usage Information INTERFACE VLAN Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When this command is configured, the VLAN is operationally UP if any of the interfaces specified in the track ip command are operationally UP, and the VLAN is operationally DOWN if none of the tracking interfaces are operationally UP.
PAGE 781
In the Default VLAN, you cannot use the no untagged interface command. To remove an untagged interface from all VLANs, including the Default VLAN, enter INTERFACE mode and use the no switchport command. Related Commands interface vlan — configures a VLAN. tagged — specifies which interfaces in a VLAN are tagged.
PAGE 782
32 Link Layer Discovery Protocol (LLDP) Link layer discovery protocol (LLDP) advertises connectivity and management from the local station to the adjacent stations on an IEEE 802 LAN. LLDP facilitates multi-vendor interoperability by using standard management tools to discover and make available a physical topology for network management. The Dell Networking operating software implementation of LLDP is based on IEEE standard 801.1ab.
PAGE 783
Related Commands protocol lldp (Configuration) — enables LLDP globally. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration. advertise dot3-tlv Advertise dot3 TLVs (Type, Length, Value). Syntax advertise dot3-tlv {max-frame-size} To remove advertised dot3-tlv, use the no advertise dot3-tlv {max-frame-size} command.
PAGE 784
Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The command options system-capabilities, system-description, and system-name can be invoked individually or together, in any sequence. clear lldp counters Clear LLDP transmitting and receiving counters for all physical interfaces or a specific physical interface.
PAGE 785
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface To display timer events, neighbor additions or deletions, and other information about incoming and outgoing packets, enable LLDP debugging. Syntax debug lldp interface {interface | all}{events | packet {brief | detail} {tx | rx | both}} To disable debugging, use the no debug lldp interface {interface | all}{events} {packet {brief | detail} {tx | rx | both}} command.
PAGE 786
To enable LLDP, use the no disable command. Defaults Enabled, that is no disable. Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp) Command History Related Commands Version 9.2(0.0) Introduced on the M I/O Aggregator. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol lldp (Configuration) — enables LLDP globally. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors.
PAGE 787
Command Modes Command History Related Commands CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp) Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol lldp (Configuration) — enables LLDP globally. show lldp neighbors — displays the LLDP neighbors. multiplier Set the number of consecutive misses before LLDP declares the interface dead.
PAGE 788
protocol lldp (Interface) Enter the LLDP protocol in INTERFACE mode. Syntax [no] protocol lldp To return to the global LLDP configuration mode, use the no protocol lldp command from Interface mode. Defaults LLDP is not enabled on the interface. Command Modes INTERFACE (conf-if-interface-lldp) Command History Usage Information Version 8.3.16.1 Before LLDP can be configured on an interface, it must be enabled globally from CONFIGURATION mode.
PAGE 789
show lldp statistics Display the LLDP statistical information. Syntax show lldp statistics Defaults none Command Modes EXEC Privilege Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 790
As defined by ANSI/TIA-1057, LLDP-MED provides organizationally specific TLVs (Type Length Value), so that endpoint devices and network connectivity devices can advertise their characteristics and configuration information. The Organizational Unique Identifier (OUI) for the Telecommunications Industry Association (TIA) is 00-12-BB. • LLDP-MED Endpoint Device — any device that is on an IEEE 802 LAN network edge, can communicate using IP, and uses the LLDP-MED framework.
PAGE 791
advertise med guest-voice-signaling To advertise a separate limited voice service for a guest user when the guest voice control packets use a separate network policy than the voice data, configure the system. Syntax advertise med guest-voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number} To return to the default, use the no advertise med guest-voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID.
PAGE 792
Defaults unconfigured. Command Modes CONFIGURATION (conf-lldp) Command History Usage Information Related Commands 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. • ECS — Emergency call service such as defined by TIA or the national emergency numbering association (NENA) • ELIN — Emergency location identification number, a valid North America Numbering Plan format telephone number supplied for ECS purposes. debug lldp interface — debugs LLDP.
PAGE 793
To return to the default, use the no advertise med softphone-voice {vlan-id} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094. priority-tagged number Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7. Defaults unconfigured. Command Modes CONFIGURATION (conf-lldp) Command History Related Commands 9.9(0.0) Introduced on the FN IOM. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 794
advertise med video-conferencing To advertise dedicated video conferencing and other similar appliances that support real-time interactive video, configure the system. Syntax advertise med video-conferencing {vlan-id} | {priority-tagged number} To return to the default, use the no advertise med video-conferencing {vlan-id} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094.
PAGE 795
show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration. advertise med voice To advertise a dedicated IP telephony handset or other appliances supporting interactive voice services, configure the system. Syntax advertise med voice {vlan-id} | {priority-tagged number} To return to the default, use the no advertise med voice {vlan-id} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094.
PAGE 796
Command History Related Commands 9.9(0.0) Introduced on the FN IOM. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration.
PAGE 797
33 Microsoft Network Load Balancing Network Load Balancing (NLB) is a clustering functionality that is implemented by Microsoft on Windows 2000 Server and Windows Server 2003 operating systems. NLB uses a distributed methodology or pattern to equally split and balance the network traffic load across a set of servers that are part of the cluster or group.
PAGE 798
NLB Multicast Mode Scenario Consider a sample topology in which four servers, namely S1 through S4, are configured as a cluster or a farm. This set of servers is connected to a Layer 3 switch, which in turn is connected to the end-clients. They contain a single multicast MAC address (MACCluster: 03-00-5E-11-11-11). In the multicast NLB mode, a static ARP configuration command is configured to associate the cluster IP address with a multicast cluster MAC address.
PAGE 799
• When a port is added to the VLAN, the port automatically receives traffic if the feature is enabled. Old ARP entries are not deleted or updated. • When a member port is deleted, its ARP entries are also deleted from the CAM. • Port channels in the VLAN also receive traffic. • There is no impact on the configuration from saving the configuration. • The feature, if enabled, is displayed in the show running-config command output that displays the ip vlan-flooding CLI configuration.
PAGE 800
Defaults Not configured. Command Modes CONFIGURATION Command History Example (Multicast) Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Added support for multicast MAC address on the MXL platform. mac-address-table static 01:00:5E:01:00:01 {multicast vlan 2 output—range Te 0/2,Te 0/3} ip vlan-flooding Enable unicast data traffic flooding on VLAN member ports. Syntax ip vlan-flooding To disable, use the no ip vlan-flooding command.
PAGE 801
34 Multicast Source Discovery Protocol (MSDP) Multicast source discovery protocol (MSDP) connects multiple PIM Sparse-Mode (PIM-SM) domains together. MSDP peers connect using TCP port 639. Peers send keepalives every 60 seconds. A peer connection is reset after 75 seconds if no MSDP packets are received. MSDP connections are parallel with MBGP connections. clear ip msdp peer Reset the TCP connection to the peer and clear all the peer statistics.
PAGE 802
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL Switch . clear ip msdp statistic Clears the entire source-active cache, the source-active entries of a particular multicast group, rejected, or local source-active entries. Syntax clear ip msdp sa-cache [group-address | rejected-sa | local] Parameters group-address Enter the group IP address in dotted decimal format (A.B.C.D.).
PAGE 803
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip msdp cache-rejected-sa Enable an MSDP cache for the rejected source-active entries. Syntax ip msdp cache-rejected-sa {number} To clear the MSDP rejected source-active entries, use the no ip msdp cache-rejected-sa {number} command then the ip msdp cache-rejected-sa {number} command. Parameters number Enter the number of rejected SA entries to cache.
PAGE 804
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If a list is not specified, all SA messages received from the default peer are accepted. You can enter multiple default peer commands. ip msdp log-adjacency-changes Enable logging of MSDP adjacency changes. Syntax ip msdp log-adjacency-changes To disable logging, use the no ip msdp log-adjacency-changes command. Defaults Not configured.
PAGE 805
member X of a mesh-group receives a SA message from an MSDP peer that is also a member of the meshgroup, member X accepts the SA message and forwards it to all of its peers that are not part of the meshgroup. However, member X cannot forward the SA message to other members of the mesh-group. ip msdp originator-id Configure the MSDP Originator ID. Syntax ip msdp originator-id {interface} To remove the originator-id, use the no ip msdp originator-id {interface} command.
PAGE 806
• For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094.
PAGE 807
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Modifications to the ACL do not have an immediate effect on the sa-cache. To apply the redistribute filter to entries already present in the SA cache, use the clear ip msdp sacache local command. ip msdp sa-filter Permit or deny MSDP source active (SA) messages based on multicast source and/or group from the specified peer.
PAGE 808
Defaults 50000 Command Modes CONFIGURATION Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The system counts the SA messages originated by itself and those messages received from the MSDP peers. When the total SA messages reach this limit, the subsequent SA messages are dropped (even if they pass RPF checking and policy checking).
PAGE 809
Command Modes Command History CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip msdp Display the MSDP peer status, SA cache, or peer summary. Syntax Parameters Defaults Command Modes Command History Example show ip msdp {peer peer address | sa-cache | summary} peer peer address Enter the keyword peer then the peer address in a dotted decimal format (A.B.C.D.).
PAGE 810
Peer1 Dell# show ip msdp sa-cache rejected-sa Display the rejected SAs in the SA cache. Syntax show ip msdp sa-cache rejected-sa Defaults none Command Modes Command History Example 810 • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#sh ip msdp sa-cache rejected-sa MSDP Rejected SA Cache 200 rejected SAs UpTime GroupAddr SourceAddr RPAddr 00:00:13 225.1.2.1 10.1.1.3 110.1.1.1 00:00:13 225.1.2.
PAGE 811
35 Multiple Spanning Tree Protocol (MSTP) Multiple spanning tree protocol (MSTP), as implemented by the Dell Networking Operating System (OS), conforms to IEEE 802.1s. debug spanning-tree mstp Enable debugging of the multiple spanning tree protocol and view information on the protocol. Syntax Parameters debug spanning-tree mstp [all | bpdu interface {in | out} | events] all (OPTIONAL) Enter the keyword all to debug all spanning tree operations.
PAGE 812
description Enter a description of the multiple spanning tree. Syntax description {description} To remove the description, use the no description {description} command. Parameters description Enter a description to identify the multiple spanning tree (maximum 80 characters). Defaults none Command Modes SPANNING TREE (The prompt is “config-mstp”.) Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 813
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Module forward-delay The amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State. Syntax forward-delay seconds To return to the default setting, use the no forward-delay command.
PAGE 814
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. edge-port bpdufilter default — the amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State. max-age — changes the wait time before MSTP refreshes protocol configuration information. max-age To maintain configuration information before refreshing that information, set the time interval for the MSTB.
PAGE 815
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The max-hops command is a configuration command that applies to both the IST and all MST instances in the MSTP region. The BPDUs sent out by the root switch set the remaining-hops parameter to the configured value of max-hops.
PAGE 816
name The name you assign to the multiple spanning tree region. Syntax name region-name To remove the region name, use the no name command. Parameters region-name Enter the MST region name. The range is 32 character limit. Defaults no default name. Command Modes MULTIPLE SPANNING TREE Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 817
Related Commands disable — disables multiple spanning tree. revision The revision number for the multiple spanning tree configuration. Syntax revision range To return to the default values, use the no revision command. Parameters range Enter the revision number for the MST configuration. The range is from 0 to 65535. The default is 0. Defaults 0 Command Modes MULTIPLE SPANNING TREE Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 818
max-hops 5 Dell(conf-mstp)# show spanning-tree mst configuration View the multiple spanning tree configuration. Syntax show spanning-tree mst configuration Command Modes Command History • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Enable the multiple spanning tree protocol prior to using this command.
PAGE 819
Usage Information Enable the multiple spanning tree protocol prior to using this command. Example Dell#show spanning-tree msti 0 brief MSTI 0 VLANs mapped 1-4094 Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 0001.e800.0204 Root Bridge hello time 2, max age 20, forward delay 15, max hops 20 Bridge ID Priority 32768, Address 0001.e800.
PAGE 820
Number of topology changes 1, last change occured 00:00:15 ago on Gi 0/0 Port 257 (GigabitEthernet 0/0) is LBK_INC Discarding Port path cost 20000, Port priority 128, Port Identifier 128.257 Designated root has priority 32768, address 0001.e801.6aa8 Designated bridge has priority 32768, address 0001.e801.6aa8 Designated port id is 128.
PAGE 821
spanning-tree msti Configure multiple spanning tree instance cost and priority for an interface. Syntax Parameters spanning-tree msti instance {cost cost | priority priority} msti instance Enter the keyword msti and the MST instance number. The range is from zero (0) to 63. cost cost (OPTIONAL) Enter the keyword cost then the port cost value. The range is from 1 to 200000.
PAGE 822
Command Modes Command History Usage Information shutdown-onviolation (OPTIONAL) Enter the keywords shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled. rootguard Enter the keyword rootguard to enable root guard on an MSTP port or portchannel interface. INTERFACE Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 823
changes. However, if a standards-based flush mechanism is needed, this knob command can be turned on to enable flushing MAC addresses after receiving every topology change notification.
PAGE 824
36 Multicast The multicast commands are supported by Dell Networking Operating System (OS). This chapter contains the following sections: • IPv4 Multicast Commands • IPv6 Multicast Commands IPv4 Multicast Commands The following section contains the IPv4 multicast commands. clear ip mroute Clear learned multicast routes on the multicast forwarding table. To clear the protocol-independent multicast (PIM) tree information base, use the clear ip pim tib command.
PAGE 825
To delete a specific static mroute, use the ip mroute destination mask {ip-address | null 0| {{bgp| ospf} process-id | isis | rip | static} {ip-address | tag | null 0}} [distance] command. To delete all mroutes matching a certain mroute, use the no ip mroute destination mask command. Parameters destination Enter the IP address in dotted decimal format of the destination device. mask Enter the mask in slash prefix formation ( /x ) or in dotted decimal format.
PAGE 826
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This feature allows you to limit the number of multicast entries on the system. This number is the total of all the multicast entries on all line cards in the system. On each line card, the multicast module only installs the maximum number of entries, depending on the configured CAM profile. To store multicast routes, use the IN-L3-McastFib CAM partition.
PAGE 827
Enter the source-address to view routes with that group-address and sourceaddress. count (OPTIONAL) Enter the keyword count to view the number of multicast routes and packets. snooping [vlan vlanid] [group-address [source-address]] Enter the keyword snooping to display information on the multicast routes PIMSM snooping discovers. Enter a VLAN ID to limit the information displayed to the multicast routes PIM-SM snooping discovers on a specified VLAN. The VLAN ID range is from 1 to 4094.
PAGE 828
TenGigabitEthernet 0/3 TenGigabitEthernet 0/4 TenGigabitEthernet 0/5 Example Dell#show ip mroute IP Multicast Routing Table (*, 224.10.10.1), uptime 00:05:12 Incoming interface: TenGigabitEthernet 0/2 Outgoing interface list: TenGigabitEthernet 0/13 (1.13.1.100, 224.10.10.1), uptime 00:04:03 Incoming interface: TenGigabitEthernet 1/4 Outgoing interface list: TenGigabitEthernet 0/6 TenGigabitEthernet 0/7 (*, 224.20.20.
PAGE 829
show ip rpf View reverse path forwarding. Syntax Command Modes Command History Usage Information show ip rpf • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2.(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Network administrators use static mroutes to control the reach-ability of the multicast sources.
PAGE 830
Default Disabled Command Modes EXEC Command History Usage Information • For a port-channel interface, enter the keywords port-channel then the slot/port information. • For a VLAN interface, enter the keyword vlan then the slot/port information. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2.(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To debug the MLD protocol for all ports or for specified ports, use the debug ipv6 mld_host command.
PAGE 831
37 Neighbor Discovery Protocol (NDP) The Dell Networking Operating System (OS) supports the network discovery protocol for IPv6. The neighbor discovery protocol for IPv6 is defined in RFC 2461 as part of the Stateless Address Autoconfiguration protocol. It replaces the Address Resolution Protocol used with IPv4.
PAGE 832
Command Modes Command History • EXEC • EXEC Privilege • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a VLAN, enter the keyword vlan then the VLAN ID. The range is from 1 to 4094. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 833
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ipv6 neighbors Displays IPv6 discovery information. Entering the command without options shows all the IPv6 neighbor addresses stored on the control processor (CP). Syntax Parameters show ipv6 neighbors [ipv6-address] [cpu {rp1 [ipv6-address] | rp2 [ipv6address]}] [interface interface] ipv6-address Enter the IPv6 address of the neighbor in the x:x:x:x::x format.
PAGE 834
38 Object Tracking Object Tracking supports IPv4 and IPv6, and is available on the Dell Networking platforms. Object tracking allows you to define objects of interest, monitor their state, and report to a client when a change in an object’s state occurs.
PAGE 835
04:35:04: %RPM0-P:RP2 %OTM-5-NOTIF: VRRP notification: resource ID 6 DOWN delay Configure the time delay used before communicating a change in the status of a tracked object to clients. Syntax delay {[up seconds] [down seconds]} To return to the default setting, use the no delay command. Parameters seconds Enter the number of seconds the object tracker waits before sending a notification about the change in the UP and/or DOWN state of a tracked object to clients. The range is 0 to 180.
PAGE 836
• track interface line-protocol – configures object tracking on the line-protocol state of a Layer 2 interface. • track ip route metric threshold – configures object tracking on the threshold of an IPv4 route metric. • track ip route reachability – configures object tracking on the reachability of an IPv4 route. show running-config track Display the current configuration of tracked objects.
PAGE 837
Command Modes Command History Usage Information Example interface (OPTIONAL) Display information on all tracked interfaces (Layer 2 and IPv4 Layer 3). ip route (OPTIONAL) Display information on all tracked IPv4 routes. resolution (OPTIONAL) Display information on the configured resolution values used to scale protocol-specific route metrics. The range is 0 to 255. brief (OPTIONAL) Display a single line summary of the tracking information for a specified object, object type, or all tracked objects.
PAGE 838
Usage Information Example (Brief) The following describes the show track brief command shown in the Example below. Output Description ResID Number of the tracked object. Resource Type of tracked object. Parameter Detailed description of the tracked object. State Up or Down state of the tracked object. Last Change Time since the last change in the state of the tracked object. Dell>show track brief ResId Resource Parameter State LastChange 1 IP route reachability 10.16.0.
PAGE 839
• If the scaled metric for a route is greater than or equal to the DOWN threshold or the route is not entered in the routing table, the state of a route is DOWN. Configure the UP and DOWN thresholds for each tracked route with the threshold metric command. The default UP threshold is 254; the default DOWN threshold is 255. The notification of a change in the state of a tracked object is sent when a metric value crosses a configured threshold.
PAGE 840
To return to the default setting, use the no track object-id command. Parameters object-id Enter the ID number of the tracked object. The range is 1 to 500. interface Enter one of the following values: Defaults none Command Modes CONFIGURATION Command History Usage Information • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
PAGE 841
Usage Information Use this command to create an object that tracks the UP and/or DOWN threshold of an IPv4 route metric. In order for a route’s metric to be tracked, the route must appear as an entry in the routing table. A tracked IPv4 route is considered to match an entry in the routing table only if the exact IPv4 address and prefix length match a table entry. For example, when configured as a tracked route, 10.0.0.0/24 does not match the routing table entry 10.0.0.0/8.
PAGE 842
Usage Information Use this command to create an object that tracks the reachability of an IPv4 route. In order for a route’s reachability to be tracked, the route must appear as an entry in the routing table. A tracked IPv4 route is considered to match an entry in the routing table only if the exact IPv4 address and prefix length match a table entry. For example, when configured as a tracked route, 10.0.0.0/24 does not match the routing table entry 10.0.0.0/8.
PAGE 843
• For ISIS, you can set the resolution in the range 1 to 1000, where the default is 10. • For OSPF, you can set the resolution in the range 1 to 1592, where the default is 1. • The resolution value used to map static routes is not configurable. By default, Dell Networking OS assigns a metric of 0 to static routes. • The resolution value used to map RIP routes is not configurable. The RIP hop-count is automatically multiplied by 16 to scale it.
PAGE 844
Example Output Description First hop interface Displays the type and slot/port number of the first-hop interface of the tracked route. Tracked by Client that is tracking an object’s state; for example, VRRP.
PAGE 845
Defaults none Command Modes CONFIGURATION Command History Usage Information Related Commands • For a Loopback interface, enter the keyword loopback then a number from 0 to 16383. • For a port channel interface, enter the keywords port-channel then a number. • For a tunnel interface, enter the keyword tunnel. • For a VLAN interface, enter the keyword vlan then a number from 1 to 4094. Version Description 9.7(0.0) Introduced on the MXL.
PAGE 846
entry has the exact IPv6 address and prefix length, the status of the tracked route is considered to be DOWN. When you configure the threshold of an IPv6 route metric as a tracked object, the UP/DOWN state of the tracked route is also determined by the current metric for the route in the routing table. To provide a common tracking interface for different clients, route metrics are scaled in the range 0 to 255, where 0 is connected and 255 is inaccessible.
PAGE 847
When you configure IPv6 route reachability as a tracked object, the UP/DOWN state of the tracked route is also determined by the entry of the next-hop address in the ARP cache. A tracked route is considered to be reachable if there is an ARP cache entry for the route's next-hop address. If the next-hop address in the ARP cache ages out for a route tracked for its reachability, an attempt is made to regenerate the ARP cache entry to if the next-hop address appears before considering the route DOWN.
PAGE 848
Related Commands 848 Object Tracking • threshold metric – configures the metric threshold used to determine the UP and/or DOWN state of a tracked route. • track ipv6 route metric threshold– configures object tracking on the threshold of an IPv6 route metric.
PAGE 849
39 Open Shortest Path First (OSPFv2 and OSPFv3) The Switch supports open shortest path first version 2 (OSPFv2) for IPv4 and version 3 (OSPFv3) for IPv6. Up to 16 OSPF instances can be run simultaneously on the Switch. OSPF is an Interior Gateway Protocol (IGP), which means that it distributes routing information between routers in a single Autonomous System (AS). OSPF is also a link-state protocol in which all routers contain forwarding tables derived from information about their links to their neighbors.
PAGE 850
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information In the Dell Networking operating software, cost is defined as reference bandwidth. Related Commands area stub — creates a stub area. area nssa Specify an area as a not so stubby area (NSSA). Syntax area area-id nssa [default-information-originate] [no-redistribution] [nosummary] To delete an NSSA, use the no area area-id nssa command.
PAGE 851
mask Specify a mask for the destination prefix. Enter the full mask (for example, 255.255.255.0). not-advertise (OPTIONAL) Enter the keywords not-advertise to set the status to DoNotAdvertise (that is, the Type 3 summary-LSA is suppressed and the component networks remain hidden from other areas.) Defaults Not configured. Command Modes ROUTER OSPF Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 852
auto-cost Specify how the OSPF interface cost is calculated based on the reference bandwidth method. Syntax auto-cost [reference-bandwidth ref-bw] To return to the default bandwidth or to assign cost based on the interface type, use the no auto-cost [reference-bandwidth] command. Parameters ref-bw (OPTIONAL) Specify a reference bandwidth in megabits per second. The range is from 1 to 4294967. The default is 100 megabits per second. Defaults 100 megabits per second.
PAGE 853
interface name neighbor router-id Defaults none Command Modes EXEC Privilege Command History Related Commands (OPTIONAL) Enter the keyword interface then one of the following interface keywords and slot/port or number information: • For Port Channel groups, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 854
Usage Information 854 Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the debug ip ospf command shown in the Example below. Field Description 8:14 Displays the time stamp. OSPF Displays the OSPF process ID: instance ID. v: Displays the OSPF version. The system supports version 2 only.
PAGE 855
Field Example Description • E - (router cannot accept AS External LSAs) • T + (router can support TOS) • T - (router cannot support TOS) hi: Displays the amount of time configured for the HELLO interval. di: Displays the amount of time configured for the DEAD interval. dr: Displays the IP address of the designated router. bdr: Displays the IP address of the Border Area Router. Dell#debug ip ospf 1 packet OSPF process 90, packet debugging is on Dell# 08:14:24 : OSPF(100:00): Xmt.
PAGE 856
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. redistribute — redistributes routes from other routing protocols into OSPF. default-metric Change the metrics of redistributed routes to a value useful to OSPF. Use this command with the redistribute command. Syntax default-metric number To return to the default values, use the no default-metric [number] command. Parameters number Defaults Disabled.
PAGE 857
distance Define an administrative distance for particular routes to a specific IP address. Syntax distance weight [ip-address mask access-list-name] To delete the settings, use the no distance weight [ip-address mask access-list-name] command. Parameters weight Specify an administrative distance. The range is from 1 to 255. The default is 110. ip-address (OPTIONAL) Enter a router ID in the dotted decimal format. If you enter a router ID, include the mask for that router address.
PAGE 858
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To specify a distance for routes learned from other routing domains, use the redistribute command. distribute-list in Apply a filter to incoming routing updates from OSPF to the routing table. Syntax distribute-list prefix-list-name in [interface] To delete a filter, use the no distribute-list prefix-list-name in [interface] command.
PAGE 859
bgp (OPTIONAL) Enter the keyword bgp to specify that BGP routes are distributed. connected (OPTIONAL) Enter the keyword connected to specify that connected routes are distributed. isis (OPTIONAL) Enter the keyword isis to specify that IS-IS routes are distributed. rip (OPTIONAL) Enter the keyword rip to specify that RIP routes are distributed. static (OPTIONAL) Enter the keyword static to specify that only manually configured routes are distributed. Defaults Not configured.
PAGE 860
flood-2328 Enable RFC-2328 flooding behavior. Syntax flood-2328 To disable, use the no flood-2328 command. Defaults Disabled. Command Modes ROUTER OSPF Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. In OSPF, flooding is the most resource-consuming task.
PAGE 861
graceful-restart helper-reject Specify the OSPF router to not act as a helper during graceful restart. Syntax graceful-restart helper-reject ip-address To return to default value, use the no graceful-restart helper-reject command. Parameters ip-address Defaults Not configured. Command Modes ROUTER OSPF Command History Enter the OSPF router-id, in IP address format, of the restart router that will not act as a helper during graceful restart. Version Description 9.9(0.0) Introduced on the FN IOM.
PAGE 862
To disable graceful restart role, use the no graceful-restart role command. Parameters role helper-only (OPTIONAL) Enter the keywords helper-only to specify the OSPF router is a helper only during graceful restart. role restart-only (OPTIONAL) Enter the keywords restart-only to specify the OSPF router is a restart only during graceful-restart. Defaults By default, OSPF routers are both helper and restart routers during a graceful restart.
PAGE 863
Defaults Not configured. Command Modes INTERFACE Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. All neighboring routers in the same network must use the same password to exchange OSPF information. ip ospf cost Change the cost associated with the OSPF traffic on an interface. Syntax ip ospf cost cost To return to default value, use the no ip ospf cost command.
PAGE 864
Defaults 40 seconds Command Modes INTERFACE Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information By default, the dead interval is four times the default hello-interval. Related Commands ip ospf hello-interval — sets the time interval between the hello packets. ip ospf hello-interval Specify the time interval between the hello packets sent on the interface.
PAGE 865
Command Modes Command History Usage Information INTERFACE Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. You can configure a maximum of six digest keys on an interface. Of the available six digest keys, the switches select the MD5 key that is common. The remaining MD5 keys are unused. To change to a different key on the interface, enable the new key while the old key is still enabled.
PAGE 866
point-to-point Defaults Not configured. Command Modes ROUTER OSPF Command History Enter the keywords point-to-point to designate the interface as part of a point-to-point network. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip ospf priority To determine the designated router for the OSPF network, set the priority of the interface.
PAGE 867
This interval must be greater than the expected round-trip time for a packet to travel between two routers. Defaults 5 seconds Command Modes INTERFACE Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Set the time interval to a number large enough to prevent unnecessary retransmissions. For example, the interval must be larger for interfaces connected to virtual links.
PAGE 868
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. maximum-paths Enable the software to forward packets over multiple paths. Syntax maximum-paths number To disable packet forwarding over multiple paths, use the no maximum-paths command. Parameters number Specify the number of paths. The range for OSPFv2 is from 1 to 16. The default for OSPFv2 is 4 paths. The range for OSPFv3 is from 1 to 64.
PAGE 869
Usage Information This command is either enabled or disabled. If no OSPF process is identified as the MIB manager, the first OSPF process is used. If an OSPF process has been selected, it must be disabled prior to assigning new process ID the MIB responsibility. network area Define which interfaces run OSPF and the OSPF area for those interfaces. Syntax network ip-address mask area area-id To disable an OSPF area, use the no network ip-address mask area area-id command.
PAGE 870
To return all OSPF interfaces (current and future) to active, use the no passive-interface default command. Parameters Command Modes Command History Usage Information default Enter the keyword default to make all OSPF interfaces (current and future) passive. interface Enter the following keywords and slot/port or number information: • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
PAGE 871
• If passive-interface default is specified, then save no passive-interface interface into the running configuration. No passive-interface default • Clear everything and revert to the default behavior. • All previously marked passive interfaces are removed. • May update ABR status. redistribute Redistribute information from another routing protocol throughout the OSPF process.
PAGE 872
redistribute bgp Redistribute BGP routing information throughout the OSPF instance. Syntax redistribute bgp as number [metric metric-value] | [metric-type type-value] | [tag tag-value] To disable redistribution, use the no redistribute bgp as number [metric metric-value] | [metric-type type-value] [tag tag-value] command. Parameters as number Enter the autonomous system number. The range is from 1 to 65535. metric metric-value (OPTIONAL) Enter the keyword metric then the metric-value number.
PAGE 873
metric metric-value (OPTIONAL) Enter the keyword metric then a number. The range is from 0 (zero) to 4294967295. metric-type typevalue (OPTIONAL) Enter the keywords metric-type then one of the following: 1 = for OSPF External type 1 • 2 = for OSPF External type 2 route-map mapname (OPTIONAL) Enter the keywords route-map then the name of the route map. tag tag-value (OPTIONAL) Enter the keyword tag to set the tag for routes redistributed into OSPF. The range is from 0 to 4294967295.
PAGE 874
router-id 1.1.1.1 Dell(conf-router_ospf)#no router-id Changing router-id will bring down existing OSPF adjacency [y/n]: Dell# router ospf To configure an OSPF instance, enter ROUTER OSPF mode. Syntax router ospf process-id To clear an OSPF instance, use the no router ospf process-id command. Parameters process-id Defaults Not configured. Command Modes CONFIGURATION Command History Enter a number for the OSPF instance. The range is from 1 to 65535. Version Description 9.9(0.
PAGE 875
show ip ospf Display information on the OSPF process configured on the switch. Syntax Parameters Command Modes Command History Usage Information show ip ospf process-id process-id • EXEC • EXEC Privilege Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 876
show ip ospf asbr Display all autonomous system boundary router (ASBR) routers visible to OSPF. Syntax show ip ospf process-id asbr Parameters Defaults process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. none Command Modes Command History Usage Information • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 877
• Command History Usage Information Example EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip ospf process-id database command shown in the following example. Field Description Link ID Identifies the router ID. ADV Router Identifies the advertising router’s ID. Age Displays the link state age. Seq# Identifies the link state sequence number.
PAGE 878
show ip ospf database asbr-summary Display information about autonomous system (AS) boundary LSAs. Syntax show ip ospf process-id database asbr-summary [link-state-id] [adv-router ip-address] Parameters process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 879
Example Field Description Metric Displays the LSA metric. Dell#show ip ospf 100 database asbr-summary OSPF Router with ID (1.1.1.10) (Process ID 100) Summary Asbr (Area 0.0.0.0) LS age: 1437 Options: (No TOS-capability, No DC, E) LS type: Summary Asbr Link State ID: 103.1.50.1 Advertising Router: 1.1.1.10 LS Seq Number: 0x8000000f Checksum: 0x8221 Length: 28 Network Mask: /0 TOS: 0 Metric: 2 LS age: 473 Options: (No TOS-capability, No DC, E) LS type: Summary Asbr Link State ID: 104.1.50.
PAGE 880
Command History Usage Information Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip ospf process-id database external command shown in the following example. Field Description LS Age Displays the LSA’s age. Options Displays the optional capabilities available on router.
PAGE 881
Length: 36 Network Mask: /32 Metrics Type: 2 TOS: 0 Metrics: 25 Forward Address: 0.0.0.0 External Route Tag: 43 LS age: 1868 Options: (No TOS-capability, DC) LS type: Type-5 AS External Link State ID: 24.216.12.0 Advertising Router: 20.20.20.8 LS Seq Number: 0x80000005 Checksum: 0xa00e Length: 36 Network Mask: /24 Metrics Type: 2 TOS: 0 Metrics: 1 Forward Address: 0.0.0.0 External Route Tag: 701 Dell# Related Commands show ip ospf database — displays OSPF database information.
PAGE 882
Usage Information Example The following describes the show ip ospf process-id database network command shown in the following example. Field Description LS Age Displays the LSA’s age. Options Displays the optional capabilities available on router. The following options can be found in this item: • TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
PAGE 883
Related Commands show ip ospf database — displays OSPF database information. show ip ospf database nssa-external Display NSSA-External (type 7) LSA information. Syntax Parameters show ip ospf database nssa-external [link-state-id] [adv-router ip-address] link-state-id adv-router ipaddress Command Modes Command History Related Commands • EXEC • EXEC Privilege (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 884
Command Modes Command History Usage Information Example • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip ospf process-id database opaque-area command shown in the following example. Item Description LS Age Displays the LSA’s age. Options Displays the optional capabilities available on router.
PAGE 885
Checksum: 0x19c2 --More-Related Commands show ip ospf database — displays OSPF database information. show ip ospf database opaque-as Display the opaque-as (type 11) LSA information. Syntax Parameters show ip ospf process-id database opaque-as [link-state-id] [adv-router ipaddress] process-id Enter the OSPF process ID to show a specific process. If you do not enter the process ID, the command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 886
adv-router ipaddress Command Modes Command History Related Commands • EXEC • EXEC Privilege • the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs • the default destination (0.0.0.0) for Type 5 LSAs (OPTIONAL) Enter the keywords adv-router then the IP address of an Advertising Router to display only the LSA information about that router. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 887
Example Item Description LS Age Displays the LSA age. Options Displays the optional capabilities available on router. The following options can be found in this item: • TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service. • DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits. • E or No E is displayed on whether the originating router can accept AS External LSAs.
PAGE 888
(Link ID) Designated Router address: 192.68.130.1 (Link Data) Router Interface address: 192.68.130.1 Number of TOS metric: 0 TOS 0 Metric: 1 Link connected to: a Transit Network (Link ID) Designated Router address: 192.68.142.2 (Link Data) Router Interface address: 192.68.142.2 Number of TOS metric: 0 TOS 0 Metric: 1 Link connected to: a Transit Network (Link ID) Designated Router address: 192.68.141.2 (Link Data) Router Interface address: 192.68.141.
PAGE 889
Usage Information Example Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip ospf process-id database summary command shown in the following example. Item Description LS Age Displays the LSA age. Options Displays the optional capabilities available on router. The following options can be found in this item: • TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
PAGE 890
Network Mask: /24 TOS: 0 Metric: 1 LS age: 7 Options: (No TOS-capability, No DC, E) LS type: Summary Network Link State ID: 192.68.33.0 Advertising Router: 1.1.1.10 LS Seq Number: 0x80000016 Checksum: 0x1241 Length: 28 Network Mask: /26 TOS: 0 Metric: 1 # Related Commands show ip ospf database — displays OSPF database information. show ip ospf interface Display the OSPF interfaces configured. If OSPF is not enabled on the switch, no output is generated.
PAGE 891
Example Item Description TenGigabitEthernet. .. This line identifies the interface type slot/port and the status of the OSPF protocol on that interface. Internet Address... This line displays the IP address, network mask and area assigned to this interface. Process ID... This line displays the OSPF Process ID, Router ID, Network type and cost metric for this interface. Transmit Delay... This line displays the interface’s settings for Transmit Delay, State, and Priority.
PAGE 892
show ip ospf neighbor Display the OSPF neighbors connected to the local router. Syntax show ip ospf process-id neighbor Parameters Command Modes Command History Usage Information Example process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 893
• Command History Usage Information EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command is useful in isolating routing problems between the OSPF and the RTM. For example, if a route is missing from the RTM/FIB but is visible from the display output of this command, the problem is with downloading the route to the RTM.
PAGE 894
Defaults none Command Modes Command History Usage Information • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip ospf statistics process-id global command shown in the following example. Row Heading Description Total Displays the total number of packets the OSPF process receives/transmits.
PAGE 895
Example Error Type Description Auth-Error Simple authentication error. MD5-Error MD5 error Cksum-Err Checksum Error Version Version mismatch AreaMismatch Area mismatch Conf-Issue The received hello packet has a different hello or dead interval than the configuration. No-Buffer Buffer allocation failure. Seq-no A sequence no errors occurred during the database exchange process. Socket Socket Read/Write operation error. Q-overflow Packets dropped due to queue overflow.
PAGE 896
• Example (Statistics) Related Commands The LSR Q length and its highest mark for each neighbor Dell#show ip ospf 10 statistics Interface TenGigabitEthernet 4/45 Error packets (Receive statistics) Intf-Down 0 Non-Dr 0 Self-Org Wrong-Len 0 Invld-Nbr 0 Nbr-State Auth-Error 0 MD5-Error 0 Cksum-Err Version 0 AreaMisMatch 0 Conf-Issue SeqNo-Err 0 Unknown-Pkt 0 Bad-LsReq RtidZero 0 Neighbor ID 3.1.1.
PAGE 897
show ip ospf topology Display routers in directly connected areas. Syntax Parameters Defaults Command Modes Command History show ip ospf process-id topology process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. none • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 898
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The area range command summarizes routes for the different areas. With the not-advertise parameter configured, you can use this command to filter out some external routes. For example, if you want to redistribute static routes to OSPF, but you don't want OSPF to advertise routes with prefix 1.1.0.0, you can configure the summary-address 1.1.0.0 255.255.0.
PAGE 899
Dell(conf-router_ospf-1)#end Dell# timers throttle lsa all Configure LSA transmit intervals. Syntax timers throttle lsa all {start-interval | hold-interval | max-interval} To return to the default, use the no timers throttle lsa command. Parameters Defaults Command Modes Command History Usage Information start-interval Set the minimum interval between initial sending and resending the same LSA. The range is from 0 to 600,000 milliseconds. hold-interval Set the next interval to send the same LSA.
PAGE 900
Defaults 1000 msec Command Modes ROUTER OSPF Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. OSPFv3 Commands The fundamental mechanisms of OSPF (flooding, DR election, area support, SPF calculations, and so on) remain unchanged. However, OSPFv3 runs on a per-link basis instead of on a per-IP-subnet basis. Most changes were necessary to handle the increased address size of IPv6.
PAGE 901
Defaults Not configured. Command Modes ROUTER OSPFv3 Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Before you enable IPsec authentication on an OSPFv3 area, you must first enable OSPFv3 globally on the router. Configure the same authentication policy (same SPI and key) on each interface in an OSPFv3 link.
PAGE 902
key Text string used in encryption. The required lengths of a non-encrypted or encrypted key are: 3DES - 48 or 96 hex digits; DES - 16 or 32 hex digits; AES-CBC -32 or 64 hex digits for AES-128 and 48 or 96 hex digits for AES-192. authenticationalgorithm Specifies the authentication algorithm to use for encryption. Valid values are MD5 or SHA1. key-encryptiontype (OPTIONAL) Specifies if the authentication key is encrypted. Valid values: 0 (key is not encrypted) or 7 (key is encrypted).
PAGE 903
auto-cost Specify how the OSPF interface cost is calculated based on the reference bandwidth method. Syntax auto-cost [reference-bandwidth ref-bw] To return to the default bandwidth or to assign cost based on the interface type, use the no auto-cost [reference-bandwidth ref-bw] command. Parameters ref-bw (OPTIONAL) Specify a reference bandwidth in megabits per second. The range is from 1 to 4294967. The default is 100 megabits per second. Defaults 100 megabits per second.
PAGE 904
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug ipv6 ospf bfd Display debug information and interface types for BFD on OSPF IPv6 packets. Syntax [no] debug ipv6 ospf bfd [interface] To cancel the debug command, use the no debug ipv6 ospf command.
PAGE 905
0/2!! 00:59:27 : OSPFv3INFO: Enabling BFD for NBRIP fe80:0000:0000:0000:0201:e8ff:fe8b:7720 00:59:27 : OSPFv3INFO: Ospf3_register_bfd ospf key 27648 00:59:27 : OSPFv3INFO: OSPFV3 Enabling BFD for NBRIP fe80:0000:0000:0000:0201:e8ff:fe8b:7720 Interface Te 0/2 IfIndex 34145282 00:59:27 : OSPFv3INFO: BFD parameters interval 100 min_rx 100 mult 3 role active 00:59:27 : OSPFv3INFO: BFD parameters interval 100 min_rx 100 mult 3 role active 00:59:27 : OSPFv3INFO: Completed Enabling BFD for NBRIP fe80:0000:0000:000
PAGE 906
default-information originate Configure the system to generate a default external route into an OSPFv3 routing domain. Syntax default-information originate [always] [metric metric-value] [metric-type type-value] [route-map map-name] To return to the default values, use the no default-information originate command. Parameters always (OPTIONAL) Enter the keyword always to specify that default route information must always be advertised.
PAGE 907
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. By default, OSPFv3 graceful restart is disabled and functions only in a helper role to help restarting neighbor routers in their graceful restarts when it receives a Grace LSA. To enable OSPFv3 graceful restart, enter the ipv6 router ospf command to enter OSPFv3 configuration mode and then configure a grace period using the graceful-restart grace-period command.
PAGE 908
ipv6 ospf area Enable IPv6 OSPF on an interface. Syntax ipv6 ospf process id area area id To disable OSPFv6 routing for an interface, use the no ipv6 ospf process-id area area-id command. Parameters process-id Enter the process identification number. area area-id Specify the OSPF area. The range is from 0 to 65535. Defaults none Command Modes INTERFACE Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 909
For SHA-1 authentication, the key must be 40 hex digits (non-encrypted) or 80 hex digits (encrypted). Defaults Not configured. Command Modes INTERFACE Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 910
Command Modes Command History Usage Information INTERFACE Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command provides the flexibility to fine-tune the timer values based on individual interface needs when you configure the ipv6 ospf bfd command in CONFIGURATION mode. Any timer values specified with this command overrides timers set using the bfd all-neighbors command.
PAGE 911
ipv6 ospf dead-interval Set the time interval since the last hello-packet was received from a router. After the time interval elapses, the neighboring routers declare the router down. Syntax Parameters ipv6 ospf dead-interval seconds seconds Defaults 40 seconds (Ethernet). Command Modes INTERFACE Command History Usage Information Enter the time interval in seconds. The range is from 1 to 65535 seconds. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 912
key Text string used in authentication. The required lengths of a non-encrypted or encrypted key are: 3DES - 48 or 96 hex digits; DES - 16 or 32 hex digits; AES-CBC -32 or 64 hex digits for AES-128 and 48 or 96 hex digits for AES-192. authenticationalgorithm Specifies the authentication algorithm to use for encryption. Valid values are MD5 or SHA1. key-encryptiontype (OPTIONAL) Specifies if the authentication key is encrypted. Valid values: 0 (key is not encrypted) or 7 (key is encrypted).
PAGE 913
Command History Usage Command Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. By default, OSPFv3 graceful restart is disabled and functions only in a helper role to help restarting neighbor routers in their graceful restarts when it receives a Grace LSA. When configured in a helper-reject role, an OSPFv3 router ignores the Grace LSAs that it receives from a restarting OSPFv3 neighbor.
PAGE 914
Defaults 1 Command Modes INTERFACE Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Setting a priority of 0 makes the router ineligible for election as a Designated Router or Backup Designated Router. Use this command for interfaces connected to multi-access networks, not point-to-point networks. ipv6 router ospf Enable OSPF for IPv6 router configuration.
PAGE 915
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Added support for OSPFv3. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. passive-interface Disable (suppress) sending routing updates on an interface. Syntax passive—interface {default | interface} To enable sending routing updates on an interface, use the no passive-interface interface command. To return all OSPF interfaces (current and future) to active, use the no passive-interface default command.
PAGE 916
OSPFv3 for IPv6 routing information is not sent or received through the specified router interface. The specified interface address appears as a stub network in the OSPFv3 for IPv6 domain. redistribute Redistribute information from another routing protocol into OSPFv3 throughout the OSPF process.
PAGE 917
Command Modes ROUTER OSPF for OSPFv2 ROUTER OSPFv3 for OSPFv3 Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Added support for OSPFv3. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To redistribute the default route (x:x:x:x::x), use the default-information originate command. Related Commands default-information originate — generates a default route into the OSPF routing domain. router-id Designate a fixed router ID.
PAGE 918
Changing router-id will bring down existing OSPF adjacency [y/n]: Dell# show crypto ipsec policy Display the configuration of IPsec authentication and encryption policies. Syntax show crypto ipsec policy [name name] Parameters name name Defaults none Command Modes EXEC (OPTIONAL) Displays configuration details about a specified policy. EXEC Privilege Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 919
Command Modes EXEC EXEC Privilege Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The show crypto ipsec sa ipv6 command output displays security associations set up for OSPFv3 links in IPsec authentication and encryption policies on the router. show ipv6 ospf database Display information in the OSPFv3 database, including link-state advertisements (LSAs).
PAGE 920
Parameters interface Defaults none Command Modes EXEC Command History Usage Information (OPTIONAL) Enter one of the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet and the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE and the slot/port information. • For a Port Channel interface, enter the keywords port-channel and a number. The range is from 1 to 128.
PAGE 921
Defaults none Command Modes EXEC • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a Port Channel interface, enter the keywords port-channel then a number. The range is 1 to 128. • For a VLAN, enter the keyword vlan then the VLAN ID. The range is 1 to 4094. EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 922
Example Dell# Dell#conf Dell(conf)#ipv6 router ospf 1 Dell(conf-ipv6-router_ospf)#timer spf 2 5 Dell(conf-ipv6-router_ospf)# Dell(conf-ipv6-router_ospf)#show config ! ipv6 router ospf 1 timers spf 2 5 Dell(conf-ipv6-router_ospf)# Dell(conf-ipv6-router_ospf)#end Dell# 922 Open Shortest Path First (OSPFv2 and OSPFv3)
PAGE 923
40 Policy-based Routing (PBR) Policy-based routing (PBR) allows you to apply routing policies to specific interfaces. To enable PBR, create a redirect list and apply it to the interface. After the redirect list is applied to the interface, all traffic passing through the interface is subject to the rules defined in the redirect list. PBR is supported by the Dell Networking operating software (OS).
PAGE 924
Defaults none Command Modes INTERFACE (conf-if-vl-) Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 8.4.2.1 Introduced on the C-Series and S-Series. 8.4.2.0 Introduced on the E-Series TeraScale. 7.4.2.0 Added support for LAG and VLAN interfaces. 7.7.1.0 Introduced on the E-Series ExaScale. You can apply any number of redirect-groups to an interface.
PAGE 925
Version Description 6.5.3.0 Introduced on the E-Series ExaScale. permit Configure a permit rule. A permit rule excludes the matching packets from PBR classification and routes them using conventional routing. Syntax permit {ip-protocol-number | protocol-type} {source mask | any | host ipaddress} {destination mask | any | host ip-address} [bit] [operators] To remove the rule, use one of the following: Parameters • If you know the filter sequence number, use the no seq sequence-number syntax command.
PAGE 926
Defaults none Command Modes REDIRECT-LIST Command History • gt = greater than • lt= less than • range = inclusive range of ports (you must specify two ports for the portcommand parameter.) Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 8.4.2.1 Introduced on the C-Series and S-Series. 8.4.2.0 Introduced on the E-Series TeraScale. 7.5.1.0 Introduced on the E-Series ExaScale.
PAGE 927
• bit (OPTIONAL) For the TCP protocol type only, enter one or a combination of the following TCP flags: • ack = acknowledgement • fin = finish (no more data from the user) • psh = push function • rst = reset the connection • syn = synchronize sequence number • urg = urgent field source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x). any Enter the keyword any to specify that all traffic is subject to the filter.
PAGE 928
[operator]{source-port source-port| source-port-range start-port - endport} {destination-port destination-port| destination-port-range start-port - end-port} To delete a filter, use the no seq sequence-number command. Parameters sequence-number Enter a number from 1 to 65535. permit Enter the keyword permit assign the sequence to the permit list. redirect Enter the keyword redirect to assign the sequence to the redirect list. ip-address Enter the IP address of the forwarding router.
PAGE 929
• source port Enter the keywords source-port then the port number to be matched in the ACL rule in the ICAP rule destination-port Enter the keywords destination-port then the port number to be matched in the ACL rule in the ICAP rule. source-port-range Enter the keywords Source-port-range then the range of the start port to end port to be matched in the ACL rule in the ICAP rule.
PAGE 930
Usage Information The show cam pbr command displays the PBR CAM content. Example Dell#show cam pbr stack-unit 0 po 0 TCP Flag:Bit 5 - URG, Bit 4 - ACK, Bit 3 - PSH, Bit 2 - RST, Bit 1 - SYN, Bit 0 - FIN Cam Port VlanID Proto Tcp Src Dst SrcIp DstIp Next-hop Egress Index Flag Port Port MAC Port ----------------------------------------------00000 5 N/A IP 0x0 0 0 22.22.2.22/32 33.33.3.0/24 00:01:e8:8a:fd:76 0/0 00001 5 N/A 145 0x0 0 0 0.0.0.0/0 44.4.4.
PAGE 931
Track 5 [up], Next-hop reachable (via Po 5) seq 30 redirect 155.1.1.2 track 6 icmp host 8.8.8.8 any, Track 5 [up], Next-hop reachable (via Po 5) seq 35 redirect 42.1.1.2 icmp host 8.8.8.8 any, Next-hop reachable (via Vl 20) seq 40 redirect 43.1.1.2 tcp 155.55.2.0/24 222.22.2.0/24, Next-hop reachable (via Vl 30) seq 45 redirect 31.1.1.2 track 200 ip 12.0.0.0 255.0.0.197 13.0.0.0 255.0.0.
PAGE 932
41 PIM-Sparse Mode (PIM-SM) The protocol-independent multicast (PIM) commands are supported by the Dell Networking Operating System (OS). This chapter contains the following sections: • IPv4 PIM-Sparse Mode Commands • IPv6 PIM-Sparse Mode Commands IPv4 PIM-Sparse Mode Commands The following describes the IPv4 PIM-sparse mode (PIM-SM) commands. clear ip pim rp-mapping The bootstrap router (BSR) feature uses this command to remove all or particular rendezvous point (RP) advertisement.
PAGE 933
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you use this command on a local VLT node, all multicast routes from the local PIM TIB, the entire multicast route table, and all the entries in the data plane are deleted. The local VLT node sends a request to the peer VLT node to download multicast routes learned by the peer.
PAGE 934
Command Modes Command History EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip pim bsr-border Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per interface. Syntax ip pim bsr-border To return to the default value, use the no ip pim bsr-border command. Defaults Disabled. Command Modes INTERFACE Command History Usage Information Version Description 9.9(0.
PAGE 935
priority Defaults Not configured. Command Modes CONFIGURATION Command History (OPTIONAL) Enter the priority used in Bootstrap election process. The range is from zero (0) to 255. The default is zero (0). Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip pim dr-priority Change the designated router (DR) priority for the interface.
PAGE 936
out Defaults none Command Modes INTERFACE Command History Enter this keyword to apply the access list to outbound traffic. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Example Dell(conf)# ip access-list extended iptv-channels Dell(config-ext-nacl)# permit ip 10.1.2.3/24 225.1.1.0/24 Dell(config-ext-nacl)# permit ip any 232.1.1.0/24 Dell(config-ext-nacl)# permit ip 100.1.1.
PAGE 937
ip pim neighbor-filter To prevent a router from participating in protocol independent multicast (PIM), configure this feature. Syntax ip pim neighbor-filter {access-list} To remove the restriction, use the no ip pim neighbor-filter {access-list} command. Parameters access-list Defaults none Command Modes CONFIGURATION Command History Usage Information Enter the name of a standard access list. Maximum 16 characters. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 938
Parameters access-list Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Enter the name of an extended access list. Maximum 16 characters. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The access name is an extended IP access list that denies PIM register packets to RP at the source DR based on the multicast and group addresses. Do not enter this command before creating the access-list.
PAGE 939
ip pim rp-candidate To send out a Candidate-RP-Advertisement message to the bootstrap (BS) router or define group prefixes that are defined with the RP address to PIM BSR, configure a PIM router. Syntax ip pim rp-candidate {interface [priority] To return to the default value, use the no ip pim rp-candidate {interface [priority] command. Parameters interface priority Defaults Not configured.
PAGE 940
Usage Information The interface must be enabled (the no shutdown command) and not have the switchport command configured. Multicast must also be enabled globally (using the ip multicast-lag-hashing command). PIM is supported on the port-channel interface. ip pim sparse-mode sg-expiry-timer Enable expiry timers globally for all sources, or for a specific set of (S,G) pairs an access list defines.
PAGE 941
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command is applicable to last hop routers on the shared tree towards the rendezvous point (RP). no ip pim snooping dr-flood Disable the flooding of multicast packets to the PIM designated router. Syntax no ip pim snooping dr-flood To re-enable the flooding of multicast packets to the PIM designated router, use the ip pim snooping dr-flood command. Defaults Enabled.
PAGE 942
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. E600-7-rpm0#show ip pim bsr-router PIMv2 Bootstrap information This system is the Bootstrap Router (v2) BSR address: 7.7.7.7 (?) Uptime: 16:59:06, BSR Priority: 0, Hash mask length: 30 Next bootstrap message in 00:00:08 This system is a candidate BSR Candidate BSR address: 7.7.7.
PAGE 943
Example E600-7-RPM0#show ip pim interface Address Interface Ver/ Nbr Query DR DR Mode Count Intvl Prio 172.21.200.254 te 0/5 v2/S 0 30 1 172.21.200.254 172.60.1.2 te 0/1 v2/S 0 30 1 172.60.1.2 192.3.1.1 te 1/8 v2/S 1 30 1 192.3.1.1 192.4.1.1 te 1/8 v2/S 0 30 1 192.4.1.1 172.21.110.1 te 1/6 v2/S 0 30 1 172.21.110.1 172.21.203.1 te 1/7 v2/S 0 30 1 172.21.203.1 show ip pim neighbor View PIM neighbors.
PAGE 944
show ip pim rp View all multicast groups-to-RP mappings. Syntax show ip pim rp [mapping | group-address] Parameters Command Modes Command History mapping (OPTIONAL) Enter the keyword mapping to display the multicast groups-to-RP mapping and information on how RP is learnt. group-address (OPTIONAL) Enter the multicast group address mask in dotted decimal format to view RP for a specific group. • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 945
Parameters Command Modes Command History Usage Information Example (#2) vlan vlan-id • EXEC • EXEC Privilege (OPTIONAL) Enter a VLAN ID to display information about a specified VLAN configured for PIM-SM snooping. The valid VLAN IDs range is from 1 to 4094. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim snooping interface commands shown in the following example.
PAGE 946
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim snooping neighbor commands shown in the following example. Field Description Neighbor address Displays the IP address of the neighbor learned through PIM-SM snooping. Interface Displays the VLAN ID number and slot/port on which the PIM-SM-enabled neighbor was discovered.
PAGE 947
Command Modes Command History Usage Information Example • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim snooping tib commands shown in the following example. Field Description (S, G) Displays the entry in the PIM multicast snooping database. uptime Displays the amount of time the entry has been in the PIM multicast route table.
PAGE 948
Dell#show ip pim snooping tib vlan 2 225.1.2.1 165.87.1.7 PIM Multicast Snooping Table Flags: J/P - (*,G) Join/Prune, j/p - (S,G) Join/Prune SGR-P - (S,G,R) Prune Timers: Uptime/Expires * : Inherited port (165.87.1.7, 225.1.2.1), uptime 00:00:08, expires 00:02:52, flags: j Incoming interface: Vlan 2, RPF neighbor 0.0.0.0 Outgoing interface list: TenGigabitEthernet 4/7 Upstream Port -/TenGigabitEthernet 4/6 DR Port -/TenGigabitEthernet 4/8 RPF 165.87.32.
PAGE 949
0/0 MSDP updates sent/received 0/0 Null Register messages sent/received 0/0 Register-stop messages sent/received Data path event summary: 0 no-cache messages received 0 last-hop switchover messages received 0/0 pim-assert messages sent/received 0/0 register messages sent/received Memory usage: TIB Nexthop cache Interface table Neighbor table RP Mapping : : : : : 3768 bytes 0 bytes 992 bytes 528 bytes 0 bytes show ip pim tib View the PIM tree information base (TIB).
PAGE 950
Field Example Description • F = Dell Networking OS is registering this entry for a multicast source • T = packets were received via Shortest Tree Path • J = first packet from the last hop router is received and the entry is ready to switch to SPT • K = acknowledge pending state Incoming interface Displays the reverse path forwarding (RPF) interface towards the RP/ source. RPF neighbor Displays the next hop from this interface towards the RP/source.
PAGE 951
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show running-config pim ! ip pim snooping enable Related Commands ip pim sparse-mode — enables PIM-SM snooping. IPv6 PIM-Sparse Mode Commands The following describes the IPv6 PIM-sparse mode (PIM-SM) commands. ipv6 pim bsr-border Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per interface.
PAGE 952
For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. hash-mask-length (OPTIONAL) Enter the hash mask length for RP selection. The range is from 0 to 128. The default is 126. priority (OPTIONAL) Enter the priority value for Bootstrap election process. The range is from 0 to 255. The default is 0. Defaults Refer to Parameters.
PAGE 953
Parameters access-list Enter the name of an extended access list. in Enter the keyword in to apply the access list to inbound traffic. out Enter the keyword out to apply the access list to outbound traffic. Defaults none Command Modes INTERFACE Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 954
Parameters access-list Defaults none Command Modes CONFIGURATION Command History Usage Information Enter the name of a standard access list. Maximum 16 characters. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Do not enter this command before creating the access-list. ipv6 pim register-filter Configure the source DR so that it does not send register packets to the RP for the specified sources and groups.
PAGE 955
group-address group-address mask Enter the keywords group-address then the group address in the x:x:x:x::x format and then the mask in /nn format to assign that group address to the RP. override Enter the keyword override to override the BSR updates with static RP. The override takes effect immediately during enable/disable. NOTE: The :: notation specifies successive hexadecimal fields of zero. NOTE: This option is applicable to multicast group range.
PAGE 956
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 pim sparse-mode Enable IPv6 PIM sparse mode on the interface. Syntax ipv6 pim sparse-mode To disable IPv6 PIM sparse mode, use the no ipv6 pim sparse-mode command. Defaults Disabled. Command Modes INTERFACE Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 957
show ipv6 pim bsr-router View information on the Bootstrap router (v2). Syntax Command Modes Command History Example show ipv6 pim bsr-router • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 958
show ipv6 pim neighbor Displays IPv6 PIM neighbor information. Syntax show ipv6 pim neighbor [detail] Parameters Command Modes Command History Example detail • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword detail to displayed PIM neighbor detailed information. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 959
ff0e::226:1:2:2 14::1 Dell Example (Mapping) Dellshow ipv6 pim rp mapping PIM Group-to-RP Mappings Group(s): ff00::/8 RP: 14::1, v2 Info source: 14::1, via bootstrap, priority 192 Uptime: 00:03:37, expires: 00:01:53 Group(s): ff00::/8, Static RP: 14::2, v2 Dell show ipv6 pim tib View the IPv6 PIM multicast-routing database (tree information base — tib).
PAGE 960
(25::2, ff0e::225:1:2:2), uptime 00:09:54, expires 00:00:00,flags: CJ RPF neighbor: TenGigabitEthernet 0/3, fe80::201:e8ff:fe00:6265 Outgoing interface list: TenGigabitEthernet 1/1 (25::1, ff0e::226:1:2:1), uptime 00:09:54, expires 00:00:00,flags: CJ RPF neighbor: TenGigabitEthernet 0/3, fe80::201:e8ff:fe00:6265 Outgoing interface list: TenGigabitEthernet 1/1 Dell# 960 PIM-Sparse Mode (PIM-SM)
PAGE 961
42 Port Monitoring The port monitoring feature allows you to monitor network traffic by forwarding a copy of each incoming or outgoing packet from one port to another port. Important Points to Remember • Port monitoring is supported on physical ports and logical interfaces, such as Port Channels and virtual local area networks (VLANs). • The monitoring (destination, “MG”) and monitored (source, “MD”) ports must be on the same switch.
PAGE 962
Related Commands monitor session — enables a monitoring session. flow-based enable Enable flow-based monitoring. Syntax flow-based enable To disable flow-based monitoring, use the no flow-based enable command. Defaults Disabled, that is flow-based monitoring is not applied. Command Modes MONITOR SESSION (conf-mon-sess-session-ID) Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for the RPM/ERPM. 9.3(0.
PAGE 963
• drop Defaults none Command Modes CONFIGURATION Command History If no option is specified, by default SPAN will be created. Monitors only the dropped packets in the Ingress. Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Added the drop parameter. 9.4(0.0) Added support for rpm / erpm. 8.3.16.1 Introduced on the M I/O Aggregator.
PAGE 964
show monitor session — displays the monitor session. show config Display the current monitor session configuration. Syntax show config Defaults none Command Modes MONITOR SESSION (conf-mon-sess-session-ID) Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the M I/O Aggregator.
PAGE 965
Related Commands monitor session — creates a session for monitoring. show running-config monitor session Display the running configuration of all monitor sessions or a specific session. Syntax show running-config monitor session {session-ID} To display the running configuration for all monitor sessions, use the show running-config monitor session command. Parameters Defaults Command Modes Command History session-ID (OPTIONAL) Enter a session identification number. The range from 0 to 65535.
PAGE 966
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a VLAN interface enter the keyword VLAN then by a number range from 1 to 4094. • For a port channel interface, enter the keyword LAG then port channel and the port-channel id . range Enter the keyword range to specify a list of interfaces.
PAGE 967
Example Dell# monitor session 0 source Port-channel 10 destination TenGigabitEthernet 0/8 direction tx Port Monitoring 967
PAGE 968
43 Private VLAN (PVLAN) Private VLANs extend the Dell Networking OS security suite by providing Layer 2 isolation between ports within the same private VLAN. A private VLAN partitions a traditional VLAN into subdomains identified by a primary and secondary VLAN pair. The Dell Networking OS private VLAN implementation is based on RFC 3069. For more information, refer to the following commands. The command output is augmented in the Dell Networking OS version 7.8.1.
PAGE 969
– A trunk port in Tagged mode carries primary or secondary VLAN traffic. The tag on the packet helps identify the VLAN to which the packet belongs. – A trunk port can also belong to a regular VLAN (non-private VLAN). ip local-proxy-arp Enable/disable Layer 3 communication between secondary VLANs in a private VLAN. Syntax [no] ip local-proxy-arp To disable Layer 3 communication between secondary VLANs in a private VLAN, use the no ip localproxy-arp command in INTERFACE VLAN mode for the primary VLAN.
PAGE 970
Parameters vlan-list Defaults none Command Modes INTERFACE VLAN Command History Usage Information Related Commands Enter the list of secondary VLANs to associate with the selected primary VLAN. The list can be in comma-delimited or hyphenated-range format, following the convention for the range input. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 971
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The VLAN: • can be in only one mode, either community, isolated, or primary. • mode ode to community or isolated even before associating it to a primary VLAN. This secondary VLAN continues to work normally as a normal VLAN even though it is not associated to a primary VLAN. (A syslog message indicates this.) • must not have a port in it when VLAN mode is being set.
PAGE 972
The following describes the show interfaces private-vlan command shown in the following examples. Example (All) Field Description Interface Displays the type of interface and associated slot and port number. Vlan Displays the VLAN ID of the designated interface. PVLAN-Type Displays the type of VLAN in which the designated interface resides. Interface Type Displays the PVLAN port type of the designated interface. Status States whether the interface is operationally up or down.
PAGE 973
interface interface Defaults Command Modes Command History Usage Information (OPTIONAL) Enter the keyword interface and an interface ID to display the PVLAN configuration of the designated interface. none • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Examples of all types of command output are shown below. The first type of output is the result of not entering an optional keyword.
PAGE 974
10 20 101 primary Yes community Yes primary Yes 201 202 community No community Yes Gi Gi Po Gi 2/1,3 2/7-10 10, 12-13 3/1 Gi 3/11-12 Example (Specific) Dell# show vlan private-vlan interface Gi 2/1 Primary Secondary Type Active Ports ------- --------- --------- -------------------10 primary Yes Gi 2/1 Usage Information If the VLAN ID is that of a primary VLAN, the entire private VLAN output is displayed, as shown below.
PAGE 975
Usage Information The output of this command, shown below, displays the community and isolated VLAN IDs that are associated with each primary VLAN. Example Dell# show vlan private-vlan mapping Private Vlan: Primary : 100 Isolated : 102 Community : 101 Unknown : 200 Related Commands private-vlan mode — sets the mode of the selected VLAN to community, isolated, or primary. show vlan private-vlan — displays type and status of PVLAN interfaces.
PAGE 976
Dell(conf-if-te-2/2)#switchport mode private-vlan host Dell(conf)#interface GigabitEthernet 2/3 Dell(conf-if-te-2/3)#switchport mode private-vlan trunk Dell(conf)#interface port-channel 10 Dell(conf-if-te-2/3)#switchport mode private-vlan promiscuous Related Commands private-vlan mode — sets the mode of the selected VLAN to community, isolated, or primary. private-vlan mapping secondary-vlan — sets the mode of the selected VLAN to primary and then associates the secondary VLANs to it.
PAGE 977
44 Per-VLAN Spanning Tree Plus (PVST+) The Dell Networking Operating System (OS) implementation of per-VLAN spanning tree plus (PVST+) is based on the IEEE 802.1w standard spanning tree protocol, but it creates a separate spanning tree for each VLAN configured. NOTE: For easier command line entry, the plus (+) sign is not used at the command line. description Enter a description of the PVST+. Syntax description {description} To remove the description, use the no description {description} command.
PAGE 978
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol spanning-tree pvst — enter PVST+ mode. edge-port bpdufilter default Enable BPDU Filter globally to filter transmission of BPDU on port fast enabled interfaces. Syntax edge-port bpdufilter default To disable global bpdu filter default, use the no edge-port bpdufilter default command. Defaults Disabled Command Modes CONFIGURATION (The prompt is “config-pvst”.
PAGE 979
-------------------- -------Po 23 128.24 128 1600 FWD 0 001e.c9f1.00f3 128.24 Te 5/41 128.450 128 2000 DIS 0 001e.c9f1.00f3 128.450 Te 5/50 128.459 128 2000 FWD 0 001e.c9f1.00f3 128.459 Interface Name Role PortID Prio Edge BpduFilter ---------- ------ ----------- ---------Po 23 Desg 128.24 128 No Te 5/41 Dis 128.450 128 No Te 5/50 Desg 128.
PAGE 980
show spanning-tree pvst View the Per-VLAN spanning tree configuration. Syntax show spanning-tree pvst [vlan vlan-id] [brief] [guard] Parameters vlan vlan-id (OPTIONAL) Enter the keyword vlan then the VLAN ID. The range is 1 to 4094. brief (OPTIONAL) Enter the keyword brief to view a synopsis of the PVST+ configuration information.
PAGE 981
We are the root of Vlan 2 Configured hello time 2, max age 20, forward delay 15 Bpdu filter disabled globally Interface Designated Name PortID Prio Cost Sts Cost Bridge ID PortID ---------- -------- ---- ---------------------------Po 23 128.24 128 1600 FWD 0 32768 001e.c9f1.00f3 128.24 Te 5/41 128.450 128 2000 DIS 0 32768 001e.c9f1.00f3 128.450 Te 5/50 128.459 128 2000 FWD 0 32768 001e.c9 f1.00f3 128.
PAGE 982
Edge port:no (default) port guard :none (default) Link type: point-to-point (auto) bpdu filter:disable (default) Bpdu guard :disable (default) Bpdus sent 152, received 27562 Interface Designated Name PortID Prio Cost Sts Cost Bridge ID PortID ----------------------------------------------------------Te 0/2 128.1223 128 20000 EDS 0 32768 0001.e800.a12b 128.
PAGE 983
shutdown-onviolation (OPTIONAL) Enter the keywords shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled. bpdufilter (OPTIONAL) Enter the keyword bpdufilter to stop sending and receiving BPDUs on port fast enabled ports. err-disable Enter the keywords err-disable to enable the port to be put into the errordisable state (EDS) if an error condition occurs. vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094.
PAGE 984
Related Commands show spanning-tree pvst — views the PVST+ configuration. spanning-tree pvst err-disable Place ports in an Err-Disabled state if they receive a PVST+ BPDU when they are members an untagged VLAN. Syntax spanning-tree pvst err-disable cause invalid-pvst-bpdu Defaults Enabled; ports are placed in the Err-Disabled state if they receive a PVST+ BPDU when they are members of an untagged VLAN. Command Modes INTERFACE Command History Usage Information Version Description 9.9(0.
PAGE 985
topology changes. However, if a standards-based flush mechanism is needed, you can turn this knob command on to enable flushing MAC addresses after receiving every topology change notification. vlan bridge-priority Set the PVST+ bridge-priority for a VLAN or a set of VLANs. Syntax vlan vlan-id bridge-priority value To return to the default value, use the no vlan bridge-priority command. Parameters vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094.
PAGE 986
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. vlan bridge-priority — sets the bridge-priority value. vlan hello-time — changes the time interval between BPDUs. vlan max-age — changes the time interval before PVST+ refreshes. show spanning-tree pvst — displays the PVST+ configuration. vlan hello-time Set the time interval between generation of PVST+ and BPDUs.
PAGE 987
vlan max-age To maintain configuration information before refreshing that information, set the time interval for the PVST+ bridge. Syntax vlan vlan-range max-age seconds To return to the default, use the no vlan max-age command. Parameters vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094. max-age seconds Enter the keywords max-age then the time interval, in seconds, that the system waits before refreshing configuration information.
PAGE 988
45 Quality of Service (QoS) The Dell Networking Operating System (OS) commands for quality of service (QoS) include traffic conditioning and congestion control. This chapter contains the following sections: • Global Configuration Commands • Per-Port QoS Commands • Policy-Based QoS Commands Global Configuration Commands There are only two global configuration QoS commands.
PAGE 989
service-class dot1p-mapping This command maps an 802.1p priority to an internal traffic class. Syntax Parameters Command Modes Command History service-class dot1p-mapping user-priority user-priority The user-priority value ranges from 0 to 7. CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Per-Port QoS Commands Per-port QoS (port-based QoS) allows you to define the QoS configuration on a per-physical-port basis.
PAGE 990
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The dot1p-priority command changes the priority of incoming traffic on the interface. The system places traffic marked with a priority in the correct queue and processes that traffic according to its queue.
PAGE 991
For each physical interface, you can configure three rate police commands specifying different VLANs. Related Commands rate-police — specifies traffic policing on the selected interface. rate shape Shape the traffic output on the selected interface. Syntax Parameters rate shape [kbps] rate [burst-KB] kbps Enter the keyword kbps to specify the rate limit in Kilobits per second (Kbps). Make the following value a multiple of 64. The range is from 0 to 40000000.
PAGE 992
Command Modes Command History Usage Information dot1p Queue ID 4 2 5 3 6 3 7 3 • INTERFACE • CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To honor all incoming 802.1p markings on incoming switched traffic on the interface, enter this command. By default, this facility is not enabled (that is, the 802.1p markings on incoming traffic are not honored).
PAGE 993
Usage Information Guarantee a minimum bandwidth to different queues globally using the service-class bandwidthpercentage command from CONFIGURATION mode. The command is applied in the same way as the bandwidth-percentage command in an output QoS policy. The bandwidth-percentage command in QOS-POLICY-OUT mode supersedes the service-class bandwidth-percentage command.
PAGE 994
bandwidth-percentage Assign a percentage of weight to the class/queue. Syntax bandwidth-percentage percentage To remove the bandwidth percentage, use the no bandwidth-percentage command. Parameters percentage Enter the percentage assignment of weight to the class/queue. The range is from 1 to 100% (granularity 1%). Defaults none Command Modes CONFIGURATION (conf-qos-policy-out) Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 995
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Packets arriving at the input interface are checked against the match criteria configured using this command to determine if the packet belongs to that class. This command accesses CLASS-MAP mode, where the configuration commands include thematch ip and match mac options. Related Commands ip access-list extended — configures an extended IP ACL. ip access-list standard — configures a standard IP ACL.
PAGE 996
Version Description 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you issue this command, statistical information stored regarding QoS clears and resets to 0. You can access these statistics using the show qos statistics command in EXEC mode. When the traffic pattern matches the QoS classification criteria flows, the corresponding counters increment. Related Commands show qos statistics — displays the QoS statistics.
PAGE 997
volume rekeylimit Enter the keywords volume then the amount of volume in megabytes. The range is from 1 to 4096 to megabytes. The default is 1024 megabytes Defaults The default time is 60 minutes. The default volume is 1024 megabytes. Command Modes CONFIGURATION mode Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 998
match ip vlan Uses a VLAN as the match criterion for an L3 class map. Syntax match ip vlan vlan-id To remove VLAN as the match criterion, use the no match ip vlan vlan-id command. Parameters vlan vlan-id Enter the keyword vlan and then the ID of the VLAN. The range is from 1 to 4094. Defaults none Command Modes CONF-CLASS-MAP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 999
Usage Information Version Description 9.4(0.0) Introduced on the MXL switch. To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria. Use this command to match an IP class-map against a single VRF ID . Related Commands class-map — identifies the class map. description Add a description to the selected policy map or QoS policy. Syntax description {description} To remove the description, use the no description {description} command.
PAGE 1000
ip-any Enter the keyword ip-any to support IPv4 and IPv6 traffic. dscp-list Enter the IP DSCP values that is to be the match criteria. Separate values by commas — no spaces ( 1,2,3 ) or indicate a list of values separated by a hyphen (1-3). The range is from 0 to 63. set-ip-dscp value (OPTIONAL) Enter the keywords set-ip-dscp then the IP DSCP value. The matched traffic is marked with the DSCP value. The range is from 0 to 63.
PAGE 1001
set-ip-dscp value (OPTIONAL) Enter the keywords set-ip-dscp then the IP DSCP value. The matched traffic is marked with the DSCP value. The range is from 0 to 63. Defaults none Command Modes CLASS-MAP CONFIGURATION (config-class-map) Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.0) Introduced the support for ipv6 and ip-any options on the MXL 10/40GbE Switch. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1002
match mac dot1p Configure a match criterion for a class map based on a dot1p value. Syntax match mac dot1p {dot1p-list} Parameters dot1p-list Defaults none Command Modes CLASS-MAP Command History Enter a dot1p value. The range is from 0 to 7. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To access this command, enter the class-map command.
PAGE 1003
To remove a policy aggregate configuration, use the no policy-aggregate qos-policy-name command. Parameters qos-policy-name Enter the name of the policy map in character format (32 characters maximum). Defaults none Command Modes CONFIGURATION (policy-map-input and policy-map-output) Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1004
policy-aggregate — allows an aggregate method of configuring per-port QoS using policy maps. service-policy input — applies an input policy map to the selected interface. policy-map-output Create an output policy map. Syntax policy-map-output policy-map-name To remove a policy map, use the no policy-map-output policy-map-name command. Parameters policy-map-name Defaults none Command Modes CONFIGURATION Command History Enter the name for the policy map in character format (32 characters maximum).
PAGE 1005
Command Modes Command History Usage Information CONFIGURATION Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To specify the name of the input QoS policy, use this command. After the input policy is specified, ratepolice is defined. This command enables Qos-Policy-Input Configuration mode — (conf-qos-policy-in).
PAGE 1006
rate police Police the incoming traffic rate on the selected interface. Syntax rate police [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burstKB]] Parameters kbps Enter the keyword kbps to specify the rate limit in Kilobits per second (Kbps). Make the following value a multiple of 64. The range is from 0 to 40000000. The default granularity is Megabits per second (Mbps). committed-rate Enter the bandwidth in Mbps. The range is from 0 to 10000.
PAGE 1007
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When you apply rate-shape in QoS policy both on the Queue Level and in Aggregate mode, the queuebased shaping occurs first then aggregate rate shaping. service-policy input Apply an input policy map to the selected interface.
PAGE 1008
To remove the output policy map from the interface, use the no service-policy output policymap-name command. Parameters policy-map-name Defaults none Command Modes INTERFACE Command History Enter the name for the policy map in character format (16 characters maximum). You can identify an existing policy map or name one that does not yet exist. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.
PAGE 1009
Version Description 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information There are four queues per interface on the MXL switch. This command assigns a class map or QoS policy to different queues. Related Commands service-policy output — applies an output policy map to the selected interface. set Mark outgoing traffic with a differentiated service code point (DSCP) or dot1p value.
PAGE 1010
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show qos class-map Class-map match-any CM Match ip access-group ACL Related Commands class-map — identifies the class map. show qos policy-map View the QoS policy map information.
PAGE 1011
Queue# Class-map-name Qos-policy-name 0 q0 1 CM1 q1 2 CM2 q2 3 CM3 q3 Example (Summary IPv4) Dell#sho qos policy-map summary Interface policy-map-input policy-map-output Gi 4/1 PM1 Te 4/2 PM2 PMOut Dell# show qos policy-map-input View the input QoS policy map details. Syntax Parameters Defaults Command Modes Command History Example show qos policy-map-input [policy-map-name] [class class-map-name] [qospolicy-input qos-policy-name] policy-map-name Enter the policy map name.
PAGE 1012
show qos policy-map-output View the output QoS policy map details. Syntax show qos policy-map-output [policy-map-name] [qos-policy-output qos-policyname] Parameters Defaults policy-map-name Enter the policy map name. qos-policy-output qos-policy-name Enter the keyword qos-policy-output then the QoS policy name. none Command Modes Command History Example • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1013
Dell# Rate-police 100 50 peak 100 50 Dscp 32 show qos qos-policy-output View the output QoS policy details. Syntax Parameters Defaults Command Modes Command History Example show qos qos-policy-output [qos-policy-name] qos-policy-name Enter the QoS policy name. none • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1014
Defaults • For a 40–Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. none Command Modes Command History Example • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Added the egress-queue keyword. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1015
wred_fortyg_y wred_fortyg_g 467 467 4671 4671 test cam-usage Check the Input Policy Map configuration for the CAM usage. Syntax Parameters test cam-usage service-policy input policy-map stack-unit {[number | [all]} policy-map Enter the policy map name. stack-unit number (OPTIONAL) Enter the keywords stack-unit then the stack-unit number. stack-unit all (OPTIONAL) Enter the keywords stack-unit all all to indicate all the stackunits.
PAGE 1016
Field Description Status (Allowed ports) Indicates if the input policy map configuration on an interface belonging to a linecard/port-pipe is successful — Allowed (n) — or not successful — Exception. The allowed number (n) indicates the number of ports in that port-pipe on which the Policy Map can be applied successfully. NOTE: In a Layer 2 Policy Map, IPv4/IPv6 rules are not allowed; therefore, the output contains only L2ACL CAM partition entries.
PAGE 1017
Table 2.
PAGE 1018
Version Description 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To assign drop precedence to green or yellow traffic, use this command. If there is no honoring enabled on the input, all the traffic defaults to green drop precedence. Related Commands wred-profile — creates a WRED profile and name that profile. trust — defines the dynamic classification to trust DSCP.
PAGE 1019
When you enable wred ecn, and the number of packets in the queue is above the maximum threshold, packets are dropped based on the drop probability. This behavior is the identical treatment a packet receives when WRED is enabled without ECN configured on the router. Related Commands wred-profile — creates a WRED profile and name that profile. wred-profile Create a WRED profile and name the profile. Syntax wred-profile wred-profile-name To remove an existing WRED profile, use the no wred-profile command.
PAGE 1020
Red Enter the red keyword. Traffic marked as red is dropped. dscp-list Enter a list of IP DSCP values. The dscp-list parameter specifies the full list of IP DSCP value(s) for the specified color. Each DSCP value in a list is separate values by commas – no spaces (1,2,3) or indicates a list of values separated by a hyphen (1-3). Range is 0 to 63. Defaults None Command Modes CONFIG-COLOR-MAP Command History This guide is platform-specific.
PAGE 1021
Parameters map-name Enter the name of the DSCP color map. The map name can have a maximum of 32 characters. Defaults None Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.8(0.0P5) Introduced on the S4048-ON. 9.8(0.0P2) Introduced on the S3048-ON.
PAGE 1022
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.8(0.0P5) Introduced on the S4048-ON. 9.8(0.0P2) Introduced on the S3048-ON. 9.7(0.0) Introduced on the S6000-ON. 9.5(0.1) Introduced on the Z9500. Version 9.5.0.0 Introduced on the Z9000, S6000, S4820T, S4810, and MXL.
PAGE 1023
Version Description 9.5.0.0 Introduced on the Z9000, S6000, S4820T, S4810, and MXL. Example Related Commands — Displays DSCP color maps show qos dscp-color-map show qos dscp-color-map Display the DSCP color map for one or all interfaces. Syntax Parameters show qos dscp-color-map map-name map-name Enter the name of the color map. Defaults None Command Modes EXEC Command History This guide is platform-specific.
PAGE 1024
46 Routing Information Protocol (RIP) Routing information protocol (RIP) is a distance vector routing protocol. The Dell Networking Operating System (OS) supports both RIP version 1 (RIPv1) and RIP version 2 (RIPv2). The implementation of RIP is based on IETF RFCs 2453 and RFC 1058. For more information about configuring RIP, refer to the Dell Networking OS Configuration Guide. auto-summary Restore the default behavior of automatic summarization of subnet routes into network routes.
PAGE 1025
debug ip rip Examine RIP routing information for troubleshooting. Syntax debug ip rip [interface | database | events [interface] | packet [interface] | trigger] To turn off debugging output, use the no debug ip rip command. Parameters Command Modes Command History interface (OPTIONAL) Enter the interface type and ID as one of the following: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
PAGE 1026
Command Modes Command History Usage Information ROUTER RIP Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The default route must be present in the switch routing table for the default-information originate command to take effect. default-metric Change the default metric for routes. To ensure that all redistributed routes use the same metric value, use this command with the redistribute command.
PAGE 1027
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. router rip — enters ROUTER mode on the switch. distance Assign a weight (for prioritization) to all routes in the RIP routing table or to a specific route. Lower weights (“administrative distance”) are preferred. Syntax distance weight [ip-address mask [prefix-name]] To return to the default values, use the no distance weight [ip-address mask] command.
PAGE 1028
Defaults Not configured. Command Modes ROUTER RIP Command History Related Commands • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1029
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip prefix-list — enters PREFIX-LIST mode and configures a prefix list. ip poison-reverse Set the prefix of the RIP routing updates to the RIP infinity value. Syntax ip poison-reverse To disable poison reverse, use the no ip poison-reverse command. Defaults Disabled. Command Modes INTERFACE Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1030
version — sets the RIP version the switch software uses. ip rip send version To send a specific version of RIP, set the interface. The version you set on the interface overrides the version command in ROUTER RIP mode. Syntax ip rip send version [1] [2] To return to the default value, use the no ip rip send version command. Parameters 1 (OPTIONAL) Enter the number 1 for RIP version 1. The default is RIPv1. 2 (OPTIONAL) Enter the number 2 for RIP version 2.
PAGE 1031
maximum-paths Set RIP to forward packets over multiple paths. Syntax maximum-paths number To return to the default values, use the no maximum-paths commands. Parameters number Defaults 4 Command Modes ROUTER RIP Command History Usage Information Enter the number of paths. The range is from 1 to 16. The default is 4 paths. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. RIP supports a maximum of 16 ECMP paths.
PAGE 1032
network Enable RIP for a specified network. To enable RIP on all networks connected to the switch, use this command. Syntax network ip-address To disable RIP for a network, use the no network ip-address command. Parameters ip-address Specify an IP network address in dotted decimal format. You cannot specify a subnet. Defaults No RIP network is configured. Command Modes ROUTER RIP Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1033
Command Modes ROUTER RIP Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When the offset metric is applied to an interface, that value takes precedence over an offset value that is not extended to an interface. Related Commands ip prefix-list — enters PREFIX-LIST mode and configure a prefix list. output-delay Set the interpacket delay of successive packets to the same neighbor.
PAGE 1034
• Defaults Not configured. Command Modes ROUTER RIP Command History For a VLAN, enter the keyword vlan then a number from 1 to 4094. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Although the passive interface does not send or receive routing updates, the network on that interface still includes in RIP updates sent using other interfaces. Related Commands neighbor — enables RIP for a specified network.
PAGE 1035
redistribute ospf Redistribute routing information from an OSPF process. Syntax redistribute ospf process-id [match external {1 | 2} | match internal | metric metric-value] [route-map map-name] To disable redistribution, use the no redistribute ospf process-id [match external {1 | 2} | match internal | metric metric-value] [route-map map-name] command. Parameters process-id Enter a number that corresponds to the OSPF process ID to redistribute. The range is from 1 to 65355.
PAGE 1036
Example Dell(conf)#router rip Dell(conf-router_rip)# Related Commands network — enables RIP. show config Display the changes you made to the RIP configuration. The default values are not shown. Syntax show config Command Modes ROUTER RIP Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-router_rip)#show config ! router rip network 172.31.0.
PAGE 1037
Example Field Description Total number of routes in RIP database Displays the number of RIP routes stored in the RIP database. 100.10.10.0/24 directly connected Lists the routes directly connected. 150.100.0.0 redistributed Lists the routes learned through redistribution. 209.9.16.0/24... Lists the routes and the sources advertising those routes. Dell#show ip rip database Total number of routes in RIP database: 1624 204.250.54.0/24 [50/1] via 192.14.1.3, 00:00:12, TenGigabitEthernet 0/1 204.250.
PAGE 1038
redistribute ospf 999 version 2 timers basic Manipulate the RIP timers for routing updates, invalid, holddown times, and flush time. Syntax timers basic update invalid holddown flush To return to the default settings, use the no timers basic command. Parameters Defaults Command Modes Command History Usage Information update Enter the number of seconds to specify the rate at which RIP routing updates are sent. The range is from zero (0) to 4294967295. The default is 30 seconds.
PAGE 1039
To return to the default version setting, use the no version command. Parameters 1 Enter the keyword 1 to specify RIP version 1. 2 Enter the keyword 2 to specify RIP version 2. Defaults The system sends RIPv1 and receives RIPv1 and RIPv2. Command Modes ROUTER RIP Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip rip receive version — sets the RIP version the interface receives.
PAGE 1040
47 Remote Monitoring (RMON) The Dell Networking Operating System (OS) remote monitoring (RMON) is based on IEEE standards, providing both 32-bit and 64bit monitoring and long-term statistics collection.
PAGE 1041
delta Enter the keyword delta to test the change between MIB variables. This is the alarmSampleType in the RMON alarm table. absolute Enter the keyword absolute to test each MIB variable directly. This is the alarmSampleType in the RMON alarm table. rising-threshold value event-number Enter the keywords rising-threshold then the value (32 bit) the risingthreshold alarm is either triggered or reset. Then enter the event-number to trigger when the rising threshold exceeds its limit.
PAGE 1042
interval seconds (OPTIONAL) Enter the keyword interval then the number of seconds in each polling cycle. The range is from 5 to 3600 seconds. The default is 1800 seconds. Defaults none Command Modes CONFIGURATION INTERFACE (config-if) Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. rmon collection statistics Enable RMON MIB statistics collection on an interface.
PAGE 1043
log (OPTIONAL) Enter the keyword log to generate an RMON log entry. The log entry is triggered and sets the eventType in the RMON MIB to log or log-and-trap. The default is No log. trap community (OPTIONAL) Enter the keyword trap then an SNMP community string to configure the eventType setting in the RMON MIB. This keyword sets either snmptrap or log-and-trap. The default is public. description string (OPTIONAL) Enter the keyword description then a string describing the event.
PAGE 1044
alarmFallingEventIndex or the alarmTable of the RMON MIB. If there is no corresponding falling-threshold event, the value is zero. owner string Defaults owner Command Modes CONFIGURATION Command History (OPTIONAL) Enter the keyword owner then the owner name to specify an owner for the alarm. This is the alarmOwner object in the alarmTable of the RMON MIB. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1045
Defaults none Command Modes EXEC Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example (Index) Dell#show rmon alarm 1 RMON alarm entry 1 sample Interval: 5 object: 1.3.6.1.2.1.1.3 sample type: absolute value. value: 255161 alarm type: rising or falling alarm.
PAGE 1046
brief Defaults none Command Modes EXEC Command History (OPTIONAL) Enter the keyword brief to display the RMON event table in an easy-to-read format. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example (Index) Dell#show rmon event 1 RMON event entry 1 description: 1 event type: LOG and SNMP TRAP.
PAGE 1047
brief Defaults none Command Modes EXEC Command History (OPTIONAL) Enter the keyword brief to display the RMON High-Capacity alarm table in an easy-to-read format. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example (Index) Dell#show rmon hc-alarm 1 RMON high-capacity alarm entry 2 object: 1.3.6.1.2.1.2.2.1.4.2099844 sample interval: 10 sample type: delta value.
PAGE 1048
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example (Index) Dell#show rmon history 6001 RMON history control entry 6001 interface: ifIndex.
PAGE 1049
Example (Brief) Dell#show rmon log br eventIndex description -----------------------------2 2 4 4 Dell# show rmon statistics Display the contents of RMON Ethernet statistics table. Syntax Parameters show rmon statistics [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON Ethernet statistics table in an easy-to-read format.
PAGE 1050
HC 128-255 bytes packets: 0 HC 256-511 bytes packets overflow: 0 HC 256-511 bytes packets: 0 HC 512-1023 bytes packets overflow: 0 HC 512-1023 bytes packets: 0 HC 1024-1518 bytes packets overflow: 0 HC 1024-1518 bytes packets: 0 Dell# Example (Brief) 1050 Dell#show rmon statistics br index ifIndex interface ---------------------------------------6001 100974631 GigabitEthernet 2/0 6002 100974631 GigabitEthernet 2/0 6003 101236775 GigabitEthernet 2/1 6004 101236775 GigabitEthernet 2/1 9001 134529054 Gigabit
PAGE 1051
48 Rapid Spanning Tree Protocol (RSTP) The Dell Networking Operating System (OS) implementation of rapid spanning tree protocol (RSTP) is based on the IEEE 802.1w standard spanning-tree protocol. The RSTP algorithm configures connectivity throughout a bridged local area network (LAN) that is comprised of LANs interconnected by bridges. bridge-priority Set the bridge priority for RSTP. Syntax bridge-priority priority-value To return to the default value, use the no bridge-priority command.
PAGE 1052
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Optionally, enter an in or out parameter with the optional interface: events Command Modes Command History Example • For Receive, enter in. • For Transmit, enter out. (OPTIONAL) Enter the keyword events to debug RSTP events. EXEC Privilege Version Description 9.9(0.
PAGE 1053
To enable Rapid Spanning Tree Protocol, use the no disable command. Defaults RSTP is disabled. Command Modes CONFIGURATION RSTP (conf-rstp) Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol spanning-tree rstp — enters SPANNING TREE mode on the switch.
PAGE 1054
milli-second Enter the keywords milli-second to configure a hello time on the order of milliseconds. The range is from 50 to 950 milliseconds Defaults 2 seconds Command Modes CONFIGURATION RSTP (conf-rstp) Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The hello time is encoded in BPDUs in increments of 1/256ths of a second.
PAGE 1055
edge-port bpdufilter default To filter transmission of BPDU on port fast enabled interfaces, enable BPDU Filter globally. Syntax edge-port bpdufilter default To disable global bpdu filter default, use the no edge-port bpdufilter default command. Parameters priority-value Enter a number as the bridge priority value in increments of 4096. The range is from 0 to 61440. The default is 32768. Defaults Disabled Command Modes CONFIGURATION (conf-rstp) Command History Version Description 9.9(0.
PAGE 1056
Command Modes Command History Example CONFIGURATION RSTP (conf-rstp) Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-rstp)#show config ! protocol spanning-tree rstp no disable bridge-priority 16384 spanning-tree rstp Configure an RSTP interface with one of these settings: port cost, edge port with optional bridge port data unit (BPDU) guard, port priority, loop guard, or root guard.
PAGE 1057
Command Modes Command History Usage Information INTERFACE Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The BPDU guard option prevents the port from participating in an active STP topology in case a BPDU appears on a port unintentionally, or is misconfigured, or is subject to a DOS attack.
PAGE 1058
• 40-Gigabit Ethernet interface = 1400 • Port Channel interface with one 10 Gigabit Ethernet = 2000 • Port Channel interface with one 40 Gigabit Ethernet = 1400 • Port Channel with two 10 Gigabit Ethernet = 1800 • Port Channel with two 40 Gigabit Ethernet = 600 edge-port Enter the keywords edge-port to configure the interface as a rapid spanning tree edge port.
PAGE 1059
• Example If no BPDU is received from a remote device, loop guard places the port in a Loop-Inconsistent Blocking state and no traffic is forwarded on the port. Dell(conf)#interface gigabitethernet 4/0 Dell(conf-if-gi-4/0)#spanning-tree rstp edge-port Dell(conf-if-gi-4/0)#show config ! interface GigabitEthernet 4/0 no ip address switchport spanning-tree rstp edge-port no shutdown Dell# tc-flush-standard Enable the MAC address flushing after receiving every topology change notification.
PAGE 1060
49 Security This chapter contains various types of security commands offered in the Dell Networking Operating System (OS). The commands are listed in the following sections: • AAA Accounting Commands • Authorization and Privilege Commands • Authentication and Password Commands • RADIUS Commands • TACACS+ Commands • SSH Server and SCP Commands • Secure DHCP Commands For configuration details, refer to the Security chapter in the Dell Networking OS Configuration Guide.
PAGE 1061
commands {level| role role-name} Enter the keyword command then a privilege level for accounting of commands executed at that privilege level or enter the keyword role then the role name for accounting of commands executed by a user with that user role. name | default Enter one of the following: For default, the default accounting methods used.
PAGE 1062
aaa accounting suppress Prevent the generation of accounting records of users with the user name value of NULL. Syntax aaa accounting suppress null-username To permit accounting records to users with user name value of NULL, use the no aaa accounting suppress null-username command. Defaults Accounting records are recorded for all users. Command Modes CONFIGURATION Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1063
crypto key zeroize rsa Removes the generated RSA host keys and zeroize the key storage location. Syntax crypto key zeroize rsa Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.8(0.0P5) Introduced on the S4048-ON. 9.8(0.
PAGE 1064
Authorization and Privilege Commands To set command line authorization and privilege levels, use the following commands. authorization Apply an authorization method list to terminal lines. Syntax authorization {exec | commands {level | role role-name} method-list Parameters exec Enter the keyword exec to apply an EXEC level accounting method list.
PAGE 1065
name Define a name for the list of authorization methods. default Define the default list of authorization methods. local Use the authorization parameters on the system to perform authorization. tacacs+ Use the TACACS+ protocol to perform authorization. none Enter the keyword none to apply no authorization. Defaults none Command Modes CONFIGURATION Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.0) Introduced the support for roles on the MXL 10/40GbE Switch .
PAGE 1066
Related Commands 1. Locally define a system administrator user role.This will give you access to login with full permissions even if network connectivity to remote authentication servers is not available. 2. Configure login authentication on the console. This ensures that all users are properly identified through authentication no matter the access point 3. Specify an authentication method (RADIUS, TACACS+, or Local). 4. Specify authorization method (RADIUS, TACACS+ or Local). 5.
PAGE 1067
none Defaults none Command Modes CONFIGURATION Command History Enter the keyword none to apply no authorization. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. privilege level (CONFIGURATION mode) Change the access or privilege level of one or more commands. Syntax privilege mode {level level command | reset command} To delete access to a level and command, use the no privilege mode level level command command.
PAGE 1068
Usage Information To define a password for the level to which you are assigning privilege or access, use the enable password command. privilege level (LINE mode) Change the access level for users on the terminal lines. Syntax privilege level level To delete access to a terminal line, use the no privilege level level command. Parameters level level Enter the keyword level then a number for the access level. The range is from 0 to 15. Level 1 is EXEC mode and Level 15 allows access to all CLI modes.
PAGE 1069
... method2 • enable: use the password the enable password command defines in CONFIGURATION mode. • line: use the password the password command defines in LINE mode. • none: no authentication. • radius: use the RADIUS servers configured with the radius-server host command. • tacacs+: use the TACACS+ server(s) configured with the tacacs-server host command. (OPTIONAL) In the event of a “no response” from the first method, the system applies the next configured method.
PAGE 1070
Parameters method-list-name Enter a text string (up to 16 characters long) as the name of a user-configured method list that can be applied to different lines. default Enter the keyword default to specify that the method list specified is the default method for all terminal lines. method Enter one of the following methods: ... method4 • enable: use the password the enable password command defines in CONFIGURATION mode. • line: use the password the password command defines in LINE mode.
PAGE 1071
password — creates a password. radius-server host — specifies a RADIUS server host. tacacs-server host — specifies a TACACS+ server host. access-class Restrict incoming connections to a particular IP address in a defined IP access control list (ACL). Syntax access-class access-list-name To delete a setting, use the no access-class command. Parameters access-list-name Defaults Not configured. Command Modes LINE Command History Related Commands Enter the name of an established IP Standard ACL.
PAGE 1072
Use this parameter only with a password that you copied from the show running-config file of another Dell Networking router. password Enter a text string, up to 32 characters long, as the clear text password. Defaults No password is configured. level = 15. Command Modes CONFIGURATION Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1073
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Only Dell Networking Technical Support staff use this command. enable secret Change the password for the enable command. Syntax enable secret [level level] [encryption-type] password To delete a password, use the no enable secret [encryption-type] password [level level] command.
PAGE 1074
Related Commands show running-config — views the current configuration. privilege level (CONFIGURATION mode) — controls access to the command modes within the switch. login authentication To designate the terminal lines, apply an authentication method list. Syntax login authentication {method-list-name | default} To use the local user/password database for login authentication, use the no login authentication command.
PAGE 1075
password Enter a text string up to 32 characters long. The first character of the password must be a letter. You cannot use spaces in the password. Defaults No password is configured. Command Modes LINE Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The system prompts users for these passwords when the method for authentication or authorization used is "line".
PAGE 1076
characterrestriction (OPTIONAL) Enter the keywords character-restriction to indicate a character restriction for the password. upper number (OPTIONAL) Enter the keyword upper then the upper number. The range is from 0 to 31. lower number (OPTIONAL) Enter the keyword lower then the lower number. The range is from 0 to 31. numeric number (OPTIONAL) Enter the keyword numeric then the numeric number. The range is from 0 to 31.
PAGE 1077
To keep unauthorized people from viewing passwords in the switch configuration file, use the service password-encryption command. This command encrypts the clear-text passwords created for user name passwords, authentication key passwords, the privileged command password, and console and virtual terminal line access passwords. To view passwords, use the show running-config command. show privilege View your access level.
PAGE 1078
Usage Information Example Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show user command shown in the following example. Field Description (untitled) Indicates with an asterisk (*) which terminal line you are using. Line Displays the terminal lines currently in use. User Displays the user name of all users logged in. Host(s) Displays the terminal line status. Location Displays the IP address of the user.
PAGE 1079
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The software measures the period of inactivity defined in this command as the period between consecutive keystrokes. For example, if your password is “password” you can enter “p” and wait 29 seconds to enter the next letter. username Establish an authentication system based on user names.
PAGE 1080
Version Description 9.5(0.0) Introduced the support for roles on the MXL 10/40GbE Switch. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To view the defined user names, use the show running-config user command. Related Commands password — specifies a password for users on terminal lines. show running-config — views the current configuration. RADIUS Commands The following RADIUS commands are supported by Dell Networking operating system.
PAGE 1081
Defaults Not configured. Command Modes CONFIGURATION Command History • For a ten-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For VLAN interface, enter the keyword vlan then a number from 1 to 4094. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1082
retransmit retries (OPTIONAL) Enter the keyword retransmit then a number as the number of attempts. This parameter overwrites the radius-server retransmit command. The range is from zero (0) to 100. The default is 3 attempts. timeout seconds (OPTIONAL) Enter the keyword timeout then the seconds the time interval the switch waits for a reply from the RADIUS server. This parameter overwrites the radius-server timeout command. The range is from 0 to 1000. The default is 5 seconds.
PAGE 1083
radius-server key Configure a key for all RADIUS communications between the switch and the RADIUS host server. Syntax radius-server key [encryption-type] key To delete a password, use the no radius-server key command. Parameters encryption-type key Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information (OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered.
PAGE 1084
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. radius-server host — configures a RADIUS host. radius-server timeout To reply to a request, configure the amount of time the RADIUS client (the switch) waits for a RADIUS host server . Syntax radius-server timeout seconds To return to the default value, use the no radius-server timeout command.
PAGE 1085
route-map for Route-map mode router for Router mode addrole Enter the keyword addrole to add permission to the command. You cannot add or delete rights for the sysadmin role. deleterole Enter the keyword deleterole to remove access to the command. You cannot add or delete rights for the sysadmin role. role-name Enter a text string for the name of the user role up to 63 characters. These are 3 system defined roles you can modify: secadmin, netadmin, and netoperator.
PAGE 1086
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip tacacs source-interface Specify an interface’s IP address as the source IP address for TACACS+ connections. Syntax ip tacacs source-interface interface To delete a source interface, use the no ip tacacs source-interface command. Parameters interface Defaults Not configured.
PAGE 1087
timeout seconds (OPTIONAL) Enter the keyword timeout then the number of seconds the switch waits for a reply from the TACACS+ server. The range is from 0 to 1000. The default is 10 seconds. key key (OPTIONAL) Enter the keyword key then a string up to 42 characters long as the authentication key. This authentication key must match the key specified in the tacacs-server key for the TACACS+ daemon. Defaults Not configured.
PAGE 1088
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The key configured with this command must match the key configured on the TACACS+ daemon. SSH Server and SCP Commands The Dell Networking OS supports secure shell (SSH) protocol versions 1.5 and 2.0. SSH is a protocol for secure remote login over an insecure network. SSH sessions are encrypted and use authentication.
PAGE 1089
! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! Dell(conf)# Related Commands ip ssh server — enables the SSH server. show crypto — displays the SSH host public keys. debug ip ssh Enables collecting SSH debug information. Syntax debug ip ssh {client | server} To disable debugging, use the no debug ip ssh {client | server} command. Parameters client Enter the keyword client to enable collecting debug information on the client.
PAGE 1090
Usage Information To configure the switch as an SCP server, use the ip ssh server command. Related Commands ip ssh server — enables the SSH and SCP server on the switch. ip ssh authentication-retries Configure the maximum number of attempts that should be used to authenticate a user. Syntax ip ssh authentication-retries 1-10 Parameters 1-10 Defaults 3 Command Modes CONFIGURATION Command History Usage Information Enter the number of maximum retries to authenticate a user.
PAGE 1091
ip ssh hostbased-authentication Enable hostbased-authentication for the SSHv2 server. Syntax ip ssh hostbased-authentication enable To disable hostbased-authentication for SSHv2 server, use the no ip ssh hostbasedauthentication enable command. Parameters enable Defaults Disabled. Command Modes CONFIGURATION Command History Usage Information Enter the keyword enable to enable hostbased-authentication for SSHv2 server. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1092
Usage Information The server-generated key is used for SSHv1 key-exchange. ip ssh password-authentication Enable password authentication for the SSH server. Syntax ip ssh password-authentication enable To disable password-authentication, use the no ip ssh password-authentication enable command. Parameters enable Defaults Enabled Command Modes CONFIGURATION Command History Usage Information Enter the keyword enable to enable password-authentication for the SSH server. Version Description 9.
PAGE 1093
The file contains the OpenSSH-compatible public keys of the host for which host-based authentication is allowed. An example known host file format: poclab4,123.12.1.123 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAox/ QQp8xYhzOxn07yh4VGPAoUfgKoieTHO9G4sNV+ui +DWEc3cgYAcU5Lai1MU2ODrzhCwyDNp05tKBU3t ReG1o8AxLi6+S4hyEMqHzkzBFNVqHzpQc +Rs4p2urzV0F4pRKnaXdHf3Lk4D460HZRhhVrxqeNxPDpEn WIMPJi0ds= ashwani@poclab4 NOTE: For rhostfile and pub-key-file, the administrator must FTP the file to the chassis.
PAGE 1094
ip ssh rhostsfile Specify the rhost file used for host-based authorization. Syntax ip ssh rhostsfile {WORD} Parameters WORD Defaults none Command Modes CONFIGURATION Command History Enter the rhost file name for the host-based authentication. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1095
Usage Information Enabling RSA authentication allows the user to log in without being prompted for a password. In addition, the OpenSSH compatible SSHv2 RSA public key must be added to the list of authorized keys (ip ssh rsa-authentication my-authorized-keys device://filename command). Related Commands ip ssh rsa-authentication (EXEC) — adds keys for RSA authentication. ip ssh rsa-authentication (EXEC) Add keys for the RSA authentication.
PAGE 1096
To disable SSH server functions, use the no ip ssh server {ciphers cipher-list} {enable | port port-number} {kex key-exchange-algorithm command. Parameters enable Enter the keyword enable to start the SSH server. ciphers cipher-list Enter the keyword ciphers and then a space-delimited list of ciphers that the SSH server supports. The following ciphers are available. • 3des-cbc • aes128-cbc • aes192-cbc • aes256-cbc • aes128-ctr • aes192-ctr • aes256-ctr The default cipher list is used.
PAGE 1097
kex key-exchangealgorithm Enter the keyword kex and then a space-delimited list of key exchange algorithms supported by the SSH server. The following key exchange algorithms are available: • diffie-hellman-group-exchange-sha1 • diffie-hellman-group1-sha1 • diffie-hellman-group14-sha1 When FIPS is enabled, the default key-exchange-algorithm is diffie-hellmangroup14-sha1.
PAGE 1098
show accounting Display the active accounting sessions for each online user. Syntax show accounting Defaults none Command Modes EXEC Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command steps through all active sessions and then displays the accounting records for the active account functions.
PAGE 1099
Usage Information This command is useful if the remote SSH client implements Strict Host Key Checking. You can copy the host key to your list of known hosts.
PAGE 1100
Related Commands ip ssh server — configures an SSH server. show ip ssh client-pub-keys — displays the client-public keys. show ip ssh client-pub-keys Display the client public keys used in host-based authentication. Syntax show ip ssh client-pub-keys Defaults none Command Modes EXEC Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1101
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command displays the contents of the flash:/ADMIN_DIR/ssh/authorized-keys.username file.
PAGE 1102
Examples Dell#show role mode configure username Role access: sysadmin Dell#show role mode configure management route Role access: netadmin, sysadmin Dell#show role mode configure management crypto-policy Role access: secadmin, sysadmin Related Commands userrole, username, privilege show users Allows you to view information on all users logged in to the switch.
PAGE 1103
show userroles Display information on all defined user roles. Syntax show userroles Example Dell#show userroles Role Inheritance netoperator netadmin secadmin sysadmin netoperator testadmin Command Modes Command History Example netadmin Exec Config Interface Line Router IP Route-map Protocol MAC EXEC Privilege Version Description 9.8(0.0P5) Introduced on the S4048-ON. 9.8(0.0P2) Introduced on the S3048-ON. 9.7(0.0) Introduced on the S6000-ON. 9.5(0.1) Introduced on the Z9500. 9.5(0.
PAGE 1104
-p port-number (OPTIONAL) Enter the keyword -p then the port number. The range is from 1 to 65536. The default is 22. -v {1 | 2} (OPTIONAL) Enter the keyword -v then the SSH version 1 or 2. The default is the version from the protocol negotiation. Defaults As shown in the Parameters section. Command Modes EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1105
ip dhcp relay Enable Option 82. Syntax Parameters ip dhcp relay information-option [trust-downstream] trust-downstream Defaults Disabled. Command Modes CONFIGURATION Command History Configure the system to trust Option 82 when it is received from the previous-hop router. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp snooping Enable DHCP Snooping globally. Syntax [no] ip dhcp snooping Defaults Disabled.
PAGE 1106
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp snooping binding Create a static entry in the DHCP binding table. Syntax [no] ip dhcp snooping binding mac address vlan-id vlan-id ip ip-address interface type slot/port lease number Parameters Defaults Enter the keyword mac then the MAC address of the host to which the server is leasing the IP address.
PAGE 1107
ip dhcp snooping database renew Renew the binding table. Syntax ip dhcp snooping database renew Defaults none Command Modes • EXEC • EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.19.0 Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp snooping trust Configure an interface as trusted. Syntax [no] ip dhcp snooping trust Defaults Untrusted Command Modes INTERFACE Command History Version Description 9.9(0.0) Introduced on the FN IOM.
PAGE 1108
ip dhcp snooping vlan Enable DHCP Snooping on one or more VLANs. Syntax [no] ip dhcp snooping vlan name Parameters name Defaults Disabled. Command Modes CONFIGURATION Command History Usage Information Enter the name of a VLAN on which to enable DHCP Snooping. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When enabled, the system begins creating entries in the binding table for the specified VLANs.
PAGE 1109
To delete authentication for a user, use the no username name command. Parameters name Enter a text string for the name of the user up to 63 characters. access-class access-list-name Enter the keywords access-class then the name of a configured access control list (either an IP access control list or MAC access control list). nopassword Enter the keyword nopassword to specify that the user should not enter a password. password Enter the keyword password then the encryption-type or the password.
PAGE 1110
To delete a role name, use the no userrole name command. Note that the reserved role names may not be deleted. Parameters name Enter a text string for the name of the user up to 63 characters. It cannot be one of the system defined roles (sysadmin, secadmin, netadmin, netoperator). inherit existing-rolename Enter the inherit keyword then specify the system defined role to inherit permissions from (sysadmin, secadmin, netadmin, netoperator).
PAGE 1111
50 sFlow sFlow monitoring system includes an sFlow Agent and an sFlow Collector. • The sFlow Agent combines the flow samples and interface counters into sFlow datagrams and forwards them to the sFlow Collector. • The sFlow Collector analyses the sFlow Datagrams received from the different devices and produces a network-wide view of traffic flows.
PAGE 1112
Parameters sflow collector ipaddress Enter the IPv4 (A.B.C.D) of the sFlow collector device. agent-addr ipaddress Enter the IPv4 (A.B.C.D) of the sFlow agent in the router. number (OPTIONAL) Enter the user datagram protocol (UDP) port number. The range is from 0 to 65535. The default is 6343. max-datagram-size number (OPTIONAL) Enter the keyword max-datagram-size then the size number in bytes. The range is from 400 to 1500. The default is 1400. Defaults Not configured.
PAGE 1113
Related Commands sflow enable (Global) — enables sFlow on interfaces. sflow ingress-enable Enable sFlow ingress on interfaces. Syntax sflow ingress-enable To disable sFlow, use the no sflow ingress enable command. Defaults Disabled. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1114
Related Commands show sflow — displays the sFlow configuration. sflow max-header-size extended Set the maximum header size of a packet to 256 bytes. Syntax sflow max-header-size extended To reset the maximum header size of a packet, use the[no] sflow max-header-size extended command. Parameters extended Defaults 128 bytes Command Modes CONFIGURATION Enter the keyword extended to copy 256 bytes from the sample packets to sFlow datagram. INTERFACE Command History This guide is platform-specific.
PAGE 1115
8.3.16.1 Usage Information Introduced on the MXL 10/40GbE Switch IO Module. The polling interval for an interface is the maximum number of seconds between successive samples of counters sent to the collector. This command changes the global default counter polling (20 seconds) interval. You can configure an interface to use a different polling interval. sflow polling-interval (Interface) Set the sFlow polling interval at an interface (overrides the global-level setting).
PAGE 1116
global sampling rate. If the value entered is not a correct power of 2, the command generates an error message with the previous and next power of 2 value. Select one of these two packet numbers and re-enter the command. Related Commands sflow sample-rate (Interface) — changes the interface sampling rate. sflow sample-rate (Interface) Change the interface default sampling rate. Syntax sflow sample-rate value To return to the default sampling rate, use the no sflow sample-rate command.
PAGE 1117
• Command History EXEC Privilege Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The dropEvent counter (sFlow samples dropped due to sub-sampling) shown in the following example always displays a value of zero.
PAGE 1118
Example 1118 Dell#show sflow stack-unit 1 Stack-Unit 1 Samples rcvd from h/w :0 Total UDP packets exported :0 UDP packets dropped :0 Dell# sFlow
PAGE 1119
51 Service Provider Bridging Service provider bridging is composed of virtual local area network (VLAN) Stacking, Layer 2 Protocol Tunneling, and Provider Backbone Bridging as described in the Dell Networking OS Configuration Guide. This chapter includes commands for the Dell Networking operating software Layer 2 Protocol Tunneling (L2PT). L2PT enables protocols to tunnel through an 802.1q tunnel. For more information, see VLAN Stacking, Spanning Tree Protocol (STP), and GARP VLAN Registration (GVRP).
PAGE 1120
in | out | both Enter the keyword in, out, or both to debug incoming interfaces, outgoing interfaces, or both incoming and outgoing interfaces. vlan vlan-id Enter the keyword vlan then the VLAN ID. The range is from 1 to 4094. count value Enter the keyword count then the number of debug outputs. The range is from 1 to 100. Defaults Debug disabled. Command Modes EXEC Privilege Command History Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1121
Parameters stp Change the default destination MAC address used for L2PT to another value. Defaults The default destination MAC is 01:01:e8:00:00:00. Command Modes CONFIGURATION Command History Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you enable VLAN-Stacking, no protocol packets are tunneled. Related Command show protocol-tunnel — displays tunneling information for all VLANs.
PAGE 1122
Example Dell# Dell#conf Dell(conf)#protocol-tunnel rate-limit 1000 Dell(conf)# Related Commands show protocol-tunnel — displays tunneling information for all VLANs. show running-config — displays the current configuration. show protocol-tunnel Display protocol tunnel information for all or a specified VLAN-Stack VLAN.
PAGE 1123
52 Simple Network Management Protocol (SNMP) and Syslog This chapter contains commands to configure and monitor the simple network management protocol (SNMP) v1/v2/v3 and Syslog. The chapter contains the following sections: • SNMP Commands • Syslog Commands SNMP Commands The following SNMP commands are available in the Dell Networking OS.
PAGE 1124
The following is a list of the Dell Networking OS version history for this command. Version Description 9.8(0.0P5) Introduced on the S4048-ON. 9.8(0.0P2) Introduced on the S3048-ON. 9.5(0.1) Introduced on the Z9500. 9.5(0.0) Introduced on the MXL. Example Dell(conf)#clear logging auditlog Related Commands show logging auditlog — displays audit log show snmp Display the status of SNMP network elements.
PAGE 1125
show snmp engineID Display the identification of the local SNMP engine and all remote engines that are configured on the router. Syntax Command Modes Command History Example show snmp engineID • EXEC • EXEC Privilege Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show snmp engineID Local SNMP engineID: 0000178B02000001E80214A8 Remote Engine ID IP-addr Port 80001F88043132333435 172.31.1.3 5009 80001F88043938373635 172.31.1.
PAGE 1126
show snmp user Display the information configured on each SNMP user name. Syntax show snmp user Command Modes Command History Example • EXEC • EXEC Privilege Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1127
snmp-server community Configure a new community string access for SNMPv1 v2 and v3. Syntax snmp-server community community-name {ro | rw} [security-name name][accesslist-name] To remove access to a community, use the no snmp-server community community-string {ro | rw} [security-name name [access-list-name] command. Parameters community-name Enter a text string (up to 20 characters long) to act as a password for SNMP. ro Enter the keyword ro to specify read-only permission.
PAGE 1128
Dell(conf)# snmp-server community guest ro security-name guestuser Dell(conf)# Example Dell(conf)# ip access-list standard snmp-ro-acl Dell(config-std-nacl)#seq 5 permit host 10.10.10.224 Dell(config-std-nacl)#seq 10 deny any count ! Dell(conf)#snmp-server community guest ro snmp-ro-acl Dell(conf)# Related Commands ip access-list standard — names (or selects) a standard access list to filter based on IP address. show running-config — displays the current SNMP configuration and defaults.
PAGE 1129
notification-option • ets — Notification of changes to the ets traps. • fips — Notification of changes to the FIP snooping state. • lacp — Notification of changes. • pfc — Notification of changes to pfc traps. • snmp — Notification of RFC 1157 traps. • stp — Notification of a state change in the spanning tree protocol (RFC 1493). • vrrp — Notification of a state change in a VRRP group. • xstp — Notification of a state change in MSTP (802.1s), RSTP (802.1w), and PVST+.
PAGE 1130
To return to the default, use the no snmp-server engineID [local engineID] [remote ipaddress udp-port port-number engineID] command. Parameters local engineID Enter the keyword local then the engine ID number that identifies the copy of the SNMP on the local device. Format (as specified in RFC 3411): 12 octets. The remaining eight octets are the MAC address of the chassis. Enter the keyword remote then the IP address that identifies the copy of the SNMP on the remote device.
PAGE 1131
Parameters group_name 1 | 2c | 3 Enter a text string (up to 20 characters long) as the name of the group. The following groups are created for mapping to read/write community/security-names (defaults): • v1v2creadg — maps to a community/security-name with ro permissions. • 1v2cwriteg — maps to a community/security-name rw permissions. (OPTIONAL) Enter the security model version number (1, 2c, or 3): • 1 is the least secure version. • 3 is the most secure of the security modes.
PAGE 1132
show running-config — displays the SNMP running configuration. snmp-server host Configure the recipient of an SNMP trap operation. Syntax snmp-server host ip-address [traps | informs] [version 1 | 2c | 3] [auth | no auth | priv] [community-string] [udp-port port-number] [notificationtype] To remove the SNMP host, use the no snmp-server host ip-address [traps | informs] [version 1 | 2c | 3] [auth | noauth | priv] [community-string] [udp-port number] [notification-type] command.
PAGE 1133
notification-type (OPTIONAL) Enter one of the following keywords for the type of trap to send to the host: • ecfm — Notification of ECFM state changes. • entity — Notification of entity changes. • envmon — Environment monitor trap. • eoam — Notificaiton of EOAM state changes. • ets — Notification of ets trap changes. • fips — Notification of FIP snooping state changes. • lacp — Notificaiton of LACP state changes. • snmp — SNMP notification (RFC 1157).
PAGE 1134
Related Commands 2. Configure a remote user. 3. Configure a group for this user with access rights. 4. Enable traps. 5. Configure a host to receive informs. snmp-server enable traps — enables SNMP traps. snmp-server community — configures a new community SNMPv1 or SNMPv2c. snmp-server location Configure the location of the SNMP server. Syntax snmp-server location text To delete the SNMP location, use the no snmp-server location command. Parameters text Defaults Not configured.
PAGE 1135
snmp-server trap-source Configure a specific interface as the source for SNMP traffic. Syntax snmp-server trap-source interface To disable sending traps out a specific interface, use the no snmp trap-source command. Parameters interface Enter the following keywords and slot/port or number information: • For a Loopback interface, enter the keyword loopback then a number from 0 to 16383. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1136
• 1v2cwriteu — maps to a community rw permissions. remote ip-address Enter the keywords udp-port then the user datagram protocol (UDP) port number on the remote device. The range is from 0 to 65535. The default is 162. udp-port portnumber Enter the keywords udp-port then the UDP (User Datagram Protocol) port number on the remote device. The range is from 0 to 65535. The default is 162. 1 | 2c | 3 (OPTIONAL) Enter the security model version number (1, 2c, or 3): • 1 is the least secure version.
PAGE 1137
Usage Information No default values exist for authentication or privacy algorithms and no default password exists. If you forget a password, you cannot recover it; the user must be reconfigured. You can specify either a plain-text password or an encrypted cypher-text password. In either case, the password is stored in the configuration in an encrypted form and displayed as encrypted in the show running-config command.
PAGE 1138
priv-password (OPTIONAL) Enter a text string (up to 20 characters long) password that enables the host to encrypt the contents of the message it sends to the agent and to decrypt the contents of the message it receives from the agent. Minimum: eight characters long. Defaults If no authentication or privacy option is configured, then the messages are exchanged (attempted anyway) without any authentication or encryption.
PAGE 1139
Command Modes CONFIGURATION Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The oid-tree variable is a full sub-tree starting from 1.3.6 and cannot specify the name of a sub-tree or a MIB. The following Example configures a view named rview that allows access to all objects under 1.3.6.1. Example Dell#(conf) snmp-server view rview 1.3.6.1 included Related Commands show running-config — displays the SNMP running configuration.
PAGE 1140
default logging buffered Return to the default setting for messages logged to the internal buffer. Syntax default logging buffered Defaults size = 40960; level = 7 or debugging Command Modes CONFIGURATION Command History Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. default logging buffered — sets the logging buffered parameters. default logging console Return the default settings for messages logged to the console.
PAGE 1141
Usage Information Version Description 9.5(0.0) Introduced on the S4810, S4820T, S6000, Z9000, and MXL. This command is available with or without RBAC enabled. When RBAC is enabled you can restrict access to audit and security logs based on the CLI sessions’ user roles. If extended logging is disabled, you can only view system events, regardless of RBAC user role. When you enabled RBAC and extended logging: • Only the system administrator role can execute this command.
PAGE 1142
Command History Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. logging trap — limit messages logged to the Syslog servers based on severity. logging Configure an IP address or host name of a Syslog server where logging messages are sent. You can configure multiple logging servers of both IPv4 and/or IPv6. Syntax logging {ip-address | ipv6–address |hostname} {{udp {port}} | {tcp {port}} To disable logging, use the no logging command.
PAGE 1143
To disable logging stored to an internal buffer, use the no logging buffered command. Parameters level (OPTIONAL) Indicate a value from 0 to 7 or enter one of the following equivalent words: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging. The default is 7 or debugging. size (OPTIONAL) Indicate the size, in bytes, of the logging buffer. The number of messages buffered depends on the size of each message. The range is from 40960 to 524288.
PAGE 1144
default logging console — returns the logging console parameters to the default setting. show logging — displays the logging setting and system messages in the internal buffer. logging facility Configure the Syslog facility used for error messages sent to Syslog servers. Syntax logging facility [facility-type] To return to the default values, use the no logging facility command.
PAGE 1145
Command History Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. logging — enables logging to a Syslog server. logging on — enables logging. logging history Specify which messages are logged to the history table of the switch and the SNMP network management station (if configured). Syntax logging history level To return to the default values, use the no logging history command.
PAGE 1146
Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When the number of messages reach the limit you set with the logging history size command, older messages are deleted as newer ones are added to the table. Related Commands show logging — displays information logged to the history buffer. logging monitor Specify which messages are logged to Telnet applications.
PAGE 1147
Related Commands logging — enables logging to the Syslog server. logging buffered — sets the logging buffered parameters. logging console — sets the logging console parameters. logging monitor — sets the logging parameters for the terminal connections. logging source-interface Specify that the IP address of an interface is the source IP address of Syslog packets sent to the Syslog server.
PAGE 1148
To disable message synchronization, use the no logging synchronous [level level | all] [limit number-of-buffers] command. Parameters all Enter the keyword all to ensure that all levels are printed asynchronously. level level Enter the keyword level then a number as the severity level. A high number indicates a low severity level and vice versa. The range is from 0 to 7. The default is 2. all Enter the keyword all to turn off all.
PAGE 1149
Command History Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. logging — enables the logging to another device. logging on — enables logging. logging version Displays syslog messages in a RFC 3164 or RFC 5424 format. Syntax logging version {0|1} Defaults 0 Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 1150
show logging Display the logging settings and system messages logged to the internal buffer of the switch. Syntax show logging [number | history [reverse][number] | reverse [number] | summary] Parameters Command Modes Command History Example (Partial) 1150 number (OPTIONAL) Enter the number of messages displayed in the output. The range is from 1 to 65535. history (OPTIONAL) Enter the keyword history to view only information in the Syslog history table.
PAGE 1151
May 19 10:23:58: %STKUNIT0-M:CP %SEC-5-LOGOUT: Exec --More-Example (History) Dell#show logging history Syslog History Table: 1 maximum table entries, saving level warnings or higher SNMP notifications not Enabled May 22 08:53:09: %STKUNIT0-M:CP %SEC-3-AUTHENTICATION_ENABLE_SUCCESS: Enable password authentication success on vty0 ( 10.11.68.22 ) Dell# show logging driverlog stack-unit Display the driver log for the specified stack member.
PAGE 1152
Version Description 9.8(0.0P2) Introduced on the S3048-ON. 9.7(0.0) Introduced on the S6000-ON. 9.5(0.1) Introduced on the Z9500. 9.5(0.0) Introduced on the S4810, S4820T, S6000, Z9000, and MXL. Example Dell(conf)#show logging audit Related Commands clear logging auditlog — clears audit log. terminal monitor Configure the system to display messages on the monitor/terminal. Syntax terminal monitor To return to default settings, use the terminal no monitor command. defaults Disabled.
PAGE 1153
53 Stacking For more information about using the Switch stacking feature, see the Stacking MXL 10/40GbE Switches chapter in the Dell Networking OS Configuration Guide. redundancy disable-auto-reboot Prevent the switch stack management unit from rebooting if it fail. Syntax redundancy disable-auto-reboot stack-unit [0–5 | members] To return to the default, use the no redundancy disable-auto-reboot stack-unit [0–5 | members] command. Defaults Disabled (the failed switch is automatically rebooted).
PAGE 1154
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. reset stack-unit Reset any designated stack member except the management unit (master unit). Syntax reset stack-unit 0–5 hard Parameters 0–5 Enter the stack member unit identifier of the stack member to reset. hard Reset the stack unit if the unit is in a problem state. Defaults none Command Modes EXEC Command History Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1155
Dell#rebooting U-Boot 1.1.4 (June 6 2012 - 00:00:04) Related Commands • reload — reboots the system. • redundancy disable-auto-reboot— resets the designated stack member. show redundancy Display the current redundancy configuration (status of automatic reboot configuration on stack management unit). Syntax Command Modes Command History Example show redundancy • EXEC • EXEC Privilege Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1156
Related Commands redundancy disable-auto-reboot — prevents the system from auto-rebooting if it fails. show system stack-ports Display information about the stacking ports on all switches in the switch stack. Syntax show system stack-ports [status | topology] Parameters Defaults status (OPTIONAL) Enter the keyword status to display the command output without the Connection field. topology (OPTIONAL) Enter the keyword topology to limit the table to just the Interface and Connection fields.
PAGE 1157
0/33 0/37 0/41 0/45 1/33 1/37 1/49 1/53 2/33 2/37 2/49 2/53 Example (Topology) (Gb/s) 40 40 40 40 40 40 40 40 40 40 40 40 Status up up up up up up up up up up up up Status Group up up up up up up up up up up up up Dell# show system stack-ports Topology: Ring Interface Connection Trunk Group 0/33 1/37 0/37 2/33 0/41 1/49 0/45 2/53 1/33 2/37 1/37 0/33 1/49 0/41 1/53 2/49 2/33 0/37 2/37 1/33 2/49 1/53 2/53 0/45 Related Commands • redundancy disable-auto-reboot — resets the designated stack member.
PAGE 1158
stack-unit stack-group Configure a 40GbE port for stacking mode. Syntax stack-unit unit number stack-group group number Parameters Command Modes Command History Related Commands unit number <0–5> Number of the member stack unit. The valid values are from 0 to 5. group number <0– 5> Number of the stacked port on the unit. The valid values are from 0 to 5. CONFIGURATION 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. • reload — reboots the system.
PAGE 1159
stack-unit provision Preconfigure a logical stacking ID of a switch that joins the stack. This is an optional command that is executed on the management unit. Syntax Parameters Command Modes Command History Related Commands stack-unit 0–5] provision {MXL-10/40GbE} 0–5 Enter a stack member identifier, from 0 to 5, of the switch that you want to add to the stack. MXL-10/40GbE Enter the model identifier of the switch to be added as a stack member.
PAGE 1160
[confirm yes/ no]: Related Commands 1160 Stacking • reload — reboots the system. • redundancy disable-auto-reboot — resets the designated stack member. • show system — displays the current status of all stack members or a specific member.
PAGE 1161
54 Storm Control The Dell Networking Operating System (OS) storm control feature allows you to limit or suppress traffic during a traffic storm. Storm control is supported on the Dell Networking OS. Important Points to Remember • Interface commands can only be applied on physical interfaces (virtual local area networks [VLANs] and link aggregation group [LAG] interfaces are not supported). • An INTERFACE-level command only supports storm control configuration on ingress.
PAGE 1162
Interface Direction Packets/Second ---------------------------------------TenGig 3/8 Ingress 1000 Dell# show storm-control multicast Display the storm control multicast configuration. Syntax show storm-control multicast [interface] Parameters Defaults interface (OPTIONAL) Enter one of the following interfaces to display the interface specific storm control configuration: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1163
• Defaults Command Modes Command History Example For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/ port information. none • EXEC • EXEC Privilege Version Description 8.3.16.
PAGE 1164
storm-control broadcast (Interface) Configure the percentage of broadcast traffic allowed on an interface. Syntax storm-control broadcast [packets_per_second in] To disable broadcast storm control on the interface, use the no storm-control broadcast [packets_per_second in] command. Parameters packets_per_secon d Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554368.
PAGE 1165
storm-control multicast (Configuration) Configure the packets per second (pps) of multicast traffic. Syntax storm-control multicast packets_per_second in To disable storm-control for multicast traffic into the network, use the no storm-control multicast packets_per_second in command. Parameters packets_per_secon d Enter the packets per second of multicast traffic allowed into the network. The range is from 0 to 33554368.
PAGE 1166
To disable storm control for unknown-unicast traffic, use the no storm-control unknown-unicast [packets_per_second in] command. Parameters packets_per_secon d Defaults none Command Modes CONFIGURATION Command History Usage Information Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554368. Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1167
55 Spanning Tree Protocol (STP) The commands in this chapter configure and monitor the IEEE 802.1d spanning tree protocol (STP). bridge-priority Set the bridge priority of the switch in an IEEE 802.1D spanning tree. Syntax bridge-priority {priority-value | primary | secondary} To return to the default value, use the no bridge-priority command. Parameters priority-value Enter a number as the bridge priority value. The range is from 0 to 65535. The default is 32768.
PAGE 1168
Command Modes Command History EXEC Privilege Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you enable debug spanning-tree bpdu for multiple interfaces, the software only sends information on BPDUs for the last interface specified. Related Commands portfast bpdufilter default — enters SPANNING TREE mode on the switch. description Enter a description of the spanning tree.
PAGE 1169
forward-delay The amount of time the interface waits in the Listening state and the Learning state before transitioning to the Forwarding state. Syntax forward-delay seconds To return to the default setting, use the no forward-delay command. Parameters seconds Defaults 15 seconds Command Modes SPANNING TREE Command History Related Commands Enter the number of seconds that the system waits before transitioning STP to the Forwarding state. The range is from 4 to 30. The default is 15 seconds.
PAGE 1170
max-age To maintain configuration information before refreshing that information, set the time interval for the spanning tree bridge. Syntax max-age seconds To return to the default values, use the no max-age command. Parameters seconds Defaults 20 seconds Command Modes SPANNING TREE Command History Related Commands Enter a number of seconds the system waits before refreshing configuration information. The range is from 6 to 40. The default is 20 seconds. Version Description 8.3.16.
PAGE 1171
Defaults Not configured. Command Modes CONFIGURATION Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information STP is not enabled when you enter SPANNING TREE mode. To enable STP globally on the switch, use the no disable command from SPANNING TREE mode. Example Dell(conf)#protocol spanning-tree 0 Dell(config-stp)# Related Commands disable — disables spanning tree group 0. To enable spanning tree group 0, use the no disable command.
PAGE 1172
interface interface Command Modes Command History Usage Information (OPTIONAL) Enter the keyword interface and the type slot/port of the interface you want displayed. Type slot/port options are the following: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1173
Example Dell#show spann 0 Executing IEEE compatible Spanning Tree Protocol Bridge Identifier has priority 32768, Address 0001.e800.0a56 Configured hello time 2, max age 20, forward delay 15 We are the root of the spanning tree Current root has priority 32768 address 0001.e800.
PAGE 1174
Address 0001.e800.0a56 Configured hello time 2, max age 20, forward delay 15 Interface Designated Name PortID Prio Cost Sts Cost Bridge ID PortID -------------- ------ ---- ---- --- ----- -----------------Te 1/1 8.26 8 4 FWD 0 32768 0001.e800.0a56 8.26 Te 1/2 8.27 8 4 FWD 0 32768 0001.e800.0a56 8.27 Te 1/3 8.28 8 4 FWD 0 32768 0001.e800.0a56 8.28 Dell# Usage Information Example (Guard) The following describes the show spanning-tree 0 guard command shown in the example.
PAGE 1175
portfast [bpduguard [shutdown-on-viol ation] | bpdufilter] Enter the keyword portfast to enable Portfast to move the interface into Forwarding mode immediately after the root fails. Enter the optional keyword bpduguard to disable the port when it receives a BPDU. Enter the optional keywords shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
PAGE 1176
56 SupportAssist SupportAssist sends troubleshooting data securely to Dell. SupportAssist in this Dell Networking OS release does not support automated email notification at the time of hardware fault alert, automatic case creation, automatic part dispatch, or reports. SupportAssist requires Dell Networking OS 9.9(0.0) and SmartScripts 9.7 or later to be installed on the Dell Networking device. eula-consent Accept or reject the end user license agreement (EULA).
PAGE 1177
configuration information, user supplied contact information, names of data volumes, IP addresses, access control lists, diagnostics & performance information, network configuration information, host/server configuration & performance information and related data ("Collected Data") and transmits this information to Dell. By downloading SupportAssist and agreeing to be bound by these terms and the Dell end user license agreement, available at: www.dell.
PAGE 1178
Command History Usage Information Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. You are guided through a series of queries to configure SupportAssist. The generated commands are added to the running configuration, including the DNS resolve commands, if configured. This command starts the configuration wizard for the SupportAssist. At any time, you can exit by entering Ctrl-C. If necessary, you can skip some data entry.
PAGE 1179
Command History Usage Information Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. By default, each activity follows a set of default actions using a default schedule. Using this command, you can customize the set of actions and disable a certain activity. contact-company Configure the contact information for the company. Syntax contact-company name {company-name}[company-next-name] ...
PAGE 1180
Command Modes Command History Usage Information SUPPORTASSIST Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. Each contact person must be unique by their name. You can configure only one contact person. It is not possible to remove the first name or last name. The no form of the command removes the entire contact-person entry. This command is optional for SupportAssist service configuration.
PAGE 1181
Usage Information The server-name is used as a reference only and is not required to be used as part of a URL definition. There is a reserved name of default for the default server at stor.g3.ph.dell.com. You can customize the defaults for this server by entering the server default command and use the custom commands. You can configure one additional server. SupportAssist Activity Commands Dell Networking OS supports the following SupportAssist Activity mode commands.
PAGE 1182
Parameters default Enter the keyword default to revert back to the default set of actions for an activity. local-file-name Enter the name of the local action-manifest file. Allowable characters are: a to z, A to Z, 0 to 9, -, _, and space. Defaults default Command Modes SUPPORTASSIST ACTIVITY Command History Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL.
PAGE 1183
action-manifest show View the list of action-manifest for a specific activity. Syntax Parameters Command Modes Command History Related Commands action-manifest show {all} all Enter the keyword all to view the entire list of action-manifests that are available for an activity. SUPPORTASSIST ACTIVITY Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. action-manifest get — copies an action-manifest file for an activity to the system.
PAGE 1184
To remove the complete company contact information, use the no address command. Parameters Command Modes Command History Usage Information city company-city (OPTIONAL) Enter the keyword city then the city or town for the company site. To include a space, enter a space within double quotes. province | region | state name (OPTIONAL) Enter the keyword province, region or state then the name of province, region or state for the company site. To include a space, enter a space within double quotes.
PAGE 1185
territory Configure the territory and set the coverage for the company site. Syntax territory company-territory To remove the company territory information, use the no territory command. Parameters Command Modes Command History Usage Information company-territory Enter the territory name for the company. To include a space, enter a space within double quotes. SUPPORTASSIST COMPANY Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL.
PAGE 1186
phone Configure phone numbers to reach the contact person. Syntax phone primary phone [alternate phone] To remove a phone number, use either the no phone primary or no phone alternate commands. Parameters Command Modes Command History Usage Information primary phone Enter the keyword primary then the primary phone number for the person. alternate phone Enter the keyword alternate then the alternate phone number for the person. SUPPORTASSIST PERSON Version Description 9.9(0.
PAGE 1187
To remove the time zone, use the no time-zone [zone | start-time | end-time] command. Parameters Command Modes Enter the keyword zone then a time difference from GMT expressed as HH:MM. This number may be preceded by either a + or – sign. start-time HH:MM Enter the keywords start-time then a starting time expressed as HH:MM. Use the 24-hour clock format. stop-time HH:MM Enter the keywords stop-time then a stopping time expressed as HH:MM. Use the 24-hour clock format.
PAGE 1188
Defaults encryption-type for the password is 0. Command Modes SUPPORTASSIST SERVER Command History Usage Information Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. The passwords are stored encrypted in the running configuration. enable Enable communication with the SupportAssist server. Syntax enable To disable communication to a specific SupportAssist server, use the no enable command.
PAGE 1189
show eula-consent Display the EULA for the feature. Syntax Parameters Command Modes Command History Example show eula-consent {support-assist | other feature} support-assist | other feature Enter the keywords support-assist or the text corresponding to other feature. EXEC Privilege Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL.
PAGE 1190
behalf of a company or other legal entity, you are further certifying to Dell that you have appropriate authority to provide this consent on behalf of that entity. If you do not consent to the collection, transmission and/or use of the Collected Data, you may not download, install or otherwise use SupportAssist. show running-config Display the current configuration and changes from the default values.
PAGE 1191
Command History Example Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. Dell#show support-assist status SupportAssist Service: Installed EULA: Accepted Server: default Enabled: Yes URL: https://stor.g3.ph.dell.com Server: chennai Enabled: Yes URL: http://10.16.148.
PAGE 1192
57 System Time and Date The commands in this chapter configure time values on the system, either using the Dell Networking Operating System (OS), or the hardware, or using the network time protocol (NTP). With NTP, the switch can act only as a client to an NTP clock host. For more information, refer to the “Network Time Protocol” section of the Management chapter in the Dell Networking OS Configuration Guide. clock set Set the software clock in the switch.
PAGE 1193
clock summer-time date Set a date (and time zone) on which to convert the switch to daylight saving time on a one-time basis. Syntax clock summer-time time-zone date start-month start-day start-year starttime end-month end-day end-year end-time [offset] To delete a daylight saving time zone configuration, use the no clock summer-time command. Parameters time-zone Enter the three-letter name for the time zone. This name is displayed in the show clock output.
PAGE 1194
clock summer-time recurring Set the software clock to convert to daylight saving time on a specific day each year. Syntax clock summer-time time-zone recurring [start-week start-day start-month start-time end-week end-day end-month end-time [offset]] To delete a daylight saving time zone configuration, use the no clock summer-time command. Parameters time-zone Enter the three-letter name for the time zone. This name is displayed in the show clock output. You can enter up to eight characters.
PAGE 1195
8.3.16.1 Related Commands Introduced on the MXL 10/40GbE Switch IO Module. clock summer-time date — sets a date (and time zone) on which to convert the switch to daylight saving time on a one-time basis. show clock — displays the current clock settings. clock timezone Configure a timezone for the switch. Syntax clock timezone timezone-name offset To delete a timezone configuration, use the no clock timezone command. Parameters timezone-name Enter the name of the timezone. You cannot use spaces.
PAGE 1196
Command Modes Command History all Enter the keyword all to display information on all NTP transactions. authentication Enter the keyword authentication to display information on NTP authentication transactions. events Enter the keyword events to display information on NTP events. loopfilter Enter the keyword loopfilter to display information on NTP local clock frequency. packets Enter the keyword packets to display information on NTP packets.
PAGE 1197
This number must be the same as the number parameter configured in the ntp trusted-key command. md5 Specify that the authentication key is encrypted using MD5 encryption algorithm. 0 Specify that authentication key is entered in an unencrypted format (default). 7 Specify that the authentication key is entered in DES encrypted format. key Enter the authentication key in the previously specified format. Defaults NTP authentication is not configured by default.
PAGE 1198
ntp disable Prevent an interface from receiving NTP packets. Syntax ntp disable To re-enable NTP on an interface, use the no ntp disable command. Defaults Disabled (that is, if you configure an NTP host, all interfaces receive NTP packets) Command Modes INTERFACE Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ntp multicast client To receive NTP information from the network via multicast, configure the switch.
PAGE 1199
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.6(0.0) Introduced on the MXL. ntp server Configure an NTP time-serving host.
PAGE 1200
ntp source Specify an interface’s IP address to be included in the NTP packets. Syntax ntp source interface To delete the configuration, use the no ntp source command. Parameters interface Defaults Not configured. Command Modes CONFIGURATION Command History Enter the following keywords and slot/port or number information: • For Loopback interfaces, enter the keyword loopback then a number from zero (0) to 16383. • For a Port Channel interface, enter the keyword lag then a number.
PAGE 1201
ntp authenticate — enables the NTP authentication parameters you set. show clock Display the current clock settings. Syntax Parameters Command Modes Command History show clock [detail] detail • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword detail to view the source information of the clock. Version Description 9.9(0.0) Introduced on the FN MXL. 8.3.16.1 Introduced the MXL 10/40GbE Switch IO Module. Example Dell#show clock 12:30:04.
PAGE 1202
Field Description (none) One or more of the following symbols could be displayed: • * means synchronized to this peer. • # means almost synchronized to this peer. • + means the peer was selected for possible synchronization. • - means the peer is a candidate for selection. • ~ means the peer is statically configured. remote Displays the remote IP address of the NTP peer. ref clock Displays the IP address of the remote peer’s reference clock.
PAGE 1203
The following is a list of the Dell Networking OS version history for this command. Version Description 9.6(0.0) Added support for VRF. 9.4.(0.0) Added support for VRF. show ntp status Display the current NTP status. Syntax Command Modes Command History Usage Information show ntp status • EXEC • EXEC Privilege Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ntp status command shown in the following example.
PAGE 1204
58 Tunneling Tunneling is supported on the Dell Networking OS. tunnel-mode Enable a tunnel interface. Syntax tunnel mode {ipip | ipv6 | ipv6ip}[decapsulate-any] To disable an active tunnel interface, use the no tunnel mode command. Parameters ipip Enable tunnel in RFC 2003 mode and encapsulate IPv4 and/or IPv6 datagrams inside an IPv4 tunnel. ipv6 Enable tunnel in RFC 2473 mode and encapsulate IPv4 and/or IPv6 datagrams inside an IPv6 tunnel.
PAGE 1205
tunnel source Set a source address for the tunnel. Syntax tunnel source {ip-address | ipv6–address | interface-type-number} To delete the current tunnel source address, use the no tunnel source command. Parameters ip-address Enter the source IPv4 address in A.B.C.D format. ipv6–address Enter the source IPv6 address in X:X:X:X::X format. interface-typenumber • For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet then the slot/port information.
PAGE 1206
The range is from 5- 255. Default range is 5. count (OPTIONAL) Enter the keyword count to count packets processed by the filter. The range is from 3-10, Default range is 3. unlimited Enter the keyword unlimited to specify the unlimited number of keepalive probe packets. Defaults Tunnel keepalive is disabled. Command Modes INTERFACE TUNNEL Command History Usage Information Version Description 9.4(0.0) Introduced on the MXL.
PAGE 1207
This command will fail if the address family entered does not match the outer header address family of the tunnel mode, tunnel source, or any other tunnel allow-remote. If any allow-remote are configured, the tunnel source or tunnel mode commands will fail if the outer header address family does not match that of the configured allow-remote. tunnel dscp Configure the method to set the DSCP in the outer tunnel header.
PAGE 1208
Defaults none Command Modes INTERFACE TUNNEL (conf-if-tu) Command History Usage Information Version Description 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The tunnel interface is inoperable without a valid tunnel destination address for the configured Tunnel mode. To establish a logical tunnel to the particular destination address, use the destination address of the outer tunnel header. If you configure a tunnel interface or source address, the tunnel destination must be compatible.
PAGE 1209
Command History Usage Information Version Description 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module. A value of 0 copies the inner packet hop limit (ipv6) or time-to-live (ipv4) in the encapsulated packet to the tunnel header hop limit (ipv6) or time-to-live (ipv4) value. ip unnumbered Configure a tunnel interface to operate without a unique explicit IPv4 address and select the interface from which the tunnel will borrow its address.
PAGE 1210
Use the no ipv6 unnumbered command to set the tunnel back to default logical address. If the tunnel was previously operational, this will make the tunnel interface operationally down, unless the tunnel also has an IPv4 address configured. Parameters interface-type interface-number Defaults None. Command Modes INTERFACE TUNNEL Command History Usage Information Enter the interface type, followed by the type, slot and port information. Version Description 9.4(0.0) Introduced on the MXL.
PAGE 1211
59 u-Boot All commands in this chapter are in u-Boot mode. These commands are supported on the Dell Networking Operating System (OS) MXL 10/40GbE Switch Module platform. To access this mode, press any key when the following line appears on the console during a system boot. Hit any key to stop autoboot: Enter u-Boot immediately, as the BOOT_USER# prompt. NOTE: This chapter describes only a few commands available in u-Boot mode. NOTE: You cannot use the Tab key to complete commands in this mode.
PAGE 1212
boot show net config retries Show the number of retries for network boot configuration failure. Syntax boot show net config retries Command Modes uBoot Command History Example Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER# boot show net config retries Number of Network Boot Config Retries is : 0 BOOT_USER # boot write net config retries Set the number of retries for network boot configuration failure.
PAGE 1213
default gateway Set the default gateway IP address. Syntax default-gateway Command Modes uBoot Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. enable Change the access privilege level. Syntax enable [user | admin] Command Modes uBoot Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. help Display the help menu.
PAGE 1214
help display help menu -(36%)-Use to continue, q to stop: BOOT_USER # ignore enable password Ignore the enabled password. Syntax ignore enable-password Command Modes uBoot Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ignore startup config Ignore the system startup configuration. Syntax ignore startup-config Command Modes uBoot Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1215
Command Modes uBoot Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. no interface management ethernet ip address Clear the management port IP address and mask. Syntax no interface management ethernet ip address Command Modes uBoot Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. reload Reload the MXL switch. Syntax reload Command Modes uBoot Command History Version Description 8.3.16.
PAGE 1216
BOOT_USER # show boot selection Display the ROM bootstrap bootflash partition. Syntax show boot selection Command Modes uBoot Command History Example Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # show boot selection ROM BOOTSTRAP SELECTOR PARMETERS: ================================ Next ROM bootstrap set to occur from Bootflash partition A. Last ROM bootstrap occurred from Bootflash partition B.
PAGE 1217
BOOT_USER # show bootvar Show summary of operating system boot parameters. Syntax show bootvar Command Modes uBoot Command History Example Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # show bootvar PRIMARY OPERATING SYSTEM BOOT PARAMETERS: ======================================== boot device : tftp file name : premnath Management Etherenet IP address : 10.16.130.134/16 Server IP address : 10.16.127.35 Default Gateway IP address : 15.0.0.
PAGE 1218
BOOT_USER # show interface management Ethernet Show the management port IP address and mask. Syntax show interface management ethernet Command Modes uBoot Command History Example Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # show interface management ethernet Management ethernet IP address: 10.16.130.134/16 BOOT_USER # show interface management port config Show the management port boot characteristics.
PAGE 1219
Command History Example Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # help ***** Dell Force10 Boot Interface Help Information ***** Current access level: USER LEVEL Use "syntax help" for more information on syntax.
PAGE 1220
60 Uplink Failure Detection (UFD) Uplink failure detection (UFD) provides detection of the loss of upstream connectivity and, if you use this with network interface controller (NIC) teaming, automatic recovery from a failed link. clear ufd-disable Re-enable one or more downstream interfaces on the switch/router that are in a UFD-Disabled Error state so that an interface can send and receive traffic.
PAGE 1221
debug uplink-state-group Enable debug messages for events related to a specified uplink-state group or all groups. Syntax debug uplink-state-group [group-id] To turn off debugging event messages, enter the no debug uplink-state-group [group-id] command. Parameters group-id Defaults none Command Modes EXEC Privilege Command History Related Commands Enables debugging on the specified uplink-state group. The valid group-id values are from 1 to 16. Version Description 8.3.16.
PAGE 1222
downstream Assign a port or port-channel to the uplink-state group as a downstream interface. Syntax downstream interface To delete an uplink-state group, enter the no downstream interface command.
PAGE 1223
Command Modes Command History Related Commands UPLINK-STATE-GROUP Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. • downstream — assigns a port or port-channel to the uplink-state group as a downstream interface. • upstream — assigns a port or port-channel to the uplink-state group as an upstream interface. • uplink-state-group — creates an uplink-state group and enables the tracking of upstream links.
PAGE 1224
To disable upstream-link tracking without deleting the uplink-state group, use the no enable command. Parameters group-id Enables debugging on the specified uplink-state group. The valid group-id values are from 1 to 16. Defaults Upstream-link tracking is automatically enabled in an uplink-state group. Command Modes UPLINK-STATE-GROUP Command History Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1225
show uplink-state-group Display status information on a specified uplink-state group or all groups. Syntax Parameters Defaults Command Modes Command History Example show uplink-state-group [group-id] [detail] group-id Displays status information on a specified uplink-state group or all groups. The valid group-id values are from 1 to 16. detail Displays additional status information on the upstream and downstream interfaces in each group none • EXEC • EXEC Privilege Version Description 8.3.16.
PAGE 1226
Related Commands • show running-config uplink-state-group — displays the current configuration of one or more uplink-state groups. • uplink-state-group — create an uplink-state group and enables the tracking of upstream links. uplink-state-group Create an uplink-state group and enable the tracking of upstream links on a switch/ router. Syntax uplink-state-group group-id To delete an uplink-state group, enter the no uplink-state-group group-id command.
PAGE 1227
upstream Assign a port or port-channel to the uplink-state group as an upstream interface. Syntax upstream interface To delete an uplink-state group, use the no upstream interface command.
PAGE 1228
61 VLAN Stacking With the virtual local area network (VLAN)-stacking feature (also called stackable VLANs and QinQ), you can “stack” VLANs into one tunnel and switch them through the network transparently. For more information about basic VLAN commands, refer to the Virtual LAN (VLAN) Commands section in the Layer 2 chapter.
PAGE 1229
Parameters 0|1 Enter the bit value you want to map to a color. green | red | yellow Choose a color: • Green: High priority packets that are the least preferred to be dropped. • Yellow: Lower priority packets that are treated as best-effort. • Red: Lowest priority packets that are always dropped (regardless of congestion status). Defaults Disabled; Packets with an unmapped DEI value are colored green. Command Modes INTERFACE Command History Version Description 8.3.16.
PAGE 1230
member Assign a stackable VLAN access or trunk port to a VLAN. The VLAN must contain the vlan-stack compatible command in its configuration. Syntax member interface To remove an interface from a Stackable VLAN, use the no member interface command. Parameters interface Enter the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
PAGE 1231
Gi 8/9 Gi 8/40 1 0 Red Yellow Dell#show interface dei-honor Default Drop precedence: Green Interface CFI/DEI Drop precedence --------------------------------------------Te 0/1 0 Green Te 0/1 1 Yellow Te 1/2 1 Red Te 1/3 0 Yellow Related Commands dei honor — honors the incoming DEI value. show interface dei-mark Display the dei mark configuration.
PAGE 1232
8.3.16.1 Usage Information Introduced on the MXL 10/40GbE Switch IO Module. Prior to enabling this command, to place the interface in Layer 2 mode, enter the switchport command. To remove the access port designation, remove the port (using the no member interface command) from all stackable VLAN enabled VLANs. vlan-stack compatible Enable the stackable VLAN feature on a VLAN. Syntax vlan-stack compatible To disable the Stackable VLAN feature on a VLAN, use the no vlan-stack compatible command.
PAGE 1233
vlan-stack dot1p-mapping Map C-Tag dot1p values to an S-Tag dot1p value. You can separate the C-Tag values by commas and dashed ranges are permitted. Dynamic mode CoS overrides any Layer 2 QoS configuration if there is conflicts. Syntax Parameters vlan-stack dot1p-mapping c-tag-dot1p values sp-tag-dot1p value c-tag-dot1p value Enter the keyword c-tag-dot1p then the customer dot1p value that is mapped to a service provider do1p value. The range is from 0 to 5.
PAGE 1234
vlan-stack trunk Specify a Layer 2 port or port channel as a trunk port to the Stackable VLAN network. Syntax vlan-stack trunk To remove a trunk port designation from the selected interface, use the no vlan-stack trunk command. Defaults Not configured. Command Modes INTERFACE Command History Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Prior to using this command, to place the interface in Layer 2 mode, execute the switchport command.
PAGE 1235
shutdown Dell(conf-if-vl-20)#do show vlan Codes: * - Default VLAN, G - GVRP VLANs Q: U - Untagged, T - Tagged x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack NUM Status Description * 1 Inactive 20 Active 100 Active Dell(conf-if-vl-20)# Example Q Ports T Gi 0/42 M Gi 0/42 Dell(config)#vlan-stack protocol-type 88A8 Dell(config)#interface gigabitethernet 3/10 Dell(conf-if-gi-3/10)#no shutdown Dell(conf-if-gi-3/10)#switchport Dell(conf-if-gi-3/10)#vlan-stack access Dell(conf-if-gi-3/10)#e
PAGE 1236
62 Virtual Link Trunking (VLT) VLT allows physical links between two chassis to appear as a single virtual link to the network core. VLT eliminates the requirement for Spanning Tree protocols by allowing link aggregation group (LAG) terminations on two separate distribution or core switches, and by supporting a loop-free topology.
PAGE 1237
Command Modes Command History * Enter * to clear all multicast routes. snooping Enter the keyword snooping to delete multicast snooping route table entries. EXEC Privilege Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. clear ip pim tib Clear PIM tree information from the PIM database. Syntax Parameters Command Modes Command History Usage Information clear ip pim tib [group] group (OPTIONAL) Enter the multicast group address in dotted decimal format (A.B.C.D).
PAGE 1238
Parameter Version Description 9.7(0.0) Introduced on Supported on the MXL 10/40GbE Switch IO Module. Enter the value (in seconds) to specify the time interval for delay restore timer to abort. This timer is applicable only during reload/boot-up and not in other scenarios (example, ICL flap). The range is from 1 to 1800 seconds.
PAGE 1239
peer-link port-channel Configure the specified port channel as the chassis interconnect trunk between VLT peers in the domain. Syntax Parameters peer-link port-channel id-number id-number Defaults Not configured. Command Modes VLT DOMAIN Command History Enter the port-channel number that acts as the interconnect trunk. The range is from 1 to 128. Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. peer-routing Enable L3 VLT peer-routing.
PAGE 1240
Usage Information 9.4(0.0) Added the IPV6/IPV4 support on the MXL. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When the timer expires, the software checks to see if the VLT peer is now available. If the VLT peer is not available, peer-routing is disabled on that peer. primary-priority Reconfigure the primary role of VLT peer switches.
PAGE 1241
Enter a VLAN ID to limit the information displayed to the multicast routes PIM-SM snooping discovers on a specified VLAN. The VLAN ID range is from 1 to 4094. Enter a multicast group address and, optionally, a source multicast address in dotted decimal format (A.B.C.D) to limit the information displayed to the multicast routes PIM-SM snooping discovers for a specified multicast group and source.
PAGE 1242
Outgoing interface list: GigabitEthernet 4/11 GigabitEthernet 4/13 GigabitEthernet 4/20 GigabitEthernet 4/13 GigabitEthernet 4/20 Example (detail) Dell#show ip mroute IP Multicast Routing Table (*, 224.10.10.1), uptime 00:05:12 Incoming interface: GigabitEthernet 3/12 Outgoing interface list: GigabitEthernet 3/13 (1.13.1.100, 224.10.10.1), uptime 00:04:03 Incoming interface: GigabitEthernet 3/4 Outgoing interface list: GigabitEthernet 3/12 GigabitEthernet 3/13 (*, 224.20.20.
PAGE 1243
show vlt brief Displays summarized status information about VLT domains currently configured on the switch. Syntax show vlt brief Default Not configured. Command Modes EXEC Command History Example (Brief) Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1244
show vlt inconsistency Display deviations in VLT multicast traffic. Syntax show vlt inconsistency ip mroute Command Modes EXEC Command History Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show vlt inconsistency ip mroute Spanned Multicast Routing IIF Inconsistency Multicast Route --------------(22.22.22.200, 225.1.1.2) (*, 225.1.1.
PAGE 1245
Vlan-stack Vlan-ID ------- Local ----- 100 Peer ---- N M Port-type-config ---------------Codes:: p - PVLAN Promiscuous port, h - PVLAN Host port, t - PVLAN Trunk port, mt - Vlan-stack trunk port, mu - Vlan-stack access port, n Normal port Vlt Lag ------128 Local ----mt Peer ---mu Vlan-stack protocol-type -----------------------Local ----0x4100 Peer ---0x8100 VLT-VLAN config --------------Local Lag Peer Lag ---------------128 128 Local VLANs ----------4094 Peer VLANs ---------100 Dell# show vl
PAGE 1246
show vlt statistics Displays statistics on VLT operations. Syntax show vlt statistics Default Not configured. Command Modes EXEC Command History Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1247
Route Route Route Route updates sent to Peer: 0 updates rcvd from Peer: 0 update pkts sent to Peer: 0 update pkts rcvd from Peer: 0 system-mac Reconfigure the default MAC address for the domain. Syntax Parameters system-mac mac-address mac-address Enter the system MAC address for the VLT domain. Defaults Automatically assigned based on the primary priority and MAC address of each VLT peer. Command Modes VLT DOMAIN Command History Usage Information Version Description 9.2(0.
PAGE 1248
Usage Information When you create a VLT domain on a switch, the system automatically assigns a unique unit ID (0 or 1) to each peer switch. The unit IDs are used for internal system operations. To explicitly configure the unit ID of a VLT peer, use the unit-id command. Configure a different unit ID (0 or 1) on each peer switch. To minimize the time required for the VLT system to determine the unit ID assigned to each peer switch when one peer reboots, use this command.
PAGE 1249
Command Modes Command History EXEC Version Description 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform. Usage Information If you add an ICL or VLTi link as a member of a primary VLAN, the ICL becomes a part of the primary VLAN and its associated secondary VLANs, similar to the behavior for normal trunk ports. VLAN symmetricity is not validated if you associate an ICL to a PVLAN.
PAGE 1250
63 Virtual Router Redundancy Protocol (VRRP) Virtual router redundancy protocol (VRRP) is supported by the Dell Networking Operating System (OS) for IPv4 and IPv6. The following commands apply to both VRRP IPv4 and IPv6: • advertise-interval • description • disable • hold-time • preempt • priority • show config • track • virtual-address VRRP Ipv6 are in the VRRP for IPv6 Commands section. advertise-interval Set the time interval between VRRP advertisements.
PAGE 1251
authentication-type Enable authentication of VRRP data exchanges. Syntax authentication-type simple [encryption-type] password To delete an authentication type and password, use the no authentication-type command. Parameters simple Enter the keyword simple to specify simple authentication. encryption-type (OPTIONAL) Enter one of the following numbers: password Defaults Not configured.
PAGE 1252
debug vrrp Allows you to enable debugging of VRRP. Syntax debug vrrp interface [vrrp-id] {all | packets | state | timer} To disable debugging, use the no debug vrrp interface [vrrp-id] {all | packets | state | timer} command. Parameters Command Modes Command History Usage Information interface Enter the following keywords and slot/port or number information • For Port Channel interface types, enter the keywords port-channel then the number. The range is from 1 to 128.
PAGE 1253
disable Disable a VRRP group. Syntax disable To re-enable a disabled VRRP group, use the no disable command. Defaults Enabled. Command Modes VRRP Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To enable VRRP traffic, assign an IP address to the VRRP group using the virtual-address command and enter no disable. Related Commands virtual-address — specifies the IP address of the virtual router.
PAGE 1254
preempt To preempt or become the MASTER router, permit a BACKUP router with a higher priority value. Syntax preempt To prohibit preemption, use the no preempt command. Defaults Enabled (that is, a BACKUP router can preempt the MASTER router). Command Modes VRRP Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. priority Specify a VRRP priority value for the VRRP group. The VRRP protocol uses this value during the MASTER election process.
PAGE 1255
Parameters Command Modes Command History Example verbose (OPTIONAL) Enter the keyword verbose to view all VRRP group configuration information, including defaults. VRRP Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-if-vrid-4)#show con vrrp-group 4 virtual-address 119.192.182.124 ! show vrrp View the VRRP groups that are active. If no VRRP groups are active, the system returns No Active VRRP group.
PAGE 1256
Item Description Pri Displays the priority value assigned to the interface. If the track command is configured to track that interface and the interface is disabled, the cost is subtracted from the priority value assigned to the interface. Pre States whether preempt is enabled on the interface. State Example (Brief) • Y = Preempt is enabled. • N = Preempt is not enabled. Displays the operational state of the interface by using one of the following: • NA/IF (the interface is not available).
PAGE 1257
Item Example Description • Adv sent displays the number of VRRP advertisements sent on the interface. • Gratuitous ARP sent displays the number of gratuitous ARPs sent. Virtual MAC address Displays the virtual MAC address of the VRRP group. Virtual IP address Displays the virtual IP address of the VRRP router to which the interface is connected. Authentication:... States whether authentication is configured for the VRRP group. If it is, the authentication type and the password are listed.
PAGE 1258
cost Defaults cost = 10 Command Modes VRRP Command History Usage Information • For a Loopback interface, enter the keyword loopback then a number from 0 to 16383. • For Port Channel interface types, enter the keywords port-channel then the number. The range is 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN interface, enter the keyword vlan then the VLAN ID. The VLAN ID range is from 1 to 4094.
PAGE 1259
To guarantee that a VRRP group becomes MASTER, configure the VRRP group’s virtual address with the same IP address as the interface’s primary IP address and change the priority of the VRRP group to 255. You can ping the virtual addresses configured in all VRRP groups. vrrp delay minimum Set the delay time for VRRP initialization after an interface comes up.
PAGE 1260
Usage Information This command applies to all the VRRP configured interfaces on a system. When used with the vrrp delay minimum CLI, the later timer rules the VRRP enabling. For example, if vrrp delay reload is 600 and the vrrp delay minimum is 300: • When the system reloads, VRRP waits 600 seconds (10 minutes) to bring up VRRP on all interfaces that are up and configured for VRRP.
PAGE 1261
Defaults Not configured Command Modes INTERFACE Command History Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information NOTE: This command also enables you to clear the port configurations corresponding to a range of ports. • You can specify multiple ports as slot/port-range. For example, if you want to clear the port configurations corresponding to all ports between 1 and 4, specify the port range as clear counters interfacesinterface-type 1/1 - 4.
PAGE 1262
show vrrp ipv6 View the IPv6 VRRP groups that are active. If no VRRP groups are active, the system returns No Active VRRP group. Syntax show vrrp ipv6 [vrid] [interface] [brief] Parameters vrid (OPTIONAL) Enter the virtual router identifier for the VRRP group to view only that group. The range is from 1 to 255.
PAGE 1263
Example Line Beginning with Description Adv rcvd:... This line displays counters for the following: • Adv rcvd displays the number of VRRP advertisements received on the interface. • Adv sent displays the number of VRRP advertisements sent on the interface. • Bad pkts rcvd displays the number of invalid packets received on the interface. Virtual MAC address Displays the virtual MAC address of the VRRP group.
PAGE 1264
Usage Information The VRRP group only becomes active and sends VRRP packets when a link-local virtual IP address is configured. When you delete the virtual address, the VRRP group stops sending VRRP packets. • When VRF microcode is not loaded in CAM, the VRID for a VRRP group is the same as the VRID number configured with the vrrp-group or vrrp-ipv6-group command.
PAGE 1265
1. Set the switches with the lowest priority to both. 2. Set the switch with the highest priority to version 3. 3. Set all the switches from both to version 3. NOTE: Do not run VRRP version 2 and version 3 in the same group for an extended period of time.
PAGE 1266
64 ICMP Message Types This chapter lists and describes the possible ICMP message type resulting from a ping. The first three columns list the possible symbol or type/code. For example, you would receive a ! or 03 as an echo reply from your ping. Table 3. ICMP Messages and Their Definitions Symbol Type Code . 0 U 3 3 Error echo reply . destination unreachable: 0 network unreachable . 1 host unreachable . 2 protocol unreachable . 3 port unreachable .
PAGE 1267
Symbol Type & 11 Code Description Query Error time exceeded: 0 time-to-live equals 0 during transit . 1 time-to-live equals 0 during reassembly . 12 parameter problem: 1 IP header bad (catchall error) . 2 required option missing . 13 0 timestamp request . 14 0 timestamp reply . 15 0 information request (obsolete) . 16 0 information reply (obsolete) . 17 0 address mask request . 18 0 address mask reply .
PAGE 1268
65 SNMP Traps This chapter lists the traps sent by the Dell Networking Operating System (OS). Each trap is listed by the fields Message ID, Trap Type, and Trap Option. Table 4.
PAGE 1269
Message ID Trap Type Trap Option RMON_HC_FALLING_THRESHOLD SNMP NONE NONE NONE ENVMON TEMP ENVMON TEMP ENVMON TEMP ENVMON TEMP ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE PROTO NONE %RPM0-P:CP %SNMP-4-RMON_HC_FALLING_THRESHOLD: RMON highcapacity falling threshold alarm from SNMP OID RESV N/A CHM_MIN_ALRM_TEMP %CHMGR-2-MINOR_TEMP: Minor alarm: chassis temperature CHM_MIN_ALRM_TEMP_CLR %CHMRG-5-MINOR_TEMP_CLR: Minor alarm cleared: c
PAGE 1270
Message ID Trap Type Trap Option PROTO NONE PROTO NONE PROTO NONE PROTO NONE ETS NONE ETS NONE ETS NONE ETS NONE PFC NONE PFC NONE %RPM1-P:RP2 %VRRP-3-VRRP_BAD_AUTH: vrid-1 on Gi 11/12 rcvd pkt with authentication failure VRRP_GO_MASTER %VRRP-6-VRRP_MASTER: vrid-%d on %s entering MASTER VRRP_PROTOCOL_ERROR VRRP_PROTOERR: VRRP protocol error on %S BGP4_ESTABLISHED %TRAP-5-PEER_ESTABLISHED: Neighbor %a, state %s BGP4_BACKW_XSITION %TRAP-5-BACKWARD_STATE_TRANS: Neighbor %a, state %s ETS_
PAGE 1271
Message ID Trap Type Trap Option PFC NONE PFC NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE ENTITY NONE %DIFFSERV-5-PFC_TRAP_TYPE_ADMIN_MODE_CHANGE : PFC Admin mode changed to on for port %s %DIFFSERV-5-PFC_TRAP_TYPE_ADMIN_MODE_CHANGE : PFC Admin mode changed to off for port %s PFC_TRAP_TYPE_OPER_STATE_CHANGE %DIFFSERV-5-PFC_TRAP_TYPE_OPER_STATE_CHANGE: PFC Oper state changed to init for port %s %DIFFSERV-5-PFC_TRAP_TYPE_OPER_STATE_CHANGE: PFC Oper state c
PAGE 1272
66 FC Flex IO Modules This part provides a generic, broad-level description of the operations, capabilities, and configuration commands of the Fiber Channel (FC) Flex IO module. FC Flex IO Modules This part provides a generic, broad-level description of the operations, capabilities, and configuration commands of the Fiber Channel (FC) Flex IO module.
PAGE 1273
description (for FCoE maps) In an FCoE map, add a text description of the FCoE and FC parameters used to transmit storage traffic over an M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module NPIV proxy gateway in a converged fabric. M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module Syntax Parameters description text text Defaults None Command Modes FCOE MAP Command History Version 9.3(0.0) Enter a maximum of 32 characters.
PAGE 1274
After you apply an FCoE map on an FC interface, when the port is enabled (no shutdown), the NPIV proxy gateway starts sending FIP multicast advertisements on behalf of the FC port to downstream servers in order to advertise the availability of a new FCF port on the FCoE VLAN. To remove an FCoE map from an FC interface, enter the no fabric map-name command in Interface configuration mode.
PAGE 1275
fcf-priority In an FCoE map, configure the priority used by a server CNA to select an upstream FCoE forwarder (FCF). M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module Syntax Parameters fcf—priority priority priority Defaults 128 Command Modes FCOE MAP Command History Usage Information Version 9.3(0.0) Enter the priority assigned to the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module NPIV proxy gateway, which appears to a downstream server CNA as an FCF.
PAGE 1276
The FC-MAP value is used to generate the fabric-provided MAC address (FP-MAC). The FPMA is used by servers to transmit FCoE traffic to the fabric. An FC-MAP can be associated with only one FCoE VLAN and vice versa. In an FCoE map, the FC-MAP value, fabric ID, and FCoE VLAN parameters must be unique. To remove a configured FC-MAP value from an FCoE map, enter the no fc-map command.
PAGE 1277
On an M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module NPIV proxy gateway, you cannot apply an FCoE map is applied on fabric-facing FC ports and server-facing 10–Gigabit Ethernet ports. An FCoE map consists of the following parameters: the dedicated FCoE VLAN used for storage traffic, the destination SAN fabric (FC-MAP value), FCF priority used by a server, and the FIP keepalive (FKA) advertisement timeout.
PAGE 1278
Command Modes Command History Usage Information CONFIGURATION Version 9.3.0.0 Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module configured as an NPIV proxy gateway. FCoE storage traffic received from servers on an M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module NPIV proxy gateway is de-capsulated into Fibre Channel packets and forwarded over FC links to SAN switches in a specified fabric.
PAGE 1279
show fcoe-map Display the Fibre Channel and FCoE configuration parameters in FCoE maps. M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module Syntax Parameters Command Modes Command History Usage Information show fcoe-map [brief | map-name] brief Displays an overview of currently configured FCoE maps. map-name Displays the FC and FCoE configuration parameters in a specified FCoE map.
PAGE 1280
Field Description Oper-State Operational status of link to the fabric: Up (link is up and transmitting FC traffic), Down (link is down and not transmitting FC traffic), Link-wait (link is up and waiting for FLOGI to complete on peer FC port), or Removed (port has been shut down). The following table describes the show fcoe-map map-name output shown in the example below. Example Field Description Fabric-Name Name of a SAN fabric.
PAGE 1281
Related Commands fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric. show npiv devices Display the FCoE and FC devices currently logged in to an M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module NPIV proxy gateway.
PAGE 1282
Total NPIV Devices = 2 -------------------------------------------------------ENode-Intf ENode-WWPN FCoE-Vlan Fabric-Intf Fabric-Map LoginMethod Status -------------------------------------------------------Te 0/12 FLOGI Te 0/13 FDISC Usage Information Example 1282 20:01:00:10:18:f1:94:20 1003 LOGGED_IN 10:00:00:00:c9:d9:9c:cb 1003 LOGGED_IN Fc 0/5 fid_1003 Fc 0/0 fid_1003 The following table describes the show npiv devices output shown in the example below.
PAGE 1283
Related Commands LoginMethod Secs Status : : : FLOGI 5593 LOGGED_IN ENode[1]: ENode MAC ENode Intf FCF MAC Fabric Intf FCoE Vlan Fabric Map ENode WWPN ENode WWNN FCoE MAC FC-ID LoginMethod Secs Status : : : : : : : : : : : : : 00:10:18:f1:94:22 Te 0/13 5c:f9:dd:ef:10:c9 Fc 0/0 1003 fid_1003 10:00:00:00:c9:d9:9c:cb 10:00:00:00:c9:d9:9c:cd 0e:fc:03:01:02:02 01:02:01 FDISC 5593 LOGGED_IN fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabr