Reference Guide

ManualsBrandsDell ManualsserversDell Force10 MXL Blade

Dell Networking Command Line Reference

Guide for the MXL 10/40GbE Switch I/O

Module

9.4(0.0)

Summary of content (1543 pages)

PAGE 1
Dell Networking Command Line Reference Guide for the MXL 10/40GbE Switch I/O Module 9.4(0.
PAGE 2
Notes, Cautions, and Warnings NOTE: A NOTE indicates important information that helps you make better use of your computer. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. Copyright © 2014 Dell Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws.
PAGE 3
Contents 1 About this Guide......................................................................................................47 Objectives............................................................................................................................................ 47 Audience..............................................................................................................................................48 Conventions..............................................................
PAGE 4
banner exec......................................................................................................................................... 78 banner login.........................................................................................................................................79 banner motd....................................................................................................................................... 80 clear alarms..............................................
PAGE 5
show processes ipc flow-control..................................................................................................... 110 show processes memory...................................................................................................................111 show software ifm............................................................................................................................. 113 show system.............................................................................
PAGE 6
access-class...................................................................................................................................... 143 clear counters ip access-group........................................................................................................143 ip access-group.................................................................................................................................143 show ip access-lists.......................................................
PAGE 7
show config.......................................................................................................................................198 show ip prefix-list detail....................................................................................................................198 show ip prefix-list summary............................................................................................................. 199 Route Map Commands.........................................................
PAGE 8
seq..................................................................................................................................................... 265 permit udp.........................................................................................................................................268 permit tcp..........................................................................................................................................270 permit icmp.........................................
PAGE 9
aggregate-address............................................................................................................................ 312 bgp add-path.....................................................................................................................................313 bgp always-compare-med............................................................................................................... 314 bgp asnotation.................................................................
PAGE 10
neighbor advertisement-interval..................................................................................................... 340 neighbor advertisement-start.......................................................................................................... 340 neighbor allowas-in.......................................................................................................................... 341 neighbor default-originate................................................................
PAGE 11
show ip bgp next-hop...................................................................................................................... 382 show ip bgp paths.............................................................................................................................383 show ip bgp paths as-path...............................................................................................................384 show ip bgp paths community........................................................
PAGE 12
Data Center Bridging (DCB)............................................................................. 417 advertise dcbx-appln-tlv................................................................................................................... 417 advertise dcbx-tlv..............................................................................................................................418 bandwidth-percentage.........................................................................................
PAGE 13
show stack-unit stack-ports ets details........................................................................................... 455 dcb pfc-shared-buffer-size..............................................................................................................456 dcb-buffer-threshold .......................................................................................................................457 dcb enable pfc-queues........................................................................
PAGE 14
host.................................................................................................................................................... 491 lease...................................................................................................................................................491 netbios-name-server........................................................................................................................ 491 netbios-node-type......................................
PAGE 15
show config....................................................................................................................................... 513 show link-bundle distribution...........................................................................................................514 16 FIPS Cryptography..............................................................................................515 fips mode enable......................................................................................
PAGE 16
gvrp enable........................................................................................................................................543 gvrp registration................................................................................................................................543 protocol gvrp.................................................................................................................................... 544 show config...................................................
PAGE 17
intf-type cr4 autoneg........................................................................................................................573 keepalive............................................................................................................................................574 monitor interface.............................................................................................................................. 575 mtu...............................................................
PAGE 18
arp retries...........................................................................................................................................618 arp timeout........................................................................................................................................619 clear arp-cache................................................................................................................................. 619 clear host................................................
PAGE 19
show tcp statistics.............................................................................................................................657 23 Internet Protocol Security (IPSec)................................................................. 661 crypto ipsec transform-set............................................................................................................... 661 crypto ipsec policy...............................................................................................
PAGE 20
show ipv6 interface...........................................................................................................................691 show ipv6 mld_host......................................................................................................................... 693 show ipv6 route................................................................................................................................ 694 trust ipv6-diffserv.......................................................
PAGE 21
debug ip bgp keepalives................................................................................................................... 722 debug ip bgp notifications................................................................................................................723 debug ip bgp updates....................................................................................................................... 724 default-metric.....................................................................
PAGE 22
show ip bgp ipv6 unicast cluster-list................................................................................................ 751 show ip bgp ipv6 unicast community.............................................................................................. 752 show ip bgp ipv6 unicast community-list........................................................................................753 show ip bgp ipv6 unicast dampened-paths.......................................................................
PAGE 23
show ip bgp ipv6 unicast..................................................................................................................780 show ip bgp ipv6 unicast cluster-list............................................................................................... 780 show ip bgp ipv6 unicast community.............................................................................................. 781 show ip bgp ipv6 unicast community-list.............................................................
PAGE 24
distribute-list in.................................................................................................................................808 distribute-list out.............................................................................................................................. 809 distribute-list redistributed-override............................................................................................... 809 domain-password..........................................................
PAGE 25
show config...................................................................................................................................... 836 show isis database............................................................................................................................ 837 show isis graceful-restart detail.......................................................................................................840 show isis hostname.........................................................
PAGE 26
track ip.............................................................................................................................................. 869 untagged........................................................................................................................................... 870 31 Link Layer Discovery Protocol (LLDP)........................................................... 873 advertise dot1-tlv...................................................................................
PAGE 27
ip msdp log-adjacency-changes.....................................................................................................900 ip msdp mesh-group....................................................................................................................... 900 ip msdp originator-id........................................................................................................................ 901 ip msdp peer..............................................................................
PAGE 28
debug ipv6 mld_host........................................................................................................................929 ip multicast-limit...............................................................................................................................930 36 Neighbor Discovery Protocol (NDP)............................................................. 931 clear ipv6 neighbors.................................................................................................
PAGE 29
log-adjacency-changes................................................................................................................... 955 maximum-paths............................................................................................................................... 956 mib-binding...................................................................................................................................... 956 network area................................................................
PAGE 30
ipv6 ospf area................................................................................................................................. 1000 ipv6 ospf authentication................................................................................................................ 1000 ipv6 ospf bfd all-neighbors............................................................................................................ 1001 ipv6 ospf cost..................................................................
PAGE 31
ip pim register-filter........................................................................................................................ 1031 ip pim rp-address............................................................................................................................ 1031 ip pim rp-candidate........................................................................................................................ 1032 ip pim sparse-mode......................................................
PAGE 32
source (port monitoring)................................................................................................................ 1061 41 Private VLAN (PVLAN)..................................................................................... 1063 ip local-proxy-arp...........................................................................................................................1064 private-vlan mapping secondary-vlan..........................................................................
PAGE 33
description...................................................................................................................................... 1094 match ip dscp................................................................................................................................. 1095 match ip precedence..................................................................................................................... 1096 match mac access-group.................................................
PAGE 34
ip rip send version............................................................................................................................1123 ip split-horizon................................................................................................................................ 1124 maximum-paths.............................................................................................................................. 1124 neighbor.............................................................
PAGE 35
spanning-tree rstp........................................................................................................................... 1153 spanning-tree rstp...........................................................................................................................1154 tc-flush-standard............................................................................................................................ 1156 47 Security............................................................
PAGE 36
ip tacacs source-interface.............................................................................................................. 1182 tacacs-server host...........................................................................................................................1183 tacacs-server key............................................................................................................................ 1184 SSH Server and SCP Commands..................................................
PAGE 37
sflow sample-rate (Interface)......................................................................................................... 1206 show sflow...................................................................................................................................... 1207 show sflow stack-unit.................................................................................................................... 1208 49 Service Provider Bridging..................................................
PAGE 38
logging history................................................................................................................................ 1238 logging history size......................................................................................................................... 1239 logging monitor.............................................................................................................................. 1239 logging on...........................................................
PAGE 39
portfast bpdufilter default............................................................................................................... 1267 protocol spanning-tree.................................................................................................................. 1267 show config.................................................................................................................................... 1268 show spanning-tree 0.........................................................
PAGE 40
boot change.................................................................................................................................... 1297 boot selection................................................................................................................................. 1297 boot show net config retries..........................................................................................................1298 boot write net config retries..............................................
PAGE 41
show interface dei-mark................................................................................................................ 1320 vlan-stack access............................................................................................................................ 1321 vlan-stack compatible.....................................................................................................................1321 vlan-stack dot1p-mapping.........................................................
PAGE 42
show vrrp.........................................................................................................................................1346 track.................................................................................................................................................1349 virtual-address................................................................................................................................ 1350 vrrp delay minimum.......................................
PAGE 43
PFC Commands.............................................................................................................................. 1392 clear pfc counters..................................................................................................................... 1392 description.................................................................................................................................1393 pfc link-delay....................................................................
PAGE 44
dcb stack-unit pfc-buffering pfc-port-count pfc-queues..................................................... 1428 dcbx port-role...........................................................................................................................1428 dcbx version.............................................................................................................................. 1429 debug dcbx.......................................................................................................
PAGE 45
Interfaces......................................................................................................................................... 1461 Basic Interface Commands.......................................................................................................1461 clear counters............................................................................................................................1461 description.........................................................................
PAGE 46
Per-Port QoS Commands........................................................................................................ 1499 dot1p-priority............................................................................................................................ 1499 service-class dynamic dot1p.................................................................................................... 1500 service-class dot1p-mapping.............................................................................
PAGE 47
About this Guide 1 This book provides information about the Dell Networking Operating System (OS) command line interface (CLI). This book also includes information about the protocols and features found in the Dell OS and on the Dell Networking systems supported by the Dell OS.
PAGE 48
Audience This book is intended for system administrators who are responsible for configuring or maintaining networks. This guide assumes that you are knowledgeable in Layer 2 and Layer 3 networking technologies. Conventions This book uses the following conventions to describe command syntax. Keyword Keywords are in Courier font and must be entered in the CLI as listed. parameter Parameters are in italics and require a number or word to be entered in the CLI.
PAGE 49
CLI Basics 2 This chapter describes the command line interface (CLI) structure and command modes. The Dell operating software commands are in a text-based interface that allows you to use the launch commands, change command modes, and configure interfaces and protocols. Accessing the Command Line When the system boots successfully, you are positioned on the command line in EXEC mode and not prompted to log in. You can access the commands through a serial console port or a Telnet session.
PAGE 50
When another user enters CONFIGURATION mode, the Dell Networking OS sends a message similar to the following: % Warning: User "admin" on line vty2 "172.16.1.210" is in configuration In this case, the user is “admin” on vty2. Navigating the CLI The Dell Networking Operating System (OS) displays a command line interface (CLI) prompt comprised of the host name and CLI mode. • Host name is the initial part of the prompt and is “Dell” by default. You can change the host name with the hostname command.
PAGE 51
To obtain a list of keywords with a brief functional description: Type help at the prompt. To obtain a list of available options: Type a keyword and then type a space and a ?. To obtain a list of partial keywords using a partial keyword: Type a partial keyword and then type a ?.
PAGE 52
Key Combination Action CNTL-R Re-enters the previous command. CNTL-U Deletes the line. CNTL-W Deletes the previous word. CNTL-X Deletes the line. CNTL-Z Ends continuous scrolling of the command outputs. Esc B Moves the cursor back one word. Esc F Moves the cursor forward one word. Esc D Deletes all the characters from the cursor to the end of the word. Using the Keyword no Command To disable, delete or return to default values, use the no form of the commands.
PAGE 53
find searches for the first occurrence of a pattern grep displays text that matches a pattern. no-more does not paginate the display output save copies the output to a file for future use The grep command option has an ignore-case sub-option that makes the search case-insensitive. For example, the commands: Displaying All Output To display the output all at once (not one screen at a time), use the no-more option after the pipe.
PAGE 54
CONFIGURATION Mode In EXEC Privilege mode, use the configure command to enter CONFIGURATION mode and configure routing protocols and access interfaces. To enter CONFIGURATION mode: 1. Verify that you are logged in to EXEC Privilege mode. 2. Enter the configure command. The prompt changes to include (conf). From this mode, you can enter INTERFACE mode by using the interface command. INTERFACE Mode Use INTERFACE mode to configure interfaces or IP services on those interfaces.
PAGE 55
To enter IP ACCESS LIST mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Use the ip access-list standard or ip access-list extended command. Include a name for the ACL. The prompt changes to include (conf-std-nacl) or (conf-ext-nacl). You can return to CONFIGURATION mode by using the exit command. LINE Mode To configure the console or virtual terminal parameters, use LINE mode. To enter LINE mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the line command.
PAGE 56
2. Enter the protocol spanning-tree pvst command. The prompt changes to include (confpvst). You can return to CONFIGURATION mode by using the exit command. PREFIX-LIST Mode To configure a prefix list, use PREFIX-LIST mode. To enter PREFIX-LIST mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the ip prefix-list command. Include a name for the prefix list. The prompt changes to include (conf-nprefixl). You can return to CONFIGURATION mode by using the exit command.
PAGE 57
To enter ROUTER OSPF mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the router ospf {process-id} command. The prompt changes to include (confrouter_ospf-id). You can switch to INTERFACE mode by using the interface command or you can switch to ROUTER RIP mode by using the router rip command. ROUTER RIP Mode To enable and configure Router Information Protocol (RIP), use ROUTER RIP mode. For more information, refer to Routing Information Protocol (RIP). To enter ROUTER RIP mode: 1.
PAGE 58
PAGE 59
3 File Management This chapter contains command line interface (CLI) commands needed to manage the configuration files as well as other file management commands. The commands in this chapter are supported by the Dell Networking Operating System (OS). cd Change to a different working directory.
PAGE 60
Command Modes Command History Usage Information To copy the running configuration Enter the keywords running-config. To copy the startup configuration Enter the keywords startup-config. To copy a file on the external FLASH Enter the keyword slot0:// then the filename. EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The Dell Networking OS supports a maximum of 100 files at the root directory level, on both the internal and external Flash.
PAGE 61
second position indicates that the target is the internal Flash. The source is on a secure server running SSH, so you are prompted for the user datagram protocol (UDP) port of the SSH server on the remote host. Example Dell#copy scp: flash: Address or name of remote host []: 10.11.199.134 Port number of the server [22]: 99 Source file name []: test.cfg User name to login remote host: admin Password to login remote host: Destination file name [test.cfg]: test1.
PAGE 62
Command Modes EXEC Privilege Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#dir Directory of flash: 1 drwx 4096 Jan 01 2 drwx 2048 Mar 06 3 drwx 4096 Feb 25 4 drwx 4096 Feb 25 5 d--- 4096 Feb 25 6 -rwx 720969768 Mar 05 7 -rwx 4260 Mar 03 8 -rwx 31969685 Mar 05 DellS-XL-8-3-16-148.
PAGE 63
show file-systems — displays information about the file systems on the system. logging coredump Enable coredump. Syntax logging coredump stack-unit all Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The kernel coredump can be large and may take five to 30 minutes to upload.
PAGE 64
Command Modes Command History Usage Information CONFIGURATION Version 8.4.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Because flash space may be limited, using this command ensures your entire crash kernel files are uploaded successfully and completely. Only a single coredump server can be configured. Configuration of a new coredump server over-writes any previously configured server. NOTE: You must disable logging coredump before you designate a new server destination for your core dumps.
PAGE 65
Command Modes Command History EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show boot system Displays information about boot images currently configured on the system. Syntax Parameters show boot system stack-unit {0-5 | all} 0–5 Enter this information to display the boot image information of only the entered stack-unit. all Enter the keyword all to display the boot image information of all the stack-units in the stack.
PAGE 66
• Command Modes Command History For a file on the external Flash, enter usbflash:// then the filename. EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show file flash://startup-config ! Version E8-3-16-29 ! Last configuration change at Thu Apr 26 19:19:02 2012 by default ! Startup-config last updated at Thu Apr 26 19:19:04 2012 by default ! boot system stack-unit 0 primary system: A: boot system stack-unit 0 secondary tftp://10.11.200.
PAGE 67
Command History Example Command Fields Version 8.3.16.0 Dell#show file-systems Size(b) Free(b) 2143281152 2000936960 15848660992 831594496 Dell# Feature FAT32 FAT32 - Type USERFLASH USBFLASH network network network Flags rw rw rw rw rw Prefixes flash: usbflash: ftp: tftp: scp: Field Description size(b) Lists the size (in bytes) of the storage location. If the location is remote, no size is listed. Free(b) Lists the available size (in bytes) of the storage location.
PAGE 68
Defaults none Command Modes EXEC Privilege Command History Usage Information Example Version 8.3.16.1 • For a file on the internal Flash, enter flash:// then the filename. • For a file on an FTP server, enter ftp:// user:password@hostip/filepath. • For a file on a TFTP server, enter tftp://hostip/ filepath. • For a file on the external Flash, enter usbflash:// filepath then the filename. Introduced on the MXL 10/40GbE Switch IO Module. NOTE: A filepath that contains a dot ( .
PAGE 69
Parameters entity (OPTIONAL) To display that entity’s current (non-default) configuration, enter one of the following keywords: NOTE: If you did not configure anything that entity, nothing displays and the prompt returns.
PAGE 70
Command Modes Command History Example 70 prefix-list for the current prefix-list configuration privilege for the current privilege configuration radius for the current RADIUS configuration resolve for the current DNS configuration rip for the current RIP configuration route-map for the current route map configuration snmp for the current SNMP configuration spanningtree for the current spanning tree configuration static for the current static route configuration status for the file statu
PAGE 71
! redundancy disable-auto-reboot stack-unit redundancy disable-auto-reboot stack-unit redundancy disable-auto-reboot stack-unit redundancy disable-auto-reboot stack-unit !--More-service timestamps log datetime logging coredump stack-unit all ! hostname FTOS ! ...
PAGE 72
Related Commands show running-config — displays the current (running) configuration. show version Display the current Dell Networking OS version information on the system. Syntax show version Command Modes EXEC Privilege Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show version Dell Force10 Real Time Operating System Software Dell Force10 Operating System Version: 1.
PAGE 73
Lines Beginning With Description Dell Force10 uptime is... Amount of time the system has been up System image... Image file name Chassis Type: Chassis type (for example, E1200, E600, E600i, E300, C300, C150, S25, S50, S55, S60, S4810) Control Processor:... Control processor information and amount of memory on processor 128K bytes...
PAGE 74
flash: After entering the keyword flash:, you can either follow it with the location of the source file in this form: //filepath or press Enter to launch a prompt sequence. usbflash: After entering the keyword usbflash:, you can either follow it with the location of the source file in this form: // filepath or press Enter to launch a prompt sequence. A: Enter this keyword to upgrade the bootflash partition A. B: Enter this keyword to upgrade the bootflash partition B.
PAGE 75
tftp After entering the keyword tftp you can either follow it with the location of the source file in this form://filepath, or press Enter to launch a prompt sequence. flash After entering the keyword flash you can either follow it with the location of the source file in this form://filepath, or press Enter to launch a prompt sequence.
PAGE 76
PAGE 77
Control and Monitoring 4 This chapter describes control and monitoring for the MXL 10/40GbE Switch IO Module. asset-tag Assign and store a unique asset-tag to the stack member. Syntax asset-tag stack-unit unit id Asset-tag ID To remove the asset tag, use no stack-unit unit-id Asset-tag ID command. Parameters stack-unit unitid Enter the keywordsstack-unit then the unit-id to assign a tag to the specific member. The range is from 0 to 5.
PAGE 78
Parameters unit-id Enter the stack member unit identifier of the stack member to reset. The range is from 0 to 5 or all. queue size Enter the queue size of the stack member. The range is from 0 to 5. Defaults Not configured Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. You must save the configuration and reload the system to implement ASF.
PAGE 79
4d21h5m: %STKUNIT0-M P:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console This is the banner Dell Force10 con0 now available Press RETURN to get started. This is the banner Related Commands banner login — sets a banner for login connections to the system. banner motd — sets a Message of the Day banner. exec-banner — Enables the display of a text string when you enter EXEC mode. line — enables and configures the console and virtual terminal lines to the system.
PAGE 80
'c' is a delimiting character Dell(conf)#no banner login ? keyboard-interactive Prompt will be displayed by default Dell(conf)#banner login keyboard-interactive Enter TEXT message. End with the character '%'. This is the banner% Dell(conf)#end Dell#exit 13d21h9m: %STKUNIT0-M:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console This is the banner Dell Force10 con0 now available Press RETURN to get started.
PAGE 81
Related Commands banner exec — enables the display of a text string when you enter EXEC mode. banner login — sets a banner to display after successful login to the system. clear alarms Clear alarms on the system. Syntax clear alarms Command Modes EXEC Privilege Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command clears alarms that are no longer active. If an alarm situation is still active, it is seen in the system output.
PAGE 82
vty number Command Modes Command History Enter the keyword vty then a number to clear a terminal line. The range is from 0 to 9. EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. configure Enter CONFIGURATION mode from EXEC Privilege mode. Syntax Parameters Command Modes Command History Example configure [terminal] terminal (OPTIONAL) Enter the keyword terminal to specify that you are configuring from the terminal. EXEC Privilege Version 8.3.16.
PAGE 83
The following message is an indication that collection of CPU traffic is automatically turned on. To view the traffic statistics, use the show cputraffic-stats command. If the CPU receives excessive traffic, traffic is rate controlled. NOTE: You must enable this command before the show cpu-trafficstats command displays traffic statistics. Dell Networking OS recommends disabling debugging (no debug cpu-traffic-stats) after troubleshooting is complete.
PAGE 84
do Allows the execution of most EXEC-level commands from all CONFIGURATION levels without returning to the EXEC level. Syntax Parameters do command command Enter an EXEC-level command. Defaults none Command Modes • CONFIGURATION • INTERFACE Command History Usage Information Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 85
Command Modes Command History EXEC Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Users entering EXEC Privilege mode or any other configured privilege level can access configuration commands. To protect against unauthorized access, use the enable password command to configure a password for the enable command at a specific privilege level. If no privilege level is specified, the default is privilege level 15.
PAGE 86
Command History Related Commands • SPANNING TREE • MULTIPLE SPANNING TREE • LINE • INTERFACE • VRRP • ACCESS-LIST • PREFIX-LIST • ROUTER OSPF • ROUTER RIP Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. exit — returns to the lower command mode. exec-banner Enable the display of a text string when the user enters EXEC mode. Syntax exec-banner Defaults Enabled on all lines (if configured, the banner appears). Command Modes LINE Command History Version 8.3.16.
PAGE 87
Parameters minutes Enter the number of minutes of inactivity on the system before disconnecting the current session. The range is from 0 to 35791. The default is 10 minutes for the console line and 30 minutes for the VTY line. seconds (OPTIONAL) Enter the number of seconds. The range is from 0 to 2147483. The default is 0 seconds. Defaults 10 minutes for console line; 30 minutes for VTY lines; 0 seconds Command Modes LINE Command History Version 8.3.16.
PAGE 88
ftp-server enable Enable FTP server functions on the system. Syntax ftp-server enable Defaults Disabled Command Modes CONFIGURATION Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example morpheus% ftp 10.31.1.111 Connected to 10.31.1.111. 220 FTOS (1.0) FTP server ready Name (10.31.1.
PAGE 89
Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information After you enable FTP server functions with the ftp-server enable command, Dell Networking OS recommends specifying a top-level directory path. Without a top-level directory path specified, the Dell Networking OS directs users to the flash directory when logging in to the FTP server. Related Commands ftp-server enable — enables FTP server functions on the MXL 10/40GbE switch IO module.
PAGE 90
Parameters name Defaults Dell Command Modes CONFIGURATION Command History Usage Information Enter a text string, up to 32 characters long. Version 9.3(0.0) Modified the default hostname as Dell. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The hostname is used in the prompt. You cannot specify spaces in the hostname. Starting with Dell Networking OS version 9.3(0.0), the default hostname is modified as Dell instead of FTOS on all of the supported platforms.
PAGE 91
ip ftp source-interface Specify an interface’s IP address as the source IP address for FTP connections. Syntax Parameters ip ftp source-interface interface interface Enter the following keywords and slot/port or number information: • For Loopback interfaces, enter the keyword loopback then a number from zero (0) to 16383. • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 92
Usage Information Configure a password with the ip ftp password command. Related Commands ip ftp password — sets the password for FTP connections. ip telnet server enable Enable the Telnet server on the switch. Syntax ip telnet server enable To disable the Telnet server, use the no ip telnet server enable command. Defaults Enabled Command Modes CONFIGURATION Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 93
Command Modes Command History Related Commands CONFIGURATION Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. telnet — telnets to another device. ip tftp source-interface Assign an interface’s IP address in outgoing packets for TFTP traffic. Syntax Parameters ip tftp source-interface interface interface Enter the following keywords and slot/port or number information: • For Loopback interfaces, enter the keyword loopback then a number from zero (0) to 16383.
PAGE 94
vty number Enter the keyword vty then a number from 0 to 9 to configure a virtual terminal line for Telnet sessions. The system supports 10 Telnet sessions. end-number (OPTIONAL) Enter a number from 1 to 9 as the last virtual terminal line to configure. You can configure multiple lines at one time. Defaults Not configured Command Modes CONFIGURATION Command History Version 8.3.17.0 Supported on the M I/O Aggregator. Usage Information You cannot delete a terminal connection.
PAGE 95
Parameters host (OPTIONAL) Enter the host name of the devices to which you are testing connectivity. ip-address (OPTIONAL) Enter the IPv4 address of the device to which you are testing connectivity. The address must be in the dotted decimal format. count Enter the number of echo packets to be sent. The default is 5. • number: from 1 to 2147483647 • continuous: transmit echo request continuously datagram size Enter the ICMP datagram size. The range is from 36 to 15360 bytes. The default is 100.
PAGE 96
sweep-minsize Enter the minimum size of datagram in sweep range. The range is from 52 to 15359 bytes. sweep-maxsize Enter the maximum size of datagram in sweep range. The range is from 53 to 15359 bytes. sweep-interval Enter the incremental value for sweep size. The range is from 1 to 15308 seconds. ointerface (IPv4 only) Enter the outgoing interface for multicast packets. Enter the IP address in A.B.C.D format.
PAGE 97
Success rate is 100.0 percent (5/5), round-trip min/avg/max = 0/0/0 (ms) Dell# reload Reboot the Dell Networking OS. Syntax reload Command Modes EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information If there is a change in the configuration, the Dell Networking OS prompts you to save the new configuration. Or you can save your running configuration with the copy running-config command.
PAGE 98
Usage Information Messages can contain an unlimited number of lines; however, each line is limited to 255 characters. To move to the next line, use . To send the message use CTR-Z; to abort a message, use CTR-C. service timestamps To debug and log messages, add time stamps. This command adds either the uptime or the current time and date.
PAGE 99
show alarms View alarms. Syntax show alarms Command Modes • EXEC • EXEC Privilege Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell# show alarms -- Minor Alarms -Alarm Type Duration --------------------------------------No minor alarms -- Major Alarms -Alarm Type Duration ---------------------------------------No major alarms Dell# show command-history Display a buffered log of all commands all users enter along with a time stamp.
PAGE 100
[4/20 10:27:23]: CMD-(CLI):[logging 10.10.10.4]by default from console [4/20 10:27:24]: CMD-(CLI):[logging 10.1.2.4]by default from console [4/20 10:27:24]: CMD-(CLI):[logging 172.31.1.4]by default from console [4/20 10:27:24]: CMD-(CLI):[logging 133.33.33.4]by default from console [4/20 10:27:24]: CMD-(CLI):[management route 172.16.1.0 /24 10.11.209.
PAGE 101
Parameters Defaults Command Modes Command History count Display the command tree with a usage counter for each command. no Display all of the commands that may be preceded by the keyword no, which is the keyword used to remove a command from the running-configuration. none • • EXEC EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Reload the system to reset the command-tree counters.
PAGE 102
clear ip fib command usage:4 clear ip route Dell# command usage:1 show cpu-traffic-stats View the CPU traffic statistics. Syntax Parameters show cpu-traffic-stats [port number | all] port number (OPTIONAL) Enter the port number to display traffic statistics on that port only. The range is from 1 to 1568. all (OPTIONAL) Enter the keyword all to display traffic statistics on all the interfaces receiving traffic, sorted based on the traffic.
PAGE 103
show debugging View a list of all enabled debugging processes. Syntax show debugging Command Modes EXEC Privilege Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 104
* 0 online 47C ok * Management Unit -- Thermal Sensor Readings (deg C) -Unit Sensor0 Sensor1 Sensor2 Sensor3 Sensor4 Sensor5 Sensor6 Sensor7 Sensor8 Sensor9 ---------------------------------------------------------------------------------0 50 52 53 53 54 48 57 57 53 56 Dell# Example (stack-unit) Dell#show environment stack-unit 0 -- Unit Environment Status -Unit Status Temp Voltage -----------------------------------0* online 49C ok * Management Unit Example (thermalsensor) Dell#show environment ther
PAGE 105
Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information If there are no fiber ports in the unit, just the header under show inventory media displays. If there are fiber ports but no optics inserted, the output displays "Media not present or accessible". Example Dell#show inventory System Type : MXL-10/40GbE System Mode : 1.
PAGE 106
show memory View current memory usage on the MXL switch. Syntax Parameters Command Modes Command History show memory [stack-unit 0–5] stack-unit 0–5 • EXEC • EXEC Privilege Version 8.3.16.1 (OPTIONAL) Enter the keywords stack-unit then the stack unit ID of the stack member to display memory information on the designated stack member. Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The output for show memory displays the memory usage of LP part (sysdlp) of the system.
PAGE 107
Command Modes Command History Example (summary) summary (OPTIONAL) Enter the keyword summary to view the CPU utilization of processes related to line card processing. ipc (OPTIONAL) Enter the keyword ipc to display interprocess communication statistics. memory (OPTIONAL) Enter the keyword memory to display memory statistics. Refer to Example (memory). • EXEC • EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 108
dla 0x76348000 452110 sysAdmTsk 0x76367000 1751990 timerMgr 0x76385000 14460 PM 0x7629d000 347970 diagagt 0x763c7000 0 evagt 0x763eb000 90800 ipc 0x77ee9000 5 tme 0x77eec000 0 ttraceIpFlow 0x77eee000 20 linkscan_user_threa 0x77ff6000 0 isrTask 0x7811a000 0 tDDB 0x7811c000 22980 GC 0x7811e000 0 bshell_reaper_threa 0x78365000 10 tSysLog 0x78367000 1106980 tTimerTask 0x78369000 13131160 tExcTask 0x7836b000 30 tLogTask 0x785bb000 147650 tUsrRoot Example (memory) 108 45211 10000 0.00% 0.00% 0.
PAGE 109
f10appioserv mrtm f10appioserv l2mgr f10appioserv l2pm f10appioserv arpm Dell# 225280 5496832 225280 1036288 225280 172032 225280 192512 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 208896 11124736 208896 16134144 208896 7483392 208896 7057408 Example (stack-unit) Dell#show process memory stack-unit 0 Total: 2147483648, MaxUsed: 378433536, CurrentUsed: 378433536, CurrentFree: 1769050112 TaskName TotalAllocated TotalFreed MaxHeld CurrentHolding f10appioserv 225280 0 0 208896 ospf 573440 0 0 8716288 f10appioserv 225
PAGE 110
show processes ipc flow-control Display the single window protocol queue (SWPQ) statistics. Syntax Parameters show processes ipc flow-control [cp] cp (OPTIONAL) Enter the keyword cp to view the control processor’s SWPQ statistics. Defaults none Command Modes • EXEC • EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 111
• Example In the example, a retry (Retries) value of zero indicates that the SWP mechanism reached the maximum number of retransmissions without an acknowledgement.
PAGE 112
show processes memory output Field Description MaxUsed: Total maximum memory used ever (history indicated with time stamp) CurrentUsed: Total memory currently in use CurrentFree: Total system memory available SharedUsed: Total used shared memory SharedFree: Total free shared memory PID Process ID Process Process Name ResSize Actual resident size of the process in memory Size Process test, stack, and data size Allocs Total dynamic memory allocated Frees Total dynamic memory freed Max
PAGE 113
Example (managementunit) Dell#show processes memory management-unit Total : 2147483648, MaxUsed : 378470400 [05/23/2012 09:49:39] CurrentUsed: 378470400, CurrentFree: 1769013248 SharedUsed : 18533952, SharedFree : 2437592 PID Process Current 472 ospf 94952 529 fcoecntrl 71972 225 dhclient 0 0 360 ndpm 4848 160 vrrp 83700 508 frrp 104214 186 xstp 38422 374 pim 111860 --More-- ResSize Size Allocs Frees 8716288 573440 94952 0 7917568 262144 1310720 548864 0 7512064 618496 4848 0 4848 804864
PAGE 114
stack-unit unitID Enter the keywords stack-unit then the stack member number to display IFM information for that unit. The range is from 0 to 5. trace-flags Enter the keyword trace-flags to display IFM information for internal trace flags. Defaults none Command Modes • EXEC • EXEC Privilege Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 115
stack-unit unitid Command Modes Command History Example (brief) • EXEC • EXEC Privilege Version 8.3.16.1 (OPTIONAL) Enter the keyword stack-unit then the stack member ID for information on that stack member. The range is 0 to 5. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 116
Fabric Id : C2 Asset tag : test PSOC FW Rev : 0xb ICT Test Date : 0-0-0 ICT Test Info : 0x0 Max Power Req : 31488 Fabric Type : 0x3 Fabric Maj Ver : 0x1 Fabric Min Ver : 0x0 SW Manageability: 0x4 HW Manageability: 0x1 Max Boot Time : 6 minutes Link Tuning : unsupported Auto Reboot : enabled Burned In MAC : 00:01:e8:43:de:e1 No Of MACs :3 Related Commands asset-tag — Assigns and stores a unique asset-tag to the stack member. show version — Displays the Dell Networking OS version.
PAGE 117
save Command Modes Command History Usage Information Enter the keyword save to save the command output. flash: Save to local flash drive (flash://filename [max 20 chars] ). EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Without the page or stack-unit option, the command output is continuous. Use Ctrl-z to interrupt the command output. The save option works with other filtering commands. This allows you to save specific information of a show command.
PAGE 118
Dell#show tech-support stack-unit 1 | save ? flash: Save to local file system (flash://filename (max 20 chars) ) Dell#show tech-support stack-unit 1 | save flash://LauraSave Start saving show command report ....... Dell# Dell#dir Directory of flash: Directory of flash: 1 drwx 4096 2 drwx 2048 3 drwx 4096 4 drwx 4096 5 d--4096 6 -rwx 10303 7 -rwx 7366 8 -rwx 4 9 -rwx 12829 config.
PAGE 119
ICMP statistics: Rcvd: 0 format errors, 0 checksum errors, 0 redirects, 2 unreachable 0 echo, 0 echo reply, 0 mask requests, 0 mask replies, 0 quench 0 parameter, 0 timestamp, 0 info request, 0 other Sent: 0 redirects, 0 unreachable, 0 echo, 0 echo reply 0 mask requests, 0 mask replies, 0 quench, 0 timestamp 0 info reply, 0 time exceeded, 0 parameter problem UDP statistics: Rcvd: 396516 total, 0 checksum errors, 0 no port 0 short packets, 0 bad length, 28746 no port broadcasts, 0 socket full Sent: 16460 tot
PAGE 120
Defaults Not configured. Command Modes • EXEC • EXEC Privilege Command History Version 8.3.16.1 • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.
PAGE 121
Parameters Defaults Command Modes Command History host Enter the name of device. ip-address Enter the IP address of the device in dotted decimal format. • Timeout = 5 seconds • Probe count = 3 • 30 hops max • 40 byte packet size • UDP port = 33434 • EXEC • EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 122
undebug all Disable all debug operations on the system. Syntax undebug all Defaults none Command Modes EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. virtual-ip Configure a virtual IP address for the active management interface. You can configure virtual addresses both for IPv4 independently. Syntax Parameters virtual-ip {ipv4-address} ipv4-address Defaults none Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.
PAGE 123
command is similar to the copy running-config startup-config command. terminal Command Modes Command History Usage Information Control and Monitoring Enter the keyword terminal to copy the current running configuration to the terminal. This command is similar to the show running-config command. EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The write memory command saves the running-configuration to the file labeled startup-configuration.
PAGE 124
PAGE 125
5 802.1X An authentication server must authenticate a client connected to an 802.1X switch port. Until the authentication, only extensible authentication protocol over LAN (EAPOL) traffic is allowed through the port to which a client is connected. After authentication is successful, normal traffic passes through the port. The Dell Networking operating software supports remote authentication dial-in service (RADIUS) and active directory environments using 802.1X Port Authentication.
PAGE 126
Parameters all Enable all 802.1X debug messages. auth-pae-fsm Enable authentication PAE FSM debug messages. backend-fsm Enable backend FSM debug messages. eapol-pdu Enable the EAPOL frame trace and related debug messages. interface interface Restricts the debugging information to an interface. Defaults Disabled Command Modes EXEC Privilege Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 127
Related Commands • dot1x port-control — Enables port control on an interface. • dot1x guest-vlan — Configures a guest VLAN for limited access users or for devices that are not 802.1X capable. • show dot1x interface — Displays the 802.1X configuration of an interface. dot1x auth-server Configure the authentication server to RADIUS. Syntax dot1x auth-server radius Defaults none Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 128
Related Commands dot1x mac-auth-bypass — Enables MAC authentication bypass. dot1x authentication (Configuration) Enable dot1x globally. Enable dot1x both globally and at the interface level. Syntax dot1x authentication To disable dot1x on a globally, use the no dot1x authentication command. Defaults Disabled Command Modes CONFIGURATION Command History Related Commands Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 129
To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command. Parameters vlan-id Enter the VLAN Identifier. The range is from 1 to 4094. Defaults Not configured. Command Modes CONFIGURATION (conf-if-interface-slot/port) Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 1X authentication is enabled when an interface is connected to the switch.
PAGE 130
Defaults single-host Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. • Single-host mode authenticates only one host per authenticator port and drops all other traffic on the port. • Multi-host mode authenticates the first host to respond to an Identity Request and then permits all other traffic on the port. • Multi-supplicant mode authenticates every device attempting to connect to the network on the authenticator port.
PAGE 131
Defaults 2 Command Modes INTERFACE Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. dot1x max-supplicants Restrict the number of supplicants that can be authenticated and permitted to access the network through the port. This configuration is only takes effect in Multi-Auth mode. Syntax Parameters dot1x max-supplicants number number Enter the number of supplicants that can be authenticated on a single port in Multi-Auth mode. The range is from 1 to 128.
PAGE 132
Command Modes Command History Usage Information Auto Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The authenticator completes authentication only when port-control is set to auto. dot1x quiet-period Set the number of seconds that the authenticator remains quiet after a failed authentication with a client. Syntax dot1x quiet-period seconds To disable quiet time, use the no dot1x quiet-time command.
PAGE 133
Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. dot1x reauth-max Configure the maximum number of times a port can reauthenticate before the port becomes unauthorized. Syntax dot1x reauth-max number To return to the default, use the no dot1x reauth-max command. Parameters number Defaults 2 Command Modes INTERFACE Command History Version 9.2(0.0) Enter the permitted number of reauthentications. The range is from 1 to 10. The default is 2.
PAGE 134
value (in seconds) is based on the configured RADIUS-server timeout and retransmit values and calculated according to the following formula: dot1x server-timeout seconds > (radius-server retransmit seconds + 1) * radius-server timeout seconds. Where the default values are as follows: dot1x server-timeout (30 seconds), radius-server retransmit (3 seconds), and radius-server timeout (5 seconds). For example: Dell(conf)#radius-server host 10.11.197.105 timeout 6 Dell(conf)#radius-server host 10.11.197.
PAGE 135
Defaults 30 seconds Command Modes INTERFACE Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show dot1x cos-mapping interface Display the CoS priority-mapping table the RADIUS server provides and applies to authenticated supplicants on an 802.1X-enabled system.
PAGE 136
0 1 2 3 4 5 6 7 7 6 5 4 3 2 1 0 Dell#show dot1x cos-mapping int g 2/21 mac-address 00:00:01:00:07:00 802.1p CoS re-map table on Gi 2/21: ---------------------------------802.1p CoS re-map table for Supplicant: 00:00:01:00:07:00 Dot1 Remapped Dot1p 0 7 1 6 2 5 3 4 4 3 5 2 6 1 7 0 show dot1x interface Display the 802.1X configuration of an interface.
PAGE 137
Usage Information If you enable 802.1X multi-supplicant authentication on a port, additional 802.1X configuration details (Port Authentication status, Untagged VLAN ID, Authentication PAE state, and Backend state) are displayed for each supplicant, as shown in the following example. Example Dell#show dot1x int Gi 2/32 802.
PAGE 138
Auth PAE State: Backend State: Dell# Example (Interface) Authenticated Idle Dell#show dot1x interface g 0/21 802.
PAGE 139
Access Control Lists (ACL) 6 Access control lists (ACLs) are supported by the Dell Networking Operating System (OS).
PAGE 140
Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. remark Enter a description for an ACL entry. Syntax Parameters remark [remark-number] [description] remarknumber Enter the remark number. The range is from 0 to 4294967290. NOTE: You can use the same sequence number for the remark and an ACL rule. description Enter a description of up to 80 characters. Defaults Not configured.
PAGE 141
resequence access-list Re-assign sequence numbers to entries of an existing access-list. Syntax Parameters resequence access-list {ipv4 | mac} {access-list-name StartingSeqNum Step-to-Increment} ipv4 | mac Enter the keyword ipv4 or mac to identify the access list type to resequence. access-listname Enter the name of a configured IP access list. StartingSeqNu m Enter the starting sequence number to resequence. The range is from 0 to 4294967290.
PAGE 142
Defaults none Command Modes • EXEC • EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you have exhausted all the sequence numbers, this feature permits reassigning a new sequence number to entries of an existing prefix list. Related Commands seq — Assigns a sequence number to a deny or permit filter in an IP access list while creating the filter. show config Display the current ACL configuration.
PAGE 143
access-class Apply a standard ACL to a terminal line. Syntax Parameters access-class access-list-name access-listname Defaults Not configured. Command Modes LINE Command History Version 8.3.16.1 Enter the name of a configured Standard ACL, up to 140 characters. Introduced on the MXL 10/40GbE Switch IO Module. clear counters ip access-group Erase all counters maintained for access lists.
PAGE 144
implicit-permit (OPTIONAL) Enter the keyword implicit-permit to change the default action of the ACL from implicit-deny to implicit-permit (that is, if the traffic does not match the filters in the ACL, the traffic is permitted instead of dropped). vlan vlan-id (OPTIONAL) Enter the keyword vlan then the ID numbers of the VLANs. Defaults Not enabled.. Command Modes INTERFACE Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module platform.
PAGE 145
• in Command Modes Command History For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Identify whether ACL is applied on the ingress or egress side. EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip accounting access-list Display the IP access-lists created on the switch and the sequence of filters.
PAGE 146
Example show ip accounting access-lists Field Description “seq 5...” Displays the filter. If the keywords count or byte were configured in the filter, the number of packets or bytes the filter processes is displayed at the end of the line. “order 4” Displays the QoS order of priority for the ACL entry. Dell#show ip accounting access FILTER1 interface gig 1/6 Extended IP access list FILTER1 seq 5 deny ip any 191.1.0.0 /16 count (0x00 packets) seq 10 deny ip any 191.2.0.
PAGE 147
Defaults host ip-address Enter the keyword host then the IP address to specify a host IP address. count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. dscp Enter this keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 148
Usage Information When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 149
Usage Information The Dell operating system supports one ingress and one egress IP ACL per interface. The number of entries allowed per ACL is hardware-dependent. For detailed specifications on entries allowed per ACL, refer to your line card documentation. Example Dell(conf)#ip access-list standard TestList Dell(config-std-nacl)# Related Commands ip access-list extended — creates an extended access list. resequence access-list — Displays the current configuration.
PAGE 150
Defaults order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 151
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 152
order (OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 153
• If sequence-number is configured, the sequence-number is used as a tie breaker for rules with the same order. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 154
deny (for Extended IP ACLs) Configure a filter that drops IP packets meeting the filter criteria. Syntax deny {ip | ip-protocol-number} {source mask | any | host ipaddress} {destination mask | any | host ip-address} [count [byte]] [dscp value] [order] [monitor] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters 154 • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 155
Defaults threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The time interval range is from 1 to 10 minutes.
PAGE 156
Related Commands deny tcp — assigns a filter to deny TCP packets. deny udp — assigns a filter to deny UDP packets. ip access-list extended — creates an extended ACL. deny icmp To drop all or specific internet control message protocol (ICMP) messages, configure a filter.
PAGE 157
keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands.
PAGE 158
ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enablecommand in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction.
PAGE 159
operator port port • fin: finish (no more data from the user) • psh: push function • rst: reset the connection • syn: synchronize sequence numbers • urg: urgent field (OPTIONAL) Enter one of the following logical operand: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port command) Enter the application layer port number. Enter two port numbers if using the range logical operand.
PAGE 160
Defaults threshold-inmsgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
PAGE 161
standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode.
PAGE 162
To remove this filter, you have two choices: Parameters 162 • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no deny udp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
PAGE 163
keyword order, the ACLs have the lowest order by default (255). Defaults fragments Enter the keyword fragments to use ACLs to control packet fragments. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-inmsgs count (OPTIONAL) Enter the threshold-in-msgs keyword then a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs are terminated with the seq, permit, or deny commands.
PAGE 164
ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces Example An ACL rule with a TCP port range of 4000–8000 uses eight entries in the CAM.
PAGE 165
Usage Information The number of entries allowed per ACL is hardware-dependent. For detailed specification on entries allowed per ACL, refer to your line card documentation. Example Dell(conf)#ip access-list extended TESTListEXTEND Dell(config-ext-nacl)# Related Commands ip access-list standard — configures a standard IP access list. resequence access-list — Displays the current configuration. permit (for Extended IP ACLs) To pass IP packets meeting the filter criteria, configure a filter.
PAGE 166
keyword order, the ACLs have the lowest order by default (255). Defaults fragments Enter the keyword fragments to use ACLs to control packet fragments. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands.
PAGE 167
the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port.
PAGE 168
the message type. The range is 0 to 255 for ICMP type and 0 to 255 for ICMP code. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority).
PAGE 169
Usage Information The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 170
mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address.
PAGE 171
byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments.
PAGE 172
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (for example, gt, lt, or range) may require more than one entry. The range of ports is configured in the CAM based on bit mask boundaries; the space required depends on exactly what ports are included in the range. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 173
Related Commands ip access-list extended — creates an extended ACL. permit — assigns a permit filter for IP packets. permit udp — assigns a permit filter for UDP packets. permit udp To pass UDP packets meeting the filter criteria, configure a filter.
PAGE 174
destination Enter the IP address of the network or host to which the packets are sent. count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority).
PAGE 175
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (for example, gt, lt, or range) may require more than one entry. The range of ports is configured in the CAM based on bit mask boundaries; the space required depends on exactly what ports are included in the range. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 176
Related Commands ip access-list extended — creates an extended ACL. permit — assigns a permit filter for IP packets. permit tcp — assigns a permit filter for TCP packets. seq Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter.
PAGE 177
operator (OPTIONAL) Enter one of the following logical operands: • • • • • port port eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for the port parameter.) (OPTIONAL) Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535.
PAGE 178
monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. Defaults By default 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which the ACL logs are generated is five minutes. By default, the flow-based monitoring is not enabled.
PAGE 179
monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
PAGE 180
To delete a MAC access-group, use the no mac access-group mac-listname command. Parameters access-listname Enter the name of a configured MAC access list, up to 140 characters. vlan vlan-range (OPTIONAL) Enter the keyword vlan and then enter a range of VLANs. The range is from 1 to 4094 (you can use IDs 1 to 4094). NOTE: This option is available only with the keywordin option. in Enter the keyword in to configure the ACL to filter incoming traffic.
PAGE 181
show mac access-lists Display all of the Layer 2 ACLs configured in the system, whether or not they are applied to an interface, and the count of matches/mismatches against each ACL entry displayed. Syntax Parameters show mac access-lists [access-list-name] [interface interface] [in | out] access-listname Enter the name of a configured MAC ACL, up to 140 characters.
PAGE 182
in | out Command Modes Command History • EXEC • EXEC Privilege Version 8.3.16.1 • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet and then enter the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE and then enter the slot/port information. • For a VLAN interface enter the keyword VLAN and then the vlan id Identify whether ACL is applied on ingress or egress side. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 183
NOTE: For more information, also refer to the Commands Common to all ACL Types and Common MAC Access List Commands sections. deny To drop packets with a the MAC address specified, configure a filter. Syntax deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log [interval minutes] [threshold—in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 184
Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled. Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD Command History Usage Information Version 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. Version 9.3(0.
PAGE 185
mac access-list standard To configure a standard MAC ACL, name a new or existing MAC access control list (MAC ACL) and enter MAC ACCESS LIST mode. Syntax Parameters mac access-list standard mac-list-name mac-list-name Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Enter a text string as the name of the standard MAC access list (140 character maximum). Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 186
• Parameters Use the no permit {any | mac-source-address mac-sourceaddress-mask} command. any Enter the keyword any to forward all packets received with a MAC address. mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match).
PAGE 187
When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval. If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses.
PAGE 188
mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match). count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes.
PAGE 189
If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 190
Parameters any Enter the keyword any to drop all packets. host macaddress Enter the keyword host and then enter a MAC address to drop packets with that host address. mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask Specify which bits in the MAC address must match. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
PAGE 191
mac access-list extended Name a new or existing extended MAC access control list (extended MAC ACL). Syntax Parameters mac access-list extended access-list-name [cpu-qos] access-listname Enter a text string as the MAC access list name, up to 140 characters. cpu-qos Enter the keyword cpu-qos to assign this ACL to control plane traffic only (CoPP). Defaults None Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 192
permit To pass packets matching the criteria specified, configure a filter. Syntax permit {any | host mac-address | mac-source-address mac-sourceaddress-mask} {any | host mac-address | mac-destination-address mac-destination-address-mask} [ethertype operator] [count [byte]] To remove this filter, you have two choices: • • Parameters Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 193
Defaults Not configured. Command Modes CONFIGURATION-MAC ACCESS LIST-EXTENDED Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. deny — configures a MAC ACL filter to drop packets. seq — configure a MAC ACL filter with a specified sequence number. seq Configure a filter with a specific sequence number.
PAGE 194
The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. ethertype operator (OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes: • ev2 - is the Ethernet II frame format. • llc - is the IEEE 802.3 frame format. • snap - is the IEEE 802.3 SNAP frame format. count (OPTIONAL) Enter the keyword count to count packets the filter processes.
PAGE 195
Defaults Clears “hit” counters for all prefix lists unless a prefix list is specified. Command Modes EXEC Privilege Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip prefix-list — configures a prefix list. deny To drop packets meeting the criteria specified, configure a filter. Syntax Parameters deny ip-prefix [ge min-prefix-length] [le max-prefix-length] ip-prefix Specify an IP prefix in the network/length format. For example, 35.0.0.
PAGE 196
ip prefix-list Enter the PREFIX-LIST mode and configure a prefix list. Syntax Parameters Command Modes Command History ip prefix-list prefix-name prefix-name Enter a string up to 16 characters long as the name of the prefix list, up to 140 characters long. CONFIGURATION Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Prefix lists redistribute OSPF and RIP routes meeting specific criteria.
PAGE 197
If you do not use the ge or le options, only packets with an exact match to the prefix are filtered. Related Commands deny — configures a filter to drop packets. seq — configures a drop or permit filter with a specified sequence number. seq To a deny or permit filter in a prefix list while configuring the filter, assign a sequence number.
PAGE 198
Related Commands deny — configures a filter to drop packets. permit — configures a filter to pass packets. show config Display the current PREFIX-LIST configurations. Syntax show config Command Modes PREFIX-LIST Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-nprefixl)#show config ! ip prefix-list snickers Dell(conf-nprefixl)# show ip prefix-list detail Display details of the configured prefix lists.
PAGE 199
seq 7 deny 200.200.2.0/24 (hit count: 1) seq 10 permit 0.0.0.0/0 le 32 (hit count: 132) Dell# show ip prefix-list summary Display a summary of the configured prefix lists. Syntax Parameters Command Modes Command History Example show ip prefix-list summary [prefix-name] prefix-name • EXEC • EXEC Privilege Version 8.3.16.1 (OPTIONAL) Enter a text string as the name of the prefix list, up to 140 characters. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 200
continue To a route-map entry with a higher sequence number, configure a route-map. Syntax Parameters continue [sequence-number] sequencenumber Defaults Not configured Command Modes ROUTE-MAP Command History Usage Information Version 8.3.16.1 (OPTIONAL) Enter the route map sequence number. The range is from 1 to 65535. The default is: no sequence number Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 201
Related Commands set metric — Specifies a COMMUNITY attribute set automatic-tag — Configures a filter to modify the AS path description Add a description to this route map. Syntax Parameters description description description Defaults none Command Modes ROUTE-MAP Command History Related Commands Version 8.3.16.1 Enter a description to identify the route map (80 characters maximum). Introduced on the MXL 10/40GbE Switch IO Module. route-map — Enables a route map.
PAGE 202
Defaults Not configured. Command Modes ROUTE-MAP Command History Related Commands Version 8.3.16.0 Introduced on the MXL 10/40GbE Switch IO Module. match ip address — redistributes routes that match an IP address. match ip next-hop — redistributes routes that match the next-hop IP address. match ip route-source — redistributes routes that match routes advertised by other routers. match metric — redistributes routes that match a specific metric.
PAGE 203
match tag — redistributes routes that match a specific tag. match ip next-hop To match based on the next-hop IP addresses specified in an IP access list or IP prefix list, configure a filter. Syntax Parameters match ip next-hop {access-list | prefix-list prefix-list-name} access-listname Enter the name of a configured IP access list, up to 140 characters. prefix-list prefix-listname Enter the keywords prefix-list and then enter the name of configured prefix list, up 10 140 characters.
PAGE 204
Parameters access-listname Enter the name of a configured IP access list, up to 140 characters. prefix-list prefix-listname Enter the keywords prefix-list and then enter the name of configured prefix list, up to 140 characters. Defaults Not configured. Command Modes ROUTE-MAP Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. match interface — redistributes routes that match the next-hop interface.
PAGE 205
match ip route-source — redistributes routes that match routes advertised by other routers. match route-type — redistributes routes that match a route type. match tag — redistributes routes that match a specific tag. match route-type To match routes based on the how the route is defined, configure a filter.
PAGE 206
match tag To redistribute only routes that match a specified tag value, configure a filter. Syntax Parameters match tag tag-value tag-value Defaults Not configured. Command Modes ROUTE-MAP Command History Related Commands Version 8.3.16.1 Enter a value as the tag on which to match. The range is from zero (0) to 4294967295. Introduced on the MXL 10/40GbE Switch IO Module. match interface — redistributes routes that match the next-hop interface.
PAGE 207
Defaults Not configured. If you do not define a keyword (permit or deny) for the route map, the permit action is the default. Command Modes Command History CONFIGURATION Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module Usage Information Use caution when you delete route maps because if you do not specify a sequence number, all route maps with the same map-name are deleted when you use the no route-map map-name command.
PAGE 208
To delete a setting, use the no set metric command. Parameters + (OPTIONAL) Enter + to add a metric-value to the redistributed routes. - (OPTIONAL) Enter - to subtract a metric-value from the redistributed routes. metric-value Enter a number as the new metric value. The range is from zero (0) to 4294967295. Defaults Not configured. Command Modes ROUTE-MAP Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 209
Related Commands set automatic-tag — computes the tag value of the route. set metric — specifies the metric value assigned to redistributed routes. set tag — specifies the tag assigned to redistributed routes. set tag To specify a tag for redistributed routes, configure a filter. Syntax Parameters set tag tag-value tag-value Defaults Not configured. Command Modes ROUTE-MAP Command History Related Commands Version 8.3.16.1 Enter a number as the tag. The range is from zero (0) to 4294967295.
PAGE 210
show route-map Display the current route map configurations. Syntax Parameters Command Modes Command History show route-map [map-name] map-name • EXEC • EXEC Privilege Version 8.3.16.1 (OPTIONAL) Enter the name of a configured route map, up to 140 characters. Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show route-map route-map firpo, permit, sequence 10 Match clauses: Set clauses: tag 34 Dell# Related Commands route-map — configures a route map.
PAGE 211
Defaults count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. dscp Enter this keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 212
new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval. If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs.
PAGE 213
Defaults any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address. destination Enter the IP address of the network or host to which the packets are sent. count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
PAGE 214
Command History Usage Information Version 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 215
deny Enter the keyword deny to configure a filter to drop packets meeting this condition. permit Enter the keyword permit to configure a filter to forward packets meeting this criteria. source Enter an IP address in dotted decimal format of the network from which the packet was received. mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
PAGE 216
Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled. Command Modes CONFIGURATION-IP ACCESS-LIST-STANDARD Command History Usage Information Version 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform.
PAGE 217
Related Commands deny — configures a filter to drop packets. permit — configures a filter to forward packets. seq — assigns a sequence number to a deny or permit filter in an IP access list while creating the filter. deny tcp Configure a filter that drops transmission control protocol (TCP) packets meeting the filter criteria.
PAGE 218
• • • • • port port eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for the port command) Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • • • • 218 23 = Telnet 20 and 21 = FTP 25 = SMTP 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent.
PAGE 219
monitor Defaults (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled. Command Modes Command History Usage Information CONFIGURATION-IP ACCESS-LIST-EXTENDED 9.4(0.
PAGE 220
monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
PAGE 221
Parameters source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address. dscp Enter this keyword dscp to deny a packet based on the DSCP value.
PAGE 222
Defaults threshold-inmsgs count (OPTIONAL) Enter the threshold-in-msgs keyword then a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs are terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval then the time period in minutes at which the ACL logs must be generated. The time interval range is from 1 to 10 minutes.
PAGE 223
3 4 5 6 7 8 0001000000000000 0001100000000000 0001110000000000 0001111000000000 0001111100000000 0001111101000000 1111100000000000 1111110000000000 1111111000000000 1111111100000000 1111111111000000 1111111111111111 4096 6144 7168 7680 7936 8000 6143 7167 7679 7935 7999 8000 2048 1024 512 256 64 1 Total Ports: 4001 Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM.
PAGE 224
vlan vlan-id Enter the keyword vlan and then enter the VLAN ID to filter traffic associated with a specific VLAN. The range is 1 to 4094 and 1 to 2094 for ExaScale ( you can use IDs 1 to 4094). To filter all VLAN traffic, specify VLAN 1. ip-address Enter an IP address in dotted decimal format (A.B.C.D) as the target IP address of the ARP. opcode code-number Enter the keyword opcode and then enter the number of the ARP opcode. The range is from 1 to 23.
PAGE 225
Command Modes Command History Usage Information CONFIGURATION-EXTENDED-ACCESS-LIST Version 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platforms. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platforms. Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.4.1.
PAGE 226
When you use the log option, the CP processor logs details the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details. You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or Ether-type (Layer 2) filters. Apply Layer 2 ACLs (ARP and Ether-type) to Layer 2 interfaces only.
PAGE 227
order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) If you did not use the keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 228
If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 229
any Enter the keyword any to match and drop specific Ethernet traffic on the interface. vlan vlan-id Enter the keyword vlan and then enter the VLAN ID to filter traffic associated with a specific VLAN. The range is 1 to 4094 and 1 to 2094 for ExaScale ( you can use IDs 1 to 4094). To filter all VLAN traffic, specify VLAN 1. source-macaddress macaddress-mask Enter a MAC address and mask in the nn:nn:nn:nn:nn format. For the MAC address mask, specify which bits in the MAC address must match.
PAGE 230
Command Modes Command History Usage Information CONFIGURATION-EXTENDED-ACCESS-LIST Version 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platforms. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platforms. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 231
Parameters any Enter the keyword any to specify that all routes are subject to the filter. mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match). count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
PAGE 232
new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval. If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs.
PAGE 233
Defaults mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous (discontiguous). any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host and then enter the IP address to specify a host IP address only. count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
PAGE 234
In the MXL switch, you can configure either count (packets) or count (bytes). However, for an ACL with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) at any given time. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 235
Parameters Defaults source Enter the IP address in dotted decimal format of the network from which the packet was sent. mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address or hostname.
PAGE 236
Command Modes Command History Usage Information CONFIGURATION-STANDARD-ACCESS-LIST Version 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platforms. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platforms. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 237
Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the {destination-mac-address mac-address-mask | any} vlan vlan-id {ip-address | any | opcode code-number} command. destinationmac-address mac-addressmask Enter a MAC address and mask in the nn:nn:nn:nn:nn format. For the MAC address mask, specify which bits in the MAC address must match.
PAGE 238
fragments Enter the keyword fragments to use ACLs to control packet fragments. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
PAGE 239
You cannot include IP, TCP, or UDP filters in an ACL configured with ARP filters. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 240
Parameters protocol-typenumber Enter a number from 600 to FFF as the specific Ethernet type traffic to drop. destinationmac-address mac-addressmask Enter a MAC address and mask in the nn:nn:nn:nn:nn format. For the MAC address mask, specify which bits in the MAC address must match. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
PAGE 241
of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. NOTE: For more information, refer to the Flow-based Monitoring section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide.
PAGE 242
expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval. If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs.
PAGE 243
destination Enter the IP address of the network or host to which the packets are sent. dscp Enter the keyword dscp to deny a packet based on the DSCP value. The range is 0 to 63. message-type (OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type. The range is 0 to 255 for ICMP type and 0 to 255 for ICMP code. count (OPTIONAL) Enter the keyword count to count packets the filter processes.
PAGE 244
Usage Information Version 9.3(0.0) Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 245
Parameters source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host and then enter the IP address to specify a host IP address. dscp Enter the keyword dscp to deny a packet based on the DSCP value.
PAGE 246
interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
PAGE 247
Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Example An ACL rule with a TCP port range of 4000–8000 uses eight entries in the CAM.
PAGE 248
Parameters Defaults source Enter the IP address in dotted decimal format of the network from which the packet was sent. mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address or hostname.
PAGE 249
Command Modes Command History Usage Information CONFIGURATION-EXTENDED-ACCESS-LIST Version 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platforms. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 250
Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit {any | mac-source-address mac-sourceaddress-mask} command. any Enter the keyword any to forward all packets received with a MAC address. mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match.
PAGE 251
Usage Information When the configured maximum threshold is exceeded, generation of logs are stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 252
any Enter the keyword any to filter all packets. mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match). count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes.
PAGE 253
If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 254
host ip-address Enter the keyword host then the IP address to specify a host IP address. bit Enter a flag or combination of bits: • ack: acknowledgement field • fin: finish (no more data from the user) • psh: push function • rst: reset the connection • syn: synchronize sequence numbers • urg: urgent field dscp Enter the keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63.
PAGE 255
keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands.
PAGE 256
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 257
seq arp Configure an egress filter with a sequence number that filters ARP packets meeting this criteria. This command is supported only on 12-port GE line cards with SFP optics. For specifications, refer to your line card documentation.
PAGE 258
numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255). log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
PAGE 259
• The seq sequence-number command is applicable only in an ACL group. • The order option works across ACL groups that have been applied on an interface via the QoS policy framework. • The order option takes precedence over seq sequence-number. • If sequence-number is not configured, the rules with the same order value are ordered according to their configuration order. • If sequence-number is configured, the sequence-number is used as a tie breaker for rules with the same order.
PAGE 260
seq ether-type Configure an egress filter with a specific sequence number that filters traffic with specified types of Ethernet packets. This command is supported only on 12-port GE line cards with SFP optics. For specifications, refer to your line card documentation.
PAGE 261
byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255). log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 262
Usage Information The monitor option is relevant in the context of flow-based monitoring only. For more information, refer to Port Monitoring. The order option is relevant in the context of the Policy QoS feature only. The following applies: • The seq sequence-number command is applicable only in an ACL group. • The order option works across ACL groups that have been applied on an interface via the QoS policy framework. • The order option takes precedence over seq sequence-number.
PAGE 263
seq Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter. Syntax Parameters seq sequence-number {deny | permit} {source [mask] | any | host ip-address}} [count [byte] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count] [monitor] sequencenumber Enter a number from 0 to 4294967290. The range is from 0 to 65534. deny Enter the keyword deny to configure a filter to drop packets meeting this condition.
PAGE 264
interval minutes (OPTIONAL) Enter the keyword interval then by the time period in minutes at which the ACL logs must be generated. The interval range is from 1 to 10 minutes. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
PAGE 265
this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic.
PAGE 266
source Enter an IP address in dotted decimal format of the network from which the packet was received. mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ipv6address Enter the keyword host and then enter the IPv6 address to specify a host IP address or hostname.
PAGE 267
log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
PAGE 268
If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 269
host ipv6address Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zero. operator (OPTIONAL) Enter one of the following logical operand: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two port for the port parameter.) port port (OPTIONAL) Enter the application layer port number.
PAGE 270
Command History Usage Information Version 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 271
Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit tcp {source address mask | any | host ipv6address} {destination address | any | host ipv6-address} command. source address Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format. The range is /0 to /128. The :: notation specifies successive hexadecimal fields of zero.
PAGE 272
• syn: synchronize sequence numbers • urg: urgent field count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 273
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 274
in the /x format. The range is from /0 to /128. The :: notation specifies successive hexadecimal fields of zero. message-type (OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type. The range is from 0 to 255 for ICMP type and from 0 to 255 for ICMP code. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes.
PAGE 275
If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 276
byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. dscp (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255).
PAGE 277
deny udp (for IPv6 ACLs) Configure a filter to drop user datagram protocol (UDP) packets meeting the filter criteria.
PAGE 278
Defaults count (OPTIONAL) Enter the keyword count to count the packets that filter the processes. byte (OPTIONAL) Enter the keyword byte to count the bytes that filter the processes. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 279
and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists.
PAGE 280
port • lt = less than • range = inclusive range of ports (you must specify two ports for the port command) Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: Defaults • 23 = Telnet • 20 and 21= FTP • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent.
PAGE 281
Command History Usage Information Version 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 282
• Parameters Defaults Use the no deny icmp {source address mask | any | host ipv6address} {destination address | any | host ipv6-address} command ` source Enter the IPv6 address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter.
PAGE 283
Version 9.3(0.0) Usage Information Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 284
dscp (OPTIONAL) Enter the keyword dscp to match to the IP DSCP values. order (OPTIONAL) Enter the keyword order to specify the QoS order of priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority). If you do not use the order keyword, the ACLs have the lowest order by default as 255. fragments Enter the keyword fragments to use ACLs to control packet fragments.
PAGE 285
ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress directions.
PAGE 286
PAGE 287
7 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM) This chapter describes the access control list (ACL) VLAN group and content addressable memory (CAM) enhancements. member vlan Add VLAN members to an ACL VLAN group. Syntax Parameters member vlan {VLAN-range} VLAN-range Enter the member VLANs using comma-separated VLAN IDs, a range of VLAN IDs, a single VLAN ID, or a combination.
PAGE 288
ip access-group Apply an egress IP ACL to the ACL VLAN group. Syntax Parameters ip access-group {group name} out implicit-permit group-name Enter the name of the ACL VLAN group where you want the egress IP ACLs applied, up to 140 characters. out Enter the keyword out to apply the ACL to outgoing traffic.
PAGE 289
Command History Version 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform. Usage Information When an ACL-VLAN-Group name or the Access List Group Name contains more than 30 characters, the name is truncated in the show acl-vlan-group command output. Examples The following sample illustrates the output of the show acl-vlan-group command. NOTE: Some group names and some access list names are truncated.
PAGE 290
Group5 Vlan Members : 1,1000 Dell# show cam-acl-vlan Display the number of flow processor (FP) blocks that is allocated for the different VLAN services. Syntax show cam-acl-vlan Command Modes EXEC Privilege Command History Usage Information Version 9.3. (0.0) Introduced on the MXL 10/40GbE Switch IO Module platform. After CAM configuration for ACL VLAN groups is performed, you must reboot the system to enable the settings to be stored in nonvolatile storage.
PAGE 291
Example Field Description VlanAclOpt Number of FP blocks for ACL VLAN optimzation feature. Dell#show cam-acl-vlan -- Chassis Vlan Cam ACL -Current Settings(in block sizes) VlanOpenFlow : 0 VlanIscsi : 2 VlanHp : 1 VlanFcoe : 1 VlanAclOpt : 0 -- Stack unit 0 -Current Settings(in block sizes) VlanOpenFlow : 0 VlanIscsi : 2 VlanHp : 1 VlanFcoe : 1 VlanAclOpt : 0 cam-acl-vlan Allocate the number of flow processor (FP) blocks or entries for VLAN services and processes.
PAGE 292
Command History Usage Information Version 9.3(0.0) Introduced on the MXL platform. The VLAN ContentAware Processor (VCAP) application is a pre-ingress CAP that modifies the VLAN settings before packets are forwarded. To support the ACL CAM optimization functionality, the CAM carving feature is enhanced. A total of four VACP groups are present, of which two are for fixed groups and the other two are for dynamic groups.
PAGE 293
Example 1: Output of the show camusage Command Field Description LineCard Number of the line card that contains information on ACL VLAN groups Portpipe The hardware path that packets follow through a system for ACL optimization CAM-Region Type of area in the CAM block that is used for ACL VLAN groups Total CAM space Total amount of space in the CAM block Used CAM Amount of CAM space that is currently in use Available CAM Amount of CAM space that is free and remaining to be allocated for ACLs
PAGE 294
| 12286 | | 262127 | | 2834 --More-- | IN-L3 FIB | 262141 | 14 | IN-L3-SysFlow | 2878 | 44 Example 2: Output of the show camusage acl Command Dell#show cam-usage acl Linecard|Portpipe| CAM Partition | Total CAM | |Available CAM ========|========|=================|=============| =============|============ 11 | 0 | IN-L2 ACL | 1008 | 0 | 1008 | | IN-L3 ACL | 12288 | 2 | 12286 | | OUT-L2 ACL | 1024 | 2 | 1022 | | OUT-L3 ACL | 1024 | 0 | 1024 Example 3: Output of the show camusage router Command
PAGE 295
Example 4: Output of the show camusage switch Command Dell#show cam-usage switch Linecard|Portpipe| CAM Partition | Total CAM | |Available CAM ========|========|=================|=============| =============|============== 11 | 0 | IN-L2 ACL | 7152 | | 7152 | | IN-L2 FIB | 32768 | | 31687 | | OUT-L2 ACL | 0 | | 0 11 | 1 | IN-L2 ACL | 7152 | | 7152 | | IN-L2 FIB | 32768 | | 31687 | | OUT-L2 ACL | 0 | | 0 Used CAM 0 1081 0 0 1081 0 show running config acl-vlan-group Display the running configuration of al
PAGE 296
Dell#show running-config acl-vlan-group group1 ! acl-vlan-group group1 description Acl Vlan Group1 member vlan 1-10,400-410,500 ip access-group acl1 out implicit-permit Dell# acl-vlan-group Create an ACL VLAN group. Syntax acl-vlan-group {group name} To remove an ACL VLAN group, use the no acl-vlan-group {group name} command. Parameters group-name Specify the name of the ACL VLAN group. The name can contain a maximum 140 characters.
PAGE 297
show acl-vlan-group detail Display all the ACL VLAN Groups or display a specific ACL VLAN Group by name. To display the names in their entirety, the output displays in a line-by-line format. Syntax Parameters show acl-vlan-group detail detail Display information in a line-by-line format to display the names in their entirety. Without the detail option, the output is displayed in a table style and information may be truncated.
PAGE 298
description (ACL VLAN Group) Add a description to the ACL VLAN group. Syntax Parameters description description description Enter a description to identify the ACL VLAN group (80 characters maximum). Default No default behavior or values Command Modes CONFIGURATION (conf-acl-vl-grp) Command History Usage Information 298 Version 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform.
PAGE 299
8 Bidirectional Forwarding Detection (BFD) Bidirectional forwarding detection (BFD) is a detection protocol that provides fast forwarding path failure detection. The Dell Networking Operating System (OS) implementation is based on the standards specified in the IETF Draft draft-ietf-bfd-base-03 and supports BFD on all Layer 3 physical interfaces including virtual local area network (VLAN) interfaces and port-channels.
PAGE 300
Defaults Refer to Parameters. Command Modes ROUTER OSPF ROUTER OSPFv3 ROUTER BGP ROUTER ISIS INTERFACE (BFD for VRRP only) Command History Usage Information Related Commands Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. All neighbors inherit the timer values configured with the bfd neighbor command except in the following cases: • Timer values configured with the isis bfd all-neighbors commands in INTERFACE mode override timer values configured with the bfd neighbor command.
PAGE 301
Command Modes Command History INTERFACE VRRP Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. bfd enable (Configuration) Enable BFD on all interfaces. Syntax bfd enable Disable BFD using the no bfd enable command. Defaults BFD is disabled by default. Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. bfd enable (Interface) Enable BFD on an interface.
PAGE 302
Parameters interval milliseconds Enter the keywords interval to specify non-default BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 100. min_rx milliseconds Enter the keywords min_rx to specify the minimum rate at which the local system would like to receive control packets from the remote system. The range is from 50 to 1000. The default is 100.
PAGE 303
Command History Related Commands Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show bfd neighbors — displays the BFD neighbor information on all interfaces or a specified interface. bfd protocol-liveness Enable the BFD protocol liveness feature. Syntax bfd protocol-liveness Defaults Disabled Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 304
multiplier value Enter the keywords multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3. role [active | passive] Enter the role that the local system assumes: • Active — The active system initiates the BFD session. Both systems can be active for the same session. • Passive — The passive system does not initiate a session. It only responds to a request for session initialization from the active system.
PAGE 305
multiplier value Enter the keyword multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3. role [active | passive] Enter the role that the local system assumes: • Active — The active system initiates the BFD session. Both systems can be active for the same session. • Passive — The passive system does not initiate a session. It only responds to a request for session initialization from the active system.
PAGE 306
role [active | passive] Enter the role that the local system assumes: • Active — The active system initiates the BFD session. Both systems can be active for the same session. • Passive — The passive system does not initiate a session. It only responds to a request for session initialization from the active system. The default is Active. Defaults See Parameters Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 307
Usage Information When you enable a BFD session with a specified BGP neighbor or peer group using the bfd neighbor command, the default BFD session parameters are used (interval: 100 milliseconds, min_rx: 100 milliseconds, multiplier: 3 packets, and role: active) if you have not specified parameters with the bfd neighbor command.
PAGE 308
• The neighbor does not inherit the global BFD disable values configured with the bfd all-neighbor command or configured for the peer group to which the neighbor belongs. • The neighbor only inherits the global timer values configured with the bfd all-neighbor command: interval, min_rx, and multiplier.
PAGE 309
Command History Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show bfd neighbors * - Active session role Ad Dn - Admin Down B - BGP C - CLI I - ISIS O - OSPF R - Static Route (RTM) LocalAddr Clients * 10.1.3.2 RemoteAddr Interface State Rx-int Tx-int Mult 10.1.3.1 Gi 1/3 Up 300 Example (Detail) Dell#show bfd neighbors detail Related Commands bfd neighbor — establishes a BFD session with a neighbor.
PAGE 310
vrrp bfd neighbor Establish a BFD for VRRP session with a neighbor. Syntax Parameters vrrp bfd neighbor ip-address neighbor ipaddress Defaults none Command Modes INTERFACE Command History 310 Version 9.2(0.0) Enter the IP address of the BFD neighbor. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 311
Border Gateway Protocol IPv4 (BGPv4) 9 For detailed information about configuring BGP, refer to the BGP chapter in the Dell Networking OS Configuration Guide.
PAGE 312
ipv6 unicast Defaults Not configured. Command Modes ROUTER BGP Command History Version 9.2(0.0) Enter BGPv6 mode. Introduced on the MXL 10/40GbE Switch IO Module. aggregate-address To minimize the number of entries in the routing table, summarize a range of prefixes.
PAGE 313
Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. At least one of the routes included in the aggregate address must be in the BGP routing table for the configured aggregate to become active. If routes within the aggregate are constantly changing, do not add the as-set parameter to the aggregate as the aggregate flaps to keep track of the changes in the AS_PATH.
PAGE 314
Command History Related Commands Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor add-path — specifies that this neighbor/peer group can send/receive multiple path advertisements. bgp always-compare-med Allows you to enable comparison of the MULTI_EXIT_DISC (MED) attributes in the paths from different external ASs. Syntax bgp always-compare-med To disable comparison of MED, enter no bgp always-compare-med.
PAGE 315
Usage Information Before enabling this feature, enable the enable bgp four-octet-assupportcommand. If you disable the four-octect-support command after using dot or dot+ format, the AS numbers revert to asplain text. When you apply an asnotation, it is reflected in the running-configuration. If you change the notation type, the running-config updates dynamically and the new notation shows.
PAGE 316
Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you enable this command, use the clear ip bgp * command to recompute the best path. bgp bestpath as-path multipath-relax Include prefixes received from different AS paths during multipath calculation. Syntax bgp bestpath as-path multipath-relax To return to the default BGP routing process, use the no bgp bestpath aspath multipath-relax command.
PAGE 317
Usage Information The software compares the MEDs only if the path contains no external autonomous system numbers. If you enable this command, use the clear ip bgp * command to recompute the best path. bgp bestpath med missing-as-best During path selection, indicate preference to paths with missing MED (MULTI_EXIT_DISC) over paths with an advertised MED attribute. Syntax bgp bestpath med missing-as-best To return to the default selection, use the no bgp bestpath med missing-asbest command.
PAGE 318
bgp client-to-client reflection Allows you to enable route reflection between clients in a cluster. Syntax bgp client-to-client reflection To disable client-to-client reflection, use the no bgp client-to-client reflection command. Defaults Enabled when a route reflector is configured. Command Modes ROUTER BGP Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Route reflection to clients is not necessary if all client routers are fully meshed.
PAGE 319
The default format for displaying the cluster-id is dotted decimal, but if you enter the cluster-id as an integer, it is displayed as an integer. Related Commands bgp client-to-client reflection — enables route reflection between the route reflector and clients. neighbor route-reflector-client — configures a route reflector and clients. show ip bgp cluster-list — views paths with a cluster ID. bgp confederation identifier Configure an identifier for a BGP confederation.
PAGE 320
bgp confederation peers Specify the autonomous systems (ASs) that belong to the BGP confederation. Syntax bgp confederation peers as-number [...as-number] To return to the default, use the no bgp confederation peers command. Parameters as-number Enter the AS number. The range is from 0 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format). ...as-number (OPTIONAL) Enter up to 16 confederation numbers.
PAGE 321
Parameters half-life (OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half after the half-life period expires. The range is from 1 to 45. The default is 15 minutes. reuse (OPTIONAL) Enter a number as the reuse value, which is compared to the flapping route’s Penalty value. If the Penalty value is less than the reuse value, the flapping route is once again advertised (or no longer suppressed).
PAGE 322
bgp default local-preference Change the default local preference value for routes exchanged between internal BGP peers. Syntax bgp default local-preference value To return to the default value, use the no bgp default local-preference command. Parameters value Defaults 100 Command Modes ROUTER BGP Command History Version 9.2(0.0) Enter a number to assign to routes as the degree of preference for those routes.
PAGE 323
If you disable the enforce-first-as command, it can be viewed using the show ip protocols command. Related Commands show ip bgp neighbors — views the information the BGP neighbors exchange. show ip protocols — views information on routing protocols. bgp fast-external-failover Enable the fast external failover feature, which immediately resets the BGP session if a link to a directly connected external peer fails.
PAGE 324
Usage Information Routers supporting 4-byte ASNs advertise that function in the OPEN message. The behavior of a 4-byte router is slightly different depending on whether it is speaking to a 2-byte router or a 4-byte router. When creating Confederations, all the routers in the Confederation must be 4 byte or 2 byte identified routers. You cannot mix them. Where the 2-byte format is from 1 to 65535, the 4-byte format is from 1 to 4294967295.
PAGE 325
BGP graceful restart is active only when the neighbor becomes established. Otherwise it is disabled. Graceful-restart applies to all neighbors with established adjacency. bgp non-deterministic-med Compare MEDs of paths from different autonomous systems. Syntax bgp non-deterministic-med To return to the default, use the no bgp non-deterministic-med command. Defaults Disabled (that is, paths/routes for the same destination but from different ASs do not have their MEDs compared).
PAGE 326
Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command is a knob to disable BGP next-hop resolution using BGP learned routes. During the next-hop resolution, only the first route that the next-hop resolves through is verified for the route’s protocol source and is checked if the route is learned from BGP or not. The clear ip bgp command is required for this command to take effect and to keep the BGP database consistent.
PAGE 327
Area 51 Routing for Networks 10.10.10.0/00 Routing Protocol is "bgp 1" Cluster Id is set to 10.10.10.0 Router Id is set to 10.10.10.0 Fast-external-fallover enabled Regular expression evaluation optimization enabled Capable of ROUTE_REFRESH For Address Family IPv4 Unicast BGP table version is 0, main routing table version 0 Distance: external 20 internal 200 local 200 Dell(conf-router_bgp)# Related Commands show ip protocols — views information on all routing protocols enabled and active.
PAGE 328
To return to the default setting, use the no bgp soft-reconfig-backup command. Defaults Off Command Modes ROUTER BGP Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you enable soft-reconfiguration for a neighbor and you execute the clear ip bgp soft in command, the update database stored in the router is replayed and updates are re-evaluated.
PAGE 329
capture bgp-pdu max-buffer-size Set the size of the BGP packet capture buffer. This buffer size pertains to both IPv4 and IPv6 addresses. Syntax Parameters capture bgp-pdu max-buffer-size 100-102400000 100-10240000 0 Defaults 40960000 bytes. Command Modes EXEC Privilege Command History Related Commands Version 9.2(0.0) Enter a size for the capture buffer. Introduced on the MXL 10/40GbE Switch IO Module. capture bgp-pdu neighbor — enables capture of an IPv4 BGP neighbor packet.
PAGE 330
Command Modes Command History Related Commands in (OPTIONAL) Enter the keyword in to activate only inbound policies. out (OPTIONAL) Enter the keyword out to activate only outbound policies. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. bgp recursive-bgp-next-hop — disables next-hop resolution through other routes learned by the BGP. bgp soft-reconfig-backup — turns on BGP Soft Reconfiguration.
PAGE 331
filter-list aspath-name (OPTIONAL) Enter the keywords filter-list then the name of a configured AS-PATH list. regexp regularexpression (OPTIONAL) Enter the keyword regexp then regular expressions. Use one or a combination of the following: • . = (period) any single character (including a white space). • * = (asterisk) the sequences in a pattern (0 or more sequences). • + = (plus) the sequences in a pattern (1 or more sequences).
PAGE 332
Parameters Command Modes Command History peer-groupname Enter the peer group name to reset the BGP sessions within that peer group. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug ip bgp Display all information on BGP, including BGP events, keepalives, notifications, and updates. Syntax debug ip bgp [ip-address | peer-group peer-group-name] [in | out] To disable all BGP debugging, use the no debug ip bgp command.
PAGE 333
debug ip bgp notifications — views information about BGP notifications. debug ip bgp updates — views information about BGP updates. show debugging — views enabled debugging operations. debug ip bgp dampening View information on routes being dampened. Syntax debug ip bgp dampening [in | out] To disable debugging, use the no debug ip bgp dampening command. Parameters Command Modes Command History Related Commands in (OPTIONAL) Enter the keyword in to view only inbound dampened routes.
PAGE 334
Command Modes Command History Usage Information peer-group peer-groupname (OPTIONAL) Enter the keyword peer-group then the name of the peer group. in (OPTIONAL) Enter the keyword in to view only events on inbound BGP messages. out (OPTIONAL) Enter the keyword out to view only events on outbound BGP messages. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To remove all configured debug commands for BGP, enter the no debug ip bgp command.
PAGE 335
Usage Information To remove all configured debug commands for BGP, enter the no debug ip bgp command. debug ip bgp notifications Allows you to view information about BGP notifications received from neighbors. Syntax debug ip bgp [ip-address | peer-group peer-group-name] notifications [in | out] To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] notifications [in | out] command.
PAGE 336
Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-groupname (OPTIONAL) Enter the name of the peer group to disable or enable all routers within the peer group.. Defaults Disabled Command Modes EXEC Privilege Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command turns on BGP soft-reconfiguration inbound debugging. If no neighbor is specified, debug turns on for all neighbors.
PAGE 337
Usage Information To remove all configured debug commands for BGP, enter the no debug ip bgp command. default-metric Allows you to change the metric of redistributed routes to locally originated routes. Use this command with the redistribute command. Syntax default-metric number To return to the default setting, use the no default-metric command. Parameters number Defaults 0 Command Modes ROUTER BGP Command History Version 9.2(0.
PAGE 338
Command Modes Command History Related Commands ROUTER BGP Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. router bgp — enters ROUTER mode on the switch. max-paths Configure the maximum number of parallel routes (multipath support) BGP supports. Syntax max-paths {ebgp | ibgp} number To return to the default values, enter the no maximum-paths command. Parameters ebgp Enter the keyword ebgp to enable multipath support for External BGP routes.
PAGE 339
Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-groupname (OPTIONAL) Enter the name of the peer group. activate Enter the keyword activate to enable the neighbor/peer group in the new AFI/SAFI. Defaults Disabled Command Modes CONFIGURATION-ROUTER-BGP-ADDRESS FAMILY Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 340
Command History Related Commands Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. bgp add-path — allows the advertisement of multiple paths for the same address prefix without the new paths implicitly replacing any previous ones. neighbor advertisement-interval Set the advertisement interval between BGP neighbors or within a BGP peer group.
PAGE 341
Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. seconds Enter a number as the time interval, in seconds, before BGP route updates are sent. The range is from 0 to 3600 seconds. Defaults none Command Modes ROUTER BGP Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor allowas-in Set the number of times an AS number can occur in the AS path.
PAGE 342
neighbor default-originate Inject the default route to a BGP peer or neighbor. Syntax neighbor {ip-address | peer-group-name} default-originate [route-map map-name] To remove a default route, use the no neighbor {ip-address | peergroup-name} default-originate command. Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-groupname Enter the name of the peer group to set the default route of all routers in that peer group.
PAGE 343
Command Modes Command History ROUTER BGP Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor distribute-list Distribute BGP information via an established prefix list. Syntax neighbor {ip-address | peer-group-name} distribute-list prefixlist-name {in | out} To delete a neighbor distribution list, use the no neighbor {ip-address | peer-group-name} distribute-list prefix-list-name {in | out} command.
PAGE 344
neighbor ebgp-multihop Attempt and accept BGP connections to external peers on networks that are not directly connected. Syntax neighbor {ip-address | peer-group-name} ebgp-multihop [ttl] To disallow and disconnect connections, use the no neighbor {ip-address | peer-group-name} ebgp-multihop command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-groupname Enter the name of the peer group.
PAGE 345
Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you enable failover, BGP keeps track of IP or IPv6 ability to reach the peer remote address and the peer local address. Whenever either address becomes unreachable (for example, no active route exists in the routing table for the peer IP or IPv6 destination/local address), BGP brings down the session with the peer. Related Commands show ip bgp neighbors — displays information on the BGP neighbors.
PAGE 346
neighbor local-as To accept external routes from neighbors with a local AS number in the AS number path, configure Internal BGP (IBGP) routers. Syntax neighbor {ip-address | peer-group-name} local-as as-number [noprepend] To return to the default value, use the no neighbor {ip-address | peergroup-name} local-as command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format.
PAGE 347
maximum Enter a number as the maximum number of prefixes allowed for this BGP router. The range is from 1 to 4294967295. threshold (OPTIONAL) Enter a number to be used as a percentage of the maximum value. When the number of prefixes reaches this percentage of the maximum value, the software sends a message. The range is from 1 to 100 percent. The default is 75. warning-only (OPTIONAL) Enter the keyword warning-only to set the router to send a log message when the maximum value is reached.
PAGE 348
password Enter a text string up to 80 characters long. The first character of the password must be a letter. You cannot use spaces in the password. Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Configure the same password on both BGP peers or a connection does not occur.
PAGE 349
peer-groupname Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version 9.2(0.0) Enter the name of a configured peer group. Introduced on the MXL 10/40GbE Switch IO Module. You can assign up to 256 peers to one peer group. When you add a peer to a peer group, it inherits all the peer group’s configured parameters.
PAGE 350
Parameters peer-groupname Defaults Not configured. Command Modes ROUTER BGP Command History Version 9.2(0.0) Enter a text string up to 16 characters long as the name of the peer group. Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you create a peer group, it is disabled (Shut mode). Related Commands neighbor peer-group (assigning peers) — assigns routers to a peer group. neighbor remote-as — assigns a indirectly connected AS to a neighbor or peer group.
PAGE 351
For passive eBGP limits, the Remote AS must be different from the AS for this neighbor. Related Commands neighbor soft-reconfiguration inbound — assigns a subnet to a dynamically configured BGP neighbor. neighbor remote-as — assigns an indirectly connected AS to a neighbor or peer group. neighbor remote-as Create and specify the remote peer to the BGP neighbor.
PAGE 352
neighbor remove-private-as Remove private AS numbers from the AS-PATH of outgoing updates. Syntax neighbor {ip-address | peer-group-name} remove-private-as To return to the default, use the no neighbor {ip-address | peer-groupname} remove-private-as command. Parameters ip-address Enter the IP address of the neighbor to remove the private AS numbers. peer-groupname Enter the name of the peer group to remove the private AS numbers. Defaults Disabled (that is, private AS number are not removed).
PAGE 353
peer-groupname Enter the name of the peer group. map-name Enter the name of an established route map. If the Route map is not configured, the default is deny (to drop all routes). in Enter the keyword in to filter inbound routes. out Enter the keyword out to filter outbound routes. Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 354
Command Modes Command History Usage Information ROUTER BGP Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. A route reflector reflects routes to the neighbors assigned to the cluster. Neighbors in the cluster do not need not to be fully meshed. By default, when you use no route reflector, the internal BGP (IBGP) speakers in the network must be fully meshed.
PAGE 355
Usage Information Peers that are enabled within a peer group are disabled when their peer group is disabled. The neighbor shutdown command terminates all BGP sessions on the BGP neighbor or BGP peer group. Use this command with caution as it terminates the specified BGP sessions. When a neighbor or peer group is shut down, use the show ip bgp summary command to confirm its status. Related Commands show ip bgp summary — displays the current BGP configuration.
PAGE 356
neighbor timers Set keepalive and hold time timers for a BGP neighbor or a peer group. Syntax neighbor {ip-address | peer-group-name} timers keepalive holdtime To return to the default values, use the no neighbor {ip-address | peergroup-name} timers command. Parameters Defaults Command Modes Command History Usage Information ip-address Enter the IP address of the peer router in dotted decimal format.
PAGE 357
To use the closest interface, use the no neighbor {ip-address | peergroup-name} update-source interface command. Parameters ip-address Enter the IP address of the peer router in dotted decimal format. peer-groupname Enter the name of the peer group to disable all routers within the peer group. interface Enter the keyword loopback then a number of the Loopback interface. The range is from 0 to 16383. Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version 9.
PAGE 358
Usage Information In the system best path selection process, the path with the highest weight value is preferred. NOTE: In the system best-path selection process, the path with the highest weight value is preferred. If you configure the set weight command in a route map applied to this neighbor, the weight set in that command overrides the weight set in the neighbor weight command. network Specify the networks for the BGP process and enter them in the BGP routing table.
PAGE 359
Usage Information The system software resolves the network address the network command configures with the routes in the main routing table to ensure that the networks are reachable using non-BGP routes and non-default routes. Related Commands redistribute — redistributes routes into BGP. network backdoor Specify this IGP route as the preferred route. Syntax network ip-address mask backdoor To remove a network, use the no network ip-address mask backdoor command.
PAGE 360
static Enter the keyword static to redistribute manually configured routes. These routes are treated as incomplete routes. route-map map-name (OPTIONAL) Enter the keyword route-map then the name of an established route map. Only the following ROUTE-MAP mode commands are supported: • match ip address • set metric • set tag If the route map is not configured, the default is deny (to drop all routes). Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version 9.
PAGE 361
To stop redistribution of OSPF routes, use the no redistribute ospf process-id command. Parameters process-id Enter the number of the OSPF process. The range is from 1 to 65535. match external {1 | 2} (OPTIONAL) Enter the keywords match external to redistribute OSPF external routes. You can specify 1 or 2 to redistribute those routes only. match internal (OPTIONAL) Enter the keywords match internal to redistribute OSPF internal routes only.
PAGE 362
Command Modes Command History Usage Information CONFIGURATION Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. At least one interface must be in Layer 3 mode for the router bgp command to be accepted. If no interfaces are enabled for Layer 3, an error message appears: % Error: No router id configured Example Dell(conf)#router bgp 3 Dell(conf-router_bgp)# show capture bgp-pdu neighbor Display BGP packet capture information for an IPv4 address on the system.
PAGE 363
0c020a01 04000100 01020080 00000000 PDU[2] : len 19, captured 00:34:51 ago ffffffff ffffffff ffffffff ffffffff 00130400 PDU[3] : len 19, captured 00:34:50 ago ffffffff ffffffff ffffffff ffffffff 00130400 [. . .] Dell# Related Commands capture bgp-pdu max-buffer-size — specifies a size for the capture buffer. show config View the current ROUTER BGP configuration. Syntax show config Command Modes ROUTER BGP Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 364
Command Modes Command History Usage Information network (OPTIONAL) Enter the network address (in dotted decimal format) of the BGP network to view information only on that network. network-mask (OPTIONAL) Enter the network mask (in slash prefix format) of the BGP network address. longer-prefixes (OPTIONAL) Enter the keywords longer-prefixes to view all routes with a common prefix. • EXEC • EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 365
1239 13716 i *> 63.114.8.33 1239 13716 i * 4.21.132.0/23 6461 16422 i *> 6461 16422 i *> 4.24.118.16/30 *> 4.24.145.0/30 *> 4.24.187.12/30 *> 4.24.202.0/30 *> 4.25.88.0/30 3561 3908 i *> 5.0.0.0/9 *> 5.0.0.0/10 *> 5.0.0.0/11 --More-Related Commands 0 18508 701 63.114.8.33 0 18508 209 63.114.8.33 0 18508 701 63.114.8.33 63.114.8.33 63.114.8.33 63.114.8.33 63.114.8.33 0 0 0 0 0 63.114.8.33 63.114.8.33 63.114.8.
PAGE 366
Example Field Description Metric Displays the BGP route’s metric, if assigned. LocPrf Displays the BGP LOCAL_PREF attribute for the route. Weight Displays the route’s weight. Path Lists all the ASs the route passed through to reach the destination network. Dell#show ip bgp cluster-list BGP table version is 64444683, local router ID is 120.1.1.
PAGE 367
You can specify up to eight community numbers to view information on those community groups. local-AS Enter the keywords local-AS to view all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED. All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03) community attribute must not be advertised to external BGP peers. no-advertise Enter the keywords no-advertise to view all routes containing the well-known community attribute of NO_ADVERTISE.
PAGE 368
Example Field Description Metric Displays the BGP route’s metric, if assigned. LocPrf Displays the BGP LOCAL_PREF attribute for the route. Weight Displays the route’s weight. Path Lists all the ASs the route passed through to reach the destination network. Dell>show ip bgp community BGP table version is 3762622, local router ID is 63.114.8.
PAGE 369
show ip bgp community-list View routes that a specific community list affects. Syntax Parameters Command Modes Command History Usage Information show ip bgp [ipv4 unicast] community-list community-list-name [exact-match] ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. communitylist-name Enter the name of a configured IP community list (maximum 140 characters). exact-match Enter the keyword for an exact match of the communities.
PAGE 370
Network Dell# Next Hop Metric LocPrf Weight Path show ip bgp dampened-paths View BGP routes that are dampened (non-active). Syntax show ip bgp [ipv4 unicast] dampened-paths Command Modes • EXEC • EXEC Privilege Command History Usage Information Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp damp command shown in the following example. Field Description Network Displays the network ID to which the route is dampened.
PAGE 371
Command Modes Command History Example • EXEC • EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 372
BGPRst 0 : NumGrCfg 1 : DfrdTmestmp 0 : SnmpTrps 0 : IgnrBestPthASP 0 RstOn 1 : RstMod 1 : RstRole 2 : AFFalgs 7 : RstInt 120 : MaxeorExtInt 361 FixedPartCrt 1 : VarParCrt 1 Packet Capture max allowed length 40960000 : current length 0 Peer Grp List Nbr List Confed Peer List Address Family specific Information AFIndex 0 NdSpFlag 0x41a190b0 : AFRttP 0x41a0d200 : NdRTMMkrP 0x41a19d28 : NdRTMAFTblVer 0 : NdRibCtxAddr 1101110688 NdRibCtxAddrLen 255 : NdAFPrefix 0 : NdAfNLRIP 0 : NdAFNLRILen 0 : NdAFWPtrP 0 NdAF
PAGE 373
Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To view the total number of COMMUNITY attributes found, use the show ip bgp summary command. The text line above the route table states the number of COMMUNITY attributes found. The show ip bgp community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp command output.
PAGE 374
Example Field Description Next Hop Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then local routes exist in the routing table. Metric Displays the BGP route’s metric, if assigned. LocPrf Displays the BGP LOCAL_PREF attribute for the route. Weight Displays the route’s weight. Path Lists all the ASs the route passed through to reach the destination network. Dell#show ip bgp filter-list hello BGP table version is 80227, local router ID is 120.1.1.
PAGE 375
ip-address (OPTIONAL) Enter the IP address (in dotted decimal format) of the BGP network to view information only on that network. mask (OPTIONAL) Enter the network mask (in slash prefix (/x) format) of the BGP network address. filter-list aspath-name (OPTIONAL) Enter the keyword filter-list then the name of a configured AS-PATH ACL. The range is 140 characters. regexp regularexpression Enter a regular expression then use one or a combination of the following characters to match.
PAGE 376
Example Field Description Flaps Displays the number of times the route flapped. Duration Displays the hours:minutes:seconds since the route first flapped. Reuse Displays the hours:minutes:seconds until the flapped route is available. Path Lists all the ASs the flapping route passed through to reach the destination network. Dell>show ip bgp flap-statistics BGP table version is 210851, local router ID is 63.114.8.
PAGE 377
Example Field Description LocPrf Displays the BGP LOCAL_PREF attribute for the route. Weight Displays the route’s weight. Path Lists all the ASs the route passed through to reach the destination network. Dell>show ip bgp inconsistent-as BGP table version is 280852, local router ID is 10.1.2.100 Status codes: s suppressed, d damped, h history, * valid, > best Path source: I - internal, c - confed-external, r redistributed, n - network Origin codes: i - IGP, e - EGP, ? - incomplete Network Next * 3.
PAGE 378
advertisedroutes (OPTIONAL) Enter the keywords advertised-routes to view only the routes the neighbor sent. dampenedroutes (OPTIONAL) Enter the keywords dampened-routes to view information on dampened routes from the BGP neighbor. detail (OPTIONAL) Enter the keyword detail to view neighborspecific internal information for the IPv4 Unicast address family. flap-statistics (OPTIONAL) Enter the keywords flap-statistics to view flap statistics on the neighbor’s routes.
PAGE 379
The Lines Beginning with: Description BGP version Displays the BGP version (always version 4) and the remote router ID. BGP state Displays the neighbor’s BGP state and the amount of time in hours:minutes:seconds it has been in that state.
PAGE 380
The Lines Beginning with: Description Last reset Displays the amount of time since the peering session was last reset. Also states if the peer resets the peering session. If the peering session was never reset, the word never is displayed. Local host: Displays the peering address of the local router and the TCP port number. Foreign host: Displays the peering address of the neighbor and the TCP port number. Example (S4810 S4820T) Dell#show ip bgp neighbors BGP neighbor is 10.10.10.
PAGE 381
Prefix advertised 0, denied 4, withdrawn 0 Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer Prefixes advertised 0, rejected 0, withdrawn 0 from peer Connections established 2; dropped 1 Last reset 00:18:21, due to Maximum prefix limit reached Example (AdvertisedRoutes) Dell>show ip bgp neighbors 192.14.1.5 advertised-routes BGP table version is 74103, local router ID is 33.33.33.
PAGE 382
D 70.70.23.0/24 D 70.70.24.0/24 Dell# Related Commands 100.10.10.2 100.10.10.2 0 0 0 100 200 ? 0 100 200 ? show ip bgp — views the current BGP routing table. show ip bgp next-hop View all next hops (using learned routes only) with current reachability and flap status. This command only displays one path, even if the next hop is reachable by multiple paths. Syntax show ip bgp next-hop Command Modes • EXEC • EXEC Privilege Command History Usage Information Example 382 Version 9.2(0.
PAGE 383
show ip bgp paths View all the BGP path attributes in the BGP database. Syntax Parameters show ip bgp paths [regexp regular-expression] regexp regularexpression Enter a regular expression then use one or a combination of the following characters to match: • . = (period) any single character (including a white space). • * = (asterisk) the sequences in a pattern (zero or more sequences). • + = (plus) the sequences in a pattern (one or more sequences).
PAGE 384
Example Field Description Path Displays the AS path for the route, with the origin code for the route listed last. Numbers listed between braces {} are AS_SET information.
PAGE 385
Example Field Description AS-Path Displays the AS paths for this route, with the origin code for the route listed last. Numbers listed between braces {} are AS_SET information.
PAGE 386
Example E1200-BGP>show ip bgp paths community Total 293 Communities Address Hash Refcount Community 0x1ec88a5c 3 4 209:209 209:6059 209:31272 3908:900 19092:300 0x1e0f10ec 15 4 209:209 209:3039 209:31272 3908:900 19092:300 0x1c902234 37 2 209:209 209:7193 209:21362 3908:900 19092:300 0x1f588cd4 41 24 209:209 209:6253 209:21362 3908:900 19092:300 0x1e805884 46 2 209:209 209:21226 286:777 286:3033 1899:3033 64675:21092 0x1e433f4c 46 8 209:209 209:5097 209:21362 3908:900 19092:300 0x1f173294 48 16 209:209 209
PAGE 387
summary Command Modes Command History Usage Information Example (S4810 S4820T) • EXEC • EXEC Privilege Version 9.2(0.0) (OPTIONAL) Enter the keyword summary to view status information of the peers in that peer group. The output is the same as that found in the show ip bgp summary command. Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp peer-group command shown in the following example.
PAGE 388
Example Dell#show ip bgp peer-group Peer-group RT-PEERS Description: ***peering-with-RT*** BGP version 4 Minimum time between advertisement runs is 30 seconds For address family: IPv4 Unicast BGP neighbor is RT-PEERS Number of peers in this group 20 Peer-group members (* - outbound optimized): 12.1.1.2* 12.1.1.3* 12.1.1.4* 12.1.1.5* 12.1.1.6* 12.2.1.2* 12.2.1.3* 12.2.1.4* 12.2.1.5* 12.2.1.6* 12.3.1.2* 12.3.1.3* 12.3.1.4* 12.3.1.5* 12.3.1.6* 12.4.1.2* 12.4.1.3* 12.4.1.4* 12.4.1.5* 12.4.1.
PAGE 389
NOTE: Enter an escape sequence (CTRL+v) prior to entering the ? regular expression. Command Modes Command History Usage Information Example (S4810) • EXEC • EXEC Privilege Version 9.2(0.0) • [ ] = (brackets) a range of single-character patterns. • ( ) = (parenthesis) groups a series of pattern elements to a single element. • { } = (braces) minimum and the maximum match count. • ^ = (caret) the beginning of the input string.
PAGE 390
11853 11853 11853 *>I 4.19.2.0/23 6167 6167 6167 i *>I 4.19.16.0/23 6167 6167 6167 i *>I 4.21.80.0/22 4200 16559 i *>I 4.21.82.0/24 4200 16559 i *>I 4.21.252.0/23 6389 8063 19198 i *>I 4.23.180.0/24 6128 30576 i *>I 4.36.200.0/21 11854 14135 i *>I 4.67.64.0/22 19281 i *>I 4.78.32.0/21 29748 i *>I 6.1.0.0/16 i *>I 6.2.0.0/22 i *>I 6.3.0.0/18 i 11853 6496 1.1.1.2 0 100 0 2914 701 1.1.1.2 0 100 0 2914 701 1.1.1.2 0 100 0 2914 174 1.1.1.2 0 100 0 2914 174 1.1.1.2 0 100 0 2914 701 1.1.1.
PAGE 391
Field Description paths Displays the number of paths and the amount of memory used. denied paths Displays the number of denied paths and the amount of memory used. BGP path attribute entries Displays the number of BGP path attributes and the amount of memory used to process them. BGP AS-PATH entries Displays the number of BGP AS_PATH attributes processed and the amount of memory used to process them.
PAGE 392
Field Description State/Pfxrcd If the neighbor is in Established stage, the number of network prefixes received. If a maximum limit was configured with the neighbor maximum-prefix command, (prfxd) appears in this column. If the neighbor is not in Established stage, the current stage is displayed (Idle, Connect, Active, OpenSent, OpenConfirm). When the peer is transitioning between states and clearing the routes received, the phrase (Purging) may appear in this column.
PAGE 393
timers bgp Adjust the BGP Keep Alive and Hold Time timers. Syntax timers bgp keepalive holdtime To return to the default, use the no timers bgp command. Parameters keepalive Enter a number for the time interval, in seconds, between keepalive messages sent to the neighbor routers. The range is from 1 to 65535. The default is 60 seconds. holdtime Enter a number for the time interval, in seconds, between the last keepalive message and declaring the router dead. The range is from 3 to 65535.
PAGE 394
Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. distance bgp Define an administrative distance for routes. Syntax distance bgp external-distance internal-distance local-distance To return to default values, use the no distance bgp command. Parameters Defaults Command Modes Command History Usage Information externaldistance Enter a number to assign to routes learned from a neighbor external to the AS. The range is from 1 to 255. The default is 20.
PAGE 395
show ip bgp dampened-paths View BGP routes that are dampened (non-active). Syntax show ip bgp [ipv4 unicast] dampened-paths Command Modes • EXEC • EXEC Privilege Command History Usage Information Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp damp command shown in the following example. Field Description Network Displays the network ID to which the route is dampened.
PAGE 396
set extcommunity rt To set Route Origin community attributes in Route Map, use this feature. Syntax set extcommunity rt {as4 ASN4:NN [non-trans] | ASN:NNNN [nontrans] | IPADDR:NN [non-trans]} [additive] To delete the Route Origin community, use the no set extcommunity command. Parameters as4 ASN4:NN Enter the keyword as4 then the 4-octet AS specific extended community number in the format ASN4:NN (4byte AS number:2-byte community value).
PAGE 397
set extcommunity soo To set extended community site-of-origin in Route Map, use this feature. Syntax set extcommunity soo {as4 ASN4:NN | ASN:NNNN | IPADDR:NN [nontrans]} To delete the site-of-origin community, use the no set extcommunity command. Parameters as4 ASN4:NN Enter the keyword as4 then the 4-octet AS specific extended community number in the format ASN4:NN (4byte AS number:2-byte community value).
PAGE 398
show ip bgp paths extcommunity To display all BGP paths having extended community attributes, use this feature. Syntax show ip bgp paths extcommunity Command Modes • EXEC • EXEC Privilege Command History Usage Information Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp paths extcommunity command shown in the following example. Field Description Address Displays the internal address where the path attribute is stored.
PAGE 399
• Command History Usage Information EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To view the total number of COMMUNITY attributes found, use the show ip bgp summary command. The text line above the route table states the number of COMMUNITY attributes found. The show ip bgp community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp command output.
PAGE 400
command), BGP sends a route-refresh request to the neighbor and receives all of the peer’s updates. Related Commands clear ip bgp — activates inbound policies without resetting the BGP TCP session. clear ip bgp ipv6 unicast soft Clear and reapply policies for IPv6 unicast routes without resetting the TCP connection; that is, perform BGP soft reconfiguration.
PAGE 401
debug ip bgp ipv6 unicast soft-reconfiguration Enable soft-reconfiguration debugging for IPv6 unicast routes. Syntax debug ip bgp [ipv4-address | ipv6-address | peer-group-name] ipv6 unicast soft-reconfiguration To disable debugging, use the no debug ip bgp [ipv4-address | ipv6address | peer-group-name] ipv6 unicast soft-reconfiguration command. Parameters ipv4-address | ipv6-address Enter the IP address of the neighbor on which you want to enable soft-reconfiguration debugging.
PAGE 402
Related Commands show ipv6 prefix-list — View the selected IPv6 prefix-list. show ipv6 prefix-list Displays the specified IPv6 prefix list. Syntax Parameters show ipv6 prefix-list detail {prefix-list name} | summary detail Display a detailed description of the selected IPv6 prefix list. prefix-list name Enter the name of the prefix list. NOTE: There is a 140-character limit for prefix list names. summary Command Modes Command History Related Commands Display a summary of RPF routes.
PAGE 403
summary Command Modes Command History Display a summary of RPF routes. EXEC Version 9.2(0.0) Border Gateway Protocol IPv4 (BGPv4) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 404
PAGE 405
Content Addressable Memory (CAM) 10 Content addressable memory (CAM) commands are supported on the Dell Networking MXL 10/40GbE Switch IO Module. WARNING: If you are using these features for the first time, contact Dell Networking Technical Assistance Center (TAC) for guidance. CAM Profile Commands The CAM profiling feature allows you to partition the CAM to best suit your application.
PAGE 406
qos | vman-qos—dual— number | vman-qos—dual—fp number] ipv4pbr number} ecfmacl number fcoeacl number iscsioptacl number} Parameters default Use the default CAM profile settings and set the CAM as follows: • • • • • • • • • • • 406 L3 ACL (ipv4acl): 4 L2 ACL(l2acl): 5 IPv6 L3 ACL (ipv6acl): 0 L3 QoS (ipv4qos): 1 L2 QoS (l2qos): 1 L2PT (L2PT): 0 MAC ACL (IpMacAcl): 0 VmanDualQos: 0 EcfmAcl: 0 FcoeAcl: 4 iscsiOptAcl: 2 l2acl number Enter the keyword l2acl and then the number of l2acl blocks.
PAGE 407
fcoeacl number Enter the keyword fcoeacl and then the number of FP blocks for FCOE ACL. The range is from 0 to 6. Iscsioptacl number Enter the keyword iscsioptacl and then the number of FP blocks for iSCSI optimization ACL. The range is from 0 to 2. vrfv4acl number Enter the keyword vrfv4acl and then the number of FP blocks for VRF IPv4 ACL. The range is from 0 to 2. NOTE: Use this attribute to specify the number of VRF ACL groups. The total number of VRF ACL groups should not exceed 13.
PAGE 408
On the MXL 10/40GbE switch IO module, there can be only one odd number of Blocks in the CLI configuration; the other Blocks must be in factors of two. For example, a CLI configuration of 5+4+2+1+1 Blocks is not supported; a configuration of 6+4+2+1 Blocks is supported. Ranges for the CAM profiles are from 1 to 10, except for the ipv6acl profile which is from 0 to 10. The ipv6acl allocation must be a factor of two (2, 4, 6, 8, 10).
PAGE 409
Usage Information The display reflects the settings implemented with the cam-acl command.
PAGE 410
Ipv4pbr : 0 Dell# show cam-acl-egress Display the details of the FP groups allocated for the egress ACL. Syntax show cam-acl-egress Defaults none Command Modes Configuration Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The display reflects the settings implemented with the cam-acl-egress command.
PAGE 411
Control Plane Policing (CoPP) 11 The CoPP commands are supported on the Dell Networking MXL 10/40GbE Switch IO Module. control-plane-cpuqos To manage control-plane traffic, enter control-plane mode and configure the switch. Syntax control-plane-cpuqos Defaults Not configured. Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 412
Related Commands qos-policy-input — creates a QoS input policy map. policy-map-input — creates an input policy map. service-policy rate-limit-protocols Apply a policy for the system to rate limit control protocols on a per-protocol basis. Syntax Parameters service-policy rate-limit-protocols policy-name policy-name Enter the service-policy name, using a string up to 32 characters. Defaults Not configured. Command Modes CONTROL-PLANE-CPUQOS Command History Usage Information Version 9.2(0.
PAGE 413
Command Modes Command History Usage Information EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command applies the service-policy based on the type of protocol defined in the ACL rules. Create ACL and QoS policies prior to enabling this command.
PAGE 414
TCP (TELNET) VRRP Dell# any any 23 any _ _ Q6 Q7 CP CP _ _ show ipv6 protocol-queue-mapping Display the queue mapping for each configured IPv6 protocol. Syntax show ipv6 protocol-queue-mapping Defaults Not configured. Command Modes EXEC Privilege Command History Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 415
Dell# Control Plane Policing (CoPP) 09:00:2b:00:00:04/05 any Q7 CP 415
PAGE 416
PAGE 417
Data Center Bridging (DCB) 12 Data center bridging (DCB) refers to a set of IEEE Ethernet enhancements that provide data centers with a single, robust, converged network to support multiple traffic types, including local area network (LAN), server, and storage traffic. The Dell Networking Operating System (OS) commands for data center bridging features include 802.1Qbb priority-based flow control (PFC), 802.1Qaz enhanced transmission selection (ETS), and the data center bridging exchange (DCBX) protocol.
PAGE 418
advertise dcbx-tlv On a DCBX port with a manual role, configure the PFC and ETS TLVs advertised to DCBX peers. Syntax advertise dcbx-tlv {ets-conf | ets-reco | pfc} [ets-conf | etsreco | pfc] [ets-conf | ets-reco | pfc] To remove the advertised ETS TLVs, use the no advertise dcbx-tlv command. Parameters {ets-conf | etsreco | pfc} Enter the PFC and ETS TLVs advertised, where: • ets-conf: enables the advertisement of ETS configuration TLVs. • ets-reco: enables the advertisement of ETS recommend TLVs.
PAGE 419
Parameters percentage (Optional) Enter the bandwidth percentage. The percentage range is from 1 to 100% in units of 1%. Defaults none Command Modes QOS-POLICY-OUT-ETS Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, equal bandwidth is assigned to each port queue and each dot1p priority in a priority group.
PAGE 420
To disable DCB, use the no dcb enable command. Defaults none Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. DCB is not supported if you enable link-level flow control on one or more interfaces.
PAGE 421
NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future. Related Commands dcb-policy input — applies the input policy with the PFC configuration. dcb-output To associate an ETS configuration with priority traffic, create a DCB output policy.
PAGE 422
dcb-policy buffer-threshold (Global Configuration) Assign the DCB policy to the DCB buffer threshold profile on stack ports that applies globally throughout the system. Syntax Parameters dcb-policy buffer-threshold stack-unit all stack-ports all profile-name dcb-bufferthreshold Configure the profile name for the DCB buffer threshold. profile-name Enter the name of the profile, which can be a string of up to 32 characters in length. stack-unit all Enter the stack unit identification.
PAGE 423
Default None Command Modes INTERFACE mode Command History Version 9.3(0.0) Introduced on the MXL platform. Usage Information You can configure a maximum of four lossless (PFC) queues. By configuring four lossless queues, you can configure four different priorities and assign a particular priority to each application that your network is used to process. For example, you can assign a higher priority for time-sensitive applications and a lower priority for other services, such as file transfers.
PAGE 424
• The PFC dot1p priorities result in more than two lossless port queues globally on the switch. • You already enabled link-level flow control. PFC and link-level flow control cannot be enabled at the same time on an interface. In a switch stack, configure all stacked ports with the same PFC configuration. A DCB input policy for PFC applied to an interface may become invalid if you reconfigure the dot1p-queue mapping.
PAGE 425
Version 8.3.16.1 Usage Information Introduced on the MXL 10/40GbE Switch IO Module. The dcb-policy input stack-unit all command overwrites any previous dcb-policy input stack-unit stack-unit-id configurations. Similarly, a dcb-policy input stack-unit stack-unit-id command overwrites any previous dcb-policy input stack-unit all configuration. NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4.(0.0) release.
PAGE 426
Related Commands dcb-output — creates a DCB output policy. dcb-policy output stack-unit stack-ports all Apply the specified DCB output policy on all ports of the switch stack or a single stacked switch. Syntax dcb-policy output stack-unit {all | stack-unit-id} stack-ports all dcb-output-policy-name To remove all DCB output policies applied to the stacked ports, use the no dcbpolicy output stack-unit all command.
PAGE 427
dcb stack-unit all pfc-buffering pfc-port-count pfcqueues Configure the PFC buffer for all switches in the stack. Syntax dcb stack-unit all pfc-buffering pfc-port-count {1-56} pfcqueues {1-2} To remove the configuration for the PFC buffer on all switches in the stack, use the no dcb stack-unit all pfc-buffering pfc-port-count pfc-queues command. Parameters pfc-port-count {1-56} Enter the pfc-port count. The range is 1 to 56. pfc-queues {1-2} Enter the pfc-queue number. The range is 1 to 2.
PAGE 428
To remove the configuration for the PFC buffer on all port pipes in a specified stack unit, use the no dcb stack-unit stack-unit-id [port-set port-setid] pfc-buffering pfc-ports pfc-queues command. Parameters Command Modes Command History Usage Information stack-unit-id Enter the stack unit identification. The range is from 0 to 5. port-set Enter the port-set identification. The only valid port-set ID (port-pipe number) on an MXL Switch is 0. pfc-ports {1-56} Enter the pfc-ports.
PAGE 429
Parameters config-source | autodownstream | auto-upstream | manual Enter the DCBX port role, where: • config-source: configures the port to serve as the configuration source on the switch. • auto-upstream: configures the port to receive a peer configuration. The configuration source is elected from auto-upstream ports. • auto-downstream: configures the port to accept the internally propagated DCB configuration from a configuration source.
PAGE 430
• ieee-v2: configures the port to use IEEE 802.1az (Draft 2.5). Defaults Auto Command Modes INTERFACE PROTOCOL LLDP Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. DCBX requires that you enable LLDP to advertise DCBX TLVs to peers. Configure DCBX operation at the INTERFACE level on a switch or globally on the switch.
PAGE 431
Command Modes Command History EXEC Privilege Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. description Enter a text description of the DCB policy (PFC input or ETS output). Syntax description text To remove the text description, use the no description command. Parameters text Enter the description of the output policy. The maximum is 32 characters.
PAGE 432
Defaults ETS mode is on. Command Modes DCB OUTPUT POLICY Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. If you disable ETS in an output policy applied to an interface using the no ets mode on command, any previously configured QoS settings at the interface or global level takes effect.
PAGE 433
Usage Information This command is available at the global level only. iscsi priority-bits Configure the iSCSI priority advertised for the iSCSI protocol in application priority TLVs. Syntax iscsi priority-bits priority-bitmap To remove the configured iSCSI priority, use the no iscsi priority-bits command. Parameters priority-bitmap Defaults 0x10 Command Modes PROTOCOL LLDP Command History Usage Information Enter the priority-bitmap range. The range is from 1 to FF. Version 9.2(0.
PAGE 434
thresholdvalue Buffer limit at which the port sends the pause to peer in KB. Enter a number in the range of 0 to 7787. The default is 10 KB. resume-offset Buffer offset limit for resuming in KB thresholdvalue Buffer offset limit at which the port resumes the peer in KB. Enter a number in the range of 1 to 7787. The default is 10 KB. sharedthresholdweight Buffer shared threshold weight size Weightage of the priorities on the shared buffer size in the system. Enter a number in the range of 0 to 9.
PAGE 435
pfc link-delay Configure the link delay used to pause specified priority traffic. Syntax pfc link-delay value To remove the link delay, use the no pfc link-delay command. Parameters value Defaults 45556 quantum Command Modes DCB INPUT POLICY Command History The range is (in quanta) from 712 to 65535. One quantum is equal to a 512-bit transmission. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.
PAGE 436
PFC on all DCB egress ports or configure the dot1p priority-queue assignment of PFC priorities to lossless queues (refer to pfc no-drop queues). To disable PFC operation on an interface, enter the no pfc mode on command in DCB Input Policy Configuration mode. PFC is enabled and disabled as global DCB operation is enabled (dcb-enable) or disabled (no dcb-enable). You cannot enable PFC and link-level flow control at the same time on an interface. Related Commands dcb-input — creates a DCB input policy.
PAGE 437
dot1p Value in the Incoming Frame Description heading 2 0 3 1 4 2 5 3 6 3 7 3 pfc priority Configure the CoS traffic to be stopped for the specified delay. Syntax pfc priority priority-range To delete the pfc priority configuration, use the no pfc priority command. Parameters priority-range Defaults none Command Modes DCB INPUT POLICY Command History Usage Information Enter the 802.1p values of the frames to be paused.
PAGE 438
NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future. Related Commands dcb-input — creates a DCB input policy. priority-group To use with an ETS output policy, create an ETS priority group. Syntax priority-group group-name To remove the priority group, use the no priority-group command.
PAGE 439
Related Commands • priority-list — configures the 802.1p priorities for an ETS output policy. • set-pgid — configures the priority-group. priority-group qos-policy Associate the 802.1p priority traffic in a priority group with the ETS configuration in a QoS output policy. Syntax priority-group group-name qos-policy ets-policy-name To remove the 802.1p priority group, use the no priority-group qos-policy command. Parameters group-name Enter the group name of the 802.1p priority group.
PAGE 440
priority-list Configure the 802.1p priorities for the traffic on which you want to apply an ETS output policy. Syntax priority-list value To remove the priority list, use the no priority-list command. Parameters value Enter the priority list value. Separate priority values with a comma; specify a priority range with a dash; for example, priority-list 3,5-7. The range is from 0 to 7. Defaults none Command Modes PRIORITY-GROUP Command History Usage Information Version 9.2(0.
PAGE 441
Command Modes Command History Usage Information CONFIGURATION Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 442
Version 8.3.16.1 Usage Information Introduced on the MXL 10/40GbE Switch IO Module. dot1p priority traffic on the switch is scheduled to the current queue mapping. dot1p priorities within the same queue must have the same traffic properties and scheduling method. ETS-assigned scheduling applies only to data queues, not to control queues. The configuration of bandwidth allocation and strict-queue scheduling is not supported at the same time for a priority group.
PAGE 443
• priority-list — configures the 802.1p priorities. show dcb Displays the data center bridging status, the number of PFC-enabled ports, and the number of PFCenabled queues. Syntax Parameters Command Modes Command History Usage Information show dcb [stack-unit unit-number] unit number Enter the DCB unit number. The range is from 0 to 5. EXEC Privilege Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.
PAGE 444
Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To clear DCBX frame counters, use the clear dcbx counters interface stack-unit/port command. The following describes the show interface dcbx detail command shown in the following example. 444 Field Description Interface Interface type with chassis slot and port number.
PAGE 445
Example Field Description Local DCBX Status: Acknowledgment Number Acknowledgement number transmitted in Control TLVs. Local DCBX Status: Protocol State Current operational state of the DCBX protocol: ACK or INSYNC. Peer DCBX Status: DCBX Operational Version DCBX version advertised in Control TLVs received from the peer device. Peer DCBX Status: DCBX Max Version Supported Highest DCBX version supported in Control TLVs received from the peer device.
PAGE 446
DCBX Operational Status is Enabled Is Configuration Source? TRUE Local DCBX Compatibility mode is CEE Local DCBX Configured mode is CEE Peer Operating version is CEE Local DCBX TLVs Transmitted: ErPfi Local DCBX Status ----------------DCBX Operational Version is 0 DCBX Max Version Supported is 0 Sequence Number: 2 Acknowledgment Number: 2 Protocol State: In-Sync Peer DCBX Status: ---------------DCBX Operational Version is 0 DCBX Max Version Supported is 255 Sequence Number: 2 Acknowledgment Number: 2 Total
PAGE 447
Field Description Interface Interface type with stack-unit and port number. Max Supported TC Group Maximum number of priority groups supported. Number of Traffic Classes Number of 802.1p priorities currently configured. Admin mode ETS mode: on or off. When on, the scheduling and bandwidth allocation configured in an ETS output policy or received in a DCBX TLV from a peer can take effect on an interface.
PAGE 448
Example (Summary) 448 Field Description ETS TLV Statistic: Output Conf TLV pkts Number of ETS Configuration TLVs transmitted. ETS TLV Statistic: Error Conf TLV pkts Number of ETS Error Configuration TLVs received.
PAGE 449
Conf TLV Tx Status is disabled Traffic Class TLV Tx Status is disabled Example (Detail) Dell(conf)# show interfaces tengigabitethernet 0/0 ets detail Interface TenGigabitEthernet 0/0 Max Supported TC Groups is 4 Number of Traffic Classes is 8 Admin mode is on Admin Parameters : -----------------Admin is enabled TC-grp Priority# Bandwidth TSA 0 0,1,2,3,4,5,6,7 100% ETS 1 0% ETS 2 0% ETS 3 0% ETS 4 0% ETS 5 0% ETS 6 0% ETS 7 0% ETS Priority# 0 1 2 3 4 5 6 7 Remote Parameters: ------------------Remote is disa
PAGE 450
TLV Pkts show interface pfc Displays the PFC configuration applied to ingress traffic on an interface, including priorities and link delay. Syntax Parameters Command Modes Command History Usage Information show interface port-type slot/port pfc {summary | detail} port-type slot/ port pfc Enter the port-type slot and port PFC information. {summary | detail} Enter the keyword summary for a summary list of results or enter the keyword detail for a full list of results. INTERFACE Version 9.2(0.
PAGE 451
Field Description Operational status (local port) Port state for current operational PFC configuration: • Init: Local PFC configuration parameters were exchanged with the peer. • Recommend: Remote PFC configuration parameters were received from the peer. • Internally propagated: PFC configuration parameters were received from the configuration source. PFC DCBX Oper status Operational status for the exchange of the PFC configuration on the local port: match (up) or mismatch (down).
PAGE 452
Example (Summary) Field Description PFC TLV Statistics: Error pkts Number of PFC error packets received. PFC TLV Statistics: Pause Tx pkts Number of PFC pause frames transmitted. PFC TLV Statistics: Pause Rx pkts Number of PFC pause frames received.
PAGE 453
show interface pfc statistics Displays counters for the PFC frames received and transmitted (by dot1p priority class) on an interface. Syntax Parameters Command Modes Command History Example (Summary) show interface port-type slot/port pfc statistics port-type Enter the port type. slot/port Enter the slot/port number. INTERFACE Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.
PAGE 454
Usage Information Example NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future. Dell(conf)# show qos dcb-input dcb-input pfc-profile pfc link-delay 32 pfc priority 0-1 dcb-input pfc-profile1 no pfc mode on pfc priority 6-7 show qos dcb-output Displays the ETS configuration in a DCB output policy.
PAGE 455
show qos priority-groups Displays the ETS priority groups configured on the switch, including the 802.1p priority classes and ID of each group. Syntax show qos priority-groups Command Modes EXEC Privilege Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 456
Max Supported TC Groups is 4 Number of Traffic Classes is 1 Admin mode is on Admin Parameters: -------------------Admin is enabled TC-grp Priority# Bandwidth TSA -----------------------------------------------0 0,1,2,3,4,5,6,7 100% ETS 1 - 2 - 3 - 4 - 5 - 6 - 7 - 8 - Stack unit 1 stack port all Max Supported TC Groups is 4 Number of Traffic Classes is 1 Admin mode is on Admin Parameters: -------------------Admin is enabled TC-grp Priority# Bandwidth TSA -----------------------------------------------0 0,1,2
PAGE 457
Parameters KB Enter a number in the range of 0 to 7787. Default None. Command Modes CONFIGURATION mode Command History Usage Information Version 9.3(0.0) Introduced on the MXL platform. Configure the maximum shared buffer available for PFC traffic. You can choose to increase or decrease the shared buffer that is currently allocated in the system by default. You must configure the shared buffer size to be less than the total PFC buffer size.
PAGE 458
Example Dell(conf)#dcb buffer—threshold test dcb enable pfc-queues Configure the number of PFC queues. Syntax Parameters Command Modes Command History dcb enable pfc-queues value value Enter the number of PFC queues. The range is from 1 to 4. The number of ports supported based on lossless queues configured will depend on the buffer. CONFIGURATION mode Version 9.3(0.0) Supported on the MXL 10/40GbE Switch IO Module platform.
PAGE 459
Command Modes Command History INTERFACE mode Version 9.3(0.0) Introduced on the MXL platform. Usage Information You can configure a maximum of four lossless (PFC) queues. By configuring four lossless queues, you can configure four different priorities and assign a particular priority to each application that your network is used to process. For example, you can assign a higher priority for time-sensitive applications and a lower priority for other services, such as file transfers.
PAGE 460
Example Dell(conf)# dcb-policy buffer-threshold stack-unit all stackports all test pfc mode on Enable the PFC configuration on the port so that the priorities are included in DCBX negotiation with peer PFC devices. Syntax pfc mode on To disable the PFC configuration, use the no pfc mode on command. Defaults PFC mode is on. Command Modes DCB MAP Command History Usage Information Version 9.3(0.0) Introduced on the MXL 10/40GbE Switch with the FC Flex IO module.
PAGE 461
Parameters dot1p0_groupnum Enter the priority group number for each 802.1p class of traffic in a DCB map. dot1p1_groupnum dot1p2_groupnum dot1p3_groupnum dot1p4_groupnum dot1p5_groupnum dot1p6_groupnum dot1p7_groupnum Defaults None Command Modes DCB MAP Command History Usage Information Version 9.3(0.0) Introduced on the FC Flex IO module installed in the MXL 10/40GbE Switch module platform. PFC and ETS settings are not pre-configured on Ethernet ports.
PAGE 462
Related Commands dcb-map — creates a DCB map to configure PFC and ETS parameters and applies the PFC and ETS settings on Ethernet ports. priority-group bandwidth pfc— configures the ETS bandwidth allocation and the PFC setting used to manage the port traffic in an 802.1p priority group. qos-policy-buffer Create a QoS policy buffer and enter the configuration mode to configure the no-drop queues, ingress buffer size, buffer limit for pausing, and buffer offset limit for resuming.
PAGE 463
thresholdvalue Buffer offset limit at which the port resumes the peer in KB. Enter a number in the range of 1 to 7787. The default is 10 KB. sharedthresholdweight Buffer shared threshold weight size Weightage of the priorities on the shared buffer size in the system. Enter a number in the range from 0 to 9. The default shared threshold weight is 10. Default The default size of the ingress buffer is 45 KB.
PAGE 464
show qos dcb-map Display the DCB parameters configured in a specified DCB map. FC Flex IO Modules with MXL Syntax Parameters Command Modes Command History Usage Information show qos dcb-map map-name map-name • EXEC • EXEC Privilege Version 9.3(0.0) Displays the PFC and ETS parameters configured in the specified map. Introduced on the FC Flex IO module installed in the MXL 10/40GbE Switch.
PAGE 465
PG:1 TSA:ETS Priorities:3 Related Commands BW:50 PFC:ON dcb-map — creates a DCB map to configure PFC and ETS parameters and applies the PFC and ETS settings on Ethernet ports. show stack-unit stack-ports pfc details Displays the PFC configuration applied to ingress traffic on stacked ports, including PFC Operational mode on each unit with the configured priorities, link delay, and number of pause packets sent and received.
PAGE 466
PAGE 467
Debugging and Diagnostics 13 The basic debugging and diagnostic commands are supported by the Dell Networking Operating System (OS). This chapter contains the following sections: • Offline Diagnostic Commands • Buffer Tuning Commands • Hardware Commands Offline Diagnostic Commands The offline diagnostics test suite is useful for isolating faults and debugging hardware. While tests are running, the Dell operating system results are saved as a text file (TestReport-SU-X.txt) in the flash directory.
PAGE 468
level1 Enter the keyword Level1 to run Level 1 diagnostics. Level 1 diagnostics is a smaller set of diagnostic tests with support for automatic partitioning. They perform status/self test for all the components on the board and test their registers for appropriate values. In addition, they perform extensive tests on memory devices (for example, SDRAM, flash, NVRAM, EEPROM, and CPLD) wherever possible. There are no tests on 10G links. At this level, stack ports are shut down automatically.
PAGE 469
Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The system reboots when the off-line diagnostics complete. This reboot is an automatic process. A warning message appears when the offline stack-unit command is implemented. Warning - Diagnostic execution will cause stack-unit to reboot after completion of diags. Proceed with Offline-Diags [confirm yes/no]:y online stack-unit Place a stack unit in the online state.
PAGE 470
dynamic Enter the keyword dynamic to configure the amount of dynamic buffer space per Field Processor. packetspointers Enter the keywords packets-pointers to configure the number of packet pointers per queue. queue0 number Enter the keyword queue0 and the number to allocate an amount of buffer space or packet pointers to Queue 0. queue1 number queue2 number queue3 number Defaults none Command Modes BUFFER PROFILE Command History Related Commands 470 Version 8.3.16.
PAGE 471
buffer (Configuration) Apply a buffer profile to all Field or Switch Fabric processors in a port-pipe. Syntax Parameters buffer [csf | fp-uplink] port-set port-pipe buffer-policy buffer-profile csf Enter the keyword csf to apply a buffer profile to all Switch Fabric processors in a port-pipe. fp-uplink Enter the keyword fp-uplink to apply a buffer profile to all Field Processors in a a port-pipe. port-set portpipe Enter the keywords port-set then the port-pipe number. The range is 0 to 1.
PAGE 472
buffer-profile (Configuration) Create a buffer profile that can be applied to an interface. Syntax Parameters buffer-profile {fp | csf] profile-name {global {1Q | | 4q} fp Enter the keyword fp to create a buffer profile for the Field Processor. csf Enter the keyword csf to create a buffer profile for the Switch Fabric Processor. profile-name Create a name for the buffer profile, global Apply one of two pre-defined buffer profiles to all of the port-pipes in the system.
PAGE 473
buffer-profile (Interface) Apply a buffer profile to an interface. Syntax Parameters buffer-profile profile-name profile-name Defaults none Command Modes INTERFACE Command History Related Commands Version 8.3.16.1 Enter the name of the buffer profile you want to apply to the interface. Introduced on the MXL 10/40GbE Switch IO Module. buffer-profile (Configuration) – creates a buffer profile that can be applied to an interface.
PAGE 474
Related Commands buffer-profile (Configuration) — Creates a buffer profile that can be applied to an interface. show buffer-profile interface Display the buffer profile that is applied to an interface. Syntax Parameters show buffer-profile {detail | summary} interface interface slot/port detail Display the buffer allocations of a buffer profile. summary Display the Field Processors and Switch Fabric Processors that are applied to the system.
PAGE 475
Hardware Commands These commands display information from a hardware sub-component or ASIC. clear hardware stack-unit Clear statistics from selected hardware components. Syntax Parameters clear hardware stack-unit 0–5 {counters | unit 0–1 counters | cpu data-plane statistics | cpu party-bus statistics | stackport 0–52} stack-unit 0–5 Enter the keywords stack-unit then 0 to 5 to select a particular stack member and then enter one of the following command options to clear a specific collection of data.
PAGE 476
clear hardware system-flow Clear system-flow statistics from selected hardware components. Syntax Parameters clear hardware system-flow layer2 stack-unit 0–5 port-set 0–0 counters stack-unit 0–5 Enter the keywords stack-unit then 0 to 5 to select a particular stack member and then enter one of the following command options to clear a specific collection of data.
PAGE 477
show hardware layer3 Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe. Syntax Parameters show hardware layer3 {acl | qos} stack-unit 0–5 port-set 0–0 acl | qos Enter either the keyword acl or the keyword qos to select between ACL or QoS data. stack-unit 0–5 Enter the keywords stack-unit then a numeral from 0 to 5 to select a stack ID. port-set 0–0 Enter the keyword port-set with a port-pipe number.
PAGE 478
unit and port (1-56), and queue (0-14 or all), and buffer-info. The buffer unit default is 1. phy-firmwareversion Each member of the stack is updated automatically with the latest firmware while booting as well as during OIR. To dump the physical firmware version for stack units, enter the keywords phy-firmware-version.
PAGE 479
===================================================== 41 Present 01.06 01.06 42 Present 01.06 01.06 43 Present 01.06 01.06 44 Present 01.06 01.06 45 Present 01.06 01.06 46 Present 01.06 01.06 47 Present 01.06 01.06 48 Present 01.06 01.06 49 Not Present N/A N/A Dell# In the above example, the Status field represents presence of OPTM ports, Programmed versionfield represents loaded firmware version, and SW version represents the SDK version.
PAGE 480
txPkt(UNIT0) Dell# :0 Example Dell#show hardware stack-unit 0 cpu party-bus statistics Input Statistics: 8189 packets, 8076608 bytes 0 dropped, 0 errors Output Statistics: 366 packets, 133100 bytes 0 errors Dell# Example (drops) Dell#show hard stack-unit 0 drops UNIT No: 0 Total Total Total Total Total Dell# Ingress Drops IngMac Drops Mmu Drops EgMac Drops Egress Drops : : : : : 7841475 0 0 0 43321 Example (drop summary) Dell#show hard stack-unit 0 drops unit 0 Example (drop counters) Dell#show
PAGE 481
L2MC Drops PKT Drops of ANY Conditions Hg MacUnderflow TX Err PKT Counter Dell# Example (portstatistics) Example (register) : : : : 0 0 0 0 25 Dell#show hardware stack-unit 0 unit 0 port-stats ena/ speed/ link auto STP lrn loop port link duplex scan neg? state pause discrd ops back xe0 !ena 1G FD SW Yes Forward Tag F xe1 !ena 1G FD SW Yes Forward Tag F xe2 up 1G FD SW Yes Forward None FA xe3 !ena 1G FD SW Yes Forward Tag F xe4 down 10G FD SW Yes Block None FA xe5 !ena 1G FD SW Yes Forward Tag F xe6 !ena
PAGE 482
0x0333a000 ASF_PORT_SPEED.xe18 = 0x00000000 0x0333e000 ASF_PORT_SPEED.xe19 = 0x00000000 0x03333000 ASF_PORT_SPEED.xe20 = 0x00000000 0x03337000 ASF_PORT_SPEED.xe21 = 0x00000000 0x0333b000 ASF_PORT_SPEED.xe22 = 0x00000000 0x0333f000 ASF_PORT_SPEED.xe23 = 0x00000000 0x03334000 ASF_PORT_SPEED.xe24 = 0x00000000 0x03338000 ASF_PORT_SPEED.xe25 = 0x00000000 0x0333c000 ASF_PORT_SPEED.xe26 = 0x00000000 0x03340000 ASF_PORT_SPEED.xe27 = 0x00000000 0x03335000 ASF_PORT_SPEED.xe28 = 0x00000000 0x03339000 ASF_PORT_SPEED.
PAGE 483
The linkStatus of Front End Port 27 is FALSE The linkStatus of Front End Port 28 is FALSE The linkStatus of Front End Port 29 is FALSE The linkStatus of Front End Port 30 is FALSE The linkStatus of Front End Port 31 is FALSE The linkStatus of Front End Port 32 is FALSE The linkStatus of Front End Port 37 is FALSE !------------------ output truncated ---------------! Example (buffer) Dell(conf)#sh hardware stack-unit 0 buffer total-buffer Dell#sh hardware stack-unit 0 buffer total-buffer Total Buffers alloc
PAGE 484
Parameters acl | qos For the selected stack member and stack member port-pipe, display which system flow entry the packet hits and what queue the packet takes as it dumps the raw system flow tables. stack-unit 0–5 Enter the keywords stack-unit then 0 to 5 to select a stack member ID. port-set 0–0 [counters] Enter the keywords port-set with a port-pipe number. (OPTIONAL) Enter the keyword counters to display hit counters for the selected ACL or QoS option.
PAGE 485
, FPF4=0x00 MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000 , 0x00 action={act=Drop, param0=0(0x00), param1=0(0x00)}, action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)}, action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)}, action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)}, meter=NULL, counter={idx=0, mode=0x01, entries=1} ################ FP Entry for redirecting LLDP BPDU to RSM ################ EID 2047: gid=1, slice=15, slice_idx=0x01, prio=0x7ff, flags=0x82, Instal
PAGE 486
KEY=0x00000000 00000000 00000000 0180c200 00210000 00000000 00000000 , FPF4=0x00 MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000 , 0x00 action={act=Drop, param0=0(0x00), param1=0(0x00)}, action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)}, action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)}, action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)}, meter=NULL, counter={idx=3, mode=0x01, entries=1} ################# FP Entry for redirecting ARP Replies to RSM ############# EID
PAGE 487
Dynamic Host Configuration Protocol (DHCP) 14 Dynamic host configuration protocol (DHCP) is an application layer protocol that dynamically assigns IP addresses and other configuration parameters to network end-stations (hosts) based on the configuration policies the network administrators determine. An MXL switch can operate as a DHCP server or DHCP client. As a DHCP client, the switch requests an IP address from a DHCP server.
PAGE 488
Command Modes Command History Usage Information EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Entering after the clear ip dhcp binding command clears all the IPs from the binding table. debug ip dhcp server Display the Dell Networking OS debugging messages for DHCP. Syntax Parameters debug ip dhcp server [events | packets] events Enter the keyword events to display the DHCP state changes.
PAGE 489
disable Disable the DHCP server. Syntax disable DHCP Server is disabled by default. To enable the system to be a DHCP server, use the no disable command. Defaults Disabled Command Modes DHCP Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. dns-server Assign a DNS server to clients based on address pool. Syntax Parameters dns-server address [address2...address8] address Defaults none Command Modes DHCP Command History Version 8.3.16.
PAGE 490
Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. excluded-address Prevent the server from leasing an address or range of addresses in the pool. Syntax Parameters excluded-address [address | low-address high-address] address Enter a single address to be excluded from the pool. low-address Enter the lowest address in a range of addresses to be excluded from the pool. high-address Enter the highest address in a range of addresses to be excluded from the pool.
PAGE 491
host For manual (rather than automatic) configurations, assign a host to a single-address pool. Syntax Parameters host address address/mask Defaults none Command Modes DHCP Command History Version 8.3.16.1 Enter the host IP address and subnet mask. Introduced on the MXL 10/40GbE Switch IO Module. lease Specify a lease time for the addresses in a pool. Syntax Parameters lease {days [hours] [minutes] | infinite} days Enter the number of days of the lease. The range is from 0 to 31.
PAGE 492
Parameters address Defaults none Command Modes DHCP Command History Version 8.3.16.1 Enter the address of the NETBIOS name server. You may enter up to eight, in order of preference. Introduced on the MXL 10/40GbE Switch IO Module. netbios-node-type Specify the NetBIOS node type for a Microsoft DHCP client. Dell Networking Operating System (OS) recommends specifying clients as hybrid.
PAGE 493
Command Modes Command History DHCP Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp binding Display the DHCP binding table. Syntax show ip dhcp binding Defaults none Command Modes EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp configuration Display the DHCP configuration. Syntax Parameters show ip dhcp configuration [global | pool name] pool name Display the configuration for a DHCP pool.
PAGE 494
Defaults none Command Modes EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp server Display the DHCP server statistics. Syntax show ip dhcp server statistics Defaults none Command Modes EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Commands to Configure the System to be a DHCP Client To configure the system to be a DHCP client, use the following commands.
PAGE 495
interface type slot/port command. If you later enter the no shutdown] command and the lease timer for the dynamic IP address has expired, the IP address is unconfigured and the interface tries to acquire a new dynamic address from DHCP server. You cannot configure a secondary (backup) IP address on an interface using the ip address dhcp command; you must use the ip address command at the interface configuration level.
PAGE 496
Defaults none Command Modes EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug ip dhcp clients events Enable the display of log messages for the following events on DHCP client interfaces: IP address acquisition, IP address release, Renewal of IP address and lease time, and Release of an IP address.
PAGE 497
Defaults none Command Modes EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. release dhcp interface Release the dynamically-acquired IP address on an Ethernet interface while retaining the DHCP client configuration on the interface. Syntax Parameters release dhcp interface type slot/port interface type slot/port Defaults none Command Modes EXEC Privilege Command History Usage Information Version 8.3.16.
PAGE 498
• Defaults none Command Modes EXEC Privilege Command History Usage Information Version 8.3.16.1 For a 40-GigabitEthernet Ethernet interface, enter FortyGigabitEthernet then the slot/port numbers; for example, fortygigabitethernet 0/2. Introduced on the MXL 10/40GbE Switch IO Module. When you enter the renew dhcp command, a new dynamic IP address is acquired on the specified Ethernet interface for the renewed lease time.
PAGE 499
show ip dhcp lease Display lease information about the dynamic IP address currently assigned to a DHCP client-enabled interface. Syntax Parameters show ip dhcp lease [interface type slot/port] interface type slot/port Display DHCP lease information on the specified interface. • For a 10-GigabitEthernet Ethernet interface, enter TenGigabitEthernet then the slot/port numbers; for example, tengigabitethernet 1/3.
PAGE 500
arp inspection-trust Specify a port as trusted so that ARP frames are not validated against the binding table. Syntax arp inspection-trust Defaults Disabled Command Modes • INTERFACE • INTERFACE PORT-CHANNEL Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. arp inspection — enables dynamic ARP inspection on a VLAN. clear ip dhcp snooping Clear the DHCP binding table.
PAGE 501
Usage Information When enabled, no learning takes place until you enable snooping on a VLAN. After disabling DHCP snooping, the binding table is deleted, and Option 82, IP Source Guard, and Dynamic ARP Inspection are disabled. Introduced in the Dell Networking OS version 7.8.1.0, DHCP snooping was available for Layer 3 only and dependent on DHCP Relay Agent (ip helper-address). The Dell Networking OS version 8.2.1.
PAGE 502
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE. Enter the slot and port number of the interface. lease time Enter the keyword lease then the amount of time the IP address are leased. The range is from 1 to 4294967295. none Command Modes • EXEC • EXEC Privilege Related Commands For a Ten-Gigabit Ethernet interface, enter the keyword tengigabitethernet. slot/port Defaults Command History • Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 503
Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp source-address-validation Enable the IP Source Guard. Syntax Parameters [no] ip dhcp source-address-validation [ipmac] ipmac Defaults Disabled Command Modes INTERFACE Command History Usage Information Version 8.3.16.1 Enable IP+MAC Source Address Validation. Introduced on the MXL 10/40GbE Switch IO Module. Allocate at least one FP block to ipmacacl before you can enable IP+MAC Source Address Validation. 1.
PAGE 504
NOTE: Learning only happens if there is a trusted port in the VLAN. Related Commands ip dhcp snooping trust — configures an interface as trusted. ip dhcp relay Enable Option 82. Syntax Parameters ip dhcp relay information-option [remote-id | trust-downstream] remote-id Configure the system to enable the remote-id string in option-82. trustdownstream Configure the system to trust Option 82 when it is received from the previous-hop router.
PAGE 505
Related Commands clear ip dhcp snooping — clears the contents of the DHCP binding table. ip dhcp snooping verify mac-address Validate a DHCP packet’s source hardware address against the client hardware address field (CHADDR) in the payload. Syntax [no] ip dhcp snooping verify mac-address Defaults Disabled Command Modes CONFIGURATION Command History Version 8.3.16.1 Dynamic Host Configuration Protocol (DHCP) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 506
PAGE 507
Equal Cost Multi-Path (ECMP) 15 Equal cost multi-path (ECMP) is supported on the Dell Networking MXL 10/40GbE Switch IO Module. ecmp-group Provides a mechanism to monitor traffic distribution on an ECMP link bundle. A system log is generated when the standard deviation of traffic distribution on a member link exceeds a defined threshold. Syntax ecmp-group {ecmp-group-id interface interface | link-bundlemonitor} To remove the selected interface, use the ecmp-group no interface command.
PAGE 508
hash-algorithm Changes the hash algorithm used to distribute traffic flows across a Port Channel. Syntax hash-algorithm {algorithm-number | {ecmp {crc16 | crc16cc | crc32MSB | crc32LSB | crc-upper | dest-ip | lsb | xor1 | xor2 | xor4 | xor8 | xor16} [number] lag {checksum | crc | xor} [number] nh-ecmp {checksum | crc | xor}[number] linecard number ip-sa-mask value ip-da-mask value | seed seed-value } To return to the default hash algorithm, use the no hash-algorithm command.
PAGE 509
linecard number (OPTIONAL) Enter the keyword linecard then the linecard slot number. ip-sa-mask value (OPTIONAL) Enter the keywords ip-sa-mask then the ECMP/LAG hash mask value. The range is from 0 to FF. The default is FF. ip-da-mask value (OPTIONAL) Enter the keywords ip-da-mask then the ECMP/LAG hash mask value. The range is from 0 to FF. The default is FF. Defaults 0 for hash-algorithm value on TeraScale and ExaScale IPSA and IPDA mask value is FF for a line card.
PAGE 510
• hash-algorithm linecard 2 ip-sa-mask 00 ip-da-mask aa The different hash algorithms are based on the number of Port Channel members and packet values. The default hash algorithm (number 0) yields the most balanced results in various test scenarios, but if the default algorithm does not provide a satisfactory distribution of traffic, use the hash-algorithm command to designate another algorithm.
PAGE 511
The different hash algorithms are based on the number of ECMP group members and packet values. The default hash algorithm yields the most balanced results in various test scenarios, but if the default algorithm does not provide satisfactory distribution of traffic, use this command to designate another algorithm. When a member leaves or is added to the ECMP group, the hash algorithm is recalculated to balance traffic across the members.
PAGE 512
NOTE: While the seed is stored separately on each port-pipe, the same seed is used across all CAMs. You cannot separate LAG and ECMP but you can use different algorithms across the chassis with the same seed. If LAG member ports span multiple port-pipes and line cards, set the seed to the same value on each port-pipe to achieve deterministic behavior. If the hash algorithm configuration is removed, the hash seed does not go to the original factory default setting.
PAGE 513
Parameters Command Modes Command History percent Indicate the threshold value when traffic distribution starts being monitored on an ECMP link bundle. The range is from 1 to 90%. The default is 60%. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. link-bundle-monitor enable Provides a mechanism to enable monitoring of traffic distribution on an ECMP link bundle. Syntax link-bundle-monitor enable To exit from ECMP group mode, use the exit command.
PAGE 514
show link-bundle distribution Display the link-bundle distribution for the interfaces in the bundle, type of bundle (LAG or ECMP), and the most recently calculated interface utilization (either bytes per second rate or maximum rate) for each interface. Syntax show link-bundle-distribution Command Modes EXEC Privilege Command History Example 514 Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 515
FIPS Cryptography 16 To configure federal information processing standards (FIPS) cryptography, use the following commands on the MXL 10/40GbE Switch IO Module. fips mode enable Enable the FIPS cryptography mode on the platform. Syntax [no] fips mode enable To disable the FIPS cryptography mode, use the no fips mode enable command. Default Disabled Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 516
Command History Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show fips status FIPS Mode: Enabled Dell# show ip ssh Display information about established SSH sessions Syntax show ip ssh Defaults none Command Modes EXEC Command History Example EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 517
ssh Open an SSH connection specifying the hostname, username, port number, and version of the SSH client. Syntax Parameters ssh {hostname | ipv4 address | ipv6 address} [-c encryption cipher | -l username | -m HMAC alogorithm | -p port-number | -v {1|2}] hostname (OPTIONAL) Enter the IP address or the hostname of the remote device. ipv4 address (OPTIONAL) Enter the IP address in dotted decimal format A.B.C.D.
PAGE 518
• -p portnumber hmac-sha1–96: Force ssh to use the hmac-sha1–96 HMAC algorithm. (OPTIONAL) Enter the keyword —p then the port number. The range is 1 to 65536 The default is 22 -v {1|2} (OPTIONAL) Enter the keyword —v then the SSH version 1 or 2. The default: The version from the protocol negotiation. NOTE: If the FIPS mode is enabled, this option does not display in the output. Defaults As indicated above. Command Modes EXEC Privilege Command History Example Version 9.2(0.
PAGE 519
17 FIP Snooping In a converged Ethernet network, an MXL Switch can operate as an intermediate Ethernet bridge to snoop on Fibre Channel over Ethernet initialization protocol (FIP) packets during the login process on Fibre Channel over Ethernet (FCoE) forwarders (FCFs). Acting as a transit FIP snooping bridge, the switch uses dynamically-created ACLs to permit only authorized FCoE traffic to be transmitted between an FCoE end-device and an FCF.
PAGE 520
clear fip-snooping statistics Clears the statistics on the FIP packets snooped on all VLANs, a specified VLAN, or a specified port interface. Syntax Parameters Command Modes Command History clear fip-snooping statistics [interface vlan vlan-id | interface port-type port/slot | interface port-channel portchannel-number] vlan-id Enter the VLAN ID of the FIP packet statistics to be cleared. port-type port/ slot Enter the port-type and slot number of the FIP packet statistics to be cleared.
PAGE 521
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. feature fip-snooping Enable FCoE transit and FIP snooping on a switch. Syntax feature fip-snooping To disable the FCoE transit feature, use the no feature fip-snooping command. Defaults Disabled Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 522
fip-snooping fc-map Configure the FC-MAP value FIP snooping uses on all VLANs. Syntax fip-snooping fc-map fc-map-value To return the configured FM-MAP value to the default value, use the no fipsnooping fc-map command. Parameters fc-map-value Enter the FC-MAP value FIP snooping uses. The range is from 0EFC00 to 0EFCFF. Defaults 0x0EFC00 Command Modes • CONFIGURATION • VLAN INTERFACE Command History Version 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 523
show fip-snooping config Display the FIP snooping status and configured FC-MAP values. Syntax show fip-snooping config Command Modes • EXEC • EXEC Privilege Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 524
Example Field Description FC-ID Fibre Channel session ID the FCF assigns. Dell# show fip-snooping enode Enode MAC Enode Interface FCF MAC VLAN FC-ID ----------------------- ---------- ----d4:ae:52:1b:e3:cd Te 0/11 54:7f:ee:37:34:40 100 62:00:11 show fip-snooping fcf Display information on the FCFs in FIP-snooped sessions, including the FCF interface and MAC address, FCF interface, VLAN ID, FC-MAP value, FKA advertisement period, and number of ENodes connected.
PAGE 525
------------54:7f:ee:37:34:40 Po 22 100 0e:fc:00 4000 2 show fip-snooping sessions Display information on FIP-snooped sessions on all VLANs or a specified VLAN, including the ENode interface and MAC address, the FCF interface and MAC address, VLAN ID, FCoE MAC address and FCoE session ID number (FC-ID), worldwide node name (WWNN) and the worldwide port name (WWPN).
PAGE 526
21:00:0e:fc:00:00:00:00 0e:fc:00:01:00:02 01:00:02 21:00:0e:fc:00:00:00:00 0e:fc:00:01:00:03 01:00:03 21:00:0e:fc:00:00:00:00 0e:fc:00:01:00:04 01:00:04 21:00:0e:fc:00:00:00:00 0e:fc:00:01:00:05 01:00:05 21:00:0e:fc:00:00:00:00 41:00:0e:fc:00:00:00:00 41:00:0e:fc:00:00:00:01 41:00:0e:fc:00:00:00:02 41:00:0e:fc:00:00:00:03 show fip-snooping statistics Display statistics on the FIP packets snooped on all interfaces, including VLANs, physical ports, and port channels.
PAGE 527
FIP Snooping Field Description Number of FLOGI Number of FIP-snoop FLOGI request frames received on the interface. Number of FDISC Number of FIP-snoop FDISC request frames received on the interface. Number of FLOGO Number of FIP-snoop FLOGO frames received on the interface Number of ENode Keep Alives Number of FIP-snoop ENode keep-alive frames received on the interface.
PAGE 528
Field Description due to Hardware Config Example Dell# show fip-snooping statistics interface vlan 100 Number of Vlan Requests :0 Number of Vlan Notifications :0 Number of Multicast Discovery Solicits :2 Number of Unicast Discovery Solicits :0 Number of FLOGI :2 Number of FDISC :16 Number of FLOGO :0 Number of Enode Keep Alive :9021 Number of VN Port Keep Alive :3349 Number of Multicast Discovery Advertisement :4437 Number of Unicast Discovery Advertisement :2 Number of FLOGI Accepts :2 Number of FLOGI R
PAGE 529
Number Number Number Number Number Number Number Number Number Number Number Number of of of of of of of of of of of of Multicast Discovery Advertisement :4451 Unicast Discovery Advertisement :2 FLOGI Accepts :2 FLOGI Rejects :0 FDISC Accepts :16 FDISC Rejects :0 FLOGO Accepts :0 FLOGO Rejects :0 CVL :0 FCF Discovery Timeouts :0 VN Port Session Timeouts :0 Session failures due to Hardware Config :0 show fip-snooping system Display information on the status of FIP snooping on the switch (enabled or disabl
PAGE 530
*1 100 530 0X0EFC00 1 2 17 FIP Snooping
PAGE 531
18 Force10 Resilient Ring Protocol (FRRP) Force10 resilient ring protocol (FRRP) is supported on Dell Networking MXL 10/40GbE Switch IO Module. FRRP is a proprietary protocol for that offers fast convergence in a Layer 2 network without having to run the spanning tree protocol (STP). The resilient ring protocol is an efficient protocol that transmits a highspeed token across a ring to verify the link status.
PAGE 532
• Example hello Rx and Tx counters • Topology change Rx and Tx counters • The number of state change counters Dell#clear frrp Clear frrp statistics counter on all ring [confirm] yes Dell#clear frrp 4 Clear frrp statistics counter for ring 4 [confirm] yes Dell# Related Commands show frrp — displays the resilient ring protocol configuration. debug frrp Clear the FRRP statistics counters.
PAGE 533
description Enter an identifying description of the ring. Syntax description Word To remove the ring description, use the no description [Word] command. Parameters Word Enter a description of the ring. Maximum: 255 characters. Defaults none Command Modes CONFIGURATION (conf-frrp) Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. disable Disable the resilient ring protocol. Syntax disable To enable the Resilient Ring Protocol, use the no disable command.
PAGE 534
secondary interface control-vlan vlan-id • Fast Ethernet interface: enter the keyword FastEthernet then the slot/port information. • Port Channel interface: enter the keyword portchannel then a number. The range is from 1 to 128.
PAGE 535
Parameters vlan-range Enter the member VLANs using VLAN IDs (separated by commas), a range of VLAN IDs (separated by a hyphen), a single VLAN ID, or a combination. For example: VLAN IDs (comma-separated): 3, 4, 6. Range (hyphen-separated): 5-10. Combination: 3, 4, 5-10, 8. Defaults none Command Modes CONFIGURATION (conf-frrp) Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. mode Set the Master or Transit mode of the ring.
PAGE 536
Defaults none Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command places you into the resilient ring protocol. After executing this command, the command line prompt changes to conf-frrp. show frrp Display the resilient ring protocol configuration. Syntax Parameters show frrp [ring-id [summary]] | [summary] ring-id Enter the ring identification number.
PAGE 537
Secondary: Port-channel 100 State: Blocking Control Vlan: 1 Ring protocol Timers: Hello-Interval 50 msec Dead-Interval 150 msec Ring Master's MAC Address is 00:01:e8:13:a3:19 Topology Change Statistics: Tx:110 Rx:45 Hello Statistics: Tx:13028 Rx:12348 Number of state Changes: 34 Member Vlans: 1000-1009 Dell# Example (2 Summary) Dell#show frrp 2 summary Related Commands protocol frrp — enters the resilient ring protocol and designate a ring identification.
PAGE 538
Command Modes Command History Usage Information 538 CONFIGURATION (conf-frrp) Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The hello interval command is the interval at which ring frames are generated from the primary interface of the master node. The dead interval command is the time that elapses before a time-out occurs.
PAGE 539
GARP VLAN Registration (GVRP) 19 The Dell Networking Operating System (OS) supports the basic GVRP commands. The generic attribute registration protocol (GARP) mechanism allows the configuration of a GARP participant to propagate through a network quickly. A GARP participant registers or de-registers its attributes with other participants by making or withdrawing declarations of attributes. At the same time, based on received declarations or withdrawals, GARP handles attributes of other participants.
PAGE 540
• VLANs created dynamically with GVRP exist only as long as a GVRP-enabled device is sending updates. If the devices no longer send updates, or GVRP is disabled, or the system is rebooted, all dynamic VLANs are removed. • GVRP manages the active topology, not non-topological data such as VLAN protocols. If a local bridge must classify and analyze packets by VLAN protocols, manually configure protocol-based VLANs, and simply rely on GVRP for VLAN updates.
PAGE 541
Parameters config Enter the keyword config to enable debugging on the GVRP configuration. event Enter the keyword event to enable debugging on the JOIN/ LEAVE events. pdu Enter the keyword pdu then one of the following Interface keywords and slot/port or number information: Defaults Disabled. Command Modes EXEC Command History Version 8.3.16.1 • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 542
garp timers Set the intervals (in milliseconds) for sending GARP messages. Syntax garp timers {join | leave | leave-all} To return to the previous setting, use the no garp timers {join | leave | leave-all} command. Parameters join Enter the keyword join then the number of milliseconds to configure the join time. The range is from 100 to 147483647 milliseconds. The default is 200 milliseconds. NOTE: Designate the milliseconds in multiples of 100.
PAGE 543
gvrp enable Enable GVRP on physical interfaces and LAGs. Syntax gvrp enable To disable GVRP on the interface, use the no gvrp enable command. Defaults Disabled. Command Modes CONFIGURATION-INTERFACE Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. disable — globally disables GVRP. gvrp registration Configure the GVRP register type. Syntax gvrp registration {fixed | normal | forbidden} To return to the default, use the gvrp register normal command.
PAGE 544
To advertise or learn about VLANs through GVRP, use the forbidden command when you do not want the interface. Related Commands show gvrp — displays the GVRP configuration including the registration. protocol gvrp Access GVRP protocol — (config-gvrp)#. Syntax protocol gvrp Defaults Disabled. Command Modes CONFIGURATION Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. disable — globally disables GVRP.
PAGE 545
Defaults none Command Modes • EXEC • EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show garp timers GARP Timers Value (milliseconds) ---------------------------------------Join Timer 200 Leave Timer 600 LeaveAll Timer 10000 Dell# Related Commands garp timers — sets the intervals (in milliseconds) for sending GARP messages. show gvrp Display the GVRP configuration.
PAGE 546
Example R3#show gvrp brief GVRP Feature is currently enabled. Port GVRP Status Edge-Port ---------------------------------------------Gi 3/0 Disabled No Gi 3/1 Disabled No Gi 3/2 Enabled No Gi 3/3 Disabled No Gi 3/4 Disabled No Gi 3/5 Disabled No Gi 3/6 Disabled No Gi 3/7 Disabled No Gi 3/8 Disabled No R3#show gvrp brief Related Commands show gvrp statistics — displays the GVRP statistics. clear gvrp statistics Clear GVRP statistics on an interface.
PAGE 547
• The attribute that was being parsed had an invalid attribute length. • The attribute that was being parsed had an invalid GARP event. • The attribute that was being parsed had an invalid VLAN ID. The valid range is 1 - 4095. A failed registration can occur for the following reasons: Example • Join requests were received on a port that was blocked from learning dynamic VLANs (GVRP Blocking state). • An entry for a new GVRP VLAN could not be created in the GVRP database.
PAGE 548
* 1 Active G 10 Active leanred vlan) Dell Related Commands 548 U Te 3/20 U Te 5/20-21 G Po128(Te 5/49) (dynamically show gvrp statistics — displays the GVRP statistics.
PAGE 549
Internet Group Management Protocol (IGMP) 20 The IGMP commands are supported by the Dell Networking Operating System (OS). IGMP Snooping Commands The Dell Networking OS supports IGMP Snooping version 2 and 3 on all Dell Networking systems. Important Points to Remember for IGMP Snooping • The Dell Networking OS supports version 1, version 2, and version 3 hosts.
PAGE 550
• If the IP SA of the incoming IGMP general query is higher than the VLAN IP address, the switch continues to work as an IGMP snooping Querier. ip igmp access-group To specify access control for packets, use this feature. Syntax ip igmp access-group access-list To remove the feature, use the no ip igmp access-group access-list command. Parameters access-list Enter the name of the extended ACL (16 characters maximum).
PAGE 551
ip igmp querier-timeout Change the interval that must pass before a multicast router decides that there is no longer another multicast router that should be the querier. Syntax ip igmp querier-timeout seconds To return to the default value, use the no ip igmp querier-timeout command. Parameters seconds Defaults 125 seconds Command Modes INTERFACE Command History Version 8.3.16.1 Enter the number of seconds the router must wait to become the new querier. The range is from 60 to 300.
PAGE 552
ip igmp query-max-resp-time Set the maximum query response time advertised in general queries. Syntax ip igmp query-max-resp-time seconds To return to the default values, use the no ip igmp query-max-resp-time command. Parameters seconds Defaults 10 seconds Command Modes INTERFACE Command History Version 8.3.16.1 Enter the number of seconds for the maximum response time. The range is from 1 to 25. The default is 10 seconds. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 553
Defaults Disabled. Command Modes • CONFIGURATION • INTERFACE VLAN Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To enable IGMP snooping, enter this command. When you enable this command from CONFIGURATION mode, IGMP snooping enables on all VLAN interfaces (except the default VLAN). NOTE: Execute the no shutdown command on the VLAN interface for IGMP Snooping to function. Related Commands shutdown — (no shutdown) activates an interface.
PAGE 554
Defaults Enabled. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When you disable flooding, unregistered multicast data traffic is forwarded to only multicast router ports, both static and dynamic, in a VLAN. If there is no multicast router port in a VLAN, unregistered multicast data traffic is dropped.
PAGE 555
To delete a specific multicast router interface, use the no igmp snooping mrouter interface interface command. Parameters interface interface Enter the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a Port Channel interface, enter the keywords portchannel then a number.
PAGE 556
show ip igmp snooping mrouter Display multicast router interfaces. Syntax Parameters Command Modes Command History Example 556 show ip igmp snooping mrouter [vlan number] vlan number • EXEC • EXEC Privilege Version 8.3.16.1 Enter the keyword vlan then the VLAN number. The range is from 1 to 4094. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 557
21 Interfaces The commands in this chapter are supported by Dell Networking Operating System (OS). This chapter contains the following sections: • Basic Interface Commands • Port Channel Commands • Time Domain Reflectometer (TDR) Basic Interface Commands The following commands are for Physical, Loopback, and Null interfaces.
PAGE 558
vrrp vrid] (OPTIONAL) Enter the keyword vrrp to clear the counters of all VRRP groups. To clear the counters of a specified group, enter a VRID number from 1 to 255. vrrp [vrf instance] (OPTIONAL) Enter the keyword vrrp to clear the counters of all VRRP groups. To clear the counters of VRRP groups in a specified VRF instance, enter the name of the instance (32 characters maximum).
PAGE 559
Defaults Without an interface specified, the command clears all interface dampening counters. Command Modes EXEC Privilege Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information On the MXL switch, after you enter the clear counters command and verify the results with the show interfaces command, the line rate is not reset to 0.00%.
PAGE 560
For details about using XFP ports with CX4 cables, refer to your MXL switch hardware guide. Example (Unsuccessful) Dell#show interfaces tengigabitethernet 0/26 | grep "XFP type" Pluggable media present, XFP type is 10GBASE-CX4 Dell(conf-if-te-0/26)#cx4-cable-length short % Error: Unsupported command. Dell(conf-if-te-0/26)#cx4-cable-length medium % Error: Unsupported command. Dell(conf-if-te-0/26)#cx4-cable-length long % Error: Unsupported command.
PAGE 561
max-suppresstime Defaults Disabled. Command Modes INTERFACE (conf-if-) Command History Usage Information Enter the maximum number for which a route can be suppressed. The default is four times the half-life value. The range is from 1 to 86400. The default is 20 seconds. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 562
Defaults none Command Modes INTERFACE Command History Usage Information Related Commands Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Important Points to Remember: • Spaces between characters are not preserved after entering this command unless you enclose the entire description in quotation marks (“desc_text”).
PAGE 563
Usage Information This command applies to any physical interface with speed set to 1000/10000. Related Commands speed (for 1000/10000/auto interfaces) — sets the speed on the Base-T Ethernet interface. NOTE: Starting with the Dell Networking OS version 7.8.1.0, when you use a copper SFP2 module with catalog number GP-SFP2-1T in the S25P module, you can manually set its speed with the speed command. When you set the speed to 10 Mbps or 100 Mbps, you can also execute the duplex command.
PAGE 564
the pause operation instruct the MAC to enable the reception of frames with a destination address equal to this multicast address. The pause: • • Starts when either the packet pointer or the buffer threshold is met (whichever is met first). When the discard threshold is met, packets are dropped. Ends when both the packet pointer and the buffer threshold fall below 50% of the threshold settings. The discard threshold defines when the interface starts dropping the packet on the interface.
PAGE 565
LocRxConf LocTxConf RemoteRxConf RemoteTxConf off off off off off on on off on on Related Commands off on off off on on off on off on on off off off on on off on off on on on off off on on off on off on LocNegRx off off off off LocNegTx RemNegRx RemNegTx off off off off off off off off off off off off off off off off off off on off off off on off off off off off off on on on off off on on off off on on off on on on off off on on off off on on off off on on off off on on show runn
PAGE 566
Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a Fibre Channel interface, enter the keyword FibreChannel, then the slot/port information. Version 9.4(0.0) Added the support for interfaces. Version 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 567
Parameters number Defaults Not configured. Command Modes CONFIGURATION Command History Enter a number as the interface number. The range is from 0 to 16383. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell(conf)#interface loopback 1655 Dell(conf-if-lo-1655)# Related Commands interface — configures a physical interface.
PAGE 568
Example Dell(conf)#interface managementethernet 0/0 Dell(conf-if-ma-0/0)# interface null Configure a Null interface on the switch. Syntax Parameters interface null number number Enter zero (0) as the Null interface number. Defaults Not configured; number = 0 Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 569
Parameters interface, interface,... Enter the keywords interface range and one of the interfaces — slot/port, port-channel, or VLAN number. Select the range of interfaces for bulk configuration. You can enter up to six comma-separated ranges. Spaces are not required between the commas. Comma-separated ranges can include VLANs, port-channels, and physical interfaces. Slot/Port information must contain a space before and after the dash.
PAGE 570
Example (Bulk) Dell(conf)#interface range so 2/0-1, te 10/0, gi 3/0, fa 0/0 % Warning: Non-existing ports (not configured) are ignored by interface-range Example (Multiple Ports) Dell(conf)#interface range gi 2/0 - 23, gi 2/1 - 10 Dell(conf-if-range-gi-2/0-23# Example (Overlapping Ports) Dell(conf)#interface range gi 2/1 - 11, gi 2/1 - 23 Dell(conf-if-range-gi-2/1-23# Usage Information Only VLAN and port-channel interfaces created using the interface vlan and interface port-channel commands can be us
PAGE 571
interface vlan — configures a VLAN interface. show config (from INTERFACE RANGE mode) — shows the bulk configuration interfaces. show range — shows the bulk configuration ranges. interface range macro (define) Defines a macro for an interface range and then saves the macro in the running configuration. Syntax Parameters define interface range macro name interface , interface , ... name Enter up to 16 characters for the macro name. interface, interface,...
PAGE 572
Example (Single Range) This example shows how to define an interface range macro named test. Execute the show running-config command to display the macro definition.
PAGE 573
interface vlan Configure a VLAN. You can configure up to 4096 VLANs. Syntax interface vlan vlan-id To delete a VLAN, use the no interface vlan vlan-id command. Parameters vlan-id Enter a number as the VLAN Identifier. The range is from 1 to 4096. Defaults Not configured, except for the Default VLAN, which is configured as VLAN 1. Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 574
Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information If you configure interface type as CR4 with auto-negotiation enabled, also configure CR4 with auto-negotiation. Many DAC cable link issues are resolved by setting the interface type as CR4. Related Commands interface — configures a physical interface.
PAGE 575
monitor interface Monitor counters on a single interface or all interfaces on a line card. The screen is refreshed every five seconds and the CLI prompt disappears. Syntax monitor interface [interface] To disable monitoring and return to the CLI prompt, press the q key.
PAGE 576
Example (Single Interface) Key Description l Change the view to the next interface on the line card, or if in line card mode, the next line card in the chassis. a Change the view to the previous interface on the line card, or if in line card mode, the previous line card in the chassis. T Increase the screen refresh rate. t Decrease the screen refresh rate. q Return to the CLI prompt. systest-3 Monitor time: 00:00:06 Refresh Intvl.
PAGE 577
Defaults 1554 Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. If the packet includes a Layer 2 header, the difference between the link MTU and IP MTU (ip mtu command) must be enough bytes to include the Layer 2 header.
PAGE 578
Layer 2 Overhead Link MTU and IP MTU Delta Tagged Packet with VLAN-Stack Header 26 bytes negotiation auto Enable auto-negotiation on an interface. Syntax negotiation auto To disable auto-negotiation, use the no negotiation auto command. Defaults Enabled. Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 579
Example (Master/Slave) Dell(conf)# int tengig 0/0 Dell(conf-if)#neg auto Dell(conf-if-autoneg)# ? end Exit from configuration mode exit Exit from autoneg configuration mode mode Specify autoneg mode no Negate a command or set its defaults show Show autoneg configuration information Dell(conf-if-autoneg)#mode ? forced-master Force port to master mode forced-slave Force port to slave mode Dell(conf-if-autoneg)# Example (Master/Slave, partial) Dell#show interfaces configured TenGigabitEthernet 13/18 is up,
PAGE 580
• Up at 100 Mb/s • Down • Down * You cannot disable auto-negotiation when the speed is set to 1000 or auto. Related Commands speed (for 1000/10000 interfaces) — sets the link speed to 1000, 10000, or autonegotiate the speed. portmode hybrid To accept both tagged and untagged frames, set a physical port or port-channel. A port configured this way is identified as a hybrid port in report displays.
PAGE 581
NOTE: Remove all other configurations on the port before you can remove the hybrid configuration from the port.
PAGE 582
rate-interval Configure the traffic sampling interval on the selected interface. Syntax Parameters rate-interval seconds seconds Enter the number of seconds for which to collect traffic data. The range is from 5 to 299 seconds. NOTE: For 0 to 5 seconds, polling occurs every 5 seconds. For 6 to 10 seconds, polling occurs every 10 seconds. For any other value, polling occurs every 15 seconds. Defaults 299 seconds Command Modes INTERFACE Command History Version 8.3.16.
PAGE 583
show config (from INTERFACE RANGE mode) Display the bulk configured interfaces (interface range). Syntax show config Command Modes CONFIGURATION INTERFACE (conf-if-range) Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 584
Command Modes Command History Usage Information • EXEC • EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Starting with Dell Networking OS Release 9.3(0.0), you can also view the configuration of 40-Gigabit Ethernet interfaces by using the fortyGigE keyword with the show interface interface-type brief command. For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the slot/port information to indicate the interface.
PAGE 585
Line Description Last clearing... Displays the time when the show interfaces counters where cleared. Queuing strategy... States the packet queuing strategy. FIFO means first in first out.
PAGE 586
Line Description Rate information... Estimate of the input and output traffic rate over a designated interval (30 to 299 seconds). Traffic rate is displayed in bits, packets per second, and percent of line rate. Time since... Elapsed time since the last interface status change (hh:mm:ss format).
PAGE 587
LineSpeed 10000 Mbit Flowcontrol rx off tx off ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 21:14:32 Queueing strategy: fifo Input Statistics: 94322888 packets, 6036664832 bytes 94322888 64-byte pkts, 0 over 64-byte pkts, 0 over 127byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023byte pkts 0 Multicasts, 94322888 Broadcasts 0 runts, 0 giants, 0 throttles 0 CRC, 0 overrun, 0 discarded Output Statistics: 180384 packets, 11926850 bytes, 0 underruns 172622 64-by
PAGE 588
show interfaces switchport — displays Layer 2 information about the interfaces. show inventory — displays the MXL switch type, components (including media), Dell Networking OS version including hardware identification numbers, and configured protocols. show ip interface — displays Layer 3 information about the interfaces. show memory — displays the stack unit(s) status. show range — displays all interfaces configured using the interface range command.
PAGE 589
Output 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Time since last interface status change: 00:04:59 Dell# Related Commands show interfaces — displays information on a specific physical interface or virtual interface. show interfaces dampening Display interface dampening information. Syntax Parameters show interfaces dampening [[interface] [summary] [detail]] interface • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 590
show interfaces configured — displays any interface with a non-default configuration. show interfaces description Display the descriptions configured on the interface. Syntax Parameters Command Modes Command History Usage Information 590 show interfaces [interface] description interface • EXEC • EXEC Privilege Version 8.3.16.1 (Optional) Enter one of the following keywords and slot/port or number information: • For Loopback interfaces, enter the keyword loopback then a number from 0 to 16383.
PAGE 591
Example Related Commands Field Description Description Displays the description (if any) manually configured for the interface.
PAGE 592
Interface index is 34148609 Internet address is not set Mode of IP Address Assignment : NONE DHCP Client-ID :tenG130001ec9f10005 MTU 1554 bytes, IP MTU 1500 bytes LineSpeed auto Flowcontrol rx off tx off ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 5d5h24m Queueing strategy: fifo Input Statistics: 0 packets, 0 bytes 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023byte pkts 0 Multicasts, 0 Broadcasts 0 runts,
PAGE 593
Defaults none Command Modes • EXEC • EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 594
stack-unit unitid Command Modes Command History Usage Information Example • EXEC • EXEC Privilege Version 8.3.16.1 (OPTIONAL) Enter the keywords stack-unit then the stack member number. The range is from 0 to 5. Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show interfaces switchport command for the following example. Items Description Name Displays the interface’s type, slot, and port number. 802.
PAGE 595
802.1QTagged: True Vlan membership: Q Vlans Dell# Related Commands interface — configures a physical interface on the switch. show ip interface — displays Layer 3 information about the interfaces. show interfaces — displays information on a specific physical interface or virtual interface. show interfaces transceiver — displays the physical status and operational status of an installed transceiver. The output also displays the transceiver’s serial number.
PAGE 596
Line Description Bias High Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+. TX Power High Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+. RX Power High Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+. Temp Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+. Voltage Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
PAGE 597
Interfaces Line Description Voltage Current voltage of the SFPs. If this voltage crosses voltage high alarm/warning thresholds, the voltage high alarm/ warning flag is set to true. Tx Bias Current Present transmission (Tx) bias current of the SFP. If this crosses bias high alarm/warning thresholds, the TX bias high alarm/warning flag is set to true. If it falls below the low alarm/warning thresholds, the TX bias low alarm/warning flag is set to true. Tx Power Present Tx power of the SFP.
PAGE 598
Example Line Description Temperature Low Alarm Flag This can be either true or false, depending on the Current Temperature value displayed above. Voltage Low Alarm Flag This can be either true or false, depending on the Current voltage value displayed above. Tx Bias Low Alarm Flag This can be either true or false, depending on the Tx bias current value displayed above. Tx Power Low Alarm Flag This can be either true or false, depending on the Current Tx power value displayed above.
PAGE 599
SFP SFP SFP SFP SFP SFP SFP SFP SFP SFP SFP SFP SFP 0 0 0 0 0 0 0 0 0 0 0 0 0 Length(50um) 10m = 0x1e Length(62.
PAGE 600
=================================== !-------output truncated -------------------------! Related Commands interface — configures a physical interface on the switch. show ip interface — displays Layer 3 information about the interfaces. show interfaces — displays information on a specific physical interface or virtual interface. show inventory — displays the switch type, components (including media), the Dell Networking OS version including hardware identification numbers, and configured protocols.
PAGE 601
Command Modes Command History Usage Information INTERFACE Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The shutdown command marks a physical interface as unavailable for traffic. To discover if an interface is disabled, use the show ip interface brief command. Disabled interfaces are listed as down. Disabling a VLAN or a port channel causes different behavior. When you disable a VLAN, the Layer 3 functions within that VLAN are disabled. Layer 2 traffic continues to flow.
PAGE 602
Defaults auto Command Modes INTERFACE Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command is found on the 1000/10000 Base-T Ethernet interfaces. When you enable auto, the system performs an automatic discovery to determine the optics installed and configure the appropriate speed. When you configure a speed for the 1000/10000 interface, confirm the negotiation auto command setting.
PAGE 603
Version 8.3.16.1 Usage Information Introduced on the MXL 10/40GbE Switch IO Module. Splitting a 40G port into 4x10G port is supported on standalone and stacked units. • You cannot use split ports as stack-link to stack an MXL Switch. • The split ports MXL switch unit cannot be a part of any stacked system. • The unit number with the split ports must be the default (stack-unit 0). • This set up can be verified using show system brief command.
PAGE 604
• • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Defaults Not configured. Command Modes INTERFACE PORTCHANNEL Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 605
Related Commands description — assigns a descriptive text string to the interface. interface port-channel — creates a Port Channel interface. shutdown — disables/enables the port channel. group Group two LAGs in a supergroup (“fate-sharing group” or “failover group”). Syntax group group_number port-channel number port-channel number To remove an existing LAG supergroup, use the no group group_number command.
PAGE 606
interface port-channel Create a Port Channel interface, which is a link aggregation group (LAG) containing 16 physical interfaces on the XML switch. Syntax interface port-channel channel-number To delete a Port Channel, use the no interface port-channel channelnumber command. Parameters channelnumber Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 607
minimum-links Configure the minimum number of links in a LAG (Port Channel) that must be in “oper up” status for the LAG to be also in “oper up” status. Syntax Parameters minimum-links number number Defaults 1 Command Modes INTERFACE Command History Usage Information Enter the number of links in a LAG that must be in “oper up” status. The range is from 1 to 16. The default is 1. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only.
PAGE 608
more information, refer to the Port Channel chapter in the Dell Networking OS Configuration Guide. Related Command group — groups two LAGs in a supergroup (“fate-sharing group”). show interfaces port-channel — displays information on configured Port Channel groups. show config Display the current configuration of the selected LAG. Syntax show config Command Modes INTERFACE PORTCHANNEL Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 609
Usage Information Interfaces The following describes the show interfaces port-channel command shown in the following example. Field Description Port-Channel 1... Displays the LAG’s status. In the Example, the status of the LAG’s LAG fate-sharing group (“Failover-group”) is listed. Hardware is... Displays the interface’s hardware information and its assigned MAC address. Port-channel is part... Indicates whether the LAG is part of a LAG fate-sharing group (“Failover-group”). Internet address...
PAGE 610
Example (EtherScale) Dell#show interfaces port-channel Port-channel 1 is down, line protocol is down Hardware address is 00:1e:c9:f1:00:05, Current address is 00:1e:c9:f1:00:05 Interface index is 1107755009 Minimum number of links to bring Port-channel up is 1 Internet address is not set Mode of IP Address Assignment : NONE DHCP Client-ID :lag1001ec9f10005 MTU 1554 bytes, IP MTU 1500 bytes LineSpeed auto Members in this channel: ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counter
PAGE 611
Field Description • Example (brief) In Layer 3 port channels, the primary port is not indicated. Dell#show int po 1 brief Codes: L - LACP Port-channel LAG Mode Status Uptime Ports 1 L3 down 00:00:00 Te 0/16 (Down) Dell# Related Commands show lacp — displays the LACP matrix. Time Domain Reflectometer (TDR) TDR is useful for troubleshooting an interface that is not establishing a link; either it is flapping or not coming up at all.
PAGE 612
Usage Information The interface must be enabled to run the test or an error message is generated: Dell#tdr-cable-test gigabitethernet 5/2 %Error: Interface is disabled GI 5/2 Related Commands show tdr — displays the results of the TDR test. show tdr Display the TDR test results. Syntax Parameters show tdr interface interface Defaults none Command Modes EXEC Command History Usage Information Version 8.3.16.
PAGE 613
Pair B, Length: 92 (+/- 1) meters, Status: Short Pair C, Length: 93 (+/- 1) meters, Status: Open Pair D, Length: 0 (+/- 1) meters, Status: Impedance Mismatch Related Commands tdr-cable-test — runs the TDR test. UDP Broadcast The user datagram protocol (UDP) broadcast feature is a software-based method to forward low throughput (not to exceed 200 pps) IP/UDP broadcast traffic arriving on a physical or VLAN interface.
PAGE 614
show ip udp-helper — displays the configured UDP helper(s) on all interfaces. ip udp-broadcast-address Configure an IP UDP address for broadcast. Syntax ip udp-broadcast-address address To delete the configuration, use the no ip udp-broadcast-address address command. Parameters address Enter an IP broadcast address in dotted decimal format (A.B.C.D). Defaults Not configured. Command Modes INTERFACE (config-if) Command History Version 8.3.16.
PAGE 615
Defaults none Command Modes INTERFACE (config-if) Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. If you configure the ip helper-address command and ip udp-helper udpport command, the behavior is that the UDP broadcast traffic with port numbers 67/68 is unicast relayed to the DHCP server per the ip helper-address configuration. This occurs regardless if the ip udp-helper udp-port command contains port numbers 67/68 or not.
PAGE 616
ip udp-helper udp-port — enables the UDP broadcast feature on an interface either for all UDP ports or a specified list of UDP ports. Enhanced Validation of Interface Ranges This functionality is supported on the MXL platform. You can avoid specifying spaces between the range of interfaces, separated by commas, that you configure by using the interface range command.
PAGE 617
22 IPv4 Routing The basic IPv4 commands are supported by Dell Networking Operating System (OS). arp To associate an IP address with a multicast MAC address in the switch when you configure multicast mode of the network load balancing (NLB), use the address resolution protocol (ARP). Syntax arp ip-address multicast-mac-address interface To remove an ARP address, use the no arp ip-address command. Parameters ip-address Enter an IP address in dotted decimal format.
PAGE 618
Version 8.3.16.1 Usage Information Introduced on the MXL 10/40GbE Switch IO Module. For multicast mode of NLB, to associate an IP address with a multicast MAC address in the switch, use address resolution protocol (ARP) by entering the arp ip-address multicast-mac-address command in Global configuration mode. This setting causes the multicast MAC address to be mapped to the cluster IP address for NLB mode of operation of the switch. You cannot use Class D or Class E IP addresses or zero IP address (0.0.0.
PAGE 619
Usage Information Retries are 20 seconds apart. Related Commands show arp retries — displays the configured number of ARP retries. arp timeout Set the time interval for an ARP entry to remain in the ARP cache. Syntax Parameters arp timeout minutes minutes Enter the number of minutes. The range is from 0 to 35790. The default is 240 minutes. Defaults 240 minutes (4 hours) Command Modes INTERFACE Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 620
ip ip-address (OPTIONAL) Enter the keyword ip then the IP address of the ARP entry you wish to clear. no-refresh (OPTIONAL) Enter the keywords no-refresh to delete the ARP entry from CAM. Or use this option with interface or ip ip-address to specify which dynamic ARP entries you want to delete. NOTE: Transit traffic may not be forwarded during the period when deleted ARP entries are resolved again and re-installed in CAM. Use this option with extreme caution.
PAGE 621
Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To clear Layer 3 CAM inconsistencies, use this command. Related Commands show ip fib stack-unit — shows FIB entries. CAUTION: Executing this command causes traffic disruption. clear ip route Clear one or all routes in the routing table. Syntax Parameters Command Modes Command History Related Commands clear ip route {* | ip-address mask} * Enter an asterisk (*) to clear all learned IP routes.
PAGE 622
debug arp View information on ARP transactions. Syntax debug arp [interface] [count value] To stop debugging ARP transactions, use the no debug arp command. Parameters interface count value Defaults none Command Modes EXEC Privilege Command History Usage Information Version 8.3.16.1 (OPTIONAL) Enter the following keywords and slot/port or number information: • For the Management interface, enter the keyword ManagementEthernet then the slot/port information.
PAGE 623
Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#debug ip dhcp 00:12:21 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xbf05140f, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0 00:12:21 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2 00:12:26 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.
PAGE 624
Parameters interface count value Command Modes Command History Example Usage Information (OPTIONAL) Enter the following keywords and slot/port or number information: • For the Management interface, enter the keyword ManagementEthernet then the slot/port information. The slot range is from 0 to 1 and the port range is 0. • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 625
Command Modes Command History Usage Information IPv4 Routing count value (OPTIONAL) Enter the keyword count then the count value. The range is from 1 to 65534. The default is Infinity. interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For the Management interface, enter the keyword ManagementEthernet then the slot/port information. The slot range is from 0 to 1 and the port range is 0.
PAGE 626
Field Description units) of this fragment (fragment offset) from the beginning of the original datagram. Example IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 0/0), len 54, sending TCP src=23, dst=40869, seq=2112994894, ack=606901739, win=8191 ACK PUSH IP: s=10.1.2.206 (Ma 0/0), d=10.1.2.62, len 40, rcvd TCP src=0, dst=0, seq=0, ack=0, win=0 IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 0/0), len 226, sending TCP src=23, dst=40869, seq=2112994896, ack=606901739, win=8192 ACK PUSH IP: s=10.1.2.216 (Ma 0/0), d=10.
PAGE 627
Example (Error Messages) Dell#debug ip packet access-group test %Error: port operator GT not supported in access-list debug %Error: port operator LT not supported in access-list debug %Error: port operator RANGE not supported in access-list debug %Error: port operator NEQ not supported in access-list debug Dell#00:10:45: %RPM0-P:CP %IPMGR-3-DEBUG_IP_PACKET_ACL_AMBIGUOUS_EXP: Ambiguous rules not supported in access-list debug, access-list debugging is turned off Dell# ip address Assign a primary and second
PAGE 628
Defaults Disabled (that is, the interface does not receive directed broadcast packets) Command Modes INTERFACE Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip domain-list Configure names to complete unqualified host names. Syntax ip domain-list name To remove the name, use the no ip domain-list name command. Parameters name Defaults Disabled. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.
PAGE 629
ip domain-lookup To address resolution (that is, DNS), enable dynamic host-name. Syntax p domain-lookup To disable DNS lookup, use the no ip domain-lookup command. Defaults Disabled. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To fully enable DNS, also specify one or more domain name servers with the ip name-server command. The Dell Networking OS does not support sending DNS queries over a VLAN.
PAGE 630
Usage Information You can only configure one domain name with the ip domain-name command. To configure more than one domain name, configure the ip domain-list command up to six times. To enable dynamic resolution of hosts, use the following steps: • specify a domain name server with the ip name-server command • enable DNS with the ip domain-lookup command To view current bindings, use the show hosts command. Related Commands ip domain-list — configures additional names.
PAGE 631
ip helper-address hop-count disable Disable the hop-count increment for the DHCP relay agent. Syntax ip helper-address hop-count disable To re-enable the hop-count increment, use the no ip helper-address hopcount disable command. Defaults Enabled; the hops field in the DHCP message header is incremented by default. Command Modes CONFIGURATION Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 632
ip icmp source-interface Enable the ICMP error and unreachable messages to be sent with the source interface IP address, such as the loopback address, instead of the hops of the preceding devices along the network path to be used for easy debugging and diagnosis of network disconnections and reachability problems with IPv4 packets. This functionality is supported on the MXL platform.
PAGE 633
(ECMP) links, you cannot effectively and optimally use the traceroute and ping applications to examine the network reachablity and identify any broken links for diagnostic purposes. In such cases, if the reply that is obtained from each hop on the network path contains the IP address of the adjacent, neighboring interface from which the packet is received, it is difficult to employ the ping and traceroute utilites.
PAGE 634
Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Version 9.3(0.0) Introduced on the MXL platform. You can enable the mechanism to configure the source or the originating interface from which the packet (the device that generates the ICMP error messages) is received by the switch to send the loopback address instead of its source IP address to be used in the ICMP unreachable messages and in the traceroute command output.
PAGE 635
Usage Information To avoid denial of service (DOS) attacks, keep the number of fragments allowed for re-assembly low. ip name-server Enter up to six IPv4 addresses of name servers. The order you enter the addresses determines the order of their use. Syntax ip name-server ipv4-address [ipv4-address2...ipv4-address6] To remove a name server, use the no ip name-server ip-address command. Parameters ipv4-address Enter the IPv4 address, in dotted decimal format, of the name server to be used.
PAGE 636
Related Commands show ip interface — displays the interface routing status and configuration. ip route Assign a static route to the switch. Syntax ip route {destination mask {ip-address | interface [ip-address] | [distance] | [permanent] | tag tag-value}} To delete a specific static route, use the no ip route destination mask command. To delete all routes matching a certain route, use the no ip route destination mask command.
PAGE 637
Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Related Commands Version 9.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Using the following example of a static route: ip route 33.33.33.0 /24 tengigabitethernet 0/0 172.31.5.43 • The software installs a next hop that is not on the directly connected subnet but which recursively resolves to a next hop on the interface’s configured subnet. In the example, if gig 0/0 has an ip address on subnet 2.2.2.
PAGE 638
Parameters <8-75> Command Modes CONFIGURATION Command History Version 9.3(0.0) Usage Information Wait duration in seconds for the TCP connection to be established. Introduced on the MXL platform. You can configure the amount of time for which the device must wait before it attempts to establish a TCP connection. Using this capability, you can limit the wait times for TCP connection requests.
PAGE 639
Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. management route Configure a static route that points to the Management interface or a forwarding router. Syntax management route {{ipv4-address]/mask | {forwarding-routeraddress | managementethernet} To remove a static route, use the no management route{{ip-address mask | {ipv6-address prefix-length}}{forwarding-router-address | managementethernet} command. Parameters ipv4-address]/ mask Enter an IPv4 Address (A.B.C.
PAGE 640
Parameters Command Modes Command History Usage Information interface interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For the Management interface, enter the keyword managementethernet then the slot/port information. • For a Port Channel interface, enter the keyword portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 641
Example Row Heading Description Address Displays the IP address of the ARP entry. Age(min) Displays the age (in minutes) of the ARP entry. Hardware Address Displays the MAC address associated with the ARP entry. Interface Displays the first two letters of the interfaces type and the slot/port associated with the ARP entry. VLAN Displays the VLAN ID, if any, associated with the ARP entry. CPU Lists which CPU the entries are stored on.
PAGE 642
Row Heading Description CPU Lists which CPU the entries are stored on. Example (Summary) #show arp summary Related Commands ip local-proxy-arp — enables/disables Layer 3 communication in secondary VLANs. TotalEntries Static Entries Dynamic Entries CPU ---------------------------------------------3 0 3 CP Dell switchport mode private-vlan — sets PVLAN mode of the selected port. show arp retries Display the configured number of ARP retries.
PAGE 643
Field Description Default domain... Displays the domain name (if configured). Name/address lookup... States if DNS is enabled on the system. • If DNS is enabled, the Name/Address lookup is domain service. • If DNS is not enabled, the Name/Address lookup is static mapping Name servers are... Lists the name servers, if configured. Host Displays the host name assigned to the IP address.
PAGE 644
show ip cam stack-unit Display CAM entries. Syntax Parameters show ip cam stack-unit {0–5} [port-set {pipe-number} | {ipaddress mask [longer-prefixes]| detail | member-info | summary] 0–5 Enter the stack-unit ID from 0 to 5 pipe-number Enter the number of the Port-Pipe number. The range is from 0 to 0 ip-address mask [longerprefixes] (OPTIONAL) Enter the IP address and mask of a route to CAM entries for that route only. Enter the keywords longerprefixes to view routes with a common prefix.
PAGE 645
Example Field Description C Displays the CPU bit. 1 indicates that a packet hitting this entry is forwarded to the CP or RP2, depending on Egress port. V Id Displays the VLAN ID. If the entry is 0, the entry is not part of a VLAN. Mac Addr Displays the next-hop router’s MAC address. Port Displays the egress interface. Use the second half of the entry to determine the interface. For example, in the entry 17cl CP, the CP is the pertinent portion.
PAGE 646
Example (Member-Info) Dell#show ip cam stack-unit 0 po 0 ecmp-group member-info detail Group Index Member Count Mac-Addr Port VLan ID Gateway ----------- ------------------------------- -----------------0 2 00:01:e8:8a:d6:58 Te 0/3 0 1.1.1.2 00:01:e8:8a:d6:58 Te 0/8 0 2.1.1.2 Dell# show ip fib stack-unit View all FIB entries.
PAGE 647
Example Field Description VId Displays the VLAN ID. If no VLAN is assigned, zero (0) is listed. EC Displays the number of ECMP paths. Dell#show ip fib stack-unit 0 Destination Gateway First-Hop Mac-Addr Port VId EC ---------------------------------------------------------------------10.10.10.10/32 Direct, Nu 0 0.0.0.0 00:00:00:00:00:00 BLK HOLE 0 0 Dell> Related Commands clear ip fib stack-unit — clear FIB entries on a specified stack-unit.
PAGE 648
Command Modes Command History Usage Information Example • EXEC • EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip interface command shown in the following example. Lines Description TenGigabitEthern et 0/0... Displays the interface’s type, slot/port, and physical and line protocol status. Internet address... States whether an IP address is assigned to the interface. If an IP address is assigned, that address is displayed.
PAGE 649
Example (Brief) Fields Description Method Displays “Manual” if the configuration is read from the saved configuration. Status States whether the interface is enabled (up) or disabled (administratively down). Protocol States whether IP is enabled (up) or disabled (down) on the interface.
PAGE 650
Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show ip management-route Destination ----------10.1.2.0/24 172.16.1.0/24 Dell# Gateway ------ManagementEthernet 0/0 10.1.2.4 State ----Connected Active show ip protocols View information on all routing protocols enabled and active on the switch. Syntax show ip protocols Command Modes • EXEC • EXEC Privilege Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 651
Parameters Command Modes Command History Usage Information IPv4 Routing ip-address (OPTIONAL) Specify a name of a device or the IP address of the device to view more detailed information about the route. mask (OPTIONAL) Specify the network mask of the route. Use this parameter with the IP address parameter. longer-prefixes (OPTIONAL) Enter the keywords longer-prefixes to view all routes with a common prefix.
PAGE 652
Field Example Description • N2 = OSPF NSSA external type 2 • E1 = OSPF external type 1 • E2 = OSPF external type 2 • i = IS-IS • L1 = IS-IS level-1 • L2 = IS-IS level-2 • IA = IS-IS inter-area • * = candidate default • > = non-active route • + = summary routes Destination Identifies the route’s destination IP address Gateway Identifies whether the route is directly connected and on which interface the route is configured.
PAGE 653
Destination Gateway Dist/Metric Last Change ----------- ------- ----------- ----------*S 0.0.0.0/0 via 10.10.91.9, Gi 1/2 1/0 3d2h Dell> show ip route list Display IP routes in an IP prefix list. Syntax Parameters Command Modes Command History Example show ip route list prefix-list prefix-list • EXEC • EXEC Privilege Version 8.3.16.1 Enter the name of a configured prefix list. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 654
show ip route summary View a table summarizing the IP routes in the switch. Syntax show ip route summary Command Modes • EXEC • EXEC Privilege Command History Usage Information Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip route summary shown in the following example. Column Heading Description Route Source Identifies how the route is configured in the system.
PAGE 655
show ip traffic View IP, ICMP, UDP, TCP and ARP traffic statistics. Syntax show ip traffic Command Modes EXEC Privilege Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip traffic summary shown in the following example. Keyword Definition unknown protocol... No receiver for these packets. Counts packets whose protocol type field is not recognized by the system. not a gateway...
PAGE 656
Keyword Definition ...socket full The applications buffer is full and the incoming packet are dropped. The F10 Monitoring MIB provides access to the following statistics. Example • IP Statistics: Bcast: Received: Object = f10BcastPktRecv, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.1 • IP Statistics: Bcast: Sent: Object = f10BcastPktSent, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.2 • IP Statistics: Mcast: Received: Object = f10McastPktRecv, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.
PAGE 657
show tcp statistics View information on TCP traffic through the switch. Syntax show tcp statistics Command Modes EXEC Privilege Command History Usage Information Version 8.3.16.1 The following describes the show tcp statistics cp command shown in the following example. Field Description Rcvd: Displays the number and types of TCP packets received by the switch. 0 checksum error... IPv4 Routing Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 658
Example Field Description Sent: Displays the total number of TCP packets sent and the number of urgent packets sent. 25 control packets... Displays the number of control packets sent and the number retransmitted. 11603 data packets... Displays the number of data packets sent. 24 data packets retransmitted Displays the number of data packets resent. 355 ack.. Displays the number of acknowledgement packets sent and the number of packet delayed. 0 window probe...
PAGE 659
dropped in keepalive Dell# Related Commands IPv4 Routing show ip cam stack-unit — displays the CAM table.
PAGE 660
PAGE 661
Internet Protocol Security (IPSec) 23 Internet protocol security (IPSec) is an end-to-end security scheme for securing IP communications by authenticating and encrypting all packets in a session. Use IPSec between hosts, gateways, or hosts and gateways. IPSec uses a series of protocol functions to achieve information security: • Authentication Headers (AH) — Connectionless integrity and origin authentication for IP packets.
PAGE 662
Parameters name Enter the name for the transform set. ahauthentication Enter the keywords ah-authentication then the transform type of operation to apply to traffic. The transform type represents the encryption or authentication applied to traffic. espauthentication esp-encryption Defaults none Command Modes CONFIGURATION Command History Usage Information Example 662 Version 9.2(0.0) • md5 — Use Message Digest 5 (MD5) authentication.
PAGE 663
crypto ipsec policy Create a crypto policy used by ipsec. Syntax crypto ipsec policy name seq-num ipsec-manual To delete a crypto policy entry, use the no crypto ipsec policy name seqnum ipsec-manual command. Parameters name Enter the name for the crypto policy set. seq-num Enter the sequence number assigned to the crypto policy entry. Defaults none Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 664
match Match a sequence number to the transmission control protocol (TCP)/user datagram protocol (UDP) packets. Syntax match seq-num {tcp | udp} {ipv6 | ip} port-num dest-ip destport-num To remove the match filter for the crypto map, use the no match seq-num command. Parameters seq-num Enter the match command sequence number. The range is from 0 to 255. tcp Enter the keyword tcp to configure a TCP access list filter. udp Enter the keyword udp to configure a UDP access list filter.
PAGE 665
session-key Specify the session keys used in the crypto policy entry. Syntax session-key {inbound | outbound} {ah spi hex-key-string | esp spi encrypt hex-key-string auth hex-key-string To delete the session key information from the crypto policy, use the no session-key {inbound | outbound} {ah | esp} command. Parameters name Enter the name of the host to delete. Enter * to delete all host table entries. inbound Specify the inbound session key for IPSec.
PAGE 666
Parameters Command Modes Command History Example name Enter the name of the transform set. EXEC Version 9.2(0.2) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show crypto ipsec transform-set Transform-Set Name Transform-Set refCnt AH Transform ESP Auth Transform ESP Encry Transform Dell# : dallas : 0 : : : 3des show crypto ipsec policy Display the crypto policy configuration.
PAGE 667
89509d4b420a5b6789509d4b420a5b6789509d4 Match sequence Num Protocol type IP or IPv6 Source address Source mask Source port Destination address Destination mask Destination port source-interface name source-interface num : : : : : : : : : : : 0 tcp IPv6 a::1 /128 0 a::2 /128 23 Match sequence Num Protocol type IP or IPv6 Source address Source mask Source port Destination address Destination mask Destination port source-interface name source-interface num : : : : : : : : : : : 1 tcp IPv6 a::1 /128 23 a::
PAGE 668
transform-set Specify the transform set the crypto policy uses. Syntax transform-set transform-set-name To delete a transform set from the crypto policy, use the no transform-set transform-set-name command. Parameters transform-setname Enter the name for the crypto policy transform set. Defaults none Command Modes CONFIG-CRYPTO-POLICY Command History 668 Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 669
IPv6 Access Control Lists (IPv6 ACLs) 24 IPv6 ACLs and IPv6 Route Map commands are supported on Dell Networking MXL switch. NOTE: For IPv4 ACL commands, refer to the Access Control Lists (ACL) chapter. Important Points to Remember • Certain platforms require manual CAM usage space allotment. For more information, refer to the cam-acl (Configuration) command. • Egress IPv6 ACL and IPv6 ACL on the Loopback interface is not supported. • Reference to an empty ACL permits any traffic.
PAGE 670
l2acl 1-10 ipv4acl 1-10 ipv6acl 0-10 ipv4qos 1-10 l2qos 1-10 Command Modes Command History Usage Information • IPv6 L3 ACL (ipv6acl): 0 • L3 QoS (ipv4qos): 1 • L2 QoS (l2qos): 1 Allocate space to support IPv6 ACLs. Enter all of the profiles and a range. Enter the CAM profile name then the amount to be allotted. The total space allocated must equal 13. The ipv6acl range must be a factor of 2. CONFIGURATION Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 671
Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. For the new settings to take effect, save the new CAM settings to the startupconfig (write-mem or copy run start), then reload the system. The total amount of space allowed is 16 FP Blocks. System flow requires three blocks and these blocks cannot be reallocated. When configuring space for IPv6 ACLs, the total number of Blocks must equal 13.
PAGE 672
ospfv3 Specify that this ACL is for OSPFv3 control plane traffic Defaults All access lists contain an implicit “deny any”; that is, if no match occurs, the packet is dropped. Command Modes CONFIGURATION Command History Version 9.4(0.0) Added support for CoPP for OSPFv3 on the MXL 10/40GbE Switch IO Module. Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The number of entries allowed per ACL is hardware-dependent.
PAGE 673
• Parameters Defaults Use the no permit {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command ip-protocolnumber Enter an IPv6 protocol number. The range is from 0 to 255. icmp Enter the keyword icmp to filter internet Control Message Protocol version 6. ipv6 Enter the keyword ipv6 to filter any internet Protocol version 6. tcp Enter the keyword tcp to filter the Transmission Control protocol. udp Enter the keyword udp to filter the User Datagram Protocol.
PAGE 674
Command Modes Command History ACCESS-LIST Version 9.4(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module. Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. permit icmp To allow all or specific internet control message protocol (ICMP) messages, configure a filter.
PAGE 675
count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-inmsgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands.
PAGE 676
this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic.
PAGE 677
L2Acl Ipv4Acl Ipv6Acl Ipv4Qos L2Qos : : : : : Current Settings(in block sizes) 2 2 4 2 3 Dell#show cam-acl Related Commands cam-acl — configures CAM profiles to support IPv6 ACLs. show cam-acl-egress Show information on FP groups allocated for egress ACLs. Syntax show cam-acl-egress Command Modes • EXEC • EXEC Privilege Command History Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 678
PAGE 679
25 IPv6 Basics This chapter describes IPv6 basic commands for the MXL 10/40GbE Switch IO Module. clear ipv6 fib Clear (refresh) all forwarding information base (FIB) entries on a linecard or stack unit. Syntax Parameters Command Modes Command History clear ipv6 fib linecard slot | stack-unit unit-number slot Enter the slot number to clear the FIB for a linecard. unit-number Enter the stack member number. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 680
clear ipv6 mld_host Clear the IPv6 MLD host counters and reset the elapsed time. Syntax clear ipv6 mld_host Command Modes EXEC Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 address autoconfig Configure IPv6 address auto-configuration for the management interface. Syntax ipv6 address autoconfig To disable the address autoconfig operation on the management interface, use the no ipv6 address autoconfig command.
PAGE 681
ipv6 address Configure an IPv6 address to an interface. Syntax ipv6 address {ipv6-address prefix-length} To remove the IPv6 address, use the no ipv6 address {ipv6-address prefix-length} command. Parameters ipv6-address prefix-length Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 682
ipv6 address eui64 Configure IPv6 EUI64 address configuration on the interface. Syntax ipv6 address {ipv6-address prefix-length} eui64 To disable IPv6 EUI64 address autoconfiguration, use the no ipv6 address {ipv6-address prefix-length} eui64 command. Parameters ipv6-address prefix-length Enter the IPv6 prefix in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 683
Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 flowlabel-zero Configure system to set the flow label field in the packets to zero. Syntax ipv6 flowlabel-zero To disable the 0 from being set in the field and allow the rotocol operations to fill the field, use the no ipv6 flowlabel-zero command. Default Disabled Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 684
ipv6 name-server Enter up to six IPv6 addresses of name servers. The order you enter the addresses determines the order of their use. Syntax ipv6 name-server ipv6-address [ipv6-address2... ipv6-address6] To remove a name server, use the no ipv6 name—server ipv6–address command. Parameters ipv6-address Enter the IPv6 address (X:X:X:X::X) of the name server to be used. NOTE: The :: notation specifics successive hexadecimal fields of zeros. ipv6-address2...
PAGE 685
Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 nd prefix Specify which IPv6 prefixes are included in Neighbor Advertisements. Syntax Parameters Command Modes Command History IPv6 Basics ipv6 nd prefix {ipv6-prefix | prefix-length | default} [noadvertise] | [no-autoconfig] [no-rtr-address] [off-link] [lifetime {valid | infinite} {preferred | infinite}] ipv6-prefix Enter an IPv6 prefix. prefix-length Enter the prefix then the prefix length.
PAGE 686
Usage Information By default, all prefixes configured as addresses on the interface are advertised. This command allows control over the individual parameters per prefix; you can use the default keyword to use the default parameters for all prefixes. If a prefix has been configured with lifetime parameter values, the default values cannot be applied using the ipv6 nd prefix default no-autoconfig command. ipv6 route Establish a static IPv6 route.
PAGE 687
ipv6-address (OPTIONAL) Enter the forwarding router IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. distance (OPTIONAL) Enter a number as the metric distance assigned to the route. The range is from 1 to 255. tag value (OPTIONAL) Enter the keyword tag then a tag value number. The range is from 1 to 4294967295.
PAGE 688
Dell(conf)#ipv6 route 55::0 /64 gigabitethernet 9/0 66::1 ? <1-255> Distance metric for this route permanent Permanent route tag Set tag for this route Dell# Related Commands show ipv6 route — views the IPv6 configured routes. ipv6 unicast-routing Enable IPv6 Unicast routing. Syntax ipv6 unicast-routing To disable unicast routing, use the no ipv6 unicast-routing command. Defaults Enabled Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.
PAGE 689
Parameters unit-number Enter the stack unit’s ID number. The range is from 0 to 11. port-set Enter the keyword Port Set. summary (OPTIONAL) Enter the keyword summary to display a table listing network prefixes and the total number prefixes which can be entered into the IPv6 CAM. index (OPTIONAL) Enter the index in the IPv6 CAM. ipv6-address Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes. The range is from /0 to /128.
PAGE 690
Related Commands ipv6 flowlabel-zero — Configure IPv6 address auto-configuration for the management interface. show ipv6 fib stack-unit View all FIB entries. Syntax Parameters show ipv6 fib stack-unit unit-number [summary | ipv6-address] slot-number Enter the number of the stack unit. The range is from 0 to 11. summary (OPTIONAL) Enter the keyword summary to view a summary of entries in IPv6 cam.
PAGE 691
show ipv6 interface Display the status of interfaces configured for IPv6.
PAGE 692
Defaults none Command Modes • EXEC • EXEC Privilege Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The Management port is enabled by default (no shutdown). If necessary, use the ipv6 address command to assign an IPv6 address to the Management port.
PAGE 693
Dell# Example (Brief) Example (tunnel) Dell#show ipv6 interface brief TenGigabitEthernet 0/44 fe80::201:e8ff:fe8b:3883 4001:2::3/64 ManagementEthernet 0/0 fe80::201:e8ff:fe8b:3883 33::1/64 Tunnel 45 fe80::201:e8ff:fe8b:3883 333::1/64 Port-channel 23 fe80::201:e8ff:fe8b:3883 110::1/64 Vlan 12 fe80::201:e8ff:fe8b:3883 400::1/64 Dell# [up/up] [up/up] [up/up] [up/up] [up/up] Dell#show ipv6 interface tunnel 1 Tunnel 1 is up, line protocol is up IPV6 is enabled Link Local address: fe80::201:e8ff:fe04:62c4 Glo
PAGE 694
Example Field Description Valid MLD Packets The total number of packets received and sent from the last time the elapsed time was cleared. Reports The total number of reports (queries and unsolicited reports generated from joins or leaves) that have been received or sent. Leaves The number of Multicast leaves that have been sent. MLDv1 queries The number of MLDv1 queries that have been received. MLDv2 queries The number of MLDv2 queries that have been received.
PAGE 695
list (OPTIONAL) View the IPv6 prefix list. ospf (OPTIONAL) View information for all IPv6 OSPF routes. rip (OPTIONAL) View information for all IPv6 RIP routes. static (OPTIONAL) View only routes configured by the ipv6 route command. summary (OPTIONAL) View a brief list of the configured IPv6 routes. Defaults none Command Modes • EXEC • EXEC Privilege Command History Usage Information Version 9.2(0.0) The following describes the show ipv6 route command shown in the following examples.
PAGE 696
Example Field Description Gateway Identifies whether the route is directly connected and on which interface the route is configured. Dist/Metric Identifies if the route has a specified distance or metric. Last Change Identifies when the route was last changed or configured.
PAGE 697
Usage Information When you configure trust IPv6 diffserv, matched bytes/packets counters are not incremented in the show qos statistics command. Trust diffserv (IPv4) can co-exist with trust ipv6-diffserv in an Input Policy Map.
PAGE 698
PAGE 699
26 IPv6 Border Gateway Protocol (IPv6 BGP) IPv6 Border Gateway Protocol (IPv6 BGP) is supported on Dell Networking platforms. This chapter includes the following sections: • IPv6 BGP Commands • IPv6 MBGP Commands IPv6 BGP Commands BGP is an external gateway protocol that transmits interdomain routing information within and between autonomous systems (AS). BGP version 4 (BGPv4) supports classless interdomain routing and the aggregation of routes and AS paths.
PAGE 700
Usage Information After this command is executed, all subsequent commands apply to this address family. You can exit from this AFI/SAFI to the IPv6 Unicast (the default) family by entering the exit command and returning to the Router BGP context. aggregate-address Summarize a range of prefixes to minimize the number of entries in the routing table.
PAGE 701
Usage Information At least one of the routes included in the aggregate address must be in the BGP routing table for the configured aggregate to become active. Do not add the as-set parameter to the aggregate if routes within the aggregate are constantly changing as the aggregate will flap to keep track of the changes in the AS_PATH. In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed.
PAGE 702
bgp bestpath as-path ignore Ignore the AS PATH in BGP best path calculations. Syntax bgp bestpath as-path ignore To return to the default, use the no bgp bestpath as-path ignore command. Defaults Disabled (that is, the software considers the AS_PATH when choosing a route as best). Command Modes ROUTER BGP Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 703
bgp bestpath med missing-as-best During path selection, indicate a preference to paths with missing MED (MULTI_EXIT_DISC) over those paths with an advertised MED attribute. Syntax bgp bestpath med missing-as-best To return to the default selection, use the no bgp bestpath med missing-asbest command. Defaults Disabled. Command Modes ROUTER BGP Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 704
bgp cluster-id Assign a cluster ID to a BGP cluster with more than one route reflector. Syntax bgp cluster-id {ip-address | number} To delete a cluster ID, use the no bgp cluster-id {ip-address | number} command. Parameters ip-address Enter an IP address as the route reflector cluster ID. number Enter a route reflector cluster ID as a number from 1 to 4294967295. Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version 9.2(0.
PAGE 705
Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The autonomous systems configured in this command are visible to the EBGP neighbors. Each autonomous system is fully meshed and contains a few connections to other autonomous systems. The next hop, MED, and local preference information is preserved throughout the confederation. The system accepts confederation EBGP peers without a LOCAL_PREF attribute.
PAGE 706
bgp dampening Enable BGP route dampening and configure the dampening parameters. Syntax Parameters bgp dampening [half-life reuse suppress max-suppress-time] [route-map map-name] half-life (OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half, after the half-life period expires. The range is from 1 to 45. The default is 15 minutes.
PAGE 707
bgp default local-preference Change the default local preference value for routes exchanged between internal BGP peers. Syntax bgp default local-preference value To return to the default value, use the no bgp default local-preference command. Parameters value Defaults 100 Command Modes ROUTER BGP Command History Version 9.2(0.0) Enter a number to assign to routes as the degree of preference for those routes.
PAGE 708
Related Commands show ip bgp ipv6 unicast neighbors — displays IPv6 routing information exchanged by BGP neighbors. show ip protocols — views information on routing protocols. bgp fast-external-fallover Enable the fast external fallover feature, which immediately resets the BGP session if a link to a directly connected external peer fails. Syntax bgp fast-external-fallover To disable fast external fallover, use the no bgp fast-external-fallover command. Defaults Enabled.
PAGE 709
When creating Confederations, all the routers in the Confederation must be 4- or 2-byte identified routers. You cannot mix them. Where the 2-Byte format is from 1 to 65535, the 4-Byte format is from 1 to 4294967295. Both formats are accepted, and the advertisements reflect the entered format. For more information about using the 2- or 4-Byte format, refer to the Dell Networking OS Configuration Guide.
PAGE 710
bgp log-neighbor-changes Enable logging of BGP neighbor resets. Syntax bgp log-neighbor-changes To disable logging, use the no bgp log-neighbor-changes command. Defaults Enabled. Command Modes ROUTER BGP Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The bgp log-neighbor-changes command appears in the show config command output. Related Commands show config — views the current configuration.
PAGE 711
bgp recursive-bgp-next-hop Enable next-hop resolution through other routes learned by BGP. Syntax bgp recursive-bgp-next-hop To disable next-hop resolution, use the no bgp recursive-bgp-next-hop command. Defaults Enabled. Command Modes ROUTER BGP Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command is a knob to disable BGP next-hop resolution using BGP learned routes.
PAGE 712
BGP policies, containing regular expressions to match as-path and communities, tend to use a lot of CPU processing time, which in turn affects the BGP routing convergence. Additionally, the show bgp commands, which are filtered through regular expressions, use up CPU cycles particularly with large databases. The Regex Engine Performance Enhancement feature optimizes the CPU usage by caching and reusing regular expression evaluation results.
PAGE 713
Command Modes Command History ROUTER BGPV6 ADDRESS FAMILY (conf-router_bgpv6_af) Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you enable soft-reconfiguration for a neighbor and you execute the clear ip bgp soft in command, the update database stored in the router replays and updates are reevaluated. With this command, the replay and update process is triggered only if route-refresh request is not negotiated with the peer.
PAGE 714
capture bgp-pdu max-buffer-size Set the size of the BGP packet capture buffer. This buffer size pertains to both IPv4 and IPv6 addresses. Syntax Parameters capture bgp-pdu max-buffer-size 100-102400000 100-10240000 0 Defaults 40960000 bytes Command Modes • EXEC • EXEC Privilege Command History Related Commands Version 9.2(0.0) Enter a size for the capture buffer. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 715
out Command Modes Command History (OPTIONAL) Enter the keyword out to activate only outbound policies. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. clear ip bgp as-number Reset BGP sessions. The soft parameter (BGP Soft Reconfiguration) clears the policies without resetting the TCP connection.
PAGE 716
out Command Modes Command History (OPTIONAL) Enter the keyword out to activate only outbound policies. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. clear ip bgp ipv6-address Reset BGP sessions specific to an IPv6 address. The soft parameter (BGP Soft Reconfiguration) clears the policies without resetting the TCP connection.
PAGE 717
Command Modes Command History EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. clear ip bgp peer-group Reset a peer-group’s BGP sessions. Syntax Parameters Command Modes Command History clear ip bgp peer-group peer-group-name peer-groupname Enter the peer group name to reset the BGP sessions within that peer group. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 718
clear ip bgp ipv6 flap-statistics Clear BGP flap statistics, which includes number of flaps and the time of the last flap. Syntax Parameters clear ip bgp ipv6 unicast flap-statistics [ipv6-address | filter-list as-path-name | regexp regular-expression] ipv6-address (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 719
clear ip bgp ipv6 unicast soft Clear and reapply policies for IPv6 unicast routes without resetting the TCP connection; that is, perform BGP soft reconfiguration. Syntax Parameters clear ip bgp {* | as-number | ipv4-neighbor-addr | ipv6neighbor-addr | peer-group name} ipv6 unicast soft [in | out] * Clear and reapply policies for all BGP sessions. as-number Clear and reapply policies for all neighbors belonging to the AS. The range is from 0 to 65535 (2 Byte), from 1 to 4294967295 (4 Byte), or from 0.
PAGE 720
NOTE: The :: notation specifies successive hexadecimal fields of zeros. Command Modes Command History Usage Information peer-group peer-groupname Enter the keywords peer-group then the name of the peer group. in (OPTIONAL) Enter the keyword in to view only information on inbound BGP routes. out (OPTIONAL) Enter the keyword out to view only information on outbound BGP routes. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 721
NOTE: The :: notation specifies successive hexadecimal fields of zeros. Command Modes Command History Usage Information peer-group peer-groupname Enter the keywords peer-group then the name of the peer group. in (OPTIONAL) Enter the keyword in to view only information on inbound BGP routes. out (OPTIONAL) Enter the keyword out to view only information on outbound BGP routes. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 722
debug ip bgp ipv6 unicast soft-reconfiguration Enable soft-reconfiguration debugging for IPv6 unicast routes. Syntax debug ip bgp [ipv4-address | ipv6-address | peer-group-name] ipv6 unicast soft-reconfiguration To disable debugging, use the no debug ip bgp [ipv4-address | ipv6address | peer-group-name] ipv6 unicast soft-reconfiguration command. Parameters ipv4-address | ipv6-address Enter the IP address of the neighbor on which you want to enable soft-reconfiguration debugging.
PAGE 723
Command Modes Command History Usage Information peer-group peer-groupname (OPTIONAL) Enter the keywords peer-group then the name of the peer group. in (OPTIONAL) Enter the keyword in to view only inbound keepalive messages. out (OPTIONAL) Enter the keyword out to view only outbound keepalive messages. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Entering a no debug ip bgp command removes all configured debug commands for BGP.
PAGE 724
Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Entering a no debug ip bgp command removes all configured debug commands for BGP. debug ip bgp updates Allows you to view information about BGP updates.
PAGE 725
default-metric Allows you to change the metrics of redistributed routes to locally originated routes. Use this command with the redistribute command. Syntax default-metric number To return to the default setting, use the no default-metric command. Parameters number Defaults 0 Command Modes ROUTER BGP Command History Version 9.2(0.0) Enter a number as the metric to be assigned to routes from other protocols. The range is from 1 to 4294967295. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 726
distance bgp Configure three administrative distances for routes. Syntax distance bgp external-distance internal-distance local-distance To return to default values, use the no distance bgp command. Parameters Defaults Command Modes Command History Usage Information externaldistance Enter a number to assign to routes learned from a neighbor external to the AS. The range is from 1 to 255. The default is 20. internaldistance Enter a number to assign to routes learned from a router within the AS.
PAGE 727
Parameters ebgp Enter the keyword ebgp to enable multipath support for External BGP routes. ibgp Enter the keyword ibgp to enable multipath support for Internal BGP routes. number Enter a number as the maximum number of parallel paths. The range is from 1 to 16. The default is 1. Defaults 1 Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 728
Usage Information By default, when you create a neighbor/peer group configuration in the Router BGP context, it is enabled for the IPv6/Unicast AFI/SAFI. By using activate in the new context, the neighbor/peer group is enabled for AFI/SAFI. neighbor advertisement-interval Set the advertisement interval between BGP neighbors or within a BGP peer group.
PAGE 729
Parameters ip-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-groupname Enter the name of the peer group to set the advertisement interval for all routers in the peer group. number Enter a number of times to allow this neighbor ID to use the AS path. The range is from 1 to 10. Defaults Not configured. Command Modes ROUTER BGP Command History Related Commands Version 9.2(0.
PAGE 730
Usage Information If you apply a route map to a BGP peer or neighbor with the neighbor defaultoriginate command configured, the software does not apply the set filters in the route map to that BGP peer or neighbor. neighbor description Assign a character string describing the neighbor or group of neighbors (peer group). Syntax neighbor {ipv6-address | peer-group-name} description text To delete a description, use the no neighbor {ipv6-address | peer-groupname} description text command.
PAGE 731
peer-groupname Enter the name of the peer group. prefix-listname Enter the name of an established prefix list. If the prefix list is not configured, the default is permit (to allow all routes). in Enter the keyword in to distribute only inbound traffic. out Enter the keyword out to distribute only outbound traffic. Defaults Not configured. Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Related Commands Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 732
Usage Information To prevent loops, the neighbor ebgp-multihop command does not install default routes of the multihop peer. Networks not directly connected are not considered valid for best path selection. neighbor fall-over Enable or disable fast fall-over for BGP neighbors. Syntax neighbor {ipv6-address | peer-group-name} fall-over To disable, use the no neighbor {ipv6-address | peer-group-name} fall-over command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format.
PAGE 733
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-groupname Enter the name of the peer group to apply the filter to all routers in the peer group. in Enter the keyword in to filter inbound BGP routes. out Enter the keyword out to filter outbound BGP routes. Defaults Not configured. Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Version 9.2(0.
PAGE 734
Defaults threshold = 75 Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information If you configure the neighbor maximum-prefix command and the neighbor receives more prefixes than allowed by the neighbor maximum-prefix command configuration, the neighbor goes down and the show ip bgp ipv6 unicast summary command displays (prfxd) in the State/PfxRcd column for that neighbor.
PAGE 735
neighbor next-hop-self Allows you to configure the router as the next hop for a BGP neighbor. (This command is used for IBGP). Syntax neighbor {ipv6-address | peer-group-name} next-hop-self To return to the default setting, use the no neighbor {ipv6-address | peergroup-name} next-hop-self command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-groupname (OPTIONAL) Enter the name of the peer group.
PAGE 736
Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. You can assign up to 64 peers to one peer group. When you add a peer to a peer group, it inherits all the peer group’s configured parameters.
PAGE 737
Command Modes Command History ROUTER BGP Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When a peer group is created, it is disabled (shut mode). Related Commands neighbor peer-group (assigning peers) — assigns routers to a peer group. neighbor remote-as — assigns a indirectly connected AS to a neighbor or peer group. neighbor shutdown — disables a peer or peer group.
PAGE 738
neighbor remote-as Create and specify the remote peer to the BGP neighbor. Syntax neighbor {ipv6-address | peer-group-name} remote-as number To delete a remote AS entry, use the no neighbor {ipv6-address | peergroup-name} remote-as number command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-groupname Enter a text string up to 16 characters long as the name of the peer group.
PAGE 739
peer-groupname Enter the name of the peer group to remove the private AS numbers. Defaults Disabled (that is, the private AS number are not removed). Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Applies to external border gateway protocol (EBGP) neighbors only. If the AS-PATH contains both public and private AS number or contains AS numbers of an EBGP neighbor, the private AS numbers are not removed.
PAGE 740
Command Modes Command History Usage Information ROUTER BGPV6-ADDRESS FAMILY Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted. If you identify a peer group by name, the peers in that peer group inherit the characteristics in the Route map used in this command.
PAGE 741
neighbor send-community Send a COMMUNITY attribute to a BGP neighbor or peer group. A COMMUNITY attribute indicates that all routes with that attribute belong to the same community grouping. Syntax neighbor {ipv6-address | peer-group-name} send-community To disable sending a COMMUNITY attribute, use the no neighbor {ipv6address | peer-group-name} send-community command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format.
PAGE 742
Usage Information Peers that are enabled within a peer group are disabled when their peer group is disabled. The neighbor shutdown command terminates all BGP sessions on the BGP neighbor or BGP peer group. Use this command with caution as it terminates the specified BGP sessions. When a neighbor or peer group is shutdown, use the show ip bgp ipv6 unicast summary command to confirm its status. Related Commands show ip bgp ipv6 unicast summary — displays the current BGP configuration.
PAGE 743
neighbor subnet Enable passive peering so that the members of the peer group are dynamic. Syntax neighbor peer-group-name subnet subnet-number mask To remove passive peering, use the no neighbor peer-group-name subnet subnet-number mask command. Parameters subnet-number Enter a subnet number in dotted decimal format (A.B.C.D.) as the allowable range of addresses included in the Peer group. To allow all addresses, enter 0::0/0. mask Enter a prefix mask in / prefix-length format (/x).
PAGE 744
Defaults Command Modes Command History Usage Information • keepalive = 60 seconds • holdtime = 180 seconds ROUTER BGP Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Timer values configured with the neighbor timers command override the timer values configured with the timers bgp command.
PAGE 745
Usage Information Loopback interfaces are up constantly and the BGP session may need one interface constantly up to stabilize the session. The neighbor update-source command is not necessary for directly connected internal BGP sessions. neighbor weight Assign a weight to the neighbor connection, which is used to determine the best path. Syntax neighbor {ipv6-address | peer-group-name} weight weight To remove a weight value, use the no neighbor {ipv6-address | peergroup-name} weight weight command.
PAGE 746
Parameters ipv6-address prefix-length Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros. mask Enter the mask of the IP address in the slash prefix length format (for example, /24). The mask appears in command outputs in dotted decimal format (A.B.C.D). route-map map-name (OPTIONAL) Enter the keywords route-map then the name of an established route map.
PAGE 747
Command Modes Command History Usage Information ROUTER BGPV6-ADDRESS FAMILY Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Though the system does not generate a route due to backdoor config, there is an option for injecting/ sourcing a local route in presence of network backdoor config on a learned route. redistribute Redistribute routes into BGP.
PAGE 748
redistribute isis Redistribute IS-IS routes into BGP. Syntax redistribute isis [level-1 | level-1-2 | level-2] [metric metric-value | metric-type {external | internal}] [route-map map-name] To stop redistribution of IS-IS routes, use the no redistribute isis command. Parameters level-1 | level-1-2 | level-2] (OPTIONAL) Enter the type (level) of routes to redistribute. metric (OPTIONAL) Assign metric to an interface for use with IPv6 information.
PAGE 749
match external {1 | 2} (OPTIONAL) Enter the keywords match external to redistribute OSPF external routes. You can specify 1 or 2 to redistribute those routes only. match internal (OPTIONAL) Enter the keywords match internal to redistribute OSPFv3 internal routes only. route-map map-name (OPTIONAL) Enter the keywords route-map then the name of an established route map. If the route map is not configured, the default is deny (to drop all routes). Defaults Not configured.
PAGE 750
show capture bgp-pdu neighbor Display BGP packet capture information for an IPv6 address. Syntax Parameters Defaults Command Modes Command History Related Command show capture bgp-pdu neighbor ipv6-address ipv6-address • EXEC • EXEC Privilege Enter the IPv6 address (X:X:X:X::X) of a BGP neighbor. CONFIGURATION Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. capture bgp-pdu neighbor (ipv6) — enables capture of an IPv6 BGP neighbor packet.
PAGE 751
neighbor 4000::33 no shutdown neighbor 4000::60 remote-as 18508 neighbor 4000::60 no shutdown neighbor 9000::1:2 remote-as 640 no neighbor 9000::1:2 activate neighbor 9000::1:2 no shutdown ! Dell# show ip bgp ipv6 unicast View the current BGP information.
PAGE 752
Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast community View information on all routes with community attributes or view specific BGP community groups.
PAGE 753
show ip bgp ipv6 unicast community-list View routes that are affected by a specific community list. Syntax Paramters Command Modes Command History show ip bgp ipv6 unicast community-list community-list-name [exact-match] communitylist-name Enter the name of a configured IP community list. exact-match (OPTIONAL) Enter the keywords exact-match to display only for an exact match of the communities. • EXEC • EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 754
Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast extcommunity-list View information on all routes with Extended Community attributes. Syntax Parameters Command Modes Command History Usage Information show ip bgp ipv6 unicast extcommunity-list [list name] list name • EXEC • EXEC Privilege Version 9.2(0.0) Enter the extended community list name you wish to view. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 755
show ip bgp ipv6 unicast flap-statistics View flap statistics on BGP routes. Syntax Parameters show ip bgp ipv6 unicast flap-statistics [ipv6-address prefixlength] [filter-list as-path-name] [regexp regular-expression] ipv6-address prefix-length Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 756
Command Modes Command History • • EXEC EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast neighbors Displays information on IPv6 unicast routes exchanged by BGP neighbors.
PAGE 757
Command Modes Command History Usage Information • EXEC • EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp ipv6 unicast neighbors command shown in the Example below. Lines Beginning With Description BGP neighbor Displays the BGP neighbor address and its AS number. The last phrase in the line indicates whether the link between the BGP router and its neighbor is an external or internal one.
PAGE 758
Example Lines Beginning With Description For address family: Displays IPv6 Unicast as the address family. BGP table version Displays which version of the primary BGP routing table the router and the neighbor are using. Prefixes accepted Displays the number of network prefixes accepted by the router and the amount of memory used to process those prefixes. Prefixes advertised Displays the number of network prefixes advertised, the number rejected, and the number withdrawn from the BGP routing table.
PAGE 759
2 accepted prefixes consume 32 bytes Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer Prefixes advertised 0, rejected 0, withdrawn 0 from peer Connections established 3; dropped 2 Last reset 00:00:39, due to Closed by neighbor Notification History 'OPEN error/Bad AS' Sent : 0 Recv: 1 Local host: 5ffe:10::4, Local port: 179 Foreign host: 5ffe:10::3, Foreign port: 35470 Notification History 'Connection Reset' Sent : 1 Recv: 0 BGP neighbor is 5ffe:11::3, remote AS 1, external link BGP version 4, remo
PAGE 760
Parameters Command Modes Command History Example peer-groupname (OPTIONAL) Enter the name of a peer group to view information about that peer group only. detail (OPTIONAL) Enter the keyword detail to view peer-groupspecific information for the IPv6 address family. summary (OPTIONAL) Enter the keyword summary to view status information of the peers in that peer group. The output is the same as that found in the show ip bgp ipv6 unicast summary command. • EXEC • EXEC Privilege Version 9.2(0.
PAGE 761
Command History Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell# show ip bgp summary BGP router identifier 55.55.55.
PAGE 762
show ip bgp paths View all the BGP path attributes in the BGP database. Syntax Parameters show ip bgp paths [regexp regular-expression] regexp regularexpression Enter a regular expression then use one or a combination of the following characters to match: • . = (period) any single character (including a white space). • * = (asterisk) the sequences in a pattern (0 or more sequences). • + = (plus) the sequences in a pattern (1 or more sequences).
PAGE 763
show ip bgp paths community View all unique COMMUNITY numbers in the BGP database. Syntax show ip bgp paths community Command Modes • EXEC • EXEC Privilege Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp paths extcommunity View all unique extended community information in the BGP database. Syntax show ip bgp paths extcommunity Command Modes • EXEC • EXEC Privilege Command History Version 9.2(0.
PAGE 764
Command Modes Command History • EXEC • EXEC Privilege Version 9.2(0.0) • ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified. • $ = (dollar sign) the end of the output string. Introduced on the MXL 10/40GbE Switch IO Module. timers bgp Allows you to adjust the BGP network timers for all neighbors.
PAGE 765
IPv6 MBGP Commands Multiprotocol BGP (MBGP) is an enhanced BGP that enables multicast routing policy throughout the Internet and connecting multicast topologies between BGP and autonomous systems (AS). The Dell Networking MBGP is implemented as per IETF RFC 1858. address family This command changes the context to subsequent address family identifier (SAFI). Syntax address family ipv6 unicast To remove SAFI context, use the no address family ipv6 unicast command.
PAGE 766
advertise-map map-name (OPTIONAL) Enter the keywords advertise-map then the name of a configured route map to set filters for advertising an aggregate route. as-set (OPTIONAL) Enter the keywords as-set to generate path attribute information and include it in the aggregate. AS_SET includes AS_PATH and community information from the routes included in the aggregated route.
PAGE 767
bgp dampening Enable MBGP route dampening. Syntax bgp dampening [half-life time] [route-map map-name] To disable route dampening, use the no bgp dampening [half-life time] [route-map map-name] command. Parameters half-life time (OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half, after the half-life period expires. The range is from 1 to 45. The default is 15 minutes.
PAGE 768
Command Modes Command History EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. clear ip bgp ipv6 unicast dampening Clear information on route dampening. Syntax Parameters Command Modes Command History clear ip bgp dampening ipv6 unicast [network network-mask] network (OPTIONAL) Enter the IPv6 network address in x:x:x:x::x format. network-mask If you enter the network address, next enter the network mask, from 0 to 128. EXEC Privilege Version 9.2(0.
PAGE 769
Command Modes Command History • [ ] (brackets) matches a range of single-character patterns. • ^ (caret) matches the beginning of the input string. (If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.) • $ (dollar sign) matches the end of the output string. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug ip bgp ipv6 unicast dampening View information on routes being dampened.
PAGE 770
Command Modes Command History updates Enter the keyword updates to view BGP update information. in (OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors. out (OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug ip bgp ipv6 unicast updates View information about BGP updates.
PAGE 771
distance bgp Define an administrative distance for routes. Syntax distance bgp external-distance internal-distance local-distance To return to default values, use the no distance bgp command. Parameters Defaults Command Modes Command History Usage Information externaldistance Enter a number to assign to routes learned from a neighbor external to the AS. The range is from 1 to 255. The default is 20. internaldistance Enter a number to assign to routes learned from a router within the AS.
PAGE 772
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-groupname Identify a peer group by name. activate Enter the keyword activate to enable the identified neighbor or peer group in the new AFI/SAFI. Defaults Disabled. Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 773
• Command Modes Command History seconds = 30 seconds (external peers) ROUTER BGPV6-ADDRESS FAMILY Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor default-originate Inject the default route to a BGP peer or neighbor. Syntax neighbor {ipv6-address | peer-group-name} default-originate [route-map map-name] To remove a default route, use the no neighbor {ipv6-address | peergroup-name} default-originate command.
PAGE 774
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-groupname Enter the name of the peer group. prefix-listname Enter the name of an established prefix list. If the prefix list is not configured, the default is permit (to allow all routes). in Enter the keyword in to distribute only inbound traffic. out Enter the keyword out to distribute only outbound traffic. Defaults Not configured.
PAGE 775
out Enter the keyword out to filter outbound BGP routes. Defaults Not configured. Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor maximum-prefix Control the number of network prefixes received.
PAGE 776
neighbor next-hop-self Allows you to configure the router as the next hop for a BGP neighbor. Syntax neighbor {ipv6-address | peer-group-name} next-hop-self To return to the default setting, use the no neighbor {ipv6-address | peergroup-name} next-hop-self command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-groupname (OPTIONAL) Enter the name of the peer group. Defaults Disabled.
PAGE 777
Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor route-map Apply an established route map to either incoming or outbound routes of a BGP neighbor or peer group. Syntax neighbor {ipv6-address | peer-group-name} route-map map-name {in | out} To remove the route map, use the no neighbor {ipv6-address | peergroup-name} route-map map-name {in | out} command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format.
PAGE 778
neighbor route-reflector-client Configure a neighbor as a member of a route reflector cluster. Syntax neighbor {ipv6-address | peer-group-name} route-reflectorclient To indicate that the neighbor is not a route reflector client or to delete a route reflector configuration, use the no neighbor {ipv6-address | peer-groupname} route-reflector-client command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 779
route-map map-name (OPTIONAL) Enter the keywords route-map then the name of an established route map. If the route map is not configured, the default is deny (to drop all routes). Defaults Not configured. Command Modes ROUTER BGPV6-ADDRESS FAMILY Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 780
Usage Information If you do not configure the default-metric command, in addition to the redistribute command, or there is no route map to set the metric, the metric for redistributed static and connected is “0”. To redistribute the default route (0::0/0), configure the neighbor defaultoriginate command. Related Commands neighbor default-originate — injects the default route. show ip bgp ipv6 unicast View the current BGP information.
PAGE 781
Command Modes Command History • EXEC • EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast community View information on all routes with community attributes or view specific BGP community groups.
PAGE 782
show ip bgp ipv6 unicast community-list View routes that are affected by a specific community list. Syntax Paramters Command Modes Command History show ip bgp ipv6 unicast community-list community-list-name communitylist-name • EXEC • EXEC Privilege Version 9.2(0.0) Enter the name of a configured IP community list. Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast dampened-paths View BGP routes that are dampened (non-active).
PAGE 783
NdAuto 1 : NdEqCost 1 : NdSync 0 : NdDefOrg 0 NdV6ListSoc 14 NdDefDid 0 : NdConfedId 0 : NdMedConfed 0 : NdMedMissVal -1 : NdIgnrIllId 0 : NdRRC2C 1 : NdClstId 33686273 : NdPaTblP 0x41a19088 NdASPTblP 0x41a19090 : NdCommTblP 0x41a19098 : NhOptTransTblP 0x41a190a0 : NdRRClsTblP 0x41a190a8 NdPktPA 0 : NdLocCBP 0x41a6f000 : NdTmpPAP 0x419efc80 : NdTmpASPAP 0x41a25000 : NdTmpCommP 0x41a25800 NdTmpRRClP 0x41a4b000 : NdTmpOptP 0x41a4b800 : NdTmpNHP : NdOrigPAP 0 NdOrgNHP 0 : NdModPathP 0x419efcc0 : NdModASPAP 0x4
PAGE 784
filter-list aspath-name (OPTIONAL) Enter the keywords filter-list then the name of a configured AS-PATH ACL. regexp regularexpression Enter a regular expression then use one or a combination of the following characters to match: • . = (period) any single character (including a white space). • * = (asterisk) the sequences in a pattern (0 or more sequences). • + = (plus) the sequences in a pattern (1 or more sequences). • ? = (question mark) sequences in a pattern (either 0 or 1 sequences).
PAGE 785
show ip bgp ipv6 unicast inconsistent-as View routes with inconsistent originating autonomous system (AS) numbers; that is, prefixes that are announced from the same neighbor AS but with a different AS-Path. Syntax show ip bgp ipv6 unicast inconsistent-as Command Modes • EXEC • EXEC Privilege Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast neighbors Allows you to view the information exchanged by BGP neighbors.
PAGE 786
Usage Information 786 The following describes the show ip bgp ipv6 unicast neighbors command shown in the Example below. Lines Beginning With Description BGP neighbor Displays the BGP neighbor address and its AS number. The last phrase in the line indicates whether the link between the BGP router and its neighbor is an external or internal one. If they are located in the same AS, then the link is internal; otherwise, the link is external.
PAGE 787
Example Lines Beginning With Description Prefixes advertised Displays the number of network prefixes advertised, the number rejected, and the number withdrawn from the BGP routing table. Connections established Displays the number of TCP connections established and dropped between the two peers to exchange BGP information. Last reset Displays the amount of time since the peering session was last reset. Also states if the peer resets the peering session.
PAGE 788
Foreign host: 5ffe:10::3, Foreign port: 35470 Notification History 'Connection Reset' Sent : 1 Recv: 0 BGP neighbor is 5ffe:11::3, remote AS 1, external link BGP version 4, remote router ID 5.5.5.
PAGE 789
Command History Related Commands Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor peer-group (assigning peers) — assigns a peer to a peer-group. neighbor peer-group (creating group) — creates a peer group. show ip bgp ipv6 unicast summary Allows you to view the status of all BGP connections. Syntax show ip bgp ipv6 unicast summary Command Modes • EXEC • EXEC Privilege Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 790
Field Description AS Displays the AS number of the neighbor. MsgRcvd Displays the number of BGP messages that neighbor received. MsgSent Displays the number of BGP messages that neighbor sent. TblVer Displays the version of the BGP table that was sent to that neighbor. InQ Displays the number of messages from that neighbor waiting to be processed. OutQ Displays the number of messages waiting to be sent to that neighbor.
PAGE 791
iSCSI Optimization 27 Internet small computer system interface (iSCSI) optimization enables quality-of-service (QoS) treatment for iSCSI storage traffic. To configure and verify the iSCSI optimization feature, use the following Dell Networking Operating System (OS) commands. advertise dcbx-app-tlv Configure DCBX to send iSCSI TLV advertisements. Syntax advertise dcbx-app-tlv iscsi To disable DCBX iSCSI TLV advertisements, use the no advertise dcbx-apptlv iscsi command. Defaults Disabled.
PAGE 792
Defaults 10 minutes Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. iscsi cos Set the QoS policy that is applied to the iSCSI flows. Syntax iscsi cos {enable | disable | dot1p vlan-priority-value [remark] | dscp dscp-value [remark]} To disable the QoS policy, use the no iscsi cos dscp command.
PAGE 793
Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. iscsi enable Globally enable iSCSI optimization. Syntax iscsi enable To disable iSCSI optimization, use the no iscsi enable command. Parameters enable Defaults Disabled. Command Modes CONFIGURATION Command History Usage Information Enter the keyword enable to enable the iSCSI optimization feature.
PAGE 794
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. iscsi profile-compellant Configure the auto-detection of Dell Compellent arrays on a port. Syntax iscsi profile-compellent Defaults Dell Compellent disk arrays are not detected. Command Modes INTERFACE Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 795
Version 8.3.16.1 Usage Information Introduced on the MXL 10/40GbE Switch IO Module. You can configure up to 16 target TCP ports on the switch in one command or multiple commands. When you use the no iscsi target port command and the TCP port you wish to delete is one bound to a specific IP address, the IP address value must be included in the command. show iscsi Display the currently configured iSCSI settings.
PAGE 796
show iscsi session Display information about active iSCSI sessions on the switch. Syntax show iscsi session Command Modes • EXEC • EXEC Privilege Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell# show isci session Session 0: -----------------------------------------------------Target: iqn.2001-05.com.equallogic: 0-8a0906-0e70c2002-10a0018426a48c94-iom010 Initiator: iqn.1991-05.com.
PAGE 797
Example Related Commands Dell# show isci session detailed Session 0 : --------------------------------------------------Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1 Initiator:iqn.2010-11.com.ixia.ixload:initiator-iscsi-2c Up Time:00:00:01:28(DD:HH:MM:SS) Time for aging out:00:00:09:34(DD:HH:MM:SS) ISID:806978696102 Initiator Initiator Target Target Connection IP Address TCP Port IP Address TCPPort ID 10.10.0.44 33345 10.10.0.
PAGE 798
PAGE 799
Intermediate System to Intermediate System (IS-IS) 28 The intermediate system to intermediate system (IS-IS) protocol for IPv4 and IPv6 is supported on the on the MXL 10/40GbE Switch IO Module. IS-IS is an interior gateway protocol that uses a shortest-path-first algorithm. IS-IS facilitates the communication between open systems, supporting routers passing both IP and OSI traffic. A router is considered an intermediate system. Networks are partitioned into manageable routing domains, called areas.
PAGE 800
advertise Leak routes between levels (distribute IP prefixes between Level 1 and Level 2 and vice versa). Syntax advertise {level1-into-level2 | level2-into-level1} prefixlist-name To return to the default, use the no advertise {level1-into-level2 | level2-into-level1}[prefix-list-name] command. Parameters Defaults Command Modes Command History Usage Information level1-intolevel2 Enter the keywords level1-into-level2 to advertise Level 1 routes into Level 2 LSPs. This setting is the default.
PAGE 801
password Defaults Not configured. Command Modes ROUTER ISIS Command History Usage Information Version 9.2(0.0) Enter a 1 to 16-character length alphanumeric string to prevent unauthorized access or incorrect routing information corrupting the link state database. The password is processed as plain text, which only provides limited security. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 802
clear isis Restart the IS-IS process. All IS-IS data is cleared. Syntax Parameters Command Modes Command History clear isis [tag] {* | database | traffic} tag (Optional) Enter an alphanumeric string to specify the IS-IS routing tag area. * Enter the keyword * to clear all IS-IS information and restart the IS-IS process. This command removes IS-IS neighbor information and IS-IS LSP database information and the full SPF calculation is done. database Clears IS-IS LSP database information.
PAGE 803
debug isis Enable debugging for all IS-IS operations. Syntax debug isis To disable debugging of IS-IS, use the no debug isis command. Command Modes Command History Usage Information EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Entering debug isis enables all debugging parameters. To display all debugging information in one output, use this command. To turn off debugging, you normally enter separate no forms of each command.
PAGE 804
debug isis local-updates To debug IS-IS local update packets, enable debugging on a specific interface and provides diagnostic information. Syntax debug isis local-updates [interface] To turn off debugging, use the no debug isis local-updates [interface] command. Parameters Command Modes Command History interface (OPTIONAL) Identifies the interface type slot/port as one of the following: • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 805
Command Modes Command History EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug isis spf-triggers Enable debugging on the events that triggered IS-IS shortest path first (SPF) events for debugging purposes. Syntax debug isis spf-triggers To turn off debugging, use the no debug isis spf-triggers command. Command Modes Command History EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 806
default-information originate Generates a default route into an IS-IS routing domain and controls the distribution of default information. Syntax default-information originate [always] [metric metric] [routemap map-name] To disable the generation of a default route into the specified IS-IS routing domain, use the no default-information originate [always] [metric metric] [route-map map-name] command. Parameters always (OPTIONAL) Enter the keyword always to have the default route always advertised.
PAGE 807
description Enter a description of the IS-IS routing protocol. Syntax description {description} To remove the description, use the no description {description} command. Parameters description Defaults none Command Modes ROUTER ISIS Command History Related Commands Version 9.2(0.0) Enter a description to identify the IS-IS protocol (80 characters maximum). Introduced on the MXL 10/40GbE Switch IO Module. router isis — Enter ROUTER mode on the switch.
PAGE 808
Usage Information The administrative distance indicates the trust value of incoming packets. A low administrative distance indicates a high trust rate. A high value indicates a lower trust rate. For example, a weight of 255 is interpreted that the routing information source is not trustworthy and should be ignored. distribute-list in Filter network prefixes received in updates.
PAGE 809
distribute-list out Suppress network prefixes from being advertised in outbound updates. Syntax distribute-list prefix-list-name out [connected | bgp as number | ospf process-id | rip | static] To return to the default values, use the no distribute-list prefix-listname out [bgp as number connected | ospf process-id | rip | static] command. Parameters Defaults Command Modes Command History Usage Information Related Commands prefix-listname Specify the prefix list to filter prefixes in routing updates.
PAGE 810
To return to the default, use the no distribute-list redistributedoverride in command. Defaults none Command Modes • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you execute this command, IS-IS does not download the route to the routing table if the same route was redistributed into IS-IS routing protocol on the same router.
PAGE 811
graceful-restart ietf Enable graceful restart on an IS-IS router. Syntax graceful-restart ietf To return to the default, use the no graceful-restart ietf command. Parameters ietf Enter ietf to enable graceful restart on the IS-IS router. Defaults Graceful restart disabled. Command Modes ROUTER ISIS Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Every graceful restart enabled router’s HELLO PDUs includes a restart TLV.
PAGE 812
graceful-restart t1 Set the graceful restart wait time before unacknowledged restart requests are generated. This wait time is the interval before the system sends a restart request (an IIH with RR bit set in Restart TLV) until the CSNP is received from the helping router. Syntax graceful-restart t1 {interval seconds | retry-times value} To return to the default, use the no graceful-restart t1 command. Parameters interval Enter the keyword interval to set the wait time.
PAGE 813
graceful-restart t3 Configure the overall wait time before graceful restart completes. Syntax graceful-restart t3 {adjacency | manual} seconds To return to the default, use the no graceful-restart t3 command. Parameters adjacency Enter the keyword adjacency so that the restarting router receives the remaining time value from its peer and adjusts its T3 value so if you have configured this option. manual Enter the keyword manual to specify a time value that the restarting router uses.
PAGE 814
Parameters seconds Defaults 30 seconds Command Modes ROUTER ISIS Command History Related Commands Version 9.2(0.0) Enter the graceful restart time in seconds. The range is from 5 to 300 seconds. The default is 30 seconds. Introduced on the MXL 10/40GbE Switch IO Module. graceful-restart t3 — configures the overall wait time before graceful restart completes.
PAGE 815
hostname dynamic Enables dynamic learning of hostnames from routers in the domain and allows the routers to advertise the hostname in LSPs. Syntax hostname dynamic To disable this command, use the no hostname dynamic command. Defaults Enabled. Command Modes ROUTER ISIS Command History Version 9.2(0.0) Turn ON or OFF hello padding on an interface basis. Usage Information To build name-to-systemID mapping tables through the protocol, use this command.
PAGE 816
ip router isis Configure IS-IS routing processes on an interface and attach an area tag name to the routing process. Syntax ip router isis [tag] To disable IS-IS on an interface, use the no ip router isis [tag] command. Parameters tag (OPTIONAL) The tag you specify identifies a specific area routing process. If you do not specify a tag, a null tag is assigned. Defaults No processes are configured. Command Modes INTERFACE Command History Usage Information Related Commands Version 9.2(0.
PAGE 817
To establish adjacencies and establish dynamic routing, enable routing on one or more interfaces. You can configure only one IS-IS routing process to perform Level 2 routing. A level-1-2 designation performs Level 1 and Level 2 routing at the same time. Related Commands • net — configures an IS-IS network entity title (NET) for the routing process. • is-type — assigns a type for a given area. isis circuit-type Configure the adjacency type on interfaces.
PAGE 818
isis csnp-interval Configure the IS-IS complete sequence number PDU (CSNP) interval on an interface. Syntax isis csnp-interval seconds [level-1 | level-2] To return to the default values, use the no isis csnp-interval [seconds] [level-1 | level-2] command. Parameters seconds Interval of transmission time between CSNPs on multiaccess networks for the designated intermediate system. The range is from 0 to 65535. The default is 10.
PAGE 819
Defaults seconds = 10; level-1 (if not otherwise specified) Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The default values of this command are typically satisfactory transmission times for a specific interface on a designated intermediate system. To maintain database synchronization, the designated routers send CSNPs. You can configure Level 1 and Level 2 CSNP intervals independently.
PAGE 820
isis hello padding Turn ON or OFF padding of hello PDUs from INTERFACE mode. Syntax isis hello padding To return to the default, use the no isis hello padding command. Defaults Padding of hello PDUs is enabled (ON). Command Modes INTERFACE Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Hello PDUs are “padded” only when both the global and interface padding options are ON. Turning either one OFF disables padding for the corresponding interface.
PAGE 821
Usage Information Dell Networking recommends configuring metrics on all interfaces. Without configuring this command, the IS-IS metrics are similar to hop-count metrics. isis metric Assign a metric to an interface. Syntax isis metric default-metric [level-1 | level-2] To return to the default values, use the no isis metric [default-metric] [level-1 | level-2] command.
PAGE 822
Defaults Not enabled. Command Modes INTERFACE Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. isis password Configure an authentication password for an interface. Syntax isis password [hmac-md5] password [level-1 | level-2] To delete a password, use the no isis password [password] [level-1 | level-2] command. Parameters encryptiontype (OPTIONAL) Enter 7 to encrypt the password using DES.
PAGE 823
This password provides limited security as it is processed as plain text. isis priority Set the priority of the designated router you select. Syntax isis priority value [level-1 | level-2] To return to the default values, use the no isis priority [value] [level-1 | level-2] command. Parameters value This value sets the router priority. The higher the value, the higher the priority. The range is from 0 to 127. The default is 64. level-1 (OPTIONAL) Specify the priority for Level 1.
PAGE 824
Parameters level-1 Allows a router to act as a Level 1 router. level-1-2 Allows a router to act as both a Level 1 and Level 2 router. This setting is the default. level-2-only Allows a router to act as a Level 2 router. Defaults level-1-2 Command Modes ROUTER ISIS Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The IS-IS protocol automatically determines area boundaries and are able to keep Level 1 and Level 2 routing separate.
PAGE 825
To restore default values, use the no lsp-gen-interval [level-l | level-2] interval seconds [initial_wait_interval seconds [second_wait_interval seconds]] command. Parameters level-l (OPTIONAL) Enter the keywords level-1 to apply the configuration to generation of Level-1 LSPs. level-2 (OPTIONAL) Enter the keywords level-2 to apply the configuration to generation of Level-2 LSPs. interval seconds Enter the maximum number of seconds between LSP generations. The range is from 0 to 120 seconds.
PAGE 826
To return to the default values, use the no lsp-mtu command. Parameters size Defaults 1497 bytes. Command Modes ROUTER ISIS Command History Usage Information Version 9.2(0.0) The maximum LSP size, in bytes. The range is from 128 to 1497 for Non-Jumbo mode and from 128 to 9195 for Jumbo mode. The default is 1497. Introduced on the MXL 10/40GbE Switch IO Module. The link MTU and the LSP MTU size must be the same.
PAGE 827
state database corruption can persist at the cost of increased link utilization. A higher value reduces the link utilization the flooding of refreshed packets causes. Related Commands max-lsp-lifetime — sets the maximum interval that LSPs persist without being refreshed. max-area-addresses Configure manual area addresses. Syntax max-area-addresses number To return to the default values, use the no max-area-addresses command.
PAGE 828
Command Modes Command History Usage Information ROUTER ISIS Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Change the maximum LSP lifetime with this command. The maximum LSP lifetime must always be greater than the LSP refresh interval. The seconds parameter enables the router to keep LSPs for the specified length of time. If the value is higher, the overhead is reduced on slower-speed links. Related Commands lsp-refresh-interval — sets the link-state packet (LSP) refresh interval.
PAGE 829
Parameters narrow Allows you to generate and accept old-style TLVs. The metric range is from 0 to 63. transition Allows you to generate both old-style and new-style TLVs. The metric range is from 0 to 63. wide Allows you to generate and accept only new-style TLVs. The metric range is from 0 to 16777215. level-1 Enables the metric style on Level 1. level-2 Enables the metric style on Level 2. Defaults narrow; if no Level is specified, Level-1 and Level-2 are configured.
PAGE 830
net To configure an IS-IS network entity title (NET) for a routing process, use this mandatory command. If you did not configure a NET, the IS-IS process does not start. Syntax net network-entity-title To remove a net, use the no net network-entity-title command. Parameters networkentity-title Defaults Not configured. Command Modes ROUTER ISIS Command History Version 9.2(0.0) Specify the area address and system ID for an IS-IS routing process. The first 1 to 13 bytes identify the area address.
PAGE 831
Defaults Not configured. Command Modes ROUTER ISIS Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Although the passive interface does not send nor receive routing updates, the network on that interface is still included in the IS-IS updates sent using other interfaces. redistribute Redistribute routes from one routing domain to another routing domain.
PAGE 832
route-map map-name Defaults Command Modes Command History Usage Information (OPTIONAL) If you do not enter the route-map argument, all routes are redistributed. If a map-name value is not specified, no routers are imported. • metric metric-value = 0 • metric-type= internal; level-2 • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To redistribute a default route (0.0.0.
PAGE 833
To return to the default values, use the no redistribute bgp command with the appropriate parameters. Parameters AS number Enter a number that corresponds to the autonomous system number. The range is from 1 to 65355. level-1 (OPTIONAL) Routes are independently redistributed into ISIS Level 1 routes only. level-1-2 (OPTIONAL) Routes are independently redistributed into ISIS Level 1 and Level 2 routes. level-2 (OPTIONAL) Routes are independently redistributed into ISIS as Level 2 routes only.
PAGE 834
route-map rmap-isis-to-bgp redistribute ospf Redistribute routing information from an OSPF process. Syntax redistribute ospf process-id [level-1| level-1-2 | level-2] [match {internal | external}] [metric metric-value] [metrictype {external | internal}] [route-map map-name] To return to the default values, use the no redistribute ospf process-id [level-1| level-1-2 | level-2] [match {internal | external}] [metric metric-value][metric-type {external | internal}] [route-map map-name] command.
PAGE 835
If you do not specify a map-name, all routes are redistributed. If you specify a keyword, but fail to list route map tags, no routes are imported. Defaults Command Modes Command History Usage Information Refer to Parameters. • • ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. How a metric value assigned to a redistributed route is advertised depends on how on the configuration of the metric-style command.
PAGE 836
Related Commands • ip router isis — configures IS-IS routing processes for IP on interfaces and attaches an area designator to the routing process. • net — configures an IS-IS network entity title (NET) for a routing process. • is-type — assigns a type for a given area. set-overload-bit To set the overload bit in its non-pseudonode LSPs, configure the router. This setting prevents other routers from using it as an intermediate hop in their shortest path first (SPF) calculations.
PAGE 837
clns host ISIS 49.0000.0001.F100.E120.0013.00 log-adjacency-changes net 49.0000.0001.F100.E120.0013.00 ! address-family ipv6 unicast maximum-paths 16 multi-topology transition set-overload-bit spf-interval level-1 100 15 20 spf-interval level-2 120 20 25 exit-address-family Example (AddressFamily_IPv6) The bold section identifies that Multi-Topology IS-IS is enabled in Transition mode.
PAGE 838
Usage Information The following describes the show isis database command shown in the following example. Field Description IS-IS Level-1/ Level-2 Link State Database Displays the IS-IS link state database for Level 1 or Level 2. LSPID Displays the LSP identifier. The first six octets are the System ID of the originating router. The first six octets are the System ID of the originating router. The next octet is the pseudonode ID. If this byte is not zero, the LSP describes system links.
PAGE 839
Example The bold sections identify that MultiTopology IS-IS is enabled. Dell#show isis database IS-IS Level-1 Link State Database LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL ISIS.00-00 * 0x00000006 0xCF43 580 0/0/0 IS-IS Level-2 Link State Database LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL ISIS.00-00 * 0x00000006 0xCF43 580 0/0/0 ! Dell#show isis database detail ISIS.00-00 IS-IS Level-1 Link State Database LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL ISIS.
PAGE 840
show isis graceful-restart detail Display detailed IS-IS graceful restart related settings. Syntax show isis graceful-restart detail Command Modes • EXEC • EXEC Privilege Command History Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 841
show isis interface Display detailed IS-IS interface status and configuration information. Syntax Parameters Command Modes Command History Example show isis interface [interface] interface • EXEC • EXEC Privilege Version 9.2(0.0) (OPTIONAL) Enter the following keywords and slot/port or number information: • For Loopback interface, enter the keyword loopback then a number from 0 to 16383. • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 842
show isis neighbors Display information about neighboring (adjacent) routers. Syntax Parameters Command Modes Command History Usage Information show isis neighbors [level-1 | level-2] [detail] [interface] level-1 (OPTIONAL) Displays information about Level 1 IS-IS neighbors. level-2 (OPTIONAL) Displays information about Level 2 IS-IS neighbors. detail (OPTIONAL) Displays detailed information about neighbors.
PAGE 843
Example Field Description Uptime Displays the interfaces uptime. Circuit Id The neighbor’s interpretation of the designated router for the interface. The bold sections below identify that Multi-Topology IS-IS is enabled. Dell#show isis neighbors System Id Interface State Type Priority Uptime Circuit Id TEST Gi 7/1 Up L1L2(M) 127 09:28:01 TEST.02 ! Dell#show isis neighbors detail System Id Interface State Type Priority Uptime Circuit Id TEST Gi 7/1 Up L1L2(M) 127 09:28:04 TEST.02 Area Address(es): 49.
PAGE 844
Generate wide metrics: none Accept wide metrics: none Multi Topology Routing is enabled in transition mode. Dell# show isis traffic This command allows you to display IS-IS traffic interface information. Syntax Parameters Command Modes Command History Usage Information 844 show isis traffic [interface] interface • EXEC • EXEC Privilege Version 9.2(0.
PAGE 845
Example Item Description Level-1/Level-2 LSPs PSNPs (sent/ rcvd) Displays the number of PSNP LPSs sent and received. Level-1/Level-2 DR Elections Displays the number of times designated router elections ran. Level-1/Level-2 SPF Calculations Displays the number of shortest path first calculations. LSP checksum errors received Displays the number of checksum errors LSPs received. LSP authentication failures Displays the number of LSP authentication failures.
PAGE 846
level-2 (OPTIONAL) Enter the keyword level-2 to apply the configuration to Level-2 SPF calculations. interval seconds Enter the maximum number of seconds between SPF calculations. The range is from 0 to 120 seconds. The default is 10 seconds. initial_wait_inte rval seconds (OPTIONAL) Enter the initial wait time, in seconds, before running the first SPF calculations. The range is from 0 to 120 seconds. The default is 5 seconds.
PAGE 847
29 Link Aggregation Control Protocol (LACP) This chapter contains commands for Dell Networks’s implementation of the link aggregation control protocol (LACP) for creating dynamic link aggregation groups (LAGs) — known as port-channels in the Dell Networking Operating System (OS). NOTE: For static LAG commands, refer to the Interfaces chapter), based on the standards specified in the IEEE 802.3 Carrier sense multiple access with collision detection (CSMA/CD) access method and physical layer specifications.
PAGE 848
events (OPTIONAL) Enter the keyword events to debug the LACP event information. pdu (OPTIONAL) Enter the keyword pdu to debug the LACP Protocol Data Unit information. interface in | out (OPTIONAL) Enter the following keywords and slot/port or number information: • For a Ten-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
PAGE 849
lacp port-priority To influence which ports will be put in Standby mode when there is a hardware limitation that prevents all compatible ports from aggregating, configure the port priority. Syntax lacp port-priority priority-value To return to the default setting, use the no lacp port-priority priorityvalue command. Parameters priority-value Defaults 32768 Command Modes INTERFACE Command History Enter the port-priority value. The higher the value number, the lower the priority.
PAGE 850
port-channel mode Configure the LACP port channel mode. Syntax Parameters port-channel number mode [active] [passive] [off] number Enter the keywords number then a number. active Enter the keyword active to set the mode to the active state. NOTE: LACP modes are defined in Usage Information. passive Enter the keyword passive to set the mode to the passive state. NOTE: LACP modes are defined in Usage Information. off Enter the keyword off to set the mode to the off state.
PAGE 851
port-channel-protocol lacp Enable LACP on any LAN port. Syntax port-channel-protocol lacp To disable LACP on a LAN port, use the no port-channel-protocol lacp command. Command Modes Command History Example INTERFACE Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 852
Example (PortChannelNumber) Dell#show lacp Port-channel 1 Actor System Partner System Key 1 1 admin up, oper up, ID:Priority 32768, ID:Priority 32768, Actor Admin Key mode lacp Address 0001.e800.a12b Address 0001.e801.
PAGE 853
30 Layer 2 This chapter describes commands to configure Layer 2 features. This chapter contains: • MAC Addressing Commands MAC Addressing Commands The following commands are related to configuring, managing, and viewing MAC addresses. clear mac-address-table Clear the MAC address table. Syntax Parameters clear mac-address-table dynamic {address mac-address | all | interface interface | vlan vlan-id} address macaddress Enter the keyword address then a MAC address in nn:nn:nn:nn:nn:nn format.
PAGE 854
Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. mac-address-table aging-time Specify an aging time for MAC addresses to remove from the MAC address table. Syntax mac-address-table aging-time seconds To delete the configured aging time, use the no mac-address-table agingtime seconds command.
PAGE 855
• vlan vlan-id Defaults Not configured. Command Modes CONFIGURATION Command History For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Enter the keyword vlan then a VLAN ID number from 1 to 4094. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 856
Defaults dynamic (OPTIONAL) Enter the keyword dynamic to allow aging of MACs even though a learning limit is configured. no-stationmove (OPTIONAL) Enter the keywords no-station-move to disallow a station move (associate the learned MAC address with the most recently accessed port) on learned MAC addresses. station-move (OPTIONAL) Enter the keywords station-move to allow a station move on learned MAC addresses.
PAGE 857
show mac learning-limit — displays MAC learning-limit configuration. mac learning-limit learn-limit-violation Configure an action for a MAC address learning-limit violation. Syntax mac learning-limit learn-limit-violation {log | shutdown} To return to the default, use the no mac learning-limit learn-limitviolation {log | shutdown} command. Parameters log Enter the keyword log to generate a syslog message on a learning-limit violation.
PAGE 858
shutdownoffending Enter the keywords shutdown-offending to shut down the offending interface and generate a syslog message. shutdownoriginal Enter the keywords shutdown-original to shut down the original interface and generate a syslog message. Defaults none Command Modes INTERFACE (conf-if-interface-slot/port) Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command is supported on physical interfaces, static LAGs, and LACP LAGs.
PAGE 859
port-set portpipe (REQUIRED) Enter the keywords port-set then a Port-Pipe number to select the Port-Pipe for which to gather information. The range is 0. address macaddr (OPTIONAL) Enter the keyword address then a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address. dynamic (OPTIONAL) Enter the keyword dynamic to display only those MAC addresses learned dynamically by the switch.
PAGE 860
Command Modes Command History Usage Information 860 static (OPTIONAL) Enter the keyword static to display only those MAC addresses specifically configured on the switch. Optionally, you can also add one of these combinations: address/mac-address, interface/interface, or vlan vlan-id. address macaddress (OPTIONAL) Enter the keyword address then a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
PAGE 861
Column Heading Description Interface Displays the interface type and slot/port information. The following abbreviations describe the interface types: State Example Usage Information • gi — Gigabit Ethernet then a slot/port. • po — Port Channel then a number. The range is from 1 to 255 for TeraScale. • so —SONET then a slot/port. • te — 10 Gigabit Ethernet then a slot/port. Lists if the MAC address is in use (Active) or not in use (Inactive).
PAGE 862
Line Beginning With Description Dynamic Address... Lists the number of dynamically learned MAC addresses. Static Address... Lists the number of user-defined MAC addresses. Total MAC... Lists the total number of MAC addresses the switch uses. Example (Count) Dell#show mac-address-table count MAC Entries for all vlans : Dynamic Address Count : Static Address (User-defined) Count : Total MAC Addresses in Use: Dell# Related Commands show mac-address-table aging-time — displays MAC aging time.
PAGE 863
show mac learning-limit Display MAC address learning limits set for various interfaces. Syntax Parameters Command Modes Command History Example show mac learning-limit [violate-action] [detail] [interface interface] violate-action (OPTIONALY) Enter the keywords violate-action to display the MAC learning limit violation status. detail (OPTIONAL) Enter the keyword detail to display the MAC learning limit in detail.
PAGE 864
description Add a description about the selected VLAN. Syntax Parameters description description description Defaults none Command Modes INTERFACE VLAN Command History Related Commands Version 8.3.16.1 Enter a text string description to identify the VLAN (80 characters maximum). Introduced on the MXL 10/40GbE Switch IO Module. show vlan — displays the VLAN configuration. default vlan-id Specify a VLAN as the Default VLAN.
PAGE 865
default-vlan disable Disable the default VLAN so that all switchports are placed in the Null VLAN until they are explicitly configured as a member of another VLAN. Defaults Enabled. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The no default vlan disable command is not listed in the runningconfiguration, but when the default VLAN is disabled, default-vlan disable is listed in the running-configuration.
PAGE 866
show config Display the current configuration of the selected VLAN. Syntax show config Command Modes INTERFACE VLAN Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-if-vl-100)#show config ! interface Vlan 1 description a no ip address mtu 2500 shutdown Dell(conf-if-vl-100)# show vlan Display the current VLAN configurations on the switch.
PAGE 867
Usage Information The following describes the show vlan command shown in the following example. Column Heading Description (Column 1 — no heading) • asterisk symbol (*) = Default VLAN • G = GVRP VLAN • P = primary VLAN C = community VLAN I = isolated VLAN • O = OpenFlow NUM Displays existing VLAN IDs. Status Displays the word Inactive for inactive VLANs and the word Active for active VLANs.
PAGE 868
* 20 Active 1002 Active Dell# U Te 0/3,5,13,53-56 T Te 0/3,13,55-56 Example (VLAN ID) Dell# show vlan id 40 Example (Brief) Dell#show vlan brief VLAN Name STG MAC Aging IP Address ---- -----------------------------1 0 0 unassigned 2 0 0 unassigned 20 0 0 unassigned 1002 0 0 unassigned Dell# Example (Name) Dellconf)#interface vlan 222 Dell(conf-if-vl-222)#name test Dell(conf-if-vl-222)#do show vlan name test Codes: * - Default VLAN, G - GVRP VLANs, R - Remote Port Mirroring VLANs, P - Primary, C - C
PAGE 869
Parameters interface Enter the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Defaults All interfaces in Layer 2 mode are untagged.
PAGE 870
Defaults Not configured. Command Modes INTERFACE VLAN Command History Usage Information Version 8.3.16.1 • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 871
Defaults All interfaces in Layer 2 mode are untagged. Command Modes INTERFACE VLAN Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Untagged interfaces can only belong to one VLAN. In the Default VLAN, you cannot use the no untagged interface command. To remove an untagged interface from all VLANs, including the Default VLAN, enter INTERFACE mode and use the no switchport command. Related Commands interface vlan — configures a VLAN.
PAGE 872
PAGE 873
Link Layer Discovery Protocol (LLDP) 31 Link layer discovery protocol (LLDP) advertises connectivity and management from the local station to the adjacent stations on an IEEE 802 LAN. LLDP facilitates multi-vendor interoperability by using standard management tools to discover and make available a physical topology for network management. The Dell Networking operating software implementation of LLDP is based on IEEE standard 801.1ab.
PAGE 874
Version 8.3.16.1 Related Commands Introduced on the MXL 10/40GbE Switch IO Module. protocol lldp (Configuration) — enables LLDP globally. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration. advertise dot3-tlv Advertise dot3 TLVs (Type, Length, Value). Syntax advertise dot3-tlv {max-frame-size} To remove advertised dot3-tlv, use the no advertise dot3-tlv {max-framesize} command.
PAGE 875
Parameters systemcapabilities Enter the keywords system-capabilities to advertise the system capabilities TLVs to the LLDP peer. systemdescription Enter the keywords system-description to advertise the system description TLVs to the LLDP peer. system-name Enter the keywords system-name to advertise the system name TLVs to the LLDP peer. Defaults none Command Modes CONFIGURATION (conf-lldp) Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 876
clear lldp neighbors Clear LLDP neighbor information for all interfaces or a specific interface. Syntax Parameters clear lldp neighbors {interface} interface Defaults none Command Modes EXEC Privilege Command History Enter the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword tenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Version 9.
PAGE 877
packet (OPTIONAL) Enter the keyword packet to display information regarding packets coming in or going out. brief (OPTIONAL) Enter the keyword brief to display brief packet information. detail (OPTIONAL) Enter the keyword detail to display detailed packet information. tx (OPTIONAL) Enter the keyword tx to display transmit-only packet information. rx (OPTIONAL) Enter the keyword rx to display receive-only packet information.
PAGE 878
show lldp neighbors — displays the LLDP neighbors. hello Configure the rate at which the LLDP control packets are sent to its peer. Syntax hello seconds To revert to the default, use the no hello seconds command. Parameters seconds Enter the rate, in seconds, at which the control packets are sent to its peer. The rate is from 5 to 180 seconds. The default is 30 seconds. Defaults 30 seconds Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp) Command History Version 9.
PAGE 879
Version 8.3.16.1 Related Commands Introduced on the MXL 10/40GbE Switch IO Module. protocol lldp (Configuration) — enables LLDP globally. show lldp neighbors — displays the LLDP neighbors. multiplier Set the number of consecutive misses before LLDP declares the interface dead. Syntax multiplier integer To return to the default, use the no multiplier integer command. Parameters integer Enter the number of consecutive misses before the LLDP declares the interface dead. The range is from 2 to 10.
PAGE 880
protocol lldp (Interface) Enter the LLDP protocol in INTERFACE mode. Syntax [no] protocol lldp To return to the global LLDP configuration mode, use the no protocol lldp command from Interface mode. Defaults LLDP is not enabled on the interface. Command Modes INTERFACE (conf-if-interface-lldp) Command History Usage Information Version 8.3.16.1 Before LLDP can be configured on an interface, it must be enabled globally from CONFIGURATION mode.
PAGE 881
Command History Version 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Module Usage Information Omitting the keyword detail displays only the remote chassis ID, Port ID, and Dead Interval.
PAGE 882
Example Dell#show running-config lldp ! protocol lldp advertise dot1-tlv port-protocol-vlan-id port-vlan-id advertise dot3-tlv max-frame-size advertise management-tlv system-capabilities systemdescription hello 15 multiplier 3 no disable Dell# LLDP-MED Commands The following are the LLDP-MED (Media Endpoint Discovery) commands. The LLDP-MED commands are an extension of the set of LLDP TLV advertisement commands.
PAGE 883
Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094. layer2_priority Enter the Layer 2 priority. The range is from 0 to 7. DSCP_value Enter the DSCP value. The range is from 0 to 63. priority-tagged number Enter the keywords priority-tagged followed the Layer 2 priority. The range is from 0 to 7. Defaults Unconfigured. Command Modes CONFIGURATION (conf-lldp) Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 884
Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration. advertise med location-identification To advertise a location identifier, configure the system.
PAGE 885
show running-config lldp — displays the LLDP running configuration. advertise med power-via-mdi To advertise the Extended Power via MDI TLV, configure the system. Syntax advertise med power-via-mdi To return to the default, use the no advertise med power-via-mdi command. Defaults unconfigured. Command Modes CONFIGURATION (conf-lldp) Command History Version 8.3.16.1 Usage Information Advertise the Extended Power via MDI on all ports that are connected to an 802.
PAGE 886
Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration. advertise med streaming-video To advertise streaming video services for broadcast or multicast-based video, configure the system. This command does not include video applications that rely on TCP buffering.
PAGE 887
To return to the default, use the no advertise med video-conferencing {vlan-id} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094. priority-tagged number Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7. Defaults unconfigured. Command Modes CONFIGURATION (conf-lldp) Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface — debugs LLDP.
PAGE 888
show running-config lldp — displays the LLDP running configuration. advertise med voice To advertise a dedicated IP telephony handset or other appliances supporting interactive voice services, configure the system. Syntax advertise med voice {vlan-id} | {priority-tagged number} To return to the default, use the no advertise med voice {vlan-id} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094.
PAGE 889
Defaults unconfigured. Command Modes CONFIGURATION (conf-lldp) Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration.
PAGE 890
PAGE 891
Microsoft Network Load Balancing 32 This functionality is supported on the MXL platforms. Network Load Balancing (NLB) is a clustering functionality that is implemented by Microsoft on Windows 2000 Server and Windows Server 2003 operating systems. NLB uses a distributed methodology or pattern to equally split and balance the network traffic load across a set of servers that are part of the cluster or group.
PAGE 892
response with MAC-s4 is received as the last one). The interface associated with server, S4, is added to the ARP table. • With NLB feature enabled, after learning the NLB ARP entry, all the subsequent traffic is flooded on all ports in VLAN1. With NLB, the data frame is forwarded to all the servers for them to perform load-balancing. NLB Multicast Mode Scenario Consider a sample topology in which four servers, namely S1 through S4, are configured as a cluster or a farm.
PAGE 893
learned, traffic is forwarded to only one server rather than the entire cluster, and failover and balancing are not preserved. To preserve failover and balancing, the switch forwards the traffic destined for the server cluster to all member ports in the VLAN connected to the cluster. To ensure that this happens, you must configure the ip vlan-flooding command on the Dell switch at the time that the Microsoft cluster is configured.
PAGE 894
NOTE: Use this option if you want multicast functionality in an L2 VLAN without IGMP protocols. output interface output-range interface vlan vlan-id Defaults Not configured. Command Modes CONFIGURATION Command History Version 9.3(0.0) For a multicast MAC address, enter the keyword output then one of the following interfaces for which traffic is forwarded: • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 895
ip vlan-flooding Enable unicast data traffic flooding on VLAN member ports. Syntax ip vlan-flooding To disable, use the no ip vlan-flooding command. Command Modes Command History CONFIGURATION Version 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform. Default Disabled Usage Information By default this command is disabled. There might be some ARP table entries which are resolved through ARP packets which had Ethernet MAC SA different from MAC information inside the ARP packet.
PAGE 896
PAGE 897
Multicast Source Discovery Protocol (MSDP) 33 Multicast source discovery protocol (MSDP) connects multiple PIM Sparse-Mode (PIM-SM) domains together. MSDP peers connect using TCP port 639. Peers send keepalives every 60 seconds. A peer connection is reset after 75 seconds if no MSDP packets are received. MSDP connections are parallel with MBGP connections. clear ip msdp peer Reset the TCP connection to the peer and clear all the peer statistics.
PAGE 898
local Enter the keyword local to clear out local PIM advertised entries. It applies the redistribute filter (if present) while adding the local PIM SA entries to the SA cache. Defaults Without any options, this command clears the entire source-active cache. Command Modes EXEC Privilege Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 899
Parameters event peer address Enter the keyword event then the peer address in a dotted decimal format (A.B.C.D.). packet peer address Enter the keyword packet then the peer address in a dotted decimal format (A.B.C.D.). pim Enter the keyword pim to debug advertisement from PIM. Defaults Not configured. Command Modes EXEC Privilege Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 900
Parameters peer address Enter the peer address in a dotted decimal format (A.B.C.D.) list name Enter the keywords list name and specify a standard access list that contains the RP address that should be treated as the default peer. If no access list is specified, then all SAs from the peer are accepted. Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 901
Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. An MSDP mesh group is a mechanism for reducing SA flooding, typically in an intra-domain setting. When some subset of a domain’s MSDP speakers are fully meshed, they can be configured into a mesh-group.
PAGE 902
ip msdp peer Configure an MSDP peer. Syntax ip msdp peer peer address [connect-source] [description] [salimit number] To remove the MSDP peer, use the no ip msdp peer peer address [connect-source interface] [description name] [sa-limit number] command. Parameters peer address Enter the peer address in a dotted decimal format (A.B.C.D.).
PAGE 903
Related Commands ip msdp sa-limit — configures the MSDP SA Limit. clear ip msdp peer — clears the MSDP peer. show ip msdp — displays the MSDP information. ip msdp redistribute Filter local PIM SA entries in the SA cache. SAs which the ACL denies time out and are not refreshed. Until they time out, they continue to reside in the MSDP SA cache. Syntax Parameters ip msdp redistribute [list acl-name] list acl-name Defaults Not configured.
PAGE 904
peer-address Enter the peer address of the MSDP peer in a dotted decimal format (A.B.C.D.). access-list name Enter the name of an extended ACL that contains permitted SAs. If you do not use this option, all local entries are blocked. Defaults Not configured. Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip msdp sa-limit Configure the upper limit of source-active (SA) entries in SA-cache.
PAGE 905
ip msdp shutdown Administratively shut down a configured MSDP peer. Syntax Parameters ip msdp shutdown {peer address} peer address Defaults Not configured. Command Modes CONFIGURATION Command History Version 9.2(0.0) Enter the peer address in a dotted decimal format (A.B.C.D.). Introduced on the MXL 10/40GbE Switch IO Module. ip multicast-msdp Enable MSDP. Syntax ip multicast-msdp To exit MSDP, use the no ip multicast-msdp command. Defaults Not configured.
PAGE 906
Command Modes Command History Example • EXEC • EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show ip msdp peer 100.1.1.1 Peer Addr: 100.1.1.1 Local Addr: 100.1.1.
PAGE 907
00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 Dell# 225.1.2.1 10.1.1.3 225.1.2.2 10.1.1.4 225.1.2.3 10.1.1.3 225.1.2.4 10.1.1.4 225.1.2.5 10.1.1.3 225.1.2.6 10.1.1.4 225.1.2.7 10.1.1.3 225.1.2.8 10.1.1.4 225.1.2.9 10.1.1.3 225.1.2.10 10.1.1.4 225.1.2.11 10.1.1.3 225.1.2.11 10.1.1.3 225.1.2.12 10.1.1.4 225.1.2.13 10.1.1.3 225.1.2.14 10.1.1.4 225.1.2.15 10.1.1.3 225.1.2.16 10.
PAGE 908
PAGE 909
34 Multiple Spanning Tree Protocol (MSTP) Multiple spanning tree protocol (MSTP), as implemented by the Dell Networking Operating System (OS), conforms to IEEE 802.1s. debug spanning-tree mstp Enable debugging of the multiple spanning tree protocol and view information on the protocol. Syntax Parameters debug spanning-tree mstp [all | bpdu interface {in | out} | events] all (OPTIONAL) Enter the keyword all to debug all spanning tree operations.
PAGE 910
Example Dell#debug spanning-tree mstp bpdu tengigabitethernet 0/16 ? in Receive (in) out Transmit (out) Dell# description Enter a description of the multiple spanning tree. Syntax description {description} To remove the description, use the no description {description} command. Parameters description Enter a description to identify the multiple spanning tree (maximum 80 characters). Defaults none Command Modes SPANNING TREE (The prompt is “config-mstp”.
PAGE 911
disable Enable bridge protocol data units (BPDU) filter globally to filter transmission of BPDU on port-fast enabled interfaces. Syntax edge-port bpdufilter default To disable global bpdu filter default, use the no edge-port bpdufilter default command. Defaults disabled. Command Modes MULTIPLE SPANNING TREE Command History Version 8.3.16.
PAGE 912
hello-time Set the time interval between generation of MSTB bridge protocol data units (BPDUs). Syntax hello-time seconds To return to the default value, use the no hello-time command. Parameters seconds Enter a number as the time interval between transmission of BPDUs. The range is from 1 to 10. The default is 2 seconds. Defaults 2 seconds Command Modes MULTIPLE SPANNING TREE Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 913
hello-time — changes the time interval between BPDUs. max-hops Configure the maximum hop count. Syntax max-hops number To return to the default values, use the no max-hops command. Parameters range Enter a number for the maximum hop count. The range is from 1 to 40. The default is 20. Defaults 20 hops Command Modes MULTIPLE SPANNING TREE Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 914
Valid priority values are: 0, 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, and 61440. All other values are rejected. Defaults default bridge-priority is 32768. Command Modes INTERFACE Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, all VLANs are mapped to MST instance zero (0) unless you use the vlan range command to map it to a non-zero instance.
PAGE 915
protocol spanning-tree mstp To enable and configure the multiple spanning tree group, enter MULTIPLE SPANNING TREE mode. Syntax protocol spanning-tree mstp To disable the multiple spanning tree group, use the no protocol spanningtree mstp command. Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. MSTP is not enabled when you enter MULTIPLE SPANNING TREE mode.
PAGE 916
Usage Information For two MSTP switches to be within the same MST region, the switches must share the same revision number. Related Commands msti — maps the VLAN(s) to an MST instance. name — assigns the region name to the MST region. show config View the current configuration for the mode. Only non-default values are shown. Syntax show config Command Modes MULTIPLE SPANNING TREE Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 917
10 101-105 Dell# show spanning-tree msti View the multiple spanning tree instance. Syntax Parameters Command Modes Command History show spanning-tree msti [instance-number [brief]] [guard] instancenumber (Optional) Enter the multiple spanning tree instance number. The range is from 0 to 63. brief (Optional) Enter the keyword brief to view a synopsis of the MST instance. guard (Optional) Enter the keyword guard to display the type of guard enabled on an MSTP interface and the current port state.
PAGE 918
Name Role PortID Prio Cost Sts Cost Link-type Edge Filter Boundary ---------- ------ -------- ---- ------- ----------- --------------- ---Te 0/41 Desg 128.170 128 2000 FWD 0 P2P No No No Te 0/42 Desg 128.171 128 2000 FWD 0 P2P No No No Te 0/43 Desg 128.172 128 2000 FWD 0 P2P No No No Dell# Example (EDS and LBK) The bold line shows the loopback BPDU inconsistency (LBK_INC).
PAGE 919
BPDU (MRecords): sent 21, received 9 The port is not in the Edge port mode Usage Information Example (Guard) The following describes the show spanning-tree msti 5 guard command shown in the following example. Field Description Interface Name MSTP interface. Instance MSTP instance. Sts Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS), blocking (BLK), or shut down (EDS Shut). Guard Type Type of STP guard configured (Root, Loop, or BPDU guard).
PAGE 920
spanning-tree msti Configure multiple spanning tree instance cost and priority for an interface. Syntax Parameters spanning-tree msti instance {cost cost | priority priority} msti instance Enter the keyword msti and the MST instance number. The range is from zero (0) to 63. cost cost (OPTIONAL) Enter the keyword cost then the port cost value. The range is from 1 to 200000.
PAGE 921
Command Modes Command History Usage Information bpdufilter (OPTIONAL) Enter the keyword edgeport to enable edge port configuration to move the interface into forwarding mode immediately after the root fails. Enter the keyword bpdufilter to stop sending and receiving BPDUs on the port-fast enabled ports. shutdown-onviolation (OPTIONAL) Enter the keywords shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
PAGE 922
Defaults Disabled. Command Modes CONFIGURATION Command History Usage Information 922 Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, the sytem implements an optimized flush mechanism for MSTP. This mechanism helps in flushing the MAC addresses only when necessary (and less often) allowing for faster convergence during topology changes.
PAGE 923
35 Multicast The multicast commands are supported by Dell Networking Operating System (OS). This chapter contains the following sections: • IPv4 Multicast Commands • IPv6 Multicast Commands IPv4 Multicast Commands The following section contains the IPv4 multicast commands. clear ip mroute Clear learned multicast routes on the multicast forwarding table. To clear the protocol-independent multicast (PIM) tree information base, use the clear ip pim tib command.
PAGE 924
ip mroute Assign a static mroute. Syntax ip mroute destination mask {ip-address | null 0| {{bgp| ospf} process-id | isis | rip | static} {ip-address | tag | null 0}} [distance] To delete a specific static mroute, use the ip mroute destination mask {ipaddress | null 0| {{bgp| ospf} process-id | isis | rip | static} {ip-address | tag | null 0}} [distance] command. To delete all mroutes matching a certain mroute, use the no ip mroute destination mask command.
PAGE 925
Related Commands show ip mroute — views the multicast routing table. ip multicast-limit To limit the number of multicast entries on the system, use this feature. Syntax Parameters ip multicast-limit limit limit Defaults 15000 routes. Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Enter the desired maximum number of multicast entries on the system. The range is from 1 to 50000. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 926
Usage Information After you enable multicast, you can enable IGMP and PIM on an interface. In INTERFACE mode, enter the ip pim sparse-mode command to enable IGMP and PIM on the interface. Related Commands ip pim sparse-mode — enables IGMP and PIM on an interface. show ip mroute View the multicast routing table.
PAGE 927
displayed for a specified multicast source. Enter the keyword count to display the total number of multicast routes with the spanned IIF. Command Modes Command History Example (Static) Example (Snooping) • • EXEC EXEC Privilege Version 9.2. (0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show ip mroute static Mroute: 23.23.23.0/24, interface: Lo 2 Protocol: static, distance: 0, route-map: none, last change: 00:00:23 Dell#show ip mroute snooping IPv4 Multicast Snooping Table (*, 224.0.0.
PAGE 928
Usage Information Example The following describes the show ip mroute command shown in the following example. Field Description (S, G) Displays the forwarding entry in the multicast route table. uptime Displays the amount of time the entry has been in the multicast forwarding table. Incoming interface Displays the reverse path forwarding (RPF) information towards the source for (S,G) entries and the RP for (*,G) entries.
PAGE 929
Usage Information Network administrators use static mroutes to control the reach-ability of the multicast sources. If a PIM-registered multicast source is reachable using static mroute as well as unicast route, the distance of each route is examined and the route with shorter distance is the one the PIM selects for reach-ability. NOTE: The default distance of mroutes is zero (0) and is CLI configurable on a per route basis. Example Dell#show ip rpf RPF information for 10.10.10.
PAGE 930
Command Modes Command History Usage Information EXEC Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To debug the MLD protocol for all ports or for specified ports, use the debug ipv6 mld_host command. Displayed information includes when a query is received, when a report is sent, when a mcast joins or leaves a group, and some reasons why an MLD query is rejected. ip multicast-limit To limit the number of multicast entries on the system, use this feature.
PAGE 931
Neighbor Discovery Protocol (NDP) 36 The Dell Networking Operating System (OS) supports the network discovery protocol for IPv6. The neighbor discovery protocol for IPv6 is defined in RFC 2461 as part of the Stateless Address Autoconfiguration protocol. It replaces the Address Resolution Protocol used with IPv4.
PAGE 932
Command Modes Command History • EXEC • EXEC Privilege Version 9.2(0.0) • For a Fast Ethernet interface, enter the keyword fastEthernet then the slot/port information. • For a Port Channel interface, enter the keywords portchannel then a number. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
PAGE 933
hardware_addr ess Defaults none Command Modes CONFIGURATION Command History Version 9.2(0.0) Enter a 48-bit hardware MAC address in nn:nn:nn:nn:nn:nn format. Introduced on the MXL 10/40GbE Switch IO Module. show ipv6 neighbors Display IPv6 discovery information. Entering the command without options shows all IPv6 neighbor addresses stored on the control processor (CP).
PAGE 934
Example Dell#show ipv6 neighbors IPv6 Address Expires(min) HardwareAddress State Interface/VLAN/ CPU --------------------------------------------------------fe80::201:e8ff:fe17:5bc6 1439 00:01:e8:17:5b:c6 STALE Gi 1/9 CP fe80::201:eff:fe17:5bc7 1439 00:01:e8:17:5b:c7 STALE Gi 1/10 CP fe80::201:e8ff:fe17:5bc8 1439 00:01:e8:17:5b:c8 STALE Gi 1/11 CP fe80::201:e8ff:fe17:5caf 0.
PAGE 935
Open Shortest Path First (OSPFv2 and OSPFv3) 37 The MXL 10/40GbE Switch IO Module platform supports open shortest path first version 2 (OSPFv2) for IPv4 and version 3 (OSPFv3) for IPv6. Up to 16 OSPF instances can be run simultaneously on the MXL Switch. OSPF is an Interior Gateway Protocol (IGP), which means that it distributes routing information between routers in a single Autonomous System (AS).
PAGE 936
Parameters area-id Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535. cost Specifies the stub area’s advertised external route metric. The range is from zero (0) to 65535. Defaults cost = 1; no areas are configured. Command Modes ROUTER OSPF Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information In the Dell Networking operating software, cost is defined as reference bandwidth.
PAGE 937
area range Summarize routes matching an address/mask at an area border router (ABR). Syntax area area-id range ip-address mask [not-advertise] To disable route summarization, use the no area area-id range ip-address mask command. Parameters area-id Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535. ip-address Specify an IP address in dotted decimal format. mask Specify a mask for the destination prefix. Enter the full mask (for example, 255.255.255.
PAGE 938
Defaults Disabled. Command Modes ROUTER OSPF Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To configure all routers and access servers within a stub, use this command. Related Commands router ospf — enters ROUTER OSPF mode to configure an OSPF instance. auto-cost Specify how the OSPF interface cost is calculated based on the reference bandwidth method.
PAGE 939
Command Modes Command History EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. clear ip ospf statistics Clear the packet statistics in interfaces and neighbors. Syntax Parameters clear ip ospf process-id statistics [interface name {neighbor router-id}] process-id Enter the OSPF Process ID to clear a specific process. If no Process ID is entered, all OSPF processes are cleared.
PAGE 940
debug ip ospf Display debug information on OSPF. Entering the debug ip ospf commands enables OSPF debugging for the first OSPF process. Syntax debug ip ospf process-id [bfd |event | packet | spf | databasetimer rate-limit] To cancel the debug command, use the no debug ip ospf command. Parameters Command Modes Command History Usage Information process-id Enter the OSPF Process ID to clear a specific process. If no Process ID is entered, all OSPF processes are cleared.
PAGE 941
Field Description rid: Displays the OSPF router ID. aid: Displays the Autonomous System ID. chk: Displays the OSPF checksum. aut: States if OSPF authentication is configured.
PAGE 942
Example Dell#debug ip ospf 1 packet OSPF process 90, packet debugging is on Dell# 08:14:24 : OSPF(100:00): Xmt. v:2 t:1(HELLO) l:44 rid:192.1.1.1 aid:0.0.0.1 chk:0xa098 aut:0 auk: keyid:0 to:Gi 4/3 dst: 224.0.0.5 netmask:255.255.255.0 pri:1 N-, MC-, E+, T-, hi:10 di:40 dr:90.1.1.1 bdr:0.0.0.0 default-information originate To generate a default external route into an OSPF routing domain, configure the system.
PAGE 943
default-metric Change the metrics of redistributed routes to a value useful to OSPF. Use this command with the redistribute command. Syntax default-metric number To return to the default values, use the no default-metric [number] command. Parameters number Defaults Disabled. Command Modes ROUTER OSPF Command History Related Commands Version 8.3.16.1 Enter a number as the metric. The range is from 1 to 16777214. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 944
distance Define an administrative distance for particular routes to a specific IP address. Syntax distance weight [ip-address mask access-list-name] To delete the settings, use the no distance weight [ip-address mask access-list-name] command. Parameters weight Specify an administrative distance. The range is from 1 to 255. The default is 110. ip-address (OPTIONAL) Enter a router ID in the dotted decimal format. If you enter a router ID, include the mask for that router address.
PAGE 945
Defaults Command Modes Command History Usage Information • external dist3 = 110 • inter-area dist2 = 110 • intra-area dist1 = 110 ROUTER OSPF Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To specify a distance for routes learned from other routing domains, use the redistribute command. distribute-list in Apply a filter to incoming routing updates from OSPF to the routing table.
PAGE 946
distribute-list out To restrict certain routes destined for the local routing table after the SPF calculation, apply a filter. Syntax distribute-list prefix-list-name out [bgp | connected | isis | rip | static] To remove a filter, use the no distribute-list prefix-list-name out [bgp | connected | isis | rip | static] command. Parameters prefix-listname Enter the name of a configured prefix list. bgp (OPTIONAL) Enter the keyword bgp to specify that BGP routes are distributed.
PAGE 947
Defaults none. Command Modes ROUTER OSPF Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The higher this parameter is set, the faster OSPF converge takes place. NOTE: The faster the convergence, the more frequent the route calculations and updates. This behavior impacts CPU utilization and may impact adjacency stability in larger topologies. Generally, convergence level 1 meets most convergence requirements.
PAGE 948
graceful-restart grace-period Specifies the time duration, in seconds, that the router’s neighbors continue to advertise the router as fully adjacent regardless of the synchronization state during a graceful restart. Syntax graceful-restart grace-period seconds To disable the grace period, use the no graceful-restart grace-period command. Parameters seconds Defaults Not Configured Command Modes ROUTER OSPF Command History Version 8.3.16.
PAGE 949
graceful-restart mode Enable the graceful restart mode. Syntax graceful-restart mode [planned-only | unplanned-only] To disable graceful restart mode, use the no graceful-restart mode command. Parameters planned-only (OPTIONAL) Enter the keywords planned-only to indicate graceful restart is supported in a planned restart condition only. unplannedonly (OPTIONAL) Enter the keywords unplanned-only to indicate graceful restart is supported in an unplanned restart condition only.
PAGE 950
ip ospf auth-change-wait-time OSPF provides a grace period while OSPF changes its interface authentication type. During the grace period, OSPF sends out packets with new and old authentication scheme until the grace period expires. Syntax ip ospf auth-change-wait-time seconds To return to the default, use the no ip ospf auth-change-wait-time command. Parameters seconds Defaults zero (0) seconds. Command Modes INTERFACE Command History Version 8.3.16.1 Enter the seconds. The range is from 0 to 300.
PAGE 951
ip ospf cost Change the cost associated with the OSPF traffic on an interface. Syntax ip ospf cost cost To return to default value, use the no ip ospf cost command. Parameters cost Enter a number as the cost. The range is from 1 to 65535. Defaults The default cost is based on the reference bandwidth. Command Modes INTERFACE Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. If this command is not configured, cost is based on the auto-cost command.
PAGE 952
Related Commands ip ospf hello-interval — sets the time interval between the hello packets. ip ospf hello-interval Specify the time interval between the hello packets sent on the interface. Syntax ip ospf hello-interval seconds To return to the default value, use the no ip ospf hello-interval command. Parameters seconds Defaults 10 seconds Command Modes INTERFACE Command History Version 8.3.16.1 Enter the number of seconds for the interval. The range is from 1 to 65535.
PAGE 953
Usage Information You can configure a maximum of six digest keys on an interface. Of the available six digest keys, the switches select the MD5 key that is common. The remaining MD5 keys are unused. To change to a different key on the interface, enable the new key while the old key is still enabled. The system sends two packets: the first packet authenticated with the old key and the second packet authenticated with the new key.
PAGE 954
Defaults Not configured. Command Modes ROUTER OSPF Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip ospf priority To determine the designated router for the OSPF network, set the priority of the interface. Syntax ip ospf priority number To return to the default setting, use the no ip ospf priority command. Parameters number Defaults 1 Command Modes INTERFACE Command History Usage Information Version 8.3.16.1 Enter a number as the priority.
PAGE 955
This interval must be greater than the expected round-trip time for a packet to travel between two routers. Defaults 5 seconds Command Modes INTERFACE Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Set the time interval to a number large enough to prevent unnecessary retransmissions. For example, the interval must be larger for interfaces connected to virtual links.
PAGE 956
Defaults Disabled. Command Modes ROUTER OSPF Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. maximum-paths Enable the software to forward packets over multiple paths. Syntax maximum-paths number To disable packet forwarding over multiple paths, use the no maximum-paths command. Parameters number Specify the number of paths. The range for OSPFv2 is from 1 to 16. The default for OSPFv2 is 4 paths. The range for OSPFv3 is from 1 to 64.
PAGE 957
Usage Information This command is either enabled or disabled. If no OSPF process is identified as the MIB manager, the first OSPF process is used. If an OSPF process has been selected, it must be disabled prior to assigning new process ID the MIB responsibility. network area Define which interfaces run OSPF and the OSPF area for those interfaces. Syntax network ip-address mask area area-id To disable an OSPF area, use the no network ip-address mask area areaid command.
PAGE 958
passive-interface Suppress both receiving and sending routing updates on an interface. Syntax passive-interface {default | interface} To enable both the receiving and sending routing, use the no passiveinterface interface command. To return all OSPF interfaces (current and future) to active, use the no passiveinterface default command. Parameters Command Modes Command History Usage Information default Enter the keyword default to make all OSPF interfaces (current and future) passive.
PAGE 959
• The ABR status for the router is updated. • Save passive-interface interface into the running configuration. passive-interface default • All present and future OSPF interfaces are marked as passive. • Any adjacency is explicitly terminated from all OSPF interfaces. • All previous passive-interface interface commands are removed from the running configuration. • All previous no passive-interface interface commands are removed from the running configuration.
PAGE 960
1 = OSPF External type 1 • 2 = OSPF External type 2 route-map map-name (OPTIONAL) Enter the keywords route-map then the name of the route map. tag tag-value (OPTIONAL) Enter the keyword tag then a number. The range is from 0 to 4294967295. Defaults Not configured. Command Modes ROUTER OSPF Command History • Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To redistribute the default route (0.0.0.0/0), configure the default-information originate command.
PAGE 961
Command Modes Command History ROUTER OSPF Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. redistribute isis Redistribute IS-IS routing information throughout the OSPF instance.
PAGE 962
router-id To configure a fixed router ID, use this command. Syntax router-id ip-address To remove the fixed router ID, use the no router-id ip-address command. Parameters ip-address Defaults none. Command Modes ROUTER OSPF Command History Version 8.3.16.1 Enter the router ID in the IP address format. Introduced on the MXL 10/40GbE Switch IO Module. Usage Information You can configure an arbitrary value in the IP address format for each router. However, each router ID must be unique.
PAGE 963
Command Modes Command History CONFIGURATION Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information You must have an IP address assigned to an interface to enter ROUTER OSPF mode and configure OSPF. Example Dell(conf)#router ospf 2 Dell(conf-router_ospf)# show config Display the non-default values in the current OSPF configuration. Syntax show config Command Modes ROUTER OSPF Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 964
Usage Information If you delete all the network area commands for Area 0, the show ip ospf command output does not list Area 0. The following describes the show ip ospf command shown in the following example. Line Beginning with Description “Routing Process...” Displays the OSPF process ID and the IP address associated with the process ID. “Supports only...” Displays the number of Type of Service (TOS) rouse supported. “SPF schedule...
PAGE 965
Parameters process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. Defaults none Command Modes • EXEC • EXEC Privilege Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To isolate problems with external routes, use this command. In OSPF, external routes are calculated by adding the LSA cost to the cost of reaching the ASBR router.
PAGE 966
Command Modes Command History Usage Information Example • EXEC • EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip ospf process-id database command shown in the following example. Field Description Link ID Identifies the router ID. ADV Router Identifies the advertising router’s ID. Age Displays the link state age. Seq# Identifies the link state sequence number.
PAGE 967
Related Commands show ip ospf database asbr-summary — displays only ASBR summary LSA information. show ip ospf database asbr-summary Display information about autonomous system (AS) boundary LSAs. Syntax Parameters show ip ospf process-id database asbr-summary [link-state-id] [adv-router ip-address] process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
PAGE 968
Field Description • Example E or No E is displayed on whether the originating router can accept AS External LSAs. LS Type Displays the LSA’s type. Link State ID Displays the Link State ID. Advertising Router Identifies the advertising router’s ID. Checksum Displays the Fletcher checksum of the LSA’s complete contents. Length Displays the length in bytes of the LSA. Network Mask Displays the network mask implemented on the area. TOS Displays the Type of Service (TOS) options.
PAGE 969
show ip ospf database external Display information on the AS external (type 5) LSAs. Syntax Parameters show ip ospf process-id database external [link-state-id] [advrouter ip-address] process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 970
Example Field Description Advertising Router Identifies the router ID of the LSA’s originating router. LS Seq Number Identifies the link state sequence number. This number enables you to identify old or duplicate LSAs. Checksum Displays the Fletcher checksum of the LSA’s complete contents. Length Displays the length in bytes of the LSA. Network Mask Displays the network mask implemented on the area. Metrics Type Displays the external type. TOS Displays the Type of Service (TOS) options.
PAGE 971
Forward Address: 0.0.0.0 External Route Tag: 701 Dell# Related Commands show ip ospf database — displays OSPF database information. show ip ospf database network Display the network (type 2) LSA information. Syntax Parameters show ip ospf process-id database network [link-state-id] [advrouter ip-address] process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
PAGE 972
Field Example Description • DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits. • E or No E is displayed on whether the originating router can accept AS External LSAs. LS Type Displays the LSA’s type. Link State ID Displays the Link State ID. Advertising Router Identifies the router ID of the LSA’s originating router. Checksum Identifies the link state sequence number. This number enables you to identify old or duplicate LSAs.
PAGE 973
show ip ospf database nssa-external Display NSSA-External (type 7) LSA information. Syntax Parameters show ip ospf database nssa-external [link-state-id] [adv-router ip-address] link-state-id adv-router ipaddress Command Modes Command History Related Commands • EXEC • EXEC Privilege Version 8.3.16.1 (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 974
adv-router ipaddress Command Modes Command History Usage Information Example • • (OPTIONAL) Enter the keywords adv-router and the ipaddress to display only the LSA information about that router. EXEC EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip ospf process-id database opaquearea command shown in the following example. Item Description LS Age Displays the LSA’s age.
PAGE 975
Checksum: 0x376 Length: 28 Opaque Type: 1 Opaque ID: 1 Unable to display opaque data LS age: 833 Options: (No TOS-capability, No DC, E) LS type: Type-10 Opaque Link Area Link State ID: 1.0.0.2 Advertising Router: 10.16.1.160 LS Seq Number: 0x80000002 Checksum: 0x19c2 --More-Related Commands show ip ospf database — displays OSPF database information. show ip ospf database opaque-as Display the opaque-as (type 11) LSA information.
PAGE 976
show ip ospf database opaque-link Display the opaque-link (type 9) LSA information. Syntax Parameters show ip ospf process-id database opaque-link [link-state-id] [adv-router ip-address] process-id Enter the OSPF process ID to show a specific process. If you do not enter the process ID, the command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 977
adv-router ipaddress Command Modes Command History Usage Information • EXEC • EXEC Privilege Version 8.3.16.1 • the network’s IP address for Type 3 LSAs or Type 5 LSAs • the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs • the default destination (0.0.0.0) for Type 5 LSAs (OPTIONAL) Enter the keywords adv-router then the IP address of an Advertising Router to display only the LSA information about that router. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 978
Example Item Description (Link ID) Identifies the link type and address. (Link Data) Identifies the router interface address. Number of TOS Metric Lists the number of TOS metrics. TOS 0 Metric Lists the number of TOS 0 metrics. Dell#show ip ospf 100 database router OSPF Router with ID (1.1.1.10) (Process ID 100) Router (Area 0) LS age: 967 Options: (No TOS-capability, No DC, E) LS type: Router Link State ID: 1.1.1.10 Advertising Router: 1.1.1.
PAGE 979
Related Commands show ip ospf database — displays OSPF database information. show ip ospf database summary Display the network summary (type 3) LSA routing information. Syntax Parameters show ip ospf process-id database summary [link-state-id] [advrouter ip-address] process-id Enter the OSPF process ID to show a specific process. If you do not enter a process ID, the command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 980
Item Description • Example E or No E is displayed on whether the originating router can accept AS External LSAs. LS Type Displays the LSA type. Link State ID Displays the Link State ID. Advertising Router Identifies the router ID of the LSA’s originating router. LS Seq Number Displays the link state sequence number. This number allows you to identify old or duplicate LSAs. Checksum Displays the Fletcher checksum of an LSA’s complete contents. Length Displays the length in bytes of the LSA.
PAGE 981
# Related Commands show ip ospf database — displays OSPF database information. show ip ospf interface Display the OSPF interfaces configured. If OSPF is not enabled on the switch, no output is generated. Syntax Parameters Command Modes Command History Usage Information show ip ospf process-id interface [interface] process-id Enter the OSPF process ID to show a specific process. If you do not enter a process ID, the command applies only to the first OSPF process.
PAGE 982
Example Item Description Process ID... This line displays the OSPF Process ID, Router ID, Network type and cost metric for this interface. Transmit Delay... This line displays the interface’s settings for Transmit Delay, State, and Priority. In the State setting, BDR is Backup Designated Router. Designated Router... This line displays the ID of the Designated Router and its interface address. Backup Designated... This line displays the ID of the Backup Designated Router and its interface address.
PAGE 983
Loopback 0 is up, line protocol is up Internet Address 192.168.253.2/32, Area 0.0.0.1 Process ID 1, Router ID 192.168.253.2, Network Type LOOPBACK, Cost: 1 Loopback interface is treated as a stub Host. Dell> show ip ospf neighbor Display the OSPF neighbors connected to the local router. Syntax Parameters Command Modes Command History Usage Information Example show ip ospf process-id neighbor process-id Enter the OSPF Process ID to show a specific process.
PAGE 984
show ip ospf routes Display routes OSPF calculates and stores in OSPF RIB. Syntax Parameters show ip ospf process-id routes process-id Defaults none Command Modes • EXEC • EXEC Privilege Command History Usage Information Version 8.3.16.1 Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 985
global Enter the keyword global to display the packet counts received on all running OSPF interfaces and packet counts OSPF neighbors receive and transmit. interface name (OPTIONAL) Enter the keyword interface then one of the following interface keywords and slot/port or number information: neighbor router-id Defaults none Command Modes • EXEC • EXEC Privilege Command History Usage Information Version 8.3.16.
PAGE 986
Row Heading Description Hello-Q The queue, for transmission or reception, for the hello packets. LSR-Q The queue, for transmission or reception, for the link state request packets. Other-Q The queue, for transmission or reception, for the link state acknowledgement, database description, and update packets. The following describes the error definitions for the show ip ospf statistics process-id global command.
PAGE 987
LSAck RX 2 TX 2 Total Error Hello DDiscr LSReq LSUpd 34 0 26 2 1 3 34 0 25 3 1 3 OSPF Global Queue Length TxQ-Len RxQ-Len Tx-Mark Rx-Mark Hello-Q 0 0 1 1 LSR-Q 0 0 1 1 Other-Q 0 0 2 2 Error packets (Receive statistics) Intf-Down 0 Non-Dr 0 Self-Org 0 Wrong-Len 0 Invld-Nbr 0 Nbr-State 0 Auth-Err 0 MD5-Err 0 Chksum 0 Version 0 AreaMis 0 Conf-Issues 0 No-Buffer 0 Seq-No 0 Socket 0 Q-OverFlow 0 Unknown-Pkt 0 RtidZero 0 Error packets (Transmit statistics) Socket Errors 0 Dell# Usage Information Exa
PAGE 988
Dell# Related Commands LSR-Q-Len 0 LSR-Q-Wmark 1 clear ip ospf statistics — clears the packet statistics in all interfaces and neighbors. show ip ospf timers rate-limit Show the LSA currently in the queue waiting for timers to expire. Syntax Parameters show ip ospf process-id timers rate-limit process-id Defaults none Command Modes • EXEC • EXEC Privilege Command History Example Version 8.3.16.1 Enter the OSPF Process ID to show a specific process.
PAGE 989
Command Modes Command History • • EXEC EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To isolate problems with inter-area and external routes, use this command. In OSPF inter-area and external routes are calculated by adding LSA cost to the cost of reaching the router. If an inter-area or external route is not of correct cost, the display can determine if the path to the originating router is correct or not.
PAGE 990
to OSPF, but you don't want OSPF to advertise routes with prefix 1.1.0.0, you can configure the summary-address 1.1.0.0 255.255.0.0 not-advertise to filter out all the routes fall in range 1.1.0.0/16. Related Commands area range — summarizes routes within an area. timers spf Set the time interval between when the switch receives a topology change and starts a shortest path first (SPF) calculation. Syntax timers spf delay holdtime To return to the default, use the no timers spf command.
PAGE 991
Defaults Command Modes Command History Usage Information hold-interval Set the next interval to send the same LSA. This interval is the time between sending the same LSA after the start-interval has been attempted. The range is from 1 to 600,000 milliseconds. max-interval Set the maximum amount of time the system waits before sending the LSA. The range is from 1 to 600,000 milliseconds. • start-interval: 0 msec • hold-interval: 5000 msec • max-interval: 5000 msec ROUTER OSPF Version 8.3.16.
PAGE 992
OSPFv3 Commands Open shortest path first version 3 (OSPFv3) for IPv6 is supported on the MXL Switch platform. The fundamental mechanisms of OSPF (flooding, DR election, area support, SPF calculations, and so on) remain unchanged. However, OSPFv3 runs on a per-link basis instead of on a per-IP-subnet basis. Most changes were necessary to handle the increased address size of IPv6. The Dell Networking implementation of OSPFv3 is based on IETF RFC 2740.
PAGE 993
Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Before you enable IPsec authentication on an OSPFv3 area, you must first enable OSPFv3 globally on the router. Configure the same authentication policy (same SPI and key) on each interface in an OSPFv3 link. An SPI number must be unique to one IPsec security policy (authentication or encryption) on the router.
PAGE 994
keyencryptionalgorithm (OPTIONAL) Specifies if the key is encrypted. key Text string used in encryption. Valid values: 0 (key is not encrypted) or 7 (key is encrypted). The required lengths of a non-encrypted or encrypted key are: 3DES - 48 or 96 hex digits; DES - 16 or 32 hex digits; AESCBC -32 or 64 hex digits for AES-128 and 48 or 96 hex digits for AES-192. authenticationalgorithm Specifies the authentication algorithm to use for encryption. Valid values are MD5 or SHA1.
PAGE 995
you enable authentication on an area with the area authentication command, you do not enable encryption at the same time. If you have enabled IPsec authentication in an OSPFv3 area with the area authentication command, you cannot use the area encryption command in the area at the same time. The configuration of IPsec encryption on an interface-level takes precedence over an area-level configuration.
PAGE 996
• Command Modes Command History Usage Information Example 996 For a VLAN, enter the keyword vlan then a number from 1 to 4094. EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following section describes the command fields. Lines Beginning With or Including Description OSPFv3... Debugging is on for all OSPFv3 packets and all interfaces. 05:21:01 Displays the time stamp. Sending Ver:3 Sending OSPF3 version..
PAGE 997
debug ipv6 ospf Display debug information and interface types on OSPF IPv6 packets or events. Syntax Parameters Command Modes Command History debug ipv6 ospf {packet | events} [interface] interface (OPTIONAL) Enter one of the following keywords and slot/ port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 998
route-map map-name Defaults Disabled. Command Modes ROUTER OSPFv3 Command History Version 9.2(0.0) • 1 = Type 1 external route • 2 = Type 2 external route (OPTIONAL) Enter the keywords route-map then the name of an established route map. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 999
function in a “restarting-only” role. In a “restarting-only” role, OSPFv3 does not participate in the graceful restart of a neighbor. graceful-restart mode Specify the type of events that trigger an OSPFv3 graceful restart. Syntax graceful-restart mode {planned-only | unplanned-only} To disable graceful restart mode, enter no graceful-restart mode. Parameters planned-only (OPTIONAL) Enter the keywords planned-only to indicate graceful restart is supported in a planned restart condition only.
PAGE 1000
ipv6 ospf area Enable IPv6 OSPF on an interface. Syntax ipv6 ospf process id area area id To disable OSPFv6 routing for an interface, use the no ipv6 ospf process-id area area-id command. Parameters process-id Enter the process identification number. area area-id Specify the OSPF area. The range is from 0 to 65535. Defaults none Command Modes INTERFACE Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 ospf authentication Enable IPv6 OSPF on an interface.
PAGE 1001
For MD5 authentication, the key must be 32 hex digits (nonencrypted) or 64 hex digits (encrypted). For SHA-1 authentication, the key must be 40 hex digits (non-encrypted) or 80 hex digits (encrypted). Defaults Not configured. Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1002
role [active | passive] Enter the role that the local system assumes: • active — The active system initiates the BFD session. Both systems can be active for the same session. • passive — The passive system does not initiate a session. It only responds to a request for session initialization from the active system. The default is Active. Defaults See Parameters. Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1003
Using this formula, the default path cost is calculated as: • GigabitEthernet—Default cost is 1 • TenGigabitEthernet—Default cost is 1 • FortygigEthernet — Default cost is 1 • Ethernet—Default cost is 10 ipv6 ospf dead-interval Set the time interval since the last hello-packet was received from a router. After the time interval elapses, the neighboring routers declare the router down. Syntax Parameters ipv6 ospf dead-interval seconds seconds Enter the time interval in seconds.
PAGE 1004
Parameters null Causes an encryption policy configured for the area to not be inherited on the interface. ipsec spi number Security Policy index (SPI) value that identifies an IPsec security policy. The range is from 256 to 4294967295. esp encryptionalgorithm Encryption algorithm used with ESP. Valid values are: 3DES, DES, AES-CBC, and NULL. For AES-CBC, only the AES-128 and AES-192 ciphers are supported. keyencryptiontype (OPTIONAL) Specifies if the key is encrypted.
PAGE 1005
Usage Information Before you enable IPsec encryption on an OSPFv3 interface, first enable IPv6 unicast routing globally, configure an IPv6 address and enable OSPFv3 on the interface, and assign the interface to an area. An SPI value must be unique to one IPsec security policy (authentication or encryption) on the router. Configure the same encryption policy (same SPI and key) on each OSPFv3 interface in a link.
PAGE 1006
Defaults 10 seconds (Ethernet). Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The time interval between hello packets must be the same for routers in a network. ipv6 ospf priority To determine the Designated Router for the OSPFv3 network, set the priority of the interface. Syntax ipv6 ospf priority number To return to the default time interval, use the no ipv6 ospf priority command.
PAGE 1007
Parameters process-id Defaults none Command Modes CONFIGURATION Command History Version 9.2(0.0) Enter the process identification number. The range is from 1 to 65535. Introduced on the MXL 10/40GbE Switch IO Module. maximum-paths Enable the software to forward packets over multiple paths. Syntax maximum-paths number To disable packet forwarding over multiple paths, use the no maximum-paths command. Parameters number Specify the number of paths. The range is from 1 to 64.
PAGE 1008
Parameters Command Modes Default Enter the keyword default to make all OSPF interfaces (current and future) passive. interface Enter the following keywords and slot/port or number information: • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a Port Channel interface, enter the keywords portchannel then a number.
PAGE 1009
Parameters bgp as number Enter the keyword bgp then the autonomous system number. The range is from 1 to 65535. connected Enter the keyword connected to redistribute routes from physically connected interfaces. static Enter the keyword static to redistribute manually configured routes. metric metricvalue Enter the keyword metric then the metric value. The range is from 0 to 16777214. The default is 20.
PAGE 1010
Usage Information To redistribute the default route (x:x:x:x::x), use the default-information originate command. Related Commands default-information originate — generates a default route into the OSPF routing domain. router-id Designate a fixed router ID. Syntax router-id ip-address To return to the previous router ID, use the no router-id ip-address command. Parameters ip-address Enter the router ID in the dotted decimal format.
PAGE 1011
show crypto ipsec policy Display the configuration of IPsec authentication and encryption policies. Syntax Parameters show crypto ipsec policy [name name] name name Defaults none Command Modes EXEC (OPTIONAL) Displays configuration details about a specified policy. EXEC Privilege Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1012
Defaults none Command Modes EXEC EXEC Privilege Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The show crypto ipsec sa ipv6 command output displays security associations set up for OSPFv3 links in IPsec authentication and encryption policies on the router. show ipv6 ospf database Display information in the OSPFv3 database, including link-state advertisements (LSAs).
PAGE 1013
show ipv6 ospf interface View OSPFv3 interface information. Syntax Parameters show ipv6 ospf [interface] interface Defaults none Command Modes EXEC Command History Usage Information Version 9.2(0.0) (OPTIONAL) Enter one of the following keywords and slot/ port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet and the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet and the slot/port information.
PAGE 1014
show ipv6 ospf neighbor Display the OSPF neighbor information on a per-interface basis. Syntax Parameters show ipv6 ospf neighbor [interface] interface Defaults none Command Modes EXEC (OPTIONAL) Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1015
Policy-based Routing (PBR) 38 Policy-based routing (PBR) allows you to apply routing policies to specific interfaces. To enable PBR, create a redirect list and apply it to the interface. After the redirect list is applied to the interface, all traffic passing through the interface is subject to the rules defined in the redirect list. PBR is supported by the Dell Networking operating software (OS) in MXL platform.
PAGE 1016
To remove a redirect list from an interface, use the no ip redirect-group name command. Parameters redirect-listname Enter the name of a configured redirect list. Defaults none Command Modes INTERFACE (conf-if-vl-) Command History Usage Information Version 9.4(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Version 8.4.2.1 Introduced on the C-Series and S-Series. Version 8.4.2.0 Introduced on the E-Series TeraScale. Version 7.4.2.0 Added support for LAG and VLAN interfaces.
PAGE 1017
Defaults none Command Modes CONFIGURATION Command History Version 9.4.0.0 Introduced on the MXL 10/40GbE Switch IO Module. Version 8.4.2.1 Introduced on the C-Series and S-Series. Version 8.4.2.0 Introduced on the E-Series TeraScale. Version 6.5.3.0 Introduced on the E-Series ExaScale. permit Configure a rule for the redirect list.
PAGE 1018
bit (OPTIONAL) For the TCP protocol type only, enter one or a combination of the following TCP flags: • operator Defaults none Command Modes REDIRECT-LIST Command History ack = acknowledgement • fin = finish (no more data from the user) • psh = push function • rst = reset the connection • syn = synchronize sequence number • urg = urgent field (OPTIONAL) For TCP and UDP parameters only.
PAGE 1019
host ip-address} {destination mask | any | host ip-address} [operator] command. Parameters ip-address Enter the IP address of the forwarding router. slot/port Enter the keyword slot / port followed by the slot/port information. ip-protocolnumber Enter a number from 0 to 255 for the protocol identified in the IP protocol header.
PAGE 1020
Defaults none Command Modes REDIRECT-LIST Command History Version 9.4.0.0 Introduced on the MXL 10/40GbE Switch IO Module. Version 8.4.2.1 Introduced on the C-Series. Version 8.4.2.0 Introduced on the E-Series TeraScale. seq Configure a filter with an assigned sequence number for the redirect list.
PAGE 1021
any Enter the keyword any to specify that all traffic is subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address. destination Enter the IP address of the network or host to which the packets are sent.
PAGE 1022
show cam pbr Display the PBR CAM content. Syntax Parameters show cam pbr {[interface interface] | stack—unit slot-number port-set number]} [summary] interface interface Enter the keyword interface then the name of the interface. stack–unit number Enter the keyword stack-unit then the slot number. The range is from 0 to 11 . port-set number Enter the keywords port-set then the port-pipe number. The range is from 0 to 1. summary Enter the keyword summary to view only the total number of CAM entries.
PAGE 1023
0.0.0.0/0 Dell# Related Commands 00:00:04:b7:14:29 Vl 1008(0/3) • ip redirect-group – applies a redirect group to an interface. • show ip redirect-list – displays the redirect-list configuration. • show cam-usage – displays the CAM usage on ACL, router, or switch. show ip redirect-list View the redirect list configuration and the interfaces it is applied to.
PAGE 1024
PAGE 1025
PIM-Sparse Mode (PIM-SM) 39 The protocol-independent multicast (PIM) commands are supported by the Dell Networking Operating System (OS). This chapter contains the following sections: • IPv4 PIM-Sparse Mode Commands • IPv6 PIM-Sparse Mode Commands IPv4 PIM-Sparse Mode Commands The following describes the IPv4 PIM-sparse mode (PIM-SM) commands. clear ip pim rp-mapping The bootstrap router (BSR) feature uses this command to remove all or particular rendezvous point (RP) advertisement.
PAGE 1026
Command Modes Command History Usage Information EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you use this command on a local VLT node, all multicast routes from the local PIM TIB, the entire multicast route table, and all the entries in the data plane are deleted. The local VLT node sends a request to the peer VLT node to download multicast routes learned by the peer. Both local and synced routes are removed from the local VLT node multicast route table.
PAGE 1027
timer [assert | hello | joinprune | register] Defaults Disabled. Command Modes EXEC Privilege Command History Version 9.2(0.0) (OPTIONAL) Enter the keyword timer to view PIM timers. Enter one of the optional parameters: • assert: to view the assertion timer • hello: to view the PIM neighbor keepalive timer • joinprune: to view the expiry timer (join/prune timer) • register: to view the register suppression timer Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1028
For a Loopback interface, enter the keyword loopback then a number from 0 to 16383. • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. hash-masklength (OPTIONAL) Enter the hash mask length. The range is from zero (0) to 32. The default is 30.
PAGE 1029
ip pim join-filter Permit or deny PIM Join/Prune messages on an interface using an extended IP access list. This command prevents the PIM-SM router from creating state based on multicast source and/or group. Syntax ip pim join-filter ext-access-list {in | out} To remove the access list, use the no ip pim join-filter ext-access-list {in | out} command. Parameters ext-access-list Enter the name of an extended access list. in Enter this keyword to apply the access list to inbound traffic.
PAGE 1030
Example Dell(conf)# ip access-list standard map1 Dell(config-std-nacl)# permit 224.0.0.1/24 Dell(config-std-nacl)#exit Dell(conf)#int gig 1/1 Dell(config-if-gi-1/1)# ip pim ingress-interface-map map1 ip pim neighbor-filter To prevent a router from participating in protocol independent multicast (PIM), configure this feature. Syntax ip pim neighbor-filter {access-list} To remove the restriction, use the no ip pim neighbor-filter {accesslist} command.
PAGE 1031
Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip pim register-filter To prevent a PIM source DR from sending register packets to an RP for the specified multicast source and group, use this feature. Syntax ip pim register-filter access-list To return to the default, use the no ip pim register-filter access-list command. Parameters access-list Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.
PAGE 1032
NOTE: This option is applicable to multicast group range. Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. First-hop routers use this address by to send register packets on behalf of source multicast hosts. The RP addresses are stored in the order in which they are entered. RP addresses learned using BSR take priority over static RP addresses.
PAGE 1033
Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Priority is stored at BSR router when receiving a Candidate-RP-Advertisement. ip pim sparse-mode Enable PIM sparse mode and IGMP on the interface. Syntax ip pim sparse-mode To disable PIM sparse mode and IGMP, use the no ip pim sparse-mode command. Defaults Disabled. Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1034
Command Modes Command History Usage Information CONFIGURATION Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command configures an expiration timer for all S.G entries, unless they are assigned to an Extended ACL. ip pim spt-threshold To switch to the shortest path tree when the traffic reaches the specified threshold value, configure the PIM router. Syntax ip pim spt-threshold value | infinity To return to the default value, use the no ip pim spt-threshold command.
PAGE 1035
Command Modes Command History Usage Information CONFIGURATION Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. By default, when you enable PIM-SM snooping, a switch floods all multicast traffic to the PIM designated router (DR), including unnecessary multicast packets. To minimize the traffic sent over the network to the designated router, you can disable designated-router flooding.
PAGE 1036
show ip pim interface View information on the interfaces with IP PIM enabled. Syntax show ip pim interface Command Modes • EXEC • EXEC Privilege Command History Usage Information Example 1036 Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim interface command shown in the following example. Field Description Address Lists the IP addresses of the interfaces participating in PIM.
PAGE 1037
show ip pim neighbor View PIM neighbors. Syntax show ip pim neighbor Command Modes • EXEC • EXEC Privilege Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim neighbor command shown in the following example. Field Description Neighbor address Displays the IP address of the PIM neighbor.
PAGE 1038
Parameters Command Modes Command History mapping (OPTIONAL) Enter the keyword mapping to display the multicast groups-to-RP mapping and information on how RP is learnt. group-address (OPTIONAL) Enter the multicast group address mask in dotted decimal format to view RP for a specific group. • EXEC • EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#sh ip pim rp Group RP 224.2.197.115 165.87.20.4 224.2.217.146 165.87.20.4 224.3.3.3 165.87.20.4 225.1.2.
PAGE 1039
Command Modes Command History Usage Information Example (#2) • EXEC • EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim snooping interface commands shown in the following example. Field Description Interface Displays the VLAN interfaces with PIM-SM snooping enabled.
PAGE 1040
Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim snooping neighbor commands shown in the following example. Field Description Neighbor address Displays the IP address of the neighbor learned through PIM-SM snooping. Interface Displays the VLAN ID number and slot/port on which the PIM-SM-enabled neighbor was discovered.
PAGE 1041
Command Modes Command History Usage Information group-address (OPTIONAL) Enter the group address in dotted decimal format (A.B.C.D) to display TIB information PIM-SM snooping discovered for a specified multicast group. source-address (OPTIONAL) Enter the source address in dotted decimal format (A.B.C.D) to display TIB information PIM-SM snooping discovered for a specified multicast source. • EXEC • EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1042
Field Description • Example received a (*,G) Join message Dell#show ip pim snooping tib PIM Multicast Snooping Table Flags: J/P - (*,G) Join/Prune, j/p - (S,G) Join/Prune SGR-P - (S,G,R) Prune Timers: Uptime/Expires * : Inherited port (*, 225.1.2.1), uptime 00:00:01, expires 00:02:59, RP 165.87.70.1, flags: J Incoming interface: Vlan 2, RPF neighbor 0.0.0.0 Outgoing interface list: GigabitEthernet 4/11 RPF 165.87.32.
PAGE 1043
Interface 1 0 3 summary: active PIM interface passive PIM interfaces active PIM neighbors TIB summary: 1/1 (*,G) entries in PIM-TIB/MFC 1/1 (S,G) entries in PIM-TIB/MFC 0/0 (S,G,Rpt) entries in PIM-TIB/MFC 0 0 0 0 PIM nexthops RPs sources Register states Message summary: 2582/2583 Joins sent/received 5/0 Prunes sent/received 0/0 Candidate-RP advertisements sent/received 0/0 BSR messages sent/received 0/0 State-Refresh messages sent/received 0/0 MSDP updates sent/received 0/0 Null Register messages sent/
PAGE 1044
Command History Usage Information Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim tib command shown in the following example. Field Description (S, G) Displays the entry in the multicast PIM database. uptime Displays the amount of time the entry has been in the PIM route table. expires Displays the amount of time until the entry expires and is removed from the database. RP Displays the IP address of the RP/source for this entry.
PAGE 1045
Interface state: Interface, next-Hop, State/Mode (*, 226.1.1.1), uptime 01:29:19, expires 00:00:52, RP 10.211.2.1, flags: SCJ Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2 Outgoing interface list: GigabitEthernet 8/0 (*, 226.1.1.2), uptime 00:18:08, expires 00:00:52, RP 10.211.2.1, flags: SCJ Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2 Outgoing interface list: GigabitEthernet 8/0 (*, 226.1.1.3), uptime 00:18:08, expires 00:00:52, RP 10.211.2.
PAGE 1046
IPv6 PIM-Sparse Mode Commands The following describes the IPv6 PIM-sparse mode (PIM-SM) commands. ipv6 pim bsr-border Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per interface. Syntax ipv6 pim bsr-border Defaults Disabled. Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command is applied to the subsequent PIM-BSR messages. Existing BSR advertisements are cleaned up by time-out.
PAGE 1047
Defaults Refer to Parameters. Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 pim dr-priority Change the designated router (DR) priority for the IPv6 interface. Syntax ipv6 pim dr-priority priority-value To remove the DR priority value assigned, use the no ipv6 pim dr-priority command. Parameters priority-value Defaults 1 Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Enter a number.
PAGE 1048
Defaults none Command Modes INTERFACE Command History Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1049
Defaults none Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Do not enter this command before creating the access-list. ipv6 pim register-filter Configure the source DR so that it does not send register packets to the RP for the specified sources and groups. Syntax Parameters ipv6 pim register-filter access-list access-list Defaults none Command Modes CONFIGURATION Command History Example Version 9.2(0.
PAGE 1050
Parameters address Enter the IPv6 RP address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zero. group-address group-address mask Enter the keywords group-address then the group address in the x:x:x:x::x format and then the mask in /nn format to assign that group address to the RP. NOTE: The :: notation specifies successive hexadecimal fields of zero. override Enter the keyword override to override the BSR updates with static RP.
PAGE 1051
priority-value Defaults none Command Modes CONFIGURATION Command History Version 9.2(0.0) (OPTIONAL) Enter a number as the priority of this RP Candidate, which is included in the Candidate-RPAdvertisements. The range is 0 (highest) to 255 (lowest). Introduced on the MXL 10/40GbE Switch IO Module. ipv6 pim sparse-mode Enable IPv6 PIM sparse mode on the interface. Syntax ipv6 pim sparse-mode To disable IPv6 PIM sparse mode, use the no ipv6 pim sparse-mode command. Defaults Disabled.
PAGE 1052
Defaults 10 kbps Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. PIM leaf routers join the shortest path tree immediately after the first packet arrives from a new source. show ipv6 pim bsr-router View information on the Bootstrap router (v2). Syntax show ipv6 pim bsr-router Command Modes • EXEC • EXEC Privilege Command History Example Version 9.2(0.
PAGE 1053
Example Dell#show ipv6 pim interface Interface Ver/ Nbr Query DR Mode Count Intvl Prio Gi 10/3 v2/S 1 30 1 Address : fe80::201:e8ff:fe02:140f DR : this router Gi 10/11 v2/S 0 30 1 Address : fe80::201:e8ff:fe02:1417 DR : this router Dell# show ipv6 pim neighbor Displays IPv6 PIM neighbor information. Syntax Parameters Command Modes Command History Example show ipv6 pim neighbor [detail] detail • EXEC • EXEC Privilege Version 9.2(0.
PAGE 1054
Command Modes Command History • EXEC • EXEC Privilege Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1055
PIM Multicast Routing Table Flags: D - Dense, S - Sparse, C - Connected, L - Local, P Pruned, R - RP-bit set, F - Register flag, T - SPT-bit set, J Join SPT, M - MSDP created entry, A - Candidate for MSDP Advertisement K - Ack-Pending State Timers: Uptime/Expires Interface state: Interface, next-Hop, State/Mode (25::1, ff0e::225:1:2:1), uptime 00:09:53, expires 00:00:00,flags: CJ RPF neighbor: GigabitEthernet 10/3, fe80::201:e8ff:fe00:6265 Outgoing interface list: GigabitEthernet 10/11 (25::1, ff0e::225:1:2
PAGE 1056
PAGE 1057
40 Port Monitoring The port monitoring feature allows you to monitor network traffic by forwarding a copy of each incoming or outgoing packet from one port to another port. Important Points to Remember • Port monitoring is supported on physical ports and logical interfaces, such as Port Channels and virtual local area networks (VLANs). • The monitoring (destination, “MG”) and monitored (source, “MD”) ports must be on the same switch.
PAGE 1058
Version 8.3.16.1 Related Commands Introduced on the M I/O Aggregator. monitor session — enables a monitoring session. flow-based enable Enable flow-based monitoring. Syntax flow-based enable To disable flow-based monitoring, use the no flow-based enable command. Defaults Disabled, that is flow-based monitoring is not applied. Command Modes MONITOR SESSION (conf-mon-sess-session-ID) Command History Usage Information Version 9.4(0.0) Added support for the RPM/ERPM. Version 9.3(0.
PAGE 1059
Parameters session-ID Enter a session identification number. The range is from 0 to 65535. type rpm | erpm Specifies one of the following type: Defaults none Command Modes CONFIGURATION Command History • rpm: to create remote port monitoring session. • erpm: to create encapsulated remote port monitoring session. • If no option is specified, by default SPAN will be created. Version 9.4(0.0) Added support for rpm / erpm. Version 8.3.16.1 Introduced on the M I/O Aggregator.
PAGE 1060
no disable Dell# show monitor session Display the monitor information of a particular session or all sessions. Syntax show monitor session {session-ID} To display monitoring information for all sessions, use the show monitor session command. Parameters session-ID Defaults none Command Modes • EXEC • EXEC Privilege Command History Example Related Commands (OPTIONAL) Enter a session identification number. The range is from 0 to 65535. Version 9.4.0.0 Added support for the RPM / ERPM.
PAGE 1061
Parameters session-ID Defaults none Command Modes • EXEC • EXEC Privilege Command History Version 8.3.16.1 (OPTIONAL) Enter a session identification number. The range from 0 to 65535. Introduced on the M I/O Aggregator. Usage Information The monitoring command is saved in the running configuration at the Monitor Session mode level and can be restored after a chassis reload.
PAGE 1062
range Enter the keyword range to specify a list of interfaces. destination Enter the keyword destination to specify the destination interface. interface direction {rx | tx | both} • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a port channel interface, enter the keyword LAG then port channel and the port-channel id .
PAGE 1063
Private VLAN (PVLAN) 41 Private VLANs extend the Dell Networking OS security suite by providing Layer 2 isolation between ports within the same private VLAN. A private VLAN partitions a traditional VLAN into subdomains identified by a primary and secondary VLAN pair. The Dell Networking OS private VLAN implementation is based on RFC 3069. For more information, refer to the following commands. The command output is augmented in the Dell Networking OS version 7.8.1.
PAGE 1064
• Isolated port: An isolated port is a port that, in Layer 2, can only communicate with promiscuous ports that are in the same PVLAN. • Promiscuous port: A promiscuous port is a port that is allowed to communicate with any other port type. • Trunk port: A trunk port carries VLAN traffic across switches: – A trunk port in a PVLAN is always tagged. – A trunk port in Tagged mode carries primary or secondary VLAN traffic. The tag on the packet helps identify the VLAN to which the packet belongs.
PAGE 1065
switchport mode private-vlan — sets PVLAN mode of the selected port. private-vlan mapping secondary-vlan Map secondary VLANs to the selected primary VLAN. Syntax [no] private-vlan mapping secondary-vlan vlan-list To remove specific secondary VLANs from the configuration, use the no private-vlan mapping secondary-vlan vlan-list command syntax. Parameters vlan-list Defaults none Command Modes INTERFACE VLAN Command History Usage Information Related Commands Version 8.3.16.
PAGE 1066
private-vlan mode Set PVLAN mode of the selected VLAN to community, isolated, or primary. Syntax [no] private-vlan mode {community | isolated | primary} To remove the PVLAN configuration, use the no private-vlan mode {community | isolated | primary} command syntax. Parameters community Enter the keyword community to set the VLAN as a community VLAN. isolated Enter the keyword isolated to configure the VLAN as an isolated VLAN.
PAGE 1067
switchport mode private-vlan — sets PVLAN mode of the selected port. show interfaces private-vlan Display type and status of PVLAN interfaces. Syntax Parameters show interfaces private-vlan [interface interface] interface interface Defaults none Command Modes • EXEC • EXEC Privilege Command History Usage Information Version 8.3.16.1 (OPTIONAL) Enter the keyword interface then the ID of the specific interface for which to display PVLAN status. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1068
Related Commands private-vlan mode — sets the mode of the selected VLAN to community, isolated, or primary. show vlan private-vlan — displays the PVLANs and/or interfaces that are part of a PVLAN. show vlan private-vlan mapping — displays the primary-secondary VLAN mapping. switchport mode private-vlan — sets PVLAN mode of the selected port. show vlan private-vlan Display PVLANs and/or interfaces that are part of a PVLAN.
PAGE 1069
The following describes the show private-vlan command shown in the Examples below. Example (All) Field Description Primary Displays the VLAN ID of the designated or associated primary VLAN(s). Secondary Displays the VLAN ID of the designated or associated secondary VLAN(s). Type Displays the type of VLAN in which the listed interfaces reside. Active States whether the interface is operationally up or down. Ports Displays the interface IDs in the listed VLAN.
PAGE 1070
Usage Information If the VLAN ID is that of a primary VLAN, the entire private VLAN output is displayed, as shown below. If the VLAN ID is a secondary VLAN, only its primary VLAN and its particular secondary VLAN properties are displayed, as shown in the second Example.
PAGE 1071
Related Commands private-vlan mode — sets the mode of the selected VLAN to community, isolated, or primary. show vlan private-vlan — displays type and status of PVLAN interfaces. show vlan private-vlan mapping — displays the primary-secondary VLAN mapping. switchport mode private-vlan — sets PVLAN mode of the selected port. switchport mode private-vlan Set PVLAN mode of the selected port.
PAGE 1072
Related Commands private-vlan mode — sets the mode of the selected VLAN to community, isolated, or primary. private-vlan mapping secondary-vlan — sets the mode of the selected VLAN to primary and then associates the secondary VLANs to it. show interfaces private-vlan — displays type and status of PVLAN interfaces. show vlan private-vlan mapping — displays the primary-secondary VLAN mapping.
PAGE 1073
Per-VLAN Spanning Tree Plus (PVST+) 42 The Dell Networking Operating System (OS) implementation of per-VLAN spanning tree plus (PVST+) is based on the IEEE 802.1w standard spanning tree protocol, but it creates a separate spanning tree for each VLAN configured. NOTE: For easier command line entry, the plus (+) sign is not used at the command line. description Enter a description of the PVST+. Syntax description {description} To remove the description, use the no description {description} command.
PAGE 1074
Command Modes Command History Related Commands CONFIGURATION (conf-pvst) Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol spanning-tree pvst — enter PVST+ mode. edge-port bpdufilter default Enable BPDU Filter globally to filter transmission of BPDU on port fast enabled interfaces. Syntax edge-port bpdufilter default To disable global bpdu filter default, use the no edge-port bpdufilter default command.
PAGE 1075
Interface Designated Name PortID Prio Cost Sts Cost Bridge ID PortID ---------- -------- ---- ------ ----------- -------------------------- -------Po 23 128.24 128 1600 FWD 0 32768 001e.c9f1.00f3 128.24 Te 5/41 128.450 128 2000 DIS 0 32768 001e.c9f1.00f3 128.450 Te 5/50 128.459 128 2000 FWD 0 32768 001e.c9f1.00f3 128.459 Interface Name Role PortID Prio Edge BpduFilter ---------- ------ ----------- ---------Po 23 Desg 128.24 128 No Te 5/41 Dis 128.450 128 No Te 5/50 Desg 128.
PAGE 1076
Usage Information After you enable PVST+, the device runs an STP instance for each VLAN it supports. Related Commands disable — disables PVST+. show spanning-tree pvst — displays the PVST+ configuration. show spanning-tree pvst View the Per-VLAN spanning tree configuration. Syntax Parameters show spanning-tree pvst [vlan vlan-id] [brief] [guard] vlan vlan-id (OPTIONAL) Enter the keyword vlan then the VLAN ID. The range is 1 to 4094.
PAGE 1077
Field Description Sts Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS), blocking (BLK), or shut down (EDS Shut). Guard Type Type of STP guard configured (Root, Loop, or BPDU guard). Bpdu Filter Yes - Bpdu filter Enabled No - Bpdu filter Disabled Example (Brief) Dell# show spanning-tree pvst vlan 2 brief VLAN 2 Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 001e.c9f1.
PAGE 1078
Number of transitions to forwarding state 0 BPDU sent 8, received 0 The port is not in the Edge port mode, bpdu filter is disabled Port 450 (TenGigabitEthernet 5/41) is disabled Discarding Port path cost 2000, Port priority 128, Port Identifier 128.450 Designated root has priority 32768, address 001e.c9f1.00:f3 Designated bridge has priority 32768, address 001e.c9f1.00:f3 Designated port id is 128.
PAGE 1079
Related Commands spanning-tree pvst — configure PVST+ on an interface. spanning-tree pvst Configure a PVST+ interface with one of these settings: edge port with optional bridge port data unit (BPDU) guard, port disablement if an error condition occurs, port priority or cost for a VLAN range, loop guard, or root guard.
PAGE 1080
priority value Enter the keyword priority then the Port priority value in increments of 16. The range is from 0 to 240. The default is 128. rootguard Enter the keyword rootguard to enable root guard on a PVST+ port or port-channel interface. Defaults Not configured. Command Modes INTERFACE Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1081
Command Modes Command History Usage Information INTERFACE Version 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Module Some non-Dell Networking systems which have hybrid ports participating in PVST+ transmit two kinds of BPDUs: an 802.1D BPDU and an untagged PVST+ BPDU. Dell Networking systems do not expect PVST+ BPDU on an untagged port. If this happens, the system places the port in the Error-Disable state. This behavior might result in the network not converging.
PAGE 1082
Parameters vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094. bridge-priority value Enter the keywords bridge-priority then the bridge priority value in increments of 4096. The range is from 0 to 61440. The default is 32768. Defaults 32768 Command Modes CONFIGURATION (conf-pvst) Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1083
Related Commands vlan bridge-priority — sets the bridge-priority value. vlan hello-time — changes the time interval between BPDUs. vlan max-age — changes the time interval before PVST+ refreshes. show spanning-tree pvst — displays the PVST+ configuration. vlan hello-time Set the time interval between generation of PVST+ and BPDUs. Syntax vlan vlan-id hello-time seconds To return to the default value, use the no vlan hello-time command.
PAGE 1084
vlan max-age To maintain configuration information before refreshing that information, set the time interval for the PVST+ bridge. Syntax vlan vlan-range max-age seconds To return to the default, use the no vlan max-age command. Parameters vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094. max-age seconds Enter the keywords max-age then the time interval, in seconds, that the system waits before refreshing configuration information.
PAGE 1085
Quality of Service (QoS) 43 The Dell Networking Operating System (OS) commands for quality of service (QoS) include traffic conditioning and congestion control. This chapter contains the following sections: • Global Configuration Commands • Per-Port QoS Commands • Policy-Based QoS Commands Global Configuration Commands There are only two global configuration QoS commands.
PAGE 1086
service-class dot1p-mapping This command maps an 802.1p priority to an internal traffic class. Syntax Parameters Command Modes Command History service-class dot1p-mapping user-priority user-priority The user-priority value ranges from 0 to 7. CONFIGURATION Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Per-Port QoS Commands Per-port QoS (port-based QoS) allows you to define the QoS configuration on a per-physical-port basis. dot1p-priority Assign a value to the IEEE 802.
PAGE 1087
Command Modes Command History Usage Information INTERFACE Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The dot1p-priority command changes the priority of incoming traffic on the interface. The system places traffic marked with a priority in the correct queue and processes that traffic according to its queue.
PAGE 1088
Usage Information NOTE: Per port rate police is supported for Layer 2 tagged and untagged switched traffic and for Layer 3 traffic. Per VLANnd rate police is supported on only tagged ports with Layer 2 switched traffic. On one interface, you can configure the rate police command for a VLAN or you can configure the rate police command for an interface. For each physical interface, you can configure three rate police commands specifying different VLANS.
PAGE 1089
service-class dynamic dot1p Honor all 802.1p markings on incoming switched traffic on an interface (from INTERFACE mode) or on all interfaces (from CONFIGURATION mode). A CONFIGURATION mode entry supersedes an INTERFACE mode entry. Syntax service-class dynamic dot1p To return to the default setting, use the no service-class dynamic dot1p command. Defaults Command Modes Command History Usage Information All dot1p traffic is mapped to Queue 0 unless you enable the service-class dynamic dot1p command.
PAGE 1090
service-class bandwidth-percentage Specify a minimum bandwidth for queues. Syntax Parameters service-class bandwidth-percentage queue0 number queue1 number queue2 number queue3 number number Defaults none Command Modes CONFIGURATION Command History Usage Information Enter the bandwidth-weight, as a percentage. The range is from 1 to 100. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.
PAGE 1091
Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. After you configure a unicast queue as strict-priority, that particular queue, on the entire chassis, is treated as a strict-priority queue. Traffic for a strict priority is scheduled before any other queues are serviced. For example, if you send 100% line rate traffic over the SP queue, it starves all other queues on the ports on which this traffic is flowing.
PAGE 1092
Usage Information The unit of bandwidth percentage is 1%. A bandwidth percentage of 0 is allowed and disables the scheduling of that class. If the sum of the bandwidth percentages given to all eight classes exceeds 100%, the bandwidth percentage automatically scales down to 100%. Related Commands qos-policy-output — creates a QoS output policy. class-map Create/access a class map. Class maps differentiate traffic so that you can apply separate quality-ofservice policies to each class.
PAGE 1093
match ip access-group — configures the match criteria based on the access control list (ACL). match ip precedence — identifies the IP precedence values as match criteria. match ip dscp configures the match criteria based on the DSCP value. match ip access-group — configures a match criterion for a class map based on the contents of the designated MAC ACL. match mac dot1p — configures a match criterion for a class map based on a dot1p value.
PAGE 1094
Related Commands show qos statistics — displays the QoS statistics. match ip access-group Configure match criteria for a class map, based on the access control list (ACL). Syntax match ip access-group access-group-name [set-ip-dscp value] To remove ACL match criteria from a class map, use the no match ip accessgroup access-group-name [set-ip-dscp value] command.
PAGE 1095
Defaults none Command Modes CONFIGURATION (policy-map-input and policy-map-output; conf-qos-policy-in and conf-qos-policy-out; wred) Command History Related Commands Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. policy-map-output — creates an output policy map. qos-policy-output — creates an output QoS-policy on the router.
PAGE 1096
NOTE: Only one of the IP DSCP values must be a successful match criterion, not all of the specified IP DSCP values must match. Related Commands class-map — identifies the class map. match ip precedence Use IP precedence values as a match criteria. Syntax match ip precedence ip-precedence-list [set-ip-dscp value] To remove IP precedence as a match criteria, use the no match ip precedence ip-precedence-list [set-ip-dscp value] command.
PAGE 1097
match mac access-group Configure a match criterion for a class map, based on the contents of the designated MAC ACL. Syntax Parameters match mac access-group {mac-acl-name} mac-acl-name Defaults none Command Modes CLASS-MAP Command History Version 8.3.16.1 Enter a MAC ACL name. Its contents is used as the match criteria in the class map. Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To access this command, enter the class-map command.
PAGE 1098
match mac vlan Configure a match criterion for a class map based on VLAN ID. Syntax Parameters match mac vlan number number Defaults none Command Modes CLASS-MAP Command History Version 8.3.16.1 Enter the VLAN ID. The range is from 1 to 4094. Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To access this command, enter the class-map command. You can match against only one VLAN ID. Related Commands class-map — identifies the class map.
PAGE 1099
Related Commands 1. If only aggregate input QoS policy exists, input traffic conditioning configurations (rate-police) apply. Any marking configurations in aggregate input QoS policy are ignored. 2. If aggregate input QoS policy and per class input QoS policy coexist, aggregate input QoS policy preempts per class input QoS policy on input traffic conditioning (rate-police).
PAGE 1100
policy-map-output Create an output policy map. Syntax policy-map-output policy-map-name To remove a policy map, use the no policy-map-output policy-map-name command. Parameters policy-mapname Defaults none Command Modes CONFIGURATION Command History Enter the name for the policy map in character format (32 characters maximum). Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.
PAGE 1101
Defaults Layer 3 Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To specify the name of the input QoS policy, use this command. After the input policy is specified, rate-police is defined. This command enables Qos-Policy-Input Configuration mode — (conf-qos-policy-in).
PAGE 1102
Related Commands bandwidth-percentage — assigns weight to the class/queue percentage. rate police Police the incoming traffic rate on the selected interface. Syntax Parameters rate police [kbps] committed-rate [burst-KB] [peak [kbps] peakrate [burst-KB]] kbps Enter the keyword kbps to specify the rate limit in Kilobits per second (Kbps). Make the following value a multiple of 64. The range is from 0 to 40000000. The default granularity is Megabits per second (Mbps).
PAGE 1103
Parameters kbps Enter the keyword kbps to specify the rate limit in Kilobits per second (Kbps). Make the following value a multiple of 64. The range is from 0 to 40000000. The default granularity is Megabits per second (Mbps). rate Enter the outgoing rate in multiples of 10 Mbps. The range is from 10 to 10000. burst-KB (OPTIONAL) Enter the burst size in KB. The range is from 0 to 10000. The default is 50. Defaults Granularity for rate is Mbps unless you use the kbps option.
PAGE 1104
Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. You can attach a single policy-map to one or more interfaces to specify the service-policy for those interfaces. A policy map attached to an interface can be modified. NOTE: The service-policy commands are not allowed on a port channel.
PAGE 1105
service-queue Assign a class map and QoS policy to different queues. Syntax service-queue queue-id [class-map class-map-name] [qos-policy qos-policy-name] To remove the queue assignment, use the no service-queue queue-id [class-map class-map-name] [qos-policy qos-policy-name] command. Parameters queue-id Enter the value used to identify a queue. The range is from 0 to 3 (four queues per interface; four queues are reserved for control traffic).
PAGE 1106
Parameters ip-dscp value (OPTIONAL) Enter the keywords ip-dscp then the IP DSCP value. The range is from 0 to 63. mac-dot1p value Enter the keywords mac-dot1p then the dot1p value. The range is from 0 to 7. Defaults none Command Modes CONFIGURATION (conf-qos-policy-in) Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1107
show qos policy-map View the QoS policy map information.
PAGE 1108
Te 4/2 Dell# PM2 PMOut show qos policy-map-input View the input QoS policy map details. Syntax Parameters show qos policy-map-input [policy-map-name] [class class-mapname] [qos-policy-input qos-policy-name] policy-mapname Enter the policy map name. class classmap-name Enter the keyword class then the class map name. qos-policyinput qospolicy-name Enter the keyword qos-policy-input then the QoS policy name.
PAGE 1109
qos-policyoutput qospolicy-name Defaults none Command Modes • EXEC • EXEC Privilege Command History Example Version 8.3.16.1 Enter the keyword qos-policy-output then the QoS policy name. Introduced on the MXL 10/40GbE Switch IO Module. Dell#show qos policy-map-output Policy-map-output PolicyMapOutput Aggregate Qos-policy-name AggPolicyOut Queue# Qos-policy-name 0 qosPolicyOutput Dell# show qos qos-policy-input View the input QoS policy details.
PAGE 1110
show qos qos-policy-output View the output QoS policy details. Syntax Parameters show qos qos-policy-output [qos-policy-name] qos-policyname Defaults none Command Modes • EXEC • EXEC Privilege Command History Example Version 8.3.16.1 Enter the QoS policy name. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1111
Defaults none Command Modes • EXEC • EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show qos statistics Interface Te 0/20 Queue# Matched Pkts 0 0 1 0 2 0 3 0 Dell# Usage Information The following describes the show qos statistics command in the following example. Field (ED and EE) Description Queue # Queue Number Matched Pkts The number of packets that matched the class-map criteria.
PAGE 1112
show qos wred-profile View the WRED profile details. Syntax Parameters show qos wred-profile wred-profile-name wred-profilename Defaults none Command Modes • EXEC • EXEC Privilege Command History Example Version 8.3.16.1 Enter the WRED profile name to view the profile details. Introduced on THE MXL 10/40GbE Switch IO Module.
PAGE 1113
Usage Information This feature allows you to determine if the CAM has enough space available before applying the configuration on an interface. An input policy map with both Trust and Class-map configuration, the Class-map rules are ignored and only the Trust rule is programmed in the CAM. In such an instance, the Estimated CAM output column contains the size of the CAM space required for the Trust rule and not the Class-map rule.
PAGE 1114
Allowed (2) 0 1 Exception 1 0 Allowed (5) 1 1 Exception L2ACL 100 200 L2ACL 1000 200 L2ACL 0 200 … … … L2ACL 13 1 Allowed (2) Dell# 400 200 trust Specify dynamic classification (DSCP) or dot1p to trust. Syntax Parameters trust {diffserv [fallback]| dot1p [fallback]} diffserv Enter the keyword diffserv to specify trust of DSCP markings. dot1p Enter the keyword dot1p to specify trust dot1p configuration.
PAGE 1115
DSCP/CP hex Range (XXX) DSCP Definition Traditional IP Precedence MXL Switch Internal Queue ID DSCP/CP Decimal 101XXX EF (Expedited Forwarding) CRITIC/ECP 2 32–47 100XXX AF4 (Assured Forwarding) Flash Override 2 32–47 011XXX AF3 Flash 1 16–31 010XXX AF2 Immediate 1 16–31 001XXX AF1 Priority 0 0–15 000XXX BE (Best Effort) Best Effort 0 0–15 wred Designate the WRED profile to yellow or green traffic.
PAGE 1116
Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To assign drop precedence to green or yellow traffic, use this command. If there is no honoring enabled on the input, all the traffic defaults to green drop precedence. Related Commands wred-profile — creates a WRED profile and name that profile.
PAGE 1117
Routing Information Protocol (RIP) 44 Routing information protocol (RIP) is a distance vector routing protocol. The Dell Networking Operating System (OS) supports both RIP version 1 (RIPv1) and RIP version 2 (RIPv2). The implementation of RIP is based on IETF RFCs 2453 and RFC 1058. For more information about configuring RIP, refer to the Dell Networking OS Configuration Guide. auto-summary Restore the default behavior of automatic summarization of subnet routes into network routes.
PAGE 1118
debug ip rip Examine RIP routing information for troubleshooting. Syntax debug ip rip [interface | database | events [interface] | packet [interface] | trigger] To turn off debugging output, use the no debug ip rip command. Parameters Command Modes Command History interface (OPTIONAL) Enter the interface type and ID as one of the following: • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 1119
metric metricvalue (OPTIONAL) Enter the keyword metric then a number as the metric value. The range is from 1 to 16. The default is 1. route-map map-name (OPTIONAL) Enter the keywords route-map then the name of a configured route-map. Defaults Disabled. Metric: 1. Command Modes ROUTER RIP Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1120
To remove the description, use the no description {description} command. Parameters description Defaults none Command Modes ROUTER RIP Command History Related Commands Version 8.3.16.1 Enter a description to identify the RIP protocol (80 characters maximum). Introduced on the MXL 10/40GbE Switch IO Module.. router rip — enters ROUTER mode on the switch. distance Assign a weight (for prioritization) to all routes in the RIP routing table or to a specific route.
PAGE 1121
distribute-list in Configure a filter for incoming routing updates. Syntax distribute-list prefix-list-name in [interface] To delete the filter, use the no distribute-list prefix-list-name in command. Parameters prefix-listname Enter the name of a configured prefix list. interface (OPTIONAL) Identifies the interface type slot/port as one of the following: Defaults Not configured. Command Modes ROUTER RIP Command History Related Commands Version 8.3.16.
PAGE 1122
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. (OPTIONAL) Enter the keyword connected to filter only directly connected routes. ospf (OPTIONAL) Enter the keyword ospf to filter all OSPF routes. static (OPTIONAL) Enter the keyword static to filter manually configured routes.
PAGE 1123
ip rip receive version To receive specific versions of RIP, set the interface. The RIP version you set on the interface overrides the version command in ROUTER RIP mode. Syntax ip rip receive version [1] [2] To return to the default, use the no ip rip receive version command. Parameters 1 (OPTIONAL) Enter the number 1 for RIP version 1. 2 (OPTIONAL) Enter the number 2 for RIP version 2. Defaults RIPv1 and RIPv2 Command Modes INTERFACE Command History Version 8.3.16.
PAGE 1124
Usage Information To enable the interface to send both version of RIP packets, use the ip rip send version 1 2 command. Related Commands ip rip receive version — sets the RIP version for the interface to receive traffic. version — sets the RIP version for the switch software. ip split-horizon Enable split-horizon for RIP data on the interface. As described in RFC 2453, the split-horizon scheme prevents any routes learned over a specific interface to be sent back out that interface.
PAGE 1125
Usage Information RIP supports a maximum of 16 ECMP paths. neighbor Define a neighbor router with which to exchange RIP information. Syntax neighbor ip-address To delete a neighbor setting, use the no neighbor ip-address command. Parameters ip-address Defaults Not configured. Command Modes ROUTER RIP Command History Usage Information Version 8.3.16.1 Enter the IP address, in dotted decimal format, of a router with which to exchange information. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1126
Command Modes Command History Usage Information ROUTER RIP Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. You can enable an unlimited number of RIP networks. RIP operates over interfaces configured with any address the network command specifies. offset-list Specify a number to add to the incoming or outgoing route metrics learned using RIP.
PAGE 1127
Related Commands ip prefix-list — enters PREFIX-LIST mode and configure a prefix list. output-delay Set the interpacket delay of successive packets to the same neighbor. Syntax output-delay delay To return to the switch software defaults for interpacket delay, use the no output-delay command. Parameters delay Defaults Not configured. Command Modes ROUTER RIP Command History Usage Information Version 8.3.16.1 Specify a number of milliseconds as the delay interval. The range is from 8 to 50.
PAGE 1128
Defaults Not configured. Command Modes ROUTER RIP Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Although the passive interface does not send or receive routing updates, the network on that interface still includes in RIP updates sent using other interfaces. Related Commands neighbor — enables RIP for a specified network. network — defines a neighbor. redistribute Redistribute information from other routing instances.
PAGE 1129
redistribute ospf Redistribute routing information from an OSPF process. Syntax redistribute ospf process-id [match external {1 | 2} | match internal | metric metric-value] [route-map map-name] To disable redistribution, use the no redistribute ospf process-id [match external {1 | 2} | match internal | metric metric-value] [route-map map-name] command. Parameters process-id Enter a number that corresponds to the OSPF process ID to redistribute. The range is from 1 to 65355.
PAGE 1130
Usage Information To enable RIP, assign a network address using the network command. Example Dell(conf)#router rip Dell(conf-router_rip)# Related Commands network — enables RIP. show config Display the changes you made to the RIP configuration. The default values are not shown. Syntax show config Command Modes ROUTER RIP Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-router_rip)#show config ! router rip network 172.31.0.
PAGE 1131
Usage Information Example The following describes the show ip rip database command shown in the following example. Field Description Total number of routes in RIP database Displays the number of RIP routes stored in the RIP database. 100.10.10.0/24 directly connected Lists the routes directly connected. 150.100.0.0 redistributed Lists the routes learned through redistribution. 209.9.16.0/24... Lists the routes and the sources advertising those routes.
PAGE 1132
Example show running-config rip ! router rip distribute-list Test1 in distribute-list Test21 out network 10.0.0.0 passive-interface GigabitEthernet 2/0 neighbor 20.20.20.20 redistribute ospf 999 version 2 timers basic Manipulate the RIP timers for routing updates, invalid, holddown times, and flush time. Syntax timers basic update invalid holddown flush To return to the default settings, use the no timers basic command.
PAGE 1133
Command Modes Command History Usage Information ROUTER RIP Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. If you change the timers on one router, also synchronize the timers on all routers in the RIP domain. version Specify either RIP version 1 or RIP version 2. Syntax version {1 | 2} To return to the default version setting, use the no version command. Parameters 1 Enter the keyword 1 to specify RIP version 1. 2 Enter the keyword 2 to specify RIP version 2.
PAGE 1134
PAGE 1135
Remote Monitoring (RMON) 45 The Dell Networking Operating System (OS) remote monitoring (RMON) is based on IEEE standards, providing both 32-bit and 64-bit monitoring and long-term statistics collection.
PAGE 1136
interval Time, in seconds, the alarm monitors the MIB variables; this is the alarmSampleType in the RMON alarm table. The range is from 5 to 3600 seconds. delta Enter the keyword delta to test the change between MIB variables. This is the alarmSampleType in the RMON alarm table. absolute Enter the keyword absolute to test each MIB variable directly. This is the alarmSampleType in the RMON alarm table.
PAGE 1137
Parameters controlEntry integer Enter the keyword controlEntry to specify the RMON group of statistics using a value. Then enter an integer value from 1 to 65535 that identifies the RMON group of statistics. The integer value must be a unique index in the RMON history table. owner name (OPTIONAL) Enter the keyword owner then the owner name to record the owner of the RMON group of statistics.
PAGE 1138
rmon event Add an event in the RMON event table. Syntax rmon event number [log] [trap community] [description string] [owner name] To disable RMON on an interface, use the no rmon event number [log] [trap community] [description string] command. Parameters number Assign an event number in integer format from 1 to 65535. The number value must be unique in the RMON event table. log (OPTIONAL) Enter the keyword log to generate an RMON log entry.
PAGE 1139
interval Time, in seconds, the alarm monitors the MIB variables; this is the alarmSampleType in the RMON alarm table. The range is from 5 to 3600 seconds. delta Enter the keyword delta to test the change between MIB variables. This is the alarmSampleType in the RMON alarm table. absolute Enter the keyword absolute to test each MIB variable directly. This is the alarmSampleType in the RMON alarm table.
PAGE 1140
Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell# show rmon RMON status total memory used 218840 bytes. ether statistics table: 8 entries, 4608 bytes ether history table: 8 entries, 6000 bytes alarm table: 390 entries, 102960 bytes high-capacity alarm table: 5 entries, 1680 bytes event table: 500 entries, 206000 bytes log table: 2 entries, 552 bytes Dell# show rmon alarms Display the contents of the RMON alarm table.
PAGE 1141
6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 Dell# 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 show rmon events Display the contents of the RMON event table.
PAGE 1142
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 Dell# 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 show rmon hc-alarm Display the contents of RMON High-Capacity alarm table. Syntax Parameters show rmon hc-alarm [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON High-Capacity alarm table in an easy-to-read format.
PAGE 1143
Example (Brief) Dell#show rmon hc-alarm brief index SNMP OID ---------------------------------1 1.3.6.1.2.1.1.3 2 1.3.6.1.2.1.1.3 3 1.3.6.1.2.1.1.3 4 1.3.6.1.2.1.1.3 5 1.3.6.1.2.1.1.3 Dell# show rmon history Display the contents of the RMON Ethernet history table. Syntax Parameters show rmon history [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry.
PAGE 1144
show rmon log Display the contents of the RMON log table. Syntax Parameters show rmon log [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON log table in an easy-to-read format. Defaults none Command Modes EXEC Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The log table has a maximum of 500 entries.
PAGE 1145
Command Modes Command History EXEC Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example (Index) Dell#show rmon statistics 6001 RMON statistics entry 6001 interface: ifIndex.
PAGE 1146
PAGE 1147
Rapid Spanning Tree Protocol (RSTP) 46 The Dell Networking Operating System (OS) implementation of rapid spanning tree protocol (RSTP) is based on the IEEE 802.1w standard spanning-tree protocol. The RSTP algorithm configures connectivity throughout a bridged local area network (LAN) that is comprised of LANs interconnected by bridges. bridge-priority Set the bridge priority for RSTP. Syntax bridge-priority priority-value To return to the default value, use the no bridge-priority command.
PAGE 1148
bpdu interface {in | out} (OPTIONAL) Enter the keyword bpdu to debug the bridge protocol data units. (OPTIONAL) Enter the keyword interface along with the type slot/port of the interface you want displayed. Type slot/ port options are the following: • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1149
Command Modes Command History Related Commands SPANNING TREE (The prompt is “config-rstp”.) Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol spanning-tree rstp — enters SPANNING TREE mode on the switch. disable Disable RSTP globally on the system. Syntax disable To enable Rapid Spanning Tree Protocol, use the no disable command. Defaults RSTP is disabled. Command Modes CONFIGURATION RSTP (conf-rstp) Command History Related Commands Version 8.3.16.
PAGE 1150
Related Commands hello-time — changes the time interval between BPDUs. max-age — changes the wait time before RSTP refreshes the protocol configuration information. hello-time Set the time interval between the generation of the RSTP bridge protocol data units (BPDUs). Syntax hello-time [milli-second] seconds To return to the default value, use the no hello-time command. Parameters seconds Enter a number as the time interval between transmission of BPDUs. The range is from 1 to 10 seconds.
PAGE 1151
max-age To maintain configuration information before refreshing that information, set the time interval for the RSTP bridge. Syntax max-age seconds To return to the default values, use the no max-age command. Parameters max-age Enter a number of seconds that the waits before refreshing configuration information. The range is from 6 to 40 seconds. The default is 20 seconds. Defaults 20 seconds Command Modes CONFIGURATION RSTP (conf-rstp) Command History Related Commands Version 8.3.16.
PAGE 1152
protocol spanning-tree rstp To configure RSTP, enter RSTP mode. Syntax protocol spanning-tree rstp To exit RSTP mode, use the exit command. Defaults Not configured Command Modes CONFIGURATION Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information RSTP is not enabled when you enter RSTP mode. To enable RSTP globally on the system, use the no disable command from RSTP mode.
PAGE 1153
spanning-tree rstp Configure an RSTP interface with one of these settings: port cost, edge port with optional bridge port data unit (BPDU) guard, port priority, loop guard, or root guard. Syntax Parameters spanning-tree rstp {cost port-cost | edge-port [bpduguard [shutdown-on-violation]] | bpdufilter | priority priority | {rootguard}} cost port-cost Enter the keyword cost then the port cost value. The range is from 1 to 200000.
PAGE 1154
Usage Information The BPDU guard option prevents the port from participating in an active STP topology in case a BPDU appears on a port unintentionally, or is misconfigured, or is subject to a DOS attack. This option places the port into an Error Disable state if a BPDU appears and a message is logged so that the administrator can take corrective action. NOTE: A port configured as an edge port, on an RSTP switch, immediately transitions to the Forwarding state.
PAGE 1155
• 10-Gigabit Ethernet interface = 2000 • 40-Gigabit Ethernet interface = 1400 • Port Channel interface with one 10 Gigabit Ethernet = 2000 • Port Channel interface with one 40 Gigabit Ethernet = 1400 • Port Channel with two 10 Gigabit Ethernet = 1800 • Port Channel with two 40 Gigabit Ethernet = 600 edge-port Enter the keywords edge-port to configure the interface as a rapid spanning tree edge port.
PAGE 1156
If you do not enable shutdown-on-violation, BPDUs are still sent to the RPM CPU. You cannot enable STP root guard and loop guard at the same time on a port. For example, if you configure loop guard on a port on which root guard is already configured, the following error message displays: % Error: RootGuard is configured. Cannot configure LoopGuard.
PAGE 1157
47 Security This chapter contains various types of security commands offered in the Dell Networking Operating System (OS). The commands are listed in the following sections: • AAA Accounting Commands • Authorization and Privilege Commands • Authentication and Password Commands • RADIUS Commands • TACACS+ Commands • SSH Server and SCP Commands • Secure DHCP Commands For configuration details, refer to the Security chapter in the Dell Networking OS Configuration Guide.
PAGE 1158
Parameters system Enter the keyword system to send accounting information of any other AAA configuration. exec Enter the keyword exec to send accounting information when a user has logged in to EXEC mode. commands level Enter the keyword command then a privilege level for accounting of commands executed at that privilege level.
PAGE 1159
tacacs-server host — specifies a TACACS+ server host. aaa accounting suppress Prevent the generation of accounting records of users with the user name value of NULL. Syntax aaa accounting suppress null-username To permit accounting records to users with user name value of NULL, use the no aaa accounting suppress null-username command. Defaults Accounting records are recorded for all users. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.
PAGE 1160
Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. aaa accounting — enables AAA Accounting and creates a record for monitoring the accounting function. show accounting Display the active accounting sessions for each online user. Syntax show accounting Defaults none Command Modes EXEC Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1161
Parameters exec Enter the keyword exec to apply an EXEC level accounting method list. commands level Enter the keywords commands level to apply an EXEC and CONFIGURATION level accounting method list. method-list Enter a method list that you defined using the aaa accounting exec or aaa accounting commands. Defaults none Command Modes LINE Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1162
Command Modes Command History CONFIGURATION Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. aaa authorization config-commands Set parameters that restrict (or permit) a user’s access to EXEC level commands. Syntax aaa authorization config-commands Disable authorization checking for CONFIGURATION level commands using the no aaa authorization config-commands command. Defaults Enabled when you configure aaa authorization commands command.
PAGE 1163
Defaults none Command Modes CONFIGURATION Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. privilege level (CONFIGURATION mode) Change the access or privilege level of one or more commands. Syntax privilege mode {level level command | reset command} To delete access to a level and command, use the no privilege mode level level command command.
PAGE 1164
Usage Information To define a password for the level to which you are assigning privilege or access, use the enable password command. privilege level (LINE mode) Change the access level for users on the terminal lines. Syntax privilege level level To delete access to a terminal line, use the no privilege level level command. Parameters level level Enter the keyword level then a number for the access level. The range is from 0 to 15. Level 1 is EXEC mode and Level 15 allows access to all CLI modes.
PAGE 1165
method-listname Enter a text string (up to 16 characters long) to name the list of enabled authentication methods activated at login. method Enter one of the following methods: ... method2 • enable: use the password the enable password command defines in CONFIGURATION mode. • line: use the password the password command defines in LINE mode. • none: no authentication. • radius: use the RADIUS servers configured with the radius-server host command.
PAGE 1166
aaa authentication login Configure AAA Authentication method lists for user access to EXEC mode (Enable log-in). Syntax aaa authentication login {method-list-name | default} method [... method4] To return to the default setting, use the no aaa authentication login {method-list-name | default} command. Parameters method-listname Enter a text string (up to 16 characters long) as the name of a user-configured method list that can be applied to different lines.
PAGE 1167
applied. If the correct user name/password combination is not entered, the user is not allowed access to the switch. NOTE: If authentication fails using the primary method, the system employs the second method (or third method, if necessary) automatically. For example, if the TACACS+ server is reachable, but the server key is invalid, the system proceeds to the next authentication method. The TACACS+ is incorrect, but the user is still authenticated by the secondary method.
PAGE 1168
ip access-list extended — names (or selects) an extended access list based on the IP addresses or protocols. enable password Change the password for the enable command. Syntax enable password [level level] [encryption-type] password To delete a password, use the no enable password [encryption-type] password [level level] command. Parameters level level (OPTIONAL) Enter the keyword level then a number as the level of access. The range is from 1 to 15.
PAGE 1169
Related Commands show running-config — views the current configuration. privilege level (CONFIGURATION mode) — controls access to the command modes within the switch. enable restricted Allows Dell Networking technical support to access restricted commands. Syntax enable restricted [encryption-type] password To disallow access to restricted commands, use the no enable restricted command. Parameters encryptiontype (OPTIONAL) Enter the number 7 as the encryption type.
PAGE 1170
Parameters level level (OPTIONAL) Enter the keyword level then a number as the level of access. The range is from 1 to 15. encryptiontype (OPTIONAL) Enter the number 5 or 0 as the encryption type. Enter a 5 then a text string as the hidden password. The text string must be a password that was already encrypted by a Dell Networking router. Use this parameter only with a password that you copied from the show running-config file of another Dell Networking router.
PAGE 1171
To use the local user/password database for login authentication, use the no login authentication command. Parameters method-listname Enter the keywords method-list-name to specify that method list, created in the aaa authentication login command, to be applied to the designated terminal line. default Enter the keyword default to specify that the default method list, created in the aaa authentication login command, is applied to the terminal line.
PAGE 1172
Command Modes Command History LINE Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The system prompts users for these passwords when the method for authentication or authorization used is "line". Related Commands enable password — sets the password for the enable command. login authentication — configures an authentication method to log in to the switch. service password-encryption — encrypts all passwords configured in the system.
PAGE 1173
lower number (OPTIONAL) Enter the keyword lower then the lower number. The range is from 0 to 31. numeric number (OPTIONAL) Enter the keyword numeric then the numeric number. The range is from 0 to 31. special-char number (OPTIONAL) Enter the keywords special-char then the number of special characters permitted. The range is from 0 to 31. Defaults none Command Modes CONFIGURATION Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1174
show privilege View your access level. Syntax show privilege Command Modes • EXEC • EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show privilege Current privilege level is 15 Dell# Related Commands privilege level (CONFIGURATION mode) — assigns access control to different command modes. show users Allows you to view information on all users logged in to the switch.
PAGE 1175
0 console 0 * 3 vty 1 Dell# Related Commands admin admin idle idle 172.31.1.4 username — enables a user. timeout login response Specify how long the software waits for the login input (for example, the user name and password) before timing out. Syntax timeout login response seconds To return to the default values, use the no timeout login response command. Parameters seconds Enter a number of seconds the software waits before logging you out.
PAGE 1176
If you do not want a specific user to enter a password, use the nopassword option. To delete authentication for a user, use the no username name command. Parameters name Enter a text string for the name of the user up to 63 characters. access-class access-listname Enter the keywords access-class then the name of a configured access control list (either an IP access control list or MAC access control list). nopassword Enter the keyword nopassword to specify that the user should not enter a password.
PAGE 1177
show running-config — views the current configuration. RADIUS Commands The following RADIUS commands are supported by Dell Networking operating system. debug radius View RADIUS transactions to assist with troubleshooting. Syntax debug radius To disable debugging of RADIUS, use the no debug radius command. Defaults Disabled. Command Modes EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1178
• Defaults Not configured. Command Modes CONFIGURATION Command History Version 8.3.16.1 For VLAN interface, enter the keyword vlan then a number from 1 to 4094. Introduced on the MXL 10/40GbE Switch IO Module. radius-server deadtime Configure a time interval during which non-responsive RADIUS servers to authentication requests are skipped. Syntax radius-server deadtime seconds To disable this function or return to the default value, use the no radius-server deadtime command.
PAGE 1179
retransmit retries (OPTIONAL) Enter the keyword retransmit then a number as the number of attempts. This parameter overwrites the radius-server retransmit command. The range is from zero (0) to 100. The default is 3 attempts. timeout seconds (OPTIONAL) Enter the keyword timeout then the seconds the time interval the switch waits for a reply from the RADIUS server. This parameter overwrites the radius-server timeout command. The range is from 0 to 1000. The default is 5 seconds.
PAGE 1180
radius-server timeout — sets the time interval before the RADIUS server times out. radius-server key Configure a key for all RADIUS communications between the switch and the RADIUS host server. Syntax radius-server key [encryption-type] key To delete a password, use the no radius-server key command. Parameters encryptiontype key Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.
PAGE 1181
To configure zero retransmit attempts, use the no radius-server retransmit command. To return to the default setting, use the radius-server retransmit 3 command. Parameters retries Defaults 3 retries Command Modes CONFIGURATION Command History Related Commands Version 8.3.16.1 Enter a number of attempts that the system tries to locate a RADIUS server. The range is from zero (0) to 100. The default is 3 retries. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1182
TACACS+ Commands The Dell Networking OS supports TACACS+ as an alternate method for login authentication. debug tacacs+ To assist with troubleshooting, view TACACS+ transactions. Syntax debug tacacs+ To disable debugging of TACACS+, use the no debug tacacs+ command. Defaults Disabled. Command Modes EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1183
Command Modes Command History CONFIGURATION Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. tacacs-server host Specify a TACACS+ host. Syntax Parameters tacacs-server host {hostname | ipv4-address} [port number] [timeout seconds] [key key] hostname Enter the name of the TACACS+ server host. ipv4-address Enter the IPv4 address (A.B.C.D) of the TACACS+ server host. port number (OPTIONAL) Enter the keyword port then a number as the port to be used by the TACACS+ server.
PAGE 1184
tacacs-server key — configures a TACACS+ key for the TACACS server. tacacs-server key Configure a key for communication between a TACACS+ server and a client. Syntax tacacs-server key [encryption-type] key To delete a key, use the no tacacs-server key key command. Parameters encryptiontype key Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 (OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered.
PAGE 1185
enable FIPS mode; if you enabled FIPS mode, you can only generate a 2048-bit key. The default is 1024. rsa1 Enter the keyword rsa1 then the key size to generate a SSHv1 RSA host keys. The range is from 1024 to 2048. The default is 1024. Defaults Key size 1024; if you enable FIPS mode, the key size is 2048. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The host keys are required for key-exchange by the SSH server.
PAGE 1186
Defaults Disabled on both client and server. Command Modes EXEC Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Debug information includes details for key-exchange, authentication, and established session for each connection. ip scp topdir Identify a location for files used in secure copy transfer. Syntax ip scp topdir directory To return to the default setting, use the no ip scp topdir command. Parameters directory Enter a directory name.
PAGE 1187
Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command specifies the maximum number of attempts to authenticate a user on an SSH connection with the remote host for password authentication. SSH disconnects when the number of password failures exceeds authentication-retries. ip ssh connection-rate-limit Configure the maximum number of incoming SSH connections per minute.
PAGE 1188
Usage Information If you enable this command, clients can log in without a password prompt. This command provides two levels of authentication: • rhost-authentication is done with the file specified in the ip ssh rhostfile command. • checking client host-keys is done with the file specified in the ip ssh pubkey-file command. NOTE: Administrators must specify the two files (rhosts and pub-key-file) to configure host-based authentication.
PAGE 1189
Defaults Enabled Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. With password authentication enabled, you can authenticate using the local, RADIUS, or TACACS+ password fallback order as configured. ip ssh pub-key-file Specify the file used for host-based authentication. Syntax Parameters ip ssh pub-key-file {WORD} WORD Defaults none Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.
PAGE 1190
Related Commands show ip ssh client-pub-keys — displays the client-public keys used for the hostbased authentication. ip ssh rhostsfile Specify the rhost file used for host-based authorization. Syntax Parameters ip ssh rhostsfile {WORD} WORD Defaults none Command Modes CONFIGURATION Command History Version 8.3.16.1 Enter the rhost file name for the host-based authentication. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1191
Defaults Disabled. Command Modes CONFIGURATION Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Enabling RSA authentication allows the user to log in without being prompted for a password. In addition, the OpenSSH compatible SSHv2 RSA public key must be added to the list of authorized keys (ip ssh rsa-authentication myauthorized-keys device://filename command). Related Commands ip ssh rsa-authentication (EXEC) — adds keys for RSA authentication.
PAGE 1192
ip ssh rsa-authentication (Config) — enables RSA authentication. ip ssh server Configure an SSH server. Syntax ip ssh server {enable | port port-number} [version {1 | 2}] To disable SSH server functions, use the no ip ssh server enable command. Parameters enable Enter the key word enable to start the SSH server. port portnumber (OPTIONAL) Enter the keyword port then the port number of the listening port of the SSH server. The range is from 1 to 65535. The default is 22.
PAGE 1193
Parameters Key Enter the keyword key to display the host public key. mypubkey Enter the keyword mypubkey to display the host public key. rsa Enter the keyword rsa to display the host SSHv2 RSA public key. rsa1 Enter the keyword rsa1 to display the host SSHv1 RSA public key. Defaults none Command Modes EXEC Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command is useful if the remote SSH client implements Strict Host Key Checking.
PAGE 1194
Command History Example Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#sh ip ssh SSH server SSH server version Password Authentication Hostbased Authentication RSA Authentication : : : : : enabled. v1 and v2. enabled. disabled. disabled. ip ssh server — configures an SSH server. show ip ssh client-pub-keys — displays the client-public keys. show ip ssh client-pub-keys Display the client public keys used in host-based authentication.
PAGE 1195
show ip ssh rsa-authentication Display the authorized-keys for the RSA authentication. Syntax Parameters show ip ssh rsa-authentication {my-authorized-keys} myauthorizedkeys Defaults none Command Modes EXEC Command History Version 8.3.16.1 Display the RSA authorized keys. Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command displays the contents of the flash:/ADMIN_DIR/ssh/ authorized-keys.username file.
PAGE 1196
-p portnumber (OPTIONAL) Enter the keyword -p then the port number. The range is from 1 to 65536. The default is 22. -v {1 | 2} (OPTIONAL) Enter the keyword -v then the SSH version 1 or 2. The default is the version from the protocol negotiation. Defaults As shown in the Parameters section. Command Modes EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1197
ip dhcp relay Enable Option 82. Syntax Parameters ip dhcp relay information-option [trust-downstream] trustdownstream Defaults Disabled. Command Modes CONFIGURATION Command History Version 8.3.16.1 Configure the system to trust Option 82 when it is received from the previous-hop router. Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp snooping Enable DHCP Snooping globally. Syntax [no] ip dhcp snooping Defaults Disabled. Command Modes CONFIGURATION Command History Version 8.3.16.
PAGE 1198
Command Modes Command History CONFIGURATION Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp snooping binding Create a static entry in the DHCP binding table. Syntax Parameters [no] ip dhcp snooping binding mac address vlan-id vlan-id ip ip-address interface type slot/port lease number mac address Enter the keyword mac then the MAC address of the host to which the server is leasing the IP address.
PAGE 1199
ip dhcp snooping database renew Renew the binding table. Syntax ip dhcp snooping database renew Defaults none Command Modes • EXEC • EXEC Privilege Command History Version 8.3.19.0 Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp snooping trust Configure an interface as trusted. Syntax [no] ip dhcp snooping trust Defaults Untrusted Command Modes INTERFACE Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1200
ip dhcp snooping vlan Enable DHCP Snooping on one or more VLANs. Syntax Parameters [no] ip dhcp snooping vlan name name Defaults Disabled. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Enter the name of a VLAN on which to enable DHCP Snooping. Introduced on the MXL 10/40GbE Switch IO Module. When enabled, the system begins creating entries in the binding table for the specified VLANs. NOTE: Learning only happens if there is a trusted port in the VLAN.
PAGE 1201
sFlow 48 sFlow monitoring system includes an sFlow Agent and an sFlow Collector. • The sFlow Agent combines the flow samples and interface counters into sFlow datagrams and forwards them to the sFlow Collector. • The sFlow Collector analyses the sFlow Datagrams received from the different devices and produces a network-wide view of traffic flows.
PAGE 1202
sflow collector Configure a collector device to which sFlow datagrams are forwarded. Syntax sflow collector {ip-address} agent-addr {ip-address} [number [max-datagram-size number]] | [max-datagram-size number] To delete a configured collector, use the no sflow collector {ip-address} agent-addr {ipv4-address} [number [max-datagram-size number]] | [max-datagram-size number] command. Parameters sflow collector ip-address Enter the IPv4 (A.B.C.D) of the sFlow collector device.
PAGE 1203
sflow enable (Global) Enable sFlow globally. Syntax sflow enable To disable sFlow, use the no sflow enable command. Defaults Disabled. Command Modes CONFIGURATION Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information sFlow is disabled by default. In addition to this command, you must enable sFlow on individual interfaces where you want sFlow sampling. Related Commands sflow enable (Global) — enables sFlow on interfaces.
PAGE 1204
sflow extended-switch enable Enable packing information on a switch only. Syntax sflow extended-switch enable To disable packing information, use the no sflow extended-switch [enable] command. Parameters enable Defaults Disabled. Command Modes CONFIGURATION Command History Version 8.3.16.1 Enter the keyword enable to enable global extended information. Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The Dell Networking OS version 7.8.1.
PAGE 1205
global default counter polling (20 seconds) interval. You can configure an interface to use a different polling interval. sflow polling-interval (Global) Set the sFlow polling interval at a global level. Syntax sflow polling-interval interval value To return to the default, use the no sflow polling-interval interval command. Parameters interval value Defaults 20 seconds Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Enter the interval value in seconds.
PAGE 1206
Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Sample-rate is the average number of packets skipped before the sample is taken. This command changes the global default sampling rate. You can configure an interface to use a different sampling rate than the global sampling rate. If the value entered is not a correct power of 2, the command generates an error message with the previous and next power of 2 value.
PAGE 1207
show sflow Display the current sFlow configuration. Syntax Parameters Command Modes Command History show sflow [interface] interface • EXEC • EXEC Privilege Version 8.3.16.1 (OPTIONAL) Enter the following keywords and slot/port or number information: • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
PAGE 1208
show sflow stack-unit Display the sFlow information on a stack unit. Syntax Parameters Command Modes Command History show sflow stack-unit {unit number} unit number • EXEC • EXEC Privilege Version 8.3.16.1 (OPTIONAL) Enter a unit number to view information on the stack unit in that slot. The range is from 0 to 5. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1209
Service Provider Bridging 49 Service provider bridging is composed of virtual local area network (VLAN) Stacking, Layer 2 Protocol Tunneling, and Provider Backbone Bridging as described in the Dell Networking OS Configuration Guide. This chapter includes commands for the Dell Networking operating software Layer 2 Protocol Tunneling (L2PT). L2PT enables protocols to tunnel through an 802.1q tunnel.
PAGE 1210
• in | out | both Enter the keyword in, out, or both to debug incoming interfaces, outgoing interfaces, or both incoming and outgoing interfaces. vlan vlan-id Enter the keyword vlan then the VLAN ID. The range is from 1 to 4094. count value Enter the keyword count then the number of debug outputs. The range is from 1 to 100. Defaults Debug disabled. Command Modes EXEC Privilege Command History For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
PAGE 1211
Related Command show protocol-tunnel — displays tunneling information for all VLANs. protocol-tunnel destination-mac Overwrite the BPDU destination MAC address with a specific value. Syntax Parameters protocol-tunnel destination-mac xstp address stp Change the default destination MAC address used for L2PT to another value. Defaults The default destination MAC is 01:01:e8:00:00:00. Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1212
protocol-tunnel rate-limit Enable traffic rate limiting per box. Syntax protocol-tunnel rate-limit rate To reset the rate limit to the default, use the no protocol-tunnel rate-limit rate command. Parameters rate Enter the rate in frames per second. The range is from 75 to 3000. The default is 75. Defaults 75 frames per second. Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1213
1001 1002 1003 1004 1005 LLDP,GVRP MMRP,MVRP LACP,DOT1X OAM,PAUSE E-LMI Gi Gi Gi Gi Gi 5/7,Gi 5/7,Gi 5/7,Gi 5/7,Gi 5/7,Gi 5/6 5/6 5/6 5/6 5/6 Example (Specific VLAN) Dell#show protocol-tunnel vlan 2 System Rate-Limit: 1000 Frames/second Interface Vlan Protocol(s) Gi1/2 2 STP, PVST Dell# Related Commands show running-config — displays the current configuration.
PAGE 1214
PAGE 1215
50 Simple Network Management Protocol (SNMP) and Syslog This chapter contains commands to configure and monitor the simple network management protocol (SNMP) v1/v2/v3 and Syslog. The chapter contains the following sections: • SNMP Commands • Syslog Commands SNMP Commands The following SNMP commands are available in the Dell Networking OS.
PAGE 1216
Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1217
show snmp group Display the group name, security model, status, and storage type of each group. Syntax show snmp group Command Modes • EXEC • EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The following Example displays a group named ngroup. The ngroup has a security model of version 3 (v3) with authentication (auth), the read and notify name is nview with no write view name specified, and finally the row status is active.
PAGE 1218
snmp ifmib ifalias long Display the entire description string through the Interface MIB, which would be truncated otherwise to 63 characters. Syntax snmp ifmib ifalias long Defaults Interface description truncated beyond 63 characters. Command Modes CONFIGURATION Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. !----command run on host connected to switch:------! > snmpwalk -c public 10.10.10.130 .1.3.6.1.2.1.31 | grep -i alias | more IF-MIB::ifAlias.
PAGE 1219
security-name name (Optional) Enter the keywords security-name then the security name as defined by the community MIB. access-listname (Optional) Enter a standard IPv4 access list name (a string up to 16 characters long). Defaults none Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following example configures a community named public that is mapped to the security named guestuser with Read Only (ro) permissions.
PAGE 1220
! Dell(conf)#snmp-server community guest ro snmp-ro-acl Dell(conf)# Related Commands ip access-list standard — names (or selects) a standard access list to filter based on IP address. show running-config — displays the current SNMP configuration and defaults. snmp-server contact Configure contact information for troubleshooting this SNMP node. Syntax snmp-server contact text To delete the SNMP server contact information, use the no snmp-server contact command.
PAGE 1221
notificationoption • ets — Notification of changes to the ets traps. • fips — Notification of changes to the FIP snooping state. • lacp — Notification of changes. • pfc — Notification of changes to pfc traps. • snmp — Notification of RFC 1157 traps. • stp — Notification of a state change in the spanning tree protocol (RFC 1493). • vrrp — Notification of a state change in a VRRP group. • xstp — Notification of a state change in MSTP (802.1s), RSTP (802.1w), and PVST+.
PAGE 1222
To return to the default, use the no snmp-server engineID [local engineID] [remote ip-address udp-port port-number engineID] command. Parameters local engineID Enter the keyword local then the engine ID number that identifies the copy of the SNMP on the local device. Format (as specified in RFC 3411): 12 octets. • The remaining eight octets are the MAC address of the chassis. Enter the keyword remote then the IP address that identifies the copy of the SNMP on the remote device.
PAGE 1223
snmp-server group Configure a new SNMP group or a table that maps SNMP users to SNMP views. Syntax snmp-server group [group_name {1 | 2c | 3 {auth | noauth | priv}}] [read name] [write name] [notify name] [ access-listname | access-list-name]] To remove a specified group, use the no snmp-server group [group_name {v1 | v2c | v3 {auth | noauth | priv}}] [read name] [write name] [notify name] [access-list-name | access-list-name]] command.
PAGE 1224
access-listname Defaults As above. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 (Optional) Enter the standard IPv4 access list name (a string up to 16 characters long). Introduced on the MXL 10/40GbE Switch IO Module. The following Example specifies the group named harig as a version 3 user requiring both authentication and encryption and read access limited to the read named rview. NOTE: The number of configurable groups is limited to 16 groups.
PAGE 1225
version 1 | 2c | 3 (OPTIONAL) Enter the keyword version to specify the security model then the security model version number 1, 2c, or 3: • Version 1 is the least secure version. • Version 3 is the most secure of the security modes. • Version 2c allows transmission of informs and counter 64, which allows for integers twice the width of what is normally allowed. The default is version 1. auth (OPTIONAL) Enter the keyword auth to specify authentication of a packet without encryption.
PAGE 1226
The default is all trap types are sent to host. Defaults As above. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. In order to configure the router to send SNMP notifications, enter at least one snmp-server host command. If you enter the command with no keywords, all trap types are enabled for the host. If you do not enter an snmp-server host command, no notifications are sent.
PAGE 1227
snmp-server community — configures a new community SNMPv1 or SNMPv2c. snmp-server location Configure the location of the SNMP server. Syntax snmp-server location text To delete the SNMP location, use the no snmp-server location command. Parameters text Defaults Not configured. Command Modes CONFIGURATION Command History Version 8.3.16.1 Enter an alpha-numeric text string, up to 55 characters long. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1228
To disable sending traps out a specific interface, use the no snmp trap-source command. Parameters interface Enter the following keywords and slot/port or number information: • For a Loopback interface, enter the keyword loopback then a number from 0 to 16383. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
PAGE 1229
• v1v2creadu — maps to a community with ro permissions. • 1v2cwriteu — maps to a community rw permissions. remote ipaddress Enter the keywords udp-port then the user datagram protocol (UDP) port number on the remote device. The range is from 0 to 65535. The default is 162. udp-port portnumber Enter the keywords udp-port then the UDP (User Datagram Protocol) port number on the remote device. The range is from 0 to 65535. The default is 162.
PAGE 1230
access-listname (Optional) Enter the standard IPv4 access list name (a string up to 16 characters long). Defaults If no authentication or privacy option is configured, then the messages are exchanged (attempted anyway) without any authentication or encryption. Command Modes CONFIGURATION Command History Usage Information Version 9.3(0.0) Added support for the AES128-CFB encryption algorithm on the MXL 10/40GbE Switch IO Module platform. Version 8.3.16.
PAGE 1231
snmp-server user (for AES128-CFB Encryption) Specify that AES128-CFB encryption algorithm needs to be used for transmission of SNMP information. The Advanced Encryption Standard (AES) Cipher Feedback (CFB) 128-bit encryption algorithm is in compliance with RFC 3826. RFCs for SNMPv3 define two authentication hash algorithms, namely, HMACMD5-96 and HMAC-SHA1-96. These are the full forms or editions of the truncated versions, namely, HMAC-MD5 and HMAC-SHA1 authentication algorithms.
PAGE 1232
FIPS mode by using the fips mode enable command in Global Configuration mode. You can enable or disable FIPS mode only if SNMPv3 users are not previously set up. Otherwise, you must remove the previously configured users before you change the FIPS mode. Example Dell# snmp-server user privuser v3group v3 encrypted auth md5 9fc53d9d908118b2804fe80e3ba8763d priv aes128 d0452401a8c3ce42804fe80e3ba8763d Related Commands show snmp user — Displays the information configured on each SNMP user name.
PAGE 1233
snmp trap link-status Enable the interface to send SNMP link traps, which indicate whether the interface is up or down. Syntax snmp trap link-status To disable sending link trap messages, use the no snmp trap link-status command. Defaults Enabled. Command Modes INTERFACE Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. If the interface is expected to flap during normal usage, you could disable this command.
PAGE 1234
Defaults size = 40960; level = 7 or debugging Command Modes CONFIGURATION Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. default logging buffered — sets the logging buffered parameters. default logging console Return the default settings for messages logged to the console. Syntax default logging console Defaults level = 7 or debugging Command Modes CONFIGURATION Command History Related Commands Version 8.3.16.
PAGE 1235
default logging trap Return to the default settings for logging messages to the Syslog servers. Syntax default logging trap Defaults level = 6 or informational Command Modes CONFIGURATION Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. logging trap — limit messages logged to the Syslog servers based on severity. logging Configure an IP address or host name of a Syslog server where logging messages are sent.
PAGE 1236
logging buffered Enable logging and specify which messages are logged to an internal buffer. By default, all messages are logged to the internal buffer. Syntax logging buffered [level] [size] To return to the default values, use the default logging buffered command. To disable logging stored to an internal buffer, use the no logging buffered command.
PAGE 1237
Parameters level (OPTIONAL) Indicate a value from 0 to 7 or enter one of the following parameters: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging. The default is 7 or debugging. Defaults level = 7; size = debugging Command Modes CONFIGURATION Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. clear logging — clears the logging buffer.
PAGE 1238
• news (USENET news) • sys9 (system use) • sys10 (system use) • sys11 (system use) • sys12 (system use) • sys13 (system use) • sys14 (system use) • syslog (Syslog process) • user (user process) • uucp (Unix to Unix copy process) The default is local7. Defaults local7 Command Modes CONFIGURATION Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. logging — enables logging to a Syslog server. logging on — enables logging.
PAGE 1239
Usage Information When you configure the snmp-server trap-source command, the system messages logged to the history table are also sent to the SNMP network management station. Related Commands show logging — displays information logged to the history buffer. logging history size Specify the number of messages stored in the system logging history table. Syntax logging history size size To return to the default values, use the no logging history size command.
PAGE 1240
Defaults 7 or debugging Command Modes CONFIGURATION Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. default logging monitor — returns the logging monitor parameters to the default setting. logging on Specify that debug or error messages are asynchronously logged to multiple destinations, such as the logging buffer, Syslog server, or terminal lines.
PAGE 1241
To disable this command and return to the default setting, use the no logging source-interface command. Parameters interface Defaults Not configured. Command Modes CONFIGURATION Command History Version 8.3.16.1 Enter the following keywords and slot/port or number information: • For Loopback interfaces, enter the keyword loopback then a number from zero (0) to 16383. • For a Port Channel interface, enter the keywords portchannel then a number. Tthe range is from 1 to 128.
PAGE 1242
all Enter the keyword all to turn off all. limit numberof-buffers Enter the keyword limit then the number of buffers to be queued for the terminal after which new messages are dropped. The range is from 20 to 300. The default is 20. Defaults Disabled. If enabled without the level or number-of-buffers options specified, level = 2 and number-of-buffers = 20 are the defaults. Command Modes LINE Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1243
Related Commands logging — enables the logging to another device. logging on — enables logging. show logging Display the logging settings and system messages logged to the internal buffer of the switch. Syntax Parameters Command Modes Command History Example (Partial) show logging [number | history [reverse][number] | reverse [number] | summary] number (OPTIONAL) Enter the number of messages displayed in the output. The range is from 1 to 65535.
PAGE 1244
May 22 08:53:09: %STKUNIT0-M:CP %SEC-3AUTHENTICATION_ENABLE_SUCCESS: Enable password authentication suc cess on vty0 ( 10.11.68.22 ) May 22 08:53:04: %STKUNIT0-M:CP %SEC-5-LOGIN_SUCCESS: Login successful for user admin on vty0 (10.11.68.22) May 19 16:58:32: %STKUNIT0-M:CP %SEC-5-LOGOUT: Exec session is terminated for user admin on line vty2 (10.11.68.22) May 19 14:22:48: %STKUNIT0-M:CP %SYS-5-CONFIG_I: Configured from vty2 ( 10.11.68.
PAGE 1245
terminal monitor Configure the system to display messages on the monitor/terminal. Syntax terminal monitor To return to default settings, use the terminal no monitor command. defaults Disabled. Command Modes • EXEC • EXEC Privilege Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. logging monitor — sets the logging parameters on the monitor/terminal.
PAGE 1246
PAGE 1247
51 Stacking For more information about using the MXL 10/40GbE Switch stacking feature, refer to the Stacking MXL 10/40GbE Switches chapter in the Dell Networking OS Configuration Guide. redundancy disable-auto-reboot Prevent the MXL 10/40GbE switch stack management unit from rebooting if it fail. Syntax redundancy disable-auto-reboot stack-unit [0–5 | members] To return to the default, use the no redundancy disable-auto-reboot stack-unit [0–5 | members] command.
PAGE 1248
redundancy force-failover stack-unit Force the standby unit in the stack to become the management unit. Syntax redundancy force-failover stack-unit Defaults Not enabled. Command Modes EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. reset stack-unit Reset any designated stack member except the management unit (master unit). Syntax Parameters reset stack-unit 0–5 hard 0–5 Enter the stack member unit identifier of the stack member to reset.
PAGE 1249
--0 1 2 3 4 5 Management Standby Member Member Member Member online online online online online online MXL-10/40GbE MXL-10/40GbE MXL-10/40GbE MXL-10/40GbE MXL-10/40GbE MXL-10/40GbE MXL-10/40GbE MXL-10/40GbE MXL-10/40GbE MXL-10/40GbE MXL-10/40GbE MXL-10/40GbE 9-1-0-853 9-1-0-853 9-1-0-853 9-1-0-853 9-1-0-853 9-1-0-853 56 56 56 56 56 56 Dell#reset stack-unit ? <0-5> Unit number id Dell#reset stack-unit 0 % Error: Reset of master unit is not allowed.
PAGE 1250
-----------------------------------------------Primary Stack-unit: mgmt-id 0 Auto Data Sync: Full Failover Type: Hot Failover Auto reboot Stack-unit: Enabled Auto failover limit: 3 times in 60 minutes -- Stack-unit Failover Record ------------------------------------------------Failover Count: 0 Last failover timestamp: None Last failover Reason: None Last failover type: None -- Last Data Block Sync Record: ------------------------------------------------Stack Unit Config: no block sync done Start-up Config
PAGE 1251
Example Field Description Topology Lists the topology of stack ports connected: Ring, Daisy chain, or Standalone. Interface The unit/port ID of the connected stack port on this unit. Link Speed Link Speed of the stack port (10 or 40) in Gb/s. Admin Status The only currently listed status is Up. Connection The stack port ID to which this unit’s stack port is connected.
PAGE 1252
1/53 2/33 2/37 2/49 2/53 Related Commands 2/49 0/37 1/33 1/53 0/45 • redundancy disable-auto-reboot — resets the designated stack member. • show hardware stack-unit — displays the data plane or management plane input and output statistics of the designated component of the designated stack member. • show system — displays the current status of all stack members or a specific member. show system stack-unit stack-group Display the stack-groups present/configured for a MXL 10/40GbE switch stack unit.
PAGE 1253
Command Modes Command History Related Commands CONFIGURATION Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. • reload — reboots the system. • show system — displays the current status of all stack members or a specific member. • show system stack-unit stack-group displays the stack-groups present/ configured for a MXL 10/40GbE switch stack unit stack-unit priority Configure the ability of an MXL 10/40GbE switch to become the management unit of a stack.
PAGE 1254
stack-unit provision Preconfigure a logical stacking ID of a switch that joins the stack. This is an optional command that is executed on the management unit. Syntax Parameters Command Modes Command History Related Commands stack-unit 0–5] provision {MXL-10/40GbE} 0–5 Enter a stack member identifier, from 0 to 5, of the switch that you want to add to the stack. MXL-10/40GbE Enter the model identifier of the switch to be added as a stack member. This identifier is also referred to as the provision type.
PAGE 1255
When executing this command on the master, the stack reloads. When the members are renumbered, only that specific unit is reset and comes up with the new unit number. Example Dell#stack-unit 0 renumber 2 Renumbering master unit will reload the stack. Proceed to renumber [confirm yes/ no]: Related Commands Stacking • reload — reboots the system. • redundancy disable-auto-reboot — resets the designated stack member.
PAGE 1256
PAGE 1257
52 Storm Control The Dell Networking Operating System (OS) storm control feature allows you to limit or suppress traffic during a traffic storm. Storm control is supported on the Dell Networking OS Z-Series S4810 S4820T platforms. Important Points to Remember • Interface commands can only be applied on physical interfaces (virtual local area networks [VLANs] and link aggregation group [LAG] interfaces are not supported).
PAGE 1258
Example Dell#show storm-control broadcast tengigabitethernet 3/24 Broadcast storm control configuration Interface Direction Packets/Second ---------------------------------------TenGig 3/24 Ingress 1000 Dell# show storm-control multicast Display the storm control multicast configuration. Syntax Parameters show storm-control multicast [interface] interface Defaults none Command Modes • EXEC • EXEC Privilege Command History Example Version 8.3.16.
PAGE 1259
Parameters interface Defaults none Command Modes • EXEC • EXEC Privilege Command History Example Version 8.3.16.1 (OPTIONAL) Enter one of the following interfaces to display the interface specific storm control configuration: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/ port information.
PAGE 1260
storm-control broadcast (Interface) Configure the percentage of broadcast traffic allowed on an interface. Syntax storm-control broadcast [packets_per_second in] To disable broadcast storm control on the interface, use the no storm-control broadcast [packets_per_second in] command. Parameters packets_per_se cond Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554368.
PAGE 1261
storm-control multicast (Interface) Configure the percentage of multicast traffic allowed on an MXL switch interface (ingress only). Syntax storm-control multicast packets_per_second in To disable multicast storm control on the interface, use the no storm-control multicast packets_per_second in command. Parameters packets_per_se cond Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554368.
PAGE 1262
storm-control unknown-unicast (Interface) Configure percentage of unknown-unicast traffic allowed on an MXL switch interface (ingress only). Syntax storm-control unknown-unicast [packets_per_second in] To disable unknown-unicast storm control on the interface, use the no stormcontrol unknown-unicast [packets_per_second in] command. Parameters packets_per_se cond Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554431.
PAGE 1263
Spanning Tree Protocol (STP) 53 The commands in this chapter configure and monitor the IEEE 802.1d spanning tree protocol (STP). bridge-priority Set the bridge priority of the switch in an IEEE 802.1D spanning tree. Syntax bridge-priority {priority-value | primary | secondary} To return to the default value, use the no bridge-priority command. Parameters priority-value Enter a number as the bridge priority value. The range is from 0 to 65535. The default is 32768.
PAGE 1264
Command Modes Command History protocol Enter the keyword for the type of STP to debug, either mstp, pvst, or rstp. all (OPTIONAL) Enter the keyword all to debug all spanning tree operations. bpdu (OPTIONAL) Enter the keyword bpdu to debug bridge protocol data units. events (OPTIONAL) Enter the keyword events to debug STP events. EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1265
disable Disable the spanning tree protocol globally on the switch. Syntax disable To enable Spanning Tree Protocol, use the no disable command. Defaults Enabled (that is, the spanning tree protocol is disabled.) Command Modes SPANNING TREE Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. portfast bpdufilter default — enters SPANNING TREE mode.
PAGE 1266
hello-time Set the time interval between generation of the spanning tree bridge protocol data units (BPDUs). Syntax hello-time seconds To return to the default value, use the no hello-time command. Parameters seconds Defaults 2 seconds Command Modes SPANNING TREE Command History Related Commands Version 8.3.16.1 Enter a number as the time interval between transmission of BPDUs. The range is from 1 to 10. The default is 2 seconds. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1267
hello-time — changes the time interval between BPDUs. portfast bpdufilter default Enable BPDU Filter globally to filter transmission of BPDU on port fast enabled interfaces. Syntax portfast bpdufilter default To disable global bpdu filter default, use the no edge-port bpdufilter default command. Defaults Disabled Command Modes SPANNING TREE Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1268
show config Display the current configuration for the mode. Only non-default values display. Syntax show config Command Modes SPANNING TREE Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(config-stp)#show config protocol spanning-tree 0 no disable Dell(config-stp)# show spanning-tree 0 Display the spanning tree group configuration and status of interfaces in the spanning tree group.
PAGE 1269
Command Modes Command History Usage Information Example EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Enable spanning tree group 0 prior to using this command. The following describes the show spanning-tree 0 command shown in the example. Field Description “Bridge Identifier...” Lists the bridge priority and the MAC address for this STP bridge. “Configured hello...” Displays the settings for hello time, max age, and forward delay. “We are...
PAGE 1270
Current root has priority 32768 address 0001.e800.0a56 Topology change flag set, detected flag set Number of topology changes 1 last change occurred 0:00:05 ago from GigabitEthernet 1/3 Timers:hold 1, topology change 35 hello 2, max age 20, forward_delay 15 Times:hello 1, topology change 1, notification 0, aging 2 Port 26 (GigabitEthernet 1/1) is Forwarding Port path cost 4, Port priority 8, Port Identifier 8.26 Designated root has priority 32768, address 0001.e800.
PAGE 1271
Example (Guard) Field Description Instance STP 0 instance. Sts Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS), blocking (BLK), or shut down (EDS Shut). Guard Type Type of STP guard configured (Root, Loop, or BPDU guard).
PAGE 1272
portfast [bpduguard [shutdown-onviol ation] | bpdufilter] Enter the keyword portfast to enable Portfast to move the interface into Forwarding mode immediately after the root fails. Enter the optional keyword bpduguard to disable the port when it receives a BPDU. Enter the optional keywords shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
PAGE 1273
System Time and Date 54 The commands in this chapter configure time values on the system, either using the Dell Networking Operating System (OS), or the hardware, or using the network time protocol (NTP). With NTP, the switch can act only as a client to an NTP clock host. For more information, refer to the “Network Time Protocol” section of the Management chapter in the Dell Networking OS Configuration Guide. calendar set Set the time and date for the switch hardware clock.
PAGE 1274
To manually update the software with the hardware clock, use the clock readcalendar command. Example Dell#calendar set 12:11:00 21 may 2012 Dell# Related Commands clock read-calendar — sets the software clock based on the hardware clock. clock set — sets the software clock. clock update-calendar — sets the hardware clock based on the software clock. show clock — displays the clock settings. clock read-calendar Set the software clock on the switch from the information set in hardware clock (calendar).
PAGE 1275
month Enter the name of one of the 12 months, in English. You can enter the number of a day and change the order of the display to time day month year. day Enter the number of the day. The range is from 1 to 31. You can enter the name of a month to change the order of the display to time month day year. year Enter a four-digit number as the year. The range is from 1993 to 2035. Defaults Not configured. Command Modes EXEC Privilege Command History Usage Information Version 8.3.16.
PAGE 1276
start-day Enter the number of the day. The range is from 1 to 31. You can enter the name of a month to change the order of the display to time day month year. start-year Enter a four-digit number as the year. The range is from 1993 to 2035. start-time Enter the time in hours:minutes. For the hour variable, use the 24-hour format; example, 17:15 is 5:15 pm. end-day Enter the number of the day. The range is from 1 to 31.
PAGE 1277
Parameters time-zone Enter the three-letter name for the time zone. This name is displayed in the show clock output. You can enter up to eight characters. start-week (OPTIONAL) Enter one of the following as the week that daylight saving begins and then enter values for start-day through end-time: week-number: Enter a number from 1 to 4 as the number of the week in the month to start daylight saving time. • first: Enter this keyword to start daylight saving time in the first week of the month.
PAGE 1278
Command History Related Commands Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. calendar set — sets the hardware clock. clock summer-time date — sets a date (and time zone) on which to convert the switch to daylight saving time on a one-time basis. show clock — displays the current clock settings. clock timezone Configure a timezone for the switch. Syntax clock timezone timezone-name offset To delete a timezone configuration, use the no clock timezone command.
PAGE 1279
clock update-calendar Set the switch hardware clock based on the software clock. Syntax clock update-calendar Defaults Not configured. Command Modes EXEC Privilege Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Use this command only if you are sure that the hardware clock is inaccurate and the software clock is correct. You cannot delete this command (there is not a no form of this command).
PAGE 1280
sync Command Modes Command History Enter the keyword sync to display information on the NTP clock synchronization. EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ntp authenticate Enable authentication of NTP traffic between the switch and the NTP time serving hosts. Syntax ntp authenticate To disable NTP authentication, use the no ntp authentication command. Defaults Not enabled. Command Modes CONFIGURATION Command History Version 8.3.16.
PAGE 1281
0 Specify that authentication key is entered in an unencrypted format (default). 7 Specify that the authentication key is entered in DES encrypted format. key Enter the authentication key in the previously specified format. Defaults NTP authentication is not configured by default. If you do not specify the option [0 | 7], 0 is selected by default. Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1282
ntp disable Prevent an interface from receiving NTP packets. Syntax ntp disable To re-enable NTP on an interface, use the no ntp disable command. Defaults Disabled (that is, if you configure an NTP host, all interfaces receive NTP packets) Command Modes INTERFACE Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ntp multicast client To receive NTP information from the network via multicast, configure the switch.
PAGE 1283
hostname Enter the hostname of the server. key keyid (OPTIONAL) Enter the keyword key and a number as the NTP peer key. The range is from 1 to 4294967295. prefer (OPTIONAL) Enter the keyword prefer to indicate that this peer has priority over other servers. version number (OPTIONAL) Enter the keyword version and a number to correspond to the NTP version used on the server. The range is from 1 to 3. Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Version 8.
PAGE 1284
• Defaults Not configured. Command Modes CONFIGURATION Command History Version 8.3.16.1 For VLAN interface, enter the keyword vlan then a number from 1 to 4094. Introduced on the MXL 10/40GbE Switch IO Module. ntp trusted-key Set a key to authenticate the system to which NTP synchronizes. Syntax ntp trusted-key number To delete the key, use the no ntp trusted-key number command. Parameters number Defaults Not configured. Command Modes CONFIGURATION Command History Version 8.3.16.
PAGE 1285
Parameters minutes Defaults Not enabled. Command Modes CONFIGURATION Command History Version 8.3.16.1 (OPTIONAL) Enter the number of minutes between updates from NTP to the hardware clock. The range is from 1 to 1440. The default is 60 minutes. Introduced on the MXL 10/40GbE Switch IO Module. show calendar Display the current date and time based on the switch hardware clock. Syntax show calendar Command Modes • EXEC • EXEC Privilege Command History Version 8.3.16.
PAGE 1286
Command History Version 8.3.16.1 Introduced the MXL 10/40GbE Switch IO Module. Example Dell#show clock 12:30:04.402 pacific Tue May 22 2012 Dell# Example (Detail) Dell#show clock detail 12:30:26.892 pacific Tue May 22 2012 Time source is RTC hardware Summer time starts 00:00:00 UTC Wed Mar 14 2012 Summer time ends 00:00:00 pacific Wed Nov 7 2012 Dell# Related Commands clock summer-time recurring — displays the time and date from the switch hardware clock.
PAGE 1287
Field Description st Displays the peer’s stratum, that is, the number of hops away from the external time source. A 16 in this column means the NTP peer cannot reach the time source. when Displays the last time the switch received an NTP packet. poll Displays the polling interval (in seconds). reach Displays the reachability to the peer (in octal bitstream). delay Displays the time interval or delay for a packet to complete a round-trip to the NTP time source (in milliseconds).
PAGE 1288
Field Description “Clock is...” States whether the switch clock is synchronized, which NTP stratum the system is assigned and the IP address of the NTP peer. “frequency is...” Displays the frequency (in ppm), stability (in ppm) and precision (in Hertz) of the clock in this system. “reference time is...” Displays the reference time stamp. “clock offset is...” Displays the system offset to the synchronized peer and the time delay on the path to the NTP root clock. “root dispersion is...
PAGE 1289
55 Tunneling Tunneling is supported on the MXL platform. tunnel-mode Enable a tunnel interface. Syntax tunnel mode {ipip | ipv6 | ipv6ip}[decapsulate-any] To disable an active tunnel interface, use the no tunnel mode command. Parameters ipip Enable tunnel in RFC 2003 mode and encapsulate IPv4 and/or IPv6 datagrams inside an IPv4 tunnel. ipv6 Enable tunnel in RFC 2473 mode and encapsulate IPv4 and/or IPv6 datagrams inside an IPv6 tunnel.
PAGE 1290
Configuration of IPv6 commands over decapsulate-any tunnel causes an error. tunnel source Set a source address for the tunnel. Syntax tunnel source {ip-address | ipv6–address | interface-typenumber} To delete the current tunnel source address, use the no tunnel source command. Parameters ip-address Enter the source IPv4 address in A.B.C.D format. ipv6–address Enter the source IPv6 address in X:X:X:X::X format.
PAGE 1291
tunnel keepalive Configure the tunnel keepalive target, interval and attempts. Syntax tunnel keepalive {ip-address | ipv6-address}[interval {seconds}] [attempts {count | unlimited}] Use the no tunnel keepalive command to disable tunnel keepalive probes. Parameters ip-address ipv6 address Enter the IPv4 or IPv6 address of the peer to which the keepalive probes will be sent.
PAGE 1292
delete to succeed. If the address and mask are not specified, this command deletes all allow-remote entries. Parameters ip-address Enter the source IPv4 address in A.B.C.D format. ipv6–address Enter the source IPv6 address in X:X:X:X::X format. mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D to match a range of remote addresses. The default mask is /32 for IPv4 addresses and /128 for IPv6 addresses, which match only the specified address.
PAGE 1293
Defaults 0 (Mapped) Command Modes INTERFACE TUNNEL (conf-if-tu) Command History Usage Information Version 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command configures the method used to set the high 6 bits (the differentiated services codepoint) of the IPv4 TOS or the IPv6 traffic class in the outer IP header. A value of 0 copies original packet DSCP (IPv4)/Traffic Class (IPv6) to the tunnel header DSCP (IPv4)/Traffic Class (IPv6) depending on the mode of tunnel.
PAGE 1294
tunnel flow-label Configure the method to set the IPv6 flow label value in the outer tunnel header. Syntax tunnel flow-label value To return to the default value of 0, use the no tunnel flow-label value command. Parameters value Enter a value to set the IPv6 flow label value in the tunnel header. The range is from 0 to 1048575. The default value is 0.
PAGE 1295
Usage Information A value of 0 copies the inner packet hop limit (ipv6) or time-to-live (ipv4) in the encapsulated packet to the tunnel header hop limit (ipv6) or time-to-live (ipv4) value. ip unnumbered Configure a tunnel interface to operate without a unique explicit IPv4 address and select the interface from which the tunnel will borrow its address. Syntax ip unnumbered {interface-type interface-number} Use the no ip unnumbered command to set the tunnel back to default logical address.
PAGE 1296
ipv6 unnumbered Configure a tunnel interface to operate without a unique explicit IPv6 address and select the interface from which the tunnel will borrow its address. Syntax ipv6 unnumbered {interface-type interface-number} Use the no ipv6 unnumbered command to set the tunnel back to default logical address. If the tunnel was previously operational, this will make the tunnel interface operationally down, unless the tunnel also has an IPv4 address configured.
PAGE 1297
56 u-Boot All commands in this chapter are in u-Boot mode. These commands are supported on the Dell Networking Operating System (OS) MXL 10/40GbE Switch Module platform. To access this mode, press any key when the following line appears on the console during a system boot. Hit any key to stop autoboot: Enter u-Boot immediately, as the BOOT_USER# prompt. NOTE: This chapter describes only a few commands available in u-Boot mode. NOTE: You cannot use the Tab key to complete commands in this mode.
PAGE 1298
boot show net config retries Show the number of retries for network boot configuration failure. Syntax boot show net config retries Command Modes uBoot Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER# boot show net config retries Number of Network Boot Config Retries is : 0 BOOT_USER # boot write net config retries Set the number of retries for network boot configuration failure.
PAGE 1299
default gateway Set the default gateway IP address. Syntax default-gateway Command Modes uBoot Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. enable Change the access privilege level. Syntax enable [user | admin] Command Modes uBoot Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. help Display the help menu. Syntax help Command Modes uBoot Command History Example u-Boot Version 8.3.16.
PAGE 1300
default-gateway - set the default gateway ip address enable [user|admin] change access privilege level help display help menu -(36%)-Use to continue, q to stop: BOOT_USER # ignore enable password Ignore the enabled password. Syntax ignore enable-password Command Modes uBoot Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ignore startup config Ignore the system startup configuration.
PAGE 1301
no default-gateway Clear the default gateway IP address. Syntax no default-gateway Command Modes uBoot Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. no interface management ethernet ip address Clear the management port IP address and mask. Syntax no interface management ethernet ip address Command Modes uBoot Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. reload Reload the MXL switch.
PAGE 1302
Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # show boot blc ? Total 1 possible command found. Possible command list: show boot blc show the boot loop counter value BOOT_USER # show boot blc Boot Loop Counter : 10 BOOT_USER # show boot selection Display the ROM bootstrap bootflash partition. Syntax show boot selection Command Modes uBoot Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1303
Bootflash Partition A: Dell Force10 Networks System Boot Official IOM_LP_IMG_BOOT_LOADER, BSP Release 4.0.1.0bt1 Created Tue May 1 10:56:16 2012 by build on login-sjc-01 Bootflash Partition B: Dell Force10 Networks System Boot Official IOM_LP_IMG_BOOT_LOADER, BSP Release 4.0.1.0bt1 Created Tue May 1 10:56:16 2012 by build on login-sjc-01 Boot Selector Partition: Dell Force10 Networks System Boot Official IOM_XLOAD_LP_IMG_BOOT_SELECTOR, BSP Release 4.0.0.
PAGE 1304
show default-gateway Display the default gateway IP address. Syntax show default-gateway Command Modes uBoot Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # show default-gateway Gateway IP address: 15.0.0.1 BOOT_USER # show interface management Ethernet Show the management port IP address and mask. Syntax show interface management ethernet Command Modes uBoot Command History Example Version 8.3.16.
PAGE 1305
Management ethernet Port Configuration: 100M Management ethernet Port Configuration: full duplex BOOT_USER # syntax help Show the syntax information. Syntax help Command Modes uBoot Command History Example u-Boot Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # help ***** Dell Force10 Boot Interface Help Information ***** Current access level: USER LEVEL Use "syntax help" for more information on syntax.
PAGE 1306
PAGE 1307
Uplink Failure Detection (UFD) 57 Uplink failure detection (UFD) provides detection of the loss of upstream connectivity and, if you use this with network interface controller (NIC) teaming, automatic recovery from a failed link. clear ufd-disable Re-enable one or more downstream interfaces on the switch/router that are in a UFD-Disabled Error state so that an interface can send and receive traffic.
PAGE 1308
• upstream — assigns a port or port-channel to the uplink-state group as an upstream interface. • uplink-state-group — creates an uplink-state group and enables the tracking of upstream links. debug uplink-state-group Enable debug messages for events related to a specified uplink-state group or all groups. Syntax debug uplink-state-group [group-id] To turn off debugging event messages, enter the no debug uplink-stategroup [group-id] command.
PAGE 1309
uplink-state-group 3 description Testing UFD feature Related Commands uplink-state-group — creates an uplink-state group and enables the tracking of upstream links. downstream Assign a port or port-channel to the uplink-state group as a downstream interface. Syntax downstream interface To delete an uplink-state group, enter the no downstream interface command.
PAGE 1310
Related Commands • downstream — assigns a port or port-channel to the uplink-state group as a downstream interface. • upstream — assigns a port or port-channel to the uplink-state group as an upstream interface. • uplink-state-group — creates an uplink-state group and enables the tracking of upstream links. downstream auto-recover Enable auto-recovery so that UFD-disabled downstream ports in an uplink-state group automatically come up when a disabled upstream port in the group comes back up.
PAGE 1311
all Brings down all downstream links in the group. Defaults All Command Modes UPLINK-STATE-GROUP Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. A user-configurable number of downstream interfaces in an uplink-state group are put into a link-down state with an UFD-Disabled error message when one upstream interface in an uplink-state group goes down.
PAGE 1312
show running-config uplink-state-group Display the current configuration of one or more uplink-state groups. Syntax Parameters show running-config uplink-state-group [group-id] group-id Defaults none Command Modes • EXEC • EXEC Privilege Command History Example Related Commands Version 8.3.16.1 Displays the current configuration of all uplink-state groups or a specified group. The valid group-id values are from 1 to 16. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1313
Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1314
To delete an uplink-state group, enter the no uplink-state-group group-id command. To disable upstream-link tracking without deleting the uplink-state group, use the no enable command in Uplink-State-Group Configuration mode. Parameters group-id Defaults none Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Enter the ID number of an uplink-state group. The range is from 1 to 16. Introduced on the MXL 10/40GbE Switch IO Module..
PAGE 1315
• 10 Gigabit Ethernet: tengigabitethernet {slot/ port | slot/port-range} • 40 Gigabit Ethernet: fortygigabitethernet {slot/ port | slot/port-range} • Port channel: port-channel {1-512 | portchannel-range} Where port-range and port-channel-range specify a range of ports separated by a dash (-) and/or individual ports/port channels in any order; for example: gigabitethernet 1/1-2,5,9,11-12 port-channel 1-3,5. A comma is required to separate each port and portrange entry.
PAGE 1316
PAGE 1317
58 VLAN Stacking With the virtual local area network (VLAN)-stacking feature (also called stackable VLANs and QinQ), you can “stack” VLANs into one tunnel and switch them through the network transparently. For more information about basic VLAN commands, refer to the Virtual LAN (VLAN) Commands section in the Layer 2 chapter.
PAGE 1318
dei honor Honor the incoming DEI value by mapping it to a system drop precedence. Enter the command once for 0 and once for 1. Syntax Parameters dei honor {0 | 1} {green | red | yellow} 0|1 Enter the bit value you want to map to a color. green | red | yellow Choose a color: • Green: High priority packets that are the least preferred to be dropped. • Yellow: Lower priority packets that are treated as besteffort.
PAGE 1319
Command Modes Command History INTERFACE Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information You must first enable DEI for this configuration to take effect. Related Commands dei enable — enables DEI. member Assign a stackable VLAN access or trunk port to a VLAN. The VLAN must contain the vlan-stack compatible command in its configuration. Syntax member interface To remove an interface from a Stackable VLAN, use the no member interface command.
PAGE 1320
show interface dei-honor Display the dei honor configuration. Syntax Parameters Command Modes Command History Example show interface dei-honor [interface slot/port] interface slot/ port Enter the interface type then the line card slot and port number. EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1321
Related Commands dei mark — sets the DEI value on egress. vlan-stack access Specify a Layer 2 port or port channel as an access port to the stackable VLAN network. Syntax vlan-stack access To remove access port designation, use the no vlan-stack access command. Defaults Not configured. Command Modes INTERFACE Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1322
Example Dell#show vlan Codes: * - Default VLAN, G - GVRP VLANs * NUM 1 2 Status Inactive Active 3 Active 4 Active 5 Active Dell# Q Ports M M M M M M M M M M M Gi 13/13 Gi 13/0-2 Po1(Gi 13/14-15) Gi 13/18 Gi 13/3 Po1(Gi 13/14-15) Gi 13/18 Gi 13/4 Po1(Gi 13/14-15) Gi 13/18 Gi 13/5 vlan-stack dot1p-mapping Map C-Tag dot1p values to a S-Tag dot1p value. You can separate the C-Tag values by commas and dashed ranges are permitted.
PAGE 1323
Parameters number Enter the hexadecimal number as the stackable VLAN tag. You may specify both bytes of the 2-byte S-Tag TPID. The range is from 0 to FFFF. The default is 9100. Defaults 0x9100 Command Modes CONFIGURATION Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information For specific interoperability limitations regarding the S-Tag TPID, refer to the Dell Networking OS Configuration Guide.
PAGE 1324
tagged VLANs. When the VLAN-Stack trunk port is also a member of an untagged VLAN, the port must be in Hybrid mode. Refer to portmode hybrid. In the first example, a VLAN-Stack trunk port is configured and then also made part of a single-tagged VLAN. In the second example, the tag protocol identifier (TPID) is set to 8848.
PAGE 1325
Dell(config)#interface tenGigabitethernet 8/0 Dell(conf-if-te-10/0)#no shutdown Dell(conf-if-te-10/0)#portmode hybrid Dell(conf-if-te-10/0)#switchport Dell(conf-if-te-10/0)#vlan-stack trunk Dell(conf-if-te-10/0)#exit Dell(config)#interface vlan 10 Dell(conf-if-vlan)#vlan-stack compatible Dell(conf-if-vlan)#member Gi 7/0, Gi 3/10, TenGi 8/0 Dell(conf-if-vlan)#exit Dell(config)#interface vlan 30 Dell(conf-if-vlan)#untagged TenGi 8/0 Dell(conf-if-vlan)#exit Dell(config)# Dell(config)#interface vlan 40 Dell(con
PAGE 1326
PAGE 1327
Virtual Link Trunking (VLT) 59 VLT allows physical links between two chassis to appear as a single virtual link to the network core. VLT eliminates the requirement for Spanning Tree protocols by allowing link aggregation group (LAG) terminations on two separate distribution or core switches, and by supporting a loop-free topology.
PAGE 1328
clear ip mroute Clear learned multicast routes on the multicast forwarding table. To clear the protocol-independent multicast (PIM) tree information base, use the clear ip pim tib command. Syntax Parameters Command Modes Command History clear ip mroute {group-address [source-address] | * | snooping} group-address [sourceaddress] Enter the multicast group address and source address (if desired), in dotted decimal format, to clear information on a specific group. * Enter * to clear all multicast routes.
PAGE 1329
lacp ungroup member-independent vlt Prevent possible loop during the bootup of a VLT peer switch or a device that accesses the VLT domain. Syntax lacp ungroup member-independent vlt Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1330
Defaults Not configured. Command Modes VLT DOMAIN Command History Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. peer-routing Enable L3 VLT peer-routing. This command is applicable for both IPV6/ IPV4. Syntax peer-routing To disable L3 VLT peer-routing, use the no peer-routing command. Defaults Disabled. Command Modes VLT DOMAIN (conf-vlt-domain) Command History Version 9.4(0.0) Added the IPV6/IPV4 support on the MXL. Version 9.2(0.
PAGE 1331
primary-priority Reconfigure the primary role of VLT peer switches. Syntax Parameters primary-priority value value Default 32768 Command Modes VLT DOMAIN Command History Usage Information Version 9.2(0.0) To configure the primary role on a VLT peer, enter a lower value than the priority value of the remote peer. The range is from 1 to 65535. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1332
Enter a multicast group address and, optionally, a source multicast address in dotted decimal format (A.B.C.D) to limit the information displayed to the multicast routes PIM-SM snooping discovers for a specified multicast group and source. Command Modes Command History Usage Information summary (OPTIONAL) Enter the keyword summary to view routes in a tabular format. vlt (OPTIONAL) Enter the keyword vlt to view multicast routes with a spanned incoming interface.
PAGE 1333
(*, 225.1.2.1), uptime 00:04:16 Incoming vlan: Vlan 2 Outgoing interface list: GigabitEthernet 4/11 GigabitEthernet 4/13 (165.87.1.7, 225.1.2.1), uptime 00:03:17 Incoming vlan: Vlan 2 Outgoing interface list: GigabitEthernet 4/11 GigabitEthernet 4/13 GigabitEthernet 4/20 GigabitEthernet 4/13 GigabitEthernet 4/20 Example (detail) Dell#show ip mroute IP Multicast Routing Table (*, 224.10.10.1), uptime 00:05:12 Incoming interface: GigabitEthernet 3/12 Outgoing interface list: GigabitEthernet 3/13 (1.13.1.
PAGE 1334
UDP Port: 34998 HeartBeat Messages Sent: 634 HeartBeat Messages Received: 473 show vlt brief Displays summarized status information about VLT domains currently configured on the switch. Syntax show vlt brief Default Not configured. Command Modes EXEC Command History Example (Brief) Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1335
Example Dell# show vlt detail Local LAG Id Peer LAG Id Local Status Peer Status Active VLANs ------------ ----------- ------------ ----------- ------------128 128 UP UP 1000 Dell# show vlt inconsistency Display deviations in VLT multicast traffic. Syntax show vlt inconsistency ip mroute Command Modes EXEC Command History Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1336
3000 Dell# L3 -- show vlt role Displays the VLT peer status, role of the local VLT switch, VLT system MAC address and system priority, and the MAC address and priority of the local VLT device. Syntax show vlt role Default Not configured. Command Modes EXEC Command History Example Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1337
VLT MAC Statistics -------------------L2 Info Pkts sent:65, L2 Info Pkts Rcvd:82, L2 Reg Request sent:17 L2 Reg Request rcvd:15 L2 Mac-sync Pkts Sent:88 L2 Mac-sync Pkts Rcvd:61 L2 Reg Response sent:12 L2 Reg Response rcvd:11 VLT Igmp-Snooping Not Enabled VLT ARP Statistics -------------------ARP Tunnel Pkts sent:0 ARP Tunnel Pkts Rcvd:0 ARP Tunnel Pkts sent Non Vlt:0 ARP Tunnel Pkts Rcvd Non Vlt:0 ARP-sync Pkts Sent:0 ARP-sync Pkts Rcvd:0 ARP Reg Request sent:18 ARP Reg Request rcvd:16 VLT NDP Statistics
PAGE 1338
Command Modes Command History Usage Information VLT DOMAIN Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you create a VLT domain on a switch, the system automatically creates a VLT-system MAC address used for internal system operations. To explicitly define the MAC address for the domain, use the system-mac command. You must also reconfigure the same MAC address on the VLT peer switch.
PAGE 1339
vlt domain Enable VLT on a switch, configure a VLT domain, and enter VLT-domain configuration mode. Syntax Parameters Command Modes Command History vlt domain domain-id domain-id Enter the Domain ID number. Configure the same domain ID on the peer switch. VLT uses the domain ID to automatically create a VLT MAC address for the domain. The range of domain IDs is from 1 to 1000. CONFIGURATION Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1340
Usage Information If you add an ICL or VLTi link as a member of a primary VLAN, the ICL becomes a part of the primary VLAN and its associated secondary VLANs, similar to the behavior for normal trunk ports. VLAN symmetricity is not validated if you associate an ICL to a PVLAN. Similarly, if you dissociate an ICL from a PVLAN, although the PVLAN symmetrictiy exists, ICL is removed from that PVLAN in such a case. The ICL Status field denotes the type of the VLAN port of the VLTi link configured in a PVLAN.
PAGE 1341
Virtual Router Redundancy Protocol (VRRP) 60 Virtual router redundancy protocol (VRRP) is supported by the Dell Networking Operating System (OS) for IPv4 and IPv6. The following commands apply to both VRRP IPv4 and IPv6: • advertise-interval • description • disable • hold-time • preempt • priority • show config • track • virtual-address VRRP Ipv6 are in the VRRP for IPv6 Commands section. advertise-interval Set the time interval between VRRP advertisements.
PAGE 1342
authentication-type Enable authentication of VRRP data exchanges. Syntax authentication-type simple [encryption-type] password To delete an authentication type and password, use the no authenticationtype command. Parameters simple Enter the keyword simple to specify simple authentication. encryptiontype (OPTIONAL) Enter one of the following numbers: password Defaults Not configured. Command Modes VRRP Command History Usage Information Version 8.3.16.
PAGE 1343
debug vrrp Allows you to enable debugging of VRRP. Syntax debug vrrp interface [vrrp-id] {all | packets | state | timer} To disable debugging, use the no debug vrrp interface [vrrp-id] {all | packets | state | timer} command. Parameters Command Modes Command History Usage Information interface Enter the following keywords and slot/port or number information • For Port Channel interface types, enter the keywords port-channel then the number. The range is from 1 to 128.
PAGE 1344
Parameters text Defaults Not enabled. Command Modes VRRP Command History Version 8.3.16.1 Enter a text string up to 80 characters long. Introduced on the MXL 10/40GbE Switch IO Module. disable Disable a VRRP group. Syntax disable To re-enable a disabled VRRP group, use the no disable command. Defaults Enabled. Command Modes VRRP Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1345
Command Modes Command History VRRP Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information If a switch is a MASTER and you change the hold timer, disable and re-enable VRRP for the new hold timer value to take effect. Related Commands disable — disables a VRRP group. preempt To preempt or become the MASTER router, permit a BACKUP router with a higher priority value. Syntax preempt To prohibit preemption, use the no preempt command.
PAGE 1346
Command History Usage Information Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To guarantee that a VRRP group becomes MASTER, configure the VRRP group’s virtual address with same IP address as the interface’s primary IP address and change the priority of the VRRP group to 255. If you set the priority command to 255 and the virtual-address is not equal to the interface’s primary IP address, an error message appears.
PAGE 1347
brief Command Modes Command History Usage Information • EXEC • EXEC Privilege Version 8.3.16.1 For Port Channel interface types, enter the keywords port-channel then the number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN interface, enter the keyword vlan then the VLAN ID. The VLAN ID range is from 1 to 4094.
PAGE 1348
TenGig 10/37 1 100 Y Master TenGig10/37 2 100 Y Master 200.200.200.203 Description TenGig10/37 3 100 Y Master TenGig10/37 4 100 Y Master 200.200.200.207 ... short desc 200.200.200.200 200.200.200.201 200.200.200.200 200.200.200.202 1.1.1.1 1.1.1.2 200.200.200.200 200.200.200.206 Dell> Usage Information The following describes the show vrrp command shown in the following example. Item Description GigabitEthernet 12/3... Displays the Interface, the VRRP group ID, and the network address.
PAGE 1349
Example Item Description Tracking states.. This line is displayed if the track command is configured on an interface. Below this line, the following information on the tracked interface is displayed: • Dn or Up states whether the interface is down or up. • the interface type slot/port information. Dell>show vrrp -----------------GigabitEthernet 12/3, VRID: 1, Net: 10.1.1.253 State: Master, Priority: 105, Master: 10.1.1.
PAGE 1350
cost Defaults cost = 10 Command Modes VRRP Command History Usage Information Version 8.3.16.1 • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN interface, enter the keyword vlan then the VLAN ID. The VLAN ID range is from 1 to 4094. (OPTIONAL) Enter a number as the amount to be subtracted from the priority value. The range is 1 to 254. The default is 10. Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1351
Usage Information The VRRP group only becomes active and sends VRRP packets when a virtual IP address is configured. When you delete the virtual address, the VRRP group stops sending VRRP packets. A system message appears after you enter or delete the virtual-address command. To guarantee that a VRRP group becomes MASTER, configure the VRRP group’s virtual address with the same IP address as the interface’s primary IP address and change the priority of the VRRP group to 255.
PAGE 1352
vrrp delay reload Set the delay time for VRRP initialization after a system reboot. Syntax Parameters vrrp delay reload seconds seconds Defaults 0 Command Modes INTERFACE Command History Usage Information Version 8.3.16.1 Enter the number of seconds for the delay. The range is from 0 to 900 (0 indicates no delay). Introduced on the MXL 10/40GbE Switch IO Module. This command applies to all the VRRP configured interfaces on a system.
PAGE 1353
Usage Information The VRRP group only becomes active and sends VRRP packets when a virtual IP address is configured. When you delete the virtual address, the VRRP group stops sending VRRP packets. Related Command virtual-address — assigns up to 12 virtual IP addresses per VRRP group. VRRP for IPv6 Commands The following commands apply to IPv6. clear counters vrrp ipv6 Clear the counters recorded for IPv6 VRRP groups.
PAGE 1354
• Command Modes Command History Usage Information For a VLAN interface, enter the keyword vlan then the VLAN ID. The VLAN ID range is from 1 to 4094. vrid (OPTIONAL) Enter a number from 1 to 255 as the VRRP group ID. all Enter the keyword all to enable debugging of all VRRP groups. packets Enter the keyword packets to enable debugging of VRRP control packets.
PAGE 1355
Command Modes Command History Usage Information • EXEC • EXEC Privilege Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show vrrp ipv6 command shown in the following example. Line Beginning with Description GigabitEthernet... Displays the Interface, the VRRP group ID, and the network address. If the interface is no sending VRRP packets, 0.0.0.0 appears as the network address.
PAGE 1356
Line Beginning with Example Description • UP or DOWN state of the tracked interface or object (Up or Dn). • Interface type and slot/port or object number, description, and time since the last change in the state of the tracked object. • Cost to be subtracted from the VRRP group priority if the state of the tracked interface/object goes DOWN.
PAGE 1357
vrf vrf-id number. For example, if VRF microcode is loaded and VRRP group 10 is configured in VRF 2, the VRID used for the VRRP group is (16 x 10) + 2, or 162. This VRID value is used in the lowest byte of the virtual MAC address of the VRRP group and is also used for VRF routing. NOTE: Configure the same VRID on neighboring routers (Dell Networking OS or non-Dell Networking OS) in the same VRRP group in order for all routers to interoperate.
PAGE 1358
PAGE 1359
61 ICMP Message Types This chapter lists and describes the possible ICMP message type resulting from a ping. The first three columns list the possible symbol or type/code. For example, you would receive a ! or 03 as an echo reply from your ping. Table 1. ICMP Messages and Their Definitions Symbol Type Code . Query Error Timeout (no reply) ! 0 U 3 C Description 4 5 ICMP Message Types 3 echo reply . destination unreachable: 0 network unreachable . 1 host unreachable .
PAGE 1360
Symbol & Type Code Description 0 redirect for network . 1 redirect for host . 2 redirect for type-of-service and network . 3 redirect for type-of-service and host . 8 0 echo request . 9 0 router advertisement . 10 0 router solicitation . 11 Error time exceeded: 0 time-to-live equals 0 during transit . 1 time-to-live equals 0 during reassembly . 12 1360 Query parameter problem: 1 IP header bad (catchall error) . 2 required option missing .
PAGE 1361
62 SNMP Traps This chapter lists the traps sent by the Dell Networking Operating System (OS). Each trap is listed by the fields Message ID, Trap Type, and Trap Option. Table 2.
PAGE 1362
Message ID Trap Type Trap Option SNMP NONE SNMP NONE NONE NONE ENVMON TEMP ENVMON TEMP ENVMON TEMP ENVMON TEMP ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE %RPM0-P:CP %SNMP-4-RMON_FALLING_THRESHOLD: RMON falling threshold alarm from SNMP OID RMON_HC_RISHING_THRESHOLD %RPM0-P:CP %SNMP-4-RMON_HC_RISING_THRESHOLD: RMON high-capacity rising threshold alarm from SNMP OID RMON_HC_FALLING_THRESHOLD %RPM0-P:CP %SNMP-4-RMON_HC_FALLING_THRESHOLD: RMON high-capacit
PAGE 1363
Message ID Trap Type Trap Option ENVMON NONE ENVMON NONE PROTO NONE PROTO NONE PROTO NONE PROTO NONE PROTO NONE ETS NONE ETS NONE ETS NONE %CHMGR-5-MEM_THRESHOLD: Memory %s usage above threshold. MemUsage (%d) CHM_MEM_THRESHOLD_CLR %CHMGR-5-MEM_THRESHOLD_CLR: Memory %s usage drops below threshold.
PAGE 1364
Message ID Trap Type Trap Option ETS NONE PFC NONE PFC NONE PFC NONE PFC NONE FIPS NONE FIPS NONE %DIFFSERV-5-ETS_TRAP_TYPE_OPER_STATE_CHANGE: ETS Oper state changed to recommended for port %s %DIFFSERV-5-ETS_TRAP_TYPE_OPER_STATE_CHANGE: ETS Oper state changed to rxConfigSrc for port %s ETS_TRAP_TYPE_PEER_STATE_CHANGE %DIFFSERV-5-ETS_TRAP_TYPE_PEER_STATE_CHANGE : ETS Peer state changed to enabled for port %s %DIFFSERV-5-ETS_TRAP_TYPE_PEER_STATE_CHANGE : ETS Peer state changed to disabled fo
PAGE 1365
Message ID Trap Type Trap Option FIPS NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE ENTITY NONE %FCOE-5-MAX_ENODE_LIMIT_RCH: Number of ENodes reached maximum allowed limit in the system FIPS_MAX_SESSION_LIMIT_RCH %FCOE-5-MAX_SESSION_LIMIT_RCH: Number of sessions reached maximum allowed limit in the system FIPS_FCF_DROP %FCOE-5-FCF_DROP: New FCF(%d,%s) discovered in Vlan %d is dropped as max-FCF-limit per VLAN is reached FIPS_ENODE_DROP %FCOE-5-ENODE_DROP: New ENode(%d,%s) discovered in interfa
PAGE 1366
PAGE 1367
FC Flex IO Modules 63 This part provides a generic, broad-level description of the operations, capabilities, and configuration commands of the Fiber Channel (FC) Flex IO module. FC Flex IO Modules This part provides a generic, broad-level description of the operations, capabilities, and configuration commands of the Fiber Channel (FC) Flex IO module.
PAGE 1368
the dcb-buffer-threshold configuration is present on a stack port or any interface, the dcb-input or dcbouput policies cannot be applied on those interfaces.
PAGE 1369
Usage Information A DCB map is a template used to configure DCB parameters and apply them on converged Ethernet interfaces. DCB parameters include priority-based flow control (PFC) and enhanced traffic selection (ETS). To display the PFC and ETS settings in DCB maps, enter the show qos dcb-map command. Use the dcb-map command to create a DCB map to specify PFC and ETS settings and apply it on Ethernet ports.
PAGE 1370
Defaults None Command Modes DCB MAP Command History Usage Information Version 9.3(0.0) Introduced on the FC Flex IO module installed in the MXL 10/40GbE Switch module platform. PFC and ETS settings are not pre-configured on Ethernet ports. You must use the dcb-map command to configure different groups of 802.1p priorities with PFC and ETS settings. Using the priority-pgid command, you assign each 802.1p priority to one priority group. A priority group consists of 802.
PAGE 1371
strict-priority Configure the priority-group traffic to be handled with strict priority scheduling. Strict-priority traffic is serviced first, before bandwidth allocated to other priority groups is made available. pfc {on | off} Configure whether priority-based flow control is enabled (on) or disabled (off) for port traffic in the priority group. Defaults None Command Modes DCB MAP Command History Usage Information Version 9.3(0.0) Introduced on the MXL 10/40GbE Switch with the FC Flex IO module.
PAGE 1372
show dcb-map Display the DCB configuration parameters in DCB maps. FC Flex IO Modules with MXL Syntax Parameters Command Modes Command History Usage Information show dcb-map brief dcb-map-name brief Displays an overview of currently configured DCB maps and the operational status of the ports on which they are applied. dcb-mapname Displays the DCB configuration parameters in a specified map that is applied on Ethernet (FCoE) ports. • • EXEC EXEC Privilege Version 9.3(0.
PAGE 1373
dcbmapABC dcbmapXYZ te 0/1 te 0/2 Active Not active Dell# show dcb-map dcbmapABC Priority-Group Table: Priority-Group Priorities 0 0,1,2,5,6,7 1 3 2 4 3 5 6 7 PFC Enabled priorities: 3, 4 Related Commands 50 30 20 Bandwidth(%) dcb-map — creates a DCB map to configure DCB parameters on Ethernet ports that support converged Ethernet traffic. show qos dcb-map Display the DCB parameters configured in a specified DCB map.
PAGE 1374
Example Field Description TSA Transmission scheduling algorithm used by the priority group: Enhanced Transmission Selection (ETS). BW Percentage of bandwidth allocated to the priority group. PFC PFC setting for the priority group: On (enabled) or Off. Priorities 802.1p priorities configured in the priority group.
PAGE 1375
DCBX Commands The following DCBX commands are supported on the FC Flex IO module installed in the M I/O Aggregator and MXL 10/40GbE Switch platforms. advertise dcbx-appln-tlv On a DCBX port with a manual role, configure the application priority TLVs advertised on the interface to DCBX peers. Syntax advertise dcbx-appln-tlv {fcoe | iscsi} To remove the application priority TLVs, use the no advertise dcbx-applntlv {fcoe | iscsi} command.
PAGE 1376
Defaults All PFC and ETS TLVs are advertised. Command Modes PROTOCOL LLDP Command History Usage Information Version 9.3.0.0 Introduced on the FC Flex IO module installed in the M I/O Aggregator and MXL 10/40GbE Switch You can configure the transmission of more than one TLV type at a time; for example: advertise dcbx-tlv ets-conf ets-reco. You can enable ETS recommend TLVs (ets-reco) only if you enable ETS configuration TLVs (ets-conf).
PAGE 1377
Command History Usage Information Version 9.3.0.0 Introduced on the FC Flex IO module installed in the M I/O Aggregator and MXL 10/40GbE Switch DCBX requires that you enable LLDP to advertise DCBX TLVs to peers. Configure DCBX operation at the INTERFACE level on a switch or globally on the switch. To verify the DCBX configuration on a port, use the show interface dcbx detail command. dcbx version Configure the DCBX version used on the interface. Syntax dcbx version {auto | cee | cin | ieee-v2.
PAGE 1378
To disable DCBX debugging, use the no debug dcbx command. Parameters {all | autodetect-timer | config-exchng | fail | mgmt | resource | sem | tlv} Defaults none Command Modes EXEC Privilege Command History Version 9.3.0.0 Enter the type of debugging, where: • all: enables all DCBX debugging operations. • auto-detect-timer: enables traces for DCBX autodetect timers. • config-exchng: enables traces for DCBX configuration exchanges. • fail: enables traces for DCBX failures.
PAGE 1379
iscsi priority-bits Configure the iSCSI priority advertised for the iSCSI protocol in application priority TLVs. Syntax iscsi priority-bits priority-bitmap To remove the configured iSCSI priority, use the no iscsi priority-bits command. Parameters priority-bitmap Defaults 0x10 Command Modes PROTOCOL LLDP Command History Usage Information Version 9.3.0.0 Enter the priority-bitmap range. The range is from 1 to FF.
PAGE 1380
Field Description DCBX Operational Status Operational status (enabled or disabled) used to elect a configuration source and internally propagate a DCB configuration. The DCBX operational status is the combination of PFC and ETS operational status. Configuration Source Specifies whether the port serves as the DCBX configuration source on the switch: true (yes) or false (no). Local DCBX Compatibility mode DCBX version accepted in a DCB configuration as compatible.
PAGE 1381
Example Field Description Peer DCBX Status: Sequence Number Sequence number transmitted in Control TLVs received from the peer device. Peer DCBX Status: Acknowledgment Number Acknowledgement number transmitted in Control TLVs received from the peer device. Total DCBX Frames transmitted Number of DCBX frames sent from the local port. Total DCBX Frames received Number of DCBX frames received from the remote peer port. Total DCBX Frame errors Number of DCBX frames with errors received.
PAGE 1382
DCBX Max Version Supported is 255 Sequence Number: 2 Acknowledgment Number: 2 Total DCBX Frames transmitted 27 Total DCBX Frames received 6 Total DCBX Frame errors 0 Total DCBX Frames unrecognized 0 ETS Commands The following ETS commands are supported on the FC Flex IO module installed in the MXL 10/40GbE Switch platform. bandwidth-percentage Configure the bandwidth percentage allocated to priority traffic in port queues.
PAGE 1383
sum of configured bandwidth allocation to dot1p priority traffic in all ETS priority groups must be 100%. Allocate at least 1% of the total bandwidth to each priority group and queue. If bandwidth is assigned to some priority groups but not to others, the remaining bandwidth (100% minus assigned bandwidth amount) is equally distributed to nonstrict-priority groups which have no configured scheduler. Related Commands • qos-policy-output ets — creates a QoS output policy.
PAGE 1384
Usage Information A DCB map is a template used to configure DCB parameters and apply them on converged Ethernet interfaces. DCB parameters include priority-based flow control (PFC) and enhanced traffic selection (ETS). To display the PFC and ETS settings in DCB maps, enter the show qos dcb-map command. Use the dcb-map command to create a DCB map to specify PFC and ETS settings and apply it on Ethernet ports.
PAGE 1385
Command History Usage Information Version 9.3(0.0) Introduced on the MXL 10/40GbE Switch with the FC Flex IO module. Use the dcb-map command to configure priority groups with PFC and/or ETS settings and apply them to Ethernet interfaces. Use the priority-pgid command to map 802.1p priorities to a priority group. You can assign each 802.1p priority to only one priority group. A priority group consists of 802.
PAGE 1386
• werr: weighted elastic round robin (werr) provides lowlatency scheduling for priority traffic on port queues. Defaults Weighted elastic round robin (WERR) scheduling is used to queue priority traffic. Command Modes POLICY-MAP-OUT-ETS Command History Usage Information Version 9.3(0.0) Introduced on the FC Flex IO module installed in the M I/O Aggregator and MXL 10/40GbE Switch. dot1p priority traffic on the switch is scheduled to the current queue mapping.
PAGE 1387
show interface ets Displays the ETS configuration applied to egress traffic on an interface, including priority groups with priorities and bandwidth allocation. Syntax Parameters Command Modes Command History Usage Information show interface port-type slot/port ets {summary | detail} port-type slot/ port ets Enter the port-type slot and port ETS information. {summary | detail} Enter the keyword summary for a summary list of results or enter the keyword detail for a full list of results.
PAGE 1388
Example (Summary) 1388 Field Description Local Parameters ETS configuration on local port, including admin mode (enabled when a valid TLV is received from a peer), priority groups, assigned dot1p priorities, and bandwidth allocation. Operational status (local port) Port state for current operational ETS configuration: • Init: Local ETS configuration parameters were exchanged with the peer. • Recommend: Remote ETS configuration parameters were received from the peer.
PAGE 1389
1 0% ETS 2 0% ETS 3 0% ETS 4 0% ETS 5 0% ETS 6 0% ETS 7 0% ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Remote Parameters: ------------------Remote is disabled Local Parameters: -----------------Local is enabled TC-grp Priority# Bandwidth TSA 0 0,1,2,3,4,5,6,7 100% ETS 1 0% ETS 2 0% ETS 3 0% ETS 4 0% ETS 5 0% ETS 6 0% ETS 7 0% ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Oper status
PAGE 1390
0 1 2 3 4 5 6 7 Remote Parameters: ------------------Remote is disabled Local Parameters : -----------------Local is enabled TC-grp Priority# 0 0,1,2,3,4,5,6,7 1 2 3 4 5 6 7 13% 13% 13% 13% 12% 12% 12% 12% ETS ETS ETS ETS ETS ETS ETS ETS Bandwidth 100% 0% 0% 0% 0% 0% 0% 0% TSA ETS ETS ETS ETS ETS ETS ETS ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Oper status is init Conf TLV Tx Status is disabled Traffic Class TLV Tx Status is disabled 0
PAGE 1391
Example Dell# show qos dcb-output dcb-output ets priority-group san qos-policy san priority-group ipc qos-policy ipc priority-group lan qos-policy lan show qos priority-groups Displays the ETS priority groups configured on the switch, including the 802.1p priority classes and ID of each group. Syntax show qos priority-groups Command Modes EXEC Privilege Command History Example Version 9.3.0.0 Introduced on the FC Flex IO module installed in the M I/O Aggregator and MXL 10/40GbE Switch.
PAGE 1392
-----------------------------------------------0 0,1,2,3,4,5,6,7 100% ETS 1 - 2 - 3 - 4 - 5 - 6 - 7 - 8 - Stack unit 1 stack port all Max Supported TC Groups is 4 Number of Traffic Classes is 1 Admin mode is on Admin Parameters: -------------------Admin is enabled TC-grp Priority# Bandwidth TSA -----------------------------------------------0 0,1,2,3,4,5,6,7 100% ETS 1 2 3 4 5 6 7 8 - PFC Commands The following PFC commands are supported on the FC Flex IO module installed in the MXL 10/40GbE Switch platfor
PAGE 1393
Command Modes Command History Usage Information EXEC Privilege Version 9.3(0.0) Introduced on the FC Flex IO module installed in the MXL 10/40GbE Switch. If you do not use the statistics parameter, both hardware and DCBx counters clear. description Enter a text description of the DCB policy (PFC input or ETS output). Syntax description text To remove the text description, use the no description command. Parameters text Enter the description of the output policy. The maximum is 32 characters.
PAGE 1394
Usage Information The minimum link delay must be greater than the round-trip transmission time a peer must honor a PFC pause frame multiplied by the number of PFC-enabled ingress ports. Related Commands dcb-input — creates a DCB input policy. pfc mode on Enable the PFC configuration on the port so that the priorities are included in DCBX negotiation with peer PFC devices. Syntax pfc mode on To disable the PFC configuration, use the no pfc mode on command. Defaults PFC mode is on.
PAGE 1395
Defaults No lossless queues are configured. Command Modes INTERFACE Command History Usage Information Version 9.3(0.0) Introduced on the MXL 10/40GbE Switch with the FC Flex IO module. The maximum number of lossless queues globally supported on the switch is two. • The following lists the dot1p priority-queue assignments.
PAGE 1396
Usage Information You can enable any number of 802.1p priorities for PFC. Queues to which PFC priority traffic is mapped are lossless by default. Traffic may be interrupted due to an interface flap (going down and coming up) when you reconfigure the lossless queues for no-drop priorities in a PFC input policy and reapply the policy to an interface. The maximum number of lossless queues supported on the switch is two. A PFC peer must support the configured priority traffic (as DCBX detects) to apply PFC.
PAGE 1397
Command Modes Command History Usage Information INTERFACE Version 9.3(0.0) Introduced on the FC Flex IO module installed in the MXL 10/40GbE Switch. To clear the PFC TLV counters, use the clear pfc counters interface port-type slot/port command. The following describes the show interface pfc summary command shown in the following example. FC Flex IO Modules Field Description Interface Interface type with stack-unit and port number.
PAGE 1398
Example (Summary) 1398 Field Description Application Priority TLV: FCOE TLV Tx Status Status of FCoE advertisements in application priority TLVs from the local DCBX port: enabled or disabled. Application Priority TLV: SCSI TLV Tx Status Status of ISCSI advertisements in application priority TLVs from the local DCBX port: enabled or disabled. Application Priority TLV: Local FCOE Priority Map Priority bitmap the local DCBX port uses in FCoE advertisements in application priority TLVs.
PAGE 1399
ISCSI TLV Tx Status is disabled Local FCOE PriorityMap is 0x8 Local ISCSI PriorityMap is 0x10 Remote FCOE PriorityMap is 0x8 Remote ISCSI PriorityMap is 0x8 Dell# show interfaces tengigabitethernet 0/49 pfc detail Interface TenGigabitEthernet 0/49 Admin mode is on Admin is enabled Remote is enabled Remote Willing Status is enabled Local is enabled Oper status is recommended PFC DCBX Oper status is Up State Machine Type is Feature TLV Tx Status is enabled PFC Link Delay 45556 pause quanta Application Priorit
PAGE 1400
6 7 0 0 0 0 0 0 show qos dcb-input Displays the PFC configuration in a DCB input policy. Syntax Parameters Command Modes Command History Example show qos dcb-input [pfc-profile] pfc-profile Enter the PFC profile. CONFIGURATION Version 9.3(0.0) Introduced on the FC Flex IO module installed in the MXL 10/40GbE Switch.
PAGE 1401
stack unit 1 stack-port all Admin mode is On Admin is enabled, Priority list is 4-5 Local is enabled, Priority list is 4-5 Link Delay 45556 pause quantum 0 Pause Tx pkts, 0 Pause Rx pkts Fibre Channel over Ethernet for FC Flex IO Modules FCoE provides a converged Ethernet network that allows the combination of storage-area network (SAN) and LAN traffic on a Layer 2 link by encapsulating Fibre Channel data into Ethernet frames.
PAGE 1402
dcb-map Create a DCB map to configure priority flow control (PFC) and enhanced transmission selection (ETS) on Ethernet ports that support converged Ethernet traffic. Apply the DCB map to an Ethernet interface. M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module Syntax Parameters dcb-map map-name map-name Enter a DCB map name. The maximum number of alphanumeric characters is 32. Defaults None.
PAGE 1403
description (for FCoE maps) In an FCoE map, add a text description of the FCoE and FC parameters used to transmit storage traffic over an M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module NPIV proxy gateway in a converged fabric. M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module Syntax Parameters description text text Defaults None Command Modes FCOE MAP Command History Version 9.3(0.0) Enter a maximum of 32 characters.
PAGE 1404
gateway so that they appear to downstream server CNA ports as FCoE forwarder (FCF) ports on an FCoE network. When applied to FC and Ethernet ports on an NPIV proxy gateway, an FCoE map allows the switch to operate as an FCoE-FC bridge between an FC SAN and an FCoE network by providing FCoE-enabled servers and switches with the necessary parameters to log in to a SAN fabric. Use the fcoe-map command to create an FCoE map.
PAGE 1405
Usage Information In the fabric-id vlan command, the fabric and VLAN ID numbers must be the same. In each FCoE map, the fabric ID, FC-MAP value, and FCoE VLAN parameters must be unique. To remove a fabric-VLAN association from an FCoE map, enter the no fabric-id vlan command. You must first create a VLAN and then specify the configured VLAN ID in the fabric-id vlan command. Otherwise, the following error message is displayed.
PAGE 1406
Related Commands fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric. show fcoe-map— displays the Fibre Channel and FCoE configuration parameters in FCoE maps. fc-map In an FCoE map, configure the FCoE mapped address prefix (FC-MAP) value which is used to identify FCoE traffic transmitted on the FCoE VLAN for the specified fabric.
PAGE 1407
fcoe priority-bits Configure the FCoE priority advertised for the FCoE protocol in application priority TLVs. Syntax fcoe priority-bits priority-bitmap To remove the configured FCoE priority, use the no fcoe priority-bits command. Parameters priority-bitmap Defaults 0x8 Command Modes PROTOCOL LLDP Command History Usage Information Version 9.3.0.0 Enter the priority-bitmap range. The range is from 1 to FF.
PAGE 1408
Command Modes Command History Usage Information CONFIGURATION INTERFACE Version 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. An FCoE map is a template used to map FCoE and FC parameters in a converged fabric. An FCoE map is used to virtualize upstream FC ports on an M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module NPIV proxy gateway so that they appear to downstream server CNA ports as FCoE forwarder (FCF) ports on an FCoE network.
PAGE 1409
Command Modes Command History FCOE MAP Version 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. Usage Information To delete the FIP keepalive time period from an FCoE map, enter the no fkaadv-erpiod command. Related Commands fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric. show fcoe-map— displays the Fibre Channel and FCoE configuration parameters in FCoE maps.
PAGE 1410
When you apply an FCoE map to a server-facing Ethernet port, the port is automatically configured as a tagged member of the FCoE VLAN. For more information about VLANs and the commands to configure them, refer to the Virtual LAN (VLAN) Commands section of the Layer 2 chapter. Example (Single Range) FTOS(conf)#interface vlan 10 FTOS(conf-if-vl-3)# Related Commands fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric.
PAGE 1411
priority-group bandwidth pfc Configure the ETS bandwidth allocation and PFC mode used to manage port traffic in an 802.1p priority group. M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module Syntax Parameters priority-group group-num {bandwidth percentage| strictpriority} pfc {on | off} priority-group group-num Enter the keyword priority-group followed by the number of an 802.1p priority group. Use the prioritypgid command to create the priority groups in a DCB map.
PAGE 1412
If a priority group does not use its allocated bandwidth, the unused bandwidth is made available to other priority groups. To remove a priority-group configuration in a DCB map, enter the no prioritygroup bandwidth pfc command. By default, equal bandwidth is assigned to each dot1p priority in a priority group. Use the bandwidth parameter to configure the bandwidth percentage assigned to a priority group.
PAGE 1413
module FC ports so that they appear to downstream server CNA ports as FCoE Forwarder (FCF) ports on an FCoE network. The following table describes the show fcoe-map brief output shown in the example below. Field Description Fabric-Name Name of a SAN fabric. Fabric ID The ID number of the SAN fabric to which FC traffic is forwarded. VLAN ID The dedicated FCoE VLAN used to transport FCoE storage traffic between servers and a fabric over the NPIV proxy gateway.
PAGE 1414
Example Field Description FC-MAP FCoE MAC address-prefix value - The unique 24-bit MAC address prefix that identifies a fabric. FKA-ADV-period Time interval (in seconds) used to transmit FIP keepalive advertisements. FCF Priority The priority used by a server to select an upstream FCoE forwarder.
PAGE 1415
show npiv devices Display the FCoE and FC devices currently logged in to an M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module NPIV proxy gateway. M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module Syntax Parameters Command Modes Command History Usage Information show npiv devices [brief] brief • EXEC • EXEC Privilege Version 9.3(0.
PAGE 1416
Field Description FDISC - ENode logged in using a fabric discovery (FDISC). Status Example Operational status of the link between a server CNA port and a SAN fabric: Logged In - Server has logged in to the fabric and is able to transmit FCoE traffic.
PAGE 1417
Example Related Commands Field Description FCoE MAC Fabric-provided MAC address (FPMA). The FPMA consists of the FC-MAP value in the FCoE map and the FC-ID provided by the fabric after a successful FLOGI. In the FPMA, the most significant bytes are the FC-MAP; the least significant bytes are the FC-ID. FC-ID FC port ID provided by the fabric. LoginMethod Method used by the server CNA to log in to the fabric; for example, FLOGI or FDISC. Secs Number of seconds that the fabric connection is up.
PAGE 1418
PAGE 1419
64 PMUX Mode of the MXL 10/40GbE Switch I/O Module This chapter describes the various CLI commands applicable in PMUX mode. Data Center Bridging (DCB) Data center bridging (DCB) refers to a set of IEEE Ethernet enhancements that provide data centers with a single, robust, converged network to support multiple traffic types, including local area network (LAN), server, and storage traffic. The Dell Networking Operating System (OS) commands for data center bridging features include 802.
PAGE 1420
Usage Information To disable TLV transmission, use the no form of the command; for example, no advertise dcbx-appln-tlv iscsi. advertise dcbx-tlv On a DCBX port with a manual role, configure the PFC and ETS TLVs advertised to DCBX peers. Syntax advertise dcbx-tlv {ets-conf | ets-reco | pfc} [ets-conf | etsreco | pfc] [ets-conf | ets-reco | pfc] To remove the advertised ETS TLVs, use the no advertise dcbx-tlv command.
PAGE 1421
Parameters percentage (Optional) Enter the bandwidth percentage. The percentage range is from 1 to 100% in units of 1%. Defaults none Command Modes QOS-POLICY-OUT-ETS Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, equal bandwidth is assigned to each port queue and each dot1p priority in a priority group.
PAGE 1422
Defaults none Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. DCB is not supported if you enable link-level flow control on one or more interfaces. dcb-input To apply pause or flow control for specified priorities using a configure delay time, create a DCB input policy.
PAGE 1423
Related Commands dcb-policy input — applies the input policy with the PFC configuration. dcb-output To associate an ETS configuration with priority traffic, create a DCB output policy. Syntax dcb-output policy-name To remove the ETS output policy globally, use the no dcb output policy-name command. Parameters policy-name Defaults none Command Modes CONFIGURATION Command History Usage Information Version 8.3.16.1 Enter the DCB output policy name. The maximum is 32 alphanumeric characters.
PAGE 1424
Defaults none Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. If you apply an input policy with PFC disabled (no pfc mode on): • You can enable link-level flow control on the interface. To delete the input policy, first disable link-level flow control.
PAGE 1425
To remove only the DCB input policies applied to the specified switch, use the no dcb-policy input stack-unit command. Parameters stack-unit-id Enter the stack unit identification. dcb-inputpolicy-name Enter the policy name for the DCB input policy. Defaults none Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.
PAGE 1426
Usage Information When you apply an ETS output policy to on interface, ETS-configured scheduling and bandwidth allocation take precedence over any configured settings in QoS output policies. To remove an ETS output policy from an interface, use the no dcb-policy output policy-name command. ETS is enabled by default with the default ETS configuration applied (all dot1p priorities in the same group with equal bandwidth allocation).
PAGE 1427
You can apply a DCB output policy with ETS configuration to all stacked ports in a switch stack or an individual stacked switch. You can apply different DCB output policies to different stack units. NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4.(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
PAGE 1428
dcb stack-unit pfc-buffering pfc-port-count pfc-queues Configure the PFC buffer for all port pipes in a specified stack unit by specifying the port-pipe number, number of PFC-enabled ports, and number of configured lossless queues.
PAGE 1429
To remove DCBX port role, use the no dcbx port-role {config-source | auto-downstream | auto-upstream | manual} command. Parameters config-source | autodownstream | auto-upstream | manual Enter the DCBX port role, where: • config-source: configures the port to serve as the configuration source on the switch. • auto-upstream: configures the port to receive a peer configuration. The configuration source is elected from auto-upstream ports.
PAGE 1430
• ieee-v2: configures the port to use IEEE 802.1az (Draft 2.5). Defaults Auto Command Modes INTERFACE PROTOCOL LLDP Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. DCBX requires that you enable LLDP to advertise DCBX TLVs to peers. Configure DCBX operation at the INTERFACE level on a switch or globally on the switch.
PAGE 1431
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. description Enter a text description of the DCB policy (PFC input or ETS output). Syntax description text To remove the text description, use the no description command. Parameters text Enter the description of the output policy. The maximum is 32 characters. Defaults none Command Modes • DCB INPUT POLICY • DCB OUTPUT POLICY Command History Related Commands Version 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 1432
Usage Information If you disable ETS in an output policy applied to an interface using the no ets mode on command, any previously configured QoS settings at the interface or global level takes effect. If you configure QoS settings at the interface or global level and in an output policy map (the service-policy output command), the QoS configuration in the output policy takes precedence.
PAGE 1433
Defaults 0x10 Command Modes PROTOCOL LLDP Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command is available at the global level only. pfc link-delay Configure the link delay used to pause specified priority traffic. Syntax pfc link-delay value To remove the link delay, use the no pfc link-delay command.
PAGE 1434
Command Modes Command History Usage Information DCB INPUT POLICY Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By applying a DCB input policy with PFC enabled, you enable PFC operation on ingress port traffic.
PAGE 1435
dot1p Value in the Incoming Frame Description heading 0 0 1 0 2 0 3 1 4 2 5 3 6 3 7 3 pfc priority Configure the CoS traffic to be stopped for the specified delay. Syntax pfc priority priority-range To delete the pfc priority configuration, use the no pfc priority command. Parameters priority-range Defaults none Command Modes DCB INPUT POLICY Command History Usage Information Enter the 802.1p values of the frames to be paused.
PAGE 1436
NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future. Related Commands dcb-input — creates a DCB input policy. priority-group To use with an ETS output policy, create an ETS priority group. Syntax priority-group group-name To remove the priority group, use the no priority-group command.
PAGE 1437
Related Commands • priority-list — configures the 802.1p priorities for an ETS output policy. • set-pgid — configures the priority-group. priority-group qos-policy Associate the 802.1p priority traffic in a priority group with the ETS configuration in a QoS output policy. Syntax priority-group group-name qos-policy ets-policy-name To remove the 802.1p priority group, use the no priority-group qos-policy command. Parameters group-name Enter the group name of the 802.1p priority group.
PAGE 1438
priority-list Configure the 802.1p priorities for the traffic on which you want to apply an ETS output policy. Syntax priority-list value To remove the priority list, use the no priority-list command. Parameters value Enter the priority list value. Separate priority values with a comma; specify a priority range with a dash; for example, priority-list 3,5-7. The range is from 0 to 7. Defaults none Command Modes PRIORITY-GROUP Command History Usage Information Version 9.2(0.
PAGE 1439
Command Modes Command History Usage Information CONFIGURATION Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1440
Usage Information dot1p priority traffic on the switch is scheduled to the current queue mapping. dot1p priorities within the same queue must have the same traffic properties and scheduling method. ETS-assigned scheduling applies only to data queues, not to control queues. The configuration of bandwidth allocation and strict-queue scheduling is not supported at the same time for a priority group.
PAGE 1441
show dcb Displays the data center bridging status, the number of PFC-enabled ports, and the number of PFCenabled queues. Syntax Parameters Command Modes Command History Usage Information show dcb [stack-unit unit-number] unit number Enter the DCB unit number. The range is from 0 to 5. EXEC Privilege Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1442
The following describes the show interface dcbx detail command shown in the following example. 1442 Field Description Interface Interface type with chassis slot and port number. Port-Role Configured the DCBX port role: auto-upstream, autodownstream, config-source, or manual. DCBX Operational Status Operational status (enabled or disabled) used to elect a configuration source and internally propagate a DCB configuration.
PAGE 1443
Example Field Description Peer DCBX Status: DCBX Operational Version DCBX version advertised in Control TLVs received from the peer device. Peer DCBX Status: DCBX Max Version Supported Highest DCBX version supported in Control TLVs received from the peer device. Peer DCBX Status: Sequence Number Sequence number transmitted in Control TLVs received from the peer device. Peer DCBX Status: Acknowledgment Number Acknowledgement number transmitted in Control TLVs received from the peer device.
PAGE 1444
DCBX Operational Version is 0 DCBX Max Version Supported is 0 Sequence Number: 2 Acknowledgment Number: 2 Protocol State: In-Sync Peer DCBX Status: ---------------DCBX Operational Version is 0 DCBX Max Version Supported is 255 Sequence Number: 2 Acknowledgment Number: 2 Total DCBX Frames transmitted 27 Total DCBX Frames received 6 Total DCBX Frame errors 0 Total DCBX Frames unrecognized 0 show interface ets Displays the ETS configuration applied to egress traffic on an interface, including priority groups
PAGE 1445
Example (Summary) Field Description Admin mode ETS mode: on or off. When on, the scheduling and bandwidth allocation configured in an ETS output policy or received in a DCBX TLV from a peer can take effect on an interface. Admin Parameters ETS configuration on local port, including priority groups, assigned dot1p priorities, and bandwidth allocation.
PAGE 1446
Max Supported TC Groups is 4 Number of Traffic Classes is 8 Admin mode is on Admin Parameters: -----------------Admin is enabled TC-grp Priority# Bandwidth TSA 0 0,1,2,3,4,5,6,7 100% ETS 1 0% ETS 2 0% ETS 3 0% ETS 4 0% ETS 5 0% ETS 6 0% ETS 7 0% ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Remote Parameters: ------------------Remote is disabled Local Parameters: -----------------Local is enabled TC-grp Priority# Bandwidth TSA 0 0,1,2,3,4,5,6,7 1
PAGE 1447
2 3 4 5 6 7 0% 0% 0% 0% 0% 0% ETS ETS ETS ETS ETS ETS Priority# 0 1 2 3 4 5 6 7 Remote Parameters: ------------------Remote is disabled Bandwidth 13% 13% 13% 13% 12% 12% 12% 12% TSA ETS ETS ETS ETS ETS ETS ETS ETS Bandwidth 100% 0% 0% 0% 0% 0% 0% 0% TSA ETS ETS ETS ETS ETS ETS ETS ETS Local Parameters : -----------------Local is enabled TC-grp Priority# 0 0,1,2,3,4,5,6,7 1 2 3 4 5 6 7 Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Oper status
PAGE 1448
{summary | detail} Command Modes Command History Usage Information Enter the keyword summary for a summary list of results or enter the keyword detail for a full list of results. INTERFACE Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To clear the PFC TLV counters, use the clear pfc counters interface port-type slot/port command.
PAGE 1449
Example (Summary) Field Description State Machine Type Type of state machine used for DCBX exchanges of the PFC parameters: Feature — for legacy DCBX versions; Symmetric — for an IEEE version. TLV Tx Status Status of the PFC TLV advertisements: enabled or disabled. PFC Link Delay Link delay (in quanta) used to pause specified priority traffic. Application Priority TLV: FCOE TLV Tx Status Status of FCoE advertisements in application priority TLVs from the local DCBX port: enabled or disabled.
PAGE 1450
Oper status is Recommended PFC DCBX Oper status is Up State Machine Type is Feature TLV Tx Status is enabled PFC Link Delay 45556 pause quantams Application Priority TLV Parameters : -------------------------------------FCOE TLV Tx Status is disabled ISCSI TLV Tx Status is disabled Local FCOE PriorityMap is 0x8 Local ISCSI PriorityMap is 0x10 Remote FCOE PriorityMap is 0x8 Remote ISCSI PriorityMap is 0x8 Dell# show interfaces tengigabitethernet 0/49 pfc detail Interface TenGigabitEthernet 0/49 Admin mode is
PAGE 1451
-------------------------------------------------------0 0 0 0 1 0 0 0 2 0 0 0 3 0 0 0 4 0 0 0 5 0 0 0 6 0 0 0 7 0 0 0 show qos dcb-input Displays the PFC configuration in a DCB input policy. Syntax Parameters Command Modes Command History Usage Information Example show qos dcb-input [pfc-profile] pfc-profile Enter the PFC profile. CONFIGURATION Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.
PAGE 1452
Version 8.3.16.1 Usage Information Example Introduced on the MXL 10/40GbE Switch IO Module. NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
PAGE 1453
Command Modes Command History Example CONFIGURATION Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1454
Parameters Command Modes Command History Example stack-unit Enter the stack unit. port-number Enter the port number. CONFIGURATION Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1455
fcf-macaddress Command Modes Command History Enter the FCF MAC address to be cleared of FIP snooping information. EXEC Privilege Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. clear fip-snooping statistics Clears the statistics on the FIP packets snooped on all VLANs, a specified VLAN, or a specified port interface.
PAGE 1456
Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. fip-snooping enable Enable FIP snooping on all VLANs or on a specified VLAN. Syntax fip-snooping enable To disable the FIP snooping feature on all or a specified VLAN, use the no fipsnooping enable command. Defaults FIP snooping is disabled on all VLANs.
PAGE 1457
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. fip-snooping port-mode fcf Configure the port for bridge-to-FCF links. Syntax fip-snooping port-mode fcf To disable the bridge-to-FCF link on a port, use the no fip-snooping portmode fcf command. Command Modes Command History Usage Information INTERFACE Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1458
Usage Information You can configure iSCSI TLVs to send either globally or on a specified interface. The interface configuration takes priority over global configuration. iscsi aging time Set the aging time for iSCSI sessions. Syntax iscsi aging time time To remove the iSCSI session aging time, use the no iscsi aging time command. Parameters time Defaults 10 minutes Command Modes CONFIGURATION Command History Enter the aging time for the iSCSI session. The range is from 5 to 43,200 minutes.
PAGE 1459
dscp dscpvalue Enter the DSCP value assigned to the incoming packets in an iSCSI session. The valid range is from 0 to 63. The default is: the DSCP value in ingress packets is not changed. remark Marks the incoming iSCSI packets with the configured dot1p or DSCP value when they egress to the switch. The default is: the dot1and DSCP values in egress packets are not changed. Defaults The default dot1p VLAN priority value is 4 without the remark option.
PAGE 1460
Defaults 4 (0x10 in the bitmap) Command Modes PROTOCOL LLDP (only on the global, not on the interface) Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. iscsi profile-compellant Configure the auto-detection of Dell Compellent arrays on a port. Syntax iscsi profile-compellent Defaults Dell Compellent disk arrays are not detected.
PAGE 1461
Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. You can configure up to 16 target TCP ports on the switch in one command or multiple commands. When you use the no iscsi target port command and the TCP port you wish to delete is one bound to a specific IP address, the IP address value must be included in the command.
PAGE 1462
Command Modes Command History EXEC Privilege Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#clear counters Clear counters on all interfaces [confirm] Related Commands mac learning-limit — allows aging of MACs even though a learning-limit is configured or disallow station move on learned MACs. show interfaces — displays information on the interfaces.
PAGE 1463
Related Commands show interfaces description — displays the description field of the interfaces. flowcontrol Control how the system responds to and generates 802.3x pause frames on 10G and 40Gig stack units. Syntax Parameters Defaults Command Modes Command History Usage Information flowcontrol rx {off | on} tx {off | on} threshold rx on Enter the keywords rx on to process the received flow control frames on this port. This is the default value for the receive side.
PAGE 1464
On 4–port 10G stack units: Changes in the flow-control values may not be reflected automatically in the show interface output for 10G interfaces. This is because 10G interfaces do not support auto-negotiation. Important Points to Remember • Do not enable tx pause when buffer carving is enabled. For information and assistance, consult Dell Networking TAC. • Asymmetric flow control (rx on tx off, or rx off tx on) setting for the interface port less than 100 Mb/s speed is not permitted.
PAGE 1465
off on on Related Commands on off on LocNegRx off off off off LocNegTx RemNegRx RemNegTx off off off off off off off off off off off off off off off off off off on off off off on off off off off off off on on on off off on on off off on on off on on on off off on on off off on on off off on on off off on on show running-config — displays the flow configuration parameters (non-default values only). show interfaces — displays the negotiated flow control parameters.
PAGE 1466
Version 8.3.16.1 Usage Information Introduced on the MXL 10/40GbE Switch IO Module. You cannot delete a physical interface. By default, physical interfaces are disabled (shutdown) and are in Layer 3 mode. To place an interface in mode, ensure that the interface’s configuration does not contain an IP address and enter the Port Channel Commands command. The tunnel interface operates as an ECMP (equal cost multi path) only when the next hop to the tunnel destination is over a physical interface.
PAGE 1467
interface range This command permits configuration of a range of interfaces to which subsequent commands are applied (bulk configuration). Using the interface range command, you can enter identical commands for a range of interface. Syntax Parameters interface range interface, interface,... interface, interface,... Enter the keywords interface range and one of the interfaces — slot/port, port-channel, or VLAN number. Select the range of interfaces for bulk configuration.
PAGE 1468
characters. If the bulk configuration exceeds 32 characters, it is represented by an ellipsis ( ... ). • When the interface range prompt has multiple port ranges, the smaller port range is excluded from the prompt. • If overlapping port ranges are specified, the port range is extended to the smallest start port and the biggest end port.
PAGE 1469
Vlan 2–100, Port 1–25 Dell(config-if-range)# no shutdown Dell(config-if-range)# Related Commands interface port-channel — configures a port channel group. interface vlan — configures a VLAN interface. show config (from INTERFACE RANGE mode) — shows the bulk configuration interfaces. show range — shows the bulk configuration ranges. interface vlan Configure a VLAN. You can configure up to 4096 VLANs. Syntax interface vlan vlan-id To delete a VLAN, use the no interface vlan vlan-id command.
PAGE 1470
intf-type cr4 autoneg Set the interface type as CR4 with auto-negotiation enabled. Syntax intf-type cr4 autoneg If you configure intf-type cr4 autoneg, use the no intf-type cr4 autoneg command to set the interface type as cr4 with autonegotiation disabled. Defaults Not configured Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.
PAGE 1471
Usage Information When you configure keepalive, the system sends a self-addressed packet out of the configured interface to verify that the far end of a WAN link is up. When you configure no keepalive, the system does not send keepalive packets and so the local end of a WAN link remains up even if the remote end is down. mtu Set the link maximum transmission unit (MTU) (frame size) for an Ethernet interface. Syntax mtu value To return to the default MTU value, use the no mtu command.
PAGE 1472
contains tagged members with Link MTU of 1522 and IP MTU of 1500 and untagged members with Link MTU of 1518 and IP MTU of 1500. The VLAN’s Link MTU cannot be higher than 1518 bytes and its IP MTU cannot be higher than 1500 bytes. The following shows the difference between Link MTU and IP MTU.
PAGE 1473
• Slave • Auto-neg Error — typically indicates that both ends of the node are configured with forced-master or forced-slave. CAUTION: Ensure that one end of your node is configured as forced-master and one is configured as forced-slave. If both are configured the same (that is, forced-master or forced-slave), the show interfaces command flaps between an auto-neg-error and forced-master/slave states. You can display master/slave settings with the show interfaces command.
PAGE 1474
• auto-negotiation enabled* speed 1000 or auto • auto-negotiation enabled speed 100 • auto-negotiation disabled speed 100 • auto-negotiation enabled speed 100 • auto-negotiation disabled speed 100 Link Status Between Port 1 and Port 2 • Up at 1000 Mb/s • Up at 100 Mb/s • Up at 100 Mb/s • Down • Down * You cannot disable auto-negotiation when the speed is set to 1000 or auto.
PAGE 1475
• True — port is tagged • False — port is untagged • Hybrid — port accepts both tagged and untagged frames The following describes the interface vlan command shown in the following example. This example shows unconfiguration of the hybrid port using the no portmode hybrid command. NOTE: Remove all other configurations on the port before you can remove the hybrid configuration from the port.
PAGE 1476
Dell(conf-if-te-0/20)#no portmode hybrid Dell(conf-if-vl-20)# Related Commands show interfaces switchport — displays the configuration of switchport (Layer 2) interfaces on the switch. vlan-stack trunk — specifies an interface as a trunk port to the Stackable VLAN network. stack-unit portmode Split a single 40G port into 4-10G ports on the MXL switch. Syntax Parameters stack-unit stack-unit port number portmode quad stack-unit Enter the stack member unit identifier of the stack member to reset.
PAGE 1477
The system must be reloaded after issuing the CLI for the change to take effect. Port Channel Commands A link aggregation group (LAG) is a group of links that appear to a MAC client as if they were a single link according to IEEE 802.3ad. In the Dell Networking OS, a LAG is referred to as a Port Channel. • For the MXL switch, the maximum port channel ID is 128 and the maximum members per port channel is 16.
PAGE 1478
You cannot add an interface to a Port Channel if the interface contains an IP address in its configuration. Link MTU and IP MTU considerations for Port Channels are: • All members must have the same link MTU value and the same IP MTU value. • The Port Channel link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the channel members.
PAGE 1479
Parameters channelnumber Defaults Not configured. Command Modes CONFIGURATION Command History Usage Information For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1480
Defaults 1 Command Modes INTERFACE Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. If you use this command to configure the minimum number of links in a LAG that must be in “oper up” status, the LAG must have at least that number of “oper up” links before it can be declared as up.
PAGE 1481
Command Modes CONFIGURATION (conf-if-interface-slot/port) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 1482
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Version 7.6.1.0 Introduced on the S-Series in Interface VLAN mode only to enable the system to act as an IGMP Proxy Querier. Version 7.5.1.0 Introduced on the C-Series in Interface VLAN mode only to enable the system to act as an IGMP Proxy Querier. E-Series legacy command.
PAGE 1483
Version 7.5.1.0 Introduced on the C-Series in Interface VLAN mode only to enable the system to act as an IGMP Proxy Querier. E-Series legacy command. ip igmp query-max-resp-time Set the maximum query response time advertised in general queries. Syntax ip igmp query-max-resp-time seconds To return to the default values, use the no ip igmp query-max-resp-time command. Parameters seconds Enter the number of seconds for the maximum response time. The range is from 1 to 25. The default is 10 seconds.
PAGE 1484
ip igmp version Manually set the version of the router to IGMPv2 or IGMPv3. Syntax Parameters ip igmp version {2 | 3} 2 Enter the number 2 to set the IGMP version number to IGMPv2. 3 Enter the number 3 to set the IGMP version number to IGMPv3. Defaults 2 (that is, IGMPv2) Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1485
• • IGMP snooping is not supported on a default VLAN interface. IGMP snooping is not supported over VLAN-Stack-enabled VLAN interfaces (you must disable IGMP snooping on a VLAN interface before configuring VLAN-Stack-related commands). ip igmp snooping enable Enable IGMP snooping on all or a single VLAN. This command is the master on/off switch to enable IGMP snooping. Syntax ip igmp snooping enable To disable IGMP snooping, use the no ip igmp snooping enable command.
PAGE 1486
Defaults Not configured. Command Modes INTERFACE VLAN — (conf-if-vl-n) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 1487
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000.
PAGE 1488
Defaults Not configured. Command Modes INTERFACE VLAN — (conf-if-vl-n) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 1489
Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information This command enables the IGMP switch to send General Queries periodically.
PAGE 1490
Command Modes Command History CONFIGURATION Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. mac-address-table static Associate specific MAC or hardware addresses to an interface and virtual local area networks (VLANs).
PAGE 1491
Defaults none Command Modes CONFIGURATION Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. For details about using this command, refer to the “NIC Teaming” section of the Layer 2 chapter in the Dell Networking OS Configuration Guide.
PAGE 1492
lacp port-priority To influence which ports will be put in Standby mode when there is a hardware limitation that prevents all compatible ports from aggregating, configure the port priority. Syntax lacp port-priority priority-value To return to the default setting, use the no lacp port-priority priorityvalue command. Parameters priority-value Defaults 32768 Command Modes INTERFACE Command History Enter the port-priority value. The higher the value number, the lower the priority.
PAGE 1493
Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. LACP Modes Mode Function active An interface is in an active negotiating state in this mode. LACP runs on any link configured in the active state and also automatically initiates negotiation with other ports by initiating LACP packets.
PAGE 1494
Link Layer Discovery Protocol (LLDP) Link layer discovery protocol (LLDP) advertises connectivity and management from the local station to the adjacent stations on an IEEE 802 LAN. LLDP facilitates multi-vendor interoperability by using standard management tools to discover and make available a physical topology for network management. The Dell Networking operating software implementation of LLDP is based on IEEE standard 801.1ab.
PAGE 1495
Parameters systemcapabilities Enter the keywords system-capabilities to advertise the system capabilities TLVs to the LLDP peer. systemdescription Enter the keywords system-description to advertise the system description TLVs to the LLDP peer. system-name Enter the keywords system-name to advertise the system name TLVs to the LLDP peer. Defaults none Command Modes CONFIGURATION (conf-lldp) Command History Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 1496
clear lldp neighbors Clear LLDP neighbor information for all interfaces or a specific interface. Syntax Parameters clear lldp neighbors {interface} interface Defaults none Command Modes EXEC Privilege Command History Enter the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword tenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Version 9.
PAGE 1497
packet (OPTIONAL) Enter the keyword packet to display information regarding packets coming in or going out. brief (OPTIONAL) Enter the keyword brief to display brief packet information. detail (OPTIONAL) Enter the keyword detail to display detailed packet information. tx (OPTIONAL) Enter the keyword tx to display transmit-only packet information. rx (OPTIONAL) Enter the keyword rx to display receive-only packet information.
PAGE 1498
hello Configure the rate at which the LLDP control packets are sent to its peer. Syntax hello seconds To revert to the default, use the no hello seconds command. Parameters seconds Enter the rate, in seconds, at which the control packets are sent to its peer. The rate is from 5 to 180 seconds. The default is 30 seconds. Defaults 30 seconds Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp) Command History Version 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 1499
Quality of Service (QoS) The Dell Networking operating software commands for quality of service (QoS) include traffic conditioning and congestion control. QoS commands are not universally supported on all Dell Networking Products. Per-Port QoS Commands Per-port QoS (port-based QoS) allows you to define the QoS configuration on a per-physical-port basis. dot1p-priority Assign a value to the IEEE 802.1p bits on the traffic this interface receives.
PAGE 1500
When you set the priority for a port channel, the physical interfaces assigned to the port channel are configured with the same value. You cannot assign the dot1ppriority command to individual interfaces in a port channel. service-class dynamic dot1p Honor all 802.1p markings on incoming switched traffic on an interface (from INTERFACE mode) or on all interfaces (from CONFIGURATION mode). A CONFIGURATION mode entry supersedes an INTERFACE mode entry.
PAGE 1501
assigned to the port channel are automatically configured; you cannot assign the service-class dynamic command to individual interfaces in a port channel. • All dot1p traffic is mapped to Queue 0 unless you enable the service-class dynamic dot1p command on an interface or globally. • Layer 2 or Layer 3 service policies supersede dot1p service classes. service-class dot1p-mapping Configure a service-class criterion based on a dot1p value.
PAGE 1502
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Usage Information To apply dot1p-queue-mapping, use the service-class dynamic dot1p command. Related Commands service-class dot1p-mapping — displays the dot1p priority to queue mapping on the switch. service-class bandwidth-percentage Specify a minimum bandwidth for queues.
PAGE 1503
Policy-Based QoS Commands Policy-based traffic classification is handled with class maps. These maps classify unicast traffic into one of four classes. The system allows you to match multiple class maps and specify multiple match criteria. Policy-based QoS is not supported on logical interfaces, such as port-channels, VLANs, or Loopbacks. bandwidth-percentage Assign a percentage of weight to the class/queue.
PAGE 1504
Command Modes Command History Related Commands CONFIGURATION (policy-map-input and policy-map-output; conf-qos-policy-in and conf-qos-policy-out; wred) Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. policy-map-output — creates an output policy map. qos-policy-output — creates an output QoS-policy on the router.
PAGE 1505
Related Commands policy-map-output — creates an output policy map. policy-map-output Create an output policy map. Syntax policy-map-output policy-map-name To remove a policy map, use the no policy-map-output policy-map-name command. Parameters policy-mapname Defaults none Command Modes CONFIGURATION Command History Enter the name for the policy map in character format (32 characters maximum). Version 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 1506
Command Modes Command History CONFIGURATION Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To specify the name of the output QoS policy, use this command. After the output policy is specified, rate-limit, bandwidth-percentage, and WRED can be defined. This command enables Qos-Policy-Output Configuration mode — (conf-qospolicy-out). Related Commands bandwidth-percentage — assigns weight to the class/queue percentage.
PAGE 1507
To remove the queue assignment, use the no service-queue queue-id [class-map class-map-name] [qos-policy qos-policy-name] command. Parameters queue-id Enter the value used to identify a queue. The range is from 0 to 3 (four queues per interface; four queues are reserved for control traffic). class-map class-mapname (OPTIONAL) Enter the keyword class-map then the class map name assigned to the queue in character format (32 character maximum). NOTE: This option is available under policy-mapinput only.
PAGE 1508
Command History Example Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show qos qos-policy-output Qos-policy-output qmap_out Bandwidth-percentage 10 Qos-policy-output qmap_wg Rate-shape 100 50 Wred yellow wy Wred green wg Dell# Virtual Link Trunking (VLT) VLT allows physical links between two chassis to appear as a single virtual link to the network core.
PAGE 1509
Parameters ipv4–address Enter the IPv4 address of the backup destination. ipv6 Enter the keyword ipv6 then an IPv6 address in the X:X:X:X::X format. interval seconds Enter the keyword interval to specify the time interval to send hello messages. The range is from 1 to 5 seconds. The default is 1 second. Defaults 1 second Command Modes VLT DOMAIN Command History This guide is platform-specific.
PAGE 1510
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.2(0.2) Added multicast and ndp parameters. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.
PAGE 1511
Usage Information Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Added port-channel parameter on the S4810. Version 8.3.8.0 Introduced on the S4810. LACP on the VLT ports (on a VLT switch or access device), which are members of the virtual link trunk, is not brought up until the VLT domain is recognized on the access device.
PAGE 1512
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.
PAGE 1513
--------- ------------ ----------- 100 -- Vlan IPV4 Multicast Status -------------------------Vlan-ID Local Status ------------------4094 L3 Peer Status ----------- Active Inactive Dell# system-mac Reconfigure the default MAC address for the domain. Syntax Parameters system-mac mac-address mac-address Enter the system MAC address for the VLT domain. Defaults Not configured. Command Modes VLT DOMAIN Command History This guide is platform-specific.
PAGE 1514
Parameters 0|1 Configure the default unit ID of a VLT peer switch. Enter 0 for the first peer or enter 1 for the second peer. Defaults Automatically assigned based on the MAC address of each VLT peer. The peer with the lower MAC address is assigned unit 0; the peer with the higher MAC address is assigned unit 1. Command Modes VLT DOMAIN Command History This guide is platform-specific.
PAGE 1515
Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.8.0 Introduced on the S4810. Usage Information The VLT domain ID must be the same between the two VLT devices. If the domain ID is not the same, a syslog message is generated and VLT does not launch.
PAGE 1516
reload-type Configure a switch to reload as a DHCP client in BMP mode with all ports configured for Layer 3 traffic or in Normal mode. Syntax reload-type [bmp | normal—reload {[auto—save {enable | disable}] | [config-scr-download {enable | disable}] | [dhcptimeout minutes]| retry-count number | vendor-class-identifier description] Use the disable bmp command to stop the BMP process. Parameters bmp (Default) Enable the BMP reload type.
PAGE 1517
NOTE: This parameter replaces the deprecated parameter userdefined-string. Defaults BMP Switches running BMP reload in BMP mode as a DHCP client with all ports configured for Layer 3 traffic. Command Modes Command History Usage Information GLOBAL CONFIGURATION Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.2(0.
PAGE 1518
upgrades. To reload the switch in the last configured mode: Normal reload or BMP mode, you can enter the reload command at any time. Upgrade any configuration changes that have changed the NVRAM content by performing a reload on the chassis. While BMP is on, the Dell Networking OS Command Line Reference Guide prompt changes to “Dell-BMP”.
PAGE 1519
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810.
PAGE 1520
Related Commands Version 8.3.12.0 Introduced on the S4810. Version 8.4.2.3 Introduced on the S-Series S50. clear ufd-disable — re-enables downstream interfaces that are in a UFD-Disabled Error state. description Enter a text description of an uplink-state group. Syntax Parameters description text text Text description of the uplink-state group. The maximum length is 80 alphanumeric characters. Defaults none Command Modes UPLINK-STATE-GROUP Command History This guide is platform-specific.
PAGE 1521
Parameters interface Enter one of the following interface types: • Fast Ethernet: fastethernet {slot/port | slot/ port-range} • 1 Gigabit Ethernet: gigabitethernet {slot/port | slot/port-range} • 10 Gigabit Ethernet: tengigabitethernet {slot/ port |slot/port-range} • Port channel: port-channel {1-512 | portchannel-range} Where port-range and port-channel-range specify a range of ports separated by a dash (-) and/or individual ports/port channels in any order; for example: gigabitethernet 1/1-2,5,9
PAGE 1522
Related Commands • upstream— assigns a port or port-channel to the uplink-state group as an upstream interface. • uplink-state-group — creates an uplink-state group and enables the tracking of upstream links. downstream auto-recover Enable auto-recovery so that UFD-disabled downstream ports in an uplink-state group automatically come up when a disabled upstream port in the group comes back up.
PAGE 1523
Parameters number Enter the number of downstream links to be brought down by UFD. The range is from 1 to 1024. all Brings down all downstream links in the group. Defaults No downstream links are disabled when an upstream link in an uplink-state group goes down. Command Modes UPLINK-STATE-GROUP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1524
Command Modes UPLINK-STATE-GROUP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.19.0 Introduced on the S4820T Version 8.3.12.0 Introduced on the S4810.
PAGE 1525
Version 8.4.2.3 Example Related Commands Introduced on the S-Series S50. Dell#show running-config uplink-state-group ! no enable uplink state track 1 downstream GigabitEthernet 0/2,4,6,11-19 upstream TengigabitEthernet 0/48, 52 upstream PortChannel 1 ! uplink state track 2 downstream GigabitEthernet 0/1,3,5,7-10 upstream TengigabitEthernet 0/56,60 • show uplink-state-group — displays the status information on a specified uplink-state group or all groups.
PAGE 1526
Example Dell# show uplink-state-group Uplink State Group: 1 Status: Enabled, Up Uplink State Group: 3 Status: Enabled, Up Uplink State Group: 5 Status: Enabled, Down Uplink State Group: 6 Status: Enabled, Up Uplink State Group: 7 Status: Enabled, Up Uplink State Group: 16 Status: Disabled, Up Dell# show uplink-state-group 16 Uplink State Group: 16 Status: Disabled, Up Dell#show uplink-state-group detail (Up): Interface up (Dwn): Interface down (Dis): Interface disabled Uplink State Group : 1 Status: Enable
PAGE 1527
Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.
PAGE 1528
Parameters interface Enter one of the following interface types: • Fast Ethernet: fastethernet {slot/port | slot/ port-range} • 1 Gigabit Ethernet: gigabitethernet {slot/port | slot/port-range} • 10 Gigabit Ethernet: tengigabitethernet {slot/ port | slot/port-range} • 40 Gigabit Ethernet: fortyGigE {slot/port | slot/ port-range} • Port channel: port-channel {1-512 | portchannel-range} Where port-range and port-channel-range specify a range of ports separated by a dash (-) and/or individual ports
PAGE 1529
Example Related Commands Dell(conf-uplink-state-group-16)# upstream gigabitethernet 1/10-15 Dell(conf-uplink-state-group-16)# • downstream — assigns a port or port-channel to the uplink-state group as a downstream interface. • uplink-state-group — creates an uplink-state group and enables the tracking of upstream links. Simple Network Management Protocol (SNMP) and Syslog This chapter contains commands to configure and monitor the simple network management protocol (SNMP) v1/v2/v3 and Syslog.
PAGE 1530
snmp-server enable traps Enable SNMP traps. Syntax snmp-server enable traps [notification-type] [notificationoption] To disable traps, use the no snmp-server enable traps [notificationtype] [notification-option] command. Parameters notificationtype notificationoption Enter the type of notification from the following list: • bgp — Notification of changes in the BGP process. • config — Notification of changes to the startup or running configuration. • ecfm — Notification of changes to ECFM.
PAGE 1531
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.1(0.0) Added support for copy-config and ecmp traps. Version 8.3.19.0 Introduced on the S4820T.
PAGE 1532
traps (OPTIONAL) Enter the keyword traps to send trap notifications to the specified host. The default is traps. informs (OPTIONAL) Enter the keyword informs to send inform notifications to the specified host. The default is traps. version 1 | 2c | 3 (OPTIONAL) Enter the keyword version to specify the security model then the security model version number 1, 2c, or 3: • Version 1 is the least secure version. • Version 3 is the most secure of the security modes.
PAGE 1533
• isis — Enable ISIS adjacency change traps • pfc — Enable pfc traps • snmp — Enable SNMP trap • stp — Enable 802.1d state change traps • vlt — Enable VLT traps • vrrp — Enable VRRP state change traps • xstp — Enable 802.1s, 802.1w, and PVST+ state change traps The default is all trap types are sent to host. Defaults As above. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 1534
previous command. Only the last snmp-server host command will be in effect. For example, if you enter an snmp-server host inform command for a host and then enter another snmp-server host inform command for the same host, the second command replaces the first command. The snmp-server host command is used with the snmp-server enable command. Use the snmp-server enable command to specify which SNMP notifications are sent globally.
PAGE 1535
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Related Commands show logging — displays logging settings and system messages in the internal buffer. logging Configure an IP address or host name of a Syslog server where logging messages are sent.
PAGE 1536
Version 8.4.1.0 Added support for IPv6. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information Multiple logging servers of both IPv4 and/or IPv6 can be configured. Related Commands logging trap — enables logging to the Syslog server based on severity. logging buffered Enable logging and specify which messages are logged to an internal buffer. By default, all messages are logged to the internal buffer.
PAGE 1537
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information When you decrease the buffer size, all messages stored in the buffer are lost. Increasing the buffer size does not affect messages stored in the buffer. Related Commands clear logging — clears the logging buffer.
PAGE 1538
Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Related Commands clear logging — clears the logging buffer. show logging — displays the logging setting and system messages in the internal buffer. logging monitor Specify which messages are logged to Telnet applications. Syntax logging monitor [level] To disable logging to terminal connections, use the no logging monitor command.
PAGE 1539
logging source-interface Specify that the IP address of an interface is the source IP address of Syslog packets sent to the Syslog server. Syntax logging source-interface interface To disable this command and return to the default setting, use the no logging source-interface command. Parameters interface Enter the following keywords and slot/port or number information: • For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet then the slot/port information.
PAGE 1540
Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information Syslog messages contain the IP address of the interface used to egress the router. By configuring the logging source-interface command, the Syslog packets contain the IP address of the interface configured. Related Commands logging— enables logging to the Syslog server.
PAGE 1541
Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Example (Partial) Dell#show logging Syslog logging: enabled Console logging: level debugging Monitor logging: level debugging Buffer logging: level debugging, 5604 Messages Logged, Size (524288 bytes) Trap logging: level informational Oct 8 09:25:37: %RPM1:RP1 %BGP-5-ADJCHANGE: Connection with neighbor 223.80.255.254 closed.
PAGE 1542
%RPM:0:0 %CHMGR-2-LINECARDDOWN - Line card 3 down - IPC timeout Dell# show logging driverlog stack-unit Display the driver log for the specified stack member. Syntax Parameters show logging driverlog stack-unit unit# stack-unit unit# Enter the keywords stack-unit followed by the stack member ID of the switch for which you want to display the driver log. The range is from 0 to 7. defaults none Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific.
PAGE 1543
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000.