Reference Guide

ManualsBrandsDell ManualsAccess PlatformsPowerSwitch S4820T

FTOS Command Line Reference

Guide for the

S4820T (FTOS 8.3.19.0)

System

Publication Date: January 2013

Summary of content (1576 pages)

PAGE 1
FTOS Command Line Reference Guide for the S4820T (FTOS 8.3.19.
PAGE 2
Notes, Cautions, and Warnings NOTE: A NOTE indicates important information that helps you make better use of your computer. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. Information in this publication is subject to change without notice. © 2013 Dell Force10. All rights reserved.
PAGE 3
1 About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13 Objectives . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 4
www.dell.com | support.dell.com Upgrading the C-Series FPGA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 4 Control and Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 5
11 Content Addressable Memory (CAM) . . . . . . . . . . . . . . . . . . . . . . . . . . .435 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 435 CAM Profile Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 435 Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 436 CAM IPv4flow Commands . . . . . . . . . . . . . . .
PAGE 6
www.dell.com | support.dell.com 19 GARP VLAN Registration (GVRP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . .553 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 553 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 553 Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 7
27 IPv6 Border Gateway Protocol (IPv6 BGP). . . . . . . . . . . . . . . . . . . . . . .793 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 793 IPv6 BGP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 793 IPv6 MBGP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 865 28 iSCSI Optimization . . . . . . . . . . . .
PAGE 8
www.dell.com | support.dell.com 36 Neighbor Discovery Protocol (NDP) . . . . . . . . . . . . . . . . . . . . . . . . . . .1067 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1067 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1067 37 Open Shortest Path First (OSPFv2) . . . . . . . . . . . . . . . . . . . . . . . . . . .1075 Overview . . . . . . . . . .
PAGE 9
Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1291 45 Rapid Spanning Tree Protocol (RSTP) . . . . . . . . . . . . . . . . . . . . . . . . .1305 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1305 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1305 46 Security . . . . . . . . .
PAGE 10
www.dell.com | support.dell.com 51 Storm Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1453 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1453 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1453 Important Points to Remember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 11
60 SNMP Traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 12
| www.dell.com | support.dell.
PAGE 13
1 About this Guide This book provides information on the FTOS Command Line Interface (CLI). It includes some information on the protocols and features found in FTOS and on the Dell Force10 systems supported by FTOS (C-Series c, E-Series e, and S-Series s).
PAGE 14
www.dell.com | support.dell.com Conventions This document uses the following conventions to describe command syntax: Convention Description keyword Keywords are in bold and should be entered in the CLI as listed. parameter Parameters are in italics and require a number or word to be entered in the CLI. {X} Keywords and parameters within braces must be entered in the CLI. [X] Keywords and parameters within brackets are optional.
PAGE 15
• • • FTOS Configuration Guide Installation and maintenance guides for your system Release Notes for your system and FTOS version About this Guide | 15
PAGE 16
| About this Guide www.dell.com | support.dell.
PAGE 17
2 CLI Basics This chapter describes the command structure and command modes. FTOS commands are in a text-based interface that allows you to use launch commands, change the command modes, and configure interfaces and protocols.
PAGE 18
www.dell.com | support.dell.com Multiple Configuration Users When a user enters the CONFIGURATION mode and another user(s) is already in that configuration mode, FTOS generates an alert warning message similar to the following: FTOS#conf % Warning: The following users are currently configuring the system: User "" on line User "admin" on User "admin" on User "Irene" on FTOS#conf console0 line vty0 ( 123.12.1.123 ) line vty1 ( 123.12.1.123 ) line vty3 ( 123.12.1.
PAGE 19
Table 2-1.
PAGE 20
www.dell.com | support.dell.com • • • • Enter a ? at the prompt or after a keyword. There must always be a space before the ?. To obtain a list of keywords with a brief functional description, do the following: • Enter help at the prompt. To obtain a list of available options, do the following: • Type a keyword followed by a space and a ? Type a partial keyword followed by a ? • A display of keywords beginning with the partial keyword is listed.
PAGE 21
Use the left and right arrow keys to navigate left or right in the FTOS command line. Table 2-2 defines the key combinations valid at the FTOS command line. Table 2-2. Short-cut Keys and their Actions Key Combination Action CNTL-A Moves the cursor to the beginning of the command line. CNTL-B Moves the cursor back one character. CNTL-D Deletes character at cursor. CNTL-E Moves the cursor to the end of the line. CNTL-F Moves the cursor forward one character. CNTL-I Completes a keyword.
PAGE 22
www.dell.com | support.dell.
PAGE 23
Command Modes To navigate to various CLI modes, you need to use specific commands to launch each mode. Navigation to these modes is discussed in the following sections. Note: Some of the following modes are not available on C-Series or S-Series. EXEC Mode When you initially log in to the switch, by default, you are logged into the EXEC mode. This mode allows you to view settings and to enter the EXEC Privilege mode to configure the device.
PAGE 24
www.dell.com | support.dell.com To enter INTERFACE mode: 1. Verify that you are logged into the CONFIGURATION mode. 2. Enter the interface command followed by an interface type and interface number that is available on the switch. 3. The prompt changes to include the designated interface and slot/port number, as outlined in Table 2-3. Table 2-3.
PAGE 25
You can exit this mode by using the exit command. MAC ACCESS LIST Mode While in the CONFIGURATION mode, use the mac access-list standard or mac access-list extended command to enter the MAC ACCESS LIST mode and configure either standard or extended access control lists (ACL). To enter MAC ACCESS LIST mode: 1. Verify that you are logged in to the CONFIGURATION mode. 2. Use the mac access-list standard or mac access-list extended command. You must include a name for the ACL.
PAGE 26
www.dell.com | support.dell.com PREFIX-LIST Mode While in the CONFIGURATION mode, use the ip prefix-list command to enter the PREFIX-LIST mode and configure a prefix list. To enter PREFIX-LIST mode: 1. Verify that you are logged in to the CONFIGURATION mode. 2. Enter the ip prefix-list command. You must include a name for the prefix list.The prompt changes to include (conf-nprefixl). You can return to the CONFIGURATION mode by entering the exit command.
PAGE 27
1. Verify that you are logged in to the CONFIGURATION mode. 2. Use the ip redirect-list command. You must include a name for the Redirect-list.The prompt changes to include (conf-redirect-list). You can return to the CONFIGURATION mode by entering the exit command. SPANNING TREE Mode Use the STP mode to enable and configure the Spanning Tree protocol, as described in Chapter 52, Spanning Tree Protocol (STP). To enter STP mode: 1. Verify that you are logged into the CONFIGURATION mode. 2.
PAGE 28
www.dell.com | support.dell.com MULTIPLE SPANNING TREE Mode Use MULTIPLE SPANNING TREE mode to enable and configure the Multiple Spanning Tree protocol, as described in Chapter 34, Multiple Spanning Tree Protocol (MSTP). To enter MULTIPLE SPANNING TREE mode: 1. Verify that you are logged into the CONFIGURATION mode. 2. Enter the protocol spanning-tree mstp command. You can return to the CONFIGURATION mode by entering the exit command.
PAGE 29
1. Verify that you are logged into the CONFIGURATION mode. 2. Enter the router rip command.The prompt changes to include (conf-router_rip). You can switch to the INTERFACE mode by using the interface command or you can switch to the ROUTER OSPF mode by using the router ospf command. ROUTER ISIS Mode Use the ROUTER ISIS mode to configure ISIS on the E-Series, as described in the E-Series E-Series FTOS Command Line Reference Guide chapter Intermediate System to Intermediate System (IS-IS).
PAGE 30
www.dell.com | support.dell.com Determining the Chassis Mode 30 The chassis mode in FTOS determines which hardware is being supported in an E-Series chassis. The chassis mode is programmed into an EEPROM on the backplane of the chassis and the change takes place only after the chassis is rebooted. Configuring the appropriate chassis mode enables the system to use all the ports on the card and recognize all software features.
PAGE 31
3 File Management Overview This chapter contains commands needed to manage the configuration files and includes other file management commands found in FTOS. The commands in this chapter are supported by FTOS on Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c S4810, S4820T.
PAGE 32
www.dell.com | support.dell.
PAGE 33
Usage Information To display these changes in the show bootvar command output, you must save the running configuration to the startup configuration (copy running-config startup-config or write)...... Dell Force10 strongly recommends using local files for configuration (RPM0 or RPM1 flash or slot0). When you specify a file as the boot config file, it is listed in the boot variables (bootvar) as LOCAL CONFIG FILE.
PAGE 34
www.dell.com | support.dell.com Related Commands show bootvar Display the variable settings for the E-Series boot parameters. boot host ce Set the location of the configuration file from a remote host. Syntax Parameters boot host {primary | secondary} remote-url primary Enter the keywords primary to attempt to load the primary host configuration files. secondary Enter the keywords secondary to attempt to load the secondary host configuration files.
PAGE 35
Command Modes Command History CONFIGURATION Version 7.5.1.0 Introduced on C-Series E-Series original Command Usage Information Related Commands To display these changes in the show bootvar command output, you must save the running configuration to the startup configuration (using the copy command). show bootvar Display the variable settings for the E-Series boot parameters. boot system ce Tell the system where to access the FTOS image used to boot the system.
PAGE 36
www.dell.com | support.dell.com Related Commands change bootflash-image Change the primary, secondary, or default boot image configuration. boot system gateway Specify the IP address of the default next-hop gateway for the management subnet. boot system gateway ce Syntax Parameters Command Modes Usage Information Command History Specify the IP address of the default next-hop gateway for the management subnet. boot system gateway ip-address ip-address Enter an IP address in dotted decimal format.
PAGE 37
Parameters cp Enter the keyword cp to change the bootflash image on the Control Processor on the RPM. linecard linecard-slot Enter the keyword linecard followed by the slot number to change the bootflash image on a specific line card. C-Series Range: 0-7 E-Series Range: 0 to 13 on the E1200; 0 on 6 on the E600, and 0 to 5 on the E300. rp Enter the keyword rp to change the bootflash image on the RPM Route Processor. Defaults Not configured. Command Modes EXEC Privilege Command History Version 7.
PAGE 38
www.dell.com | support.dell.com Command History Version 8.4.1.0 Added IPv6 addressing support for FTP, TFTP, and SCP. Version 8.2.1.0 Added usbflash and rpm0usbflash commands on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series and added SSH port number to SCP prompt sequence on all systems. Version 7.5.1.0 Introduced on C-Series E-Series original Command Usage Information FTOS supports a maximum of 100 files, at the root directory level, on both the internal and external Flash.
PAGE 39
Source file name []: test.cfg User name to login remote host: admin Password to login remote host: Destination file name [test.cfg]: test1.cfg Related Commands cd Change working directory. copy (Streamline Upgrade) ce Syntax Copy a system image to a local file and update the boot profile. copy source-url target-url [boot-image [synchronize-rpm [external]]] Parameters source-url Enter the source file in url format. The source file is a valid Dell Force10 release image. Image validation is automatic.
PAGE 40
www.dell.com | support.dell.com copy running-config startup-config ce Copy running configuration to the startup configuration. Syntax copy running-config startup-config {duplicate} Command Modes Command History EXEC Privilege Version 7.5.1.0 Introduced on C-Series Version 6.3.1.0 Introduced Usage Information This command is useful for quickly making a changed configuration on one chassis available on external flash in order to move it to another chassis.
PAGE 41
Parameters filename | directory name: Command Modes Command History (OPTIONAL) Enter one of the following: • For a file or directory on the internal Flash, enter flash:// followed by the filename or directory name. • For a file or directory on the external Flash, enter slot0:// followed by the filename or directory name: EXEC Privilege Version 7.6.1.0 Introduced on S-Series Version 7.5.1.
PAGE 42
www.dell.com | support.dell.com Syntax Command Modes Command History Usage Information download alt-full-image file-url EXEC Privilege Version 7.7.1.0 Removed form E-Series Version 6.5.1.0 Introduced Starting with FTOS 7.7.1.0, the functions of this command are incorporated into the upgrade command. For software upgrade details, refer to the FTOS Release Notes.
PAGE 43
Default Command Modes Command History DOS 1.0 (dosFs1.0) EXEC Privilege Version 7.5.1.0 Introduced on C-Series E-Series original Command Usage Information When you format flash: 1. The startup-config is erased. 2. All cacheboot data files are erased and you must reconfigure cacheboot to regain it. 3. All generated SSH keys are erased and you must recreate them. 4. All archived configuration files are erased. 5. All trace logs, crash logs, core dumps, and call-home logs are erased. 6.
PAGE 44
www.dell.com | support.dell.com Caution: This command deletes all files, including the startup configuration file. After executing this command, consider saving the running config as the startup config (use the write memory command or copy run start). Related Commands copy Copy the current configuration to either the startup-configuration file or the terminal. show file Display contents of a text file in the local filesystem. show file-systems Display information about the file systems on the system.
PAGE 45
Usage Information You must include the colon (:) when entering this command. This command checks the specified flash memory for errors. If errors are found, the command will recommend that you format the flash. Caution: If you elect to format the flash, all files, including the startup configuration file will be lost. If you do decide to format the specified flash, consider saving the running config as the startup config (use the write memory command or copy run start).
PAGE 46
www.dell.com | support.dell.com logging coredump server ces Designate a server to upload core dumps. Syntax logging coredump server {ipv4-address | ipv6-address} username name password [type] password Parameters Defaults Command Modes Command History Usage Information {ipv4-address | ipv6-address} Enter the server IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X). name Enter a username to access the target server. type Enter the password type: • Enter 0 to enter an unencrypted password.
PAGE 47
Example Related Commands FTOS#pwd flash: FTOS# cd Change directory. rename ces Rename a file in the local file system. Syntax Parameters rename url url url Command Modes Command History Enter the following keywords and a filename: • For a file on the internal Flash, enter flash:// followed by the filename. • For a file on the external Flash, enter slot0:// followed by the filename. EXEC Privilege Version 7.6.1.0 Introduced on S-Series Version 7.5.1.
PAGE 48
www.dell.com | support.dell.com DEFAULT IMAGE FILE = flash://FTOS-ED-5.3.1.0.bin LOCAL CONFIG FILE = variable does not exist PRIMARY HOST CONFIG FILE = variable does not exist SECONDARY HOST CONFIG FILE = variable does not exist PRIMARY NETWORK CONFIG FILE = variable does not exist SECONDARY NETWORK CONFIG FILE = variable does not exist CURRENT IMAGE FILE = ftp://box:password@10.31.1.205//home/5.3.1/5.3.1.0/ FTOS-ED-RPM1-5.3.1.0.
PAGE 49
Syntax Parameters Command Modes Command History show file filesystem filesystem Enter one of the following: • flash: for the internal Flash • slot0: for the external Flash EXEC Privilege Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series original Command Example Related Commands FTOS#show file flash://startup-config ! boot system rpm0 primary ftp://test:server@10.16.1.144//home/images/E1200_405-3.1.2b1.86.bin boot system rpm0 secondary flash://FTOS-ED-6.1.1.0.
PAGE 50
www.dell.com | support.dell.com Command History Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series original Command Example FTOS#show file-systems Size(b) Free(b) 63938560 51646464 63938560 18092032 FTOS# Table 3-1. Feature dosFs2.0 dosFs1.0 - Type MMC MMC network network network Flags rw rw rw rw rw Prefixes flash: slot0: ftp: tftp: scp: show file-systems Command Output Fields Field Description size(b) Lists the size in bytes of the storage location.
PAGE 51
Command Modes Command History EXEC Privilege Version 7.5.1.0 Introduced on C-Series E-Series original Command Example FTOS#show linecard boot-information -- Line cards -Serial Booted Next Cache Boot # Status CurType number from boot boot flash --------------------------------------------------------------------------------------------------0 1 2 3 online E48TF FX000032632 4.7.7.171 4.7.7.171 A: invalid B: invalid A: 2.3.2.1 [b] B: 2.3.2.
PAGE 52
www.dell.com | support.dell.com --------------------------------------------------------------------Type Version Target checksum runtime 7.5.1.0 control processor passed runtime 7.5.1.0 route processor passed runtime 7.5.1.0 terascale linecard passed boot flash 2.4.1.1 control processor passed boot flash 2.4.1.1 route processor passed boot flash 2.3.1.3 terascale linecard passed boot selector 2.4.1.1 control processor passed boot selector 2.4.1.1 route processor passed boot selector 2.3.1.
PAGE 53
Parameters entity (OPTIONAL) Enter one of the keywords listed below to display that entity’s current (non-default) configuration.
PAGE 54
www.dell.com | support.dell.
PAGE 55
Example (partial) FTOS#show running-config Current Configuration ... ! Version 7.4.1.0 ! Last configuration change at Tue Apr 10 17:43:38 2007 by admin ! Startup-config last updated at Thu Mar 29 02:35:08 2007 by default ! boot system rpm0 primary flash://FTOS-EF-7.4.1.0.bin boot system rpm0 secondary flash://FTOS-EF-6.3.1.2.bin boot system rpm0 default flash://FTOS-EF-6.5.1.8.bin ! ...
PAGE 56
www.dell.com | support.dell.com Example (show sfm all) FTOS#show sfm all Switch Fabric State: up -- Switch Fabric Modules -Slot Status --------------------------------------------------------------------------0 active 1 active 2 active 3 active 4 active 5 active 6 active 7 active 8 active FTOS# Table 3-2. show sfm Command Output Fields Field Description Switch Fabric State: States that the Switch Fabric is up (8 SFMs are online and operating). Status Displays the SFM’s active status.
PAGE 57
! Version 7.4.1.0 ! Last configuration change at Thu Mar 29 02:16:07 2007 by default ! Startup-config last updated at Thu Mar 29 02:35:08 2007 by default ! boot system rpm0 primary flash://FTOS-EF-7.4.1.0.bin boot system rpm0 secondary flash://FTOS-EF-6.3.1.2.bin boot system rpm0 default flash://FTOS-EF-6.5.1.8.bin ! ... Related Commands show running-config Display current (running) configuration.
PAGE 58
www.dell.com | support.dell.com 1 2-port 10GE LAN PHY line card with 10Km (1310nm) optics (ED) 1 12-port OC12c/3c PoS line card with IR optics (EC) 1 24-port GE line card with SFP optics (ED) 1 FastEthernet/IEEE 802.3 interface(s) 120 GigabitEthernet/IEEE 802.3 interface(s) 14 SONET network interface(s) 4 Ten GigabitEthernet/IEEE 802.3 interface(s) FTOS# Example (S-Series) FTOS#show version Dell Force10 Networks Real Time Operating System Software Dell Force10 Operating System Version: 1.
PAGE 59
FTOS# Table 3-3. show version Command Fields Lines beginning with Description Dell Force10 Network... Name of the operating system Dell Force10 Operating... OS version number Dell Force10 Application... Software version Copyright (c)... Copyright information Build Time... Software build’s date stamp Build Path... Location of the software build files loaded on the system Dell Force10 uptime is... Amount of time the system has been up System image...
PAGE 60
www.dell.com | support.dell.com rpm Enter the keyword rpm to upgrade the bootflash/boot selector image on all processors on the RPM. booted Enter this keyword to upgrade using the image packed with the currently running FTOS image.
PAGE 61
all Enter the keyword all to upgrade the bootflash or boot selector image on all processors. This keyword does not upgrade the bootflash on the standby RPM. Enter the keyword all after the keyword linecard to upgrade the bootflash or boot selector image on all linecards. linecard number Enter the keyword linecard followed by the line card slot number.
PAGE 62
www.dell.com | support.dell.com Related Commands Upgrade the FPGA version in the specified E-Series SFM. boot system Display configured boot image information upgrade (S-Series management unit and Z9000) Upgrade the bootflash image or system image of the S-Series or Z-Series management unit.
PAGE 63
Example B:) B:) B:) FTOS#upgrade system ? ftp: Copy from remote file system (ftp://userid:password@hostip/filepath) (flash partition A:/ scp: Copy from remote file system (scp://userid:password@hostip/filepath)(flash partition (A:/ tftp: Copy from remote file system (tftp://hostip/filepath)(Flash Ppartition A:/b:) FTOS#$pgrade system ftp://username:password@10.11.1.1/FTOS-SB-7.7.1.0.
PAGE 64
www.dell.com | support.dell.com Related Commands show sfm Display the SFM status. upgrade (E-Series version) Upgrade the E-Series. Usage Information On E-Series ExaScale, you cannot upgrade SFMs using this command when Cache Boot is configured. If you attempt an upgrade, you must reload the chassis to recover. 0 Upgrading the C-Series FPGA These commands are for upgrading the FPGA for C-Series RPMs and line cards.
PAGE 65
FPGA restore in progress. Please do NOT power off the card. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Upgrade result : ================ Linecard 4 FPGA restore successful. Usage Information Related Commands Reset the card using the power-cycle option after restoring the FPGA command. reset Reset a card. upgrade fpga-image c Upgrade the primary FPGA image.
PAGE 66
www.dell.com | support.dell.com Command Mode Command History Version 7.7.1.0 Renamed the primary-fpga-flash keyword to fpga-image. Added support for upgrading using a remote FTOS image. Version 7.6.1.0 Added support for the all keyword Version 7.5.1.
PAGE 67
4 Control and Monitoring Overview This chapter contains the following commands to configure and monitor the system, including Telnet, FTP, and TFTP as they apply to the following Dell Force10 , or . platforms e E-Series, c C-Series, s S-Series, Note: Beginning in release 8.3.10.0, the enable xfp-power-updates command was deprecated for the S4810 only. It was replaced by the enable optic-info-update interval command to update information on temperature and power monitoring in the SNMP MIB.
PAGE 68
www.dell.com | support.dell.
PAGE 69
Parameters unit-id Enter the stack member unit identifier of the stack member to reset. S4810 and S4820T range: 0 - 11 Z9000 range: 0 - 7 all Note: The S4810 and S4820T commands accept Unit ID numbers 0-11, though S4810 and the S4820T support stacking up to 6 units with FTOS version 8.3.12.0. queue size Defaults Command Modes Enter the queue size of the stack member. Range: 0 - 15 Not configured. CONFIGURATION Command History Version 8.3.19.0 Introduced on the S4820T Version 8.3.11.
PAGE 70
www.dell.com | support.dell.com Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series original Command Usage Information Optionally, use the banner exec command to create a text string that is displayed when the user accesses the EXEC mode. The exec-banner command toggles that display.
PAGE 71
Command Modes Command History CONFIGURATION Version 8.2.1.0 Introduced keyboard-interactive keyword Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series original Command Usage Information Related Commands A login banner message is displayed only in EXEC Privilege mode after entering the enable command followed by the password. These banners are not displayed to users in EXEC mode.
PAGE 72
www.dell.com | support.dell.com Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series original Command Usage Information Related Commands A MOTD banner message is displayed only in EXEC Privilege mode after entering the enable command followed by the password. These banners are not displayed to users in EXEC (non-privilege) mode.
PAGE 73
Parameters Defaults Command Modes Command History Usage Information all Enter the keyword all to enable CAM audit on all line cards. ipv4-fib Enter the keyword ipv4-fib to designate the CAM audit on the IPv4 forwarding entries. ipv6-fib Enter the keyword ipv6-fib to designate the CAM audit on the IPv6 forwarding entries. interval time-in-minutes Enter the keyword interval followed by the frequency in minutes of the CAM audit.
PAGE 74
www.dell.com | support.dell.com Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series original Command Related Commands show command-history Display a buffered log of all commands entered by all users along with a time stamp. clear line ces Reset a terminal line.
PAGE 75
Version 7.5.1.0 Introduced on C-Series E-Series original Command Example FTOS#configure FTOS(conf)# debug cpu-traffic-stats ces Enable the collection of CPU traffic statistics. debug cpu-traffic-stats Syntax Defaults Disabled Command Modes Command History EXEC Privilege Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 6.2.1.
PAGE 76
www.dell.com | support.dell.com Version 7.5.1.0 Introduced on C-Series E-Series original Command disable cesz Return to the EXEC mode. Syntax Parameters disable [level] level Defaults 1 Command Modes Command History (OPTIONAL) Enter a number for a privilege level of the FTOS. Range: 0 to 15. Default: 1 EXEC Privilege Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.
PAGE 77
Usage Information The following commands are not supported by the do command: • • • • Example enable disable exit config FTOS(conf-if-te-5/0)#do clear counters Clear counters on all interfaces [confirm] FTOS(conf-if-te-5/0)# FTOS(conf-if-te-5/0)#do clear logging Clear logging buffer [confirm] FTOS(conf-if-te-5/0)# FTOS(conf-if-te-5/0)#do reload System configuration has been modified.
PAGE 78
www.dell.com | support.dell.com enable optic-info-update interval Enable polling intervals of optical information updates for SNMP. Syntax enable optical-info-update interval seconds To disable optical power information updates, use the no enable optical-info-update interval command. Parameters interval seconds Defaults Disabled Command Modes Command History Enter the keyword interval followed by the polling interval in seconds.
PAGE 79
Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series and E-Series Usage Information The chassis MIB contain the entry chSysXfpRecvPower in the chSysPortTable table. Periodically, IFA polls the XFP power for each of the ports, and sends the values to IFM where it is cached. The default interval for the polling is 300 seconds (5 minutes). Use this command to enable the polling and to configure the polling frequency.
PAGE 80
www.dell.com | support.dell.com Command History Version 8.3.1.0 Added 2.4 micro-seconds option. ExaScale supports only 10.4 microseconds and 2.4 microseconds with FTOS 8.3.1.0 and later. Version 8.1.1.2 Introduced on E-Series ExaScale E600i Version 8.1.1.0 Introduced on E-Series ExaScale E1200i Version 6.2.1.1 Support for E300 introduced (10.4 only) Version 6.1.1.
PAGE 81
Related Commands banner exec Configure a banner to display when entering the EXEC mode. line Enable and configure console and virtual terminal lines to the system. exec-timeout ce s Syntax Set a time interval the system will wait for input on a line before disconnecting the session. exec-timeout minutes [seconds] To return to default settings, enter no exec-timeout.
PAGE 82
www.dell.com | support.dell.com Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series original Command Related Commands end Return to the EXEC Privilege command mode. ftp-server enable ces Enable FTP server functions on the system. Syntax ftp-server enable Defaults Disabled. Command Modes Command History CONFIGURATION Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.
PAGE 83
ftp-server topdir ces Syntax Parameters Defaults Command Modes Command History Specify the top-level directory to be accessed when an incoming FTP connection request is made. ftp-server topdir directory directory Enter the directory path. The internal flash is the default directory. CONFIGURATION Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.
PAGE 84
www.dell.com | support.dell.com Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series original Command hostname ces Set the host name of the system. Syntax Parameters hostname name name Defaults FTOS Command Modes Command History Enter a text string, up to 32 characters long. CONFIGURATION Version 8.3.12.0 Changed default from “Force10” to “FTOS” Version 8.1.1.
PAGE 85
Version 7.5.1.0 Introduced on C-Series E-Series original Command Usage Information The password is listed in the configuration file; you can view the password by entering the show running-config ftp command. The password configured by the ip ftp password command is used when you use the ftp: parameter in the copy command. Related Commands copy Copy files. ip ftp username Set the user name for FTP sessions.
PAGE 86
www.dell.com | support.dell.com Version 7.5.1.0 Introduced on C-Series E-Series original Command Related Commands copy Copy files from and to the switch. ip ftp username ces Assign a user name for outgoing FTP connection requests. Syntax Parameters ip ftp username username username Defaults No user name is configured. Command Modes Command History Enter a text string as the user name up to 40 characters long. CONFIGURATION Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.
PAGE 87
Related Commands Enable SSH server on the system. ip ssh server ip telnet source-interface ces Set an interface’s IP address as the source address in outgoing packets for Telnet sessions. ip telnet source-interface interface Syntax Parameters interface Defaults The IP address on the system that is closest to the Telnet address is used in the outgoing packets.
PAGE 88
www.dell.com | support.dell.com Parameters interface Defaults The IP address on the system that is closest to the Telnet address is used in the outgoing packets. Command Modes Command History Enter the following keywords and slot/port or number information: • For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 89
Defaults Command Modes Command History Not configured CONFIGURATION Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series original Command Usage Information Related Commands You cannot delete a terminal connection. access-class Restrict incoming connections to a particular IP address in an IP access control list (ACL). password Specify a password for users on terminal lines.
PAGE 90
www.dell.com | support.dell.
PAGE 91
Defaults Command Modes Command History Usage Information port-set0 port-number [port-number] Enter the port number(s) used to specify the active ports on port pipe 0. Port-number range: 0 - 2. On port pipe 0, 0 - 2 corresponds to ports 0, 1, and 2 on the line card. If you configure linerate mode, enter one port number for port pipe 0. If you configure oversubscribed mode, enter two port numbers (separated by a space).
PAGE 92
www.dell.com | support.dell.com module power-off ce Turn off power to a line card at next reboot. Syntax module power-off linecard number Parameters linecard number Defaults Not configured. Command Modes Command History Enter the keyword line card followed by the line card slot number C-Series Range: 0-7 E-Series Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a E300. CONFIGURATION Version 8.1.1.2 Introduced on E-Series ExaScale E600i Version 8.1.1.
PAGE 93
Syntax Parameter ping [vrf ] [host | ip-address | ipv6-address] [count {number | continuous}] [datagram-size] [timeout] [source (ip src-ipv4-address) | interface] [tos] [df-bit (y|n)] [validate-reply(y|n)] [outgoing-interface] [pattern pattern] [sweep-min-size] [sweep-max-size] [sweep-interval] [ointerface (ip src-ipv4-address) | interface] vrf (OPTIONAL) E-Series Only: Enter the VRF Instance name of the device to which you are testing connectivity.
PAGE 94
www.dell.com | support.dell.com Command History Version 8.3.19.0 Added support for outgoing-interface option for link-local IPv6 addressing on the S4820T. Version 8.3.12.0 Added support for outgoing-interface option for link-local IPv6 addressing on the S4810. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.4.1.0 IPv6 pinging available on management interface. Version 8.3.1.0 Introduced extended ping options. Version 8.2.1.
PAGE 95
The following table provides descriptions for the status response symbols displayed in output. Table 1 ping command Status Response Symbols and Descriptions Symbol Description ! Each exclamation point indicates receipt of a reply .
PAGE 96
www.dell.com | support.dell.com Syntax Parameters power-on {linecard number | sfm sfm-slot-id} linecard number Enter the keyword linecard and a number for the line card slot number. C-Series Range: 0-7 E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a E300. sfm standby Enter the keyword sfm followed by the slot number of the SFM to power on. Note: This option is supported on E-Series only. Defaults Disabled Command Modes Command History EXEC Privilege Version 8.1.1.
PAGE 97
Syntax Parameters reset {linecard number [hard | power-cycle] | rpm number [hard | power-cycle] | sfm slot number | standby} linecard number Enter the keyword linecard and a number for the line card slot number. (Optional) Add the keyword hard or power-cycle (power-cycle is C-Series only) to power cycle the line card. C-Series Range: 0-7 E-Series Range: 0 to 13 on E1200/E1200i, 0 to 6 on E600/E600i, and 0 to 5 on E300 hard Enter the keyword hard to power cycle the line card.
PAGE 98
www.dell.com | support.dell.com Parameters rpm slot number Enter the slot number E1200i: 0-13 E600i: 0-6 on |off Toggles the LED on the RPM on or off. Defaults OFF Command Modes EXEC Command History Version 8.2.1.0 Usage Information Introduced on the E-Series ExaScale The LED setting is not saved through power cycles. send ces Send messages to one or all terminal line users.
PAGE 99
service timestamps ces Add time stamps to debug and log messages. This command adds either the uptime or the current time and date. Syntax Parameters service timestamps [debug | log] [datetime [localtime] [msec] [show-timezone] | uptime] debug (OPTIONAL) Enter the keyword debug to add timestamps to debug messages. log (OPTIONAL) Enter the keyword log to add timestamps to log messages with severity 0 to 6.
PAGE 100
www.dell.com | support.dell.com Command Modes EXEC EXEC Privilege Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.
PAGE 101
Example (E-Series) FTOS#show chassis brief Chassis Type : E1200 Chassis Mode : TeraScale Chassis Epoch : 3.2 micro-seconds -- Line cards -Slot Status NxtBoot ReqTyp CurTyp Version Ports --------------------------------------------------------------------------0 not present 1 not present 2 not present 3 not present 4 not present 5 not present 6 not present 7 not present 8 not present 9 not present 10 not present 11 online online E48PF E48PF 6.1.1.
PAGE 102
www.dell.com | support.dell.com show command-history ces show command-history Syntax Defaults None. Command Mode EXEC EXEC Privilege Command History | H Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series and E-Series Usage Information One trace log message is generated for each command. No password information is saved to this file. A command-history trace log is saved to a file upon an RPM failover.
PAGE 103
show command-tree ces Display the entire CLI command tree, and optionally, display the utilization count for each commands and its options. Syntax show command-tree [count | no] Parameters count Display the command tree with a usage counter for each command. no Display all of the commands that may be preceded by the keyword no, which is the keyword used to remove a command from the running-configuration. Defaults None Command Mode EXEC EXEC Privilege Command History H Version 8.2.1.
PAGE 104
www.dell.com | support.dell.com Parameters number Defaults Enter the line card slot number. Range: 0–7 for the C300 Range: 0–13 for the E1200 Range: 0–6 for the E600 Range: 0–5 for the E300 None Command Mode EXEC EXEC Privilege Command History Version 7.5.1.0 Introduced on C-Series E-Series original Command Usage Information Caution: Use this command only when you are working directly with a technical support representative to troubleshoot a problem.
PAGE 105
Command History Example (E-Series) Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 6.2.1.
PAGE 106
www.dell.com | support.dell.com Generic IP: IP packet debugging is on for ManagementEthernet 0/0 Port-channel 1-2 Port-channel 5 GigabitEthernet 4/0-3,5-6,10-11,20 GigabitEthernet 5/0-1,5-6,10-11,15,17,19,21 ICMP packet debugging is on for GigabitEthernet 5/0,2,4,6,8,10,12,14,16 FTOS# show environment (C-Series and E-Series) ce View the system component status (for example, temperature, voltage).
PAGE 107
0 up < 50C 12-16V low/2100-2700 RPM up up up up up 1 up < 50C 12-16V low/2100-2700 RPM up up up up up 2 up < 50C 12-16V low/2100-2700 RPM up up up up up 3 up < 50C 12-16V low/2100-2700 RPM up up up up up 4 up < 50C 16-20V med/2700-3200 RPM up up up up up 5 up < 50C 12-16V low/2100-2700 RPM up up up up up -- Power Entry Modules -Bay Status --------------------------------------------------------------------------0 absent or down 1 up -- Line Card Environment Status -Slot Status Temp PEM0 PEM1 Voltage -------
PAGE 108
www.dell.com | support.dell.com FanNumber 0 1 2 3 4 5 FTOS# Speed 4170 4140 3870 4140 3870 3810 Status up up up up up up show environment (S-Series) s View S-Series system component status (for example, temperature, voltage). Syntax Parameters show environment [all | fan | stack-unit unit-id | pem] all Enter the keyword all to view all components. fan Enter the keyword fan to view information on the fans. The output of this command is chassis dependent.
PAGE 109
* Management Unit -- Fan Status -Unit Status Speed Fan1 Fan2 Fan3 Fan4 Fan5 Fan6 Serial Num Version ------------------------------------------------------------------------------1 up high up up up up up up 1234 1 Example (show environment fan) FTOS#show environment fan -- Fan Status ------------------------------------------------------------------------------Unit TrayStatus Fan0 Fan1 Fan2 Fan3 Fan4 Fan5 0 Example (show environment pem) Example (show environment stack-unit) up up up up up up
PAGE 110
www.dell.com | support.dell.com Version 6.2.1.0 Expanded to include Software Protocol Configured field on E-Series Version 5.3.1.0 Introduced on E-Series Usage Information The show inventory media command provides some details about installed pluggable media (SFP, XFP), as shown in the Example (show inventory media). Use the show interfaces command to get more details about installed pluggable media. The display output might include a double asterisk (**) next to the SFMs, for example: ... 0 1 ...
PAGE 111
4 0 0 1 1 0 LC-EF3-1GE-24P LC-EF3-RPM CC-E-SFM CC-E-SFM CC-E300-PWR-DC CC-E300-FAN 0017291 0031177 0019071 0019120 TDX0524-00031 N/A 7520014202 7520013808 7520003706 7520003706 7520015400 N/A 02 05 A A A N/A * - standby Software Protocol Configured -------------------------------------------------------------BFD BGP ISIS OSPF RIP OSPFV3 FTOS# Example (show inventory media slot) FTOS#show inventory media 3 Slot Port Type Media Serial Number F10Qualified -----------------------------------------------
PAGE 112
www.dell.com | support.dell.com Parameters media slot Defaults No default behavior or values Command Modes Command History CONFIGURATION Version 7.6.1.0 Usage Example (show inventory) (OPTIONAL) Enter the keyword media followed by the stack ID of the stack member for which you want to display pluggable media inventory. Introduced this version of the command for S-Series. S-Series output differs from E-Series.
PAGE 113
Related Commands show interfaces interface configuration. show interfaces transceiver Display the physical status and operational status of an installed transceiver. The output also displays the transceiver’s serial number. show linecard ce Display the line card(s) status. Syntax show linecard [number [brief] | all] Parameters Command Modes number (OPTIONAL) Enter a slot number to view information on the line card in that slot.
PAGE 114
www.dell.com | support.dell.com Example (C-Series) FTOS#show linecard 11 -- Line card Status Next Boot Required Type Current Type Hardware Rev Num Ports Up Time FTOS Version Jumbo Capable Boot Flash Memory Size Temperature Power Status Voltage Serial Number Part Number Vendor Id Date Code Country Code FTOS# Example (show linecard brief) 11 -: online : online : E48PF - 48-port GE line card with SFP optics (EF) : E48PF - 48-port GE line card with SFP optics (EF) : Base - 1.
PAGE 115
Table 4-1. Related Commands Descriptions for show linecard output Field Description Num Ports Displays the number of ports in the line card. Up Time Displays the number of hours and minutes the card is online. FTOS Version Displays the operating software version. Jumbo Capable Displays Yes or No indicating if the line card can support Jumbo frames. This field does not state whether the chassis is operating in EtherScale or TeraScale mode.
PAGE 116
www.dell.com | support.dell.com Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 6.5.1.4 Introduced on E-Series Example FTOS#show linecard boot-information -- Line cards -Serial Booted Next Cache Boot # Status CurType number from boot boot flash --------------------------------------------------------------------------------------------------0 online EXW4PF 012345 B: 6.5.1.4 6.5.1.4 A: invalid B: 6.5.1.4 A: 2.3.0.8 [b] B: invalid 1 - 2 online E48TF 0031318 2.3.0.6 B: 2.3.0.
PAGE 117
Related Commands show linecard View the line card status upgrade (E-Series version) Upgrade the boot flash, boot selector, or system image download alt-boot-image Download an alternate boot image to the chassis download alt-full-image Download an alternate FTOS image to the chassis download alt-system-image Download an alternate system image to the chassis show memory (C-Series and E-Series) ce View current memory usage on the system.
PAGE 118
www.dell.com | support.dell.
PAGE 119
Example (S4820T) FTOS#show memory stack 0 Statistics On Unit 0 Processor =========================== Total(b) Used(b) Free(b) 2147483648 4322398 2143161250 FTOS# Lowest(b) 2142548382 Largest(b) 2143161250 show processes cpu (C-Series and E-Series) ce View CPU usage information based on processes running in the system.
PAGE 120
www.dell.com | support.dell.com 0xd9cd200 soc_dpc 0xd9bf588 tARL 0xd9bd2f8 tBCMlink 0xd9bb0e0 tBcmTask 0xd9798d0 tNetTask 0xd3368a0 tWdbTask 0xd3329b0 tWdtTask 0xd32a8c8 tme 0xd16b1d8 ipc 0xd1680c8 irc 0xd156008 RpmAvailMgr 0xd153ab0 ev -more- Example (show processes cpu rp1) | Control and Monitoring 0 0 0 0 0 0.00% 0.00% 0.00% 0.00% 0.00% 0 0.00% 0 0 0 0 0.00% 0.00% 0.00% 0 700 42 16666 0.00% 0.00% 0.00% 0 106683 6401 16666 0.00% 0.00% 0.00% 0 0 0 0 0.00% 0.00% 0.
PAGE 121
0x00000002 pagedaemon 0x00000001 init 0x00000000 swapper 0x00000088 bgp Example (show processes cpu rp2) 0 0 160 16 700 10000 70 260 0 0.00% 10000 26 0.00% 0.00% 0.00% 10000 0.00% 0.00% 0.00% 0.00% 0.00% 0 0.00% 0.00% 0 0.
PAGE 122
www.dell.com | support.dell.com 0x00000000 swapper 0x00000098 msdp Usage Information 700 70 140 14 10000 10000 0.00% 0.00% 0.00% 0.00% 0.00% 0.00% 0 0 The CPU utilization for the last five seconds as shown in the first example is 4%/2%. The first number (4%) is the CPU utilization for the last five seconds. The second number (2%) indicates the percent of CPU time spent at the interrupt level.
PAGE 123
Unit2 0% Unit3 0% 0% 0% 0% 0% * Mgmt Unit Example (show processes cpu management-unit) Example (show processes cpu stack-unit) FTOS#show processes cpu management-unit 0 CPU utilization for five seconds: 1%/0%; one minute: 10%; five minutes: 2% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 272 20 2 10000 0.00% 0.00% 0.00% 0 topoDPC 271 0 0 0 0.00% 0.00% 0.00% 0 bcmNHOP 270 0 0 0 0.00% 0.00% 0.00% 0 bcmDISC 269 0 0 0 0.00% 0.00% 0.00% 0 bcmATP-RX 268 0 0 0 0.00% 0.00% 0.
PAGE 124
www.dell.com | support.dell.com 68 64 63 62 61 60 59 58 57 55 117 28 21 18 11 6 5 4 3 2 1 0 Example (show processes memory) Example (show processes memory stack-unit) 124 | Control and Monitoring 120 70 30 290 50 40 0 0 340 0 60 0 450 130 0 30 10 0 20 0 0 10 12 7 3 29 5 4 0 0 34 0 6 0 45 13 0 3 1 0 2 0 0 1 10000 10000 10000 10000 10000 10000 0 0 10000 0 10000 0 10000 10000 0 10000 10000 0 10000 0 0 10000 0.00% 0.00% 0.00% 0.00% 0.00% 0.00% 0.00% 0.00% 0.00% 0.00% 0.00% 0.00% 0.00% 0.00% 0.00% 0.
PAGE 125
========================================== start Total : 160231424, MaxUsed : 130596864 [09/19/2007 03:11:17] CurrentUsed: 130560000, CurrentFree: 29671424 SharedUsed : 14261872, SharedFree : 6709672 PID Process ResSize Size 124 KernLrnAgMv 140410880 0 117 frrp 5677056 217088 116 xstp 7585792 1536000 109 span 5709824 221184 108 pim 5869568 720896 103 igmp 5513216 327680 100 mrtm 6905856 516096 96 l2mgr 6107136 491520 92 l2pm 5607424 221184 86 arpm 5353472 208896 83 ospf 4210688 475136 80 dsm 6057984 552960
PAGE 126
www.dell.com | support.dell.com rp2 (OPTIONAL) Enter the keyword rp2 to view the Control Processor’s SWPQ statistics on Route Processor 2.* lp linecard-number (OPTIONAL) Enter the keyword lp followed by the line card number to view the Control Processor’s SWPQ statistics on the specified line card.* * In the S-Series, this command supports only the cp keyword, not the rp1, rp2, and lp options. Defaults No default values or behavior Command Modes EXEC EXEC Privilege Command History Version 8.1.1.
PAGE 127
IFMGR0 VRRP0 0 3 0 0 25 25 8 8 IFMGR0 MRTM0 0 2 0 0 21 21 8 8 TCLASSMGR0 ARPMGR0 0 0 0 0 0 0 100 100 IFMGR0 IPMGR2 0 6 0 0 44 44 8 8 !--------------------------output truncated ---------------------------------! Table 4-4 list the definitions of the fields shown in the examples above. Table 4-4.
PAGE 128
www.dell.com | support.dell.
PAGE 129
Parameters Command Modes cp (OPTIONAL) Enter the keyword cp to view memory usage of the Control Processor. lp slot-number (OPTIONAL) Enter the keyword lp and the slot number to view information on the line-card processor in that slot. C-Series Range: 0-7 E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a E300. lp all (OPTIONAL) Enter the keyword lp all to view CP memory usage on all active line cards.
PAGE 130
www.dell.com | support.dell.
PAGE 131
116 l2mgr 112 l2pm 108 arpm 104 acl2 100 sysd2 98 sysmon 36 sshd 34 inetd 32 mount_mfs 19 mount_mfs 6 sh 5 aiodoned 4 ioflush 3 reaper 2 pagedaemon 1 init 0 swapper FTOS# 4579328 3874816 3702784 3485696 11657216 528384 1286144 663552 41791488 364544 446464 76967936 76967936 76967936 76967936 139264 76967936 520192 225280 208896 94208 1679360 94208 430080 98304 2514944 2449408 737280 0 0 0 0 2375680 0 830098 367446 268420 132144 998834 0 0 0 0 0 0 0 0 0 0 0 0 0 32948 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 830098
PAGE 132
www.dell.com | support.dell.com Parameters management-unit Enter the keyword management-unit for CPU memory usage of the stack management unit. stack unit 0–7 Enter the keyword stack unit followed by a stack unit ID of the member unit for which to display memory usage on the forwarding processor. all Enter the keyword all for detailed memory usage on all stack members. summary Enter the keyword summary for a brief summary of memory availability and usage on all stack members.
PAGE 133
308 l2mgr 5607424 552960 735214 380972 301 l2pm 5001216 167936 1429522 1176044 298 arpm 4628480 217088 71092 33128 294 ospf 5468160 503808 724204 662560 288 dsm 6778880 1159168 39490 16564 287 rtm 5713920 602112 442280 198768 284 rip 4562944 258048 528 0 281 lacp 4673536 266240 221060 0 277 ipm1 4837376 380928 83788 0 273 acl 5005312 512000 239564 149076 272 topoDPC 117927936 0 0 0 271 bcmNHOP 117927936 0 0 0 270 bcmDISC 117927936 0 0 0 269 bcmATP-RX 117927936 0 0 0 268 bcmATP-TX 117927936 0 0 0 267 bcmSTAC
PAGE 134
www.dell.com | support.dell.com Command History Version 8.1.1.0 Introduced on E-Series ExaScale E-Series original Command Example FTOS#show processes switch-utilization Switch fabric utilization 5Sec 1Min 5Min -----------------------------------------------------3% 3% 3% Usage Information An asterisk ( * ) in the output indicates a legacy card that is not support by the show processes switch-utilization command. show rpm ce Show the current RPM status.
PAGE 135
Voltage Serial Number Part Number Vendor Id Date Code Country Code FTOS# : : : : : : ok 0016788 7520013800 Rev 01 01 06182004 01 Table 4-7 defines the fields displayed in the previous example. Table 4-7. Descriptions of show rpm output Field Description Status Displays the RPM’s status. Next Boot Displays whether the RPM is to be brought online at the next system reload. Card Type Displays the RPM catalog number. Hardware Rev Displays theE-Series chipset hardware revision level: 1.
PAGE 136
www.dell.com | support.dell.com Table 4-7. Related Commands Descriptions of show rpm output Field Description Temperature Displays the temperature of the RPM. Minor alarm status if temperature is over 65° C. Power Status Lists the status of the power modules in the chassis. Voltage Displays the power rails for the line card. Serial Num Displays the line card serial number. Part Num Displays the line card part number.
PAGE 137
ifcb interface Enter the keyword ifcb followed by one of the following interface IDs followed by the slot/port information to display interface control block information for that interface: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet. • For a Port Channel interface, enter the keyword port-channel followed by a number: C-Series and S-Series Range: 1-128 E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale and 1 to 512 for ExaScale.
PAGE 138
www.dell.com | support.dell.com show switch links c View the switch fabric backplane or internal status. Syntax Parameters show switch links {backplane | internal} backplane Enter the keyword backplane to view a table with information on the link status of the switch fabric backplane for both SFMs. internal Enter the keyword internal to view a table with information on the internal status of the switch fabric modules. Defaults None Command Modes EXEC Command History Version 7.5.1.
PAGE 139
Command Modes EXEC EXEC Privilege Command History Usage Example (show system) Version 7.8.1.0 Modified output: Boot Flash field will display code level for boot code 2.8.1.1 and newer, while older boot codes are displayed as “Present” Version 7.7.1.0 Modified output: Added Master Priority field. Version 7.6.1.0 Introduced for S-Series switches The second example shows the output from the show system brief command. The last example shows the output from the show system stack-unit command.
PAGE 140
www.dell.com | support.dell.
PAGE 141
Example (show system stack-unit) FTOS#show system stack-unit 0 -- Unit 0 -Unit Type Status Next Boot Required Type Current Type Master Priority Hardware Rev Num Ports Up Time FTOS Version Jumbo Capable POE Capable Boot Flash Memory Size Temperature Voltage Serial Number Part Number Vendor Id Date Code Country Code Burned In MAC No Of MACs --Module 0-Status Module Type Num Ports Hot Pluggable : : : : : : : : : : : : : : : : : : : : : : : Management Unit online online S50V - 48-port E/FE/GE with POE (SB) S
PAGE 142
www.dell.com | support.dell.com show hardware stack-unit Display the data plane and management plane input and output statistics of a particular stack member. stack-unit priority Configure the ability of an S-Series switch to become the management unit of a stack. show tech-support (C-Series and E-Series) ce Display, or save to a file, a collection of data from other show commands, the information necessary for Force10 Networks technical support to perform troubleshooting.
PAGE 143
----------------------------------- show HA information -------------------- RPM Status ------------------------------------------------RPM Slot ID: 0 RPM Redundancy Role: Primary RPM State: Active RPM SW Version: CS-1-1-317 Link to Peer: Down Peer RPM: not present -- RPM Redundancy Configuration ------------------------------------------------Primary RPM: rpm0 Auto Data Sync: Full Failover Type: Hot Failover Auto reboot RPM: Disabled Auto failover limit: 3 times in 60 minutes ...
PAGE 144
www.dell.com | support.dell.com flash: 520962048 bytes total (40189952 bytes free) FTOS# Usage Information Without the linecard or page option, the command output is continuous, use CNTL-z to interrupt the command output. The save option works with other filtering commands. This allows you to save specific information of a show command. The save entry should always be the last option.
PAGE 145
Parameters stack-unit (OPTIONAL) Enter the keyword stack-unit to view CPU memory usage for the stack member designated by unit-id. Range: 0 to 7 page (OPTIONAL) Enter the keyword page to view 24 lines of text at a time. Press the SPACE BAR to view the next 24 lines. Press the ENTER key to view the next line of text. When using the pipe command ( | ), enter one of these keywords to filter command output. Refer to Filtering show Commands in the CLI Basics chapter for details on filtering commands.
PAGE 146
www.dell.com | support.dell.com Dell Force10 Application Software Version: FTOS 7.6.1.0 Copyright (c) 1999-2007 by Dell Force10 Networks, Inc. Build Time: Tue Sep 12 15:39:17 IST 2006 Build Path: /sites/maa/work/sw/purushothaman/cser-latest/depot/main/Dev/ Cyclone/Force10 uptime is 18 minutes System Type: S50N Control Processor: MPC8451E with 255545344 bytes of memory. 32M bytes of Boot-Flash memory. 1 48-port E/FE/GE (SB) 48 GigabitEthernet/IEEE 802.3 interface(s) 4 Ten GigabitEthernet/IEEE 802.
PAGE 147
• • • • • • • • • Related Commands show interfaces show inventory show ip protocols show ip route summary show processes cpu show processes memory show redundancy show running-conf show version show version Display the FTOS version. show system (S-Series, S4810 and S4820T) Display the current switch status. show environment (S-Series) Display system component status. show processes memory (S-Series) Display memory usage based on running processes.
PAGE 148
www.dell.com | support.dell.com Syntax telnet {host | ip-address | ipv6-address | vrf vrf instance name} [source-interface] Parameters host (OPTIONAL) Enter the name of a server. ip-address (OPTIONAL) E-Series only. Enter the IPv4 address to which you are testing connectivity in dotted decimal format of the server. ipv6-address prefix-length (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format.
PAGE 149
Version 7.9.1.0 Introduced VRF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series and added support for IPv6 address on E-Series only Usage Information Telnet to link-local addresses is not supported. telnet-peer-rpm ce Open a Telnet connection to the peer RPM. Syntax telnet-peer-rpm Defaults Not configured. Command Modes EXEC EXEC Privilege Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.5.1.0 Introduced on C-Series Version 6.2.1.
PAGE 150
www.dell.com | support.dell.com Command Modes EXEC EXEC Privilege Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series original Command terminal xml ce Enable XML mode in Telnet and SSH client sessions. Syntax terminal xml To exit the XML mode, enter terminal no xml. Defaults Disabled Command Modes EXEC EXEC Privilege Command History Version 8.1.1.
PAGE 151
Defaults Command Modes ipv6-address Enter the IPv6 address, in the x:x:x:x::x format, to which you are testing connectivity. Note: The :: notation specifies successive hexadecimal fields of zeros outgoing-interfa ce (IPv6 link-local address) Enter one of the following types of outgoing interface for traceroute packets to a destination link-local address. • For an 100/1000 Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.
PAGE 152
www.dell.com | support.dell.com For IPv6, you are prompted for a minimum hop count (default is 1) and a maximum hop count (default is 64). Example (IPv4) FTOS#traceroute www.force10networks.com Translating "www.force10networks.com"...domain server (10.11.0.1) [OK] Type Ctrl-C to abort. -----------------------------------------------------------------------------------------Tracing the route to www.force10networks.com (10.11.84.
PAGE 153
Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.
PAGE 154
www.dell.com | support.dell.com Defaults No default behavior or values Command Modes Command History CONFIGURATION Version 8.4.1.0 Added support for IPv6 addressing. Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.5.1.0 Introduced on C-Series E-Series original Command Usage Information Both IPv4 and IPv6 virtual address can be configured simultaneously, but only one of each.
PAGE 155
5 802.1ag Overview 802.
PAGE 156
www.dell.com | support.dell.com • traceroute ethernet ccm disable Disable CCM. s Syntax ccm disable Enter no ccm disable to enable CCM. Defaults Command Modes Command History Disabled ECFM DOMAIN Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.3.1.0 Introduced on S-Series ccm transmit-interval Configure the transmit interval (mandatory). The interval specified applies to all MEPs in the domain.
PAGE 157
Defaults Command Modes Command History None EXEC Privilege Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.3.1.0 Introduced on S-Series database hold-time Set the amount of time that data from a missing MEP is kept in the Continuity Check Database. s Syntax Parameters Defaults Command Modes Command History database hold-time minutes minutes Enter a hold-time. Range: 100-65535 minutes 100 minutes ECFM DOMAIN Version 8.3.19.
PAGE 158
www.dell.com | support.dell.com domain Create a maintenance domain. s Syntax Parameters domain name md-level number name Name the maintenance domain. md-level number Enter a maintenance domain level. Range: 0-7 Defaults None Command Modes Command History ETHERNET CFM Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.3.1.0 Introduced on S-Series ethernet cfm Spawn the CFM process. No CFM configuration is allowed until the CFM process is spawned.
PAGE 159
Parameters Defaults Command Modes Command History [up-mep | down-mep] Specify whether the MEP is up or down facing. Up-MEP: monitors the forwarding path internal to an bridge on the customer or provider edge; on Dell Force10 systems the internal forwarding path is effectively the switch fabric and forwarding engine. Down-MEP: monitors the forwarding path external another bridge. domain [name | level] Enter this keyword followed by the domain name or domain level.
PAGE 160
www.dell.com | support.dell.com Syntax Parameters mep cross-check mep-id mep-id Defaults None Command Modes Command History Enter the MEP ID Range: 1-8191 ECFM DOMAIN Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.3.1.0 Introduced on S-Series mep cross-check enable Enable cross-checking. s mep cross-check enable {port | vlan-id} Syntax Parameters Defaults Command Modes Command History port Down service with no VLAN association.
PAGE 161
Command History Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.3.1.0 Introduced on S-Series ping ethernet Send a Loopback message. s Syntax Parameters ping ethernet domain [name l level] ma-name m a-name remote {dest-mep-id | mac-addr mac-address} source {src-mep-id | port interface} name | level Enter the domain name or level. ma-name ma-name Enter the keyword followed by the maintenance association name.
PAGE 162
www.dell.com | support.dell.com Command History Example Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.3.1.
PAGE 163
show ethernet cfm maintenance-points remote Display the MEP database. s Syntax Parameters Defaults Command Modes Command History Example show ethernet cfm maintenance-points remote detail [active | domain {level | name} expired | waiting] | active Enter this keyword to display only the MEPs in active state. domain [name | level] Enter this keyword followed by the domain name or domain level. expired Enter this keyword to view MEP entries that have expired due to connectivity failure.
PAGE 164
www.dell.com | support.dell.com Version 8.3.7.0 Introduced on the S4810 Version 8.3.1.0 Introduced on S-Series show ethernet cfm statistics Display MEP statistics. s Syntax Parameters show ethernet cfm statistics [domain {name | level} vlan-id vlan-id mpid mpid] domain Enter this keyword to display statistics for a particular domain. name | level Enter the domain name or level. vlan-id vlan-id Enter this keyword followed by a VLAN ID.
PAGE 165
Parameters Defaults Command Modes Command History Example interface type Enter this keyword followed by the interface type. slot/port Enter the slot and port numbers for the port. None EXEC Privilege Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.3.1.
PAGE 166
www.dell.com | support.dell.
PAGE 167
Version 8.3.7.0 Introduced on the S4810 Version 8.3.1.0 Introduced on S-Series traceroute cache size Set the size of the Link Trace Cache. s Syntax Parameters Defaults Command Modes Command History traceroute cache size entries entries Enter the number of entries the Link Trace Cache can hold. Range: 1 - 4095 entries 100 entries ETHERNET CFM Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.3.1.
PAGE 168
| 802.1ag www.dell.com | support.dell.
PAGE 169
6 802.1X The 802.
PAGE 170
www.dell.com | support.dell.com Important Points to Remember FTOS limits network access for certain users by using VLAN assignments. 802.1X with VLAN assignment has these characteristics when configured on the switch and the RADIUS server. 802.1X is supported on c C-Series, e E-Series, s S-Series (S25/S50), , and E-Series Terascale e t. 802.1X is not supported on the LAG or the channel members of a LAG. If no VLAN is supplied by the RADIUS server or if 802.
PAGE 171
Defaults Disabled Command Modes Command History EXEC Privilege Version 8.3.19.0 Introduced on the S4820T Version 8.3.12.0 Introduced on the S4810 Version 8.4.1.0 Introduced on C-Series and S-Series dot1x auth-fail-vlan ces Configure an authentication failure VLAN for users and devices that fail 802.1X authentication. dot1x auth-fail-vlan vlan-id [max-attempts number] Syntax To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id [max-attempts number] command.
PAGE 172
www.dell.com | support.dell.com Related Commands dot1x port-control Enable port control on an interface. dot1x guest-vlan Configure a guest VLAN for limited access users or for devices that are not 802.1X capable. show dot1x interface Display the 802.1X configuration of an interface. dot1x auth-server ces Configure the authentication server to RADIUS. Syntax dot1x auth-server radius Defaults No default behavior or values Command Modes Command History CONFIGURATION Version 8.3.19.
PAGE 173
In MAB-only authentication mode, a port authenticates using the host MAC address even though 802.1xauthentication is enabled. If the MAB-only authentication fails, the host is placed in the guest VLAN (if configured). To disable MAB-only authentication on a port, enter the no dot1x auth-type mab-only command. Related Commands dot1x mac-auth-bypass Enable MAC authentication bypass.
PAGE 174
www.dell.com | support.dell.com Command History Related Commands Version 8.3.19.0 Introduced on the S4820T Version 8.3.12.0 Introduced on the S4810 Version 7.6.1.0 Introduced on C-Series and S-Series Version 7.4.1.0 Introduced on E-Series dot1x authentication (Configuration) Enable dot1x globally. dot1x guest-vlan ces Configure a guest VLAN for limited access users or for devices that are not 802.1X capable.
PAGE 175
Related Commands dot1x auth-fail-vlan Configure an authentication failure VLAN. dot1x reauthentication Enable periodic re-authentication of the client. dot1x reauth-max Configure the maximum number of times to re-authenticate a port before it becomes unauthorized. dot1x host-mode ces Syntax Parameters Defaults Command Modes Command History Usage Information Enable single-host or multi-host authentication.
PAGE 176
www.dell.com | support.dell.com Command Modes Command History Usage Information INTERFACE Version 8.3.19.0 Introduced on the S4820T Version 8.3.12.0 Introduced on the S4810 Version 8.4.1.0 Introduced on C-Series and S-Series To disable MAC authentication bypass on a port, enter the no dot1x mac-auth-bypass command. dot1x max-eap-req ces Syntax Configure the maximum number of times an EAP (Extensive Authentication Protocol) request is transmitted before the session times out.
PAGE 177
Parameters number Defaults 128 hosts can be authenticated on a single authenticator port. Command Modes Command History Related Commands Enter the number of supplicants that can be authenticated on a single port in multi-auth mode. Range: 1-128 Default: 128 INTERFACE Version 8.3.19.0 Introduced on the S4820T Version 8.3.12.0 Introduced on the S4810 Version 8.4.1.
PAGE 178
www.dell.com | support.dell.com dot1x quiet-period ces Syntax Set the number of seconds that the authenticator remains quiet after a failed authentication with a client. dot1x quiet-period seconds To disable quiet time, use the no dot1x quiet-time command. Parameters Defaults Command Modes Command History seconds Enter the number of seconds. Range: 1 to 65535 Default: 60 60 seconds INTERFACE Version 8.3.19.0 Introduced on the S4820T Version 8.3.12.0 Introduced on the S4810 Version 7.6.1.
PAGE 179
Version 7.6.1.0 Introduced on C-Series and S-Series Version 7.4.1.0 Introduced on E-Series dot1x reauth-max ces Syntax Configure the maximum number of times a port can re-authenticate before the port becomes unauthorized. dot1x reauth-max number To return to the default, use the no dot1x reauth-max command. Parameters Defaults Command Modes Command History number Enter the permitted number of re-authentications. Range: 1 - 10 Default: 2 2 INTERFACE Version 8.3.19.
PAGE 180
www.dell.com | support.dell.com Command History Usage Information Version 8.3.19.0 Introduced on the S4820T Version 8.3.12.0 Introduced on the S4810 Version 7.6.1.0 Introduced on C-Series and S-Series Version 7.4.1.0 Introduced on E-Series When you configure the dot1x server-timeout value, you must take into account the communication medium used to communicate with an authentication server and the number of RADIUS servers configured.
PAGE 181
dot1x tx-period ces Syntax Configure the intervals at which EAPOL PDUs are transmitted by the Authenticator PAE. dot1x tx-period seconds To return to the default, use the no dot1x tx-period command. Parameters Defaults Command Modes Command History seconds Enter the interval time, in seconds, that EAPOL PDUs are transmitted. Range: 1 to 65535 Default: 30 30 seconds INTERFACE Version 8.3.19.0 Introduced on the S4820T Version 8.3.12.0 Introduced on the S4810 Version 7.6.1.
PAGE 182
www.dell.com | support.dell.com Command History Usage Information Version 8.3.19.0 Introduced on the S4820T Version 8.3.12.0 Introduced on the S4810 Version 8.4.2.1 Introduced on the C-Series and S-Series Enter a supplicant’s MAC address using the mac-address option to display CoS mapping information only for the specified supplicant. You can display the CoS mapping information applied to traffic from authenticated supplicants on 802.
PAGE 183
Parameters Defaults Command Modes interface Enter one of the following keywords and slot/port or number information: • For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information. • For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information. mac-address (Optional) MAC address of a supplicant.
PAGE 184
www.dell.com | support.dell.com FTOS# Example (show dot1x interface mac-address) FTOS#show dot1x interface gig 2/21 mac-address 00:00:01:00:07:00 802.
PAGE 185
Port status and State info for Supplicant: 00:00:00:00:00:11 Port Auth Status: Untagged VLAN id: Auth PAE State: Backend State: AUTHORIZED 300 Authenticated Idle Port status and State info for Supplicant: 00:00:00:00:00:15 Port Auth Status: Untagged VLAN id: Auth PAE State: Backend State: AUTHORIZED(GUEST-VLAN) 100 Authenticated Idle 802.
PAGE 186
| 802.1X www.dell.com | support.dell.
PAGE 187
7 Access Control Lists (ACL) Overview Access Control Lists (ACLs) are supported by FTOS on all Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , or .
PAGE 188
www.dell.com | support.dell.com • show config description ces Configure a short text string describing the ACL. Syntax Parameters description text text Defaults Enter a text string up to 80 characters long. Not enabled. Command Modes CONFIGURATION-STANDARD-ACCESS-LIST CONFIGURATION-EXTENDED-ACCESS-LIST CONFIGURATION-MAC ACCESS LIST-STANDARD CONFIGURATION-MAC ACCESS LIST-EXTENDED Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.
PAGE 189
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST CONFIGURATION-EXTENDED-ACCESS-LIST CONFIGURATION-MAC ACCESS LIST-STANDARD CONFIGURATION-MAC ACCESS LIST-EXTENDED Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series pre-Version 6.4.1.
PAGE 190
www.dell.com | support.dell.com CONFIGURATION-MAC ACCESS LIST-STANDARD CONFIGURATION-MAC ACCESS LIST-EXTENDED Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.2.1.
PAGE 191
Parameters access-list-name Defaults Not configured. Command Modes Command History Enter the name of a configured Standard ACL, up to 140 characters. LINE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.6.1.0 Support added for S-Series Version 7.5.1.
PAGE 192
www.dell.com | support.dell.com out Enter the keyword out to apply the ACL to outgoing traffic. Note: Available only on 12-port 1-Gigabit Ethernet FLEX line card. Refer to your line card documentation for specifications. Not available on S-Series. implicit-permit (OPTIONAL) Enter the keyword implicit-permit to change the default action of the ACL from implicit-deny to implicit-permit (that is, if the traffic does not match the filters in the ACL, the traffic is permitted instead of dropped).
PAGE 193
Parameters access-list-name Enter the name of a configured MAC ACL, up to 140 characters. interface interface Enter the keyword interface followed by the one of the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 194
www.dell.com | support.dell.com cam_count List the count of the CAM rules for this ACL. interface interface Enter the keyword interface followed by the interface type and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 195
Standard IP ACL Commands When an ACL is created without any rule and then applied to an interface, ACL behavior reflects an implicit permit. c and s platforms support Ingress IP ACLs only. The commands needed to configure a Standard IP ACL are: • • • • • • deny ip access-list standard permit resequence access-list resequence prefix-list ipv4 seq Note: Refer also to Commands Common to all ACL Types and Common IP ACL Commands. deny ces Configure a filter to drop packets with a certain IP address.
PAGE 196
www.dell.com | support.dell.com byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. log (OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log. dscp (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values. order (OPTIONAL) Enter the keyword order to specify the QoS order of priority for the ACL entry.
PAGE 197
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented. Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead. Related Commands ip access-list standard Configure a standard ACL. permit Configure a permit filter. ip access-list standard ces Create a standard IP access list (IP ACL) to filter based on IP address.
PAGE 198
www.dell.com | support.dell.com Related Commands ip access-list extended Create an extended access list. show config Display the current configuration. permit ces Configure a filter to permit packets from a specific source IP address to leave the switch.
PAGE 199
Command Modes Command History CONFIGURATION-STANDARD-ACCESS-LIST Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.3.1.0 Add DSCP value for ACL matching. Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series Version 7.4.1.0 Added support for non-contiguous mask and added the monitor option.
PAGE 200
www.dell.com | support.dell.com StartingSeqNum Enter the starting sequence number to resequence. Range: 0 to 4294967290 Step-to-Increment Enter the step to increment the sequence number. Range: 1 to 4294967290 Defaults No default values or behavior Command Modes EXEC EXEC Privilege Command History Version 8.2.1.0 Introduced on E-Series ExaScale (IPv6) Version 8.1.1.0 Introduced on E-Series ExaScale (IPv4) Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.
PAGE 201
Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series Version 7.4.1.0 Introduced Usage Information When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing prefix list. Prior to 7.8.1.0, names are up to 16 characters long. Related Commands resequence access-list Resequence an access-list seq ces Assign a sequence number to a deny or permit filter in an IP access list while creating the filter.
PAGE 202
www.dell.com | support.dell.com order (OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry. Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
PAGE 203
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details. Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead. Related Commands deny Configure a filter to drop packets. permit Configure a filter to forward packets.
PAGE 204
www.dell.com | support.dell.com • seq Note: Refer also to Commands Common to all ACL Types and Common IP ACL Commands. deny ces Configure a filter that drops IP packets meeting the filter criteria.
PAGE 205
Defaults Command Modes Command History Usage Information order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
PAGE 206
www.dell.com | support.dell.com deny udp Assign a filter to deny UDP packets. ip access-list extended Create an extended ACL. deny arp e Configure an egress filter that drops ARP packets on egress ACL supported line cards (refer to your line card documentation).
PAGE 207
order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) Default: If the order keyword is not used, the ACLs have the lowest order by default (255). monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface.
PAGE 208
www.dell.com | support.dell.com To remove this filter, use one of the following: • • Parameters protocol-type-number Enter a number from 600 to FFFF as the specific Ethernet type traffic to drop. destination-mac-address mac-address-mask Enter a MAC address and mask in the nn:nn:nn:nn:nn format. For the MAC address mask, specify which bits in the MAC address must match.
PAGE 209
Command History Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Added monitor option Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry. Usage Information The order option is relevant in the context of the Policy QoS feature only. Refer to the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
PAGE 210
www.dell.com | support.dell.com message-type (OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type (ICMP message types are listed in Table 7-2). Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
PAGE 211
Table 7-2 lists the keywords displayed in the CLI help and their corresponding ICMP Message Type Name. Table 7-2.
PAGE 212
www.dell.com | support.dell.com Table 7-2.
PAGE 213
Defaults Command Modes bit Enter a flag or combination of bits: ack: acknowledgement field fin: finish (no more data from the user) psh: push function rst: reset the connection syn: synchronize sequence numbers urg: urgent field operator (OPTIONAL) Enter one of the following logical operand: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port command parameter.
PAGE 214
www.dell.com | support.dell.com Command History Version 8.3.1.0 Added dscp keyword. Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series Version 7.4.1.0 Added support for non-contiguous mask and added the monitor option. Deprecated established keyword. Version 6.5.
PAGE 215
But an ACL rule with TCP port lt 1023 takes only one entry in the CAM: Rule# 1 Data Mask From 0000000000000000 1111110000000000 0 To #Covered 1023 1024 Total Ports: 1024 Related Commands deny Assign a filter to deny IP traffic. deny udp Assign a filter to deny UDP traffic. deny udp ces Configure a filter to drop UDP packets meeting the filter criteria.
PAGE 216
www.dell.com | support.dell.com count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. log (OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log. Supported on Jumbo-enabled line cards only. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 217
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt, lt, range) may require more than one entry. The range of ports is configured in the CAM based on bit mask boundaries; the space required depends on exactly what ports are included in the range.
PAGE 218
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.10.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.2.1.
PAGE 219
Defaults Command Modes Command History Usage Information any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host followed by the IP address to specify a host IP address. destination Enter the IP address of the network or host to which the packets are sent. count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
PAGE 220
www.dell.com | support.dell.com The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented. The monitor option is relevant in the context of flow-based monitoring only. Refer to the Port Monitoring chapter. Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
PAGE 221
Defaults Command Modes Command History Usage Information count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. log (OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 222
www.dell.com | support.dell.com permit ether-type e Configure a filter that allows traffic with specified types of Ethernet packets. This command is supported only on 12-port GE line cards with SFP optics; refer to your line card documentation for specifications.
PAGE 223
Defaults Command Modes Command History Usage Information order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
PAGE 224
www.dell.com | support.dell.com • • Parameters source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host followed by the IP address to specify a host IP address.
PAGE 225
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details. The monitor option is relevant in the context of the flow-based monitoring feature only. Refer to the Port Monitoring chapter. Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
PAGE 226
www.dell.com | support.dell.com operator (OPTIONAL) Enter one of the following logical operand: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two port for the port parameter.) port port Enter the application layer port number. Enter two port numbers if using the range logical operand. Range: 0 to 65535.
PAGE 227
Usage Information Version 7.4.1.0 Added support for non-contiguous mask and added the monitor option. Deprecated established keyword. Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry. The order option is relevant in the context of the Policy QoS feature only. Refer to the Quality of Service chapter of the FTOS Configuration Guide for more information. Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value.
PAGE 228
www.dell.com | support.dell.com Related Commands ip access-list extended Create an extended ACL. permit Assign a permit filter for IP packets. permit udp Assign a permit filter for UDP packets. permit udp ces Configure a filter to pass UDP packets meeting the filter criteria.
PAGE 229
Defaults Command Modes Command History Usage Information order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
PAGE 230
www.dell.com | support.dell.
PAGE 231
Command History Usage Information Related Commands Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series Version 7.4.1.0 Introduced for E-Series When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing access-list.
PAGE 232
www.dell.com | support.dell.com seq arp e Configure an egress filter with a sequence number that filters ARP packets meeting this criteria. This command is supported only on 12-port GE line cards with SFP optics; refer to your line card documentation for specifications.
PAGE 233
Command Modes Command History CONFIGURATION-EXTENDED-ACCESS-LIST Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Added monitor option Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry. Usage Information The monitor option is relevant in the context of the flow-based monitoring feature only. Refer to the Port Monitoring chapter.
PAGE 234
www.dell.com | support.dell.com permit Enter the keyword permit to forward all traffic meeting the filter criteria. protocol-type-number Enter a number from 600 to FFFF as the specific Ethernet type traffic to drop. destination-mac-address mac-address-mask Enter a MAC address and mask in the nn:nn:nn:nn:nn format. For the MAC address mask, specify which bits in the MAC address must match.
PAGE 235
Usage Information The monitor option is relevant in the context of the flow-based monitoring feature only. Refer to the Port Monitoring chapter. When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details. The order option is relevant in the context of the Policy QoS feature only.
PAGE 236
www.dell.com | support.dell.com 236 | ip Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list will permit all IP protocols. tcp Enter the keyword tcp to configure a TCP access list filter. udp Enter the keyword udp to configure a UDP access list filter. source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.
PAGE 237
Defaults Command Modes Command History Usage Information monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, refer to the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide. fragments Enter the keyword fragments to use ACLs to control packet fragments.
PAGE 238
www.dell.com | support.dell.com If the sequence-number is configured, then the sequence-number is used as a tie breaker for rules with the same order. Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead. Related Commands deny Configure a filter to drop packets. permit Configure a filter to forward packets.
PAGE 239
Syntax Parameters Defaults Command Modes Command History Usage Information mac access-group access-list-name {in [vlan vlan-range] | out} access-list-name Enter the name of a configured MAC access list, up to 140 characters. vlan vlan-range (OPTIONAL) Enter the keyword vlan followed a range of VLANs. Note that this option is available only with the in keyword option. Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094) in Enter the keyword in to configure the ACL to filter incoming traffic.
PAGE 240
www.dell.com | support.dell.com Parameters access-list-name Enter the name of a configured MAC ACL, up to 140 characters. interface interface Enter the keyword interface followed by the one of the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 241
Command History Example Usage Information Related Commands Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.
PAGE 242
www.dell.com | support.dell.com deny ces Configure a filter to drop packets with a the MAC address specified. Syntax deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log] [monitor] To remove this filter, you have two choices: • • Parameters any Enter the keyword any to specify that all traffic is subject to the filter. mac-source-address Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-source-address-mask (OPTIONAL) Specify which bits in the MAC address must match.
PAGE 243
Usage Information Related Commands When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details. permit Configure a MAC address filter to pass packets. seq Configure a MAC address filter with a specified sequence number.
PAGE 244
www.dell.com | support.dell.com Example FTOS(conf)#mac access-list access-list standard TestMAC FTOS(config-std-macl)#? deny Specify packets to reject description List description exit Exit from access-list configuration mode no Negate a command or set its defaults permit Specify packets to forward remark Specify access-list entry remark seq Sequence numbers show Show Standard ACL configuration permit ces Configure a filter to forward packets from a specific source MAC address.
PAGE 245
Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead. Usage Information Related Commands When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
PAGE 246
www.dell.com | support.dell.com Defaults Not configured. Command Modes Command History CONFIGURATION-MAC ACCESS LIST-STANDARD Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 7.4.1.0 Added monitor option pre-Version 6.1.1.0 Introduced for E-Series Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value.
PAGE 247
To remove this filter, you have two choices: • • Parameters Defaults Command Modes Use the no seq sequence-number command syntax if you know the filter’s sequence number or Use the no deny {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac-address | mac-destination-address mac-destination-address-mask} command. any Enter the keyword any to drop all packets. host mac-address Enter the keyword host followed by a MAC address to drop packets with that host address.
PAGE 248
www.dell.com | support.dell.com Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 7.4.1.0 Added monitor option pre-Version 6.1.1.0 Introduced for E-Series Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
PAGE 249
Example FTOS(conf)#mac-access-list access-list extended TestMATExt FTOS(config-ext-macl)#remark 5 IPv4 FTOS(config-ext-macl)#seq 10 permit any any ev2 eq 800 count bytes FTOS(config-ext-macl)#remark 15 ARP FTOS(config-ext-macl)#seq 20 permit any any ev2 eq 806 count bytes FTOS(config-ext-macl)#remark 25 IPv6 FTOS(config-ext-macl)#seq 30 permit any any ev2 eq 86dd count bytes FTOS(config-ext-macl)#seq 40 permit any any count bytes FTOS(config-ext-macl)#exit FTOS(conf)#do show mac accounting access-list snic
PAGE 250
www.dell.com | support.dell.com mac-destination-address-mask Specify which bits in the MAC address must be matched. The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. ethertype operator (OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes: • ev2 - is the Ethernet II frame format. • llc - is the IEEE 802.3 frame format. • snap - is the IEEE 802.
PAGE 251
seq ces Configure a filter with a specific sequence number. Syntax Parameters Defaults Command Modes seq sequence-number {deny | permit} {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac-address | mac-destination-address mac-destination-address-mask} [ethertype operator] [count [byte]] [log] [monitor] sequence-number Enter a number as the filter sequence number. Range: zero (0) to 65535. deny Enter the keyword deny to drop any traffic matching this filter.
PAGE 252
www.dell.com | support.dell.com Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 7.4.1.0 Added monitor option pre-Version 6.1.1.0 Introduced for E-Series Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
PAGE 253
Command Modes Command History EXEC Privilege Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series Default Related Commands Clears “hit” counters for all prefix lists unless a prefix list is specified. ip prefix-list Configure a prefix list.
PAGE 254
www.dell.com | support.dell.com ip prefix-list ces Enter the PREFIX-LIST mode and configure a prefix list. Syntax Parameters ip prefix-list prefix-name prefix-name Command Modes Command History Enter a string up to 16 characters long as the name of the prefix list, up to 140 characters long. CONFIGURATION Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.6.1.
PAGE 255
Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series Usage Information Sequence numbers for this filter are automatically assigned starting at sequence number 5. If the options ge or le are not used, only packets with an exact match to the prefix are filtered. Related Commands deny Configure a filter to drop packets.
PAGE 256
www.dell.com | support.dell.com Version 7.5.1.0 Added support for C-Series Version 6.3.1.0 Added bit mask option Usage Information Related Commands If the options ge or le are not used, only packets with an exact match to the prefix are filtered. deny Configure a filter to drop packets. permit Configure a filter to pass packets. show config ces Display show config Syntax Command Modes Command History the current PREFIX-LIST configurations. PREFIX-LIST Version 8.1.1.
PAGE 257
Example Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series FTOS#show ip prefix-list detail Prefix-list with the last deletion/insertion: filter_ospf ip prefix-list filter_in: count: 3, range entries: 3, sequences: 5 - 10 seq 5 deny 1.102.0.0/16 le 32 (hit count: 0) seq 6 deny 2.1.0.0/16 ge 23 (hit count: 0) seq 10 permit 0.0.0.0/0 le 32 (hit count: 0) ip prefix-list filter_ospf: count: 4, range entries: 1, sequences: 5 - 10 seq 5 deny 100.100.1.
PAGE 258
www.dell.com | support.dell.
PAGE 259
• • • • • • set next-hop set origin set tag set weight show config show route-map continue ces Syntax Parameters Defaults Command Modes Command History Usage Information Configure a route-map to go to a route-map entry with a higher sequence number. continue [sequence-number] sequence-number (OPTIONAL) Enter the route map sequence number. Range: 1 - 65535 Default: no sequence number Not Configured ROUTE-MAP Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.
PAGE 260
www.dell.com | support.dell.com • If the next route map entry does not contain a continue clause, the route map evaluates normally. If a match does not does not occur, the route map does not continue and will fall through to the next sequence number, if one exists. Set clause with Continue clause If the route-map entry contains sets with the continue clause, then set actions is performed first followed by the continue clause jump to the specified route map entry.
PAGE 261
Command Modes Command History Related Commands ROUTE-MAP Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series set as-path Add information to the BGP AS_PATH attribute.
PAGE 262
www.dell.com | support.dell.com Parameters interface Defaults Not configured Command Modes Command History Related Commands Enter the following keywords and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/ port information. • For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For the loopback interface, enter the keyword loopback followed by a number from zero (0) to 16383.
PAGE 263
Command Modes Command History Related Commands ROUTE-MAP Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series match interface Redistribute routes that match the next-hop interface.
PAGE 264
www.dell.com | support.dell.com match route-type Redistribute routes that match a route type. match tag Redistribute routes that match a specific tag. match ip route-source ces Configure a filter to match based on the routes advertised by routes specified in IP access lists or IP prefix lists. Syntax Parameters match ip route-source {access-list | prefix-list prefix-list-name} access-list-name Enter the name of a configured IP access list, up to 140 characters.
PAGE 265
Command History Related Commands Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series match interface Redistribute routes that match the next-hop interface. match ip address Redistribute routes that match an IP address. match ip next-hop Redistribute routes that match the next-hop IP address.
PAGE 266
www.dell.com | support.dell.com level-1 Enter the keyword level-1 to match IS-IS Level 1 routes. level-2 Enter the keyword level-2 to match IS-IS Level 2 routes. local Enter the keyword local to match only on routes generated within the switch. Defaults Not configured. Command Modes Command History Related Commands ROUTE-MAP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.
PAGE 267
Related Commands Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series match interface Redistribute routes that match the next-hop interface. match ip address Redistribute routes that match an IP address. match ip next-hop Redistribute routes that match the next-hop IP address. match ip route-source Redistribute routes that match routes advertised by other routers. match metric Redistribute routes that match a specific metric.
PAGE 268
www.dell.com | support.dell.com Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series \ Example FTOS(conf)#route-map dempsey FTOS(config-route-map)# Usage Information Use caution when you delete route maps because if you do not specify a sequence number, all route maps with the same map-name are deleted when you use no route-map map-name command. Prior to 7.8.1.0, names are up to 16 characters long. Related Commands show config Display the current configuration.
PAGE 269
neighbor filter-list Configure a BGP filter based on the AS-PATH attribute. show ip community-lists Display configured IP Community access lists. set automatic-tag ces Configure a filter to automatically compute the tag value of the route. set automatic-tag Syntax To return to the default, enter no set automatic-tag. Defaults Not configured. Command Modes Command History Related Commands ROUTE-MAP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.
PAGE 270
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.
PAGE 271
no-export Enter the keywords no-export to drop all routes containing the well-known community attribute of NO_EXPORT. All routes with the NO_EXPORT (0xFFFFFF01) community attribute must not be advertised outside a BGP confederation boundary. none Enter the keywords none to remove the community attribute from routes meeting the route map criteria. additive (OPTIONAL) Enter the keyword additive add the communities to already existing communities.
PAGE 272
www.dell.com | support.dell.com Command Modes Command History Related Commands ROUTE-MAP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series set automatic-tag Compute the tag value of the route. set metric Specify the metric value assigned to redistributed routes.
PAGE 273
set metric ces Configure a filter to assign a new metric to redistributed routes. Syntax set metric [+ | -] metric-value To delete a setting, enter no set metric. Parameters + (OPTIONAL) Enter + to add a metric-value to the redistributed routes. - (OPTIONAL) Enter - to subtract a metric-value from the redistributed routes. metric-value Defaults Not configured Command Modes Command History Related Commands Enter a number as the new metric value.
PAGE 274
www.dell.com | support.dell.com type-1 Enter the keyword type-1 to assign the OSPF Type 1 metric. type-2 Enter the keyword type-2 to assign the OSPF Type 2 metric. Defaults Not configured. Command Modes Command History Related Commands ROUTE-MAP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.3.1.0 Implemented internal keyword Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Support added for S-Series Version 7.5.1.
PAGE 275
If you configure the set next-hop command with the interface’s (either Loopback or physical) IP address, the software declares the route unreachable. Related Commands match ip next-hop Redistribute routes that match the next-hop IP address. neighbor next-hop-self Configure the routers as the next hop for a BGP neighbor. set origin ces Configure a filter to manipulate the BGP ORIGIN attribute.
PAGE 276
www.dell.com | support.dell.com Command Modes Command History Related Commands ROUTE-MAP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series set automatic-tag Compute the tag value of the route. set level Specify the OSPF area for route redistribution.
PAGE 277
show config ces Display show config Syntax Command Modes Command History the current route map configuration. ROUTE-MAP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.
PAGE 278
www.dell.com | support.dell.com Example Related Commands FTOS#show route-map route-map firpo, permit, sequence 10 Match clauses: Set clauses: tag 34 FTOS# route-map Configure a route map. AS-Path Commands This feature is supported on E-Series only, as indicated by this character under each command heading: e The following commands configure AS-Path ACLs.
PAGE 279
Defaults Not configured Command Modes AS-PATH ACL Usage Information Command History The regular expression must match part of the ASCII-text in the AS-PATH attribute of the BGP route. Version 8.1.1.0 Introduced on E-Series ExaScale pre-Version 6.1.1.0 Introduced for E-Series ip as-path access-list Enter the AS-PATH ACL mode and configure an access control list based on the BGP AS_PATH attribute.
PAGE 280
www.dell.com | support.dell.com Parameters as-regular-expression Enter a regular expression to match BGP AS-PATH attributes. Use one or a combination of the following: • . = (period) matches on any single character, including white space • * = (asterisk) matches on sequences in a pattern (zero or more sequences) • + = (plus sign) matches on sequences in a pattern (one or more sequences) • ? = (question mark) matches sequences in a pattern (0 or 1 sequences).
PAGE 281
Command Modes EXEC EXEC Privilege Command History Example Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale pre-Version 6.1.1.0 Introduced for E-Series FTOS#show ip as-path-access-lists ip as-path access-list 1 permit ^$ permit ^$.*$$ deny .* ip as-path access-list 91 permit ^$ deny .* permit ^\(.
PAGE 282
www.dell.com | support.dell.com no-advertise Enter the keywords no-advertise to drop all routes containing the well-known community attribute of NO_ADVERTISE. All routes with the NO_ADVERTISE (0xFFFFFF02) community attribute must not be advertised to other BGP peers. no-export Enter the keywords no-export to drop all routes containing the well-known community attribute of NO_EXPORT.
PAGE 283
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. pre-Version 6.1.1.0 Introduced for E-Series permit e Configure a filter to forward routes that match the route’s COMMUNITY attribute.
PAGE 284
www.dell.com | support.dell.com Command Modes Command History COMMUNITY-LIST Version 8.1.1.0 Introduced on E-Series ExaScale pre-Version 6.1.1.0 Introduced for E-Series show config e Display Syntax show config Command Mode Command History the non-default information in the current configuration. COMMUNITY-LIST Version 8.1.1.0 Introduced on E-Series ExaScale pre-Version 6.1.1.
PAGE 285
Example FTOS#show ip community-lists ip community-list standard 1 deny 701:20 deny 702:20 deny 703:20 deny 704:20 deny 705:20 deny 14551:20 deny 701:112 deny 702:112 deny 703:112 deny 704:112 deny 705:112 deny 14551:112 deny 701:666 deny 702:666 deny 703:666 deny 704:666 deny 705:666 deny 14551:666 FTOS# Access Control Lists (ACL) | 285
PAGE 286
| Access Control Lists (ACL) www.dell.com | support.dell.
PAGE 287
8 Bidirectional Forwarding Detection (BFD) Overview Bidirectional Forwarding Detection (BFD) is a detection protocol that provides fast forwarding path failure detection. The FTOS implementation is based on the standards specified in the IETF Draft draft-ietf-bfd-base-03 and supports BFD on all Layer 3 physical interfaces including VLAN interfaces and port-channels. BFD is supported on the C-Series c, E-Series e, and as indicated by the characters that appear under each of the command headings.
PAGE 288
www.dell.com | support.dell.com bfd all-neighbors Enable BFD sessions with all neighbors discovered by Layer 3 protocols IS-IS, OSPF, or BGP on router interfaces, and (optionally) reconfigure the default timer values. ce Syntax Parameters Defaults Command Modes bfd all-neighbors [interval interval min_rx min_rx multiplier value role {active | passive}] interval milliseconds (OPTIONAL) Enter this keyword to specify non-default BFD session parameters beginning with the transmission interval.
PAGE 289
Usage Information All neighbors inherit the timer values configured with the bfd all-neighbors command except in the following cases: • • Related Commands Timer values configured with the isis bfd all-neighbors or ip ospf bfd all-neighbors commands in INTERFACE mode override timer values configured with the bfd all-neighbors command. Likewise, using the no bfd all-neighbors command does not disable BFD on an interface if BFD is explicitly enabled using the command isis bfd all-neighbors.
PAGE 290
www.dell.com | support.dell.com Defaults Command Modes Command History BFD is disabled by default. CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.10.0 Introduced on S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on C-Series Version 7.4.1.0 Introduced on E-Series bfd enable (Interface) Enable BFD on an interface.
PAGE 291
multiplier value Enter this keyword to specify the number of packets that must be missed in order to declare a session down. Range: 3 to 50 Default: 3 role [active | passive] Enter the role that the local system assumes: • Active—The active system initiates the BFD session. Both systems can be active for the same session. • Passive—The passive system does not initiate a session. It only responds to a request for session initialization from the active system.
PAGE 292
www.dell.com | support.dell.com Related Commands Version 7.5.1.0 Added support for VLAN and port-channel interfaces on E-Series. Version 7.4.1.0 Introduced on E-Series show bfd neighbors Display BFD neighbor information on all interfaces or a specified interface. bfd protocol-liveness Enable the BFD protocol liveness feature. e Syntax Defaults Command Modes Command History Usage Information bfd protocol-liveness Disabled CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.10.
PAGE 293
Parameters interface Defaults None Command Modes Command History Related Commands (OPTIONAL) Enter one of the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by the slot/port information. • For a SONET interface, enter the keyword sonet followed by the slot/ port information.
PAGE 294
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information interface Enter one of the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by the slot/port information. • For a SONET interface, enter the keyword sonet followed by the slot/port information.
PAGE 295
Parameters Defaults Command Modes Command History Related Commands interval milliseconds (OPTIONAL) Enter this keyword to specify non-default BFD session parameters beginning with the transmission interval. Range: 50 to 1000 Default: 100 interval milliseconds (OPTIONAL) Enter this keyword to specify non-default BFD session parameters beginning with the transmission interval.
PAGE 296
www.dell.com | support.dell.com Related Commands Enable BFD sessions with all neighbors discovered by Layer 3 protocols IS-IS, OSPF or BFP on router interfaces. neighbor bfd disable Explicitly disable a BFD session with a BFP neighbor or a BFP peer group. show bfd neighbors Display BFD neighbor information on all interfaces or a specified interface. isis bfd all-neighbors e Enable BFD on all IS-IS neighbors discovered on an interface.
PAGE 297
Use the keyword disable to disable BFD on a specific interface while BFD is configured in from CONFIGURATION mode. neighbor bfd ex Syntax Parameters Defaults Command Modes Command History Usage Information Explicitly enable a BFD session with a BGP neighbor or a BGP peer group. neighbor {ip-address | peer-group-name} bfd ip-address Enter the IP address of the BGP neighbor that you want to explicitly enable for BFD sessions in dotted decimal format (A.B.C.D).
PAGE 298
www.dell.com | support.dell.com neighbor bfd disable ex Syntax Parameters Defaults Command Modes Command History Usage Information Explicitly disable a BFD session with a BGP neighbor or a BGP peer group. neighbor {ip-address | peer-group-name} bfd disable ip-address Enter the IP address of the BGP neighbor that you want to explicitly disable for BFD sessions in dotted decimal format (A.B.C.D). peer-group-name Enter the name of the peer group that you want to explicitly disable for BFD sessions.
PAGE 299
Syntax Parameters Defaults Command Modes show bfd counters [bgp | isis | ospf | vrrp | static-route] [interface] interface Enter one of the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by the slot/port information. • For a SONET interface, enter the keyword sonet followed by the slot/port information.
PAGE 300
www.dell.com | support.dell.com show bfd neighbors Display BFD neighbor information on all interfaces or a specified interface. ce Syntax Parameters Defaults Command Modes show bfd neighbors interface [detail] interface Enter one of the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.
PAGE 301
Example FTOS#show bfd neighbors * Ad Dn B C I O R - Active session role Admin Down BGP CLI ISIS OSPF Static Route (RTM) LocalAddr * 10.1.3.2 FTOS# Example (show bfd neighbors detail) Related Commands RemoteAddr 10.1.3.1 Interface State Rx-int Tx-int Mult Clients Gi 1/3 Up 300 250 3 C FTOS#show bfd neighbors detail Session Discriminator: 1 Neighbor Discriminator: 1 Local Addr: 10.1.3.2 Local MAC Addr: 00:01:e8:02:15:0e Remote Addr: 10.1.3.
PAGE 302
www.dell.com | support.dell.com Defaults Command Modes Command History 302 | interval milliseconds (OPTIONAL) Enter this keyword to specify non-default BFD session parameters beginning with the transmission interval. Range: 50 to 1000 Default: 100 interval milliseconds (OPTIONAL) Enter this keyword to specify non-default BFD session parameters beginning with the transmission interval.
PAGE 303
9 Border Gateway Protocol IPv4 (BGPv4) Overview BGPv4 is supported as shown in the following table. FTOS version Platform support 8.3.19.0 S4820T 8.3.11.1 Z9000 8.3.7.0 S4810 8.1.1.0 E-Series ExaScale ex 7.8.1.0 S-Series s 7.7.1.0. C-Series c pre-7.7.1.0 E-Series TeraScale et z For detailed information on configuring BGP, refer to the BGP chapter in the FTOS Configuration Guide.
PAGE 304
www.dell.com | support.dell.com BGPv4 Commands Border Gateway Protocol (BGP) is an external gateway protocol that transmits interdomain routing information within and between Autonomous Systems (AS). BGP version 4 (BGPv4) supports Classless InterDomain Routing (CIDR) and the aggregation of routes and AS paths. Basically, two routers (called neighbors or peers) exchange information including full routing tables and periodically send messages to update those routing tables. Note: FTOS Version 7.7.
PAGE 305
• • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • bgp recursive-bgp-next-hop bgp regex-eval-optz-disable bgp router-id bgp soft-reconfig-backup capture bgp-pdu neighbor capture bgp-pdu max-buffer-size clear ip bgp clear ip bgp dampening clear ip bgp flap-statistics debug ip bgp debug ip bgp dampening debug ip bgp events debug ip bgp keepalives debug ip bgp notifications debug ip bgp soft-reconfiguration debug ip bgp updates default-metric description distance bgp max-paths nei
PAGE 306
www.dell.com | support.dell.
PAGE 307
address-family ces Enable the IPv4 multicast or the IPv6 address family. Syntax address-family [ipv4 multicast| ipv6unicast] Parameters ipv4 multicast Enter BGPv4 multicast mode. ipv6 unicast Enter BGPv6 mode. Defaults Not configured. Command Modes ROUTER BGP Command History . Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 6.5.1.
PAGE 308
www.dell.com | support.dell.com Defaults Not configured. Command Modes ROUTER BGP ADDRESS FAMILY ROUTER BGP ADDRESS FAMILY IPv6 Usage Information At least one of the routes included in the aggregate address must be in the BGP routing table for the configured aggregate to become active. Do not add the as-set parameter to the aggregate, if routes within the aggregate are constantly changing as the aggregate will flap to keep track of the changes in the AS_PATH.
PAGE 309
Defaults Enter this keyword to indicate that the system will send and accept multiple paths from peers. count Enter the number of paths supported. Range: 2-64 Disabled Command Modes ROUTER BGP Related Commands Command History both neighbor add-path Specify that this neighbor/peer group can send/receive multiple path advertisements. . Version 8.3.19.0 Introduced on the S4820T. Version 8.3.8.0 Introduced on the S4810.
PAGE 310
www.dell.com | support.dell.com bgp asnotation ces Syntax Enables you to implement a method for AS Number representation in the CLI. bgp asnotation [asplain | asdot+ | asdot] To disable a dot or dot+ representation and return to ASPLAIN, enter no bgp asnotation. Defaults Command Modes Usage Information asplain ROUTER BGP You must enable bgp four-octet-as-support before enabling this feature. If you disable four-octect-support after using dot or dot+ format, the AS Numbers revert to asplain text.
PAGE 311
bgp asnotation asdot+ FTOS(conf)#router bgp 1 FTOS(conf-router_bgp)#bgp asnotation asplain FTOS(conf-router_bgp)#ex FTOS(conf)#do show run |grep bgp router bgp 1 bgp four-octet-as-support FTOS(conf)# bgp bestpath as-path ignore ces Syntax Ignore the AS PATH in BGP best path calculations. bgp bestpath as-path ignore To return to the default, enter no bgp bestpath as-path ignore.
PAGE 312
www.dell.com | support.dell.com Defaults Command Modes Usage Information Command History Disabled ROUTER BGP The bestpath router bgp configuration mode command changes the default bestpath selection algorithm. The multipath-relax option allows load-sharing across providers with different (but equal-length) autonomous system paths. Without this option, ECMP expects the AS paths to be identical for load-sharing. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.4 Introduced on the Z9000.
PAGE 313
To return to the default selection, use the no bgp bestpath med missing-as-best command. Defaults Command Modes Usage Information Command History Disabled ROUTER BGP The MED is a 4-byte unsigned integer value and the default behavior is to assume a missing MED as 4294967295. This command causes a missing MED to be treated as 0. During the path selection, paths with a lower MED are preferred over those with a higher MED. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810.
PAGE 314
www.dell.com | support.dell.com Syntax bgp client-to-client reflection To disable client-to-client reflection, enter no bgp client-to-client reflection. Defaults Enabled when a route reflector is configured. Command Modes ROUTER BGP Usage Information Related Commands Command History Route reflection to clients is not necessary if all client routers are fully meshed. bgp cluster-id Assign ID to a BGP cluster with two or more route reflectors.
PAGE 315
Related Commands Command History bgp client-to-client reflection Enable route reflection between route reflector and clients. neighbor route-reflector-client Configure a route reflector and clients. show ip bgp cluster-list View paths with a cluster ID. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.
PAGE 316
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Added support for 4-Byte format bgp confederation peers ces Syntax Specify the Autonomous Systems (ASs) that belong to the BGP confederation. bgp confederation peers as-number [...as-number] To return to the default, enter no bgp confederation peers.
PAGE 317
Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Added support for 4-byte format bgp dampening ces Enable BGP route dampening and configure the dampening parameters. Syntax bgp dampening [half-life reuse suppress max-suppress-time] [route-map map-name] To disable route dampening, use the no bgp dampening [half-life reuse suppress max-suppress-time] [route-map map-name] command.
PAGE 318
www.dell.com | support.dell.com Related Commands Command History show ip bgp dampened-paths View the BGP paths Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series bgp default local-preference ces Change the default local preference value for routes exchanged between internal BGP peers.
PAGE 319
Syntax bgp enforce-first-as To turn off the default, use the no bgp enforce-first-as command. Defaults Command Modes Usage Information Enabled ROUTER BGP This is enabled by default, that is for all updates received from EBGP peers, BGP ensures that the first AS of the first AS segment is always the AS of the peer. If not, the update is dropped and a counter is incremented. Use the show ip bgp neighbors command to view the “failed enforce-first-as check counter.
PAGE 320
www.dell.com | support.dell.com bgp four-octet-as-support ces Syntax Enable 4-byte support for the BGP process. bgp four-octet-as-support To disable fast external fallover, enter no bgp four-octet-as-support. Defaults Command Modes Usage Information Disabled (supports 2-Byte format) ROUTER BGP Routers supporting 4-Byte ASNs advertise that function in the OPEN message. The behavior of a 4-Byte router will be slightly different depending on whether it is speaking to a 2-Byte router or a 4-Byte router.
PAGE 321
Parameters Defaults Command Modes Usage Information restart-time seconds Enter the keyword restart-time followed by the maximum number of seconds needed to restart and bring-up all the peers. Range: 1 to 3600 seconds Default: 120 seconds stale-path-time seconds Enter the keyword stale-path-time followed by the maximum number of seconds to wait before restarting a peer’s stale paths. Default: 360 seconds.
PAGE 322
www.dell.com | support.dell.com Command History Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series bgp non-deterministic-med ces Syntax Compare MEDs of paths from different Autonomous Systems. bgp non-deterministic-med To return to the default, enter no bgp non-deterministic-med. Defaults Command Modes Usage Information Disabled (that is, paths/routes for the same destination but from different ASs will not have their MEDs compared).
PAGE 323
Command Modes Usage Information ROUTER BGP This command is a knob to disable BGP next-hop resolution via BGP learned routes. During the next-hop resolution, only the first route that the next-hop resolves through is verified for the route’s protocol source and is checked if the route is learned from BGP or not. The clear ip bgp command is required for this command to take effect and to keep the BGP database consistent. Execute the clear ip bgp command right after executing this command.
PAGE 324
www.dell.com | support.dell.com Related Commands show ip protocols Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Version 7.6.1.0 Introduced Example View information on all routing protocols enabled and active on the E-Series.
PAGE 325
Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series bgp soft-reconfig-backup ces Syntax Use this command only when route-refresh is not negotiated to avoid the peer from resending messages. bgp soft-reconfig-backup To return to the default setting, use the no bgp soft-reconfig-backup command.
PAGE 326
www.dell.com | support.dell.com Syntax capture bgp-pdu neighbor ipv4-address direction {both | rx | tx} To disable capture of the IPv4 BGP neighbor packet, use the no capture bgp-pdu neighbor ipv4-address command. Parameters ipv4-address Enter the IPv4 address of the target BGP neighbor. direction {both | rx | tx} Enter the keyword direction and a direction— either rx for inbound, tx for outbound, or both. Defaults Not configured.
PAGE 327
Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Version 7.5.1.0 Introduced clear ip bgp ces Reset BGP sessions on the E-Series. The soft parameter (BGP Soft Reconfiguration) clears the policies without resetting the TCP connection. Syntax Parameters clear ip bgp * | as-number | ip-address [flap-statistics | soft [in | out]] * Enter an asterisk ( * ) to reset all BGP sessions. as-number Enter the AS number to reset all neighbors belonging to that AS.
PAGE 328
www.dell.com | support.dell.com clear ip bgp peer-group ces Syntax Parameters Command Modes Command History Reset a peer-group’s BGP sessions. clear ip bgp peer-group peer-group-name peer-group-name Enter the peer group name to reset the BGP sessions within that peer group. EXEC Privilege Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.
PAGE 329
clear ip bgp flap-statistics ces Clear BGP flap statistics, which includes number of flaps and the time of the last flap. Syntax clear ip bgp flap-statistics [ip-address mask | filter-list as-path-name | regexp regular-expression] Parameters ip-address mask (OPTIONAL) Enter an IP address in dotted decimal format and the prefix mask in slash format (/x) to reset only that prefix. filter-list as-path-name (OPTIONAL) Enter the keyword filter-list followed by the name of a configured AS-PATH list.
PAGE 330
www.dell.com | support.dell.com debug ip bgp ces Display all information on BGP, including BGP events, keepalives, notifications, and updates. Syntax debug ip bgp [ip-address | peer-group peer-group-name] [in | out] To disable all BGP debugging, enter no debug ip bgp. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group Enter the keyword peer-group followed by the name of the peer group.
PAGE 331
Syntax debug ip bgp dampening [in | out] To disable debugging, enter no debug ip bgp dampening. Parameters in (OPTIONAL) Enter the keyword in to view only inbound dampened routes. out (OPTIONAL) Enter the keyword out to view only outbound dampened routes. Command Modes EXEC Privilege Usage Information Related Commands Command History Enter no debug ip bgp command to remove all configured debug commands for BGP. show debugging View enabled debugging operations.
PAGE 332
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series debug ip bgp keepalives ces Display information about BGP keepalive messages. Syntax debug ip bgp [ip-address | peer-group peer-group-name] keepalives [in | out] To disable debugging, use the no debug ip bgp [ip-address | peer-group command.
PAGE 333
To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] notifications [in | out] command. Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group (OPTIONAL) Enter the keyword peer-group followed by the name of the peer group. peer-group-name Command Modes Usage Information Command History in (OPTIONAL) Enter the keyword in to view BGP notifications received from neighbors.
PAGE 334
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Version 7.2.1.0 Introduced debug ip bgp updates ces Enables you to view information about BGP updates. Syntax debug ip bgp updates [in | out | prefix-list prefix-list-name] To disable debugging, use the no debug ip bgp [ip-address | peer-group command.
PAGE 335
Syntax default-metric number To return to the default setting, enter no default-metric. Parameters Defaults Command Modes Usage Information Related Commands Command History number Enter a number as the metric to be assigned to routes from other protocols. Range: 1 to 4294967295. 0 ROUTER BGP The default-metric command in BGP sets the value of the BGP MULTI_EXIT_DISC (MED) attribute for redistributed routes only. bgp always-compare-med Enable comparison of all BGP MED attributes.
PAGE 336
www.dell.com | support.dell.com Related Commands router bgp Enter ROUTER mode on the switch. distance bgp ces Syntax Configure three administrative distances for routes. distance bgp external-distance internal-distance local-distance To return to default values, enter no distance bgp. Parameters external-distance Enter a number to assign to routes learned from a neighbor external to the AS.
PAGE 337
max-paths cesz Configure the maximum number of parallel routes (multipath support) BGP supports. Syntax max-paths {ebgp | ibgp} number To return to the default values, enter no max-paths. Parameters Defaults Command Modes Usage Information ebgp Enter the keyword ebgp to enable multipath support for External BGP routes. ibgp Enter the keyword ibgp to enable multipath support for Internal BGP routes. number Enter a number as the maximum number of parallel paths.
PAGE 338
www.dell.com | support.dell.com Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group-name (OPTIONAL) Enter the name of the peer group activate Enter the keyword activate to enable the neighbor/peer group in the new AFI/SAFI.
PAGE 339
Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.8.0 Introduced on the S4810. neighbor advertisement-interval ces Syntax Set the advertisement interval between BGP neighbors or within a BGP peer group. neighbor {ip-address | peer-group-name} advertisement-interval seconds To return to the default value, use the no neighbor {ip-address | peer-group-name} advertisement-interval command.
PAGE 340
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History ip-address Enter the IP address of the neighbor in dotted decimal format. seconds Enter a number as the time interval, in seconds, before BGP route updates are sent. Range: 0 to 3600 seconds. none ROUTER BGP Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.
PAGE 341
neighbor default-originate ces Inject the default route to a BGP peer or neighbor. Syntax neighbor {ip-address | peer-group-name} default-originate [route-map map-name] To remove a default route, use the no neighbor {ip-address | peer-group-name} default-originate command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group to set the default route of all routers in that peer group.
PAGE 342
www.dell.com | support.dell.com Defaults Not configured. Command Modes ROUTER BGP Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series neighbor distribute-list ces Distribute BGP information via an established prefix list.
PAGE 343
neighbor ebgp-multihop ces Attempt and accept BGP connections to external peers on networks that are not directly connected. Syntax neighbor {ip-address | peer-group-name} ebgp-multihop [ttl] To disallow and disconnect connections, use the no neighbor {ip-address | command. peer-group-name} ebgp-multihop Parameters Defaults Command Modes Usage Information Command History ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group.
PAGE 344
www.dell.com | support.dell.com Command Modes ROUTER BGP Usage Information Related Commands Command History When fall-over is enabled, BGP keeps track of IP or IPv6 reachability to the peer remote address and the peer local address. Whenever either address becomes unreachable (i.e, no active route exists in the routing table for peer IP or IPv6 destination/local address), BGP brings down the session with the peer. show ip bgp neighbors Display information on the BGP neighbors Version 8.3.19.
PAGE 345
Related Commands Command History ip as-path access-list Enter AS-PATH ACL mode and configure AS-PATH filters. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Increased name string to accept up to 140 characters. Prior to 7.8.1.0, ACL names are up to 16 characters long. Version 7.7.1.0 Introduced support on C-Series neighbor graceful-restart ces Syntax Enable graceful restart on a BGP neighbor.
PAGE 346
www.dell.com | support.dell.com neighbor local-as ces Syntax Configure Internal BGP (IBGP) routers to accept external routes from neighbors with a local AS number in the AS number path neighbor {ip-address | peer-group-name} local-as as-number [no-prepend] To return to the default value, use the no neighbor {ip-address | peer-group-name} local-as command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format.
PAGE 347
Parameters Defaults Command Modes Usage Information Related Commands Command History ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group. maximum Enter a number as the maximum number of prefixes allowed for this BGP router. Range: 1 to 4294967295. threshold (OPTIONAL) Enter a number to be used as a percentage of the maximum value.
PAGE 348
www.dell.com | support.dell.com Parameters Defaults Command Modes Usage Information Command History ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group. Disabled. ROUTER BGP If the set next-hop command in the ROUTE-MAP mode is configured, its configuration takes precedence over the neighbor next-hop-self command. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 349
If you specify a BGP peer group by using the peer-group-name parameter, all the members of the peer group will inherit the characteristic configured with this command.
PAGE 350
www.dell.com | support.dell.com • • • • • • • neighbor advertisement-interval neighbor distribute-list out neighbor filter-list out neighbor next-hop-self neighbor route-map out neighbor route-reflector-client neighbor send-community A neighbor may keep its configuration after it was added to a peer group if the neighbor’s configuration is more specific than the peer group’s, and the neighbor’s configuration does not affect outgoing updates. A peer group must exist before you add a peer to it.
PAGE 351
Related Commands Command History neighbor peer-group (assigning peers) Assign routers to a peer group. neighbor remote-as Assign a indirectly connected AS to a neighbor or peer group. neighbor shutdown Disable a peer or peer group. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.
PAGE 352
www.dell.com | support.dell.com Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series neighbor remote-as ces Create and specify the remote peer to the BGP neighbor. Syntax neighbor {ip-address | peer-group-name} remote-as number To delete a remote AS entry, use the no neighbor {ip-address | peer-group-name} remote-as number command.
PAGE 353
neighbor remove-private-as ces Syntax Remove private AS numbers from the AS-PATH of outgoing updates. neighbor {ip-address | peer-group-name} remove-private-as To return to the default, use the no neighbor {ip-address | peer-group-name} remove-private-as command. Parameters Defaults Command Modes Usage Information ip-address Enter the IP address of the neighbor to remove the private AS numbers.
PAGE 354
www.dell.com | support.dell.com To remove the route map, use the no neighbor {ip-address | peer-group-name} route-map map-name {in | out} command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group. map-name Enter the name of an established route map. If the Route map is not configured, the default is deny (to drop all routes). in Enter the keyword in to filter inbound routes.
PAGE 355
Command Modes Usage Information ROUTER BGP A route reflector reflects routes to the neighbors assigned to the cluster. Neighbors in the cluster do not need not be fully meshed. By default, when no route reflector is used, internal BGP (IBGP) speakers in the network must be fully meshed. The first time you enter this command the router is configured as a route reflector and the specified BGP neighbors are configured as clients in the route-reflector cluster.
PAGE 356
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series neighbor shutdown ces Syntax Disable a BGP neighbor or peer group. neighbor {ip-address | peer-group-name} shutdown To enable a disabled neighbor or peer group, use the neighbor {ip-address | peer-group-name} no shutdown command.
PAGE 357
neighbor soft-reconfiguration inbound ces Enable soft-reconfiguration for BGP. Syntax neighbor {ip-address | peer-group-name} soft-reconfiguration inbound To disable, use the no neighbor {ip-address | peer-group-name} soft-reconfiguration inbound command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group to disable or enable all routers within the peer group.
PAGE 358
www.dell.com | support.dell.com Parameters subnet-number Enter a subnet number in dotted decimal format (A.B.C.D.) as the allowable range of addresses included in the Peer group. To allow all addresses, enter 0.0.0.0/0. mask Enter a prefix mask in / prefix-length format (/x). Defaults Not configured. Command Modes ROUTER BGP Command History Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.
PAGE 359
• Command History whichever is the lower value; one-third of the new holdtime value, or the configured keepalive value is the new keepalive value. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series neighbor update-source ces Enable the E-Series software to use Loopback interfaces for TCP connections for BGP sessions.
PAGE 360
www.dell.com | support.dell.com Syntax neighbor {ip-address | peer-group-name} weight weight To remove a weight value, use the no neighbor {ip-address | peer-group-name} weight command. Parameters Defaults Command Modes Usage Information ip-address Enter the IP address of the peer router in dotted decimal format. peer-group-name Enter the name of the peer group to disable all routers within the peer group. weight Enter a number as the weight.
PAGE 361
Parameters ip-address Enter an IP address in dotted decimal format of the network. mask Enter the mask of the IP address in the slash prefix length format (for example, / 24). The mask appears in command outputs in dotted decimal format (A.B.C.D). route-map (OPTIONAL) Enter the keyword route-map followed by the name of an established route map.
PAGE 362
www.dell.com | support.dell.com Defaults Not configured. Command Modes ROUTER BGP Usage Information Command History Though FTOS does not generate a route due to backdoor config, there is an option for injecting/sourcing a local route in presence of network backdoor config on a learned route. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.
PAGE 363
Usage Information With FTOS version 8.3.1.0 and later, the redistribute command can be used to advertise the IGP cost as the MED on redistributed routes. When the route-map is set with metric-type internal and applied outbound to an EBGP peer/peer-group, the advertised routes corresponding to those peer/peer-group will have IGP cost set as MED.
PAGE 364
www.dell.com | support.dell.com metric metric-value (OPTIONAL) Enter the keyword metric followed by the metric value used for the redistributed route. Use a metric value that is consistent with the destination protocol. Range: 0 to 16777215 Default: 0 route-map map-name Enter the keyword route-map followed by the map name that is an identifier for a configured route map. The route map should filter imported routes from the source routing protocol to the current routing protocol.
PAGE 365
Parameters process-id Enter the number of the OSPF process. Range: 1 to 65535 match external {1 | 2} (OPTIONAL) Enter the keywords match external to redistribute OSPF external routes. You can specify 1 or 2 to redistribute those routes only. match internal (OPTIONAL) Enter the keywords match internal to redistribute OSPF internal routes only. route-map map-name (OPTIONAL) Enter the keywords route-map followed by the name of a configured Route map. Defaults Not configured.
PAGE 366
www.dell.com | support.dell.com Command Modes Example Command History Usage Information CONFIGURATION FTOS(conf)#router bgp 3 FTOS(conf-router_bgp)# Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series At least one interface must be in Layer 3 mode for the router bgp command to be accepted.
PAGE 367
Related Commands Command History capture bgp-pdu max-buffer-size Specify a size for the capture buffer. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Version 7.5.1.0 Introduced show config ces Syntax Command Modes Example Command History View the current ROUTER BGP configuration.
PAGE 368
www.dell.com | support.dell.com Parameters ipv4 unicast (OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes. network (OPTIONAL) Enter the network address (in dotted decimal format) of the BGP network to view information only on that network. network-mask (OPTIONAL) Enter the network mask (in slash prefix format) of the BGP network address. longer-prefixes (OPTIONAL) Enter the keyword longer-prefixes to view all routes with a common prefix.
PAGE 369
show ip bgp Command Example Fields Table 9-1. Related Commands Command History Field Description LocPrf Displays the BGP LOCAL_PREF attribute for the route. Weight Displays the route’s weight Path Lists all the ASs the route passed through to reach the destination network. show ip bgp community View BGP communities. neighbor maximum-prefix Control number of network prefixes received. Version 8.3.19.0 Added the add-path option to the S4820T. Output on the S4820T shows ADDPATH parameters.
PAGE 370
www.dell.com | support.dell.com * I * I * I 10.19.75.5/32 * I *>I * I * I * I * I 10.30.1.0/24 * I *>I * I * I * I 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 100 100 100 100 100 100 100 100 100 100 100 100 100 100 0 0 0 0 0 0 0 0 0 0 0 0 0 0 i i ? ? ? ? ? ? ? ? ? ? ? ? Table 9-2 defines the information displayed in the previous example. Table 9-2.
PAGE 371
Parameters Command Modes ipv4 unicast (OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes. community-number Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system. You can specify up to eight community numbers to view information on those community groups. local-AS Enter the keywords local-AS to view all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED.
PAGE 372
www.dell.com | support.dell.com The show ip bgp community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp command output. Command Example Fields: show ip bgp community Table 9-3. Command History Field Description Network Displays the destination network prefix of each BGP route. Next Hop Displays the next hop address of the BGP router. If 0.0.0.
PAGE 373
FTOS# The show ip bgp community-list command without any parameters lists BGP routes matching the Community List and the output is the same as for the show ip bgp command output. Table 9-4. Command History show ip bgp community-list Command Example Fields Field Description Network Displays the destination network prefix of each BGP route. Next Hop Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
PAGE 374
www.dell.com | support.dell.com Table 9-5 defines the information displayed in the previous exampleFigure . Table 9-5. Command History show ip bgp dampened-paths Command Example Field Description Network Displays the network ID to which the route is dampened. From Displays the IP address of the neighbor advertising the dampened route. Reuse Displays the hour:minutes:seconds until the dampened route is available.
PAGE 375
RxOpens 0 : RxKeeps 0 : RxUpds 0 : RxNotifs 0 : TxUpds 0 : TxNotifs 0 BadEvts 0 : SynFails 0 : RxeCodeP 0x41a1b6b8 : RxHdrCodeP 0x41a1b6d4 : RxOpCodeP 0x41a1b6e4 RxUpdCodeP 0x41a1b704 : TxEcodeP 0x41a1b734 : TxHdrcodeP 0x41a1b750 : TxOpCodeP 0x41a1b760 TxUpdCodeP 0x41a1b780 : TrEvt 0 : LocPref 100 : tmpPathP 0x41a1b7b8 : LogNbrChgs 1 RecursiveNH 1 : PgCfgId 0 : KeepAlive 0 : HldTime 0 : DioHdl 0 : AggrValTmrP 0x41ee7024 UpdNetTmrP 0 : RedistTmrP 0x41ee7094 : PeerChgTmrP 0 : CleanRibTmrP 0x41ee7104 PeerUpdTm
PAGE 376
www.dell.com | support.dell.com Usage Information To view the total number of COMMUNITY attributes found, use the show ip bgp summary command. The text line above the route table states the number of COMMUNITY attributes found. The show ip bgp community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp command output. Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.
PAGE 377
* I * I FTOS# 192.100.9.2 192.100.10.2 20000 20000 9999 9999 0 ? 0 ? Table 9-6 defines the information displayed in the previous example. Table 9-6.
PAGE 378
www.dell.com | support.dell.com filter-list as-path-name (OPTIONAL) Enter the keyword filter-list followed by the name of a configured AS-PATH ACL. regexp regular-expression Enter a regular expression then use one or a combination of the following characters to match: • .
PAGE 379
Version 7.8.1.0 Introduced support on S-Series. Version 7.7.1.0 Introduced support on C-Series. show ip bgp inconsistent-as ces View routes with inconsistent originating Autonomous System (AS) numbers, that is, prefixes that are announced from the same neighbor AS but with a different AS-Path. Syntax show ip bgp [ipv4 unicast] inconsistent-as Command Modes EXEC EXEC Privilege Example (Partial) FTOS>show ip bgp inconsistent-as BGP table version is 280852, local router ID is 10.1.2.
PAGE 380
show ip bgp inconsistent-as Command Example Fields www.dell.com | support.dell.com Table 9-8. Command History Fields Description Weight Displays the route’s weight Path Lists all the ASs the route passed through to reach the destination network. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.
PAGE 381
Command Modes EXEC EXEC Privilege Command History Example (S4810 & S4820T) Version 8.3.19.0 Added the add-path option to the S4820T. Output on the S4820T shows ADDPATH parameters. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.8.0 Added the add-path option to the S4810. Output on the S4810 shows ADDPATH parameters. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Version 7.5.1.
PAGE 382
www.dell.com | support.dell.
PAGE 383
Origin codes: i - IGP, e - EGP, ? - incomplete Network D 70.70.21.0/24 D 70.70.22.0/24 D 70.70.23.0/24 D 70.70.24.0/24 FTOS# Table 9-9. Next Hop 100.10.10.2 100.10.10.2 100.10.10.2 100.10.10.2 Metric LocPrf Weight Path 0 0 100 200 ? 0 0 100 200 ? 0 0 100 200 ? 0 0 100 200 ? Command Example fields: show ip bgp neighbors Lines beginning with Description BGP neighbor Displays the BGP neighbor address and its AS number.
PAGE 384
www.dell.com | support.dell.com Table 9-9. Related Commands Command Example fields: show ip bgp neighbors Lines beginning with Description Prefix advertised Displays the number of network prefixes advertised, the number rejected and the number withdrawn from the BGP routing table. Connections established Displays the number of TCP connections established and dropped between the two peers to exchange BGP information. Last reset Displays the amount of time since the peering session was last reset.
PAGE 385
Table 9-10. Command History Command Example fields: show ip bgp next-hop Field Description Flaps Displays the number of times the next hop has flapped. Time Elapsed Displays the time elapsed since the next hop was learned. If the route is down, then this field displays time elapsed since the route went down. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.
PAGE 386
www.dell.com | support.dell.com 0x1efe7c9c 0x1efe7b1c 0x1efe7d1c 0x1efe7c5c 0x1efe7cdc 0x1efe7c1c 0x1efe7bdc 0x1efe7b5c 0x1efe7adc 0x1efe7e9c 0x1efe7b9c FTOS# 283 287 295 339 351 395 451 491 883 983 1003 Table 9-11. Command History 6 336 20000 10000 6 10000 6 6 78 0 2 120 10000 6 0 {102 103} ? ? 13 ? {92 93} ? 12 ? {82 83} ? {72 73} ? ? i 33 ? i Command Example fields: show ip bgp paths Field Description Total Displays the total number of BGP path attributes.
PAGE 387
0x1ea3c144 0x1ea3c17c 0x1ea3c2cc 0x1ea3c09c 0x1ea3c0d4 0x1ea3c224 0x1ea3c294 0x1ea3c02c FTOS# 763 763 763 764 764 1019 1019 1021 Table 9-12. Command History 1 1 1 1 1 1 1 4 {102 103} 12 32 {72 73} {82 83} 43 23 Command Example fields: show ip bgp paths community Field Description Address Displays the internal address where the path attribute is stored. Hash Displays the hash bucket where the path attribute is stored. Refcount Displays the number of BGP routes using these AS-Paths.
PAGE 388
www.dell.com | support.dell.
PAGE 389
Example (S4810 & S4820T) FTOS#show ip bgp peer-group Peer-group pg1 BGP version 4 Minimum time between advertisement runs is 30 seconds For address family: IPv4 Unicast BGP neighbor is pg1 Number of peers in this group 4 Update packing has 4_OCTECT_AS support enabled Add-path support enabled Peer-group members (* - outbound optimized): 1.1.1.5 1.1.1.6 10.10.10.2* 20.20.20.
PAGE 390
www.dell.com | support.dell.com Table 9-14. Related Commands Command History Command Example fields: show ip bgp peer-group Line beginning with Description BGP neighbor Displays the name of the BGP neighbor. Number of peers Displays the number of peers currently configured for this peer group. Peer-group members: Lists the IP addresses of the peers in the peer group. If the address is outbound optimized, a * is displayed next to the IP address.
PAGE 391
Parameters regular-expression [character] Command Modes Enter a regular expression then use one or a combination of the following characters to match: • . = (period) any single character (including a white space) • * = (asterisk) the sequences in a pattern (0 or more sequences) • + = (plus) the sequences in a pattern (1 or more sequences) • ? = (question mark) sequences in a pattern (either 0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.
PAGE 392
www.dell.com | support.dell.com Table 9-15. Command History Command Example fields: show ip bgp regexp Field Description Metric Displays the BGP router’s metric, if assigned. LocPrf Displays the BGP LOCAL_PREF attribute for the route. Weight Displays the route’s weight Path Lists all the AS paths the route passed through to reach the destination network. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 393
Table 9-16. Command Example fields: show ip bgp summary Field Description network entries Displays the number of network entries and route paths and the amount of memory used to process those entries. paths Displays the number of paths and the amount of memory used. denied paths Displays the number of denied paths and the amount of memory used. BGP path attribute entries Displays the number of BGP path attributes and the amount of memory used to process them.
PAGE 394
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series show running-config bgp ces Syntax Defaults Command Modes Command History Use this feature to display the current BGP configuration. show running-config bgp No default values or behavior EXEC Privilege Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.
PAGE 395
Command Modes Command History ROUTER BGP Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on S-Series Version 7.7.1.0 Introduced on C-Series Version 7.6.1.0 Introduced on E-Series MBGP Commands Multiprotocol BGP (MBGP) is an enhanced BGP that enables multicast routing policy throughout the Internet and connecting multicast topologies between BGP and autonomous systems (AS). FTOS MBGP is implemented as per IETF RFC 1858. FTOS version 7.
PAGE 396
www.dell.com | support.dell.
PAGE 397
aggregate-address c et s Summarize a range of prefixes to minimize the number of entries in the routing table. Syntax Parameters Defaults Command Modes Usage Information aggregate-address ip-address mask [advertise-map map-name] [as-set] [attribute-map map-name] [summary-only] [suppress-map map-name] ip-address mask Enter the IP address and mask of the route to be the aggregate address. Enter the IP address in dotted decimal format (A.B.C.D) and mask in /prefix format (/x).
PAGE 398
www.dell.com | support.dell.com Command History Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series bgp dampening c et s Enable MBGP route dampening. Syntax bgp dampening [half-life time] [route-map map-name] To disable route dampening, use the no bgp dampening [half-life time] [route-map map-name] command. Parameters half-life time (OPTIONAL) Enter the number of minutes after which the Penalty is decreased.
PAGE 399
Command Modes Command History EXEC Privilege Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series clear ip bgp dampening c et s Syntax Parameters Command Modes Command History Clear information on route dampening. clear ip bgp dampening ipv4 multicast network network-mask dampening Enter the keyword dampening to clear route flap dampening information. network (OPTIONAL) Enter the network address in dotted decimal format (A.B.C.D).
PAGE 400
www.dell.com | support.dell.com Command Modes Command History filter-list list (OPTIONAL) Enter the keyword filter-list followed by the name of a configured AS-PATH list (max 16 characters). regexp regexp (OPTIONAL) Enter the keyword regexp followed by regular expressions. Use one or a combination of the following: • .
PAGE 401
To disable debugging, enter no debug ip bgp peer-group peer-group-name updates [in | out] command. Parameters peer-group peer-group-name Enter the keyword peer-group followed by the name of the peer-group. updates Enter the keyword updates to view BGP update information. in (OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors. out (OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors. Command Modes Command History EXEC Privilege Version 7.8.1.
PAGE 402
www.dell.com | support.dell.com To return to default values, enter no distance bgp. Parameters Defaults Command Modes external-distance Enter a number to assign to routes learned from a neighbor external to the AS. Range: 1 to 255 Default: 20 internal-distance Enter a number to assign to routes learned from a router within the AS. Range: 1 to 255 Default: 200 local-distance Enter a number to assign to routes learned from networks listed in the network command.
PAGE 403
Defaults Command Modes Usage Information Related Commands Command History Disabled ROUTER BGP Address Family (conf-router_bgp_af) By default, when a neighbor/peer group configuration is created in the Router BGP context, it is enabled for the IPv4/Unicast AFI/SAFI. By using activate in the new context, the neighbor/peer group is enabled for AFI/SAFI. address family ipv4 multicast (MBGP) Changes the context to SAFI Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.
PAGE 404
www.dell.com | support.dell.com Syntax neighbor {ip-address | peer-group-name} default-originate [route-map map-name] To remove a default route, use the no neighbor {ip-address | peer-group-name} default-originate command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group to set the default route of all routers in that peer group.
PAGE 405
Related Commands Command History ip as-path access-list Configure IP AS-Path ACL. neighbor filter-list Assign a AS-PATH list to a neighbor or peer group. neighbor route-map Assign a route map to a neighbor or peer group. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series neighbor filter-list c et s Configure a BGP filter based on the AS-PATH attribute.
PAGE 406
www.dell.com | support.dell.com neighbor maximum-prefix c et s Syntax Control the number of network prefixes received. neighbor ip-address | peer-group-name maximum-prefix maximum [threshold] [warning-only] To return to the default values, use the no neighbor ip-address | peer-group-name maximum-prefix maximum command. Parameters Defaults Command Modes Command History ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
PAGE 407
Defaults Command Modes Usage Information Command History Disabled. ROUTER BGP Address Family (conf-router_bgp_af) If the set next-hop command in the ROUTE-MAP mode is configured, its configuration takes precedence over the neighbor next-hop-self command. Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Version 7.6.1.
PAGE 408
www.dell.com | support.dell.com Parameters Defaults Command Modes Usage Information ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group-name (OPTIONAL) Enter the name of the peer group. map-name Enter the name of an established route map. If the Route map is not configured, the default is deny (to drop all routes). in Enter the keyword in to filter inbound routes. out Enter the keyword out to filter outbound routes. Not configured.
PAGE 409
Usage Information The first time you enter this command it configures the neighbor as a route reflector and members of the route-reflector cluster. Internal BGP (IBGP) speakers do not need to be fully meshed if you configure a route reflector. When all clients of a route reflector are disabled, the neighbor is no longer a route reflector. Command History Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Version 7.6.1.
PAGE 410
www.dell.com | support.dell.com Command History Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series redistribute c et s Redistribute routes into BGP. Syntax redistribute [connected | static] [route-map map-name] To disable redistribution, use the no redistribution [connected | static] [route-map map-name] command.
PAGE 411
redistribute ospf c et s Redistribute OSPF routes into BGP. Syntax redistribute ospf process-id [[match external {1 | 2}] [match internal]] [route-map map-name] To stop redistribution of OSPF routes, use the no redistribute ospf process-id command. Parameters process-id Enter the number of the OSPF process. Range: 1 to 65535 match external {1 | 2} (OPTIONAL) Enter the keywords match external to redistribute OSPF external routes. You can specify 1 or 2 to redistribute those routes only.
PAGE 412
www.dell.com | support.dell.com network-mask (OPTIONAL) Enter the network mask (in slash prefix format) of the BGP network address. longer-prefixes (OPTIONAL) Enter the keyword longer-prefixes to view all routes with a common prefix. Command Modes EXEC EXEC Privilege Example FTOS#show ip bgp ipv4 multicast BGP table version is 14, local router ID is 100.10.10.
PAGE 413
Syntax Parameters Command Modes show ip bgp ipv4 multicast cluster-list [cluster-id] cluster-id (OPTIONAL) Enter the cluster id in dotted decimal format. EXEC EXEC Privilege Command History Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series show ip bgp community ces Syntax Parameters Command Modes View information on all routes with Community attributes or view specific BGP community groups.
PAGE 414
www.dell.com | support.dell.com The show ip bgp community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp command output. Command History Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Version 7.6.1.
PAGE 415
Parameters as-path-name Command Modes Enter the name of an AS-PATH. EXEC EXEC Privilege Command History Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.0 Introduced support on C-Series Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series show ip bgp flap-statistics c et s View flap statistics on BGP routes.
PAGE 416
www.dell.com | support.dell.com show ip bgp inconsistent-as c et s View routes with inconsistent originating Autonomous System (AS) numbers, that is, prefixes that are announced from the same neighbor AS but with a different AS-Path. show ip bgp ipv4 multicast inconsistent-as Syntax Command Modes EXEC EXEC Privilege Command History Version 7.8.1.0 Introduced support on S-Series Version 7.7.1.
PAGE 417
Capabilities received from neighbor for IPv4 unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) CISCO_ROUTE_REFRESH(128) Capabilities advertised to neighbor for IPv4 Multicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) CISCO_ROUTE_REFRESH(128) Update source set to Loopback 0 For address family: IPv4 Multicast BGP table version 14, neighbor version 14 3 accepted prefixes consume 12 bytes Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer Prefixes advertised 0, rejected 0, withdrawn 0 from peer Connections establ
PAGE 418
www.dell.com | support.dell.com Table 9-18.
PAGE 419
show ip bgp peer-group c et s Enables you to view information on the BGP peers in a peer group. Syntax Parameters Command Modes show ip bgp ipv4 multicast peer-group [peer-group-name [detail | summary]] peer-group-name (OPTIONAL) Enter the name of a peer group to view information about that peer group only. detail (OPTIONAL) Enter the keyword detail to view detailed status information of the peers in that peer group.
PAGE 420
www.dell.com | support.dell.com Table 9-19. Command History 420 | Command Example fields: show ip bgp ipv4 multicast summary Field Description BGP router identifier Displays the local router ID and the AS number. BGP table version Displays the BGP table version and the main routing table version. network entries Displays the number of network entries and route paths and the amount of memory used to process those entries.
PAGE 421
Version 7.7.1.0 Introduced support on C-Series Version 7.6.1.0 Introduced IPv6 MGBP support for E-Series BGP Extended Communities (RFC 4360) BGP Extended Communities, as defined in RFC 4360, is an optional transitive BGP attribute. It provides two major advantages over Standard Communities: • • The range is extended from 4-octet (AA:NN) to 8-octet (Type:Value) to provide enough number communities.
PAGE 422
www.dell.com | support.dell.com Parameters rt Enter the keyword rt to designate a Route Origin community soo Enter the keyword soo to designate a Site-of-Origin community (also known as Route Origin). as4 ASN4:NN Enter the keyword as4 followed by the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value). ASN:NNNN Enter the 2-octet AS specific extended community number in the format ASN:NNNN (2-byte AS number:4-byte community value).
PAGE 423
Command History Version 7.8.1.0 Introduced on S-Series Version 7.7.1.0 Introduced on C-Series Version 7.6.1.0 Introduced on E-Series description ces Use this feature to designate a meaningful description to the extended community. Syntax description {line} To remove the description, use the no description {line} command. Parameters line Defaults Not configured Command Modes Command History Enter a description (maximum 80 characters). CONFIGURATION (conf-ext-community-list) Version 7.8.1.
PAGE 424
www.dell.com | support.dell.com match extcommunity ces Use this feature to match an extended community in the Route Map mode. Syntax match extcommunity {extended community list name} To change the match, use the no match extcommunity {extended community list name} command.
PAGE 425
Command Modes Related Commands Command History CONFIGURATION (conf-ext-community-list) deny Configure to delete (deny) rules show ip extcommunity-list Display the Extended Community list Version 7.8.1.0 Introduced on S-Series Version 7.7.1.0 Introduced on C-Series Version 7.6.1.0 Introduced on E-Series permit regex ces This features enables you specify an extended communities to forward (permit) using a regular expressions (regex).
PAGE 426
www.dell.com | support.dell.com Parameters Defaults Command Modes Usage Information as4 ASN4:NN Enter the keyword as4 followed by the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value). ASN:NNNN Enter the 2-octet AS specific extended community number in the format ASN:NNNN (2-byte AS number:4-byte community value).
PAGE 427
IPADDR:NN Enter the IP address specific extended community in the format IPADDR:NN (4-byte IPv4 Unicast Address:2-byte community value) non-trans (OPTIONAL) Enter the keyword non-trans to indicate a non-transitive BGP extended community.
PAGE 428
www.dell.com | support.dell.com Where TT is type, SS is sub-type displayed in hexadecimal format, XX:YYYY is the value divided into 2-byte and 4-byte values in decimal format. This format is consistent with other vendors. For example, if the extended community has type 0x04, sub-type 0x05, value 0x20 00 00 00 10 00, it will be displayed as: 0x0405:8192:4096 Non-transitive extended communities are marked with an asterisk, as shown in the figure below.
PAGE 429
Table 9-20. Command History Command Example fields: show ip bgp paths community Field Description Address Displays the internal address where the path attribute is stored. Hash Displays the hash bucket where the path attribute is stored. Refcount Displays the number of BGP routes using these extended communities. Community Displays the extended community attributes in this BGP path. Version 7.8.1.0 Introduced on S-Series Version 7.7.1.0 Introduced on C-Series Version 7.6.1.
PAGE 430
www.dell.com | support.dell.com 430 Defaults Command Modes Example No default values or behavior EXEC Privilege FTOS#show running-config extcommunity-list test ip extcommunity-list test permit rt 65033:200 deny soo 101.11.11.2:23 permit rt as4 110212:340 deny regex ^(65001_)$ FTOS# Command History | Version 7.8.1.0 Introduced on S-Series Version 7.7.1.0 Introduced on C-Series Version 7.6.1.
PAGE 431
10 Bare Metal Provisioning Overview Bare Metal Provisioning is supported on platforms: z Bare Metal Provisioning version 2.0 is supported on S4810, S4820T, and z switches. In a data center network, Bare Metal Provisioning (BMP) automates the configuration and updating of switches, ensuring standard configurations across installed devices. You can configure auto-configuration on a single switch or on multiple switches.
PAGE 432
www.dell.com | support.dell.com reload-type BMP 2.0 auto-configuration mode: Configure a switch to reload in normal mode or as a DHCP client with all ports configured for Layer 3 traffic. Syntax Parameters reload-type {normal-reload | jump-start [config-download {enable | disable}] [dhcp-timeout minutes]} normal-reload The switch reloads in normal mode using the FTOS image and startup configuration file stored in the local flash. jump-start The switch reloads in Jumpstart mode as a DHCP client.
PAGE 433
Use the reload-type command in BMP 2.0 to toggle between Normal and Jumpstart auto-configuration modes. The reload settings for the auto-configuration mode that you configure are stored in memory and retained for future reboots and BMP software upgrades. You can enter the reload command at any time to reload the switch in the last configured mode: Normal reload or Jumpstart mode.
PAGE 434
www.dell.com | support.dell.com Command History 434 Related Commands Version 8.3.19.0 Introduced on S4820T. Version 8.3.10.1 Introduced on S4810. reload-type Usage Information | Bare Metal Provisioning Configure the reload mode as normal or Jumpstart. Use the stop jump-start command on a switch running BMP 2.0 if the switch enters a loop while reloading in Jumpstart mode; loop occurs when the switch is continuously trying to contact a DHCP server and a DHCP server is not found.
PAGE 435
11 Content Addressable Memory (CAM) Overview Content Addressable Memory (CAM) commands are supported on the Dell Force10 , or E-Series TeraScale e t, C-Series c, S-Series s, platforms as indicated by the characters that appear under each of the command headings. Note: Not all CAM commands are supported on all platforms. Be sure to note the platform symbol when looking for a command.
PAGE 436
www.dell.com | support.dell.com Important Points to Remember • • • • • • • • • CAM Profiles are available on FTOS versions 6.3.1.1 and later for the E-Series TeraScale. FTOS versions 7.8.1.0 and later support CAM allocations on the C-Series and S-Series. FTOS versions 8.3.12.0 and later support CAM allocations on the and .
PAGE 437
Syntax Parameters Command Modes Command History Usage Information cam-acl {default | l2acl number ipv4acl number ipv6acl number ipv4qos number l2qos number l2pt number ipmacacl number ecfmacl number [vman-qos | vman-dual-qos number] ipv4pbr number [fcoeacl number iscsioptacl number]} default Use the default CAM profile settings, and set the CAM as follows.
PAGE 438
www.dell.com | support.dell.com cam-acl-egress (Configuration) cs Select the FP groups for CAM access control lists for Layer 2, IPv4 and IPv6 ACLs. Syntax cam-acl-egress {default | l2acl number ipv4acl number ipv6acl number} Parameters Command Modes Command History Usage Information default Reset the egress CAM ACL entries to the default settings. l2acl number ipv4acl number ipv6acl number Allocate space to each CAM region.
PAGE 439
cam-optimization cs Optimize CAM utilization for QoS Entries by minimizing require policy-map CAM space. Syntax cam-optimization [qos] Parameters Command Modes Defaults Command History Usage Information qos Optimize CAM usage for Quality of Service (QoS) CONFIGURATION Disabled Version 8.2.1.0 Introduced on the S-Series Version 7.8.1.
PAGE 440
www.dell.com | support.dell.com Parameters profile Choose one of the following CAM profiles: • Enter the keyword default to specify the default CAM profile. • Enter the keyword eg-default to specify the default CAM profile for EG (dual-CAM) line cards. • Enter the keyword ipv4-320k to specify the CAM profile that provides 320K entries for the IPv4 Forwarding Information Base (FIB). • Enter the keyword ipv4-egacl-16k to specify the CAM profile that provides 16K entries for egress ACLs.
PAGE 441
Version 7.9.1.0 Added support for VRF protocols. Version 7.5.1.0 Added the l2-ipv4-inacl CAM profile Version 7.4.2.0 Added the unified-default CAM profile and lag-hash-align microcode Version 7.4.1.0 Added the lag-hash-mpls microcode Version 6.5.1.0 Added the eg-default and ipv4-320k CAM profiles Version 6.3.1.0 Introduced on E-Series Usage Information You must save the running configuration using the command copy running-config after changing the CAM profile from CONFIGURATION mode.
PAGE 442
www.dell.com | support.dell.
PAGE 443
VmanDualQos: Ipv4pbr : 0 0 -- Line card 4 -Current Settings(in block sizes) L2Acl : 5 Ipv4Acl : 5 Ipv6Acl : 1 Ipv4Qos : 1 L2Qos : 1 L2PT : 0 IpMacAcl : 0 VmanQos : 0 VmanDualQos: 0 Ipv4pbr : 0 FTOS# show cam-acl-egress cs Display the details of the FP groups allocated for the egress ACL. Syntax show cam-acl-egress Defaults Command Modes Usage Information Example (default) None Configuration The display reflects the settings implemented with the cam-acl-egress command.
PAGE 444
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History Usage Information 444 | profile (OPTIONAL) Choose a single CAM profile to display: • Enter the keyword default to specify the default CAM profile. • Enter the keyword eg-default to specify the default CAM profile for EG (dual-CAM) line cards. • Enter the keyword ipv4-320k to specify the CAM profile that provides 320K entries for the IPv4 Forwarding Information Base (FIB).
PAGE 445
Example (show cam-profile summary) FTOS#show cam-profile summary -- Chassis CAM Profile -: Current Settings : Next Boot Profile Name : Default : Default MicroCode Name : Default : Default : Current Settings : Next Boot -- Line card 1 -Profile Name : Default : Default MicroCode Name : Default : Default : Current Settings : Next Boot -- Line card 6 -Profile Name : Default : Default MicroCode Name : Default : Default FTOS# Example (show cam-profile) FTOS#show cam-profile -- Chassis Cam Profile -CamSize : :
PAGE 446
www.dell.com | support.dell.com show cam-usage e Display Layer 2, Layer 3, ACL, or all CAM usage statistics. Syntax Parameters Defaults Command Modes Command History Example Example (show cam-usage acl) show cam-usage [acl | router | switch] acl (OPTIONAL) Enter this keyword to display Layer 2 and Layer 3 ACL CAM usage. router (OPTIONAL) Enter this keyword to display Layer 3 CAM usage. switch (OPTIONAL) Enter this keyword to display Layer 2 CAM usage. None EXEC Privilege Version 6.5.1.
PAGE 447
11 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1 IN-L3 FIB IN-L3-SysFlow IN-L3-TrcList IN-L3-McastFib IN-L3-Qos IN-L3-PBR OUT-L3 ACL IN-L3 ACL IN-L3 FIB IN-L3-SysFlow IN-L3-TrcList IN-L3-McastFib IN-L3-Qos IN-L3-PBR OUT-L3 ACL | | | | | | | | | | | | | | | 196607 2878 1024 9215 8192 1024 16384 8192 196607 2878 1024 9215 8192 1024 16384 | | | | | | | | | | | | | | | 1 0 0 0 0 0 0 3 1 0 0 0 0 0 0 | | | | | | | | | | | | | | | 196606 2878 1024 9215 8192 1024 16384 8189 196606 2878 102
PAGE 448
www.dell.com | support.dell.com Example (C-Series) The following examples show some sample output when using the test cam-usage command.
PAGE 449
Stack-Unit | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status -----------------------------------------------------------------------------------------0| 1 | IPv4Flow | 102 | 0 | Allowed FTOS# Table 11-2. Output Explanations: test cam-usage (S-Series) Term Explanation Stack-Unit Lists the stack unit or units that are checked. Entering all shows the status for all stacks. Portpipe Lists the portpipe (port-set) or port pipes (port-sets) that are checked.
PAGE 450
www.dell.com | support.dell.com cam ipv4flow (EXEC Privilege) et Configure the amount of CAM space in IPv4flow sub-regions. This command is deprecated as of FTOS 8.3.1.0. Syntax cam ipv4flow {chassis all | linecard number} {default | acl value multicast-fib value pbr value qos value system-flow value trace-list value} Command Modes Command History EXEC Privilege Version 8.3.1.0 COMMAND DEPRECATED Version 6.3.1.
PAGE 451
Command History Version 6.3.1.0 Usage Information Related Commands Introduced on E-Series CAM profile changes take effect after the next chassis reboot. copy Save the running configuration. show cam-ipv4flow Display the CAM IPv4flow entries. show cam-ipv4flow et Syntax Command Modes Command History Example Display details about the IPv4Flow sub-regions. show cam-ipv4flow EXEC Privilege Version 6.3.1.
PAGE 452
www.dell.com | support.dell.
PAGE 453
The 18-megabit user configurable CAM is divided into multiple regions such as Layer 2 FIB, Layer 3 FIB, IPv4Flow, IPv4 Ingress ACL, etc. The Layer 2 ACL region is further sub-divided into 6 regions: Sysflow, L2ACL, PVST, QoS, L2PT, FRRP. You can change the amount of CAM space, in percentage, allocated to each sub-region. The amount of space that you can distribute to the sub-partitions is equal to the amount of CAM space that the selected CAM profile allocates to the Layer 2 ACL partition.
PAGE 454
www.dell.com | support.dell.com pvst percentage Allocate a percentage of the Layer 2 ACL CAM space for PVST+ entries. Enter the keyword pvst and specify the percentage. Range: 5 to 95 qos percentage Allocate a percentage of the Layer 2 ACL CAM space for QoS entries. Enter the keyword qos and specify the percentage. Range: 5 to 95 l2pt percentage Allocate a percentage of the Layer 2 ACL CAM space for L2PT entries. Enter the keyword l2pt and specify the percentage.
PAGE 455
Pvst Qos L2pt Frrp : : : : 50 12 13 5 -- Line card 5 -Current Settings(in percent) Sysflow : 6 L2Acl : 14 --More-- Related Commands cam-l2acl (CONFIGURATION) Re-allocate the amount of space, in percentage, for each Layer 2 ACL CAM sub-partition.
PAGE 456
www.dell.com | support.dell.
PAGE 457
12 Control Plane Policing (CoPP) Overview The CoPP commands are supported on the Dell Force10 and Z Z-Series platforms as indicated by the characters that appear under each of the command headings.
PAGE 458
www.dell.com | support.dell.com service-policy rate-limit-cpu-queues Apply a policy map for the system to rate limit control traffic on a per-queue basis. Syntax Parameters Defaults Command Modes Command History Usage Information service-policy rate-limit-cpu-queues policy-name policy-name Enter the service-policy name, in a string up to 140 characters. Not configured. CONTROL-PLANE-CPUQOS Version 8.3.19.0 Introduced on S4820T Version 8.3.8.
PAGE 459
Related Commands ip access-list extended Create an extended IP ACL ipv6 access-list Create an IPv6 ACL mac access-list extended Create an extended MAC ACL. qos-policy-input Create a QoS input policy map. class-map Create a QoS class map. policy-map-input Create an input policy map. show cpu-queue rate cp Display the rates for each queue. Syntax show cpu-queue rate cp Defaults Not configured. Command Modes EXEC Privilege Command History Example Version 8.3.19.
PAGE 460
www.dell.com | support.dell.com Command History Example Version 8.3.19.0 Introduced on S4820T Version 8.3.8.
PAGE 461
show mac protocol-queue-mapping Display the queue mapping for the MAC protocols. Syntax show mac protocol-queue-mapping Defaults Not configured. Command Modes EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.8.
PAGE 462
www.dell.com | support.dell.
PAGE 463
13 Data Center Bridging Overview Data center bridging (DCB) refers to a set of IEEE Ethernet enhancements that provide data centers with a single, robust, converged network to support multiple traffic types, including LAN, server, and storage traffic. DCB and Switch Stacking Caveats for the S4820T The following is a list of behaviors and limitations regarding the use of DCB over S4820T ports involved in switch stacking: • • • • You can enable DCB only on 40 Gig (QSPF+) ports.
PAGE 464
www.dell.com | support.dell.
PAGE 465
ETS Commands • • • • • • • • • • • • • • • • • • bandwidth-percentage clear ets counters dcb-enable dcb-output dcb-policy output dcb-policy output stack-unit stack-ports all description ets mode on priority-list priority-group priority-group qos-policy qos-policy-output ets scheduler set-pgid show interface ets show qos dcb-output show qos priority-groups show stack-unit stack-ports ets detail DCBX Commands • • • • • • • • advertise dcbx-appln-tlv advertise dcbx-tlv dcbx version dcbx port-role fcoe prior
PAGE 466
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information Application priority TLVS are enabled to advertise FCoE and iSCSI. PROTOCOL LLDP Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module To disable TLV transmission, use the no form of the command; for example, no advertise dcbx-appln-tlv iscsi.
PAGE 467
bandwidth-percentage Configure the bandwidth percentage allocated to priority traffic in port queues. Syntax bandwidth-percentage percentage To remove the configured bandwidth percentage, use the no bandwidth-percentage command. Parameters Defaults Command Modes Command History Usage Information percentage (Optional) Enter the bandwidth percentage. The percentage range is 1 to 100% in units of 1%. none QOS-POLICY-OUT-ETS Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.
PAGE 468
www.dell.com | support.dell.com Syntax Parameters Defaults Command Modes Command History clear ets counters port-type slot/port port-type Enter the keyword port-type followed by the slot/port information. none EXEC Privilege Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module clear pfc counters Clear the PFC TLV counters and PFC statistics on an interface or stack unit.
PAGE 469
Command History Version 8.3.19.0 Introduced on the S4820T Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module Related Commands Usage Information dcb-policy input Apply the input policy with the PFC configuration to an ingress interface. By default, iSCSI is enabled on the unit and flowcontrol is enabled on all of the interfaces or if link-level flow control is enabled on one or more interfaces.
PAGE 470
www.dell.com | support.dell.com dcb-output Create a DCB output policy to associate an ETS configuration with priority traffic. Syntax dcb-output policy-name To remove the ETS output policy globally, use the no dcb output policy-name command. Parameters Defaults Command Modes Command History Usage Information policy-name Enter the DCB output policy name. Maximum: 32 alphanumeric characters. none CONFIGURATION Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810.
PAGE 471
Command History Usage Information Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module If you apply an input policy with PFC disabled (no pfc mode on): • • Link-level flow control can be enabled on the interface. To delete the input policy, you must first disable link-level flow control. PFC is then enabled automatically on the interface because an interface is by default PFC-enabled.
PAGE 472
www.dell.com | support.dell.com Command History Usage Information Related Commands Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module The dcb-policy input stack-unit all command overwrites any previous dcb-policy input stack-unit stack-unit-id configurations. Similarly, a dcb-policy input stack-unit stack-unit-id command overwrites any previous dcb-policy input stack-unit all configuration.
PAGE 473
Syntax dcb-policy output stack-unit {all | stack-unit-id} stack-ports all dcb-output-policy-name To remove all DCB output policies applied to the stacked ports, use the no dcb-policy output stack-unit all command. To remove only the DCB output policies applied to the specified switch, use the no dcb-policy output stack-unit command. Parameters Defaults Command Modes Command History Usage Information stack-unit-id Enter the stack unit identification.
PAGE 474
www.dell.com | support.dell.com Command History Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module If you configure PFC on a 40GbE port, count the 40GbE port as four PFC-enabled ports in the pfc-port number you enter in the command syntax.
PAGE 475
You must reload the stack or a specified stack unit (use the reload command in EXEC Privilege mode) for the PFC buffer configuration to take effect. Related Commands dcb stack-unit all pfc-buffering pfc-port pfc-queues Configure the PFC buffer for all switches in the stack. dcbx port-role Configure the DCBX port role used by the interface to exchange DCB information.
PAGE 476
www.dell.com | support.dell.com To remove the DCBX version, use the dcbx version {auto | cee | cin | ieee-v2.5} command. Parameters Defaults Command Modes auto | cee | cin | ieee-v2.5 Enter the DCBX version type used on the interface, where: • auto: configures the port to operate using the DCBX version received from a • • • peer. cee: configures the port to use CDD (Intel 1.01). cin: configures the port to use Cisco-Intel-Nuova (DCBX 1.0). ieee-v2: configures the port to use IEEE 802.1az (Draft 2.5).
PAGE 477
Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module description Enter a text description of the DCB policy (PFC input or ETS output). Syntax description text To remove the text description, use the no description command. Parameters Defaults Command Modes text Enter the description of the output policy. Maximum: 32 characters.
PAGE 478
www.dell.com | support.dell.com Command History Usage Information Related Commands Version 8.3.19.0 Introduced on the S4820T Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module If you disable ETS in an output policy applied to an interface using the no ets mode on command, any previously configured QoS settings at the interface or global level take effect.
PAGE 479
Parameters Defaults Command Modes priority-bitmap 0x10 PROTOCOL LLDP Command History Usage Information Enter the priority bitmap. Range: 1 to FF. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module This command is available at the global level only. pfc link-delay Configure the link delay used to pause specified priority traffic.
PAGE 480
www.dell.com | support.dell.com To disable the PFC configuration, use the no pfc mode on command. Defaults Command Modes Command History Usage Information PFC mode is on. DCB INPUT POLICY Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module By applying a DCB input policy with PFC enabled, you enable PFC operation on ingress port traffic.
PAGE 481
Table 13-1 lists the dot1p priority-queue assignments. Table 13-1. dot1p Priority-Queue Assignments dot1p Value in the Incoming Frame Egress Queue Assignment 0 0 1 0 2 0 3 1 4 2 5 3 6 3 7 3 pfc priority Configure the CoS traffic to be stopped for the specified delay. Syntax pfc priority priority-range To delete the pfc priority configuration, use the no pfc priority command.
PAGE 482
www.dell.com | support.dell.com priority-group Create an ETS priority group to use with an ETS output policy. Syntax priority-group group-name To remove the priority group, use the no priority-group command. Parameters Defaults Command Modes Command History Usage Information group-name Enter the name of the ETS priority group. Maximum: 32 characters. none CONFIGURATION Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.
PAGE 483
Parameters Defaults Command Modes Command History Usage Information group-name Enter the group name of the 802.1p priority group. Maximum: 32 characters. ets-policy-name Enter the ETS policy name. none DCB OUTPUT POLICY Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module The ETS configuration associated with 802.1p priority traffic in a DCB output policy is used in DCBX negotiation with ETS peers.
PAGE 484
www.dell.com | support.dell.com • • Related Commands All 802.1p priorities are grouped in priority group 0. 100% of the port bandwidth is assigned to priority group 0. The complete bandwidth is equally assigned to each priority class so that each class has 12-13%. priority-group Create an ETS priority group. priority-group qos-policy Associate an ETS priority group with an ETS output policy. set-pgid Configure the priority-group.
PAGE 485
To remove the configured priority schedule, use the no scheduler command. Parameters Defaults Command Modes Command History Usage Information value Enter schedule priority value. Range: strict: strict priority traffic is serviced before any other queued traffic. WERR scheduling is used to queue priority traffic. POLICY-MAP-OUT-ETS Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.
PAGE 486
www.dell.com | support.dell.com Related Commands priority-group qos-policy Create an ETS priority group. priority-list Configure the 802.1p priorities. show dcb Displays the data center bridging status, the number of PFC-enabled ports, and the number of PFC-enabled queues. Syntax Parameters Command Mode Command History Example Usage Information show dcb [stack-unit unit-number] [port-set port-set port-set number] unit number Enter the DCB unit number. Range: 0 to 5.
PAGE 487
Example FTOS(conf)# show interface tengigabitethernet 0/49 dcbx detail FTOS#show interface te 0/49 dcbx detail E-ETS Configuration TLV enabled e-ETS Configuration TLV disabled R-ETS Recommendation TLV enabled r-ETS Recommendation TLV disabled P-PFC Configuration TLV enabled p-PFC Configuration TLV disabled F-Application priority for FCOE enabled f-Application Priority for FCOE disabled I-Application priority for iSCSI enabled i-Application Priority for iSCSI disabled ---------------------------------------
PAGE 488
www.dell.com | support.dell.com Table 13-2. show interface dcbx detail Command Example Fields (continued) Field Description Local DCBX Status: DCBX Operational Version DCBX version advertised in Control TLVs. Local DCBX Status: DCBX Max Version Supported Highest DCBX version supported in Control TLVs. Local DCBX Status: Sequence Number Sequence number transmitted in Control TLVs. Local DCBX Status: Acknowledgment Number Acknowledgement number transmitted in Control TLVs.
PAGE 489
Parameters Command Mode Command History Example (ets summary) port-type slot/port ets Enter the port-type slot and port ETS information. {summary | detail} Enter the keyword summary for a summary list of results or enter the keyword detail for a full list of results. EXEC PRIVILEGE Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.
PAGE 490
www.dell.com | support.dell.
PAGE 491
Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Oper status is init Conf TLV Tx Status is disabled Traffic Class TLV Tx Status is disabled 0 Input Conf TLV Pkts, 0 Output Conf TLV Pkts, 0 Error Conf TLV Pkts 0T LIVnput Traffic Class TLV Pkts, 0 Output Traffic Class TLV Pkts, 0 Error Traffic Class Pkts Example (ets detail) FTOS(conf)# show interfaces tengigabitethernet 0/0 ets detail Interface TenGigabitEthernet 0/0 Max Supported TC Groups is 4 Number
PAGE 492
www.dell.com | support.dell.com Table 13-3 lists the show interface ets detail field descriptions. Table 13-3. show interfaces ets detail Command Example Fields Field Description Interface Interface type with stack-unit and port number. Max Supported TC Group Maximum number of priority groups supported. Number of Traffic Classes Number of 802.1p priorities currently configured. Admin mode ETS mode: on or off.
PAGE 493
Parameters Command Mode Command History Example port-type slot/ port pfc Enter the port-type slot and port PFC information. {summary | detail} Enter the keyword summary for a summary list of results or enter the keyword detail for a full list of results. INTERFACE Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.
PAGE 494
www.dell.com | support.dell.com Table 13-4 lists the show interface pfc summary field descriptions. Table 13-4. show interfaces pfc summary Command Example Fields Field Description Interface Interface type with stack-unit and port number. Admin mode is on Admin is enabled PFC admin mode is on or off with a list of the configured PFC priorities. When the PFC admin mode is on, PFC advertisements are enabled to be sent and received from peers; received PFC configuration will take effect.
PAGE 495
Table 13-4. show interfaces pfc summary Command Example Fields (continued) Field Description PFC TLV Statistics: Pause Number of PFC pause frames transmitted. Tx pkts PFC TLV Statistics: Pause Number of PFC pause frames received. Rx pkts show interface pfc statistics Displays counters for the PFC frames received and transmitted (by dot1p priority class) on an interface.
PAGE 496
www.dell.com | support.dell.com Command History Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module FTOS(conf)# show qos dcb-input dcb-input pfc-profile pfc link-delay 32 pfc priority 0-1 dcb-input pfc-profile1 no pfc mode on pfc priority 6-7 show qos dcb-output Displays the ETS configuration in a DCB output policy.
PAGE 497
priority-group ipc priority-list 4 set-pgid 2 show stack-unit stack-ports ets detail Displays the ETS configuration applied to egress traffic on stacked ports, including ETS operational mode on each unit and the configurated priority groups with dot1p priorities, bandwidth allocation, and scheduler type. Syntax Parameters Command Mode Command History Example show stack-unit {all | stack-unit} stack-ports {all | port-number} ets detail stack-unit Enter the stack unit identification.
PAGE 498
www.dell.com | support.dell.com 5 6 7 8 - - show stack-unit stack-ports pfc detail Displays the PFC configuration applied to ingress traffic on stacked ports, including PFC operational mode on each unit with the configured priorities, link delay, and number of pause packets sent and received. Syntax Parameters Command Mode Command History Example show stack-unit {all | stack-unit} stack-ports {all | port-number} pfc detail stack-unit Enter the stack unit. port-number Enter the port number.
PAGE 499
14 Dynamic Host Configuration Protocol (DHCP) Overview Dynamic Host Configuration Protocol (DHCP) is an application layer protocol that dynamically assigns IP addresses and other configuration parameters to network end-stations (hosts) based on configuration policies determined by network administrators. The basic DHCP commands are supported by FTOS on all Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e or .
PAGE 500
www.dell.com | support.dell.com • • • • • pool show ip dhcp binding show ip dhcp configuration show ip dhcp conflict show ip dhcp server clear ip dhcp Reset DHCP counters. cs clear ip dhcp [binding {address} | conflict | server statistics] Syntax Parameters binding Enter this keyword to delete all entries in the binding table. address Enter the IP address to clear the binding entry for a single IP address.
PAGE 501
default-router Assign a default gateway to clients based on address pool. cs Syntax Parameters Command Mode Default Command History default-router address [address2...address8] address Enter the a list of routers that may be the default gateway for clients on the subnet. You may specify up to 8. List them in order of preference. DHCP None Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduced on C-Series and S-Series.
PAGE 502
www.dell.com | support.dell.com Command Mode DHCP Default Command History None Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduced on C-Series and S-Series. domain-name Assign a domain to clients based on address pool. cs Syntax Parameters Command Mode Default Command History domain-name name name Give a name to the group of addresses in a pool. DHCP None Version 8.3.19.0 Introduced on S4820T Version 8.3.7.
PAGE 503
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduced on C-Series and S-Series. hardware-address For manual configurations, specify the client hardware address. cs Syntax Parameters Command Mode Default Command History hardware-address address address Enter the hardware address of the client. DHCP None Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.
PAGE 504
www.dell.com | support.dell.com Syntax Parameters Command Mode Default Command History lease {days [hours] [minutes] | infinite} days Enter the number of days of the lease. Range: 0-31 hours Enter the number of hours of the lease. Range: 0-23 minutes Enter the number of minutes of the lease. Range: 0-59 infinite Specify that the lease never expires. DHCP 24 hours Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.
PAGE 505
Parameters type Command Mode DHCP Default Command History Enter the NETBIOS node type. Broadcast: Enter the keyword b-node. Hybrid: Enter the keyword h-node. Mixed: Enter the keyword m-node. Peer-to-peer: Enter the keyword p-node. Hybrid Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduced on C-Series and S-Series. network Specify the range of addresses in an address pool.
PAGE 506
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduced on C-Series and S-Series. show ip dhcp binding cs Display the DHCP binding table. Syntax show ip dhcp binding Command Mode EXEC Privilege Default Command History None Version 8.2.1.0 Introduced on C-Series and S-Series. show ip dhcp configuration cs Display the DHCP configuration.
PAGE 507
show ip dhcp server cs Display the DHCP server statistics. Syntax show ip dhcp server statistics Command Mode EXEC Privilege Default Command History None Version 8.2.1.0 Introduced on C-Series and S-Series. Commands to Configure Secure DHCP DHCP as defined by RFC 2131 provides no authentication or security mechanisms. Secure DHCP is a suite of features that protects networks that use dynamic address allocation from spoofing and attacks.
PAGE 508
www.dell.com | support.dell.com Command History Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.3.1.0 Introduced on E-Series. Version 8.2.1.0 Introduced on C-Series and S-Series arp inspection-trust Specify a port as trusted so that ARP frames are not validated against the binding table. arp inspection-trust ces Syntax Command Modes Specify a port as trusted so that ARP frames are not validated against the binding table.
PAGE 509
ip dhcp snooping ces Syntax Command Modes Default Command History Usage Information Enable DHCP Snooping globally. [no] ip dhcp snooping CONFIGURATION Disabled Version 8.3.1.0 Introduced on E-Series. Version 8.2.1.0 Introduced on C-Series and S-Series for Layer 2 interfaces. Version 7.8.1.0 Introduced on C-Series and S-Series on Layer 3 interfaces. When enabled, no learning takes place until snooping is enabled on a VLAN.
PAGE 510
www.dell.com | support.dell.com Syntax [no] ip dhcp snooping binding mac address vlan-id vlan-id ip ip-address interface type slot/port lease number Parameters mac address Enter the keyword mac followed by the MAC address of the host to which the server is leasing the IP address. vlan-id vlan-id Enter the keyword vlan-id followed by the VLAN to which the host belongs. Range: 2-4094 ip ip-address Enter the keyword ip followed by the IP address that the server is leasing.
PAGE 511
Syntax ip dhcp snooping database renew Command Modes EXEC EXEC Privilege Default Command History None Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.3.1.0 Introduced on E-Series. Version 7.8.1.0 Introduced on C-Series and S-Series ip dhcp snooping trust ces Configure an interface as trusted. Syntax [no] ip dhcp snooping trust Command Modes INTERFACE Default Command History Untrusted Version 8.3.19.0 Introduced on S4820T Version 8.3.7.
PAGE 512
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.3.1.0 Introduced on E-Series. Version 8.2.1.0 Added keyword ipmac. Version 7.8.1.0 Introduced on C-Series and S-Series Usage Information You must allocate at least one FP block to ipmacacl before you can enable IP+MAC Source Address Validation. 1. Use the command cam-acl l2acl from CONFIGURATION mode 2. Save the running-config to the startup-config 3.
PAGE 513
Parameters Command Modes Default Command History remote-id Configure the system to enable remote-id string in option-82 trust-downstream Configure the system to trust Option 82 when it is received from the previous-hop router. CONFIGURATION Disabled Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.3.1.0 Introduced on E-Series. Version 7.8.1.
PAGE 514
www.dell.com | support.dell.com Command History 514 | Version 8.3.1.0 Introduced on E-Series. Version 8.2.1.
PAGE 515
15 Equal Cost Multi-Path Overview The characters that appear below command headings indicate support for the associated Dell Force10 platform as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, or .
PAGE 516
www.dell.com | support.dell.com To disable link bundle monitoring, use the ecmp-group no link-bundle-monitor command. Parameters ecmp-group ID Enter the identifier number for the ECMP group. Range: 2 to 64. interface Enter the following keywords and slot/port to add the interface to the ECMP group. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 517
Parameters algorithm-number Enter the algorithm number. Range: 0 to 47 EtherScale range: 0 to 15; 16 to 47 will be considered as 15. ecmp hash algorithm TeraScale and ExaScale Only: Enter the keyword ecmp followed by the ECMP hash algorithm value. Range: 0 to 47 value Defaults lag hash algorithm value TeraScale and ExaScale Only: Enter the keyword lag followed by the LAG hash algorithm value.
PAGE 518
www.dell.com | support.dell.com The hash value calculated with the hash-algorithm command is unique to the entire chassis. The hash algorithm command with the line card option changes the hash for a particular line card by applying the mask specified in the IPSA and IPDA fields. The line card option is applicable with the lag-hash-align microcode only (refer to cam-profile (Config)).
PAGE 519
12 - 23 24 - 35 36 - 47 Related Commands Compression Enabled shift [0 - 11] Compression Disabled rotate [0 - 11] Compression Disabled shift [0 - 11] load-balance (E-Series) Change the traffic balancing method. hash-algorithm ecmp cs Change the hash algorithm used to distribute traffic flows across an ECMP (equal-cost multipath routing) group. Syntax hash-algorithm ecmp {crc-upper} | {dest-ip} | {lsb} To return to the default hash algorithm, use the no hash-algorithm ecmp command.
PAGE 520
www.dell.com | support.dell.com Related Commands load-balance (C-Series and S-Series) hash-algorithm d e Select the d value for the ECMP, LAG, and NH hashing algorithm. Syntax Parameters hash-algorithm d value [linecard slot] [port-set number] d value Enter the keyword followed by the d value. Range: 0 to 4095 linecard slot Enter the keyword linecard followed by the linecard slot number. port-set number Enter the keyword port-set followed by the linecard port-pipe number.
PAGE 521
ip ecmp-deterministic e Deterministic ECMP Next Hop arranges all ECMPs in order before writing them into the CAM. For example, suppose the RTM learns 8 ECMPs in the order that the protocols and interfaces came up. In this case, the FIB and CAM sort them so that the ECMPs are always arranged.This implementation ensures that every chassis having the same prefixes orders the ECMPs the same. With 8 or less ECMPs, the ordering is lexicographic and deterministic.
PAGE 522
www.dell.com | support.dell.com ip ecmp-group Enable and specify the maximum number of ecmp that the L3 CAM hold for a route, By default, when maximum paths are not configured, the CAM can hold a maximum of 16 ecmp per route. Syntax ip ecmp-group {maximum-paths | {number} {path-fallback} To negate a command, use the no command. For example no ip ecmp-group maximum-paths {number} Parameters maximum-paths Specify the maximum number of ecmp for a route.
PAGE 523
link-bundle-distribution trigger-threshold Provides a mechanism to set the threshold to trigger when traffic distribution will begin being monitored on an ECMP link bundle. Syntax link-bundle-distribution trigger-threshold [percent] To exit from ecmp group mode, use the exit command. Parameters Command Modes Command History percent Indicate the threshold value when traffic distribution will start being monitored on an ECMP link bundle. Range: 1 to 90% Default: 60% EXEC Privilege Version 8.3.19.
PAGE 524
www.dell.com | support.dell.com Example 524 FTOS#show link-bundle-distribution Link-bundle trigger threshold - 60 ECMP bundle - 5 Interface Te 0/4 Te 0/3 Example (S4820T) Utilization[In Percent] - 0 Line Protocol Up Up Utilization[In Percent] 5 30 FTOS#show link-bundle-distribution Link-bundle trigger threshold - 60 FTOS# Command History | Version 8.3.19.0 Introduced on S4820T. Version 8.3.10.0 Introduced on S4810.
PAGE 525
16 FIPS Cryptography Overview The following commands are used to configure the FIPS Cryptography feature on the :and : FIPS • • • • fips mode enable show fips status show ip ssh ssh fips mode enable Enable the FIPS cryptography mode on the platform. : Syntax [no] fips mode enable Use the no fips mode enable command to disable the FIPS cryptography mode.
PAGE 526
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on the S4820&. Version 8.3.12.0 Introduced on the S4810. show fips status Displays the status of the FIPs mode. : Syntax show fips status Default None Command Mode Example EXEC FTOS#show fips status FIPS Mode : Enabled FTOS# Related Commands Command History show ip ssh Display information about established SSH sessions. show system (S-Series, S4810 and S4820T) Display the current status of all units in the system.
PAGE 527
Example Without FIPS Mode enabled: FTOS#sh ip ssh SSH server : enabled. SSH server version : v1 and v2. Password Authentication : enabled. Hostbased Authentication : disabled. RSA : disabled. Authentication Vty Encryption HMAC 1 3des-cbc hmac-md5 Remote IP 10.1.20.48 2 3des-cbc hmac-md5 10.1.20.48 With FIPS Mode enabled: FTOS#sh ip ssh SSH server : enabled. SSH server version : v2. Password Authentication : enabled. Hostbased Authentication : disabled. RSA : disabled.
PAGE 528
www.dell.com | support.dell.com ipv4 address (OPTIONAL) Enter the IP address in dotted decimal format A.B.C.D. ipv6-address prefix-length (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 Note: The :: notation specifies successive hexadecimal fields of zeros -c encryption cipher Enter the following encryption cipher to use. (For v2 clients only.
PAGE 529
Example If FIPS mode is not enabled: FTOS#ssh 10.11.8.12 ? -c Encryption cipher to use (for v2 clients only) -l User name option -m HMAC algorithm to use (for v2 clients only) -p SSH server port option (default 22) -v SSH protocol version FTOS#ssh 10.11.8.12 -c ? 3des-cbc Force ssh to use 3des-cbc encryption cipher FTOS#ssh 10.11.8.
PAGE 530
| FIPS Cryptography www.dell.com | support.dell.
PAGE 531
17 FIP Snooping Overview In a converged Ethernet network, an MXL Switch, , or can operate as an intermediate Ethernet bridge to snoop on Fibre Channel over Ethernet Initialization Protocol (FIP) packets during the login process on Fibre Channel over Ethernet (FCoE) forwarders (FCFs). Acting as a transit FIP snooping bridge, the switch uses dynamically-created ACLs to permit only authorized FCoE traffic to be transmitted between an FCoE end-device and an FCF.
PAGE 532
www.dell.com | support.dell.com Parameters enode-mac-address Enter the ENode MAC address to be cleared of FIP snooping information. fcf-mac-address Enter the FCF MAC address to be cleared of FIP snooping information. session-mac-address Enter the MAC address for the session to be cleared of FIP snooping information. Command Modes EXEC Privilege Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.
PAGE 533
ipc Enter the keyword ipc rx Enter the keyword rx Command Modes EXEC Privilege Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. feature fip-snooping Enable the FIP snooping feature on a switch. Syntax feature fip-snooping To disable the FIP snooping feature, use the no feature fip-snooping command. Defaults Command Modes Command History Disabled. CONFIGURATION Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.
PAGE 534
www.dell.com | support.dell.com Usage Information The maximum number of FCFs supported per FIP snooping-enabled VLAN is four. The maximum number of FIP snooping sessions supported per ENode server is 16. fip-snooping fc-map Configure the FC-MAP value used by FIP snooping on all VLANs. Syntax fip-snooping fc-map fc-map-value To remove the configured FM-MAP value, use the no fip-snooping fc-map command.
PAGE 535
fip-snooping port-mode fcf Configure the port for bridge-to-FCF links. Syntax fip-snooping port-mode fcf To disable the bridge-to-FCF link on a port, use the no fip-snooping port-mode fcf command. Command Modes Command History Usage Information INTERFACE Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module The maximum number of FCFs supported per FIP snooping-enabled VLAN is four.
PAGE 536
www.dell.com | support.dell.com Syntax Parameters Command Mode Command History Example show fip-snooping enode [enode-mac-address] enode-macaddress Enter the MAC address of the ENodes to be displayed. EXEC EXEC Privilege Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module FTOS# show fip-snooping enode Enode MAC Enode Interface ----------------------d4:ae:52:1b:e3:cd Te 0/11 Table 17-1.
PAGE 537
Table 17-2 lists the show fip-snooping fcf command field descriptions. Table 17-2. show fip-snooping fcf Command Field Descriptions Field Description FCF MAC MAC address of the FCF FCF Interface Slot/port number of the interface to which the FCF is connected. VLAN VLAN ID number used by the session FC-MAP FC-Map value advertised by the FCF. ENode Interface Slot/ number of the interface connected to the ENode.
PAGE 538
www.dell.com | support.dell.com Table 17-3. show fip-snooping sessions Command Field Description (continued) Field Description FCF Interface Slot/ port number of the interface to which the FCF is connected. VLAN VLAN ID number used by the session. FCoE MAC MAC address of the FCoE session assigned by the FCF. FC-ID Fibre Channel ID assigned by the FCF. Port WWPN Worldwide port name of the CNA port. Port WWNN Worldwide node name of the CNA port.
PAGE 539
Number of FCF Discovery Timeouts Number of VN Port Session Timeouts Number of Session failures due to Hardware Config FTOS(conf)# :0 :0 :0 FTOS# show fip-snooping statistics int tengigabitethernet 0/11 Number of Vlan Requests :1 Number of Vlan Notifications :0 Number of Multicast Discovery Solicits :1 Number of Unicast Discovery Solicits :0 Number of FLOGI :1 Number of FDISC :16 Number of FLOGO :0 Number of Enode Keep Alive :4416 Number of VN Port Keep Alive :3136 Number of Multicast Discovery Advertiseme
PAGE 540
www.dell.com | support.dell.com Table 17-4.
PAGE 541
Command Mode Command History Example EXEC EXEC Privilege Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module FTOS# show fip-snooping system Global Mode FCOE VLAN List (Operational) FCFs Enodes Sessions : : : : : Enabled 1, 100 1 2 17 show fip-snooping vlan Display information on the FCoE VLANs on which FIP snooping is enabled.
PAGE 542
www.dell.com | support.dell.com Command History 542 | FIP Snooping Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810.
PAGE 543
18 Force10 Resilient Ring Protocol (FRRP) Overview Force10 Resilient Ring Protocol (FRRP) is supported on Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , or . FRRP is a proprietary protocol for that offers fast convergence in a Layer 2 network without having to run the Spanning Tree Protocol.
PAGE 544
www.dell.com | support.dell.com • • • • A VLAN configured as control VLAN for a ring cannot be configured as control or member VLAN for any other ring. Member VLANs across multiple rings are not supported in Master nodes. If multiple rings share one or more member VLANs, they cannot share any links between them. Each ring can have only one Master node; all others are Transit nodes. clear frrp Clear the FRRP statistics counters.
PAGE 545
debug frrp Enable FRRP debugging. ce Syntax debug frrp {event | packet | detail} [ring-id] [count number] To disable debugging, use the no debug frrp {event | packet | detail} {ring-id} [count command. number] Parameters event Enter the keyword event to display debug information related to ring protocol transitions. packet Enter the keyword packet to display brief debug information related to control packets.
PAGE 546
www.dell.com | support.dell.com Command Modes Command History CONFIGURATION (conf-frrp) Version 8.2.1.0 Introduced for the C-Series Version 7.4.1.0 Introduced disable ce Disable the Resilient Ring Protocol. Syntax disable To enable the Resilient Ring Protocol, use the no disable command. Defaults Command Modes Command History Disabled CONFIGURATION (conf-frrp) Version 8.2.1.0 Introduced for the C-Series Version 7.4.1.
PAGE 547
secondary interface Enter the keyword secondary to configure the secondary interface followed by one of the following interfaces and slot/port information: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 548
www.dell.com | support.dell.com Defaults No default values or behavior Command Modes Command History CONFIGURATION (conf-frrp) Version 8.3.19.0 Introduced for the S4820T Version 8.3.7.0 Introduced for the S4810 Version 8.2.1.0 Introduced for the C-Series Version 7.4.1.0 Introduced mode Set the Master or Transit mode of the ring. ce Syntax mode {master | transit} To reset the mode, use the no mode {master | transit} command.
PAGE 549
Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced for the S4820T Version 8.3.7.0 Introduced for the S4810 Version 8.2.1.0 Introduced for the C-Series Version 7.4.1.0 Introduced Usage Information This command places you into the Resilient Ring Protocol. After executing this command, the command line prompt changes to conf-frrp. show frrp Display the Resilient Ring Protocol configuration.
PAGE 550
www.dell.com | support.dell.
PAGE 551
Usage Information The hello interval is the interval at which ring frames are generated from the primary interface of the master node. The dead interval is the time that elapses before a timeout occurs.
PAGE 552
www.dell.com | support.dell.
PAGE 553
19 GARP VLAN Registration (GVRP) Overview The basic GVRP commands are supported by FTOS on all Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , or .
PAGE 554
www.dell.com | support.dell.com GVRP ensures that all participants on a bridged LAN maintain the same VLAN registration information. The VLAN registration information propagated by GVRP include both manually configured local static entries and dynamic entries from other devices.
PAGE 555
clear gvrp statistics ces Clear GVRP statistics on an interface. Syntax Parameters clear gvrp statistics interface interface interface interface Enter the following keywords and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 556
www.dell.com | support.dell.com pdu Enter the keyword pdu followed one of the following Interface keywords and slot/port or number information: (Not available on S4810 or S4820T) • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 557
garp timers ces Set the intervals (in milliseconds) for sending GARP messages. Syntax garp timers {join | leave | leave-all} To return to the previous setting, use the no garp timers {join | leave | leave-all} command. Parameters Enter the keyword join followed by the number of milliseconds to configure the join time.
PAGE 558
www.dell.com | support.dell.com Related Commands show garp timers Display the current GARP times gvrp enable ces Enable GVRP on physical interfaces and LAGs. gvrp enable Syntax To disable GVRP on the interface, use the no gvrp enable command. Defaults Disabled Command Modes Command History Related Commands CONFIGURATION-INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on C, E, and S-Series disable Globally disable GVRP.
PAGE 559
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on C, E, and S-Series Usage Information The fixed registration prevents an interface, configured via the command line to belong to a VLAN (static configuration), from being un-configured when it receives a Leave message. Therefore, the registration mode on that interface is fixed. The normal registration is the default registration. The port’s membership in the VLANs depends on GVRP.
PAGE 560
www.dell.com | support.dell.com Command History Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on C, E, and S-Series gvrp enable Enable GVRP on physical interfaces and LAGs. protocol gvrp Access GVRP protocol. show garp timers ces Syntax Defaults Command Modes Display the GARP timer settings for sending GARP messages.
PAGE 561
Parameters brief (OPTIONAL) Enter the keyword brief to display a brief summary of the GVRP configuration. interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 562
www.dell.com | support.dell.com show gvrp statistics ces Syntax Parameters Display the GVRP configuration statistics. show gvrp statistics {interface interface | summary} interface interface Enter the keyword interface followed by one of the interface keywords and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
PAGE 563
• • • • The Attribute Type of the attribute that was being parsed was not the GVRP VID Attribute Type (0x01). The attribute that was being parsed had an invalid attribute length. The attribute that was being parsed had an invalid GARP event. The attribute that was being parsed had an invalid VLAN ID. The valid range is 1 - 4095.
PAGE 564
www.dell.com | support.dell.
PAGE 565
20 High Availability (HA) Overview High Availability (HA) in FTOS is configuration synchronization to minimize recovery time in the event of a Route Processor Module (RPM) failure. The feature is available on the C-Series and E-Series where noted by these symbols under command headings: c e s and FTOS on the E-Series supports RPM 1 + 1 redundancy. The Primary RPM performs all routing and control operations, while the Secondary RPM is online and monitoring the Primary RPM.
PAGE 566
www.dell.com | support.dell.com • • • • • redundancy sfm standby redundancy synchronize show patch show processes restartable show redundancy patch flash://RUNTIME_PATCH_DIR Insert an In-Service Modular Hot-Fix patch. e Syntax patch flash://RUNTIME_PATCH_DIR/patch-filename To remove the patch, enter no patch flash://RUNTIME_PATCH_DIR/patch-filename Defaults None Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810.
PAGE 567
Parameters Defaults Command Modes Command History Related Commands process Configure a process to be restartable. count number Enter the number of times a process can restart within the configured period. Range: 1-3 Default: 3 period minutes Enter the amount of time within which the process can restart count times. Range: 1-60 minutes Default: 60 minutes By default, a process can be restarted a maximum of 3 times within 1 hour.
PAGE 568
www.dell.com | support.dell.com Usage Information If auto failover is disabled, enter the redundancy auto-failover-limit (without any parameters) to set auto failover to the default parameters (Count 3, Period 60 minutes).Use the show redundancy command to view the redundancy status. When you change one or both of the optional parameters, FTOS checks that the interval between auto failovers is more than five (5) minutes. If the interval is less, FTOS returns a configuration error message.
PAGE 569
Parameters rpm Enter the keyword rpm to force the secondary RPM to become the primary RPM. sfm slot-number EtherScale Only — Enter the keyword sfm followed by the SFM slot number. Range: 0 to 8. Defaults Not configured. Command Modes EXEC Privilege Command History Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.5.1.0 Introduced on C-Series Version 7.6.1.
PAGE 570
www.dell.com | support.dell.com To delete a configuration, enter no redundancy primary. Parameters rpm0 Enter the keyword rpm0 to set the RPM in slot R0 as the primary RPM. rpm1 Enter the keyword rpm1 to set the RPM in slot R1 as the primary RPM. Defaults The RPM in slot R0 is the Primary RPM. Command Modes Command History CONFIGURATION Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.5.1.0 Introduced on C-Series Version 7.6.1.
PAGE 571
redundancy reset-counter Reset failover counter and timestamp information displayed in the show redundancy command output. e Syntax Defaults Command Modes Command History redundancy reset-counter Not configured EXEC Privilege Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on E-Series redundancy sfm standby c Syntax Place the SFM in an offline state.
PAGE 572
www.dell.com | support.dell.com 0 1 active active FTOS#configure FTOS(conf)#redundancy sfm standby Taking secondary SFM offline... ! FTOS(conf)#do show sfm all Switch Fabric State: up -- Switch Fabric Modules -Slot Status --------------------------------------------------------------------------0 active 1 standby FTOS(conf)#no redundancy sfm Taking secondary SFM online...
PAGE 573
Version 7.5.1.0 Introduced on C-Series Version 7.6.1.0 Introduced on E-Series show patch Display the system patches loaded with the In-Service Modular Hot Fix Command. e Syntax Command Modes Command History Related Commands show patch EXEC Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.2.1.0 Introduced on E-Series patch flash:// RUNTIME_PATCH_DIR Insert an In-Service Modular Hot-Fix patch.
PAGE 574
www.dell.com | support.dell.com ------------------------------------------------------------------------------------radius [5/23/2001 10:11:47] ------------------------------------------------------------------------------------- Related Commands process restartable show redundancy Display the current redundancy configuration. ce Syntax show redundancy Command Modes EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810.
PAGE 575
Line Card Config: Start-up Config: SFM Config State: Runtime Event Log: Running Config: FTOS# Table 20-1.
PAGE 576
www.dell.com | support.dell.
PAGE 577
21 ICMP Message Types This chapter lists and describes the possible ICMP Message Type. The first three columns list the possible symbol or type/code. For example, you would receive a ! or 03 as an echo reply from a ping. Table 21-2.
PAGE 578
www.dell.com | support.dell.com Table 21-2.
PAGE 579
22 Internet Group Management Protocol (IGMP) Overview The IGMP commands are supported by FTOS on all Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e , or . E-Series, c C-Series, s S-Series, This chapter contains the following sections: • • IGMP Commands IGMP Snooping Commands IGMP Commands FTOS supports IGMPv1/v2/v3 and is compliant with RFC-3376.
PAGE 580
www.dell.com | support.dell.com • • • • • • • • • • • • • ip igmp access-group ip igmp group-join-limit ip igmp immediate-leave ip igmp last-member-query-interval ip igmp querier-timeout ip igmp query-interval ip igmp query-max-resp-time ip igmp ssm-map ip igmp static-group ip igmp version show ip igmp groups show ip igmp interface show ip igmp ssm-map clear ip igmp groups ces Syntax Parameters Command Modes Command History Clear entries from the group cache table.
PAGE 581
Usage Information IGMP commands accept only non-VLAN interfaces — specifying VLAN will not yield a result. debug ip igmp ces Syntax Enable debugging of IGMP packets. debug ip igmp [group address | interface] To disable IGMP debugging, enter no debug ip igmp [group address | interface]. To disable all debugging, enter undebug all. Parameters Defaults Command Modes Command History group-address (OPTIONAL) Enter the IP multicast group address in dotted decimal format.
PAGE 582
www.dell.com | support.dell.com ip igmp access-group ces Syntax Use this feature to specify access control for packets. ip igmp access-group access-list To remove the feature, use the no ip igmp access-group access-list command. Parameters Defaults Command Modes Command History Usage Information access-list Enter the name of the extended ACL (16 characters maximum). Not configured INTERFACE (conf-if-interface-slot/port) Version 8.3.19.0 Introduced on S4820T Version 8.3.7.
PAGE 583
ip igmp immediate-leave ces Syntax Enable IGMP immediate leave. ip igmp immediate-leave [group-list prefix-list-name] To disable ip igmp immediate leave, use the no ip igmp immediate-leave command. Parameters Defaults Command Modes Command History group-list prefix-list-name Enter the keyword group-list followed by a string up to 16 characters long of the prefix-list-name. Not configured INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.
PAGE 584
www.dell.com | support.dell.com Command Modes Command History INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on S-Series Version 7.7.1.0 Introduced on C-Series E-Series legacy command ip igmp querier-timeout ces Syntax Change the interval that must pass before a multicast router decides that there is no longer another multicast router that should be the querier.
PAGE 585
To return to the default values, enter no ip igmp query-interval. Parameters Defaults Command Modes Command History Enter the number of seconds between queries sent out. Default: 60 seconds Range: 1 to 18000 seconds 60 seconds INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on S-Series Version 7.7.1.0 Introduced on C-Series Version 7.6.1.
PAGE 586
www.dell.com | support.dell.com Version 7.6.1.0 Introduced on S-Series in Interface VLAN mode only to enable that system to act as an IGMP Proxy Querier. Version 7.5.1.0 Introduced on C-Series in Interface VLAN mode only to enable that system to act as an IGMP Proxy Querier. E-Series legacy command ip igmp ssm-map ces Syntax Use a statically configured list to translate (*,G) memberships to (S,G) memberships.
PAGE 587
Syntax ip igmp static-group {group address [exclude [source address]] address}]} | [include {source To delete a static address, use the no ip igmp static-group {group address [exclude [source address]] | [include {source address}]} command. Parameters group address Enter the group address in dotted decimal format (A.B.C.D) exclude source address (OPTIONAL) Enter the keyword exclude followed by the source address, in dotted decimal format (A.B.C.D), for which a static entry needs to be added.
PAGE 588
www.dell.com | support.dell.com Syntax Parameters Defaults Command Modes Command History ip igmp version {2 | 3} 2 Enter the number 2 to set the IGMP version number to IGMPv2. 3 Enter the number 3 to set the IGMP version number to IGMPv3. 2 (that is IGMPv2) INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on S-Series Version 7.7.1.0 Introduced on C-Series Version 7.5.1.
PAGE 589
interface (OPTIONAL) Enter the interface type and slot/port information: • For a 100/1000 Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.
PAGE 590
www.dell.com | support.dell.com Example (VLT Port Channel Down) Note: The asterisk (*) after the port channel number (Po 2) highlighted in the example below indicates the port channel is VLT, that the local VLT port channel is down and the remote VLT port is up. FTOS#show ip igmp groups Total Number of Groups: 5 IGMP Connected Group Membership Group Address Interface 225.0.0.0 Vlan 100 Member Ports: Po 2* 225.0.0.1 Vlan 100 Member Ports: Po 2* 225.0.0.2 Vlan 100 Member Ports: Po 2* 225.0.0.
PAGE 591
Parameters interface (OPTIONAL) Enter the interface type and slot/port information: • For a 100/1000 Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.
PAGE 592
www.dell.com | support.dell.com show ip igmp ssm-map ces Display is a list of groups that are currently in the IGMP group table and contain SSM mapped sources. Syntax Parameters Command Modes show ip igmp ssm-map [group] group (OPTIONAL) Enter the multicast group address in the form A.B.C.D to display the list of sources to which this group is mapped. EXEC EXEC Privilege Command History Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.
PAGE 593
• • • • • • • • • FTOS IGMP snooping implementation is based on IP multicast address (not based on Layer 2 multicast mac-address) and the IGMP snooping entries are in Layer 3 flow table not in Layer 2 FIB. FTOS IGMP snooping implementation is based on draft-ietf-magma-snoop-10. FTOS supports IGMP snooping on JUMBO enabled cards. IGMP snooping is not enabled by default on the switch. A maximum of 1800 groups and 600 VLAN are supported. IGMP snooping is not supported on default VLAN interface.
PAGE 594
www.dell.com | support.dell.com Defaults Command Modes Disabled CONFIGURATION INTERFACE VLAN Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series legacy command Usage Information You must enter this command to enable IGMP snooping. When enabled from CONFIGURATION mode, IGMP snooping is enabled on all VLAN interfaces (except default VLAN).
PAGE 595
Usage Information Queriers normally send a certain number of queries when a leave message is received prior to deleting a group from the membership database. There may be situations in which fast deletion of a group is required. When IGMP fast leave processing is enabled, the switch will remove an interface from the multicast group as soon as it detects an IGMP version 2 leave message on the interface.
PAGE 596
www.dell.com | support.dell.com Defaults Command Modes Command History 1000 milliseconds INTERFACE VLAN Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series legacy command ip igmp snooping mrouter ces Syntax Statically configure a VLAN member port as a multicast router interface.
PAGE 597
Usage Information FTOS provides the capability of statically configuring interface to which a multicast router is attached. To configure a static connection to the multicast router, enter the ip igmp snooping mrouter interface command in the VLAN context. The interface to the router must be a part of the VLAN where you are entering the command. ip igmp snooping querier ces Syntax Enable IGMP querier processing for the VLAN interface.
PAGE 598
www.dell.com | support.dell.com Command History Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series E-Series legacy command Example Usage Information Related Commands 598 Version 8.3.19.
PAGE 599
\ 23 Interfaces Overview The commands in this chapter are supported by FTOS on all Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , , or Z Z-Series. Although all interfaces are supported on E-Series ExaScale, some interface functionality is supported on E-Series ExaScale ex with FTOS 8.2.1.0. and later. When this is the case that is noted in the command history.
PAGE 600
www.dell.com | support.dell.
PAGE 601
clear counters ces Syntax Parameters Clear the counters used in the show interfaces commands for all VRRP groups, VLANs, and physical interfaces, or selected ones. clear counters [interface] [vrrp [{[ipv6] vrid | vrf instance}] | learning-limit] interface (OPTIONAL) Enter any of the following keywords and slot/port or number to clear counters from a specified interface: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 602
www.dell.com | support.dell.com Example Related Commands Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Support for 4093 VLANs on E-Series ExaScale. Prior to release supported 2094. Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 6.5.1.0 Updated definition of the learning-limit option for clarity.
PAGE 603
Usage Information Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 7.4.1.0 Introduced on E-Series On the S4810 and S4820T, after you enter the clear counters command and verify the results with the show interfaces command, the line rate is not reset to 0.00%. Example Related Commands FTOS#clear dampening gigabitethernet 1/2 Clear dampening counters on Gi 1/2 [confirm] y FTOS# show interfaces dampening Display interface dampening information.
PAGE 604
www.dell.com | support.dell.com FTOS(conf-if-te-0/26)#cx4-cable-length long % Error: Unsupported command. FTOS(conf-if-te-0/26)# The figure below shows a successful CX4 cable length configuration.
PAGE 605
Command History Example Usage Information Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 7.4.1.0 Introduced on E-Series FTOS(conf-if-gi-3/2)#dampening 20 800 4500 120 FTOS(conf-if-gi-3/2)# With each flap, FTOS penalizes the interface by assigning a penalty (1024) that decays exponentially depending on the configured half-life.
PAGE 606
www.dell.com | support.dell.com • • • Related Commands Entering a text string after the description command overwrites any previous text string configured as the description. The shutdown and description commands are the only commands that you can configure on an interface that is a member of a port-channel. Use the show interfaces description command to display descriptions configured for each interface. show interfaces description Display description field of interfaces.
PAGE 607
Command History Usage Information Related Commands Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.5.1.0 Introduced on C-Series Version 6.4.1.0 Documentation modified—added Management to distinguish from duplex (10/ 100 Interfaces) This command applies only to the Management interface on the RPMs. interface ManagementEthernet Configure the Management port on the system (either the Primary or Standby RPM). duplex (Management) Set the mode of the Management interface.
PAGE 608
www.dell.com | support.dell.com Related Commands speed (for 10/100/1000 interfaces) Set the speed on the Base-T Ethernet interface. negotiation auto Enable or disable auto-negotiation on an interface. ecmp-group Provides a mechanism to monitor traffic distribution on a LAG link bundle. A system log or SNMP trap is generated when the standard deviation of traffic distribution on a member link exceeds a defined threshold.
PAGE 609
Parameters Defaults rx on Enter the keywords rx on to process the received flow control frames on this port. This is the default value for the receive side. rx off Enter the keywords rx off to ignore the received flow control frames on this port. tx on Enter the keywords tx on to send control frames from this port to the connected device when a higher rate of traffic is received. This is the default value on the send side.
PAGE 610
www.dell.com | support.dell.com Changes in the flow-control values may not be reflected automatically in the show interface output. As a workaround, apply the new settings, execute shut followed by no shut on the interface, and then check the running-config of the port using the show interface command. Note: If rx flow control is disabled, Dell Force10 recommends rebooting the system. Important Points to Remember • • Do not enable tx pause when buffer carving is enabled.
PAGE 611
The table below displays how FTOS negotiates the flow control values between two Dell Force10 chassis connected back-to-back using 1G copper ports. Table 23-1.
PAGE 612
www.dell.com | support.dell.com Defaults Command Modes Command History Not configured. CONFIGURATION Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 6.4.1.0 Introduced Example FTOS(conf)#interface gig 0/0 FTOS(conf-if-gi-0/0)#exit# Usage Information You cannot delete a physical interface.
PAGE 613
FTOS(conf-if-lo-1655)# Related Commands interface Configure a physical interface. interface null Configure a Null interface. interface port-channel Configure a port channel. interface vlan Configure a VLAN. interface ManagementEthernet ces Configure the Management port on the system (either the Primary or Standby RPM).
PAGE 614
www.dell.com | support.dell.com interface null ces Syntax Parameters Defaults Command Modes Command History Configure a Null interface on the switch. interface null number number Not configured; number = 0 CONFIGURATION Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 6.4.1.0 Introduced Example Usage Information Related Commands Enter zero (0) as the Null interface number.
PAGE 615
Parameters interface, interface,... Enter the keyword interface range and one of the interfaces — slot/port, port-channel or VLAN number. Select the range of interfaces for bulk configuration. You can enter up to six comma separated ranges—spaces are not required between the commas. Comma-separated ranges can include VLANs, port-channels and physical interfaces. Slot/Port information must contain a space before and after the dash.
PAGE 616
www.dell.com | support.dell.com • Example If overlapping port ranges are specified, the port range is extended to the smallest start port and the biggest end port.
PAGE 617
show config (from INTERFACE RANGE mode) Show the bulk configuration interfaces. show range Show the bulk configuration ranges. interface range macro (define) Define a macro for an interface-range. interface range macro (define) ces Syntax Parameters Defines a macro for an interface range and then saves the macro in the running configuration. define interface range macro name interface , interface , ... name Enter up to 16 characters for the macro name. interface , interface ,...
PAGE 618
www.dell.com | support.dell.
PAGE 619
Parameters Defaults Command Modes Command History vlan-id Not configured, except for the Default VLAN, which is configured as VLAN 1. CONFIGURATION Version 8.2.1.0 Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094. Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.0 Introduced for E-Series Example Usage Information Enter a number as the VLAN Identifier. Range: 1 to 4094.
PAGE 620
www.dell.com | support.dell.com Command Modes Command History Usage Information INTERFACE Version 8.2.1.0 Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094. Version 8.1.1.0 Introduced on E-Series ExaScale pre-Version 6.1.1.0 Introduced for E-Series For 1-Gigabit Ethernet interfaces only. Note: This command is an EtherScale only command. ipg (10 Gigabit Ethernet interfaces) e Syntax Set the Inter-packet Gap for traffic on 10 Gigabit Ethernet interface. ipg {ieee-802.
PAGE 621
Parameters Defaults Command Modes Command History Usage Information seconds (OPTIONAL) For SONET interfaces with PPP encapsulation enabled, enter the number of seconds between keepalive packets. Range: 0 to 23767 Default: 10 seconds Enabled INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.2 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.
PAGE 622
www.dell.com | support.dell.com Parameters Command Modes Command History Usage Information Enter the time to delay link status change notification on this interface. Range: 100-5000 ms Default for copper is 3100 ms Default for fiber is 100 ms milliseconds INTERFACE Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on E-Series Changes do not affect any ongoing debounces. The timer changes take affect from the next debounce onward.
PAGE 623
Usage Information The delta column displays changes since the last screen refresh. Example (Single Interface) systest-3 Monitor time: 00:00:06 Refresh Intvl.
PAGE 624
www.dell.com | support.dell.com Gi 0/19 0 18 9 1114221 523329 Down 0 0 0 Gi 0/20 Up 62734 54 Gi 0/21 Up 60198 9 Gi 0/22 Up 17304741100 3157554 10102508511 Gi 0/23 Up 17304769659 3139507 7133354895 m b l T q - Change mode Display bytes Page up Increase refresh interval Quit Table 23-2.
PAGE 625
Parameters Defaults Command Modes Command History Usage Information value Enter a maximum frame size in bytes. Range: 594 to 9252 S4810 and S4820T Range: 594 to 12000 Default: 1554 1554 INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.
PAGE 626
www.dell.com | support.dell.com Example The VLAN contains tagged members with Link MTU of 1522 and IP MTU of 1500 and untagged members with Link MTU of 1518 and IP MTU of 1500. The VLAN’s Link MTU cannot be higher than 1518 bytes and its IP MTU cannot be higher than 1500 bytes. Table 23-3.
PAGE 627
Example (Master/Slave) FTOS(conf)# int gi 0/0 FTOS(conf-if)#neg auto FTOS(conf-if-autoneg)# ? end Exit from configuration mode exit Exit from autoneg configuration mode mode Specify autoneg mode no Negate a command or set its defaults show Show autoneg configuration information FTOS(conf-if-autoneg)#mode ? forced-master Force port to master mode forced-slave Force port to slave mode FTOS(conf-if-autoneg)# If the mode option is not used, the default setting is slave.
PAGE 628
www.dell.com | support.dell.com Table 23-4.
PAGE 629
FTOS(conf-if-vl-20)# Usage Information The example above sets a port as hybrid, makes the port a tagged member of VLAN 20, and an untagged member of VLAN 10, which becomes the native VLAN of the port. The port will now accept: • • Example (Tagged Hybrid Interface) untagged frames and classify them as VLAN 10 frames VLAN 20 tagged frames The next example shows output with “Hybrid” as the newly added value for 802.1QTagged.
PAGE 630
www.dell.com | support.dell.com Parameters seconds Enter the number of seconds for which to collect traffic data. Range: 30 to 299 seconds Note: Since polling occurs every 15 seconds, the number of seconds designated here will round to the multiple of 15 seconds lower than the entered value. For example, if 44 seconds is designated it will round to 30; 45 to 59 seconds will round to 45, and so forth. Defaults Command Modes 299 seconds INTERFACE Command History Usage Information Version 8.1.1.
PAGE 631
show config (from INTERFACE RANGE mode) ces Syntax Command Modes Command History Display the bulk configured interfaces (interface range). show config CONFIGURATION INTERFACE (conf-if-range) Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 6.1.1.
PAGE 632
www.dell.com | support.dell.com Parameters Command Modes interface Enter one of the following keywords and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.
PAGE 633
Note: In the CLI output, the power value will be rounded to a 3-digit value. For receive/transmit power that is less than 0.000, an snmp query will return the corresponding dbm value even though the CLI displays as 0.000. Note: After the counters are cleared, the line-rate continues to increase until it reaches the maximum line rate. When the maximum line rate is reached, there will be no change in the line-rate.
PAGE 634
www.dell.com | support.dell.com Table 23-5. Lines in show interfaces Command Example (EtherScale) Line Description ARP type:... Displays the ARP type and the ARP timeout value for the interface. Last clearing... Displays the time when the show interfaces counters where cleared. Queuing strategy... States the packet queuing strategy. FIFO means first in first out.
PAGE 635
Table 23-5.
PAGE 636
www.dell.com | support.dell.com 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 24 Multicasts, 0 Broadcasts, 857708 Unicasts 0 Vlans,0 throttles, 0 discarded, 0 collisions, 4409143619 wredDrops Rate info (interval 30 seconds): Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Output 00.00 Mbits/sec, 0 packets/sec, 0.
PAGE 637
LineSpeed 10 Mbit, Mode half duplex ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 04:01:08 Queueing strategy: fifo Input 943 packets, 78347 bytes, 190 multicast Received 0 errors, 0 discarded Output 459 packets, 102388 bytes, 15 multicast Output 0 errors, 0 invalid protocol Time since last interface status change: 00:03:09 Usage Information On the C-Series and S-Series, the interface counter “over 1023-byte pkts” does not increment for packets in the range 9216 > x < 1023
PAGE 638
www.dell.com | support.dell.com Example Related Commands Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 6.4.1.0 Changed organization of display output FTOS#show interfaces configured GigabitEthernet 13/18 is up, line protocol is up Hardware is Force10Eth, address is 00:01:e8:05:f7:fc Current address is 00:01:e8:05:f7:fc Interface index is 474791997 Internet address is 1.1.1.
PAGE 639
Parameters Defaults Command Modes Command History interface (Optional) Enter one of the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Port Channel interface, enter the keyword port-channel followed by a number: C-Series and S-Series Range: 1-128 E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale and 1 to 512 for ExaScale.
PAGE 640
www.dell.com | support.dell.com Parameters Command Modes interface Enter one of the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the slot/port information.
PAGE 641
Command History Example Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.2.1.0 Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094. Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.
PAGE 642
www.dell.com | support.dell.com Parameters slot-number Enter a number for the line card slot. C-Series Range: 0-7 for C300; 0–3 for C150 E-Series Range: 0 to 13 on the E1200/1200i, 0 to 6 on the E600/600i, 0 to 5 on the E300 Command Modes EXEC Command History Usage Example Related Commands EXEC Privilege Version 8.1.1.2 Introduced support on E-Series ExaScale E600i Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.
PAGE 643
Parameters Command Modes gigabitethernet Enter the keyword gigabitethernet followed by the slot/port information. EXEC EXEC Privilege Command History Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on C-Series and S-Series Version 6.5.4.
PAGE 644
www.dell.com | support.dell.com Table 23-7. Related Commands Lines in show interfaces gigabitethernet Command Example Line Description AutoNegotiation Remote Partner’s Ability Displays the control words advertised by the remote interface during negotiation. Duplex is either half or full.
PAGE 645
EXEC Privilege Command History Example Version 8.3.11.1 Introduced on Z9000 Version 7.6.1.
PAGE 646
www.dell.com | support.dell.com Parameters Defaults Command Modes interface (OPTIONAL) Enter one of the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the slot/port information.
PAGE 647
Syntax Parameters show interfaces switchport [interface [linecard slot-number] | stack-unit unit-id ] interface Enter one of the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Port Channel interface, enter the keyword port-channel followed by a number: C-Series and S-Series Range: 1-128 E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale and 1 to 512 for ExaScale.
PAGE 648
www.dell.com | support.dell.com Vlan 2 Name: GigabitEthernet 13/3 802.1QTagged: True Vlan membership: Vlan 2 --More-- Table 23-8. Related Commands Items in show interfaces switchport Command Example Items Description Name Displays the interface’s type, slot and port number. 802.1QTagged Displays whether if the VLAN tagged (“True”), untagged (“False”), or hybrid (“Hybrid”), which supports both untagged and tagged VLANs by port 13/0.
PAGE 649
Usage Version 7.8.1.0 Output augmented with diagnostic data for pluggable media. Version 7.7.1.0 Removed three fields in output: Vendor Name, Vendor OUI, Vendor PN. Version 7.6.1.0 Introduced on C-Series and S-Series. Version 6.5.4.0 Introduced on E-Series. Refer to the figure below for an example screenshot, and the following table or a description of the output fields.
PAGE 650
www.dell.com | support.dell.com SFP 1 TX Power Low Warning threshold = 0.079mW SFP 1 RX Power Low Warning threshold = 0.016mW =================================== SFP 1 Temperature = 39.930C SFP 1 Voltage = 3.293V SFP 1 Tx Bias Current = 6.894mA SFP 1 Tx Power = 0.328mW SFP 1 Rx Power = 0.
PAGE 651
Table 23-9. Diagnostic Data in show interfaces transceiver (continued) Line Description Voltage High Warning threshold Factory-defined setting. Value can differ between SFP and SFP+. Bias High Warning threshold Factory-defined setting. Value can differ between SFP and SFP+. TX Power High Warning threshold Factory-defined setting. Value can differ between SFP and SFP+. RX Power High Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
PAGE 652
www.dell.com | support.dell.com Table 23-9. 652 | Interfaces Diagnostic Data in show interfaces transceiver (continued) Line Description Tx Fault state This is the digital state of the Tx Fault output pin. Rate Select state This is the digital state of the SFP rate_select input pin. RS state This is the reserved digital state of the pin AS(1) per SFF-8079 and RS(1) per SFF-8431. Tx Disable state If the admin status of the port is down then this flag will be set to true.
PAGE 653
Table 23-9. Related Commands Diagnostic Data in show interfaces transceiver (continued) Line Description Tx Power Low Warning Flag This can be either true or false, depending on the Current Tx power value displayed above. Rx Power Low Warning Flag This can be either true or false, depending on the Current Rx power value displayed above. interface Configure a physical interface on the switch. show ip interface Displays Layer 3 information about the interfaces.
PAGE 654
www.dell.com | support.dell.com Syntax Command Mode Defaults Command History Related Commands show running-config ecmp-group CONFIGURATION Disabled Version 8.3.19.0 Introduced on S4820T Version 8.3.10.0 Introduced on S4810 ecmp-group Configure a mechanism to monitor traffic distribution. shutdown ces Syntax Disable an interface. shutdown To activate an interface, enter no shutdown. Defaults Command Modes Command History The interface is disabled. INTERFACE Version 8.3.19.
PAGE 655
Related Commands interface port-channel Create a port channel interface. interface vlan Create a VLAN. show ip interface Displays the interface routing status. Add the keyword brief to display a table of interfaces and their status. speed (for 10/100/1000 interfaces) ces Syntax Set the speed for 10/100/1000 Base-T Ethernet interfaces. Both sides of a link must be set to the same speed (10/100/1000) or to auto or the link may not come up.
PAGE 656
www.dell.com | support.dell.com When you configure a speed for the 10/100/1000 interface, you should confirm the negotiation auto command setting. Both sides of the link should have auto-negotiation either enabled or disabled. For speed settings of 1000 or auto, the software sets the link to auto-negotiation and you cannot change that setting. In FTOS, the command speed 100 is an exact equivalent of speed auto 100 in IOS. Note: Starting with FTOS 7.8.1.
PAGE 657
Related Commands interface ManagementEthernet Configure the Management port on the system (either the Primary or Standby RPM). duplex (Management) Set the mode of the Management interface. management route Configure a static route that points to the Management interface or a forwarding router. stack-unit portmode Split a single 40G port into 4-10G ports on the S4810, S4820T, or Z9000.
PAGE 658
www.dell.com | support.dell.com switchport ces Syntax Place an interface in Layer 2 mode. switchport [backup interface {gigabit slot/port | tengigabit slot/port | fortyGigE slot/port | port-channel number}] To remove an interface from Layer 2 mode and place it in Layer 3 mode, enter no switchport. If a switchport backup interface is configured, you must first remove the backup configuration.
PAGE 659
To use the switchport backup interface command on a port, you must first enter the switchport command. For details, the Configuring Redundant Links section in the Layer 2 chapter of the FTOS Configuration Guide. Related Commands interface port-channel Create a port channel interface. show interfaces switchport Display information about switchport interfaces. wanport e Syntax Enable the WAN mode on a TenGigabitEthernet interface. wanport To disable the WAN Port, enter no wanport.
PAGE 660
www.dell.com | support.dell.com Table 23-10.
PAGE 661
Parameters Defaults Command Modes Command History Usage Information interface Enter the following keywords and slot/port or number information: • For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a SONET interface, enter the keyword sonet followed by the slot/port information.
PAGE 662
www.dell.com | support.dell.com On the E-Series TeraScale, you can add up to 16 interfaces to a Port Channel; E-Series ExaScale can have up to 64. You can have eight interfaces per Port Channel on the C-Series and S-Series. The interfaces can be located on different line cards but must be the same physical type and speed (for example, all 1-Gigabit Ethernet interfaces). However, you can combine 100/1000 interfaces and GE interfaces in the same Port Channel.
PAGE 663
Related Commands port-channel failover-group Access the PORT-CHANNEL FAILOVER-GROUP mode to configure a LAG failover group. show interfaces port-channel Display information on configured Port Channel groups. interface port-channel ces Syntax Create a Port Channel interface, which is a link aggregation group containing up to 16 physical interfaces on E-Series, eight physical interfaces on C-Series and S-Series.
PAGE 664
www.dell.com | support.dell.com If the line card is in a Jumbo mode chassis, then the mtu and ip mtu commands can also be configured. The Link MTU and IP MTU values configured on the channel members must be greater than the Link MTU and IP MTU values configured on the Port Channel interface. Note: In a Jumbo-enabled system, all members of a Port Channel must be configured with the same link MTU values and the same IP MTU values. Related Commands channel-member Add a physical interface to the LAG.
PAGE 665
port-channel failover-group ces Syntax Access the PORT-CHANNEL FAILOVER-GROUP mode to configure a LAG failover group. port-channel failover-group To remove all LAG failover groups, use the no port-channel failover-group command. Defaults Command Modes No default values or behavior CONFIGURATION Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.
PAGE 666
www.dell.com | support.dell.com show interfaces port-channel ces Syntax Parameters Command Modes Display information on configured Port Channel groups. show interfaces port-channel [channel-number] [brief] channel-number For a Port Channel interface, enter the keyword port-channel followed by a number: C-Series and S-Series Range: 1-128 E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale and 1 to 512 for ExaScale.
PAGE 667
Table 23-11. Example (show interfaces port-channel brief) show interfaces port-channel Command Example Fields Field Description Port-Channel 1... Displays the LAG’s status. In the example, the status of the LAG’s LAG fate-sharing group (“Failover-group”) is listed. Hardware is... Displays the interface’s hardware information and its assigned MAC address. Port-channel is part... Indicates whether the LAG is part of a LAG fate-sharing group (“Failover-group”). Internet address...
PAGE 668
www.dell.com | support.dell.com Table 23-12. Related Commands show interfaces port-channel brief Command Example Fields Field Description LAG Lists the port channel number. Mode Lists the mode: • L3 - for Layer 3 • L2 - for Layer 2 Status Displays the status of the port channel. • down - if the port channel is disabled (shutdown) • up - if the port channel is enabled (no shutdown) Uptime Displays the age of the port channel in hours:minutes:seconds.
PAGE 669
Parameters outgoing-port-channel number Enter the keyword outgoing-port-channel followed by the number of the port channel to display flow information. • For a Port Channel interface, enter the keyword port-channel followed by a number: C-Series and S-Series Range: 1 to 128 E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale and 1 to 512 for ExaScale.
PAGE 670
www.dell.com | support.dell.com The show port-channel-flow command returns the egress port identification in a given port-channel if a valid flow is entered. A mismatched flow error occurs if MAC-based hashing is configured for a Layer 2 interface and the user is trying to display a Layer 3 flow. The output will display three entries: • • • Egress port for unfragmented packets. In the event of fragmented packets, egress port of the first fragment.
PAGE 671
• • tdr-cable-test show tdr Important Points to Remember • • • • The interface and port must be enabled (configured— the interface command) before running TDR. An error message is generated if you have not enabled the interface. The interface on the far-end device must be shut down before running TDR. Since TDR is an intrusive test on an interface that is not establishing a link, do not run TDR on an interface that is passing traffic.
PAGE 672
www.dell.com | support.dell.com show tdr ces Syntax Parameters Defaults Command Modes Command History Example Display the TDR test results. show tdr interface interface Enter the keyword GigabitEthernet followed by the slot/port information for the 100/1000 Ethernet interface. No default behavior or settings EXEC Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.7.1.0 Support added for S-Series Version 7.6.1.
PAGE 673
UDP Broadcast The User Datagram Protocol (UDP) broadcast feature is a software-based method to forward low throughput (not to exceed 200 pps) IP/UDP broadcast traffic arriving on a physical or VLAN interface. Important Points to Remember • • • • • This feature is available only on the E-Series platform, as noted by this symbol under each command heading: e This feature applies only to E-Series Layer 3 physical or VLAN interfaces.
PAGE 674
www.dell.com | support.dell.com Related Commands Command History ip udp-broadcast-address Configure a UDP IP address for broadcast ip udp-helper udp-port Enable the UDP broadcast feature on an interface. show ip udp-helper Display the configured UDP helper(s) on all interfaces. Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Pre-version 8.3.7.0 Introduced on E-Series ExaScale ip udp-broadcast-address Configure an IP UDP address for broadcast.
PAGE 675
Parameters udp-port-list (OPTIONAL) Enter up to 16 comma separated UDP port numbers. Note: If this option is not used, all UDP Ports are considered by default. Defaults Command Modes Usage Information No default behavior or values INTERFACE (config-if) If the ip helper-address command and ip udp-helper udp-port command are configured, the behavior is that the UDP broadcast traffic with port numbers 67/68 will be unicast relayed to the DHCP server per the ip helper-address configuration.
PAGE 676
www.dell.com | support.dell.com Related Commands 676 | Interfaces debug ip udp-helper Enable debug and display the debug information on a console. ip udp-broadcast-address Configure a UDP IP address for broadcast. ip udp-helper udp-port Enable the UDP broadcast feature on an interface either for all UDP ports or a specified list of UDP ports.
PAGE 677
24 IPv4 Routing Overview The basic IPv4 commands are supported by FTOS on all Dell Force10 systems, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , , or Z Z-Series. Commands IPv4-related commands are described in this chapter.
PAGE 678
www.dell.com | support.dell.
PAGE 679
Parameters Defaults Command Modes Command History Usage Information Related Commands vrf name E-Series Only: Enter the VRF process identifier to tie the static route to the VRF process. ip-address Enter an IP address in dotted decimal format. mac-address Enter a MAC address in nnnn.nnnn.nnnn format. interface Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 680
www.dell.com | support.dell.com Defaults Disabled Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.3.1.0 Introduced Usage Information In FTOS versions prior to 8.3.1.0, if a gratuitous ARP is received some time after an ARP request is sent, only RP2 installs the ARP information. For example: 1. At time t=0 FTOS sends an ARP request for IP A.B.C.D 2. At time t=1 FTOS receives an ARP request for IP A.B.C.D 3.
PAGE 681
arp timeout ces Set the time interval for an ARP entry to remain in the ARP cache. Syntax arp timeout minutes To return to the default value, enter no arp timeout. Parameters seconds Defaults 240 minutes (4 hours) Command Modes Command History Related Commands Enter the number of minutes. Range: 0 to 35790 Default: 240 minutes INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.
PAGE 682
www.dell.com | support.dell.com Parameters vrf name E-Series Only: Clear only the ARP cache entries tied to the VRF process. interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For the Management interface, enter the keyword ManagementEthernet followed by the slot/port information. The slot range is 0-1 and the port range is 0.
PAGE 683
ces Remove one or all dynamically learnt host table entries. Syntax Parameters Command Modes Command History clear host name name Enter the name of the host to delete. Enter * to delete all host table entries. EXEC Privilege Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.
PAGE 684
www.dell.com | support.dell.com Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series Usage Information Use this command to clear Layer 3 CAM inconsistencies. Caution: Executing this command will cause traffic disruption. Related Commands show ip fib linecard clear ip route ces Clear one or all routes in the routing table.
PAGE 685
ces Clear TCP counters. Syntax clear tcp statistics [all | cp | rp1 | rp2] Note: These options are supported only on the E-Series. Parameters Command Modes Command History all Enter the keyword all to clear all TCP statistics maintained on all switch processors. cp (OPTIONAL) Enter the cp to clear only statistics from the Control Processor. rp1 (OPTIONAL) Enter the keyword rp1 to clear only the statistics from Route Processor 1.
PAGE 686
www.dell.com | support.dell.com Parameters interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information. • For the Management interface, enter the keyword managementethernet followed by the slot/port information. The slot range is 0-1 and the port range is 0.
PAGE 687
Defaults Debug disabled Command Modes EXEC Privilege Command History Example Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Introduced on C-Series Version 6.4.
PAGE 688
www.dell.com | support.dell.com Parameters interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For the Management interface, enter the keyword ManagementEthernet followed by the slot/port information. The slot range is 0 and the port range is 0-1.
PAGE 689
ces Syntax View a log of IP packets sent and received. debug ip packet [access-group name] [count value] [interface] To disable debugging, use the no debug ip packet [access-group name] [count value] [interface] command. Parameters Command Mode Command History Example access-group name Enter the keyword access-group followed by the access list name (maximum 16 characters) to limit the debug output based on the defined rules in the ACL.
PAGE 690
www.dell.com | support.dell.com TCP src=23, dst=40869, seq=2112994894, ack=606901739, win=8191 ACK PUSH IP: s=10.1.2.206 (Ma 0/0), d=10.1.2.62, len 40, rcvd TCP src=0, dst=0, seq=0, ack=0, win=0 IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 0/0), len 226, sending TCP src=23, dst=40869, seq=2112994896, ack=606901739, win=8192 ACK PUSH IP: s=10.1.2.216 (Ma 0/0), d=10.1.2.255, len 78, rcvd UDP src=0, dst=0 IP: s=10.1.2.62 (local), d=10.1.2.
PAGE 691
Usage Information Use the count option to stop packets from flooding the user terminal when debugging is turned on. The access-group option supports only the equal to (eq) operator in TCP ACL rules. Port operators not equal to (neq), greater than (gt), less than (lt), or range are not supported in access-group option (Refer to the Example Error Messages below ). ARP packets (arp) and Ether-type (ether-type) are also not supported in access-group option. The entire rule is skipped to compose the filter.
PAGE 692
www.dell.com | support.dell.com Command Modes Command History INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Usage Information You must be in the INTERFACE mode before you add an IP address to an interface. Assign an IP address to an interface prior to entering the ROUTER OSPF mode.
PAGE 693
Parameters Defaults Command Modes Command History Usage Information name Enter a domain name to be used to complete unqualified names (that is, incomplete domain names that cannot be resolved). Disabled. CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.
PAGE 694
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Usage Information To fully enable DNS, also specify one or more domain name servers with the ip name-server command. FTOS does not support sending DNS queries over a VLAN. DNS queries are sent out all other interfaces, including the Management port.
PAGE 695
Usage Information You can only configure one domain name with the ip domain-name command. To configure more than one domain name, configure the ip domain-list command up to 6 times. Use the following steps to enable dynamic resolution of hosts: • • specify a domain name server with the ip name-server command. enable DNS with the ip domain-lookup command. To view current bindings, use the show hosts command. Related Commands ip domain-list Configure additional names.
PAGE 696
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History Usage Information ip-address Enter an IP address in dotted decimal format (A.B.C.D). default-vrf (Optional) E-Series Only: Enter default-vrf for the DHCP server VRF is using. Not configured. INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.9.1.0 Introduced VRF on the E-Series Version 7.6.1.
PAGE 697
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series Version 6.3.1.0 Introduced for E-Series Usage Information Related Commands This command disables the incrementing of the hops field when boot requests are relayed to a DHCP server through FTOS.
PAGE 698
www.dell.com | support.dell.com ip max-frag-count ces Set the maximum number of fragments allowed in one packet for packet re-assembly. Syntax ip max-frag-count count To place no limit on the number of fragments allowed, enter no ip max-frag-count. Parameters count Defaults No limit is set on number of fragments allowed. Command Modes Command History Enter a number for the number of fragments allowed for re-assembly. Range: 2 to 256 CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.
PAGE 699
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale pre-Version 6.1.1.0 Introduced for E-Series When you enter no mtu command, FTOS reduces the ip mtu value to 1536 bytes. To return the IP MTU value to the default, enter no ip mtu. You must compensate for Layer 2 header when configuring link MTU on an Ethernet interface or FTOS may not fragment packets.
PAGE 700
www.dell.com | support.dell.com Related Commands mtu Set the link MTU for an Ethernet interface. ip name-server ces Syntax Enter up to 6 IPv4 addresses of name servers. The order you enter the addresses determines the order of their use. ip name-server ipv4-address [ipv4-address2...ipv4-address6] To remove a name server, use the no ip name-server ip-address command.
PAGE 701
ces Syntax Enable Proxy ARP on an interface. ip proxy-arp To disable Proxy ARP, enter no ip proxy-arp. Defaults Command Modes Command History Related Commands Enabled. INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series pre-Version 6.1.1.
PAGE 702
www.dell.com | support.dell.com ces Assign a static route to the switch. Syntax ip route vrf {vrf instance} destination mask {ip-address | interface [ip-address]} [distance] [permanent] [tag tag-value] To delete a specific static route, use the no ip route destination mask {address | interface [ip-address]} command. To delete all routes matching a certain route, use the no ip route destination mask command.
PAGE 703
Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Support 4094 VLANs on E-Series ExaScale (prior limit was 2094) Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.9.1.0 Introduced VRF on the E-Series Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.
PAGE 704
www.dell.com | support.dell.com Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series pre-Version 6.1.1.0 Introduced for E-Series ip unreachables ces Enable the generation of Internet Control Message Protocol (ICMP) unreachable messages. ip unreachables Syntax To disable the generation of ICMP messages, enter no ip unreachables. Defaults Disabled Command Modes Command History INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.
PAGE 705
Usage Information By default this command is disabled. When enabled, all the Layer 3 unicast routed data traffic going through a VLAN member port is flooded across all the member ports of that VLAN. There might be some ARP table entries which are resolved through ARP packets which had Ethernet MAC SA different from MAC information inside the ARP packet. This unicast data traffic flooding occurs only for those packets which use these ARP entries.
PAGE 706
www.dell.com | support.dell.com Command Modes Command History Usage Information CONFIGURATION Version 8.3.19.0 Added ingress-port parameter for S4820T Version 8.3.19.0 Introduced on S4820T Version 8.3.10.0 Added ingress-port parameter for S4810 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Added support for S-Series Version 7.5.1.
PAGE 707
Parameters ip-selection 3-tuple Enter the keywords ip-selection 3-tuple to distribute IP traffic based on the following criteria: • IP source address • IP destination address • IP Protocol type Note: For IPV6, only the first 32 bits (LSB) of IP SA and IP DA are used for hash generation. ip-selection packet-based Enter the keywords ip-selection packet-based to distribute IPV4 traffic based on the IP Identification field in the IPV4 header.
PAGE 708
www.dell.com | support.dell.com Table 24-3.
PAGE 709
Related Commands interface ManagementEthernet Configure the Management port on the system (either the Primary or Standby RPM). duplex (Management) Set the mode of the Management interface. speed (Management interface) Set the speed for the Management interface. show arp ces Display the ARP table.
PAGE 710
www.dell.com | support.dell.com dynamic (OPTIONAL) Enter the keyword dynamic to view dynamic entries. summary (OPTIONAL) Enter the keyword summary to view a summary of ARP entries. Command Modes Command History EXEC Privilege Version 8.3.19.0 Introduced on S4820T Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Support 4094 VLANs on E-Series ExaScale (prior limit was 2094) Version 8.1.1.
PAGE 711
Example (show arp cpu cp) FTOS#sho arp cpu cp Protocol Address Age(min) Hardware Address Interface VLAN CPU -----------------------------------------------------------------------------Internet 10.1.2.206 0 00:a0:80:00:15:b8 Ma 0/0 CP Internet 182.16.1.20 0 00:30:19:24:2d:70 Gi 8/0 CP Internet 100.10.10.10 0 00:30:19:4f:d3:80 Gi 8/12 CP Internet 10.1.2.209 12 00:a0:80:00:12:6c Ma 0/0 CP FTOS# Table 24-4. Row Heading Description Protocol Displays the protocol type.
PAGE 712
www.dell.com | support.dell.com Command Modes EXEC EXEC Privilege Command History Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.3.1.0 Introduced arp retries Set the number of ARP retries in case the system does not receive an ARP reply in response to an ARP request. show hosts ces Syntax Command Modes View the host table and DNS configuration. show hosts EXEC EXEC Privilege Command History Example 712 | IPv4 Routing Version 8.3.19.0 Introduced on S4820T Version 8.3.
PAGE 713
Table 24-6. Related Commands show hosts Command Example Fields Field Description Default domain... Displays the domain name (if configured). Name/address lookup... States if DNS is enabled on the system. If DNS is enabled, the Name/Address lookup is domain service. If DNS is not enabled, the Name/Address lookup is static mapping. Name servers are... Lists the name servers, if configured. Host Displays the host name assigned to the IP address.
PAGE 714
www.dell.com | support.dell.com summary (OPTIONAL) Enter the keyword summary to view a table listing route prefixes and the total number of routes that can be entered into the CAM. vrf instance (OPTIONAL) E-Series Only: Enter the keyword vrf followed by the VRF Instance name to show CAM information as it applies to that VRF instance. Command Modes EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.
PAGE 715
Table 24-7. Example (show ip cam summary) show ip cam Command Example Fields (continued) Field Description Mac Addr Displays the next-hop router’s MAC address. Port Displays the egress interface. Use the second half of the entry to determine the interface. For example, in the entry 17cl CP, the CP is the pertinent portion.
PAGE 716
www.dell.com | support.dell.com Table 24-8. show ip cam summary Command Example Fields Field Description Prefix Length Displays the prefix-length or mask for the IP address configured on the linecard 0 port pipe 0. Current Use Displays the number of routes currently configured for the corresponding prefix or mask on the linecard 0 port pipe 0. Initial Size Displays the CAM size allocated by FTOS for the corresponding mask.
PAGE 717
----------------10.10.10.10 -- -- - - ----- ----------------- ------------0 0 1 1 0 00:00:00:00:00:00 3f01 CP FTOS# Table 24-9. Example (show ip cam stack-unit ecmp-group detail) show ip cam Command Example Fields Field Description Destination Displays the destination route of the index. EC Displays the number of equal cost multipaths (ECMP) available for the default route for non-Jumbo line cards. Displays 0,1 when ECMP is more than 8, for Jumbo line cards. CG Displays 0.
PAGE 718
www.dell.com | support.dell.com show ip fib linecard ce View all Forwarding Information Base (FIB) entries. Syntax Parameters show ip fib linecard slot-number [vrf vrf instance | ip-address/prefix-list | summary] vrf instance (OPTIONAL) E-Series Only: Enter the keyword vrf followed by the VRF Instance name to show the FIB cache entries tied to that VRF instance. slot-number Enter the number of the line card slot.
PAGE 719
Table 24-10. Related Commands show ip fib linecard Command Example Fields Field Description Destination Lists the destination IP address. Gateway Displays either the word direct and an interface for a directly connected route or the remote IP address to be used to forward the traffic. First-Hop Displays the first hop IP address. Mac-Addr Displays the MAC address. Port Displays the egress-port information. VId Displays the VLAN ID. If no VLAN is assigned, zero (0) is listed.
PAGE 720
www.dell.com | support.dell.com Destination Gateway First-Hop Mac-Addr Port VId EC ------------------ --------------------------- ----------------------------------- -------- ----- -10.10.10.10/32 Direct, Nu 0 0.0.0.0 00:00:00:00:00:00 BLK HOLE 0 0 FTOS> Table 24-11. show ip fib linecard Command Example Fields Field Description Destination Lists the destination IP address.
PAGE 721
source-ip address Enter the keyword source-ip followed by the IP source address in IP address format. destination-ip address Enter the keyword destination-ip followed by the IP destination address in IP address format. protocol number [tcp | udp] | icmp E-Series only: Enter the keyword protocol followed by one of the protocol type keywords: tcp, udp, icmp or protocol number src-port number Enter the keyword src-port followed by the source port number.
PAGE 722
www.dell.com | support.dell.com show ip interface ces View IP-related information on all interfaces. Syntax Parameter show ip interface [interface | brief | linecard slot-number] [configuration] interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Loopback interface, enter the keyword Loopback followed by a number from 0 to 16383.
PAGE 723
Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.0 Introduced for E-Series Example FTOS#show ip int te 0/0 TenGigabitEthernet 0/0 is down, line protocol is down Internet address is not set IP MTU is 1500 bytes Inbound access list is not set Proxy ARP is enabled Split Horizon is enabled Poison Reverse is disabled ICMP redirects are not sent ICMP unreachables are not sent FTOS# Table 24-12.
PAGE 724
www.dell.com | support.dell.com Table 24-13. show ip interface brief Column Headings (continued) Field Description Status States whether the interface is enabled (up) or disabled (administratively down). Protocol States whether IP is enabled (up) or disabled (down) on the interface. show ip management-route ce View the IP addresses assigned to the Management interface.
PAGE 725
Display the IPv6 static routes configured for the management interface. ce Syntax Parameters Command Modes Command History Example show ipv6 management-route [all | connected | summary | static] all Enter the keyword all to view all IP addresses assigned to all Management interfaces on the switch. connected Enter the keyword connected to view only routes directly connected to the Management interface.
PAGE 726
www.dell.com | support.dell.com Example FTOS#show ip protocols Routing Protocol is "bgp 1" Cluster Id is set to 20.20.20.3 Router Id is set to 20.20.20.3 Fast-external-fallover enabled Regular expression evaluation optimization enabled Capable of ROUTE_REFRESH For Address Family IPv4 Unicast BGP table version is 0, main routing table version 0 Distance: external 20 internal 200 local 200 Neighbor(s): Address : 20.20.20.
PAGE 727
Command Modes static (OPTIONAL) Enter the keyword static to view only routes configured by the ip route command. summary (OPTIONAL) Enter the keyword summary. Refer to show ip route summary. EXEC EXEC Privilege Command History Example Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.9.1.0 Introduced VRF on the E-Series Version 7.6.1.0 Introduced on S-Series Version 7.5.1.
PAGE 728
www.dell.com | support.dell.com Table 24-14.
PAGE 729
Related Commands Example Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.0 Introduced for E-Series ip prefix-list Enter the CONFIGURATION-IP PREFIX-LIST mode and configure a prefix list. show ip prefix-list summary Display a summary of the configured prefix lists.
PAGE 730
www.dell.com | support.dell.com connected 17 0 static 3 0 ospf 100 1368 2 Intra-area: 762 Inter-area: 1 External-1: 600 External-2: 5 Total 1388 2 Total 1388 active route(s) using 222440 bytes Total 2 non-active route(s) using 128 bytes FTOS> Table 24-15. Related Commands show ip route summary Column Headings Column Heading Description Route Source Identifies how the route is configured in FTOS. Active Routes Identifies the best route if a route is learned from two protocol sources.
PAGE 731
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 6.5.1.0 F10 Monitoring MIB available for ip traffic statistics pre-Version 6.1.1.
PAGE 732
www.dell.com | support.dell.com Table 24-16. show ip traffic output definitions Keyword Definition ... reassembled Number of IP fragments that were reassembled. ... timeouts Number of times a timer expired on a reassembled queue. ... too big Number of invalid IP fragments received. ... couldn’t fragment Number of packets that could not be fragmented and forwarded. ...encapsulation failed Counts those packets which could not be forwarded due to ARP resolution failure.
PAGE 733
e Syntax Parameters Defaults Command Modes Display the IP Packet Termination Table (IPPTT). show protocol-termination-table linecard number port-set port-pipe-number linecard number Enter the keyword linecard followed by slot number of the line card. E-Series Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600/ E600i, and 0 to 5 on a E300 port-set port-pipe-number Enter the keyword port-set followed by the line card’s Port-Pipe number.
PAGE 734
www.dell.com | support.dell.com 31 32 33 34 35 36 FTOS# Usage Information any 162 any any any any 162 any any any any any Q7 Q7 Q6 Q7 Q7 Q7 6 6 0 6 6 6 No No No No No No - CP CP RP2 RP2 RP1 RP1 The IPPTT table is used for looking up forwarding information for IP control traffic destined to the router.
PAGE 735
10184 ack packets (12439508 bytes) Sent: 12007 Total, 0 urgent packets 25 control packets (including 24 retransmitted) 11603 data packets (12439677 bytes) 24 data packets (7638 bytes) retransmitted 355 ack only packets (41 delayed) 0 window probe packets, 0 window update packets 7 Connections initiated, 8 connections accepted, 15 connections established 14 Connections closed (including 0 dropped, 0 embryonic dropped) 20 Total rxmt timeout, 0 connections dropped in rxmt timeout 0 Keepalive timeout, 0 keepali
PAGE 736
www.dell.com | support.dell.com Table 24-18. 736 | IPv4 Routing show tcp statistics cp Command Example Fields (continued) Field Description 20 Total rxmt... Displays the number of times the switch tried to re-send data and the number of connections dropped during the TCP retransmit timeout period. 0 Keepalive.... Lists the number of keepalive packets in timeout, the number keepalive probes and the number of TCP connections dropped during keepalive.
PAGE 737
25 IPv6 Access Control Lists (IPv6 ACLs) Overview IPv6 ACLs and IPv6 Route Map commands are supported on Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , or . • • IPv6 ACL Commands IPv6 Route Map Commands Note: For IPv4 ACL commands, refer to IPv6 Access Control Lists (IPv6 ACLs). Important Points to Remember • • • • • • • • • • E-Series platforms require IPv6-ExtACL CAM profile to support IPv6 ACLs.
PAGE 738
www.dell.com | support.dell.
PAGE 739
Parameters default Use the default CAM profile settings, and set the CAM as follows. L3 ACL (ipv4acl): 6 L2 ACL(l2acl): 5 IPv6 L3 ACL (ipv6acl): 0 L3 QoS (ipv4qos): 1 L2 QoS (l2qos): 1 l2acl 1-10 ipv4acl 1-10 ipv6acl 0-10 ipv4qos 1-10 l2qos 1-10 Allocate space to support IPv6 ACLs. You must enter all of the profiles and a range. Enter the CAM profile name followed by the amount to be allotted. The total space allocated must equal 13. The ipv6acl range must be a factor of 2.
PAGE 740
www.dell.com | support.dell.com Parameters default Use the default CAM profile settings, and set the CAM as follows. L2 ACL(l2acl): 1 L3 ACL (ipv4acl): 1 IPv6 L3 ACL (ipv6acl): 2 l2acl 1-4 ipv4acl 1- 4 ipv6acl Allocate space to support IPv6 ACLs. You must enter all of the profiles and a range for each. Enter the CAM profile name followed by the amount to be allotted. The total space allocated must equal 13. The ipv6acl range must be a factor of 2.
PAGE 741
clear counters ipv6 access-group [access-list-name] Syntax Parameters access-list-name (OPTIONAL) Enter the name of a configured access-list, up to 140 characters. EXEC Command Modes EXEC Privilege Command History Version 8.4.2.1 Introduced on the S-Series Version 8.2.1.0 Introduced on the E-Series ExaScale Version 7.8.1.0 Introduced on the C-Series Version 7.4.1.
PAGE 742
www.dell.com | support.dell.com deny icmp ces Configure a filter to drop all or specific ICMP messages.
PAGE 743
Command History Version 8.4.2.1 Introduced on the S-Series Version 8.2.1.0 Introduced support on the E-Series ExaScale Version 7.8.1.0 Introduced support on the C-Series Version 7.4.1.0 Introduced support on the E-Series TeraScale Added monitor option The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
PAGE 744
www.dell.com | support.dell.com To remove this filter, you have two choices: • • Parameters Use the no seq sequence-number command syntax if you know the filter’s sequence number or Use the no deny tcp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} command. source address Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format.
PAGE 745
log (OPTIONAL) Enter the keyword log to enter ACL matches in the log. Supported on Jumbo-enabled line cards only. monitor (OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation. Defaults Not configured. Command Modes ACCESS-LIST Command History Version 8.4.2.1 Introduced on the S-Series Version 8.2.1.0 Introduced on the E-Series ExaScale Version 7.8.1.
PAGE 746
www.dell.com | support.dell.com deny udp ces Configure a filter to drop UDP packets meeting the filter criteria.
PAGE 747
Defaults Not configured. Command Modes ACCESS-LIST Command History Version 8.4.2.1 Introduced on the S-Series Version 8.2.1.0 Introduced on the E-Series ExaScale Version 7.8.1.0 Introduced on the C-Series Version 7.4.1.0 Introduced on the E-Series TeraScale Added monitor option The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented. Usage Information Most ACL rules require one entry in the CAM.
PAGE 748
www.dell.com | support.dell.com To delete an IPv6 access-group configuration, use the no ipv6 access-group access-list-name {in} [implicit-permit] [vlan range] command. Parameters access-list-name Enter the name of a configured access list, up to 140 characters. in | out Enter either the keyword in or out to apply the IPv6 ACL to incoming traffic (ingress) or outgoing traffic (egress).
PAGE 749
Command Modes Command History Usage Information Related Commands CONFIGURATION Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced support on the S4810 Version 8.4.2.1 Introduced on the S-Series Version 8.2.1.0 Introduced on the E-Series ExaScale Version 7.8.1.0 Introduced on the C-Series Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.4.1.
PAGE 750
www.dell.com | support.dell.com Parameters ip-protocol-number Enter an IPv6 protocol number. Range: 0 to 255 icmp Enter the keyword icmp to filter Internet Control Message Protocol version 6. ipv6 Enter the keyword ipv6 to filter any Internet Protocol version 6. tcp Enter the keyword tcp to filter the Transmission Control protocol. udp Enter the keyword udp to filter the User Datagram Protocol. Defaults Not configured. Command Modes ACCESS-LIST Command History Version 8.3.19.
PAGE 751
message-type (OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type. Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. log (OPTIONAL) Enter the keyword log to have the information kept in an ACL log file.
PAGE 752
www.dell.com | support.dell.com Parameters source address Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zero. mask Enter a network mask in /prefix format (/x). any Enter the keyword any to specify that all routes are subject to the filter.
PAGE 753
ACCESS-LIST Command Modes Command History Version 8.4.2.1 Introduced on the S-Series Version 8.2.1.0 Introduced on the E-Series ExaScale Version 7.8.1.0 Introduced on the C-Series Version 7.4.1.0 Introduced on the E-Series TeraScale Added monitor option The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented. Usage Information Most ACL rules require one entry in the CAM.
PAGE 754
www.dell.com | support.dell.com To remove this filter, you have two choices: • • Parameters Use the no seq sequence-number command syntax if you know the filter’s sequence number or Use the no permit udp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} command. source address Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format.
PAGE 755
Command History Version 8.4.2.1 Introduced on the S-Series Version 8.2.1.0 Introduced support on the E-Series ExaScale Version 7.8.1.0 Introduced support on the C-Series Version 7.4.1.0 Introduced support on the E-Series TeraScale Added monitor option The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented. Usage Information Most ACL rules require one entry in the CAM.
PAGE 756
www.dell.com | support.dell.com Parameters remark number Enter the remark number. Note that the same sequence number can be used for the remark and an ACL rule. Range: 0 to 4294967290 description Enter a description of up to 80 characters. Defaults Not configured Command Modes ACCESS-LIST Command History Example Usage Information Related Commands Version 8.4.2.1 Introduced on the S-Series Version 8.2.1.0 Introduced on the E-Series ExaScale Version 7.8.1.
PAGE 757
Defaults Command Modes StartingSeqNum Enter the starting sequence number to resequence. Range: 0 to 4294967290 Step-to-Increment Enter the step to increment the sequence number. Range: 1 to 4294967290 No default values or behavior EXEC EXEC Privilege Command History Usage Information Related Commands Version 8.4.2.0 Introduced on the S-Series Version 8.2.1.0 Introduced on the E-Series ExaScale Version 7.8.1.0 Introduced on the C-Series Version 7.4.1.
PAGE 758
www.dell.com | support.dell.com When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing prefix list. Usage Information Related Commands resequence access-list Resequence an access-list seq ces Assign a sequence number to a deny or permit filter in an IPv6 access list while creating the filter.
PAGE 759
operator (OPTIONAL) Enter one of the following logical operands: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port parameter.) port port (OPTIONAL) Enter the application layer port number. Enter two port numbers if using the range logical operand.
PAGE 760
www.dell.com | support.dell.com show cam-acl ces Syntax Command Modes Show space allocated for IPv6 ACLs. show cam-acl EXEC EXEC Privilege Command History Related Commands Example (default profile) Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced support on the S4810 Version 8.4.2.1 Introduced on the S-Series Version 8.4.2.0 Introduced on the E-Series TeraScale Version 7.8.1.
PAGE 761
show cam-acl-egress ces Syntax Command Modes Show information on FP groups allocated for egress ACLs. show cam-acl-egress EXEC EXEC Privilege Command History Related Commands Example (default profile) Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced support on the S4810 Version 8.4.2.1 Introduced on the S-Series Version 8.4.2.0 Introduced on the E-Series TeraScale Version 7.8.1.
PAGE 762
www.dell.com | support.dell.com Example FTOS(conf-ipv6-acl)#show config ! ipv6 access-list Acl1 seq 5 permit ipv6 1111::2222/127 host 3333::1111 log count bytes seq 10 permit icmp host 3333:: any mobile-advertisement log seq 15 deny tcp any any rst seq 20 permit udp any any gt 100 count FTOS(conf-ipv6-acl)# show ipv6 accounting access-list ces Syntax Parameters View the IPv6 access-lists created on the E-Series and the sequence of filters.
PAGE 763
Example FTOS#show ipv6 accounting access-list ! Ingress IPv6 access list AclList1 on GigabitEthernet 9/0 Total cam count 15 seq 10 permit icmp host 3333:: any mobile-advertisement log seq 15 deny tcp any any rst seq 20 permit udp any any gt 101 count (0 packets) ! FTOS# Table 25-2. show ip accounting access-lists Command Example Field Field Description “Ingress IPv6...” Displays the name of the IPv6 ACL, in this example “AclList1”. “seq 10...” Displays the filter.
PAGE 764
www.dell.com | support.dell.com Syntax Parameters Defaults Command Modes Command History Usage Information test cam-usage service-policy input input policy name linecard {number | all} policy-map name Enter the name of the policy-map to verify. number Enter all to get information for all the linecards, or enter the linecard number to get information for a specific card. Range: 0-6 for E-Series, 0-7 for C-Series None EXEC Privilege Version 8.4.2.1 Introduced on the S-Series Version 8.2.1.
PAGE 765
The following example shows the output shown when using the test cam-usage command.
PAGE 766
www.dell.com | support.dell.com • • • • • match ipv6 route-source route-map set ipv6 next-hop show config show route-map match ipv6 address ces Syntax Configure a filter to match routes based on IPv6 addresses specified in an access list. match ipv6 address prefix-list-name To delete a match, use the no match ipv6 address prefix-list-name command. Parameters Defaults Command Modes Command History Related Commands prefix-list-name Enter the name of IPv6 prefix list, up to 140 characters.
PAGE 767
Command Modes Command History Related Commands ROUTE-MAP Version 8.4.2.1 Introduced on the S-Series Version 8.2.1.0 Introduced support on the E-Series ExaScale Version 7.8.1.0 Introduced support on the C-Series Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.4.1.0 Introduced support on the E-Series TeraScale match ipv6 address Redistribute routes that match an IP address.
PAGE 768
www.dell.com | support.dell.com To delete a route map, use the no route-map map-name command. Parameters Defaults Command Modes Command History Example map-name Enter a text string to name the route map, up to 140 characters. Not configured ROUTE-MAP Version 8.4.2.1 Introduced on the S-Series Version 8.2.1.0 Introduced support on the E-Series ExaScale Version 7.8.1.0 Introduced support on the C-Series Increased name string to accept up to 140 characters. Prior to 7.8.1.
PAGE 769
show config ces View the current route map configuration. show config Syntax ROUTE-MAP Command Modes Command History Version 8.4.2.1 Introduced on the S-Series Version 8.2.1.0 Introduced support on the E-Series ExaScale Version 7.8.1.0 Introduced support on the C-Series Version 7.4.1.
PAGE 770
www.dell.com | support.dell.com Related Commands 770 | route-map IPv6 Access Control Lists (IPv6 ACLs) Configure a route map.
PAGE 771
26 IPv6 Basics Overview IPv6 Basic Commands are supported on Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , or . Note: Basic IPv6 basic commands are supported on all platforms. Table 26-2 in IPv6 Basics of the FTOS Configuration Guide for information on the FTOS version and platform that supports IPv6 in each software feature.
PAGE 772
www.dell.com | support.dell.com • • • • show ipv6 interface show ipv6 mld_host show ipv6 route trust ipv6-diffserv clear ipv6 fib ces Syntax Parameters Clear (refresh) all FIB entries on a linecard. clear ipv6 fib linecard slot slot Enter the slot number to clear the FIB for a linecard. Command Mode EXEC Privilege Command History Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.8.1.
PAGE 773
Version 7.8.1.0 Introduced on C-Series and S-Series Version 7.4.1.0 Introduced on E-Series TeraScale clear ipv6 mld_host Clear the IPv6 MLD host counters and reset the elapsed time. Syntax Command Modes Command History clear ipv6 mld_host EXEC Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. ipv6 address autoconfig Configure IPv6 address auto-configuration for the management interface.
PAGE 774
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History ipv6-address prefix-length No default values or behavior INTERFACE Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.4.1.0 Support added on the management Ethernet port. Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Introduced on C-Series and S-Series Version 7.4.1.
PAGE 775
Default Command History 100 pps Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. ipv6 flowlabel-zero Configure system to set the flow label field in the packets to zero. Syntax ipv6 flowlabel-zero Use the no ipv6 flowlabel-zero command to disable the 0 from being set in the field and allow the field to be filled by protocol operations. Default Command Modes Default Command History Usage Information Disabled CONFIGURATION 100 pps Version 8.3.19.
PAGE 776
www.dell.com | support.dell.com Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.4.2.1 Introduced on the C-Series and S-Series Version 8.4.1.0 Introduced on E-Series TeraScale ipv6 name-server ces Syntax Parameters Defaults Command Modes Command History Usage Information Enter up to 6 IPv6 addresses of name servers. The order you enter the addresses determines the order of their use.
PAGE 777
Default Command Modes Command History 3 attempts INTERFACE (management interface only) Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. ipv6 nd prefix ces Syntax Parameters Command Mode Command History Specify which IPv6 prefixes are included in Neighbor Advertisements.
PAGE 778
www.dell.com | support.dell.com Usage Information By default, all prefixes configured as addresses on the interface are advertised. This command allows control over the individual parameters per prefix; the default keyword can be used to use the default parameters for all prefixes. If a prefix has been configured with lifetime parameter values, the default values cannot be applied using the ipv6 nd prefix default no-autoconfig command. ipv6 route ces Syntax Establish a static IPv6 route.
PAGE 779
permanent (OPTIONAL) Enter the keyword permanent to specify that the route is not to be removed, even if the interface assigned to that route goes down. Note: If you disable the interface with an IPv6 address associated with the keyword permanent, the route disappears from the routing table. Defaults Command Modes Command History Example No default values or behavior CONFIGURATION Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.5.1.
PAGE 780
www.dell.com | support.dell.com ipv6 unicast-routing ces Syntax Enable IPv6 Unicast routing. ipv6 unicast-routing To disable unicast routing, use the no ipv6 unicast-routing command. Defaults Command Modes Command History Usage Information Enabled CONFIGURATION Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.4.2.1 Introduced on S-Series Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Introduced on C-Series Version 7.4.1.
PAGE 781
Parameters Defaults Command Modes slot-number Enter the line card slot ID number. Range: 0 to 13 on the E1200; 0 on 6 for E600, and 0 to 5 on the E300. port-set Enter the Port Set to summary (OPTIONAL) Enter the keyword summary to display a table listing network prefixes and the total number prefixes which can be entered into the IPv6 CAM. index (OPTIONAL) Enter the index in the IPv6 CAM.
PAGE 782
www.dell.com | support.dell.
PAGE 783
Command History Usage Information Version 8.3.19.0 Introduced on the S4820 Version 8.3.7.0 Introduced on the S4810 Version 8.4.2.1 Introduced the S-Series On the S4810 and S4820T, First-Hop information is not shown for installed routes in the IPv6 Content Addressable Memory (CAM). However, the same is shown in the Forwarding Information Base (FIB).
PAGE 784
www.dell.com | support.dell.com Command Mode summary (OPTIONAL) Enter the keyword summary to view a summary of entries in IPv6 cam. ipv6-address Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes. Range: /0 to /128 Note: The :: notation specifies successive hexadecimal fields of zeros. EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.2.1.
PAGE 785
show ipv6 flowlabel-zero Display the flow label zero setting. Syntax show ipv6 flowlabel-zero Default Disabled Command Mode Command History Related Commands EXEC Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. ipv6 nd dad attempts Configure system to set the flow label field in the packets to zero. show ipv6 interface ces Syntax Parameters Display the status of interfaces configured for IPv6.
PAGE 786
www.dell.com | support.dell.com Defaults Command Modes linecard slot-number (OPTIONAL) View information for a specific IPv6 linecard or S-Series stack-unit Range: 0 to 13 on a E1200, 0 to 6 on a E600, and 0 to 5 on a E300. Range: 0 to 7 for C-Series Range: 0 to 7 for S55 only Range: 0 to 11 for S60, S4810, and S4820T managementethernet slot/ port (OPTIONAL) View information on an IPv6 Management port. Enter the slot number (0-1) and port number zero (0).
PAGE 787
ICMP redirects are not sent DAD is enabled, number of DAD attempts: 3 ND reachable time is 0 milliseconds ND advertised reachable time is 0 milliseconds ND advertised retransmit interval is 0 milliseconds ND router advertisements are sent every 200 to 600 seconds ND router advertisements live for 1800 seconds FTOS# Example FTOS# FTOS#show ipv6 int man 0/0 ManagementEthernet 0/0 is up, line protocol is up IPV6 is enabled Link Local address: fe80::201:e8ff:fe8a:e8f7 Global Unicast address(es): Actual addres
PAGE 788
www.dell.com | support.dell.com Reports Leaves MLDv2 Queries MLDv1 Queries Errors: Malformed Packets: Command History Usage Information 79962 ---18000 0 18034 0 ------- 4510 Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. The following table describes the information in the output example: Valid MLD Packets The total number of packets received and sent from the last time the elapsed time was cleared.
PAGE 789
Defaults Command Modes No default values or behavior EXEC EXEC Privilege Command History Example (E-Series) Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Introduced on C-Series and S-Series Version 7.4.1.
PAGE 790
www.dell.com | support.dell.com Example (show ipv6 route summary) FTOS#show ipv6 route summary Route Source Active Routes connected 5 static 0 Total 5 Total 5 active route(s) using 952 bytes Table 26-1.
PAGE 791
Command Modes Command History Usage Information CONFIGURATION-POLICY-MAP-IN Version 8.3.19.0 Introduced on the S4820T Version 8.3.7.0 Introduced on the S4810 Version 8.4.2.1 Introduced on C-Series and S-Series Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale When trust IPv6 diffserv is configured, matched bytes/packets counters are not incremented in the show qos statistics command.
PAGE 792
| IPv6 Basics www.dell.com | support.dell.
PAGE 793
27 IPv6 Border Gateway Protocol (IPv6 BGP) Overview IPv6 Border Gateway Protocol (IPv6 BGP) is supported on all Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, , or . This chapter includes the following commands: • • IPv6 BGP Commands IPv6 MBGP Commands IPv6 BGP Commands Border Gateway Protocol (BGP) is an external gateway protocol that transmits interdomain routing information within and between Autonomous Systems (AS).
PAGE 794
www.dell.com | support.dell.
PAGE 795
• • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • neighbor next-hop-self neighbor peer-group (assigning peers) neighbor peer-group (creating group) neighbor peer-group passive neighbor remote-as neighbor remove-private-as neighbor route-map neighbor route-reflector-client neighbor send-community neighbor shutdown neighbor soft-reconfiguration inbound neighbor subnet neighbor timers neighbor update-source neighbor weight network network backdoor redistribute redistribute isis r
PAGE 796
www.dell.com | support.dell.com • • • show ip bgp paths extcommunity show ip bgp regexp timers bgp address-family c et Enable the IPv4 multicast or the IPv6 address family. Syntax address-family [ipv4 multicast| ipv6unicast] Parameters ipv4 multicast Enter BGPv4 multicast mode. ipv6 unicast Enter BGPv6 mode. Defaults Not configured. Command Modes ROUTER BGP Command History . Version 8.3.19.0 Introduced on S4820T. Version 8.4.2.1 Introduced on C-Series andS4810. Version 6.5.1.
PAGE 797
attribute-map map-name summary-only (OPTIONAL) Enter the keyword summary-only to advertise only the aggregate address. Specific routes will not be advertised. suppress-map (OPTIONAL) Enter the keywords suppress-map followed by the name of a configured route map to identify which more-specific routes in the aggregate are suppressed.
PAGE 798
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information Disabled (that is, the software only compares MEDs from neighbors within the same AS). ROUTER BGP Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale Any update without a MED attribute is the least preferred route.
PAGE 799
To disable MED comparison on BGP confederation paths, enter no bgp bestpath med confed. Defaults Command Modes Command History Usage Information Disabled. ROUTER BGP Version 8.3.19.0 Introduced on S4820T. Version 8.4.2.1 Introduced on C-Series and S4810. Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale The software compares the MEDs only if the path contains no external autonomous system numbers.
PAGE 800
www.dell.com | support.dell.com bgp client-to-client reflection Allows you to enable route reflection between clients in a cluster. ce Syntax bgp client-to-client reflection To disable client-to-client reflection, enter no bgp client-to-client reflection. Defaults Enabled when a route reflector is configured. Command Modes Command History ROUTER BGP Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.
PAGE 801
Usage Information When a BGP cluster contains only one route reflector, the cluster ID is the route reflector’s router ID. For redundancy, a BGP cluster may contain two or more route reflectors and you assign a cluster ID with the bgp cluster-id command. Without a cluster ID, the route reflector cannot recognize route updates from the other route reflectors within the cluster.
PAGE 802
www.dell.com | support.dell.com bgp confederation peers Specify the Autonomous Systems (ASs) that belong to the BGP confederation. ce Syntax bgp confederation peers as-number [...as-number] To enter no bgp confederation peer. Parameters as-number Enter the AS number. Range: 1 to 65535 ...as-number (OPTIONAL) Enter up to 16 confederation numbers. Range: 1 to 65535. Defaults Not configured. Command Modes ROUTER BGP Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.
PAGE 803
Parameters Defaults Command Modes Command History Usage Information Related Commands half-life (OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half after the half-life period expires. Range: 1 to 45. Default: 15 minutes reuse (OPTIONAL) Enter a number as the reuse value, which is compared to the flapping route’s Penalty value.
PAGE 804
www.dell.com | support.dell.com Syntax bgp default local-preference value To return to the default value, enter no bgp default local-preference. Parameters value Defaults 100 Command Modes Command History Usage Information Enter a number to assign to routes as the degree of preference for those routes. When routes are compared, the higher the degree of preference or local preference value, the more the route is preferred. Range: 0 to 4294967295 Default: 100 ROUTER BGP = Version 8.3.19.
PAGE 805
Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale bgp fast-external-fallover Enable the fast external fallover feature, which immediately resets the BGP session if a link to a directly connected external peer fails. ce Syntax bgp fast-external-fallover To disable fast external fallover, enter no bgp fast-external-fallover.
PAGE 806
www.dell.com | support.dell.com Where the 2-Byte format is 1-65535, the 4-Byte format is 1-4294967295. Both formats are accepted, and the advertisements will reflect the entered format. For more information about using the 2 or 4-Byte format, refer to the FTOS Configuration Guide. Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.
PAGE 807
Usage Information This feature is advertised to BGP neighbors through a capability advertisement. In receiver only mode, BGP saves the advertised routes of peers that support this capability when they restart. bgp log-neighbor-changes Enable logging of BGP neighbor resets. ce Syntax bgp log-neighbor-changes To disable logging, enter no bgp log-neighbor-changes. Defaults Command Modes Command History Usage Information Related Commands Enabled ROUTER BGP Version 8.3.19.
PAGE 808
www.dell.com | support.dell.com Usage Information Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale In non-deterministic mode, paths are compared in the order in which they arrive. This method can lead to FTOS choosing different best paths from a set of paths, depending on the order in which they are received from the neighbors since MED may or may not get compared between adjacent paths.
PAGE 809
bgp regex-eval-optz-disable Disables the Regex Performance engine that optimizes complex regular expression with BGP. ce Syntax bgp regex-eval-optz-disable To re-enable optimization engine, use the no bgp regex-eval-optz-disable command. Defaults Enabled by default Command Modes ROUTER BGP (conf-router_bgp) Usage Information BGP uses regular expressions (regex) to filter route information.
PAGE 810
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information The router ID is the highest IP address of the Loopback interface or, if no Loopback interfaces are configured, the highest IP address of a physical interface on the router. ROUTER BGP Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.
PAGE 811
capture bgp-pdu neighbor (ipv6) Enable capture of an IPv6 BGP neighbor packet. ce Syntax capture bgp-pdu neighbor ipv6-address direction {both | rx | tx} To disable capture of the IPv6 BGP neighbor packet, use the no capture bgp-pdu neighbor ipv6-address command. Parameters ipv6-address Enter the IPv6 address of the target BGP neighbor. direction {both | rx Enter the keyword direction and a direction— either rx for inbound, tx for outbound, or both. | tx} Defaults Command Modes Not configured.
PAGE 812
www.dell.com | support.dell.com Command History Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale capture bgp-pdu neighbor (ipv6) Enable capture of an IPv6 BGP neighbor packet. show capture bgp-pdu neighbor Configure a route reflector and clients. clear ip bgp * (asterisk) Reset all BGP sessions in the specified category on the E-Series.
PAGE 813
Syntax Parameters clear ip bgp as-number [flap-statistics | ipv4 {multicast {flap-statistics | soft {in | out}} | unicast {flap-statistics | soft {in | out}} | ipv6 unicast {flap-statistics | soft {in | out}| soft [in | out] as-number Enter an autonomous system (AS) number to reset neighbors belonging to that AS. If used without a qualifier, the keyword resets all neighbors belonging to that AS.
PAGE 814
www.dell.com | support.dell.com Parameters ipv6-address Enter an IPv6 address to reset neighbors belonging to that IP. Used without a qualifier, the keyword resets all neighbors belonging to that IP. flap-statistics (OPTIONAL) Enter the keyword flap-statistics to clear all flap statistics belonging to that AS or a specified address family within that IP. ipv4 (OPTIONAL) Enter the keyword ipv4 to select options for that address family.
PAGE 815
Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale clear ip bgp ipv6 dampening Clear information on route dampening and return suppressed route to active state. ce Syntax Parameters clear ip bgp ipv6 unicast dampening [ipv6-address] ipv6-address Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format.
PAGE 816
www.dell.com | support.dell.com filter-list as-path-name (OPTIONAL) Enter the keyword filter-list followed by the name of a configured AS-PATH list. regexp regular-expression (OPTIONAL) Enter the keyword regexp followed by regular expressions. Use one or a combination of the following: .
PAGE 817
peer-group name Clear and reapply policies for all BGP routers in the specified peer group. ipv6 unicast Clear and reapply policies for all IPv6 unicast routes. in Reapply only inbound policies. Note: If you enter soft, without an in or out option, both inbound and outbound policies are reset. out Reapply only outbound policies. Note: If you enter soft, without an in or out option, both inbound and outbound policies are reset. Command Modes Command History EXEC Privilege Version 8.3.19.
PAGE 818
www.dell.com | support.dell.com Usage Information To view information on both incoming and outgoing routes, do not include the in and out parameters in the debugging command. The in and out parameters cancel each other; for example, if you enter debug ip bgp in and then enter debug ip bgp out, you will not information on the incoming routes. Entering a no debug ip bgp command removes all configured debug commands for BGP. Related Commands debug ip bgp events View information about BGP events.
PAGE 819
debug ip bgp ipv6 dampening View information on IPv6 routes being dampened. ce Syntax debug ip bgp ipv6 unicast dampening [in | out] To disable debugging, enter no debug ip bgp ipv6 unicast dampening. Parameters Command Modes Command History Usage Information Related Commands in (OPTIONAL) Enter the keyword in to view only inbound dampened routes. out (OPTIONAL) Enter the keyword out to view only outbound dampened routes. EXEC Privilege Version 8.3.19.0 Introduced on S4820T Version 8.4.2.
PAGE 820
www.dell.com | support.dell.com Defaults Disabled Command Modes EXEC Privilege Usage Information Command History This command turns on BGP soft-reconfiguration inbound debugging for IPv6 unicast routes. If no neighbor is specified, debug is turned on for all neighbors. Version 8.3.19.0 Introduced on S4820T Version 8.4.1.0 Added support for IPv4 multicast and IPv6 unicast routes Version 7.8.1.0 Introduced support on S4810 Version 7.7.1.0 Introduced support on C-Series Version 7.2.1.
PAGE 821
debug ip bgp notifications Allows you to view information about BGP notifications received from neighbors. ce Syntax debug ip bgp [ipv6-address | peer-group peer-group-name] notifications [in | out] To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] notifications [in | out] command. Parameters ipv6-address (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format.
PAGE 822
www.dell.com | support.dell.com Parameters ipv6-address (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zeros. peer-group peer-group-name (OPTIONAL) Enter the keyword peer-group followed by the name of the peer group. ipv6 unicast [ipv6-address] (OPTIONAL) Enter the keyword ipv6 unicast, and, optionally, an ipv6 address.
PAGE 823
Usage Information Related Commands The default-metric command in BGP sets the value of the BGP MULTI_EXIT_DISC (MED) attribute for redistributed routes only. bgp always-compare-med Enable comparison of all BGP MED attributes. redistribute Redistribute routes from other routing protocols into BGP. description Enter a description of the BGP routing protocol ce Syntax description {description} To remove the description, use the no description {description} command.
PAGE 824
www.dell.com | support.dell.com internal-distance Enter a number to assign to routes learned from a router within the AS. Range: 1 to 255. Default: 200 local-distance Enter a number to assign to routes learned from networks listed in the network command. Range: 1 to 255. Default: 200 Defaults external-distance Command Modes Command History = 20; internal-distance = 200; local-distance = 200. ROUTER BGPV6-ADDRESS FAMILY Version 8.3.19.0 Introduced on S4820T Version 8.4.2.
PAGE 825
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale If you enable this command, use the capture bgp-pdu max-buffer-size command to recompute the best path. neighbor activate This command allows the specified neighbor/peer group to be enabled for the current AFI/SAFI.
PAGE 826
www.dell.com | support.dell.com To return to the default value, use the no neighbor {ipv6-address | peer-group-name} advertisement-interval command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zeros. Defaults Command Modes Command History peer-group-name Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
PAGE 827
Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale neighbor default-originate Inject the default route to a BGP peer or neighbor. ce Syntax neighbor {ipv6-address | peer-group-name} default-originate [route-map map-name] To remove a default route, use the no neighbor {ipv6-address | peer-group-name} default-originate [route-map map-name] command.
PAGE 828
www.dell.com | support.dell.com Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group. text Enter a continuous text string up to 80 characters. Defaults Not configured. Command Modes ROUTER BGP Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.
PAGE 829
Related Commands neighbor filter-list Assign a AS-PATH list to a neighbor or peer group. neighbor route-map Assign a route map to a neighbor or peer group. neighbor ebgp-multihop Attempt and accept BGP connections to external peers on networks that are not directly connected. ce Syntax neighbor {ipv6-address | peer-group-name} ebgp-multihop [ttl] To disallow and disconnect connections, use the no neighbor {ipv6-address | peer-group-name} ebgp-multihop [ttl] command.
PAGE 830
www.dell.com | support.dell.com Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Defaults Disabled Command Modes Command History ROUTER BGP Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.
PAGE 831
Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale neighbor maximum-prefix Control the number of network prefixes received.
PAGE 832
www.dell.com | support.dell.com Usage Information Related Commands If the neighbor maximum-prefix is configured and the neighbor receives more prefixes than allowed by the neighbor maximum-prefix command configuration, the neighbor goes down and the show ip bgp ipv6 unicast summary command displays (prfxd) in the State/PfxRcd column for that neighbor.
PAGE 833
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Defaults Command Modes Command History Usage Information (OPTIONAL) Enter the name of the peer group. Disabled. ROUTER BGPV6-ADDRESS FAMILY Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.
PAGE 834
www.dell.com | support.dell.com When you add a peer to a peer group, it inherits all the peer group’s configured parameters.
PAGE 835
Usage Information Related Commands When a peer group is created, it is disabled (shut mode). neighbor peer-group (assigning peers) Assign routers to a peer group. neighbor remote-as Assign a indirectly connected AS to a neighbor or peer group. neighbor shutdown Disable a peer or peer group. neighbor peer-group passive Enable passive peering on a BGP peer group, that is, the peer group does not send an OPEN message, but will respond to one.
PAGE 836
www.dell.com | support.dell.com Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group to enter the remote AS into routing tables of all routers within the peer group. number Enter a number of the AS. Range: 1 to 65535. Defaults Not configured. Command Modes ROUTER BGP Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.4.2.
PAGE 837
Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale Usage Information Applies to EBGP neighbors only. If the AS-PATH contains both public and private AS number or contains AS numbers of an EBGP neighbor, the private AS numbers are not removed. If a confederation contains private AS numbers in its AS-PATH, the software removes the private AS numbers only if they follow the confederation numbers in the AS path. Private AS numbers are 64512 to 65535.
PAGE 838
www.dell.com | support.dell.com If you identify a peer group by name, the peers in that peer group inherit the characteristics in the Route map used in this command. If you identify a peer by IP address, the Route map overwrites either the inbound or outbound policies on that peer. neighbor route-reflector-client Configure a neighbor as a member of a route reflector cluster.
PAGE 839
To disable sending a COMMUNITY attribute, use the no neighbor {ipv6-address | peer-group-name} send-community command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Defaults Command Modes Command History Enter the name of the peer group to send a COMMUNITY attribute to all routers within the peer group. Not configured and COMMUNITY attributes are not sent to neighbors. ROUTER BGP Version 8.3.
PAGE 840
www.dell.com | support.dell.com The neighbor shutdown command terminates all BGP sessions on the BGP neighbor or BGP peer group. Use this command with caution as it terminates the specified BGP sessions. When a neighbor or peer group is shutdown, use the show ip bgp ipv6 unicast summary command to confirm its status. Related Commands show ip bgp ipv6 unicast summary Display the current BGP configuration. show ip bgp ipv6 unicast neighbors Display IPv6 routing information exchanged by BGP neighbors.
PAGE 841
neighbor subnet Enable passive peering so that the members of the peer group are dynamic ce Syntax neighbor peer-group-name subnet subnet-number mask To remove passive peering, use the no neighbor peer-group-name subnet subnet-number mask command. Parameters subnet-number Enter a subnet number in dotted decimal format (A.B.C.D.) as the allowable range of addresses included in the Peer group. To allow all addresses, enter 0::0/0. mask Enter a prefix mask in / prefix-length format (/x).
PAGE 842
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information keepalive = 60 seconds; holdtime = 180 seconds. ROUTER BGP Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale Timer values configured with the neighbor timers command override the timer values configured with the timers bgp command.
PAGE 843
Usage Information Loopback interfaces are up constantly and the BGP session may need one interface constantly up to stabilize the session. The neighbor update-source command is not necessary for directly connected internal BGP sessions. neighbor weight Assign a weight to the neighbor connection, which is used to determine the best path. ce Syntax neighbor {ipv6-address | peer-group-name} weight weight To remove a weight value, use the no neighbor {ipv6-address | peer-group-name} weight weight command.
PAGE 844
www.dell.com | support.dell.com To remove a network, use the no network ip-address mask [route-map map-name] command. Parameters ipv6-address prefix-length Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zeros. Defaults Command Modes Command History Usage Information Related Commands mask Enter the mask of the IP address in the slash prefix length format (for example, /24).
PAGE 845
Parameters ipv6-address prefix-length Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zeros. Defaults Not configured. Command Modes Command History ROUTER BGPV6-ADDRESS FAMILY Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.
PAGE 846
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale Usage Information If you do not configure default-metric command, in addition to the redistribute command, or there is no route map to set the metric, the metric for redistributed static and connected is “0”.
PAGE 847
Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale redistribute ospf Redistribute OSPFv3 routes into BGP. ce Syntax redistribute ospf process-id [[match external {1 | 2}] [match internal]] [route-map map-name] To stop redistribution of OSPF routes, use the no redistribute ospf process-id command.
PAGE 848
www.dell.com | support.dell.com router bgp Enter ROUTER BGP mode to configure and enable BGP. ce Syntax router bgp as-number To disable BGP, use the no router bgp as-number command. Parameters Defaults Command Modes Command History as-number Enter the AS number. Range: 1 to 65535. Not enabled. CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.
PAGE 849
show config View the current ROUTER BGP configuration.
PAGE 850
www.dell.com | support.dell.com Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale When you enable bgp non-deterministic-med command, the show ip bgp command output for a BGP route does not list the INACTIVE reason. show ip bgp ipv6 unicast cluster-list View BGP neighbors in a specific cluster.
PAGE 851
Command Modes no-advertise Enter the keywords no-advertise to view all routes containing the well-known community attribute of NO_ADVERTISE. All routes with the NO_ADVERTISE (0xFFFFFF02) community attribute must not be advertised to other BGP peers. no-export Enter the keywords no-export to view all routes containing the well-known community attribute of NO_EXPORT. All routes with the NO_EXPORT (0xFFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.
PAGE 852
www.dell.com | support.dell.com show ip bgp ipv6 unicast dampened-paths View BGP routes that are dampened (non-active). ce Syntax Command Modes show ip bgp ipv6 unicast dampened-paths EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.
PAGE 853
EXEC Privilege Usage Information To view the total number of COMMUNITY attributes found, use the show ip bgp ipv6 unicast summary command. The text line above the route table states the number of COMMUNITY attributes found. The show ip bgp ipv6 unicast community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp ipv6 unicast command output. Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.
PAGE 854
www.dell.com | support.dell.com Parameters ipv6-address prefix-length Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zeros. Command Modes filter-list as-path-name (OPTIONAL) Enter the keyword filter-list followed by the name of a configured AS-PATH ACL. regexp regular-expression Enter a regular expression then use one or a combination of the following characters to match: • .
PAGE 855
show ip bgp ipv6 unicast neighbors Displays information on IPv6 unicast routes exchanged by BGP neighbors. ce Syntax Parameters show ip bgp ipv6 unicast neighbors [ipv4-neighbor-addr | ipv6-neighbor-addr] [advertised-routes | dampened-routes | detail | flap-statistics | routes | received-routes [network [network-mask]] | denied-routes [network [network-mask]]] ipv6 unicast Enter the ipv6 unicast keywords to view information only related to IPv6 unicast routes.
PAGE 856
www.dell.com | support.dell.com Example (show ip bgp ipv6 unicast neighbors) FTOS#show ip bgp ipv6 unicast neighbors BGP neighbor is 5ffe:10::3, remote AS 1, external link BGP version 4, remote router ID 5.5.5.
PAGE 857
For address family: IPv6 Unicast BGP table version 12, neighbor version 12 2 accepted prefixes consume 32 bytes Prefix advertised 0, rejected 0, withdrawn 0 Connections established 3; dropped 2 Last reset 00:00:41, due to Closed by neighbor Notification History 'OPEN error/Bad AS' Sent : 0 Recv: 1 Local host: 5ffe:11::4, Local port: 179 Table 27-1.
PAGE 858
www.dell.com | support.dell.com Table 27-1. Related Commands Command Example fields: show ip bgp ipv6 unicast neighbors Lines beginning with Description Prefixes accepted Displays the number of network prefixes accepted by the router and the amount of memory used to process those prefixes. Prefixes advertised Displays the number of network prefixes advertised, the number rejected and the number withdrawn from the BGP routing table.
PAGE 859
Example Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.
PAGE 860
www.dell.com | support.dell.com 9000::4:2 9000::5:2 9000::6:2 9000::7:2 9000::8:2 9000::9:2 9000::a:2 9000::b:14 FTOS# 18508 1 2 3 18508 18508 18508 18508 0 35 35 35 35 44 35 29 0 32 32 32 32 19 32 29 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 never Active 00:16:42 00:16:39 00:16:41 00:16:42 00:16:41 00:16:43 00:13:01 show ip bgp next-hop View all next hops (via learned routes only) with current reachability and flap status.
PAGE 861
Parameters Command Modes regexp regular-expression Enter a regular expression then use one or a combination of the following characters to match: • . = (period) any single character (including a white space) • * = (asterisk) the sequences in a pattern (0 or more sequences) • + = (plus) the sequences in a pattern (1 or more sequences) • ? = (question mark) sequences in a pattern (either 0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.
PAGE 862
www.dell.com | support.dell.com Command Modes EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale show ip bgp paths extcommunity View all unique Extended community information in the BGP database. ce Syntax Command Modes show ip bgp paths extcommunity EXEC EXEC Privilege Command History Version 8.3.19.
PAGE 863
Parameters Command Modes regular-expression [character] Enter a regular expression then use one or a combination of the following characters to match: • . = (period) any single character (including a white space) • * = (asterisk) the sequences in a pattern (0 or more sequences) • + = (plus) the sequences in a pattern (1 or more sequences) • ? = (question mark) sequences in a pattern (either 0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.
PAGE 864
www.dell.com | support.dell.com Command History 864 Related Commands | Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 8.2.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series TeraScale neighbor timers IPv6 Border Gateway Protocol (IPv6 BGP) Adjust BGP timers for a specific peer or peer group.
PAGE 865
IPv6 MBGP Commands Multiprotocol BGP (MBGP) is an enhanced BGP that enables multicast routing policy throughout the Internet and connecting multicast topologies between BGP and autonomous systems (AS). FTOS MBGP is implemented as per IETF RFC 1858.
PAGE 866
www.dell.com | support.dell.com address family This command changes the context to SAFI (Subsequent Address Family Identifier). ce Syntax address family ipv6 unicast To remove SAFI context, use the no address family ipv6 unicast command. Parameters ipv6 Enter the keyword ipv6 to specify the address family as IPv6. unicast Enter the keyword unicast to specify multicast as SAFI. Defaults IPv6 Unicast Command Modes Command History ROUTER BGPV6-ADDRESS FAMILY Version 8.3.19.
PAGE 867
summary-only (OPTIONAL) Enter the keyword summary-only to advertise only the aggregate address. Specific routes will not be advertised. suppress-map map-name (OPTIONAL) Enter the keywords suppress-map followed by the name of a configured route map to identify which more-specific routes in the aggregate are suppressed. Defaults Not configured. Command Modes Command History ROUTER BGPV6-ADDRESS FAMILY Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 7.
PAGE 868
www.dell.com | support.dell.com Parameters half-life time (OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half, after the half-life period expires. Range: 1 to 45. Default: 15 minutes route-map map-name (OPTIONAL) Enter the keyword route-map followed by the name of a configured route map. Only match commands in the configured route map are supported. Defaults Disabled.
PAGE 869
clear ip bgp ipv6 unicast dampening Clear information on route dampening. ce Syntax Parameters clear ip bgp dampening ipv6 unicast [network network-mask] network (OPTIONAL) Enter the IPv6 network address in x:x:x:x::x format. network-mask If you enter the network address, then enter the network mask, from 0 to 128. Command Modes Command History EXEC Privilege Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 7.4.1.
PAGE 870
www.dell.com | support.dell.com debug ip bgp ipv6 unicast dampening View information on routes being dampened. ce Syntax debug ip bgp ipv6 unicast dampening To disable debugging, enter no debug ip bgp ipv6 unicast dampening Parameters dampening Command Modes Command History Enter the keyword dampening to clear route flap dampening information. EXEC Privilege Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 7.4.1.
PAGE 871
debug ip bgp ipv6 unicast updates View information about BGP updates. ce Syntax debug ip bgp ipv6 unicast ipv6-address prefix-length updates [in | out] To disable debugging, enter no debug ip bgp ipv6 unicast ipv6-address prefix-length updates [in | out] command. Parameters ipv6-address prefix-length Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format.
PAGE 872
www.dell.com | support.dell.com Defaults Command Modes Command History internal-distance Enter a number to assign to routes learned from a router within the AS. Range: 1 to 255. Default: 200 local-distance Enter a number to assign to routes learned from networks listed in the network command. Range: 1 to 255. Default: 200 external-distance = 20; internal-distance = 200; local-distance = 200. ROUTER BGPV6-ADDRESS FAMILY Version 8.3.19.0 Introduced on S4820T Version 8.4.2.
PAGE 873
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 7.4.1.0 Introduced on E-Series TeraScale By default, when a neighbor/peer group configuration is created in the Router BGP context, it is enabled for the IPv6/Unicast AFI/SAFI. By using activate in the new context, the neighbor/peer group is enabled for AFI/SAFI.
PAGE 874
www.dell.com | support.dell.com To remove a default route, use the no neighbor {ipv6-address | peer-group-name} default-originate command. Parameters ipv6-address (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group to set the default route of all routers in that peer group. route-map map-name (OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.
PAGE 875
Version 8.4.2.1 Introduced on C-Series and S4810. Version 7.4.1.0 Introduced on E-Series TeraScale Usage Information Related Commands Other BGP filtering commands include: neighbor filter-list and neighbor route-map. neighbor filter-list Assign a AS-PATH list to a neighbor or peer group. neighbor route-map Assign a route map to a neighbor or peer group. neighbor filter-list Configure a BGP filter based on the AS-PATH attribute.
PAGE 876
www.dell.com | support.dell.com To return to the default values, use the no neighbor ipv6-address | peer-group-name maximum-prefix maximum command. Parameters ipv6-address (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zeros. Defaults Command Modes Command History peer-group-name (OPTIONAL) Enter the name of the peer group. maximum Enter a number as the maximum number of prefixes allowed for this BGP router.
PAGE 877
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 7.4.1.0 Introduced on E-Series TeraScale If the set ipv6 next-hop command in the ROUTE-MAP mode is configured, its configuration takes precedence over the neighbor next-hop-self command. neighbor remove-private-as Remove private AS numbers from the AS-PATH of outgoing updates.
PAGE 878
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information map-name Enter the name of an established route map. If the Route map is not configured, the default is deny (to drop all routes). in Enter the keyword in to filter inbound routes. out Enter the keyword out to filter outbound routes. Not configured. ROUTER BGPV6-ADDRESS FAMILY Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 7.4.1.
PAGE 879
Usage Information The first time you enter this command it configures the neighbor as a route reflector and members of the route-reflector cluster. Internal BGP (IBGP) speakers do not need to be fully meshed if you configure a route reflector. When all clients of a route reflector are disabled, the neighbor is no longer a route reflector. network Specify the networks for the BGP process and enter them in the BGP routing table.
PAGE 880
www.dell.com | support.dell.com redistribute Redistribute routes into BGP. ce Syntax redistribute [connected | static] [route-map map-name] To disable redistribution, use the no redistribution [connected | static] [route-map command. map-name] Parameters connected Enter the keyword connected to redistribute routes from physically connected interfaces. static Enter the keyword static to redistribute manually configured routes. These routes are treated as incomplete routes.
PAGE 881
Parameters Command Modes network (OPTIONAL) Enter the network address (in dotted decimal format) of the BGP network to view information only on that network. network-mask (OPTIONAL) Enter the network mask (in slash prefix format) of the BGP network address. longer-prefixes (OPTIONAL) Enter the keyword longer-prefixes to view all routes with a common prefix. EXEC EXEC Privilege Command History Example Version 8.3.19.0 Introduced on S4820T Version 8.4.2.
PAGE 882
www.dell.com | support.dell.com . Table 27-2. Related Commands show ip bgp Command Example Fields Field Description Network Displays the destination network prefix of each BGP route. Next Hop Displays the next hop address of the BGP router. If 0::0/0 is listed in this column, then local routes exist in the routing table. Metric Displays the BGP route’s metric, if assigned. LocPrf Displays the BGP LOCAL_PREF attribute for the route.
PAGE 883
Parameters Command Modes community-number Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system. You can specify up to eight community numbers to view information on those community groups. local-AS Enter the keywords local-AS to view all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED. All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03) community attribute must not be advertised to external BGP peers.
PAGE 884
www.dell.com | support.dell.com show ip bgp ipv6 unicast dampened-paths View BGP routes that are dampened (non-active). ce Syntax Command Modes show ip bgp ipv6 unicast dampened-paths EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 7.4.1.0 Introduced on E-Series TeraScale show ip bgp ipv6 unicast detail Display detailed BGP information.
PAGE 885
DefMet 0 : AutoSumm 1 : NhopsP 0x41a0d100 : Starts 0 : Stops 0 : Opens 0 Closes 0 : Fails 0 : Fatals 0 : ConnExps 0 : HldExps 0 : KeepExps 0 RxOpens 0 : RxKeeps 0 : RxUpds 0 : RxNotifs 0 : TxUpds 0 : TxNotifs 0 BadEvts 0 : SynFails 0 : RxeCodeP 0x41a1b6b8 : RxHdrCodeP 0x41a1b6d4 : RxOpCodeP 0x41a1b6e4 RxUpdCodeP 0x41a1b704 : TxEcodeP 0x41a1b734 : TxHdrcodeP 0x41a1b750 : TxOpCodeP 0x41a1b760 TxUpdCodeP 0x41a1b780 : TrEvt 0 : LocPref 100 : tmpPathP 0x41a1b7b8 : LogNbrChgs 1 RecursiveNH 1 : PgCfgId 0 : KeepAli
PAGE 886
www.dell.com | support.dell.com Syntax Parameters Command Modes show ip bgp ipv6 unicast filter-list as-path-name as-path-name Enter the name of an AS-PATH. EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 7.4.1.0 Introduced on E-Series TeraScale show ip bgp ipv6 unicast flap-statistics View flap statistics on BGP routes.
PAGE 887
Example Version 8.4.2.1 Introduced on C-Series and S4810 Version 7.4.1.0 Introduced on E-Series TeraScale FTOS#show ip bgp ipv6 unicast flap-statistics BGP table version is 8, local router ID is 5.5.10.
PAGE 888
www.dell.com | support.dell.com Command Modes flap-statistics (OPTIONAL) Enter the keyword flap-statistics to view flap statistics on the neighbor’s routes. detail (OPTIONAL) Display detailed neighbor information. routes (OPTIONAL) Enter the keywords routes to view only the neighbor’s feasible routes. EXEC EXEC Privilege Command History Example Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 7.5.1.
PAGE 889
BGP state ESTABLISHED, in this state for 00:00:28 Last read 00:00:28, last write 00:00:28 Hold time is 180, keepalive interval is 60 seconds Received 27 messages, 3 notifications, 0 in queue Sent 0 messages, 0 notifications, 0 in queue Received 8 updates, Sent 0 updates Route refresh request: received 0, sent 0 Minimum time between advertisement runs is 30 seconds Minimum time before advertisements start is 0 seconds Capabilities received from neighbor for IPv6 Unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) C
PAGE 890
www.dell.com | support.dell.com Table 27-3. Related Commands show ip bgp neighbors Command Fields (continued) Lines beginning with Description Sent messages The line displays the number of BGP messages sent, the number of notifications (error messages) and the number of messages waiting in a queue for processing. Received updates This line displays the number of BGP updates received and sent. Minimum time Displays the minimum time, in seconds, between advertisements.
PAGE 891
EXEC Privilege Command History Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced on C-Series and S4810 Version 7.4.1.0 Introduced on E-Series TeraScale neighbor peer-group (assigning peers) Assign peer to a peer-group. neighbor peer-group (creating group) Create a peer group. show ip bgp ipv6 unicast summary Allows you to view the status of all BGP connections.
PAGE 892
www.dell.com | support.dell.com Table 27-4. 892 | show ip bgp summary Command Fields Field Description BGP AS-PATH entries Displays the number of BGP AS_PATH attributes processed and the amount of memory used to process them. BGP community entries Displays the number of BGP COMMUNITY attributes processed and the amount of memory used to process them. The show ip bgp ipv6 unicast community command provides more details on the COMMUNITY attributes.
PAGE 893
28 iSCSI Optimization Overview Internet Small Computer System Interface (iSCSI) optimization enables quality-of-service (QoS) treatment for iSCSI storage traffic on an or .
PAGE 894
www.dell.com | support.dell.com Usage Information You can configure iSCSI TLVs to be sent either globally or on a specified interface. The interface configuration takes priority over global configuration. iscsi aging time Set the aging time for iSCSI sessions. Syntax iscsi aging time time To remove the iSCSI session aging time, use the no iscsi aging time command. Parameters Defaults Command Mode Command History time Enter the aging time for the iSCSI session. Range: 5 to 43,200 minutes.
PAGE 895
Defaults Command Modes Enter the DSCP value assigned to the incoming packets in an iSCSI session. The valid range is 0 to 63. Default: The DSCP value in ingress packets is not changed. remark Marks the incoming iSCSI packets with the configured dot1p or DSCP value when they egress to the switch. Default: The dot1and DSCP values in egress packets are not changed. See above. CONFIGURATION Command History Usage Information dscp dscp-value Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.
PAGE 896
www.dell.com | support.dell.com To remove the configured priority bitmap, use the no iscsi priority-bits command. Defaults Command Modes Command History 4 (0x10 in the bitmap) PROTOCOL LLDP (only on global, not on interface) Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module iscsi profile-compellant Configure the auto-detection of Compellent arrays on a port.
PAGE 897
Command History Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module You can configure up to 16 target TCP ports on the switch in one command or multiple commands. When you use the no iscsi target port command and the TCP port to be deleted is one bound to a specific IP address, the IP address value must be included in the command.
PAGE 898
www.dell.com | support.dell.com Command Mode EXEC EXEC Privilege Command History Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.16.0 Introduced on MXL 10/40GbE Switch IO Module FTOS# show isci session Session 0: ------------------------------------------------------------------------------------Target: iqn.2001-05.com.equallogic:0-8a0906-0e70c2002-10a0018426a48c94-iom010 Initiator: iqn.1991-05.com.
PAGE 899
Time for aging out:00:00:09:34(DD:HH:MM:SS) ISID:806978696102 Initiator Initiator Target Target Connection IP Address TCP Port IP Address TCPPort ID 10.10.0.44 33345 10.10.0.101 3260 0 Session 1 : ----------------------------------------------------------------------------Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1 Initiator:iqn.2010-11.com.ixia.
PAGE 900
| iSCSI Optimization www.dell.com | support.dell.
PAGE 901
29 Intermediate System to Intermediate System (IS-IS) Overview Intermediate System to Intermediate System Protocol (IS-IS) for IPv4 and IPv6 is supported on supported on platforms e, , and . IS-IS is an interior gateway protocol that uses a shortest-path-first algorithm. IS-IS facilitates the communication between open systems, supporting routers passing both IP and OSI traffic. A router is considered an intermediate system. Networks are partitioned into manageable routing domains, called areas.
PAGE 902
www.dell.com | support.dell.
PAGE 903
• • • • • • • • • show config show isis database show isis graceful-restart detail show isis hostname show isis interface show isis neighbors show isis protocol show isis traffic spf-interval adjacency-check Verify that the “protocols supported” field of the IS-IS neighbor contains matching values to this router. e Syntax adjacency-check To disable adjacency check, use the no adjacency-check command.
PAGE 904
www.dell.com | support.dell.com Parameters Defaults Command Modes level1-into-level2 Enter the keyword level1-into-level2 to advertise Level 1 routes into Level 2 LSPs. This is the default. level2-into-level1 Enter the keyword level2-into-level1 to advertise Level 2 inter-area routes into Level 1 LSPs. Described in RFC 2966. prefix-list-name Enter the name of a configured IP prefix list. Routes meeting the criteria of the IP Prefix list are leaked.
PAGE 905
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Use the area-password command on routers within an area to prevent the link state database from receiving incorrect routing information from unauthorized routers. The password configured is injected into Level 1 LSPs, CSNPs, and PSNPs. Related Commands domain-password Allows you to set the authentication password for a routing domain.
PAGE 906
www.dell.com | support.dell.com clns host Define a name-to-network service mapping point (NSAP) mapping that can then be used with commands that require NSAPs and system IDs. e Syntax Parameters Defaults Command Modes Command History Related Commands Usage Information clns host name nsap name Enter an alphanumeric string to identify the name-to-NSAP mapping. nsap Enter a specific NSAP address that will be associated with the name parameter. Not configured. ROUTER ISIS Version 8.3.19.
PAGE 907
debug isis adj-packets Enable debugging on adjacency-related activity such as hello packets that are sent and received on IS-IS adjacencies. e Syntax debug isis adj-packets [interface] To turn off debugging, use the no debug isis adj-packets [interface] command. Parameters interface (OPTIONAL) Identifies the interface type slot/port as one of the following: • • • • • For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 908
www.dell.com | support.dell.com Parameters interface (OPTIONAL) Identifies the interface type slot/port as one of the following: For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. For a Port Channel interface, enter the keyword port-channel followed by a number: C-Series and S-Series Range: 1-128 • • E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale and 1 to 512 for ExaScale.
PAGE 909
Version 8.3.12.0 Introduced on S4810 Version 6.3.1.0 Introduced debug isis spf-triggers Enable debugging on the events that triggered IS-IS shortest path first (SPF) events for debugging purposes. e Syntax debug isis spf-triggers To turn off debugging, enter no debug isis spf-triggers. Command Modes EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 6.3.1.
PAGE 910
www.dell.com | support.dell.com default-information originate Generate a default route into an IS-IS routing domain and controls the distribution of default information. e Syntax default-information originate [always] [metric metric] [route-map map-name] To disable the generation of a default route into the specified IS-IS routing domain, enter the no default-information originate [always] [metric metric] [route-map map-name] command.
PAGE 911
description ces Syntax Enter a description of the IS-IS routing protocol description {description} To remove the description, use the no description {description} command. Parameters Defaults Command Modes Command History Related Commands description Enter a description to identify the IS-IS protocol (80 characters maximum). No default behavior or values ROUTER ISIS Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 pre-7.7.1.
PAGE 912
www.dell.com | support.dell.com Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 6.3.1.0 Introduced The administrative distance indicates the trust value of incoming packets. A low administrative distance indicates a high trust rate. A high value indicates a lower trust rate. For example, a weight of 255 is interpreted that the routing information source is not trustworthy and should be ignored.
PAGE 913
distribute-list out Suppress network prefixes from being advertised in outbound updates. e Syntax distribute-list prefix-list-name out [connected | bgp as number | ospf process-id | rip | static] To return to the default values, enter the no distribute-list prefix-list-name out [bgp as number connected | ospf process-id | rip | static] command. Parameters Defaults Command Modes prefix-list-name Specify the prefix list to filter prefixes in routing updates.
PAGE 914
www.dell.com | support.dell.com Defaults Command Modes No default behavior or values ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 7.8.1.0 Introduced IPv6 ISIS support Version 6.3.1.
PAGE 915
graceful-restart ietf Enable Graceful Restart on an IS-IS router. e Syntax graceful-restart ietf To return to the default, use the no graceful-restart ietf command. Parameters Defaults Command Modes Command History Usage Information ietf Enter ietf to enable Graceful Restart on the IS-IS router. Default is Graceful Restart disabled. ROUTER ISIS Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 8.3.1.
PAGE 916
www.dell.com | support.dell.com graceful-restart t1 Set the Graceful Restart wait time before unacknowledged restart requests are generated. This is the interval before the system sends a Restart Request (an IIH with RR bit set in Restart TLV) until the CSNP is received from the helping router. e Syntax graceful-restart t1 {interval seconds | retry-times value} To return to the default, use the no graceful-restart t1command.
PAGE 917
graceful-restart t3 Configure the overall wait time before Graceful Restart is completed. e Syntax graceful-restart t3 {adjacency | manual} seconds To return to the default, use the no graceful-restart t3command. Parameters adjacency Enter the keyword adjacency so that the restarting router receives the remaining time value from its peer and adjusts its T3 value accordingly if user has configured this option. manual Enter the keyword manual to specify a time value that the restarting router uses.
PAGE 918
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History Related Commands seconds Range: 5-300 seconds Default: 30 seconds 30 seconds ROUTER ISIS Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 8.3.1.0 Introduced on the E-Series graceful-restart t3 Configure the overall wait time before Graceful Restart is completed.
PAGE 919
Syntax hostname dynamic To disable this command, enter no hostname dynamic. Defaults Command Modes Enabled. ROUTER ISIS Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Use this command to build name-to-systemID mapping tables through the protocol. All show commands that display systems also display the hostname. Related Commands clns host Define a name-to-NSAP mapping.
PAGE 920
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History Usage Information Related Commands tag (OPTIONAL) The tag you specify identifies a specific area routing process. If you do not specify a tag, a null tag is assigned. No processes are configured. INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 7.5.1.0 Introduced You must use the net command to assign a network entity title to enable IS-IS.
PAGE 921
isis circuit-type Configure the adjacency type on interfaces. e Syntax isis circuit-type {level-1 | level-1-2 | level-2-only} To return to the default values, enter no isis circuit-type. Parameters Defaults Command Modes Command History Usage Information level-1 You can form a Level 1 adjacency if there is at least one common area address between this system and neighbors. You cannot form Level 2 adjacencies on this interface.
PAGE 922
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History Usage Information seconds Interval of transmission time between CSNPs on multi-access networks for the designated intermediate system. Range: 0 to 65535 Default: 10 level-1 (OPTIONAL) Independently configures the interval of time between transmission of CSNPs for Level 1. level-2 (OPTIONAL) Independently configures the interval of time between transmission of CSNPs for Level 2.
PAGE 923
Usage Information Related Commands Hello packets are held for a length of three times the value of the hello interval. Use a high hello interval seconds to conserve bandwidth and CPU usage. Use a low hello interval seconds for faster convergence (but uses more bandwidth and CPU resources). isis hello-multiplier Specifies the number of IS-IS hello packets a neighbor must miss before the router should declare the adjacency as down.
PAGE 924
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information Related Commands Padding of hello PDUs is enabled (ON). INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Hello PDUs are “padded” only when both the global and interface padding options are ON. Turning either one OFF will disable padding for the corresponding interface(s). hello padding Turn ON or OFF padding for LAN and point-to-point hello PDUs.
PAGE 925
isis metric Assign a metric to an interface. e Syntax isis metric default-metric [level-1 | level-2] To return to the default values, enter no isis metric [default-metric] [level-1 | level-2]. Parameters Defaults Command Modes Command History Usage Information default-metric Metric assigned to the link and used to calculate the cost from each other router via the links in the network to other destinations. You can configure this metric for Level 1 or Level 2 routing.
PAGE 926
www.dell.com | support.dell.com isis password Configure an authentication password for an interface. e Syntax isis password [hmac-md5] password [level-1 | level-2] To delete a password, enter the no isis password [password] [level-1 | level-2] command. Parameters Defaults Command Modes Command History Usage Information encryption-type (OPTIONAL) Enter 7 to encrypt the password using DES. hmac-md5 (OPTIONAL) Enter the keyword hmac-md5 to encrypt the password using MD5.
PAGE 927
Parameters Defaults Command Modes Command History Usage Information value This value sets the router priority. The higher the value, the higher the priority. Range: 0 to 127 Default: 64 level-1 (OPTIONAL) Specify the priority for Level 1. This is the default. level-2 (OPTIONAL) Specify the priority for Level 2. value = 64; level-1 (if not otherwise specified) INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.12.
PAGE 928
www.dell.com | support.dell.com If you are configuring only one area in your network, you do not need to run both Level 1 and Level 2 routing algorithms. The IS type can be configured as Level 1. log-adjacency-changes Generate a log messages for adjacency state changes. e Syntax log-adjacency-changes To disable this function, enter no log-adjacency-changes. Defaults Command Modes Command History Usage Information Adjacency changes are not logged. ROUTER ISIS Version 8.3.19.
PAGE 929
Defaults Command Modes Command History Usage Information initial_wait_interval seconds (OPTIONAL) Enter the initial wait time, in seconds, before running the first LSP generation. Range: 0 to 120 seconds Default: 1 second second_wait_interval seconds (OPTIONAL) Enter the wait interval, in seconds, between the first and second LSP generation. Range: 0 to 120 seconds Default: 5 seconds Defaults as above ROUTER ISIS Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 7.
PAGE 930
www.dell.com | support.dell.com Usage Information The link MTU and the LSP MTU size must be the same. Since each device can generate a maximum of 255 LSPs, consider carefully whether the lsp-mtu command should be configured. lsp-refresh-interval Set the link state PDU (LSP) refresh interval. LSPs must be refreshed before they expire. When the LSPs are not refreshed after a refresh interval, they are kept in a database until their max-lsp-lifetime reaches zero and then LSPs will be purged.
PAGE 931
Parameters Defaults Command Modes Command History Usage Information number Set the maximum number of manual area addresses. Range: 3 to 6. Default: 3 3 addresses ROUTER ISIS Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 7.5.1.0 Expanded to support LSP Throttling Enhancement Use this command to configure the number of area addresses on router. This value should be consistent with routers in the same area, or else, the router will form only Level 2 adjacencies.
PAGE 932
www.dell.com | support.dell.com maximum-paths Allows you to configure the maximum number of equal cost paths allowed in a routing table. e Syntax maximum-paths number To return to the default values, enter no maximum-paths. Parameters Defaults Command Mode number Enter a number as the maximum number of parallel paths an IP routing installs in a routing table. Range: 1 to 16. Default: 4 4 ROUTER ISIS (for IPv4) CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Command History Version 8.3.
PAGE 933
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 If you enter the metric-style wide command, the FTOS generates and accepts only new-style TLVs. The router uses less memory and other resources rather than generating both old-style and new-style TLVs. The new-style TLVs have wider metric fields than old-style TLVs. Related Commands isis metric Use this command to configure a metric for an interface.
PAGE 934
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 passive-interface Suppress routing updates on an interface. This command stops the router from sending updates on that interface. e Syntax passive-interface interface To delete a passive interface configuration, enter the no passive-interface interface command.
PAGE 935
To end redistribution or disable any of the specified keywords, enter the no redistribute {static | connected | rip} [metric metric-value] [metric-type {external | internal}] [level-1 | level-1-2 | level-2] [route-map map-name] command. Parameters connected Enter the keyword connected redistribute active routes into IS-IS. rip Enter the keyword rip to redistribute RIP routes into IS-IS. static Enter the keyword static to redistribute user-configured routes into IS-IS.
PAGE 936
www.dell.com | support.dell.com How a metric value assigned to a redistributed route is advertised depends on how on the configuration of the metric-style command. If the metric-style command is set for narrow or transition mode and the metric value in the redistribute command is set to a number higher than 63, the metric value advertised in LSPs will be 63. If the metric-style command is set for wide mode, an the metric value in the redistribute command is advertised.
PAGE 937
Example Figure 29-1. redistribute bgp Command Example FTOS(conf)#router is FTOS(conf-router_isis)#redistribute bgp 1 level-1 metric 32 metric-type external route-map rmap-isis-to-bgp FTOS(conf-router_bgp)#show running-config isis ! router isis redistribute bgp 1 level-1 metric 32 metric-type external route-map rmap-isis-to-bgp Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 7.5.1.0 Introduced IPv6 ISIS support Version 6.3.1.
PAGE 938
www.dell.com | support.dell.com match {external | internal} (OPTIONAL) The command used for OSPF to route and redistribute into other routing domains. The values are • • route-map map-name internal external map-name is an identifier for a configured route map. The route map should filter imported routes from the source routing protocol to the current routing protocol. If you do not specify a map-name, all routes are redistributed.
PAGE 939
You must enable routing on one or more interfaces to establish adjacencies and establish dynamic routing. Only one IS-IS routing process can be configured to perform Level 2 routing. A level-1-2 designation performs Level 1 and Level 2 routing at the same time. Related Commands ip router isis Configure IS-IS routing processes for IP on interfaces and attach an area designator to the routing process. net Configure an IS-IS network entity title (NET) for a routing process.
PAGE 940
www.dell.com | support.dell.com Examples Figure 29-2. Command Example: show config (router-isis mode) FTOS(conf-router_isis)#show config ! router isis clns host ISIS 49.0000.0001.F100.E120.0013.00 log-adjacency-changes net 49.0000.0001.F100.E120.0013.00 ! address-family ipv6 unicast maximum-paths 16 Identifies that Multi-Topology multi-topology transition IS-IS is enabled in transition set-overload-bit mode spf-interval level-1 100 15 20 spf-interval level-2 120 20 25 exit-address-family Figure 29-3.
PAGE 941
Example Figure 29-4. Command Example: show isis database FTOS#show isis database IS-IS Level-1 Link State Database LSPID LSP Seq Num ISIS.00-00 * 0x00000006 LSP Checksum 0xCF43 IS-IS Level-2 Link State Database LSPID LSP Seq Num LSP Checksum ISIS.00-00 * 0x00000006 0xCF43 ! FTOS#show isis database detail ISIS.00-00 IS-IS Level-1 Link State Database LSPID LSP Seq Num LSP Checksum ISIS.00-00 * 0x0000002B 0x853B Area Address: 49.0000.0001 NLPID: 0xCC 0x8E IP Address: 10.1.1.
PAGE 942
www.dell.com | support.dell.com Table 29-1. Command Example Fields Field Description IS-IS Level-1/Level-2 Link State Database Displays the IS-IS link state database for Level 1 or Level 2. LSPID Displays the LSP identifier. The first six octets are the System ID of the originating router. The next octet is the pseudonode ID. If this byte is not zero, then the LSP describes system links. If this byte is zero (0), then the LSP describes the state of the originating router.
PAGE 943
Example Figure 29-5.
PAGE 944
www.dell.com | support.dell.com Parameters interface (OPTIONAL) Enter the following keywords and slot/port or number information: • • • • • • Command Modes For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. For Loopback interface, enter the keyword loopback followed by a number from zero (0) to 16383.
PAGE 945
Parameters level-1 (OPTIONAL) Displays information about Level 1 IS-IS neighbors. level-2 (OPTIONAL) Displays information about Level 2 IS-IS neighbors. detail (OPTIONAL) Displays detailed information about neighbors. interface (OPTIONAL) Identifies the interface type slot/port as one of the following: • • • • • Command Modes For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 946
www.dell.com | support.dell.com Usage Information Use this command to confirm that the neighbor adjacencies are operating correctly. If you suspect that they are not, you can verify the specified area addresses of the routers by using the show isis neighbors command. show isis protocol Display IS-IS routing information. e Syntax Command Modes show isis protocol EXEC EXEC Privilege Command History Example Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Figure 29-9.
PAGE 947
Parameters interface (OPTIONAL) Identifies the interface type slot/port as one of the following: For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. For a Port Channel interface, enter the keyword port-channel followed by a number: C-Series and S-Series Range: 1-128 • • E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale and 1 to 512 for ExaScale. For a SONET interface, enter the keyword sonet followed by the slot/port information.
PAGE 948
www.dell.com | support.dell.com Table 29-3. Command Example Fields (continued) Item Description Level-1/Level-2 DR Elections Displays the number of times designated router elections ran. Level-1/Level-2 SPF Calculations Displays the number of shortest path first calculations. LSP checksum errors received Displays the number of checksum errors LSPs received. LSP authentication failures Displays the number of LSP authentication failures.
PAGE 949
Usage Information This command spf-interval in CONFIG-ROUTER-ISIS-AF-IPV6 mode is used for IPv6 Multi-Topology route computation only. If using single topology mode, use the spf-interval command in CONFIG-ROUTER-ISIS mode for both IPv4 and IPv6 route computations. SPF throttling slows down the frequency at which route calculation are performed during network instability.
PAGE 950
www.dell.com | support.dell.
PAGE 951
30 Link Aggregation Control Protocol (LACP) Overview This chapter contains commands for Dell Force10’s implementation of Link Aggregation Control Protocol (LACP) for the creation of dynamic link aggregation groups (LAGs — called port-channels in FTOS parlance). For static LAG commands, the section Port Channel Commands in the Interfaces chapter), based on the standards specified in the IEEE 802.
PAGE 952
www.dell.com | support.dell.com clear lacp counters ces Clear Port Channel counters. Syntax Parameters clear lacp port-channel-number counters port-channel-number Defaults Enter a port-channel number: C-Series and S-Series Range: 1 to 128 E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale and 1 to 512 for ExaScale. Without a Port Channel specified, the command clears all Port Channel counters. Command Modes EXEC EXEC Privilege Command History Related Commands Version 8.3.19.
PAGE 953
interface in | out Defaults Command Modes (OPTIONAL) Enter the following keywords and slot/port or number information: • For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a SONET interface, enter the keyword sonet followed by the slot/ port information.
PAGE 954
www.dell.com | support.dell.com Version 7.5.1.0 Support added for C-Series Version 7.5.1.0 Introduced on E-Series Usage Information Related Commands This command applies to dynamic port-channel interfaces only. When applied on a static port-channel, the command has no effect.
PAGE 955
Parameters priority-value Defaults 32768 Command Modes Command History Enter the system-priority value. The higher the value, the lower the priority. Range: 1 to 65535 Default: 32768 CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.2.1.1 Introduced on E-Series port-channel mode ces Configure the LACP port channel mode.
PAGE 956
www.dell.com | support.dell.com Table 30-1. Mode LACP Modes Function active An interface is in an active negotiating state in this mode. LACP runs on any link configured in the active state and also automatically initiates negotiation with other ports by initiating LACP packets. passive An interface is not in an active negotiating state in this mode. LACP runs on any link configured in the passive state.
PAGE 957
Parameters Command Modes port-channel-number Enter a port-channel number: C-Series and S-Series Range: 1 to 128 E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale and 1 to 512 for ExaScale. sys-id (OPTIONAL) Enter the keyword sys-id and the value that identifies a system. counters (OPTIONAL) Enter the keyword counters to display the LACP counters. EXEC EXEC Privilege Command History Example (show lacp port-channel-number) Version 8.3.19.0 Introduced on S4820T Version 8.3.7.
PAGE 958
www.dell.com | support.dell.com Related Commands 958 | clear lacp counters Clear the LACP counters. show interfaces port-channel Display information on configured Port Channel groups.
PAGE 959
31 Layer 2 Overview This chapter describes commands to configure Layer 2 features. It contains the following sections: • • • MAC Addressing Commands Virtual LAN (VLAN) Commands Far-End Failure Detection (FEFD) Some MAC addressing commands are supported only on the E-Series, some on all three Dell Force10 platforms, and some on two Dell Force10 platforms.
PAGE 960
www.dell.com | support.dell.com • • • • • • • • • show cam mac linecard (count) show cam maccheck linecard show cam mac linecard (dynamic or static) show cam mac stack-unit show mac-address-table show mac-address-table aging-time show mac accounting destination show mac cam show mac learning-limit clear mac-address-table ces Clear the MAC address table of all MAC address learned dynamically.
PAGE 961
Command History Version 8.3.19.0 Introduced on S4820T. Version 8.3.12.0 Added support for sticky MAC addresses. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series mac accounting destination e Configure a destination counter for Layer 2 traffic.
PAGE 962
www.dell.com | support.dell.com Parameters Defaults Command Modes seconds Enter either zero (0) or a number as the number of seconds before MAC addresses are relearned. To disable aging of the MAC address table, enter 0. E-Series Range from CONFIGURATION mode: 10 - 1000000 E-Series Range from INTERFACE VLAN mode: 1 - 1000000 C-Series and S-Series Range: 10 - 1000000 Default: 1800 seconds 1800 seconds CONFIGURATION INTERFACE VLAN (E-Series only) Command History Related Commands Version 8.3.19.
PAGE 963
Parameters Defaults Command Modes Command History Related Commands mac-address Enter the 48-bit hexidecimal address in nn:nn:nn:nn:nn:nn format. output interface Enter the keyword output followed by one of the following interfaces: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 964
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information Not configured. CONFIGURATION Version 8.3.19.0 Introduced on S4820T. Version 8.3.7.0 Introduced on S4810 Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series For information on the specific trap sent and the corresponding Syslog refer to Chapter 60, SNMP Traps.
PAGE 965
Command History Version 8.3.19.0 Introduced on S4820T. Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series Version 7.4.1.0 Introduced on E-Series Usage Information Refer to the “NIC Teaming” section of the Layer 2 chapter in the FTOS Configuration Guide for details on using this command.
PAGE 966
www.dell.com | support.dell.com mac learning-limit ces Limit the maximum number of MAC addresses (static + dynamic) learned on a selected interface. z Syntax Parameters Defaults mac learning-limit address_limit [vlan vlan-id] [dynamic] [station-move] address_limit Enter the maximum number of MAC addresses that can be learned on the interface. Range: 1 to 1000000 vlan vlan-id E-Series only: Enter the keyword followed by the VLAN ID.
PAGE 967
With the keyword no-station-move option, MAC addresses learned through this feature on the selected interface will persist on a per-VLAN basis, even if received on another interface. Enabling or disabling this option has no effect on already learned MAC addresses. Once the MAC address learning limit is reached, the MAC addresses do not age out unless you add the dynamic option. To clear statistics on MAC address learning, use the clear counters command with the learning-limit parameter.
PAGE 968
www.dell.com | support.dell.com Usage Information Related Commands Version 8.2.1.0 Introduced on S-Series Version 7.8.1.0 Introduced on C-Series Version 7.5.1.0 Introduced on E-Series This is supported on physical interfaces, static LAGs, and LACP LAGs. show mac learning-limit Display details of the mac learning-limit mac learning-limit mac-address-sticky Maintain the dynamically-learnt mac addresses as sticky MAC addresses on the selected port.
PAGE 969
Parameters Defaults Command Modes Command History Usage Information Related Commands log Enter the keyword log to generate a syslog message on a station move violation. shutdown-both Enter the keyword shutdown to shut down both the original and offending interface and generate a syslog message. shutdown-offending Enter the keyword shutdown-offending to shut down the offending interface and generate a syslog message.
PAGE 970
www.dell.com | support.dell.com show cam mac linecard (count) e Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs. Syntax Parameters Command Modes show cam mac linecard slot port-set port-pipe count [vlan vlan-id] [interface interface] linecard slot (REQUIRED) Enter the keyword linecard followed by a slot number to select the linecard for which to gather information. E-Series range: 0 to 6.
PAGE 971
Parameters Command Modes linecard slot (REQUIRED) Enter the keyword linecard followed by a slot number to select the linecard for which to gather information. C300 range: 0 to 7; C150 range: 0 to 4 port-set port-pipe (REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information. Range: 0 or 1 EXEC EXEC Privilege Command History Example Version 7.6.1.0 Introduced on C-Series FTOS#show cam maccheck linecard 2 port-set 0 Dumping entries.
PAGE 972
www.dell.com | support.dell.com Example (show cam mac linecard) show cam mac linecard (dynamic or static) ce Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs.
PAGE 973
EXEC Privilege Command History Example Version 8.3.19.0 Introduced on S4820T. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on S4810 Version 7.5.1.0 Added support for C-Series pre-Version 6.2.1.
PAGE 974
www.dell.com | support.dell.com Parameters Command Modes stack-unit unit_number (REQUIRED) Enter the keyword linecard followed by a stack member number to select the linecard for which to gather information. S-Series Range: 0 to 1 port-set port-pipe (REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.
PAGE 975
Parameters dynamic (OPTIONAL) Enter the keyword dynamic to display only those MAC addresses learned dynamically by the switch. Optionally, you can also add one of these combinations: address/mac-address, interface/interface, or vlan vlan-id. static (OPTIONAL) Enter the keyword static to display only those MAC address specifically configured on the switch. Optionally, you can also add one of these combinations: address/mac-address, interface/interface, or vlan vlan-id.
PAGE 976
www.dell.com | support.dell.com Example FTOS#show mac-address-table VlanId Mac Address Type Interface 999 00:00:00:00:00:19 Sticky Gi 0/1 999 00:00:00:00:00:29 Dynamic Gi 0/2 FTOS# Table 31-1. show mac-address-table Information Column Heading Description Example (show mac-address-table count) VlanId Displays the VLAN ID number. Mac Address Displays the MAC address in nn:nn:nn:nn:nn:nn format.
PAGE 977
show mac-address-table aging-time ces Display the Syntax Parameters aging times assigned to the MAC addresses on the switch. show mac-address-table aging-time [vlan vlan-id] vlan vlan-id Command Modes On the E-Series, enter the keyword vlan followed by the VLAN ID to display the MAC address aging time for MAC addresses on the VLAN. Range: 1 to 4094. EXEC EXEC Privilege Command History Example Version 8.3.19.0 Introduced on S4820T. 8.3.7.0 Introduced on S4810 Version 8.3.1.
PAGE 978
www.dell.com | support.dell.com Parameters Command Modes mac-address (OPTIONAL) Enter the MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address. interface interface (OPTIONAL) Enter the keyword interface followed by the interface type, slot and port information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 979
show mac cam e Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs. Syntax show mac cam Command Modes EXEC EXEC Privilege Command History pre-Version 6.2.1.1 Example Introduced on E-Series FTOS#show mac cam Slot Type MAC CAM Size MAC FIB Entries 0 E24PD 64K entries 48K (75%) 2 E24PD2 128K entries 64K (50%) 11 EX2YD 64K entries 16K (25%) Note: All CAM entries are per portpipe. FTOS# Table 31-3.
PAGE 980
www.dell.com | support.dell.com Command Modes interface interface (OPTIONAL) Enter the keyword interface with the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For SONET interfaces, enter the keyword sonet followed by the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
PAGE 981
Gi 5/84 2 2 0 0 0 Gi 5/84 * 5 0 0 0 FTOS#show mac learning-limit interface gig 5/84 vlan 2 Interface Vlan Learning Dynamic Static Unknown SA Slot/port Id Limit MAC count MAC count Drops Gi 5/84 2 2 0 0 0 Example (C-Series & S-Series) C-Series/S-Series output: FTOS#show mac learning-limit Interface Learning Dynamic Static Unknown SA Slot/port Limit MAC count MAC count Drops Gi 1/0 10 0 0 0 Gi 1/1 5 0 0 0 FTOS#show mac learning-limit interface gig 1/0 Interface Learning Dynamic Static Unknown SA Slot/port Li
PAGE 982
www.dell.com | support.dell.com • • • tagged track ip untagged Refer also to VLAN Stacking and VLAN-related commands, such as portmode hybrid, in the Interfaces chapter. description ces Add a description about the selected VLAN. Syntax description description To remove the description from the VLAN, use the no description command.
PAGE 983
Command History Usage Information Version 8.3.19.0 Introduced on S4820T. Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series To return VLAN 1 as the Default VLAN, use this command syntax (default-vlan-id 1). The Default VLAN contains only untagged interfaces. Related Commands interface vlan Configure a VLAN.
PAGE 984
www.dell.com | support.dell.com Command History Example Version 8.1.1.2 Introduced on E-Series ExaScale E600i Version 8.1.1.
PAGE 985
During an RPM failover event, all SNMP counters remain intact. The counters will sync over to the secondary RPM. name ces Syntax Assign a name to the VLAN. name vlan-name To remove the name from the VLAN, enter no name. Parameters Defaults Command Modes Command History Usage Information Related Commands Enter up to 32 characters as the name of the VLAN. vlan-name Not configured. INTERFACE VLAN Version 8.3.19.0 Introduced on S4820T. Version 8.3.7.0 Introduced on S4810 Version 7.6.1.
PAGE 986
www.dell.com | support.dell.com interface Vlan 100 no ip address no shutdown FTOS(conf-if-vl-100)# Command History Version 8.3.19.0 Introduced on S4820T. Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.
PAGE 987
Codes: * - Default VLAN, G - GVRP VLANs, P - Primary, C - Community, I - Isolated Q: U - Untagged, T - Tagged x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack NUM * 1 2 P Status Description Inactive Active 3 Active 4 Active 5 Active 6 Active 7 Active 100 C 101 I 102 FTOS# Table 31-4.
PAGE 988
www.dell.com | support.dell.
PAGE 989
Related Commands vlan-stack compatible Enable the Stackable VLAN feature on the selected VLAN. interface vlan Configure a VLAN. tagged ces Syntax Add a Layer 2 interface to a VLAN as a tagged interface. tagged interface To remove a tagged interface from a VLAN, use no tagged interface command.
PAGE 990
www.dell.com | support.dell.com track ip ces Track the Layer 3 operational state of a Layer 3 VLAN, using a subset of the VLAN member interfaces. Syntax track ip interface To remove the tracking feature from the VLAN, use the no track ip interface command. Parameters Defaults Not configured Command Modes Command History Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 991
untagged ces Add a Layer 2 interface to a VLAN as an untagged interface. Syntax untagged interface To remove an untagged interface from a VLAN, use the no untagged interface command. Parameters interface Defaults All interfaces in Layer 2 mode are untagged. Command Modes Command History Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 992
www.dell.com | support.dell.com Far-End Failure Detection (FEFD) Overview FTOS supports Far-End Failure Detection (FEFD) on the Ethernet interfaces of the following platforms as indicated by the characters that appear under each of the command headings: E-Series e, S4810 The FEFD feature detects and reports far-end link failures. • • • FEFD is not supported on the Management interface. During an RPM failover, FEFD is operationally disabled for approximately 8-10 seconds. By default, FEFD is disabled.
PAGE 993
packets Enter the keyword packets to enable debugging of FEFD to view information on packets sent and received. interface (OPTIONAL) Enter the following keywords and slot/port or number information: • • • • • Command Modes Related Commands Command History For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. For a SONET interface, enter the keyword sonet followed by the slot/port information.
PAGE 994
www.dell.com | support.dell.com Version 8.3.12.0 Introduced on S4810. Legacy E-Series command fefd disable Disable FEFD on an interface only. This command overrides the fefd reset command for the interface. e Syntax fefd disable To re-enable FEFD on an interface, enter no fefd disable. Default Not configured. Command Modes Related Commands Command History INTERFACE fefd disable Disable Far-End Failure Detection on an interface. fefd reset Enable FEFD globally on the system. Version 8.3.19.
PAGE 995
Command Modes Related Commands CONFIGURATION fefd Enable Far-End Failure Detection. fefd-global interval Configure an interval between FEFD control packets. show fefd Command History Version 8.3.19.0 Introduced on S4820T. Version 8.3.12.0 Introduced on S4810. Legacy E-Series command Usage Information If you enter only the fefd-global syntax, the mode is normal and the default interval is 15 seconds.
PAGE 996
www.dell.com | support.dell.com fefd interval Set an interval between control packets. e Syntax fefd interval seconds To return to the default value, enter no fefd interval. Parameters Defaults 15 seconds Command Modes Related Commands Command History Enter a number as the time between FEFD control packets. Range: 3 to 300 seconds Default: 15 seconds seconds INTERFACE fefd Enable Far-End Failure Detection. Version 8.3.19.0 Introduced on S4820T. Version 8.3.12.0 Introduced on S4810.
PAGE 997
Command History Version 8.3.19.0 Introduced on S4820T. Version 8.3.12.0 Introduced on S4810. Legacy E-Series command fefd reset Reset all interfaces or a single interface that was in “error-disabled” mode. e Syntax Parameters fefd reset [interface] interface (OPTIONAL) Enter the following keywords and slot/port or number information: • • • • • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 998
www.dell.com | support.dell.com Parameters (OPTIONAL) Enter the following keywords and slot/port or number information: interface For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. For a SONET interface, enter the keyword sonet followed by the slot/port information. For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
PAGE 999
Command History fefd-global Enable FEFD globally on the system. fefd reset Reset all interfaces or a single interface that was in “error-disabled” mode. Version 8.3.19.0 Introduced on S4820T. Version 8.3.12.0 Introduced on S4810.
PAGE 1000
| Layer 2 www.dell.com | support.dell.
PAGE 1001
32 Link Layer Discovery Protocol (LLDP) Overview Link Layer Discovery Protocol (LLDP) advertises connectivity and management from the local station to the adjacent stations on an IEEE 802 LAN. LLDP facilitates multi-vendor interoperability by using standard management tools to discover and make available a physical topology for network management. The FTOS implementation of LLDP is based on IEEE standard 801.1ab.
PAGE 1002
www.dell.com | support.dell.com The starting point for using LLDP is invoking LLDP with the protocol lldp command in either the CONFIGURATION or INTERFACE mode. The information distributed by LLDP is stored by its recipients in a standard Management Information Base (MIB). The information can be accessed by a network management system through a management protocol such as SNMP. the Link Layer Discovery Protocol chapter of the FTOS Configuration Guide for details on implementing LLDP/LLDP-MED.
PAGE 1003
advertise dot3-tlv ces Syntax Advertise dot3 TLVs (Type, Length, Value). advertise dot3-tlv {max-frame-size} To remove advertised dot3-tlv, use the no advertise dot3-tlv {max-frame-size} command. Parameters Defaults Command Modes Command History max-frame-size Enter the keyword max-frame-size to advertise the dot3 maximum frame size. No default values or behavior CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp) Version 8.3.19.0. Introduced on S4820T Version 8.3.7.
PAGE 1004
www.dell.com | support.dell.com Command History Usage Information Version 8.3.19.0. Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series Version 7.4.1.0 Introduced on E-Series All three command options — system-capabilities, system-description, and system-name} —-can be invoked individually or together, in any sequence.
PAGE 1005
Syntax Parameters clear lldp neighbors {interface} interface Defaults No default values or behavior Command Modes Command History Enter the following keywords and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword gigabitEthernet followed by the slot/port information.
PAGE 1006
www.dell.com | support.dell.com Defaults Command Modes Command History packet (OPTIONAL) Enter the keyword packet to display information regarding packets coming in or going out. brief (OPTIONAL) Enter the keyword brief to display brief packet information. detail (OPTIONAL) Enter the keyword detail to display detailed packet information. tx (OPTIONAL) Enter the keyword tx to display transmit only packet information.
PAGE 1007
Related Commands protocol lldp (Configuration) Enable LLDP globally. debug lldp interface Debug LLDP show lldp neighbors Display the LLDP neighbors show running-config lldp Display the LLDP running configuration hello ces Configure the rate at which the LLDP control packets are sent to its peer. Syntax hello seconds To revert to the default, use the no hello seconds command.
PAGE 1008
www.dell.com | support.dell.com Defaults Both transmit and receive Command Modes Command History Related Commands CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp) Version 8.3.19.0. Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series Version 7.4.1.0 Introduced on E-Series protocol lldp (Configuration) Enable LLDP globally.
PAGE 1009
Syntax protocol lldp To disable LLDP globally on the chassis, use the no protocol lldp command. Defaults Command Modes Command History Disabled CONFIGURATION (conf-lldp) Version 8.3.19.0. Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series Version 7.4.1.0 Introduced on E-Series protocol lldp (Interface) ces Syntax Enter the LLDP protocol in the INTERFACE mode.
PAGE 1010
www.dell.com | support.dell.com Syntax Parameters Defaults Command Modes Command History Example show lldp neighbors [interface] [detail] interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword gigabitEthernet followed by the slot/port information.
PAGE 1011
Command History Example Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series Version 7.4.1.
PAGE 1012
www.dell.com | support.dell.com • • • • • • advertise med softphone-voice advertise med streaming-video advertise med video-conferencing advertise med video-signaling advertise med voice advertise med voice-signaling FTOS LLDP-MED (Media Endpoint Discovery) commands are an extension of the set of LLDP TLV advertisement commands.
PAGE 1013
To return to the default, use the no advertise med guest-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID. Range: 1 to 4094 layer2_priority Enter the Layer 2 priority. Range: 0 to 7 DSCP_value Enter the DSCP value. Range: 0 to 63 priority-tagged number Enter the keyword priority-tagged followed the Layer 2 priority.
PAGE 1014
www.dell.com | support.dell.com Defaults Related Commands Enter the DSCP value. Range: 0 to 63 priority-tagged number Enter the keyword priority-tagged followed the Layer 2 priority. Range: 0 to 7 unconfigured Command Modes Command History DSCP_value CONFIGURATION (conf-lldp) \ Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on S-Series Version 7.6.1.
PAGE 1015
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series and E-Series ECS — Emergency Call Service such as defined by TIA or National Emergency Numbering Association (NENA) ELIN — Emergency Location Identification Number, a valid North America Numbering Plan format telephone number supplied for ECS purposes.
PAGE 1016
www.dell.com | support.dell.com advertise med softphone-voice ces Configure the system to advertise softphone to enable IP telephony on a computer so that the computer can be used as a phone. Syntax advertise med softphone-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number} To return to the default, use the no advertise med softphone-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.
PAGE 1017
Parameters vlan-id Enter the VLAN ID. Range: 1 to 4094 layer2_priority Enter the Layer 2 priority (C-Series and E-Series only). Range: 0 to 7 DSCP_value Enter the DSCP value (C-Series and E-Series only). Range: 0 to 63 priority-tagged number Enter the keyword priority-tagged followed the Layer 2 priority. Range: 0 to 7 Defaults unconfigured Command Modes Command History Related Commands CONFIGURATION (conf-lldp) Version 8.3.19.0 Introduced on S4820T Version 8.3.7.
PAGE 1018
www.dell.com | support.dell.com Command Modes Command History Related Commands CONFIGURATION (conf-lldp) Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on S-Series Version 7.6.1.
PAGE 1019
show lldp neighbors Display the LLDP neighbors show lldp neighbors Display the LLDP running configuration advertise med voice ces Configure the system to advertise a dedicated IP telephony handset or other appliances supporting interactive voice services. Syntax advertise med voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number} To return to the default, use the no advertise med voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command.
PAGE 1020
www.dell.com | support.dell.com To return to the default, use the no advertise med voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command. Parameters Defaults Command Modes Command History Related Commands 1020 | vlan-id Enter the VLAN ID. Range: 1 to 4094 layer2_priority Enter the Layer 2 priority (C-Series and E-Series only). Range: 0 to 7 DSCP_value Enter the DSCP value (C-Series and E-Series only).
PAGE 1021
33 Multicast Source Discovery Protocol (MSDP) Overview MSDP (Multicast Source Discovery Protocol) connects multiple PIM Sparse-Mode (PIM-SM) domains together. MSDP peers connect using TCP port 639. Peers send keepalives every 60 seconds. A peer connection is reset after 75 seconds if no MSDP packets are received. MSDP connections are parallel with MBGP connections.
PAGE 1022
www.dell.com | support.dell.com clear ip msdp peer e Reset the TCP connection to the peer and clear all the peer statistics. Syntax Parameters clear ip msdp peer {peer address} peer address Defaults Not configured Command Modes Command History Enter the peer address in a dotted decimal format (A.B.C.D.) EXEC Privilege Version 6.2.1.
PAGE 1023
To turn debugging off, use the no debug ip msdp {event peer address | packet peer address | pim} command. Parameters event peer address Enter the keyword event followed by the peer address in a dotted decimal format (A.B.C.D.). packet peer address Enter the keyword packet followed by the peer address in a dotted decimal format (A.B.C.D.). pim Enter the keyword pim to debug advertisement from PIM. Defaults Not configured Command Modes Command History EXEC Privilege Version 8.3.19.
PAGE 1024
www.dell.com | support.dell.com ip msdp default-peer e Define a default peer from which to accept all Source-Active (SA) messages. Syntax ip msdp default-peer peer address [list name] To remove the default peer, use the no ip msdp default-peer {peer address} list name command. Parameters Defaults Command Modes Command History Usage Information peer address Enter the peer address in a dotted decimal format (A.B.C.D.
PAGE 1025
ip msdp mesh-group e Configure a peer to be a member of a mesh group. Syntax ip msdp mesh-group {name} {peer address} To remove the peer from a mesh group, use the no ip msdp mesh-group {name} {peer address} command. Parameters Defaults Command Modes Command History Usage Information name Enter a string of up to 16 characters long for as the mesh group name. peer address Enter the peer address in a dotted decimal format (A.B.C.D.) Not configured CONFIGURATION Version 8.3.19.
PAGE 1026
www.dell.com | support.dell.com Parameters interface Defaults Not configured Command Modes Command History Enter the following keywords and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.
PAGE 1027
Parameters Defaults Command Modes Command History Usage Information peer address Enter the peer address in a dotted decimal format (A.B.C.D.) connect-source interface (OPTIONAL) Enter the keyword connect-source followed by one of the interfaces and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 1028
www.dell.com | support.dell.com ip msdp redistribute e Filter local PIM SA entries in the SA cache. SAs which are denied by the ACL will time out and not be refreshed. Until they time out, they will continue to reside in the MSDP SA cache. Syntax Parameters ip msdp redistribute [list acl-name] list acl-name Defaults Not configured Command Modes Command History Enter the name of an extended ACL that contains permitted SAs. If you do not use this option, all local entries are blocked.
PAGE 1029
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on E-Series ip msdp sa-limit e Configure the upper limit of SA (Source-Active) entries in SA-cache. Syntax ip msdp sa-limit number To return to the default, use the no ip msdp sa-limit number command. Parameters Defaults Command Modes Command History Usage Information Related Commands number Enter the maximum number of SA entries in SA-cache.
PAGE 1030
www.dell.com | support.dell.com Defaults Not configured Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 6.2.1.1 Introduced ip multicast-msdp e Enable MSDP. Syntax ip multicast-msdp To exit MSDP, use the no ip multicast-msdp command. Defaults Not configured Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 6.2.1.
PAGE 1031
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 6.2.1.1 Introduced Example (show ip msdp peer) FTOS#show ip msdp peer 100.1.1.1 Example (show ip msdp sa-cache) FTOS#show ip msdp sa-cache MSDP Source-Active Cache - 1 entries GroupAddr SourceAddr RPAddr 224.1.1.1 172.21.220.10 172.21.3.254 FTOS# Example (show ip msdp summary) FTOS#show Peer Addr 72.30.1.2 72.30.2.2 72.30.3.2 FTOS# Peer Addr: 100.1.1.1 Local Addr: 100.1.1.
PAGE 1032
www.dell.com | support.dell.com 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 FTOS# 1032 | 225.1.2.9 225.1.2.10 225.1.2.11 225.1.2.11 225.1.2.12 225.1.2.13 225.1.2.14 225.1.2.15 225.1.2.16 225.1.2.17 225.1.2.18 225.1.2.19 Multicast Source Discovery Protocol (MSDP) 10.1.1.3 10.1.1.4 10.1.1.3 10.1.1.3 10.1.1.4 10.1.1.3 10.1.1.4 10.1.1.3 10.1.1.4 10.1.1.3 10.1.1.4 10.1.1.3 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.
PAGE 1033
34 Multiple Spanning Tree Protocol (MSTP) Overview Multiple Spanning Tree Protocol (MSTP), as implemented by FTOS, conforms to IEEE 802.1s. MSTP is supported by FTOS on all Dell Force10 systems as indicated by the characters that appear below each command heading: e E-Series, c C-Series, s S-Series, , or .
PAGE 1034
www.dell.com | support.dell.com debug spanning-tree mstp ces Enable debugging of Multiple Spanning Tree Protocol and view information on the protocol. Syntax debug spanning-tree mstp [all | bpdu interface {in | out} | events] To disable debugging, enter no debug spanning-tree mstp. Parameters all (OPTIONAL) Enter the keyword all to debug all spanning tree operations. bpdu interface {in | out} (OPTIONAL) Enter the keyword bpdu to debug Bridge Protocol Data Units.
PAGE 1035
description ces Syntax Enter a description of the Multiple Spanning Tree description {description} To remove the description, use the no description {description} command. Parameters Defaults Command Modes Command History Related Commands description Enter a description to identify the Multiple Spanning Tree (80 characters maximum). No default behavior or values SPANNING TREE (The prompt is “config-mstp”.) pre-7.7.1.
PAGE 1036
www.dell.com | support.dell.com forward-delay ces Syntax The amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State. forward-delay seconds To return to the default setting, enter no forward-delay. Parameters Defaults Command Modes Command History Related Commands seconds Enter the number of seconds the interface waits in the Blocking State and the Learning State before transiting to the Forwarding State.
PAGE 1037
Command History Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series Version 6.5.1.0 Introduced forward-delay The amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State. max-age Change the wait time before MSTP refreshes protocol configuration information.
PAGE 1038
www.dell.com | support.dell.com Syntax max-hops number To return to the default values, enter no max-hops. Parameters Defaults Command Modes Command History Usage Information range Enter a number for the maximum hop count. Range: 1 to 40 Default: 20 20 hops MULTIPLE SPANNING TREE Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series Version 6.5.1.
PAGE 1039
Command Modes Command History INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series pre-Version 6.2.1.1 Introduced on E-Series By default, all VLANs are mapped to MST instance zero (0) unless you use the vlan range command to map it to a non-zero instance. Usage Information name ces Syntax The name you assign to the Multiple Spanning Tree region.
PAGE 1040
www.dell.com | support.dell.com protocol spanning-tree mstp ces Syntax Enter the MULTIPLE SPANNING TREE mode to enable and configure the Multiple Spanning Tree group. protocol spanning-tree mstp To disable the Multiple Spanning Tree group, enter no protocol spanning-tree mstp command. Defaults Not configured. Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Added support for S-Series Version 7.5.1.
PAGE 1041
revision ces The revision number for the Multiple Spanning Tree configuration Syntax revision range To return to the default values, enter no revision. Parameters range Defaults 0 Command Modes Command History MULTIPLE SPANNING TREE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series Version 6.5.1.
PAGE 1042
www.dell.com | support.dell.com Example Version 7.5.1.0 Added support for C-Series Version 6.5.1.0 Introduced on E-Series FTOS(conf-mstp)#show config ! protocol spanning-tree mstp no disable name CustomerSvc revision 2 MSTI 10 VLAN 101-105 max-hops 5 FTOS(conf-mstp)# show spanning-tree mst configuration ces Syntax Command Modes View the Multiple Spanning Tree configuration. show spanning-tree mst configuration EXEC EXEC Privilege Command History Example Usage Information 1042 | Version 8.
PAGE 1043
show spanning-tree msti ces View the Multiple Spanning Tree instance. Syntax Parameters Command Modes show spanning-tree msti [instance-number [brief]] [guard] instance-number [Optional] Enter the Multiple Spanning Tree Instance number Range: 0 to 63 brief [Optional] Enter the keyword brief to view a synopsis of the MST instance. guard [Optional] Enter the keyword guard to display the type of guard enabled on an MSTP interface and the current port state.
PAGE 1044
www.dell.com | support.dell.com BPDU (Mrecords): sent 19, received 1103 The port is not in the portfast mode Port 89 (GigabitEthernet 2/7) is alternate Discarding Port path cost 0, Port priority 128, Port Identifier 128.89 Designated root has priority 16384, address 0001.e800.0a:5c Designated bridge has priority 16384, address 0001.e800.0a:5c Designated port id is 128.
PAGE 1045
Table 34-1. show spanning-tree msti guard Command Information Field Description Interface Name MSTP interface Instance MSTP instance Sts Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS), blocking (BLK), or shut down (EDS Shut) Guard Type Type of STP guard configured (Root, Loop, or BPDU guard) spanning-tree ces Syntax Enable Multiple Spanning Tree Protocol on the interface.
PAGE 1046
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History msti instance Enter the keyword msti and the MST Instance number. Range: zero (0) to 63 cost cost (OPTIONAL) Enter the keyword cost followed by the port cost value.
PAGE 1047
Command Modes Command History Usage Information loopguard (C-, S-, and E-Series TeraScale only) Enter the keyword loopguard to enable STP loop guard on an MSTP port or port-channel interface. rootguard (C-, S-, and E-Series TeraScale only) Enter the keyword rootguard to enable root guard on an MSTP port or port-channel interface. INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 Introduced the loopguard and rootguard options on the E-Series TeraScale, C-Series, and S-Series.
PAGE 1048
www.dell.com | support.dell.com tc-flush-standard ces Syntax tc-flush-standard To disable, use the no tc-flush-standard command. Defaults Command Modes Command History Usage Information 1048 Enable the MAC address flushing upon receiving every topology change notification. | Disabled CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Added support for S-Series Version 7.5.1.0 Added support for C-Series Version 6.5.1.
PAGE 1049
35 Multicast Overview The multicast commands are supported by FTOS on all Dell Force10 platforms as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , or .
PAGE 1050
www.dell.com | support.dell.com clear ip mroute ces Clear learned multicast routes on the multicast forwarding table. To clear the PIM tree information base, use clear ip pim tib command. Syntax Parameters clear ip mroute {group-address [source-address] [source-address] Enter multicast group address and source address (if desired), in dotted decimal format, to clear information on a specific group. * Enter * to clear all multicast routes.
PAGE 1051
ip mroute ces Assign a static mroute. Syntax ip mroute destination mask {ip-address | null 0| {ip-address | tag | null 0}} [distance] {{bgp| ospf} process-id | isis | rip | static} To delete a specific static mroute, use the command ip mroute destination mask {ip-address | null 0| {{bgp| ospf} process-id | isis | rip | static} {ip-address | tag | null 0}} [distance]. To delete all mroutes matching a certain mroute, use the no ip mroute destination mask command.
PAGE 1052
www.dell.com | support.dell.com Version 8.3.7.0 Introduced on S4810 E-Series legacy command Related Commands show ip mroute View the E-Series routing table. ip multicast-lag-hashing e Distribute multicast traffic among Port Channel members in a round-robin fashion. Syntax ip multicast-lag-hashing To revert to the default, enter no ip multicast-lag-hashing. Defaults Disabled Command Modes Command History CONFIGURATION Version 6.3.1.
PAGE 1053
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on C-Series Version 7.6.1.0 Introduced on E-Series This features allows the user to limit the number of multicast entries on the system. This number is the sum total of all the multicast entries on all line cards in the system. On each line card, the multicast module will only install the maximum possible number of entries, depending on the configured CAM profile.
PAGE 1054
www.dell.com | support.dell.com mac-flood-list e Syntax Parameters Defaults Command Modes Command History Usage Information Provide an exception to the restrict-flood configuration so that multicast frames within a specified MAC address range to be flooded on all ports in a VLAN. mac-flood-list mac-address mask vlan vlan-list [min-speed speed] mac-address Enter a multicast MAC address in hexadecimal format. mac-mask Enter the MAC Address mask.
PAGE 1055
Command History Version 7.5.1.0 Expanded to support originator Version 7.4.1.0 Expanded to support intermediate (transit) router E-Series legacy command Usage Information Mtrace is an IGMP protocol based on the Multicast trace route facility and implemented according to the IETF draft “A trace route facility for IP Multicast” (draft-fenner-traceroute-ipm-01.txt). FTOS supports the Mtrace client and transmit functionality.
PAGE 1056
www.dell.com | support.dell.com restrict-flooding et Prevent Layer 2 multicast traffic from being flooded on ports below a specified link speed. Syntax Parameters restrict-flooding multicast min-speed speed min-speed min-speed Defaults None Command Modes Command History Enter the minimum link speed that a port must have to receive flooded multicast traffic. Range: 1000 INTERFACE VLAN Version 7.7.1.
PAGE 1057
active [rate] (OPTIONAL) Enter the keyword active to view only active multicast routes. Enter a rate to view active routes over the specified rate. Range: 0 to 10000000 count (OPTIONAL) Enter the keyword count to view the number of multicast routes and packets on the E-Series. snooping [vlan vlan-id] (OPTIONAL) E-Series ExaScale, S4810, and S4820T only: Enter the keyword snooping to display information on the multicast routes discovered by PIM-SM snooping.
PAGE 1058
www.dell.com | support.dell.com GigabitEthernet 4/11 GigabitEthernet 4/13 GigabitEthernet 4/20 Example (show ip mroute) FTOS#show ip mroute IP Multicast Routing Table (*, 224.10.10.1), uptime 00:05:12 Incoming interface: GigabitEthernet 3/12 Outgoing interface list: GigabitEthernet 3/13 (1.13.1.100, 224.10.10.1), uptime 00:04:03 Incoming interface: GigabitEthernet 3/4 Outgoing interface list: GigabitEthernet 3/12 GigabitEthernet 3/13 (*, 224.20.20.
PAGE 1059
Usage Information Static mroutes are used by network administrators to control the reach-ability of the multicast sources. If a PIM registered multicast source is reachable via static mroute as well as unicast route, the distance of each route is examined and the route with shorter distance is the one the PIM selects for reach-ability. Note: The default distance of mroutes is zero (0) and is CLI configurable on a per route basis. Example FTOS#show ip rpf RPF information for 10.10.10.
PAGE 1060
www.dell.com | support.dell.com clear ipv6 mroute e Clear learned multicast routes on the multicast forwarding table. To clear the PIM tib, use clear ip pim tib command. Syntax Parameters clear ipv6 mroute {group-address [source-address] | *} [source-address] Enter multicast group address and source address (if desired) to clear information on a specific group. Enter the addresses in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zero.
PAGE 1061
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on the S4810. Use the debug ipv6 mld_host command to debug the MLD protocol for all ports or for specified ports. Displayed information includes when a query is received, when a report is sent, when a mcast joins or leaves a group, and some reasons why a MLD query is rejected. ipv6 multicast-limit e Limit the number of multicast entries on the system.
PAGE 1062
www.dell.com | support.dell.com show ipv6 mroute e Syntax Parameters Command Modes View IPv6 multicast routes. show ipv6 mroute [group-address [source-address]] [active rate] [count group-address [source source-address]] group-address [source-address] (OPTIONAL) Enter the IPv6 multicast group-address to view only routes associated with that group. Optionally, enter the IPv6 source-address to view routes with that group-address and source-address.
PAGE 1063
Group: ff05:300::1 Source: 165:87:31::30 Rate: 100 pps Group: ff05:3300::1 Source: 165:87:31::30 Rate: 100 pps Group: ff3e:300::4000:1 Source: 165:87:31::20 Rate: 100 pps Group: ff3e:3300::4000:1 Source: 165:87:31::20 Rate: 100 pps FTOS# Example (show ipv6 mroute count group) FTOS#show ipv6 mroute count group ff05:3300::1 IP Multicast Statistics 1 routes using 648 bytes of memory 1 groups, 1.
PAGE 1064
www.dell.com | support.dell.com Defaults Command Modes all (OPTIONAL) Enter the keyword all to view all the MLD information. vlan vlan-id (OPTIONAL) Enter the keyword vlan followed by the VLAN ID to view MLD VLAN information. No default values or behavior EXEC EXEC Privilege Command History Example Version 7.4.1.
PAGE 1065
(165:87:32::30, (165:87:37::30, (165:87:31::30, (165:87:32::30, (165:87:37::30, (165:87:31::30, (165:87:32::20, FTOS# ff05:100::1), 00:00:24 ff05:200::1), 00:00:24 ff05:300::1), 00:00:24 ff05:1100::1), 00:00:21 ff05:2200::1), 00:00:21 ff05:3300::1), 00:00:21 ff3e:100::4000:1), 00:00:41 Multicast | 1065
PAGE 1066
| Multicast www.dell.com | support.dell.
PAGE 1067
36 Neighbor Discovery Protocol (NDP) Network Discovery Protocol for IPv6 is supported by FTOS on all Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , or . Overview Neighbor Discovery Protocol for IPv6 is defined in RFC 2461 as part of the Stateless Address Autoconfiguration protocol. It replaces the Address Resolution Protocol used with IPv4.
PAGE 1068
www.dell.com | support.dell.com • • • • • • • • • • ipv6 nd managed-config-flag ipv6 nd max-ra-interval ipv6 nd mtu ipv6 nd other-config-flag ipv6 nd prefix ipv6 nd ra-lifetime ipv6 nd reachable-time ipv6 nd suppress-ra ipv6 neighbor show ipv6 neighbors clear ipv6 neighbors Delete all entries in the IPv6 neighbor discovery cache, or neighbors of a specific interface. Static entries will not be removed using this command.
PAGE 1069
ipv6 nd managed-config-flag e Set the managed address configuration flag in the IPv6 router advertisement. The description of this flag from RFC 2461 (http://tools.ietf.org/html/rfc2461) is: M: 1-bit “Managed address configuration” flag. When set, hosts use the administered (stateful) protocol for address autoconfiguration in addition to any addresses autoconfigured using stateless address autoconfiguration. The use of this flag is described in: Thomson, S. and T.
PAGE 1070
www.dell.com | support.dell.com Parameters mtu number Defaults No default values or behavior Command Modes Command History Set the MTU advertisement value in Routing Prefix Advertisement packets. Range: 1280 to 9234 INTERFACE Version 8.3.1.0 Usage Information Introduced The ip nd mtu command sets the value advertised to routers. It does not set the actual MTU rate. For example, if ip nd mtu is set to 1280, the interface will still pass 1500-byte packets.
PAGE 1071
Syntax Parameters ipv6 nd prefix {ipv6-address prefix-length | default} [no-advertise] | [no-autoconfig | no-rtr-address | off-link] ipv6-address prefix-length Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format. Range: /0 to /128 The :: notation specifies successive hexadecimal fields of zeros Defaults Command Modes default (OPTIONAL) Enter the keyword default to specify the prefix default parameters.
PAGE 1072
www.dell.com | support.dell.com ipv6 nd reachable-time e Configure the amount of time that a remote IPv6 node is considered available after a reachability confirmation event has occurred. The description of reachable time from RFC 2461 (http://tools.ietf.org/html/rfc2461) is: Reachable Time: 32-bit unsigned integer. The time, in milliseconds, that a node assumes a neighbor is reachable after having received a reachability confirmation. Used by the Neighbor Unreachability Detection algorithm.
PAGE 1073
Parameters ipv6-address Enter the IPv6 address of the neighbor in the x:x:x:x::x format. The :: notation specifies successive hexadecimal fields of zero Defaults Command Modes Command History interface interface Enter the keyword interface followed by the interface type and slot/ port or number information: • For a Fast Ethernet interface, enter the keyword fastEthernet followed by the slot/port information.
PAGE 1074
www.dell.com | support.dell.com cpu Enter the keyword cpu followed by either rp1 or rp2 (Route Processor 1 or 2), optionally followed by an IPv6 address to display the IPv6 neighbor entries stored on the designated RP. interface interface • • • • • • Defaults Command Modes For a Fast Ethernet interface, enter the keyword fastEthernet followed by the slot/port information. For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 1075
37 Open Shortest Path First (OSPFv2) Overview The and platform supports Open Shortest Path First (OSPFv2) only. Up to 16 OSPF instances can be run simultaneously on the and . OSPF is an Interior Gateway Protocol (IGP), which means that it distributes routing information between routers in a single Autonomous System (AS). OSPF is also a link-state protocol in which all routers contain forwarding tables derived from information about their links to their neighbors.
PAGE 1076
www.dell.com | support.dell.
PAGE 1077
• • • • • • • • • • show ip ospf neighbor show ip ospf routes show ip ospf statistics show ip ospf timers rate-limit show ip ospf topology show ip ospf virtual-links summary-address timers spf timers throttle lsa all timers throttle lsa arrival area default-cost ces Set the metric for the summary default route generated by the area border router (ABR) into the stub area. Use this command on the border routers at the edge of a stub area.
PAGE 1078
www.dell.com | support.dell.com area nssa ces Specify an area as a Not So Stubby Area (NSSA). Syntax area area-id nssa [default-information-originate] [no-redistribution] [no-summary] To delete an NSSA, enter no area area-id nssa. Parameters area-id Specify the OSPF area in dotted decimal format (A.B.C.D) or enter a number from 0 and 65535. no-redistribution (OPTIONAL) Specify that the redistribute command should not distribute routes into the NSSA.
PAGE 1079
Defaults No range is configured. Command Modes Command History ROUTER OSPF Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced support for Multi-Process OSPF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series Usage Information Related Commands Only the routes within an area are summarized, and that summary is advertised to other areas by the ABR.
PAGE 1080
www.dell.com | support.dell.com Related Commands router ospf Enter the ROUTER OSPF mode to configure an OSPF instance. area virtual-link ces Set a virtual link and its parameters.
PAGE 1081
Defaults dead-interval seconds = 40 seconds; hello-interval seconds = 10 seconds; retransmit-interval seconds = 5 seconds; transmit-delay seconds = 1 second Command Modes Command History ROUTER OSPF Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced support for Multi-Process OSPF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.
PAGE 1082
www.dell.com | support.dell.com clear ip ospf ces Syntax Parameters Command Modes Command History Clear all OSPF routing tables. clear ip ospf process-id [process] process-id Enter the OSPF Process ID to clear a specific process. If no Process ID is entered, all OSPF processes are cleared. process (OPTIONAL) Enter the keyword process to reset the OSPF process. EXEC Privilege Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.
PAGE 1083
Command Modes Command History Related Commands EXEC Privilege Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced support for Multi-Process OSPF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 7.4.1.0 Introduced on E-Series show ip ospf statistics Display the OSPF statistics debug ip ospf ces Display debug information on OSPF. Entering debug ip ospf enables OSPF debugging for the first OSPF process,.
PAGE 1084
www.dell.com | support.dell.com FTOS# 08:14:24 : OSPF(100:00): Xmt. v:2 t:1(HELLO) l:44 rid:192.1.1.1 aid:0.0.0.1 chk:0xa098 aut:0 auk: keyid:0 to:Gi 4/3 dst:224.0.0.5 netmask:255.255.255.0 pri:1 N-, MC-, E+, T-, hi:10 di:40 dr:90.1.1.1 bdr:0.0.0.0 1084 Table 37-1. | Output Descriptions for debug ip ospf process-id packet Field Description 8:14 Displays the time stamp. OSPF Displays the OSPF process ID: instance ID. v: Displays the OSPF version. FTOS supports version 2 only.
PAGE 1085
Table 37-1.
PAGE 1086
www.dell.com | support.dell.com Related Commands Version 7.8.1.0 Introduced support for Multi-Process OSPF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series redistribute Redistribute routes from other routing protocols into OSPF. default-metric ces Change the metrics of redistributed routes to a value useful to OSPF. Use this command with the redistribute command.
PAGE 1087
Command Modes Command History Related Commands ROUTER OSPF Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced support for Multi-Process OSPF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series show ip ospf asbr Display VLAN configuration. distance ces Define an administrative distance for particular routes to a specific IP address.
PAGE 1088
www.dell.com | support.dell.com distance ospf ces Configure an OSPF distance metric for different types of routes. Syntax distance ospf [external dist3] [inter-area dist2] [intra-area dist1] To delete these settings, enter no distance ospf. Parameters external dist3 (OPTIONAL) Enter the keyword external followed by a number to specify a distance for external type 5 and 7 routes. Range: 1 to 255 Default: 110.
PAGE 1089
Parameters prefix-list-name Enter the name of a configured prefix list. interface (OPTIONAL) Enter one of the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 1090
www.dell.com | support.dell.com rip (OPTIONAL) Enter the keyword rip to specify that RIP routes are distributed.* static (OPTIONAL) Enter the keyword static to specify that only manually configured routes are distributed. * BGP and ISIS routes are not available on the C-Series. BGP, ISIS, and RIP routes are not available on the S-Series. Defaults Command Modes Command History Usage Information Not configured. ROUTER OSPF Version 8.3.19.0 Introduced on S4820T Version 8.3.7.
PAGE 1091
Syntax fast-convergence {number} To cancel fast-convergence, enter no fast convergence. Parameters Defaults Command Modes Command History Usage Information number Enter the convergence level desired. The higher this parameter is set, the faster OSPF converge takes place. Range: 1-4 None. ROUTER OSPF Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on all platforms. The higher this parameter is set, the faster OSPF converge takes place.
PAGE 1092
www.dell.com | support.dell.com Usage Information In OSPF, flooding is the most resource-consuming task. The flooding algorithm, described in RFC-2328, requires that OSPF flood LSAs (Link State Advertisements) on all interfaces, as governed by LSA’s flooding scope ( Section 13 of the RFC). When multiple direct links connect two routers, the RFC-2328 flooding algorithm generates significant redundant information across all links.
PAGE 1093
graceful-restart helper-reject ces Syntax Specify the OSPF router to not act as a helper during graceful restart. graceful-restart helper-reject ip-address To return to default value, enter no graceful-restart helper-reject. Parameters Defaults Command Modes Command History ip-address Enter the OSPF router-id, in IP address format, of the restart router that will not act as a helper during graceful restart. Not Configured ROUTER OSPF Version 8.3.19.0 Introduced on S4820T Version 8.3.7.
PAGE 1094
www.dell.com | support.dell.com Command Modes Command History ROUTER OSPF Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series graceful-restart role ces Syntax Specify the role for your OSPF router during graceful restart. graceful-restart role [helper-only | restart-only] To disable graceful restart role, enter no graceful-restart role.
PAGE 1095
To return to the default, enter no ip ospf auth-change-wait-time. Parameters seconds Defaults zero (0) seconds Command Modes Command History Enter seconds Range: 0 to 300 INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series ip ospf authentication-key ces Enable authentication and set an authentication key on OSPF traffic on an interface.
PAGE 1096
www.dell.com | support.dell.com To return to default value, enter no ip ospf cost. Parameters Defaults Command Modes Command History Usage Information cost Enter a number as the cost. Range: 1 to 65535. The default cost is based on the reference bandwidth. INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.
PAGE 1097
Usage Information Related Commands By default, the dead interval is four times the default hello-interval. ip ospf hello-interval Set the time interval between hello packets. ip ospf hello-interval ces Specify the time interval between the hello packets sent on the interface. Syntax ip ospf hello-interval seconds To return to the default value, enter no ip ospf hello-interval. Parameters seconds Defaults 10 seconds Command Modes Command History INTERFACE Version 8.3.19.
PAGE 1098
www.dell.com | support.dell.com Defaults No MD5 authentication is configured. Command Modes Command History INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series Usage Information To change to a different key on the interface, enable the new key while the old key is still enabled.
PAGE 1099
Syntax ip ospf network {broadcast | point-to-point} To return to the default, enter no ip ospf network. Parameters broadcast Enter the keyword broadcast to designate the interface as part of a broadcast network. point-to-point Enter the keyword point-to-point to designate the interface as part of a point-to-point network. Defaults Not configured. Command Modes Command History ROUTER OSPF Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.
PAGE 1100
www.dell.com | support.dell.com Use this command for interfaces connected to multi-access networks, not point-to-point networks. ip ospf retransmit-interval ces Syntax Set the retransmission time between lost link state advertisements (LSAs) for adjacencies belonging to the interface. ip ospf retransmit-interval seconds To return to the default values, enter no ip ospf retransmit-interval.
PAGE 1101
Command Modes Command History INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series log-adjacency-changes ces Set FTOS to send a Syslog message about changes in the OSPF adjacency state. Syntax log-adjacency-changes To disable the Syslog messages, enter no log-adjacency-changes. Defaults Disabled.
PAGE 1102
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced support for Multi-Process OSPF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series mib-binding ces Enable this OSPF process ID to manage the SNMP traps and process SNMP queries. mib-binding Syntax To mib-binding on this OSPF process, enter no mib-binding. Defaults None.
PAGE 1103
Command Modes Command History Usage Information ROUTER OSPF Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced support for Multi-Process OSPF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series To enable OSPF on an interface, the network area command must include, in its range of addresses, the primary IP address of an interface.
PAGE 1104
www.dell.com | support.dell.com Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced support for Multi-Process OSPF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 7.4.1.0 Modified to include the default keyword. pre-Version 6.1.1.
PAGE 1105
• • All previously marked passive interfaces are removed. May update ABR status. redistribute ces Redistribute information from another routing protocol throughout the OSPF process. Syntax redistribute {connected | rip | static} [metric metric-value | metric-type type-value] [route-map map-name] [tag tag-value] To disable redistribution, use the no redistribute {connected | isis | rip | static} command.
PAGE 1106
www.dell.com | support.dell.com Related Commands Generate a default route into the OSPF routing domain. redistribute bgp ces Syntax Redistribute BGP routing information throughout the OSPF instance. redistribute bgp as number [metric metric-value] | [metric-type type-value] | [tag tag-value] To disable redistribution, use the no redistribute bgp as number [metric metric-value] | [metric-type type-value] [route-map map-name] [tag tag-value] command.
PAGE 1107
redistribute isis ces Redistribute IS-IS routing information throughout the OSPF instance. Syntax redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value | metric-type type-value] [route-map map-name] [tag tag-value] To disable redistribution, use the no redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value | metric-type type-value] [route-map map-name] [tag tag-value] command.
PAGE 1108
www.dell.com | support.dell.com router-id ces Syntax Use this command to configure a fixed router ID. router-id ip-address To remove the fixed router ID, use the no router-id ip-address command. Parameters Defaults Command Modes Command History Example ip-address Enter the router ID in the IP address format This command has no default behavior or values. ROUTER OSPF Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.
PAGE 1109
Parameters Defaults Command Modes Command History Example Usage Information process-id Enter a number for the OSPF instance. Range: 1 to 65535. vrf name (Optional) E-Series Only: Enter the VRF process identifier to tie the OSPF instance to the VRF. All network commands under this OSPF instance are subsequently tied to the VRF instance. Not configured. CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.9.1.0 Introduced VRF Version 7.8.1.
PAGE 1110
www.dell.com | support.dell.com show ip ospf ces Syntax Parameters Command Modes Display information on the OSPF process configured on the switch. show ip ospf process-id [vrf vrf name] process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. vrf name E-Series Only: Show only the OSPF information tied to the VRF process. EXEC EXEC Privilege Command History Usage Information Example Version 8.3.19.
PAGE 1111
Table 37-2. Command Output Descriptions: show ip ospf process-id Line Beginning with Description “Convergence Level” Related Commands “Min LSA....” Displays the intervals set for LSA transmission and acceptance. “Number of...” Displays the number and type of areas configured for this process ID. show ip ospf database Displays information about the OSPF routes configured. show ip ospf interface Displays the OSPF interfaces configured.
PAGE 1112
www.dell.com | support.dell.com 3.3.3.3 1.1.1.1 FTOS# -/-/-/ E/-/-/ 2 0 10.0.0.2 0.0.0.0 Gi 0/1 - 1 0 You can determine if an ASBR is in a directly connected area (or not) by the flags. For ASBRs in a directly connected area, E flags are set. In the figure above, router 1.1.1.1 is in a directly connected area since the Flag is E/-/-/. For remote ASBRs, the E flag is clear (-/-/-/) show ip ospf database ces Syntax Parameters Command Modes Display all LSA information.
PAGE 1113
10.2.2.0 10.2.3.0 10.2.4.0 11.1.1.0 11.1.2.0 12.1.2.0 13.1.1.0 13.1.2.0 172.16.1.0 FTOS> Table 37-3. Related Commands 11.1.2.1 11.1.2.1 13.1.1.1 11.1.2.1 11.1.2.1 192.68.135.2 13.1.1.1 13.1.1.1 13.1.1.
PAGE 1114
www.dell.com | support.dell.com Version 7.8.1.0 Introduced support of Multi-Process OSPF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series Example FTOS#show ip ospf 100 database asbr-summary OSPF Router with ID (1.1.1.10) (Process ID 100) Summary Asbr (Area 0.0.0.0) LS age: 1437 Options: (No TOS-capability, No DC, E) LS type: Summary Asbr Link State ID: 103.1.50.1 Advertising Router: 1.1.1.
PAGE 1115
Related Commands show ip ospf database Displays OSPF database information. show ip ospf database external ces Syntax Parameters Display information on the AS external (type 5) LSAs. show ip ospf process-id database external [link-state-id] [adv-router ip-address] process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 1116
www.dell.com | support.dell.com Options: (No TOS-capability, DC) LS type: Type-5 AS External Link State ID: 24.216.12.0 Advertising Router: 20.20.20.8 LS Seq Number: 0x80000005 Checksum: 0xa00e Length: 36 Network Mask: /24 Metrics Type: 2 TOS: 0 Metrics: 1 Forward Address: 0.0.0.0 External Route Tag: 701 FTOS# Table 37-5. external Related Commands 1116 | Command Example Descriptions: show ip ospf process-id database Item Description LS Age Displays the LSA age.
PAGE 1117
show ip ospf database network ces Syntax Parameters Display the network (type 2) LSA information. show ip ospf process-id database network [link-state-id] [adv-router ip-address] process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 1118
www.dell.com | support.dell.com Checksum: 0x4309 Length: 36 Network Mask: /24 Attached Router: 192.10.10.2 Attached Router: 20.20.20.1 Attached Router: 20.20.20.5 FTOS# Table 37-6. network Related Commands Command Example Descriptions: show ip ospf process-id database Item Description LS Age Displays the LSA age. Options Displays the optional capabilities available on router.
PAGE 1119
EXEC Privilege Command History Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced support of Multi-Process OSPF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series show ip ospf database Displays OSPF database information. show ip ospf database opaque-area ces Syntax Parameters Display the opaque-area (type 10) LSA information.
PAGE 1120
www.dell.com | support.dell.com Link State ID: 1.0.0.1 Advertising Router: 10.16.1.160 LS Seq Number: 0x80000416 Checksum: 0x376 Length: 28 Opaque Type: 1 Opaque ID: 1 Unable to display opaque data LS age: 833 Options: (No TOS-capability, No DC, E) LS type: Type-10 Opaque Link Area Link State ID: 1.0.0.2 Advertising Router: 10.16.1.160 LS Seq Number: 0x80000002 Checksum: 0x19c2 --More-- Table 37-7.
PAGE 1121
Parameters process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following: • the network’s IP address for Type 3 LSAs or Type 5 LSAs • the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs • the default destination (0.0.0.
PAGE 1122
www.dell.com | support.dell.com Related Commands Version 7.8.1.0 Introduced support of Multi-Process OSPF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series show ip ospf database Displays OSPF database information. show ip ospf database router ces Syntax Parameters Display the router (type 1) LSA information.
PAGE 1123
Area Border Router Number of Links: 10 Link connected to: a Transit Network (Link ID) Designated Router address: 192.68.129.1 (Link Data) Router Interface address: 192.68.129.1 Number of TOS metric: 0 TOS 0 Metric: 1 Link connected to: a Transit Network (Link ID) Designated Router address: 192.68.130.1 (Link Data) Router Interface address: 192.68.130.1 Number of TOS metric: 0 TOS 0 Metric: 1 Link connected to: a Transit Network (Link ID) Designated Router address: 192.68.142.
PAGE 1124
www.dell.com | support.dell.com Table 37-8. router Related Commands Command Example Descriptions: show ip ospf process-id database Item Description Number of Links Displays the number of active links to the type of router (Area Border Router or AS Boundary Router) listed in the previous line. Link connected to: Identifies the type of network to which the router is connected. (Link ID) Identifies the link type and address. (Link Data) Identifies the router interface address.
PAGE 1125
Summary Network (Area 0.0.0.0) LS age: 1551 Options: (No TOS-capability, DC, E) LS type: Summary Network Link State ID: 192.68.16.0 Advertising Router: 192.168.17.1 LS Seq Number: 0x80000054 Checksum: 0xb5a2 Length: 28 Network Mask: /24 TOS: 0 Metric: 1 LS age: 9 Options: (No TOS-capability, No DC, E) LS type: Summary Network Link State ID: 192.68.32.0 Advertising Router: 1.1.1.
PAGE 1126
www.dell.com | support.dell.com Table 37-9. summary Related Commands Command Example Descriptions: show ip ospf process-id database Items Description Network Mask Displays the network mask implemented on the area. TOS Displays the TOS options. Option 0 is the only option. Metric Displays the LSA metrics. show ip ospf database Displays OSPF database information. show ip ospf interface ces Syntax Parameters Command Modes Display the OSPF interfaces configured.
PAGE 1127
Example Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series FTOS>show ip ospf int GigabitEthernet 13/17 is up, line protocol is up Internet Address 192.168.1.2/30, Area 0.0.0.1 Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 192.168.253.2, Interface address 192.168.1.2 Backup Designated Router (ID) 192.168.253.1, Interface address 192.168.1.
PAGE 1128
www.dell.com | support.dell.com Table 37-10. Command Example Descriptions: show ip ospf process-id interface (continued) Line beginning with Description Hello due... This line displays the amount time till the next Hello packet is sent out this interface. Neighbor Count... This line displays the number of neighbors and adjacent neighbors. Listed below this line are the details about each adjacent neighbor. show ip ospf neighbor ces Display the OSPF neighbors connected to the local router.
PAGE 1129
show ip ospf routes ces Syntax Parameters Defaults Command Modes Display routes as calculated by OSPF and stored in OSPF RIB. show ip ospf process-id routes process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. No default values or behavior EXEC EXEC Privilege Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.
PAGE 1130
www.dell.com | support.dell.com Parameters Defaults Command Modes process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. global Enter the keyword global to display the packet counts received on all running OSPF interfaces and packet counts received and transmitted by all OSPF neighbors.
PAGE 1131
Intf-Down Wrong-Len Auth-Err Version No-Buffer Q-OverFlow 0 0 0 0 0 0 Non-Dr Invld-Nbr MD5-Err AreaMis Seq-No Unkown-Pkt 0 0 0 0 0 0 Self-Org Nbr-State Chksum Conf-Issues Socket 0 0 0 0 0 Error packets (Only for TX) Socket Errors FTOS# 0 Table 37-12.
PAGE 1132
www.dell.com | support.dell.com Table 37-13.
PAGE 1133
Related Commands clear ip ospf statistics Clear the packet statistics in all interfaces and neighbors show ip ospf timers rate-limit Show the LSA currently in the queue waiting for timers to expire. Syntax Parameters Defaults Command Modes show ip ospf process-id timers rate-limit process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
PAGE 1134
www.dell.com | support.dell.com Command History Usage Information Example Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced support of Multi-Process OSPF. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series and E-Series This command can be used to isolate problems with inter-area and external routes. In OSPF inter-area and external routes are calculated by adding LSA cost to the cost of reaching the router.
PAGE 1135
Table 37-14. virtual-links Command Example Descriptions: show ip ospf process-id Items Description “Virtual Link...” This line specifies the OSPF neighbor to which the virtual link was created and the link’s status. “Run as...” This line states the nature of the virtual link. “Transit area...” This line identifies the area through which the virtual link was created, the interface used, and the cost assigned to that link. “Transmit Delay...
PAGE 1136
www.dell.com | support.dell.com Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series Usage Information The command area range summarizes routes for the different areas. With "not-advertise" parameter configured, this command can be used to filter out some external routes. For example, you want to redistribute static routes to OSPF, but you don't want OSPF to advertise routes with prefix 1.1.0.0. Then you can configure summary-address 1.1.0.0 255.255.0.
PAGE 1137
timers throttle lsa all Configure LSA transmit intervals. Syntax timers throttle lsa all {start-interval | hold-interval | max-interval} To return to the default, enter no timers throttle lsa. Parameters Defaults Command Modes Command History Usage Information start-interval Set the minimum interval between initial sending and resending the same LSA. Range: 0-600,000 milliseconds hold-interval Set the next interval to send the same LSA.
PAGE 1138
www.dell.com | support.dell.com 1138 Parameters Defaults Command Modes Command History | arrival-time Set the interval between receiving the same LSA repeatedly, to allow sufficient time for the system to accept the LSA. Range: 0-600,000 milliseconds 1000 msec ROUTER OSPF Version 8.3.19.0 Introduced on S4820T Version 8.3.8.
PAGE 1139
38 PIM-Sparse Mode (PIM-SM) Overview The PIM commands are supported by FTOS on all Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , or .
PAGE 1140
www.dell.com | support.dell.com • • • • • • • • • • • • ip pim spt-threshold no ip pim snooping dr-flood show ip pim bsr-router show ip pim interface show ip pim neighbor show ip pim rp show ip pim snooping interface show ip pim snooping neighbor show ip pim snooping tib show ip pim summary show ip pim tib show running-config pim clear ip pim rp-mapping ces Used by the bootstrap router (BSR) to remove all or particular Rendezvous Point (RP) Advertisement.
PAGE 1141
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Introduced on S-Series clear ip pim snooping tib ces Clear tree information discovered by PIM-SM snooping from the PIM database. Syntax Parameters clear ip pim snooping tib [vlan vlan-id] [group-address] vlan vlan-id (OPTIONAL) Enter a VLAN ID to clear TIB information learned through PIM-SM snooping about a specified VLAN.
PAGE 1142
www.dell.com | support.dell.com Defaults Command Modes Command History group (OPTIONAL) Enter the keyword group to view PIM messages for a specific group. packet [in | out] (OPTIONAL) Enter the keyword packet to view PIM packets. Enter one of the optional parameters • in: to view incoming packets • out: to view outgoing packets. register (OPTIONAL) Enter the keyword register to view PIM register address in dotted decimal format (A.B.C.D).
PAGE 1143
Usage Information This command is applied to the subsequent PIM-BSR. Existing BSR advertisements are cleaned up by time out. Candidate RP advertisements can be cleaned using the clear ip pim rp-mapping command. ip pim bsr-candidate ces Configure the PIM router to join the Bootstrap election process. Syntax ip pim bsr-candidate interface [hash-mask-length] [priority] To return to the default value, enter no ip pim bsr-candidate.
PAGE 1144
www.dell.com | support.dell.com ip pim dr-priority ces Change the Designated Router (DR) priority for the interface. Syntax ip pim dr-priority priority-value To remove the DR priority value assigned, use the no ip pim dr-priority command. Parameters priority-value Defaults 1 Command Modes Command History Enter a number. Preference is given to larger/higher number. Range: 0 to 4294967294 Default: 1 INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.
PAGE 1145
Defaults as above Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on the S4810. Version 8.2.1.0 Introduced on E-Series ExaScale. Added the ipv6 option for E-Series. Version 7.6.1.0 Introduced on E-Series Usage Information When an NSF-capable router comes up, it announces the graceful restart capability and restart duration as a Hello option. The receiving router notes the Hello option.
PAGE 1146
www.dell.com | support.dell.com FTOS(config-if-gi-1/1)# ip pim join-filter iptv-channels in FTOS(config-if-gi-1/1)# ip pim join-filter iptv-channels out Related Commands ip access-list extended Configure an access list based on IP addresses or protocols.
PAGE 1147
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Introduced on C-Series and S-Series Version 7.6.1.0 Introduced on the E-Series Do not enter this command before creating the access-list. ip pim query-interval ces Syntax Change the frequency of PIM Router-Query messages.
PAGE 1148
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information Not configured CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on C-Series and S-Series Version 7.6.1.0 Introduced The access name is an extended IP access list that denies PIM register packets to RP at the source DR based on the multicast and group addresses. Do not enter this command before creating the access-list.
PAGE 1149
Usage Information This address is used by first-hop routers to send Register packets on behalf of source multicast hosts. The RP addresses are stored in the order in which they are entered. RP addresses learned via BSR take priority over static RP addresses. Without the override option, RPs advertised by the BSR updates take precedence over the statically configured RPs.
PAGE 1150
www.dell.com | support.dell.com ip pim snooping Enable PIM-SM snooping globally on a switch or on a VLAN interface. ex Syntax ip pim snooping [enable] To disable PIM-SM snooping enter the no form of the command. Defaults Command Modes Disabled. CONFIGURATION: To configure PIM-SM snooping globally, enter the ip pim snooping enable command in global configuration mode.
PAGE 1151
ip pim sparse-mode ces Syntax Enable PIM sparse mode and IGMP on the interface. ip pim sparse-mode To disable PIM sparse mode and IGMP, enter no ip pim sparse-mode. Defaults Command Modes Command History Usage Information Disabled. INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Introduced on C-Series on port-channels and S-Series C-Series supports a maximum of 31 PIM interfaces.
PAGE 1152
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Introduced Version 7.7.1.1 Introduced Usage Information This command configures an expiration timer for all S.G entries, unless they are assigned to an Extended ACL. ip pim spt-threshold Configure PIM router to switch to shortest path tree when the traffic reaches the specified threshold value.
PAGE 1153
Defaults Command Modes Command History Usage Information Enabled. CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on the S4810. Version 8.4.1.1 Introduced on E-Series ExaScale By default, when you enable PIM-SM snooping, a switch floods all multicast traffic to the PIM designated router (DR), including unnecessary multicast packets. To minimize the traffic sent over the network to the designated router, you can disable designated-router flooding.
PAGE 1154
www.dell.com | support.dell.com This system is the Bootstrap Router (v2) BSR address: 7.7.7.7 (?) Uptime: 16:59:06, BSR Priority: 0, Hash mask length: 30 Next bootstrap message in 00:00:08 This system is a candidate BSR Candidate BSR address: 7.7.7.7, priority: 0, hash mask length: 30 show ip pim interface ces View information on the interfaces with IP PIM enabled. Syntax show ip pim interface Command Modes EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.12.
PAGE 1155
Table 38-1. show ip pim interface Command Example Fields Field Description DR Prio Displays the Designated Router priority value configured on the interface (ip pim dr-priority command). DR Displays the IP address of the Designated Router for that interface. show ip pim neighbor ces View PIM neighbors. Syntax show ip pim neighbor Command Modes EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on the S4810. Version 8.1.1.
PAGE 1156
www.dell.com | support.dell.com show ip pim rp ces Syntax Parameters Command Modes View all multicast groups-to-RP mappings. show ip pim rp [mapping | group-address] mapping (OPTIONAL) Enter the keyword mapping to display the multicast groups-to-RP mapping and information on how RP is learnt. group-address (OPTIONAL) Enter the multicast group address mask in dotted decimal format to view RP for a specific group.
PAGE 1157
Syntax Parameters show ip pim snooping interface [vlan vlan-id] vlan vlan-id Command Modes (OPTIONAL) Enter a VLAN ID to display information about a specified VLAN configured for PIM-SM snooping. Valid VLAN IDs: 1 to 4094. EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on the S4810. Version 8.4.1.1 Introduced on E-Series ExaScale Example FTOS#show ip pim snooping interface Interface Vlan 2 Table 38-3.
PAGE 1158
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on the S4810. Version 8.4.1.1 Introduced on E-Series ExaScale Example FTOS#show ip pim snooping neighbor Neighbor Interface Uptime/Expires Ver DR Prio 165.87.32.2 Vl 2 [Gi 4/13 ] 00:04:03/00:01:42 v2 1 165.87.32.10 Vl 2 [Gi 4/11 ] 00:00:46/00:01:29 v2 0 165.87.32.12 Vl 2 [Gi 4/20 ] 00:00:51/00:01:24 v2 0 Address Table 38-4.
PAGE 1159
EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on the S4810. Version 8.4.1.1 Introduced on E-Series ExaScale Example FTOS#show ip pim snooping tib PIM Multicast Snooping Table Flags: J/P - (*,G) Join/Prune, j/p - (S,G) Join/Prune SGR-P - (S,G,R) Prune Timers: Uptime/Expires * : Inherited port (*, 225.1.2.1), uptime 00:00:01, expires 00:02:59, RP 165.87.70.1, flags: J Incoming interface: Vlan 2, RPF neighbor 0.0.0.
PAGE 1160
www.dell.com | support.dell.com Table 38-5.
PAGE 1161
Interface 1 0 3 summary: active PIM interface passive PIM interfaces active PIM neighbors TIB summary: 1/1 (*,G) entries in PIM-TIB/MFC 1/1 (S,G) entries in PIM-TIB/MFC 0/0 (S,G,Rpt) entries in PIM-TIB/MFC 0 0 0 0 PIM nexthops RPs sources Register states Message summary: 2582/2583 Joins sent/received 5/0 Prunes sent/received 0/0 Candidate-RP advertisements sent/received 0/0 BSR messages sent/received 0/0 State-Refresh messages sent/received 0/0 MSDP updates sent/received 0/0 Null Register messages sent/
PAGE 1162
www.dell.com | support.dell.com Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.8.1.0 Introduced on S-Series Example FTOS#show ip pim tib PIM Multicast Routing Table Flags: D - Dense, S - Sparse, C - Connected, L - Local, P - Pruned, R - RP-bit set, F - Register flag, T - SPT-bit set, J - Join SPT, M - MSDP created entry, A - Candidate for MSDP Advertisement, K - Ack-Pending State Timers: Uptime/Expires Interface state: Interface, next-Hop, State/Mode (*, 226.1.1.
PAGE 1163
Table 38-6. show ip pim tib Command Example Fields (continued) Field Description Incoming interface Displays the reverse path forwarding (RPF) interface towards the RP/source. RPF neighbor Displays the next hop from this interface towards the RP/source. Outgoing interface list: Lists the interfaces that meet one of the following criteria: • a directly connect member of the Group. • statically configured member of the Group. • received a (*,G) Join message.
PAGE 1164
www.dell.com | support.dell.com • • • • • • • • ipv6 pim rp-candidate ip pim sparse-mode ipv6 pim spt-threshold show ipv6 pim bsr-router show ipv6 pim interface show ipv6 pim neighbor show ipv6 pim rp show ipv6 pim tib clear ipv6 pim tib Clear the IPv6 PIM multicast-routing database (tree information base—tib).
PAGE 1165
Defaults Command Modes Command History group group (OPTIONAL) Enter the keyword group followed by the group address to invoke debugging on that specific group. packet (OPTIONAL) Enter the keyword packet to invoke debugging of IPv6 PIM packets. register [group] (OPTIONAL) Enter the keyword register and optionally the group address to invoke debugging of IPv6 PIM register messages for a particular group. state (OPTIONAL) Enter the keyword state to view IPv6 PIM state changes.
PAGE 1166
www.dell.com | support.dell.com Syntax ipv6 pim bsr-candidate interface [hash-mask-length] [priority] To disable the bootstrap candidate, use the no ipv6 pim bsr-candidate command. Parameters Defaults Command Modes Command History interface Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 1167
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on the S4810. Version 7.4.1.0 Introduced Usage Information The router with the largest value assigned to an interface becomes the Designated Router. If two interfaces contain the same DR priority value, the interface with the largest interface IP address becomes the Designated Router. ipv6 pim join-filter Permit or deny PIM Join/Prune messages on an interface using an access list.
PAGE 1168
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History Enter a number as the number of seconds between router query messages. Default: 30 seconds Range: 0 to 65535 seconds 30 seconds INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on the S4810. Version 7.4.1.0 Introduced ipv6 pim neighbor-filter Prevent the system from forming a PIM adjacency with a neighboring system.
PAGE 1169
Command Modes Command History Example CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on the S4810. Version 8.3.1.0 Introduced FTOS(conf)#ipv6 pim register-filter REG-FIL_ACL FTOS(conf)#ipv6 access-list REG-FIL_ACL FTOS(conf-ipv6-acl)#deny ipv6 165:87:34::10/128 ff0e::225:1:2:0/112 FTOS(conf-ipv6-acl)#permit ipv6 any any FTOS(conf-ipv6-acl)#exit ipv6 pim rp-address Configure a static PIM Rendezvous Point (RP) address for a group.
PAGE 1170
www.dell.com | support.dell.com ipv6 pim rp-candidate Specify an interface as an RP candidate. e Syntax Parameters Defaults Command Modes Command History ipv6 pim rp-candidate interface [priority-value] interface Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.
PAGE 1171
Version 8.3.12.0 Introduced on the S4810. Version 7.4.1.0 Introduced Usage Information The interface must be enabled (no shutdown command) and not have the switchport command configured. Multicast must also be enabled globally. PIM is supported on the port-channel interface. ipv6 pim spt-threshold Specifies when a PIM leaf router should join the shortest path tree. e Syntax ipv6 pim spt-threshold {kbps | infinity} To return to the default value, enter no ipv6 pim spt-threshold.
PAGE 1172
www.dell.com | support.dell.com Command History Example Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on the S4810. Version 7.4.1.
PAGE 1173
Parameters Command Modes detail (OPTIONAL) Enter the keyword detail to displayed PIM neighbor detailed information. EXEC EXEC Privilege Command History Example Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on the S4810. Version 7.4.1.
PAGE 1174
www.dell.com | support.dell.com Example (show ipv6 pim rp mapping) FTOS#show ipv6 pim rp mapping PIM Group-to-RP Mappings Group(s): ff00::/8 RP: 14::1, v2 Info source: 14::1, via bootstrap, priority 192 Uptime: 00:03:37, expires: 00:01:53 Group(s): ff00::/8, Static RP: 14::2, v2 FTOS# show ipv6 pim tib View the IPv6 PIM multicast-routing database (tree information base—tib).
PAGE 1175
(25::1, ff0e::226:1:2:1), uptime 00:09:54, expires 00:00:00,flags: CJ RPF neighbor: GigabitEthernet 10/3, fe80::201:e8ff:fe00:6265 Outgoing interface list: GigabitEthernet 10/11 FTOS# PIM-Sparse Mode (PIM-SM) | 1175
PAGE 1176
| PIM-Sparse Mode (PIM-SM) www.dell.com | support.dell.
PAGE 1177
39 Port Monitoring Overview The Port Monitoring feature enables you to monitor network traffic by forwarding a copy of each incoming or outgoing packet from one port to another port. The commands in this chapter are generally supported on the C-Series, E-Series, and S-Series, with one exception, as noted in the Command History fields and by these symbols under the command headings: e E-Series, c C-Series, s S-Series, , or .
PAGE 1178
www.dell.com | support.dell.com • • • • • • • In general, a monitoring port should have no ip address and no shutdown as the only configuration; FTOS permits a limited set of commands for monitoring ports; display them using the command ?. A monitoring port also may not be a member of a VLAN. A monitoring port can monitor any physical port in the chassis. Only one MG and one MD may be in a single port-pipe. A monitoring port can monitor more than one port.
PAGE 1179
Defaults Disabled, that is flow-based monitoring is not applied Command Modes Command History MONITOR SESSION (conf-mon-sess-session-ID) Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.4.1.0 Introduced on E-Series Usage Information Related Commands To monitoring traffic with particular flows ingressing/egressing the interface, appropriate ACLs can be applied in both ingress and egress direction. monitor session Create a monitoring session.
PAGE 1180
www.dell.com | support.dell.com Related Commands show monitor session Display the monitor session show running-config monitor session Display the running configuration of a monitor session show config ces Syntax Defaults Command Modes Command History Example Display the current monitor session configuration. show config No default values or behavior MONITOR SESSION (conf-mon-sess-session-ID) Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.7.1.0 Introduced on S-Series Version 7.5.1.
PAGE 1181
Example FTOS#show monitor session 11 SessionID --------11 Related Commands Source -----Gi 10/0 monitor session Destination ------------Gi 10/47 Direction --------rx Mode ------interface Create a session for monitoring. show running-config monitor session ces Syntax Display the running configuration of all monitor sessions or a specific session.
PAGE 1182
www.dell.com | support.dell.com source (port monitoring) ces Syntax source interface destination interface direction {rx | tx | both} To disable a monitor source, use the no source interface destination interface direction {rx | tx | both} command. Parameters Defaults Command Modes Command History Example Usage Information 1182 Configure a port monitor source.
PAGE 1183
40 Private VLAN (PVLAN) Overview The Private VLAN (PVLAN) feature of FTOS is supported on Dell Force10 platforms as indicated by the characters that appear under each of the command , or . headings: c C-Series, s S-Series, Commands • • • • • • • ip local-proxy-arp private-vlan mode private-vlan mapping secondary-vlan show interfaces private-vlan show vlan private-vlan show vlan private-vlan mapping switchport mode private-vlan Refer also to the following commands.
PAGE 1184
www.dell.com | support.dell.com • • A primary VLAN can have any number of community VLANs and isolated VLANs. Private VLANs block all traffic to isolated ports except traffic from promiscuous ports. Traffic received from an isolated port is forwarded only to promiscuous ports or trunk ports. Community VLAN: A community VLAN is a secondary VLAN of the primary VLAN: • • Ports in a community VLAN can talk to each other.
PAGE 1185
To disable Layer 3 communication between secondary VLANs in a private VLAN, use the no ip local-proxy-arp command in the INTERFACE VLAN mode for the primary VLAN. To disable Layer 3 communication in a particular secondary VLAN, use the no ip local-proxy-arp command in the INTERFACE VLAN mode for the selected secondary VLAN.
PAGE 1186
www.dell.com | support.dell.com Command Modes Command History INTERFACE VLAN Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on C-Series and S-Series Usage Information The VLAN: • • • Can be in only one mode, either community, isolated, or primary. Mode can be set to community or isolated even before associating it to a primary VLAN.
PAGE 1187
Defaults Command Modes Command History Usage Information none INTERFACE VLAN Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on C-Series and S-Series The list of secondary VLANs can be: • • • Related Commands Specified in comma-delimited or hyphenated-range format. Specified with this command even before they have been created. Amended by specifying the new secondary VLAN to be added to the list.
PAGE 1188
www.dell.com | support.dell.
PAGE 1189
Defaults Command Modes primary (OPTIONAL) Enter the keyword primary to display VLANs configured as primary VLANs, along with their interfaces. primary_vlan (OPTIONAL) Enter a private VLAN ID or secondary VLAN ID to display interface details about the designated PVLAN. interface interface (OPTIONAL) Enter the keyword interface and an interface ID to display the PVLAN configuration of the designated interface.
PAGE 1190
www.dell.com | support.dell.com Example (show vlan private-vlan interface) FTOS# show vlan private-vlan interface Gi 2/1 Primary Secondary Type Active Ports ------- --------- --------- ------ -----------------------10 primary Yes Gi 2/1 If the VLAN ID is that of a primary VLAN, then the entire private VLAN output will be displayed, as shown in the first figure below.
PAGE 1191
Syntax show vlan private-vlan mapping Defaults none Command Modes EXEC EXEC Privilege Command History Version 7.8.1.0 Usage Information Introduced on C-Series and S-Series The output of this command, shown below, displays the community and isolated VLAN IDs that are associated with each primary VLAN.
PAGE 1192
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on C-Series and S-Series Usage Information The assignment of the various PVLAN port types to port and port channel (LAG) interfaces is demonstrated below.
PAGE 1193
41 Per-VLAN Spanning Tree Plus (PVST+) Overview The FTOS implementation of PVST+ (Per-VLAN Spanning Tree plus) is based on the IEEE 802.1d standard Spanning Tree Protocol, but it creates a separate spanning tree for each VLAN configured. PVST+ (Per-VLAN Spanning Tree plus) is supported by FTOS on all Dell Force10 systems, as indicated by the characters that appear below each command heading: e E-Series, c C-Series, s S-Series, , or .
PAGE 1194
www.dell.com | support.dell.com disable ces Syntax Disable PVST+ globally. disable To enable PVST+, enter no disable. Defaults Command Modes Command History Related Commands PVST+ is disabled CONFIGURATION (conf-pvst) version 8.3.19.0 Introduced on S4820T version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.2.1.1 Introduced on E-Series protocol spanning-tree pvst Enter PVST+ mode.
PAGE 1195
Related Commands protocol spanning-tree pvst Enter SPANNING TREE mode on the switch. extend system-id ces Syntax Defaults Command Modes Command History Example Use Extend System ID to augment the Bridge ID with a VLAN ID so that PVST+ differentiate between BPDUs for each VLAN. If for some reason on VLAN receives a BPDU meant for another VLAN, PVST+ will then not detect a loop, and both ports can remain in forwarding state. extend system-id Disabled PROTOCOL PVST version 8.3.19.
PAGE 1196
www.dell.com | support.dell.com protocol spanning-tree pvst ces Enter the PVST+ mode to enable PVST+ on a device. protocol spanning-tree pvst Syntax To disable PVST+, use the disable command. Defaults This command has no default value or behavior. Command Modes Command History CONFIGURATION version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.2.1.
PAGE 1197
brief (OPTIONAL) Enter the keyword brief to view a synopsis of the PVST+ configuration information. Interface (OPTIONAL) Enter one of the interface keywords along with the slot/port information: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 1198
www.dell.com | support.dell.com ---------Gi 1/0 Gi 1/1 Gi 1/16 Gi 1/17 Example (vlan) -----Root Altr Desg Desg -------128.130 128.131 128.146 128.147 ---128 128 128 128 ------20000 20000 20000 20000 --FWD BLK FWD FWD ------20000 20000 20000 20000 --------P2P P2P P2P P2P ---No No Yes Yes FTOS#show spanning-tree pvst vlan 2 VLAN 2 Root Identifier has priority 4096, Address 0001.e805.e306 Root Bridge hello time 2, max age 20, forward delay 15 Bridge Identifier has priority 4096, Address 0001.e805.
PAGE 1199
Gi 1/0 Example (with EDS & PVID) 128.1223 128 20000 EDS 0 32768 0001.e800.a12b 128.
PAGE 1200
www.dell.com | support.dell.com Defaults Command Modes Command History 1200 | shutdown-on-vi olation (OPTIONAL) Enter the keyword shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled. err-disable Enter the keyword err-disable to enable the port to be put into error-disable state (EDS) if an error condition occurs. vlan vlan-range Enter the keyword vlan followed by the VLAN number(s).
PAGE 1201
Usage Information The BPDU guard option prevents the port from participating in an active STP topology in case a BPDU appears on a port unintentionally, or is misconfigured, or is subject to a DOS attack. This option places the port into an error disable state if a BPDU appears, and a message is logged so that the administrator can take corrective action. Note: A port configured as an edge port, on a PVST switch, will immediately transition to the forwarding state.
PAGE 1202
www.dell.com | support.dell.com spanning-tree pvst err-disable ces Syntax Defaults Command Modes Command History Usage Information Place ports in an err-disabled state if they receive a PVST+ BPDU when they are members an untagged VLAN. spanning-tree pvst err-disable cause invalid-pvst-bpdu Enabled; ports are placed in err-disabled state if they receive a PVST+ BPDU when they are members of an untagged VLAN. INTERFACE version 8.3.19.0 Introduced on S4820T Version 8.3.7.
PAGE 1203
Usage Information Version 7.5.1.0 Support added for C-Series Version 6.5.1.0 Introduced By default FTOS implements an optimized flush mechanism for PVST+. This helps in flushing the MAC addresses only when necessary (and less often) allowing for faster convergence during topology changes. However, if a standards-based flush mechanism is needed, this knob command can be turned on to enable flushing MAC addresses upon receiving every topology change notification.
PAGE 1204
www.dell.com | support.dell.com vlan forward-delay ces Set the amount of time the interface waits in the Listening State and the Learning State before transitioning to the Forwarding State. Syntax vlan vlan-range forward-delay seconds To return to the default setting, enter no vlan forward-delay command. Parameters vlan vlan-range Enter the keyword vlan followed by the VLAN number(s).
PAGE 1205
Parameters vlan vlan-range Enter the keyword vlan followed by the VLAN number(s). Range: 1 to 4094 hello-time seconds Enter the keyword hello-time followed by the time interval, in seconds, between transmission of BPDUs. Range: 1 to 10 seconds Default: 2 seconds Defaults 2 seconds Command Modes Command History Related Commands CONFIGURATION (conf-pvst) version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.
PAGE 1206
www.dell.com | support.dell.com 1206 Command Modes Command History Related Commands | CONFIGURATION (conf-pvst) version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.2.1.
PAGE 1207
42 Quality of Service (QoS) Overview FTOS commands for Quality of Service (QoS) include traffic conditioning and congestion control. QoS commands are supported on all Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: c C-Series, s S-Series, , , or Z Z-Series.
PAGE 1208
www.dell.com | support.dell.com Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.3.1.0 Introduced Per-Port QoS Commands Per-port QoS (“port-based QoS”) allows users to defined QoS configuration on a per-physical-port basis.
PAGE 1209
Parameters priority-value Enter a value from 0 to 7. dot1p Queue Number 0 2 1 0 2 1 3 3 4 4 5 5 6 6 7 7 For the C-Series and S-Series, enter a value 0, 2, 4, or 6 dot1p Queue Number 0 1 1 0 2 0 3 1 4 2 5 2 6 3 7 3 Defaults Command Modes Command History No default behavior or values INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.
PAGE 1210
www.dell.com | support.dell.com Parameters Defaults kbps Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On the E-Series, Force10 recommends using a value greater than or equal to 512 as lower values does not yield accurate results.The default granularity is Megabits per second (Mbps). Range: 0 to 10000000 committed-rate Enter the bandwidth in Mbps Range: 0 to 10000 burst-KB (OPTIONAL) Enter the burst size in KB.
PAGE 1211
rate police ces Syntax Parameters Defaults Command Mode Command History Police the incoming traffic rate on the selected interface. rate police [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burst-KB]] [vlan vlan-id] kbps Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On C-Series, S-Series, S4810, and S4820T make the following value a multiple of 64.
PAGE 1212
www.dell.com | support.dell.com E-Series On one interface, you can configure the rate limit or rate police command for a VLAN or you can configure the rate limit or the rate police command for the interface. For each physical interface, you can configure six rate police commands specifying different VLANS. After configuring VLANs in the rate police command, if this error message appears: %Error: Specified VLANs overlap with existing config.
PAGE 1213
Usage Information Related Commands On 40-port 10G linecards, if the traffic is shaped between 64 and 1000kbs, for some values the shaped rate is much less than the value configured. Do not use values in this range for 10G interfaces. rate-shape Shape traffic output as part of the designated policy. service-class dot1p-mapping Map the service class dot1p value to a CoS queue value.
PAGE 1214
www.dell.com | support.dell.com To return to the default setting, enter no service-class dynamic dot1p. Defaults All dot1p traffic is mapped to Queue 0 unless service-class dynamic dot1p is enabled. Then the default mapping is as follows: Table 42-1.
PAGE 1215
• • All dot1p traffic is mapped to Queue 0 unless service-class dynamic dot1p is enabled on an interface or globally. Layer 2 or Layer 3 service policies supercede dot1p service classes. service-class bandwidth-weight cs Specify a minimum bandwidth for queues Syntax service-class bandwidth-weight queue0 number queue1 number queue2 number queue3 number Parameters Defaults Command Modes Command History Usage Information number Enter the bandwidth-weight. The value must be a power of 2. Range 1-1024.
PAGE 1216
www.dell.com | support.dell.com Command History pre-Version 6.1.1.
PAGE 1217
Traffic Monitor 3: normal NA peak NA Out of profile yellow 0 red 0 Traffic Monitor 4: normal NA peak NA Out of profile yellow 0 red 0 Traffic Monitor 5: normal NA peak NA Out of profile yellow 0 red 0 Traffic Monitor 6: normal NA peak NA Out of profile yellow 0 red 0 Traffic Monitor 7: normal NA peak NA Out of profile yellow 0 red 0 Total: yellow 23386960 red 320605113 Table 42-3.
PAGE 1218
www.dell.com | support.dell.com Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series Usage Information Once a unicast queue is configured as strict-priority, that particular queue, on the entire chassis, is treated as strict-priority queue.
PAGE 1219
• • • • • • • • • • • • • • • • • • • • • rate-shape service-policy input service-policy output service-queue set show cam layer2-qos show cam layer3-qos show qos class-map show qos dot1p-queue-mapping show qos policy-map show qos policy-map-input show qos policy-map-output show qos qos-policy-input show qos qos-policy-output show qos statistics show qos wred-profile test cam-usage threshold trust wred wred-profile bandwidth-percentage Assign a percentage of weight to class/queue.
PAGE 1220
www.dell.com | support.dell.com Usage Information Related Commands The unit of bandwidth percentage is 1%. A bandwidth percentage of 0 is allowed and will disable the scheduling of that class. If the sum of the bandwidth percentages given to all eight classes exceeds 100%, the bandwidth percentage will automatically scale down to 100%. qos-policy-output Create a QoS output policy. bandwidth-weight cs Assign a priority weight to a queue.
PAGE 1221
Parameters Defaults Command Modes Command History Usage Information Related Commands match-all Determines how packets are evaluated when multiple match criteria exist. Enter the keyword match-all to determine that the packets must meet all the match criteria in order to be considered a member of the class. match-any Determines how packets are evaluated when multiple match criteria exist.
PAGE 1222
www.dell.com | support.dell.com clear qos statistics ces Syntax Parameters Defaults Command Modes Clears Matched Packets, Matched Bytes, and Dropped Packets. For TeraScale, clears Matched Packets, Matched Bytes, Queued Packets, Queued Bytes, and Dropped Packets. clear qos statistics interface-name. interface-name Enter one of the following keywords: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 1223
Syntax match ip access-group access-group-name [set-ip-dscp value] To remove ACL match criteria from a class map, enter no match ip access-group access-group-name [set-ip-dscp value] command. Parameters Defaults Command Modes Command History Usage Information Related Commands access-group-name Enter the ACL name whose contents are used as the match criteria in determining if packets belong to the class specified by class-map.
PAGE 1224
www.dell.com | support.dell.com Command Modes Command History Related Commands CONFIGURATION (policy-map-input and policy-map-output; conf-qos-policy-in and conf-qos-policy-out; wred) Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 pre-Version 7.7.1.0 Introduced policy-map-input Create an input policy map. policy-map-output Create an output policy map. qos-policy-input Create an input QOS-policy on the router.
PAGE 1225
Usage Information Version 7.5.1.0 Introduced on C-Series Added support for DSCP Marking option Version 6.2.1.1 Introduced on E-Series You must enter the class-map command in order to access this command. Once the class map is identified, you can configure the match criteria. The match ip dscp and match ip precedence commands are mutually exclusive. Up to 64 IP DSCP values can be matched in one match statement.
PAGE 1226
www.dell.com | support.dell.com Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Added keyword multicast. Added DSCP marking option support for S-Series Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Added support for DSCP Marking option Version 6.2.1.1 Introduced on E-Series You must enter the class-map command in order to access this command.
PAGE 1227
Usage Information Related Commands You must enter the class-map command in order to access this command. Once the class map is identified, you can configure the match criteria. class-map Identify the class map. match mac dot1p ces Syntax Parameters Defaults Command Modes Command History Usage Information Related Commands Configure a match criterion for a class map, based on a dot1p value. match mac dot1p {dot1p-list} dot1p-list Enter a dot1p value.
PAGE 1228
www.dell.com | support.dell.com Command Modes Command History Usage Information Related Commands class-map Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.0.1 Introduced You must first enter the class-map command in order to access this command. You can match against only one VLAN ID. class-map Create/access a class map. policy-aggregate ces Syntax Allow an aggregate method of configuring per-port QoS via policy maps.
PAGE 1229
2. If aggregate input QoS policy and per class input QoS policy co-exist, then aggregate input QoS policy will preempt per class input QoS policy on input traffic conditioning (rate-police). In other words, if rate police configuration exists in aggregate QoS policy, the rate police configurations in per class QoS are ignored. Marking configurations in per class input QoS policy still apply to each queue. E-Series Aggregate input/output QoS policy applies to all the port ingoing/outgoing traffic.
PAGE 1230
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information Related Commands Layer 3 CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Policy name character limit increased from 16 to 32. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 7.4.1.0 Expanded to add support for Layer 2 pre-Version 6.1.1.
PAGE 1231
Usage Information Related Commands Output policy map is used to assign traffic to different flows using QoS policy. This command enables the policy-map-output configuration mode (conf-policy-map-out). service-queue Assign a class map and QoS policy to different queues. policy-aggregate Allow an aggregate method of configuring per-port QoS via policy maps. service-policy output Apply an output policy map to the selected interface. qos-policy-input ces Create a QoS input policy on the router.
PAGE 1232
www.dell.com | support.dell.com When changing a “service-queue” configuration in a QoS policy map, all QoS rules are deleted and re-added automatically to ensure that the order of the rules is maintained. As a result, the Matched Packets value shown in the “show qos statistics” command is reset. Note: On ExaScale, FTOS cannot classify IGMP packets on a Layer 2 interface using Layer 3 policy map. The packets always take the default queue, Queue 0, and cannot be rate-policed.
PAGE 1233
queue backplane ignore-backpressure e Syntax Reduce egress pressure by ignoring the ingress backpressure queue backplane ignore-backpressure To return to the default, use the no queue backplane ignore-backpressure command. Defaults Command Modes Command History No default behavior or values CONFIGURATION Version 7.7.1.0 Introduced on E-Series queue egress e Syntax Assign a WRED Curve to all eight egress Multicast queues or designate the percentage for the Multicast bandwidth queue.
PAGE 1234
www.dell.com | support.dell.com Usage Information This command does not uniquely identify a queue, but rather identifies only a set of queues. The WRED curve is applied to all eight egress Multicast queues. Important Points to Remember — multicast-bandwidth option • • • • • • Related Commands A unique Multicast Weighted Fair Queuing (WFQ) setting can be applied only on a per port-pipe basis.
PAGE 1235
Defaults Command Modes Command History Usage Information No default behavior or values CONFIGURATION Version 7.4.1.0 and 6.5.3.0 Introduced on E-Series This command does not uniquely identify a queue, but rather identifies only a set of queues. The WRED Curve is applied to all eight ingress Multicast queues. Note: The multicast-bandwidth option is not supported on queue ingress.
PAGE 1236
www.dell.com | support.dell.com Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series Related Commands rate limit Specify rate-limit functionality on the selected interface. qos-policy-output Create a QoS output policy. rate-police ces Syntax Parameters Defaults Command Modes Command History Specify the policing functionality on incoming traffic.
PAGE 1237
rate-shape ces Syntax Parameters Defaults Command Modes Command History Shape traffic output as part of the designated policy. rate-shape [kbps] rate [burst-KB] kbps Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On C-Series and S-Series make the following value a multiple of 64. The default granularity is Megabits per second (Mbps). Range: 0-10000000 rate Enter the outgoing rate in multiples of 10 Mbps.
PAGE 1238
www.dell.com | support.dell.com Syntax Parameters Command Mode service-class dot1p-mapping {dot1p0 value | dot1p1 value | dot1p2 value | dot1p3 value | dot1p4 value | dot1p5value | dot1p6 | dot1p7 value} dot1p0 value ... dot1p7 value Enter a dot1p list number and value List number Range: 0 to 7 Range: 0 to 33 INTERFACE service-policy input ces Syntax Apply an input policy map to the selected interface.
PAGE 1239
Related Commands policy-map-input Create an input policy map. service-policy output ces Syntax Apply an output policy map to the selected interface. service-policy output policy-map-name To remove the output policy map from the interface, use the no service-policy output policy-map-name command. Parameters Defaults Command Modes Command History policy-map-name Enter the name for the policy map in character format (16 characters maximum).
PAGE 1240
www.dell.com | support.dell.com Parameters queue-id Enter the value used to identify a queue. Range: 0 to 7 on E-Series (eight queues per interface), 0-3 on C-Series and S-Series (four queues per interface; four queues are reserved for control traffic.) class-map (OPTIONAL) Enter the keyword class-map followed by the class map name assigned to the queue in character format (16 character maximum). class-map-name Note: This option is available under policy-map-input only.
PAGE 1241
Defaults Command Modes Command History Usage Information No default behavior or values CONFIGURATION (conf-qos-policy-in) Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 mac-dot1p available on the C-Series and S-Series Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 7.4.1.0 E-Series Only: Expanded to add support for mac-dot1p pre-Version 6.1.1.
PAGE 1242
www.dell.com | support.dell.com Command Modes Command History EXEC Version 7.4.1.
PAGE 1243
Command History Example Version 6.5.1.0 Introduced on E-Series FTOS#sh cam layer3-qos interface gigabitethernet 2/1 Cam Port Dscp Proto Tcp Src Dst SrcIp DstIp DSCP Queue Index Flag Port Port Marking -----------------------------------------------------------------------------------------------23488 1 0 0 0x0 0 0 0.0.0.0/0 0.0.0.
PAGE 1244
www.dell.com | support.dell.com Parameters Defaults Command Modes class-name (Optional) Enter the name of a configured class map. No default behavior or values EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.
PAGE 1245
show qos policy-map ces Syntax Parameters Defaults Command Modes View the QoS policy map information. show qos policy-map {summary [interface] | detail [interface]} summary interface To view a policy map interface summary, enter the keyword summary and optionally one of the following keywords and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
PAGE 1246
www.dell.com | support.dell.
PAGE 1247
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 7.4.1.0 E-Series Only: Added Trust IPv6 diffserv Version 6.2.1.
PAGE 1248
www.dell.com | support.dell.com Version 7.6.1.0 Introduced on C-Series and S-Series pre-Version 6.1.1.1 Introduced on E-Series Example FTOS#show qos policy-map-output Policy-map-output PolicyMapOutput Aggregate Qos-policy-name AggPolicyOut Queue# Qos-policy-name 0 qosPolicyOutput FTOS# show qos qos-policy-input ces Syntax Parameters Defaults Command Modes View the input QoS policy details. show qos qos-policy-input [qos-policy-name] qos-policy-name Enter the QoS policy name.
PAGE 1249
Parameters Defaults Command Modes qos-policy-name Enter the QoS policy name. No default behavior or values EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on C-Series and S-Series pre-Version 6.1.1.1 Introduced on E-Series Example FTOS#show qos qos-policy-output Qos-policy-output qosOut Rate-limit 50 50 peak 50 50 Wred yellow 1 Wred green 1 show qos statistics ces Syntax Parameters View QoS statistics.
PAGE 1250
www.dell.com | support.dell.com Defaults Command Modes No default behavior or values EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.1 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.1.1.1 Introduced on E-Series Usage Information The show qos statistics command can be used on the C-Series, but the wred-profile keyword must be omitted in the syntax.
PAGE 1251
Table 42-4. show qos statistics Command Example Fields (ED and EE Series) Field Description Queue # Queue Number Queued Bytes Snapshot of the byte count in that queue. Matched Pkts The number of packets that matched the class-map criteria. Note: When trust is configured, matched packet counters are not incremented in this field. Matched Bytes The number of bytes that matched the class-map criteria. Note: When trust is configured, matched byte counters are not incremented in this field.
PAGE 1252
www.dell.com | support.dell.com Yellow Out of Green Yellow Out of Green Yellow Out of Green Yellow Out of Green Yellow Out of Green Yellow Out of 3 4 5 6 7 WRED2 Profile WRED1 WRED2 Profile WRED1 WRED2 Profile WRED1 WRED2 Profile WRED1 WRED2 Profile WRED1 WRED2 Profile 49965 0 50477 49815 0 50695 49476 0 50245 49535 0 50033 49595 0 50474 49522 0 FTOS# Table 42-6.
PAGE 1253
Wred-profile-name wred_drop wred_ge_y wred_ge_g wred_teng_y wred_teng_g WRED1 min-threshold 0 1024 2048 4096 8192 2000 max-threshold 0 2048 4096 8192 16384 7000 test cam-usage ces Syntax Parameters Defaults Command Modes Command History Example Check the Input Policy Map configuration for the CAM usage. test cam-usage service-policy input policy-map linecard {[number port-set portpipe number] | [all]} Enter the policy map name.
PAGE 1254
www.dell.com | support.dell.com Note: In a Layer 2 Policy Map, IPv4/IPv6 rules are not allowed and hence the output contains only L2ACL CAM partition entries. Table 42-7. test cam-usage Command Example Fields Field Description Linecard Indicates the line card slot number. Portpipe Indicates the portpipe number. CAM Partition The CAM space where the rules are added. Available CAM Indicates the free CAM space, in the partition, for the classification rules.
PAGE 1255
Parameters Defaults Command Modes Command History Usage Information min number Enter the keyword min followed by the minimum threshold number for the WRED profile. Range: 1024 to 77824 KB max number Enter the keyword max followed by the maximum threshold number for the WRED profile. Range: 1024 to 77824 KB No default behavior or values CONFIGURATION (config-wred) pre-Version 6.1.1.1 Introduced on E-Series Use this command to configure minimum and maximum threshold values for user defined profiles.
PAGE 1256
www.dell.com | support.dell.com Command Modes Command History Usage Information CONFIGURATION (conf-policy-map-in) Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.3.1.0 fallback available on the E-Series. Version 8.2.1.0 dot1p available on the C-Series and S-Series. Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 7.4.1.0 Expanded to add support for dot1p and IPv6 DSCP pre-Version 6.1.1.
PAGE 1257
To remove the WRED drop precedence, use the no wred {yellow | green} [profile-name] command. Parameters Defaults Command Modes yellow | green Enter the keyword yellow for yellow traffic. DSCP value of xxx110 and xxx100 maps to yellow. Enter the keyword green for green traffic. DSCP value of xxx010 maps to green. profile-name Enter your WRED profile name in character format (16 character maximum). Or use one of the 5 pre-defined WRED profile names.
PAGE 1258
www.dell.com | support.dell.com Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 pre-Version 6.1.1.1 Introduced on E-Series Usage Information Related Commands Use the default pre-defined profiles or configure your own profile. You can not delete the pre-defined profiles or their default values. This command enables the WRED configuration mode—(conf-wred).
PAGE 1259
Command Modes EXEC EXEC Privilege Command History Usage Information Related Commands Version 6.2.1.1 Introduced If a Policy QoS is applied on an interface when clear queue statistics egress is issued, it will clear the egress counters in show queue statistics and vice-versa. This behavior is due to the values being read from the same hardware registers.
PAGE 1260
www.dell.com | support.dell.com Parameters Defaults Command Modes unicast | multicast (OPTIONAL) Enter the keyword multicast to display only Multicast queue statistics. Enter the keyword unicast to display only Unicast queue statistics. Default: Both Unicast and Multicast queue statistics are displayed. Interface (OPTIONAL) Enter one of the following interfaces to display the interface specific queue statistics.
PAGE 1261
Egress Queued Port bytes Queue# 0 281513847K Queued packets Packet Type Min KB Max KB Dropped packets 31959000 2048 1024 4096 2048 1 99281660K 11271000 2048 1024 4096 2048 2 99281660K 11271000 2048 1024 4096 2048 3 38984440000 4322000 2048 1024 4096 2048 4 99281660K 11271000 2048 1024 4096 2048 5 39760160000 4408000 2048 1024 4096 2048 6 39642900000 4395000 2048 1024 4096 2048 7 99274410K 11270177 Green Yellow Out of Green Yellow Out of Green Yellow Out of Green Yel
PAGE 1262
www.dell.com | support.dell.com Linecard 7 port pipe 0, multicast Packet Type Green Yellow Out of Profile Max KB 4096 2048 Dropped packets 0 0 0 Linecard 7 port pipe 1, multicast Packet Type Green Yellow Out of Profile FTOS# Table 42-12.
PAGE 1263
Table 42-13. Related Commands show queue statistics egress brief Command Fields Field Description LC Line Card Portpipe Portpipe number Port Port Queue. Where M is Multicast queue Dropped Pkts The number of packets dropped for green, yellow and out-of-profile clear queue statistics egress Clear egress queue statistics. clear queue statistics ingress Clear ingress queue statistics.
PAGE 1264
www.dell.com | support.dell.com The display area is limited to 80 spaces to accommodate the screen and for optimal readability. Numbers, that is values, are limited to 12 characters. The conventions are detailed in the following table. Table 42-14.
PAGE 1265
1 Green Yellow Out of Green Yellow Out of Green Yellow Out of Green Yellow Out of Green Yellow Out of Green Yellow Out of Green Yellow Out of Green Yellow Out of Green Yellow Out of Green Yellow Out of Green Yellow Out of 2 3 4 5 6 7 4 5 6 7 Table 42-15.
PAGE 1266
www.dell.com | support.dell.
PAGE 1267
Dest LC 0 0 0 0 1 1 1 1 2 2 2 2 3 3 3 3 4 4 4 4 5 5 5 5 6 6 6 6 RPM RPM Multicast Multicast Src Port set 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 0 1 1 0 1 0 1 Dest Port set 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 Dropped packets 0 100 0 100 0 100 0 100 0 100 0 100 0 100 0 100 0 100 0 100 0 100 0 100 0 100 0 100 0 100 0 0 FTOS# Table 42-17.
PAGE 1268
| Quality of Service (QoS) www.dell.com | support.dell.
PAGE 1269
43 Routing Information Protocol (RIP) Overview Routing Information Protocol (RIP) is a Distance Vector routing protocol. FTOS supports both RIP version 1 (RIPv1) and RIP version 2 (RIPv2) on all Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , or . Note: The C-Series platform supports RIP with FTOS version 7.6.1.0 and later. The S-Series platform supports RIP with FTOS version 7.8.1.0 and later. Prior to 7.6.1.
PAGE 1270
www.dell.com | support.dell.com • • • • • • • • • • • • • network offset-list output-delay passive-interface redistribute redistribute isis redistribute ospf router rip show config show ip rip database show running-config rip timers basic version auto-summary ces Syntax Restore the default behavior of automatic summarization of subnet routes into network routes. This command applies only to RIP version 2. auto-summary To send sub-prefix routing information, enter no auto-summary.
PAGE 1271
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series Usage Information This command triggers updates of the main RIP routing tables. debug ip rip ces Examine RIP routing information for troubleshooting.
PAGE 1272
www.dell.com | support.dell.com Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series default-information originate ces Generate a default route for the RIP traffic. Syntax default-information originate [always] [metric metric-value] [route-map map-name] To return to the default values, enter no default-information originate.
PAGE 1273
Syntax default-metric number To return the default metric to the original values, enter no default-metric. Parameters Default Command Modes Command History Usage Information Related Commands number Specify a number. Range: 1 to 16. The default is 1. 1 ROUTER RIP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series pre-Version 6.2.1.
PAGE 1274
www.dell.com | support.dell.com Related Commands router rip Enter ROUTER mode on the switch. distance ces Assign a weight (for prioritization) to all routes in the RIP routing table or to a specific route. Lower weights (“administrative distance”) are preferred. Syntax distance weight [ip-address mask [prefix-name]] To return to the default values, use the no distance weight [ip-address mask] command. Parameters weight Enter a number from 1 to 255 for the weight (for prioritization).
PAGE 1275
Parameters prefix-list-name Enter the name of a configured prefix list. interface (OPTIONAL) Identifies the interface type slot/port as one of the following: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Port Channel interface, enter the keyword port-channel followed by a number: C-Series and S-Series Range: 1-128 E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale and 1 to 512 for ExaScale.
PAGE 1276
www.dell.com | support.dell.com Parameters prefix-list-name Enter the name of a configured prefix list. interface (OPTIONAL) Identifies the interface type slot/port as one of the following: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 1277
Defaults Disabled. Command Modes Command History Related Commands INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series ip split-horizon Set RIP routing updates to exclude routing prefixes. ip rip receive version ces Set the interface to receive specific versions of RIP.
PAGE 1278
www.dell.com | support.dell.com ces Set the interface to send a specific version of RIP. The version you set on the interface overrides the version command in the ROUTER RIP mode. Syntax ip rip send version [1] [2] To return to the default value, enter no ip rip send version. Parameters 1 (OPTIONAL) Enter the number 1 for RIP version 1. The default is RIPv1. 2 (OPTIONAL) Enter the number 2 for RIP version 2. Defaults RIPv1 Command Modes Command History INTERFACE Version 8.3.19.
PAGE 1279
Related Commands Version 7.8.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series ip poison-reverse Set the prefix for RIP routing updates. maximum-paths ces Set RIP to forward packets over multiple paths. Syntax maximum-paths number To return to the default values, enter no maximum-paths. Parameters Defaults Command Modes Command History Usage Information number Enter the number of paths. Range: 1 to 16. The default is 4 paths.
PAGE 1280
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History Usage Information ip-address Enter the IP address, in dotted decimal format, of a router with which to exchange information. Not configured. ROUTER RIP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series When a neighbor router is identified, unicast data exchanges occur.
PAGE 1281
Usage Information You can enable an unlimited number of RIP networks. RIP operates over interfaces configured with any address specified by the network command. offset-list ces Specify a number to add to the incoming or outgoing route metrics learned via RIP. Syntax offset-list prefix-list-name {in | out} offset [interface] To delete an offset list, use the no offset-list prefix-list-name {in | out} offset [interface] command.
PAGE 1282
www.dell.com | support.dell.com Version 7.6.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series Usage Information Related Commands When the offset metric is applied to an interface, that value takes precedence over an offset value that is not extended to an interface. ip prefix-list Enter the PREFIX-LIST mode and configure a prefix list. output-delay ces Set the interpacket delay of successive packets to the same neighbor.
PAGE 1283
Parameters interface Enter the following information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Port Channel interface, enter the keyword port-channel followed by a number: C-Series and S-Series Range: 1-128 • • • • Defaults Command Modes Command History Usage Information Related Commands E-Series Range: 1 to 32 for EtherScale, 1 to 255 for TeraScale and 1 to 512 for ExaScale.
PAGE 1284
www.dell.com | support.dell.com Parameters connected Enter the keyword connected to specify that information from active routes on interfaces is redistributed. static Enter the keyword static to specify that information from static routes is redistributed. Defaults Not configured. Command Modes Command History ROUTER RIP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series pre-Version 6.2.1.
PAGE 1285
Defaults Not configured. Command Modes Command History ROUTER RIP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 pre-Version 6.2.1.1 Introduced on E-Series Usage Information IS-IS is not supported on S-Series systems. redistribute ospf ces Syntax Redistribute routing information from an OSPF process.
PAGE 1286
www.dell.com | support.dell.com Version 7.6.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series router rip ces Enter the ROUTER RIP mode to configure and enable RIP. router rip Syntax To disable RIP, enter no router rip. Defaults Disabled. Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series pre-Version 6.2.1.
PAGE 1287
Version 7.8.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series Example FTOS(conf-router_rip)#show config ! router rip network 172.31.0.0 passive-interface GigabitEthernet 0/1 FTOS(conf-router_rip)# show ip rip database ces Display the routes learned by RIP. If the switch learned no RIP routes, no output is generated.
PAGE 1288
www.dell.com | support.dell.com [50/2] via 1.1.10.2, 00:00:18, Vlan 10 208.250.42.0/24 auto-summary Table 43-1. Fields in show ip rip database Command Output Field Description Total number of routes in RIP database Displays the number of RIP routes stored in the RIP database. 100.10.10.0/24 directly connected Lists the route(s) directly connected. 150.100.0.0 redistributed Lists the routes learned through redistribution. 209.9.16.0/24...
PAGE 1289
Syntax timers basic update invalid holddown flush To return to the default settings, enter no timers basic. Parameters Defaults Command Modes Command History Usage Information update Enter the number of seconds to specify the rate at which RIP routing updates are sent. Range: zero (0) to 4294967295. Default: 30 seconds. invalid Enter the number of seconds to specify the time interval before routing updates are declared invalid or expired.
PAGE 1290
www.dell.com | support.dell.com Parameters Default Command Modes Command History Related Commands 1290 | 1 Enter the keyword 1 to specify RIP version 1. 2 Enter the keyword 2 to specify RIP version 2. The FTOS sends RIPv1 and receives RIPv1 and RIPv2. ROUTER RIP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series pre-Version 6.2.1.
PAGE 1291
44 Remote Monitoring (RMON) Overview FTOS RMON is implemented on all Dell Force10 switching platforms as indicated by the characters that appear below each command heading: e E-Series, c C-Series, s S-Series, , , or Z Z-Series. FTOS RMON is based on IEEE standards, providing both 32-bit and 64-bit monitoring, and long-term statistics collection.
PAGE 1292
www.dell.com | support.dell.com • • • • • • • • • • rmon collection statistics rmon event rmon hc-alarm show rmon show rmon alarms show rmon events show rmon hc-alarm show rmon history show rmon log show rmon statistics rmon alarm cesz Set an alarm on any MIB object. Syntax rmon alarm number variable interval {delta | absolute} rising-threshold value event-number falling-threshold value event-number [owner string] To disable the alarm, use the no rmon alarm number command.
PAGE 1293
falling-threshold value event-number (OPTIONAL) Enter the keyword owner followed by the owner name to specify an owner for the alarm. This is the alarmOwner object in the alarmTable of the RMON MIB. owner string Default Command Modes Command History Enter the keyword falling-threshold followed by the value (32bit) the falling-threshold alarm is either triggered or reset. Then enter the event-number to trigger when the falling threshold exceeds its limit.
PAGE 1294
www.dell.com | support.dell.com Defaults Command Modes Command History buckets number (OPTIONAL) Enter the keyword buckets followed the number of buckets for the RMON collection history group of statistics. Bucket Range: 1 to 1000 Default: 50 interval seconds (OPTIONAL) Enter the keyword interval followed the number of seconds in each polling cycle. Range: 5 to 3600 seconds Default: 1800 seconds No default behavior CONFIGURATION INTERFACE (config-if) Version 8.3.19.0 Introduced on S4820T Version 8.
PAGE 1295
Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.1.1.0 Introduced for E-Series rmon event cesz Add an event in the RMON event table. Syntax rmon event number [log] [trap community] [description string] [owner name] To disable RMON on an interface, use the no rmon event number [log] [trap community] [description string] command. Parameters Defaults Command Modes Command History number Assign an event number in integer format from 1 to 65535.
PAGE 1296
www.dell.com | support.dell.com rmon hc-alarm cesz Set an alarm on any MIB object. Syntax rmon hc-alarm number variable interval {delta | absolute} rising-threshold value event-number falling-threshold value event-number [owner string] To disable the alarm, use the no rmon hc-alarm number command. Parameters number Enter the alarm integer number from 1 to 65535. The value must be unique in the RMON Alarm Table. variable The MIB object to monitor.
PAGE 1297
Version 7.5.1.0 Support added for C-Series Version 6.1.1.0 Introduced for E-Series show rmon cesz Display the RMON running status including the memory usage. show rmon Syntax Defaults No default behavior Command Modes Command History EXEC Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.1.1.
PAGE 1298
www.dell.com | support.dell.com Command Modes Command History EXEC Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.1.1.0 Introduced for E-Series Example (index) FTOS#show rmon alarm 1 RMON alarm entry 1 sample Interval: 5 object: 1.3.6.1.2.1.1.3 sample type: absolute value. value: 255161 alarm type: rising or falling alarm.
PAGE 1299
Syntax Parameters Defaults Command Modes Command History show rmon events [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON Event Table in an easy-to-read format. No default behavior EXEC Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.
PAGE 1300
www.dell.com | support.dell.com show rmon hc-alarm cesz Syntax Parameters Defaults Command Modes Command History 1300 Display the contents of RMON High-Capacity Alarm Table. | show rmon hc-alarm [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON High-Capacity Alarm Table in an easy-to-read format. No default behavior EXEC Version 8.3.19.0 Introduced on S4820T Version 8.3.11.
PAGE 1301
show rmon history cesz Display the contents of the RMON Ethernet History table. Syntax Parameters show rmon history [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON Ethernet History table in an easy-to-read format. Defaults No default behavior Command Modes Command History EXEC Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.
PAGE 1302
www.dell.com | support.dell.com Parameters index (OPTIONAL) Enter the log index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON Log Table in an easy-to-read format. Defaults No default behavior Command Modes Command History EXEC Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.1.1.
PAGE 1303
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.1.1.0 Introduced for E-Series Example (index) FTOS#show rmon statistics 6001 RMON statistics entry 6001 interface: ifIndex.
PAGE 1304
www.dell.com | support.dell.
PAGE 1305
45 Rapid Spanning Tree Protocol (RSTP) Overview The FTOS implementation of RSTP (Rapid Spanning Tree Protocol) is based on the IEEE 802.1w standard spanning-tree protocol. The RSTP algorithm configures connectivity throughout a bridged LAN that is comprised of LANs interconnected by bridges. RSTP is supported by FTOS on all Dell Force10 systems, as indicated by the characters that appear below each command heading: C-Series: c, E-Series: e, S-Series: s, , or .
PAGE 1306
www.dell.com | support.dell.com bridge-priority ces Syntax Set the bridge priority for RSTP. bridge-priority priority-value To return to the default value, enter no bridge-priority. Parameters Defaults Command Modes Command History Related Commands priority-value Enter a number as the bridge priority value in increments of 4096. Range: 0 to 61440 Default: 32768 32768 CONFIGURATION RSTP (conf-rstp) Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.
PAGE 1307
Parameters all (OPTIONAL) Enter the keyword all to debug all spanning tree operations. bpdu interface {in | out} (OPTIONAL) Enter the keyword bpdu to debug Bridge Protocol Data Units. (OPTIONAL) Enter the interface keyword along with the type slot/port of the interface you want displayed. Type slot/port options are the following: • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
PAGE 1308
www.dell.com | support.dell.com Parameters description Defaults No default behavior or values Command Modes Command History Related Commands Enter a description to identify the Rapid Spanning Tree (80 characters maximum). SPANNING TREE (The prompt is “config-rstp”.) Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 pre-7.7.1.0 Introduced protocol spanning-tree rstp Enter SPANNING TREE mode on the switch. disable ces Disable RSTP globally on the system.
PAGE 1309
To return to the default setting, enter no forward-delay. Parameters Defaults Command Modes Command History Related Commands seconds Enter the number of seconds that FTOS waits before transitioning RSTP to the forwarding state. Range: 4 to 30 Default: 15 seconds 15 seconds CONFIGURATION RSTP (conf-rstp) Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.2.1.
PAGE 1310
www.dell.com | support.dell.com Usage Information Version 7.5.1.0 Support added for C-Series Version 6.2.1.1 Introduced for E-Series The hello time is encoded in BPDUs in increments of 1/256ths of a second. The standard minimum hello time in seconds is 1 second, which is encoded as 256. Millisecond hello times are encoded using values less than 256; the millisecond hello time equals (x/1000)*256.
PAGE 1311
protocol spanning-tree rstp ces Enter the RSTP mode to configure RSTP. Syntax protocol spanning-tree rstp To exit the RSTP mode, enter exit. Defaults Not configured Command Modes Command History CONFIGURATION RSTP (conf-rstp) Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.2.1.
PAGE 1312
www.dell.com | support.dell.com protocol spanning-tree rstp no disable bridge-priority 16384 show spanning-tree rstp ces Display the RSTP configuration. Syntax Parameters Command Modes show spanning-tree rstp [brief] [guard] brief (OPTIONAL) Enter the keyword brief to view a synopsis of the RSTP configuration information. guard (OPTIONAL) Enter the keyword guard to display the type of guard enabled on an RSTP interface and the current port state.
PAGE 1313
Gi 4/9 FTOS# Example (with EDS & LBK) Altr 128.427 128 20000 BLK 20000 P2P No FTOS#show spanning-tree rstp br Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 0001.e801.6aa8 Root Bridge hello time 2, max age 20, forward delay 15 Bridge ID Priority 32768, Address 0001.e801.
PAGE 1314
www.dell.com | support.dell.com spanning-tree rstp ces Configure an RSTP interface with one of these settings: port cost, edge port with optional Bridge Port Data Unit (BPDU) guard, port priority, loop guard, or root guard. Syntax spanning-tree rstp {cost port-cost | edge-port [bpduguard [shutdown-on-violation]] | priority priority | {loopguard | rootguard}} Parameters Enter the keyword cost followed by the port cost value.
PAGE 1315
Usage Information Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 7.4.1.0 Added the optional Bridge Port Data Unit (BPDU) guard. Version 6.2.1.1 Introduced for E-Series The BPDU guard option prevents the port from participating in an active STP topology in case a BPDU appears on a port unintentionally, or is mis-configured, or is subject to a DOS attack.
PAGE 1316
www.dell.com | support.dell.com Syntax To disable, use the no tc-flush-standard command. Defaults Command Modes Command History Usage Information 1316 tc-flush-standard | Disabled CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series Version 6.5.1.0 Introduced for E-Series By default FTOS implements an optimized flush mechanism for RSTP.
PAGE 1317
46 Security Overview Except for the Trace List feature (E-Series only), most of the commands in this chapter are available on all Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , or .
PAGE 1318
www.dell.com | support.dell.com AAA Accounting Commands AAA Accounting enables tracking of services that users are accessing and the amount of network resources being consumed by those services.When AAA Accounting is enabled, the network server reports user activity to the TACACS+ security server in the form of accounting records. Each accounting record is comprised of accounting AV pairs and is stored on the access control server.
PAGE 1319
Defaults Command Modes Command History Example stop-only Enter the keyword stop-only to instruct the TACACS+ security server to send a “stop record accounting” notice at the end of the requested user process. tacacs+ Enter the keyword tacacs+ to use TACACS+ data for accounting. FTOS currently only supports TACACS+ accounting. No default configuration or behavior CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.
PAGE 1320
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series Version 6.3.1.0 Introduced Usage Information FTOS issues accounting records for all users on the system, including users whose username string, due to protocol translation, is NULL. For example, a user who comes on line with the aaa authentication login method-list none command is applied.
PAGE 1321
Command Modes Command History EXEC Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series Version 6.3.1.
PAGE 1322
www.dell.com | support.dell.com commands level Enter this keyword to apply an EXEC and CONFIGURATION level authorization method list. method-list Enter a method list that you defined using the command aaa authorization exec or aaa authorization commands. Defaults None Command Modes LINE Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series Version 6.3.1.
PAGE 1323
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series Version 6.1.1.0 Added support for RADIUS aaa authorization config-commands Set parameters that restrict (or permit) a user’s access to EXEC level commands. e Syntax aaa authorization config-commands Disable authorization checking for CONFIGURATION level commands using the command no aaa authorization config-commands.
PAGE 1324
www.dell.com | support.dell.com tacacs+ Use the TACACS+ protocol to perform authorization. none Enter this keyword to apply no authorization. Defaults None Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series Version 6.1.1.
PAGE 1325
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series pre-Version 6.1.1.0 Introduced for E-Series Use the enable password command to define a password for the level to which you are assigning privilege or access. privilege level (LINE mode) ces Syntax Change the access level for users on the terminal lines.
PAGE 1326
www.dell.com | support.dell.com • • • • • • • • • • • • enable restricted enable secret login authentication password password-attributes privilege level (CONFIGURATION mode) privilege level (LINE mode) service password-encryption show privilege show users timeout login response username aaa authentication enable ces Configure AAA Authentication method lists for user access to the EXEC privilege mode (the “Enable” access). Syntax aaa authentication enable {default | method-list-name} method [...
PAGE 1327
Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series Version 6.2.1.1 Introduced Usage Information By default, the Enable password is used. If aaa authentication enable default is configured, FTOS will use the methods defined for Enable access instead.
PAGE 1328
www.dell.com | support.dell.com method Enter one of the following methods: • enable - use the password defined by the enable password command • line - use the password defined by the password command in the • local - use the user name/password defined by the in the local • • none - no authentication. in the CONFIGURATION mode. LINE mode. configuration. • ...
PAGE 1329
Related Commands login authentication Apply an authentication method list to designated terminal lines. password Create a password. radius-server host Specify a RADIUS server host. tacacs-server host Specify a TACACS+ server host. access-class ces Restrict incoming connections to a particular IP address in a defined IP access control list (ACL). Syntax access-class access-list-name To delete a setting, use the no access-class command. Parameters access-list-name Defaults Not configured.
PAGE 1330
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History Usage Information level level (OPTIONAL) Enter the keyword level followed by a number as the level of access. Range: 1 to 15 encryption-type (OPTIONAL) Enter the number 7 or 0 as the encryption type. Enter a 7 followed by a text string as the hidden password. The text string must be a password that was already encrypted by a Dell Force10 router.
PAGE 1331
Syntax enable restricted [encryption-type] password To disallow access to restricted commands, enter no enable restricted. Parameters encryption-type (OPTIONAL) Enter the number 7 as the encryption type. Enter 7 followed a text string as the hidden password. The text string must be a password that was already encrypted by a Dell Force10 router. Use this parameter only with a password that you copied from the show running-config file of another Dell Force10 router.
PAGE 1332
www.dell.com | support.dell.com Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series pre-Version 6.1.1.0 Introduced for E-Series Usage Information Use this command to define a password for a level and use the privilege level (CONFIGURATION mode) command to control access to command modes.
PAGE 1333
Command Modes Command History Usage Information Related Commands LINE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series pre-Version 6.2.1.0 Introduced on E-Series If you configure the aaa authentication login default command, then the login authentication default command automatically is applied to all terminal lines. aaa authentication login Select login authentication methods.
PAGE 1334
www.dell.com | support.dell.com Related Commands enable password Set the password for the enable command. login authentication Configure an authentication method to log in to the switch. service password-encryption Encrypt all passwords configured in FTOS. radius-server key Configure a key for all RADIUS communications between the switch and the RADIUS host server. tacacs-server key Configure a key for communication between a TACACS+ server and client.
PAGE 1335
Command History Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series Version 7.4.1.0 Introduced password Specify a password for users on terminal lines. service password-encryption ces Syntax Encrypt all passwords configured in FTOS. service password-encryption To store new passwords as clear text, enter no service password-encryption.
PAGE 1336
www.dell.com | support.dell.com show privilege ces View your access level. Syntax show privilege Command Modes EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series pre-Version 6.1.1.
PAGE 1337
Example FTOS#show user * Line User Host(s) 0 console 0 admin idle 3 vty 1 admin idle Location 172.31.1.4 FTOS# Table 1 describes the information in the show users command example. Table 1 show users Command Example Fields Related Commands Field Description (untitled) Indicates with am asterisk (*) which terminal line you are using. Line Displays the terminal lines currently in use. User Displays the user name of all users logged in. Host(s) Displays the terminal line status.
PAGE 1338
www.dell.com | support.dell.com Usage Information The software measures the period of inactivity defined in this command as the period between consecutive keystrokes. For example, if your password is “password” you can enter “p” and wait 29 seconds to enter the next letter. username ces Establish an authentication system based on user names.
PAGE 1339
Version 7.7.1.0 Added support for secret option and MD5 password encryption. Extended name from 25 characters to 63. Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series E-Series original Command Usage Information Related Commands To view the defined user names, use the show running-config user command. password Specify a password for users on terminal lines. show running-config View the current configuration. RADIUS Commands The RADIUS commands supported by FTOS.
PAGE 1340
www.dell.com | support.dell.com Version 7.5.1.0 Support added for C-Series pre-Version 6.2.1.1 Introduced on E-Series ip radius source-interface ces Syntax Specify an interface’s IP address as the source IP address for RADIUS connections. ip radius source-interface interface To delete a source interface, enter no ip radius source-interface.
PAGE 1341
radius-server deadtime ces Syntax Configure a time interval during which non-responsive RADIUS servers to authentication requests are skipped. radius-server deadtime seconds To disable this function or return to the default value, enter no radius-server deadtime. Parameters Defaults Command Modes Command History seconds Enter a number of seconds during which non-responsive RADIUS servers are skipped. Range: 0 to 2147483647 seconds. Default: 0 seconds. 0 seconds CONFIGURATION Version 8.3.19.
PAGE 1342
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information timeout seconds (OPTIONAL) Enter the keyword timeout followed by the seconds the time interval the switch waits for a reply from the RADIUS server. This parameter overwrites the radius-server timeout command. Range: 0 to 1000 Default: 5 seconds key [encryption-type] key (OPTIONAL) Enter the keyword key followed by an optional encryption-type and a string up to 42 characters long as the authentication key.
PAGE 1343
radius-server key ces Configure a key for all RADIUS communications between the switch and the RADIUS host server. Syntax radius-server key [encryption-type] key To delete a password, enter no radius-server key. Parameters Defaults Command Modes Command History Usage Information encryption-type (OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered. The options are: • 0 is the default and means the key is not encrypted and stored as clear text.
PAGE 1344
www.dell.com | support.dell.com To configure zero retransmit attempts, enter no radius-server retransmit. To return to the default setting, enter radius-server retransmit 3. Parameters Defaults Command Modes Command History Related Commands retries Enter a number of attempts that FTOS tries to locate a RADIUS server. Range: zero (0) to 100. Default: 3 retries. 3 retries CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.
PAGE 1345
Related Commands radius-server host Configure a RADIUS host.
PAGE 1346
www.dell.com | support.dell.com TACACS+ Commands FTOS supports TACACS+ as an alternate method for login authentication. • • • • debug tacacs+ ip tacacs source-interface tacacs-server host tacacs-server key debug tacacs+ ces Syntax View TACACS+ transactions to assist with troubleshooting. debug tacacs+ To disable debugging of TACACS+, enter no debug tacacs+. Defaults Command Modes Command History Disabled. EXEC Privilege Version 8.3.19.0 Introduced on S4820T Version 8.3.7.
PAGE 1347
Parameters interface Enter the following keywords and slot/port or number information: • For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For Loopback interfaces, enter the keyword loopback followed by a number from zero (0) to 16838. • For the Null interface, enter the keywords null 0.
PAGE 1348
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information port number (OPTIONAL) Enter the keyword port followed by a number as the port to be used by the TACACS+ server. Range: zero (0) to 65535 Default: 49 timeout seconds (OPTIONAL) Enter the keyword timeout followed by the number of seconds the switch waits for a reply from the TACACS+ server.
PAGE 1349
Parameters Defaults Command Modes Command History Usage Information encryption-type (OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered. The options are: • 0 is the default and means the key is not encrypted and stored as clear text. • 7 means that the key is encrypted and hidden. key Enter a text string, up to 42 characters long, as the clear text password. Leading spaces are ignored. Not configured. CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.
PAGE 1350
www.dell.com | support.dell.com An authentication server must authenticate a client connected to an 802.1X switch port. Until the authentication, only EAPOL (Extensible Authentication Protocol over LAN) traffic is allowed through the port to which a client is connected. Once authentication is successful, normal traffic passes through the port. FTOS supports RADIUS and Active Directory environments using 802.1X Port Authentication.
PAGE 1351
To disable dot1x on an globally, use the no dot1x authentication command. Defaults Command Modes Command History Related Commands Disabled CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on C-Series and S-Series Version 7.4.1.
PAGE 1352
www.dell.com | support.dell.com To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id [max-attempts number] command. Parameters Defaults Command Modes Command History Usage Information vlan-id Enter the VLAN Identifier. Range: 1 to 4094 max-attempts number (OPTIONAL) Enter the keyword max-attempts followed number of attempts desired before authentication fails. Range: 1 to 5 Default: 3 3 attempts CONFIGURATION (conf-if-interface-slot/port) Version 8.3.19.
PAGE 1353
Version 7.6.1.0 Introduced on C-Series and S-Series Version 7.4.1.0 Introduced on E-Series dot1x guest-vlan ces Configure a guest VLAN for limited access users or for devices that are not 802.1X capable. Syntax dot1x guest-vlan vlan-id To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command. Parameters Defaults Command Modes Command History Usage Information vlan-id Enter the VLAN Identifier. Range: 1 to 4094 Not configured CONFIGURATION (conf-if-interface-slot/port) Version 8.3.
PAGE 1354
www.dell.com | support.dell.com dot1x mac-auth-bypass Enable MAC authentication bypass. If 802.1X times out because the host did not respond to the Identity Request frame, FTOS attempts to authenticate the host based on its MAC address. cs Syntax [no] dot1x mac-auth-bypass Defaults Disabled Command Modes Command History INTERFACE Version 8.4.1.0 Usage Information Introduced on C-Series and S-Series To disable MAC authentication bypass on a port, enter the no dot1x mac-auth-bypass command.
PAGE 1355
dot1x port-control ces Enable port control on an interface. Syntax Parameters Defaults Command Modes Command History Usage Information dot1x port-control {force-authorized | auto | force-unauthorized} force-authorized Enter the keyword force-authorized to forcibly authorize a port. auto Enter the keyword auto to authorize a port based on the 802.1X operation result. force-unauthorized Enter the keyword force-unauthorized to forcibly de-authorize a port.
PAGE 1356
www.dell.com | support.dell.com Version 7.6.1.0 Introduced on C-Series and S-Series Version 7.4.1.0 Introduced on E-Series dot1x reauthentication ces Enable periodic re-authentication of the client. Syntax dot1x reauthentication [interval seconds] To disable periodic re-authentication, use the no dot1x reauthentication command.
PAGE 1357
Command Modes Command History INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on C-Series and S-Series Version 7.4.1.0 Introduced on E-Series dot1x server-timeout ces Syntax Configure the amount of time after which exchanges with the server time out. dot1x server-timeout seconds To return to the default, use the no dot1x server-timeout command.
PAGE 1358
www.dell.com | support.dell.com Defaults 30 seconds Command Modes Command History INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on C-Series and S-Series Version 7.4.1.0 Introduced on E-Series dot1x tx-period ces Syntax Configure the intervals at which EAPOL PDUs are transmitted by the Authenticator PAE. dot1x tx-period seconds To return to the default, use the no dot1x tx-period command.
PAGE 1359
Parameters interface Enter one of the following keywords and slot/port or number information: • For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information. • For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
PAGE 1360
www.dell.com | support.dell.com SSH Server and SCP Commands FTOS supports SSH Protocol versions 1.5 and 2.0. Secure Shell (SSH) is a protocol for secure remote login over an insecure network. SSH sessions are encrypted and use authentication.
PAGE 1361
Parameters Enter the keyword rsa followed by the key size to generate a SSHv2 RSA host keys. Range: 1024 to 2048 if FIPS mode not enabled; if FIPS mode is enabled, only a 2048-bit key can be generated. Default: 1024 rsa Note: You must have a license to access the FIPS mode. For more information, please contact your Dell Force10 representative. rsa1 Enter the keyword rsa1 followed by the key size to generate a SSHv1 RSA host keys.
PAGE 1362
www.dell.com | support.dell.com debug ip ssh ces Enables collecting SSH debug information. Syntax debug ip ssh {client | server} To disable debugging, use the no debug ip ssh {client | server} command. Parameters Defaults Command Modes Command History Usage Information client Enter the keyword client to enable collecting debug information on the client. server Enter the keyword server to enable collecting debug information on the server. Disabled on both client and server EXEC Version 8.3.19.
PAGE 1363
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series pre-Version 6.1.1.0 Introduced for E-Series Usage Information Related Commands To configure the switch as a SCP server, use the ip ssh server command. ip ssh server Enable SSH and SCP server on the switch. ip ssh authentication-retries ces Configure the maximum number of attempts that should be used to authenticate a user.
PAGE 1364
www.dell.com | support.dell.com Parameters 1-10 Defaults 10 per minute Command Modes Command History Enter the number of maximum number of incoming SSH connections allowed per minute. Range: 1 to 10 per minute Default: 10 per minute CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series pre-Version 6.1.1.
PAGE 1365
If no ip ssh rsa-authentication enable is executed, host-based authentication is disabled. Note: Administrators must specify the two files (rhosts and pub-key-file) to configure host-based authentication. Related Commands ip ssh pub-key-file Public keys of trusted hosts from a file. ip ssh rhostsfile Trusted hosts and users for rhost authentication. ip ssh key-size ces Configure the size of the server-generated RSA SSHv1 key.
PAGE 1366
www.dell.com | support.dell.com Defaults enabled Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series pre-Version 6.1.1.0 Introduced for E-Series Usage Information With password authentication enabled, users can authenticate using local, RADIUS, or TACACS+ password fallback order as configured.
PAGE 1367
poclab4,123.12.1.123 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAox/ QQp8xYhzOxn07yh4VGPAoUfgKoieTHO9G4sNV+ui+DWEc3cgYAcU5Lai1MU 2ODrzhCwyDNp05tKBU3tReG1o8AxLi6+S4hyEMqHzkzBFNVqHzpQc+Rs4p2ur zV0F4pRKnaXdHf3Lk4D460HZRhhVrxqeNxPDpEnWIMPJi0ds= ashwani@poclab4 Note: For rhostfile and pub-key-file, the administrator must FTP the file to the chassis. Related Commands show ip ssh client-pub-keys Display the client-public keys used for the host-based authentication.
PAGE 1368
www.dell.com | support.dell.com ip ssh rsa-authentication (Config) ces Enable RSA authentication for the SSHv2 server. Syntax ip ssh rsa-authentication enable To disable RSA authentication, use the no ip ssh rsa-authentication enable command. Parameters Defaults Command Modes Command History Usage Information Related Commands enable Enter the keyword enable to enable RSA authentication for the SSHv2 server. RSA authentication is disabled by default CONFIGURATION Version 8.3.19.
PAGE 1369
Command History Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series pre-Version 6.1.1.0 Introduced for E-Series Usage Information If you want to log in without being prompted for a password, log in through RSA authentication. To do that, you must first add the SSHv2 RSA public keys to the list of authorized keys.
PAGE 1370
www.dell.com | support.dell.com Usage Information This command enables the SSH server and begins listening on a port. If a port is not specified, listening is on SSH default port 22. Example FTOS# conf FTOS(conf)# ip ssh server port 45 FTOS(conf)# ip ssh server enable FTOS# Related Commands show ip ssh Display the ssh information show crypto ces Display the public part of the SSH host-keys. Note: Some of the parameters in this command require licensing to access.
PAGE 1371
Example FTOS#show crypto key mypubkey rsa ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAtzkZME/ e8V8smnXR22EJGQhCMkEOkuisa+OILVoMYU1ZKGfj0W5BPCSvF/ x5ifqYFFwUzJNOcsJK7vjSsnmMhChF2YSvXlvTJ6h971FJAQlOsgd0ycpocsF+DNLKfJnx7SAjhakF QMwGg/g78ZkDT3Ydr8KKjfSI4Bg/WS8B740= FTOS#show crypto key mypubkey rsa1 1024 35 131060015480873398953257515397249657850072206444294963674080935683088961020317 226679889567549667652650063796221897799276092785236388392230550818191660099281 32616408664345774602219229518903992966334579117374224743
PAGE 1372
www.dell.com | support.dell.com show ip ssh client-pub-keys ces Syntax Defaults Command Modes Command History Example Display the client public keys used in host-based authentication. show ip ssh client-pub-keys No default behavior or values EXEC Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced for S-Series Version 7.5.1.0 Introduced for C-Series pre-Version 6.1.1.0 Introduced for E-Series FTOS#show ip ssh client-pub-keys poclab4,123.12.1.
PAGE 1373
Example Version 7.5.1.0 Introduced for C-Series pre-Version 6.1.1.0 Introduced for E-Series FTOS#show ip ssh rsa-authentication my-authorized-keys ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyB17l4gFp4r2DRHIvMc1VZd0Sg5GQxRV1y1X1JOMeO6Nd0WuYy zrQMM4qJAoBwtneOXfLBcHF3V2hcMIqaZN+CRCnw/ zCMlnCf0+qVTd1oofsea5r09kS0xTp0CNfHXZ3NuGCq9Ov33m9+U9tMwhS8vy8AVxdH4x4km3c3t5J vc= freedom@poclab4 FTOS# Usage Information Related Commands This command displays the contents of the file flash:/ADMIN_DIR/ssh/ authorized-keys.
PAGE 1374
www.dell.com | support.dell.com -m HMAC algorithm Enter one of the following HMAC algorithms to use. (For v2 clients only.): • hmac-sha1: Force ssh to use the hmac-sha1 HMAC algorithm. • hmac-sha1-96: Force ssh to use the hmac-sha1-96 HMAC algorithm. • hmac-md5: Force ssh to use the hmac-md5 HMAC algorithm. • hmac-md5-96: Force ssh to use the hmac-md5-96 HMAC algorithm. -p port-number (OPTIONAL) Enter the keyword -p followed by the port number.
PAGE 1375
Trace List Commands IP trace lists create an Access Control List (ACLs) to trace all traffic into the E-Series switch. This feature is useful for tracing Denial of Service (DOS) attacks. Note: For other Access Control List commands, the chapter Chapter 7, Access Control Lists (ACL).
PAGE 1376
www.dell.com | support.dell.com • Parameters Defaults Command Modes Related Commands Use the no deny {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host ip-address} command. ip Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list will deny all IP protocols. ip-protocol-number Enter a number from 0 to 255 to deny based on the protocol identified in the IP protocol header.
PAGE 1377
Parameters source Enter the IP address of the network or host from which the packets were sent. mask (OPTIONAL) Enter a network mask in /prefix format (/x). any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host followed by the IP address to specify a host IP address.
PAGE 1378
www.dell.com | support.dell.com deny udp e Configure a filter to drop UDP packets meeting the filter criteria. Syntax deny udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [operator port [port]] [count [byte]] | log] [order number] To remove this filter, you have two choices: • • Parameters source Enter the IP address of the network or host from which the packets were sent. mask (OPTIONAL) Enter a network mask in /prefix format (/x).
PAGE 1379
ip trace-group e Syntax Assign a trace list globally to process all incoming packets to the switch. ip trace-group trace-list-name To delete an trace list configuration, use the no ip trace-group trace-list-name command. Parameters Defaults Command Modes Usage Information trace-list-name Enter the name of a configured trace list. Not enabled. CONFIGURATION You can assign one Trace list to the chassis.
PAGE 1380
www.dell.com | support.dell.com permit e Syntax permit {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host ip-address} [count [byte]| log] To remove this filter, you have two choices: • • Parameters Defaults Command Modes Related Commands 1380 Configure a filter to pass IP packets meeting the filter criteria.
PAGE 1381
permit tcp e Configure a filter to pass TCP packets meeting the filter criteria.
PAGE 1382
www.dell.com | support.dell.com Related Commands ip trace-list Create a trace list. permit Assign a trace list filter to forward IP packets. permit udp Assign a trace list filter to forward UDP packets. permit udp e Configure a filter to pass UDP packets meeting the filter criteria.
PAGE 1383
Command Modes Related Commands TRACE LIST ip trace-list Configure a trace list. permit Assign a trace list filter to forward IP packets. permit tcp Assign a trace list filter to forward TCP packets. seq e Assign a sequence number to a deny or permit filter in a trace list while creating the filter.
PAGE 1384
www.dell.com | support.dell.com port port (OPTIONAL) Enter the application layer port number. Enter two port numbers if using the range logical operand. Range: 0 to 65535 The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent. precedence precedence Enter the keyword precedence followed by a number from 0 to 7 as the precedence value.
PAGE 1385
show ip accounting trace-lists e Syntax Parameters Command Modes View the trace lists created on the switch and the sequence of filters. show ip accounting trace-lists [trace-list-name [linecard number]] trace-list-name (OPTIONAL) Enter the name of the trace list to be displayed. linecard number (OPTIONAL) Enter the keyword linecard followed by the line card number to view the Trace list information on that line card.
PAGE 1386
www.dell.com | support.dell.com clear ip dhcp snooping cs Clear the DHCP binding table. Syntax clear ip dhcp snooping binding Command Modes EXEC Privilege Default Command History Related Commands None Version 7.8.1.0 Introduced on C-Series and S-Series show ip dhcp snooping Display the contents of the DHCP binding table. ip dhcp relay Enable Option 82.
PAGE 1387
Command History Usage Information Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on C-Series and S-Series When enabled, no learning takes place until snooping is enabled on a VLAN. Upon disabling DHCP Snooping the binding table is deleted, and Option 82, IP Source Guard, and Dynamic ARP Inspection are disabled. ip dhcp snooping vlan Enable DHCP Snooping on one or more VLANs.
PAGE 1388
www.dell.com | support.dell.com interface type Enter the keyword interface followed by the type of interface to which the host is connected. • • • • • Command Modes For an 10/100 Ethernet interface, enter the keyword fastethernet. For a Gigabit Ethernet interface, enter the keyword gigabitethernet. For a SONET interface, enter the keyword sonet. For a Ten Gigabit Ethernet interface, enter the keyword tengigabitethernet. For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE.
PAGE 1389
ip dhcp snooping trust Configure an interface as trusted. cs Syntax [no] ip dhcp snooping trust Command Modes INTERFACE Default Command History Untrusted Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on C-Series and S-Series ip dhcp source-address-validation Enable IP Source Guard. cs Syntax [no] ip dhcp source-address-validation Command Modes INTERFACE Default Command History Disabled Version 8.3.19.
PAGE 1390
www.dell.com | support.dell.com Command History Usage Information Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.8.1.0 Introduced on C-Series and S-Series When enabled the system begins creating entries in the binding table for the specified VLAN(s). Note that learning only happens if there is a trusted port in the VLAN. Configure an interface as trusted.
PAGE 1391
47 Service Provider Bridging Overview Service Provider Bridging is composed of VLAN Stacking, Layer 2 Protocol Tunneling, and Provider Backbone Bridging as described in the FTOS Configuration Guide Service Provider Bridging chapter. This chapter includes CLI information for FTOS Layer 2 Protocol Tunneling (L2PT). L2PT enables protocols to tunnel through an 802.1q tunnel.
PAGE 1392
www.dell.com | support.dell.com • • • • • • The default behavior is to disable protocol packet tunneling through the 802.1q tunnel. Rate-limiting is required to protect against BPDU attacks. A port channel (including through LACP) can be configured as a VLAN-Stack access or trunk port. ARP packets work as expected across the tunnel. FEFD works the same as with Layer 2 links.
PAGE 1393
Command History Version 8.3.19.0 Introduced on S4820T Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduced on the C-Series, E-Series and E-Series ExaScale. Version 7.4.1.0 Introduced protocol-tunnel ces Enable protocol tunneling on a stacked (Q-in-Q) VLAN for specified protocol packets.
PAGE 1394
www.dell.com | support.dell.com Version 8.2.1.0 Introduced on the C-Series, E-Series and E-Series ExaScale. Version 7.4.1.
PAGE 1395
Defaults Disabled Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.4.1.0 Introduced Usage Information FTOS must have the default CAM profile with the default microcode before you enable L2PT. protocol-tunnel rate-limit ces Enable traffic rate limiting per box. Syntax protocol-tunnel rate-limit rate To reset the rate limit to the default, use the no protocol-tunnel rate-limit rate command.
PAGE 1396
www.dell.com | support.dell.com show protocol-tunnel ces Display protocol tunnel information for all or a specified VLAN-Stack VLAN. Syntax Parameters show protocol-tunnel [vlan vlan-id] vlan vlan-id Defaults No default values or behavior Command Modes Command History EXEC Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduced on the C-Series, E-Series and E-Series ExaScale. Version 7.4.1.
PAGE 1397
48 sFlow Overview sFlow commands are supported by FTOS on all Dell Force10 platforms as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , or . FTOS sFlow monitoring system includes an sFlow Agent and an sFlow Collector. The sFlow Agent combines the flow samples and interface counters into sFlow datagrams and forwards them to the sFlow Collector.
PAGE 1398
www.dell.com | support.dell.com • • The destination VLAN field in the extended switch element will not be packed in case of a multicast packet.
PAGE 1399
Defaults Command Modes Command History Usage Information number (OPTIONAL) Enter the UDP port number (User Datagram Protocol). Range: 0 to 65535 Default: 6343 max-datagram-size number (OPTIONAL) Enter the keyword max-datagram-size followed by the size number in bytes. Range: 400 to 1500 Default: 1400 Not configured CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.4.2.3 Support for IPv6 sFlow collectors and agents was added on the E-series TeraScale, C-Series, and S-Series. Version 8.
PAGE 1400
www.dell.com | support.dell.com sflow enable (Global) ces Syntax Enable sFlow globally. sflow enable To disable sFlow, use the no sflow enable command. Defaults Command Modes Command History Usage Information Related Commands sFlow is disabled by default CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduces on S-Series Stacking Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.7.1.0 Introduced on S-Series Version 7.6.1.
PAGE 1401
Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.7.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series Version 6.2.1.1 Introduced on E-Series Usage Information When sFlow is enable on an interface, flow sampling is done on any traffic going out of the interface. Note: Once a physical port is a member of a LAG, it will inherit the sFlow configuration from the LAG port.
PAGE 1402
www.dell.com | support.dell.com Example Related Commands FTOS#show sflow sFlow services are enabled Global default sampling rate: 64 Global default counter polling interval: 1000 Global extended information enabled: gateway, router, switch 1 collectors configured Collector IP addr: 20.20.20.2, Agent IP addr: 10.11.201.
PAGE 1403
sflow extended-switch enable ces Enable packing information on a switch only. Syntax sflow extended-switch enable To disable packing information, use the no sflow extended-switch [enable] command. Parameters Defaults Command Modes Command History Usage Information Related Commands enable Enter the keyword enable to enable global extended information. Disabled CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.
PAGE 1404
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History Usage Information Related Commands interval value Enter the interval value in seconds. Range: 15 to 86400 seconds Default: 20 seconds 20 seconds CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduces on S-Series Stacking Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.7.1.0 Introduced on S-Series Version 7.6.1.
PAGE 1405
Version 8.2.1.0 Introduces on S-Series Stacking Version 8.1.1.0 Introduced on E-Series ExaScale Version 7.7.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series Version 6.2.1.1 Introduced on E-Series Usage Information Related Commands This command sets the counter polling interval for an interface. sflow polling-interval (Global) Globally set the polling interval sflow sample-rate (Global) ces Change the global default sampling rate.
PAGE 1406
www.dell.com | support.dell.com Usage Information Related Commands Sample-rate is the average number of packets skipped before the sample is taken. This command changes the global default sampling rate. You can configure an interface to use a different sampling rate than the global sampling rate. If the value entered is not a correct power of 2, the command generates an error message with the previous and next power of 2 value. Select one of these two packet numbers and re-enter the command.
PAGE 1407
show sflow ces Syntax Parameters Command Modes Display the current sFlow configuration show sflow [interface] interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 1408
www.dell.com | support.dell.com Usage Information The dropEvent counter (sFlow samples dropped due to sub-sampling) shown in red in the example above will always display a value of zero. show sflow linecard ces Syntax Parameters Command Modes Display the sFlow information on a line card. show sflow linecard {slot number} slot number (OPTIONAL) Enter a slot number to view information on the line card in that slot. Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.
PAGE 1409
Simple Network Management Protocol and Syslog Overview This chapter contains commands to configure and monitor SNMP v1/v2/v3 and Syslog. Both features are supported on the C-Series, E-Series, S-Series, and Z-Series platforms, as indicated by the following symbols under each of the command headings: e E-Series, c C-Series, s S-Series, , , or z Z-Series.
PAGE 1410
www.dell.com | support.dell.com The Simple Network Management Protocol (SNMP) is used to communicate management information between the network management stations and the agents in the network elements. FTOS supports SNMP versions 1, 2c, and 3, supporting both read-only and read-write modes. FTOS sends SNMP traps, which are messages informing an SNMP management system about the network. FTOS supports up to 16 SNMP trap receivers.
PAGE 1411
Example Related Commands FTOS#show snmp 32685 SNMP packets input 0 Bad SNMP version errors 0 Unknown community name 0 Illegal operation for community name supplied 0 Encoding errors 96988 Number of requested variables 0 Number of altered variables 31681 Get-request PDUs 968 Get-next PDUs 0 Set-request PDUs 61727 SNMP packets output 0 Too big errors (Maximum packet size 1500) 9 No such name errors 0 Bad values errors 0 General errors 32649 Response PDUs 29078 Trap PDUs FTOS# snmp-server community Enable
PAGE 1412
www.dell.com | support.dell.com show snmp group cesz Syntax Command Modes Display the group name, security model, status, and storage type of each group. show snmp group EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.
PAGE 1413
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series E-Series legacy command snmp ifmib ifalias long cesz Syntax Defaults Command Modes Command History Example Display the entire description string through the Interface MIB, which would otherwise be truncated to 63 characters.
PAGE 1414
www.dell.com | support.dell.
PAGE 1415
• v1v2cwriteu/ v1v2cwriteg — maps to a community with rw (read-write) permissions This command is indexed by the community-name parameter. If the snmp-server community command is not configured, you cannot query SNMP data. Only Standard IPv4 ACL and IPv6 ACL is supported in the optional access-list-name. The command options ipv6, security-name, and access-list-name are recursive.
PAGE 1416
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series E-Series legacy command snmp-server enable traps cesz Syntax Enable SNMP traps. snmp-server enable traps [notification-type] [notification-option] To disable traps, use the no snmp-server enable traps [notification-type] [notification-option] command.
PAGE 1417
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 8.4.1.0 Support was added for VRRP traps. Version 7.6.1.0 Support added for S-Series; Added support for STP and xSTP traps. Version 7.5.1.0 Support added for C-Series E-Series legacy command Usage Information FTOS supports up to 16 SNMP trap receivers.
PAGE 1418
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series E-Series legacy command Usage Information Changing the value of the SNMP Engine ID has important side effects.
PAGE 1419
Parameters group_name Enter a text string (up to 20 characters long) as the name of the group. Defaults: The following groups are created for mapping to read/write community/security-names. • v1v2creadg — maps to a community/security-name with ro permissions • 1v2cwriteg — maps to a community/security-name rw permissions 1 | 2c | 3 (OPTIONAL) Enter the security model version number (1, 2c, or 3). • 1 is the least secure version • 3 is the most secure of the security modes.
PAGE 1420
www.dell.com | support.dell.com Version 7.5.1.0 Support added for C-Series E-Series legacy command Usage Information The following example specifies the group named harig as a version 3 user requiring both authentication and encryption and read access limited to the read named rview. Note: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP; TCP, ICMP rules are not valid for SNMP. In IPv6 ACLs port rules are not valid for SNMP.
PAGE 1421
version 1 | 2c | 3 (OPTIONAL) Enter the keyword version to specify the security model followed by the security model version number 1, 2c, or 3. • Version 1 is the least secure version • version 3 is the most secure of the security modes. • Version 2c allows transmission of informs and counter 64, which allows for integers twice the width of what is normally allowed. Default: Version 1 auth (OPTIONAL) Enter the keyword auth to specify authentication of a packet without encryption.
PAGE 1422
www.dell.com | support.dell.com Usage Information In order to configure the router to send SNMP notifications, you must enter at least one snmp-server host command. If you enter the command with no keywords, all trap types are enabled for the host. If you do not enter an snmp-server host command, no notifications are sent. In order to enable multiple hosts, you must issue a separate snmp-server host command for each host. You can specify multiple notification types in the command for each host.
PAGE 1423
Defaults Command Modes Command History Not configured. CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.
PAGE 1424
www.dell.com | support.dell.com Parameter Defaults Command Modes Command History interface Enter the following keywords and slot/port or number information: • For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.
PAGE 1425
Parameters name Enter the name of the user (not to exceed 20 characters), on the host, that connects to the agent. group_name Enter a text string (up to 20 characters long) as the name of the group. Defaults: The following groups are created for mapping to read/write community/security-names.
PAGE 1426
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.10.2 Added access parameter support Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series E-Series legacy command Usage Information Note: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP; TCP, ICMP rules are not valid for SNMP. In IPv6 ACLs port rules are not valid for SNMP.
PAGE 1427
snmp-server view cesz Configure an SNMPv3 view. Syntax snmp-server view view-name oid-tree {included | excluded} To remove an SNMPv3 view, use the no snmp-server view view-name oid-tree {included | excluded}} command. Parameters Defaults Command Modes Command History view-name Enter the name of the view (not to exceed 20 characters). oid-tree Enter the OID sub tree for the view (not to exceed 20 characters). included (OPTIONAL) Enter the keyword included to include the MIB family in the view.
PAGE 1428
www.dell.com | support.dell.com To disable sending link trap messages, enter no snmp trap link-status. Defaults Command Modes Command History Enabled. INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series E-Series legacy command Usage Information If the interface is expected to flap during normal usage, you could disable this command.
PAGE 1429
clear logging cesz Syntax Defaults Command Modes Command History Clear the messages in the logging buffer. clear logging None. EXEC Privilege Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series E-Series legacy command Related Commands show logging Display logging settings and system messages in the internal buffer.
PAGE 1430
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series E-Series legacy command Related Commands logging console Set the logging console parameters. default logging monitor cesz Return to the default settings for messages logged to the terminal.
PAGE 1431
Version 7.5.1.0 Support added for C-Series E-Series legacy command Related Commands logging trap Limit messages logged to the Syslog servers based on severity. logging cesz Configure an IP address or host name of a Syslog server where logging messages will be sent. Multiple logging servers of both IPv4 and/or IPv6 can be configured. Syntax logging {ipv4-address | ipv6-address | hostname} To disable logging, enter no logging. Parameters ipv4-address | ipv6-address Enter an IPv4 address (A.B.C.
PAGE 1432
www.dell.com | support.dell.com Parameters level (OPTIONAL) Indicate a value from 0 to 7 or enter one of the following equivalent words: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging. Default: 7 or debugging. size (OPTIONAL) Indicate the size, in bytes, of the logging buffer. The number of messages buffered depends on the size of each message. Range: 40960 to 524288. Default: 40960 bytes.
PAGE 1433
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series E-Series legacy command Related Commands clear logging Clear logging buffer. default logging console Returns the logging console parameters to the default setting. show logging Display logging settings and system messages in the internal buffer.
PAGE 1434
www.dell.com | support.dell.com Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series E-Series legacy command Related Commands logging Enable logging to a Syslog server. logging on Enables logging.
PAGE 1435
logging history size c es z Specify the number of messages stored in the FTOS logging history table. Syntax logging history size size To return to the default values, enter no logging history size. Parameters size Defaults 1 message Command Modes Command History Indicate a value as the number of messages to be stored. Range: 0 to 500. Default: 1 message. CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.
PAGE 1436
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series E-Series legacy command Related Commands default logging monitor Returns the logging monitor parameters to the default setting.
PAGE 1437
To disable this command and return to the default setting, enter no logging source-interface. Parameters interface Enter the following keywords and slot/port or number information: • For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For Loopback interfaces, enter the keyword loopback followed by a number from zero (0) to 16383.
PAGE 1438
www.dell.com | support.dell.com Syntax logging synchronous [level level | all] [limit number-of-buffers] To disable message synchronization, use the no logging synchronous [level level | all] [limit number-of-buffers] command. Parameters Defaults Command Modes Command History all Enter the keyword all to ensure that all levels are printed asynchronously. level level Enter the keyword level followed by a number as the severity level. A high number indicates a low severity level and visa versa.
PAGE 1439
To return to the default values, enter default logging trap. To disable logging, enter no logging trap. Parameters level Defaults 6 or informational Command Modes Command History Indicate a value from 0 to 7 or enter one of the following parameters: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging. The default is 6. CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.
PAGE 1440
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.11.1 Introduced on Z9000 Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.
PAGE 1441
Command Modes EXEC EXEC Privilege Command History Version 8.3.11.1 Introduced on Z9000 Version 7.6.1.0 Introduced for S-Series Usage Information This command displays internal software driver information, which may be useful during troubleshooting switch initialization errors, such as a downed Port-Pipe. terminal monitor cesz Syntax Configure the FTOS to display messages on the monitor/terminal. terminal monitor To return to default settings, enter terminal no monitor.
PAGE 1442
www.dell.com | support.dell.
PAGE 1443
50 S-Series Stacking Commands Overview All commands in this chapter are specific to the S-Series s, , and platforms as indicated by the characters that appear under each of the command headers. The commands are always available and operational, whether or not the S-Series has a stacking module inserted. You can use the commands to pre-configure a switch, so that the configuration settings are invoked when the switch is attached to other S-Series units.
PAGE 1444
www.dell.com | support.dell.
PAGE 1445
Syntax redundancy force-failover stack-unit Defaults Not enabled Command Modes EXEC Privilege reset stack-unit s Reset any designated stack member except the management unit (master unit). Syntax Parameters Default reset stack-unit 0-11 hard 0-11 Enter the stack member unit identifier of the stack member to reset. hard Reset the stack unit if the unit is in a problem state. none Command Modes EXEC Command History Version 8.3.1.0 Added hard reset option. Version 7.8.1.
PAGE 1446
www.dell.com | support.dell.com Related Commands reload Reboot FTOS. upgrade (S-Series management unit and Z9000) Reset the designated S-Series stack member. show redundancy s Syntax Command Modes Display the current redundancy configuration (status of automatic reboot configuration on stack management unit). show redundancy EXEC EXEC Privilege Command History Example Version 7.7.1.
PAGE 1447
Stack Unit Config: Start-up Config: Runtime Event Log: Running Config: ACL Mgr: LACP: STP: SPAN: Related Commands succeeded Jul 11 2012 succeeded Jul 11 2012 succeeded Jul 11 2012 succeeded Jul 11 2012 succeeded Jul 11 2012 no block sync done no block sync done no block sync done redundancy disable-auto-reboot 09:42:35 09:42:35 09:42:35 09:42:35 09:42:35 Prevent the system from auto-rebooting if it fails.
PAGE 1448
www.dell.com | support.dell.com 1/49 1/50 2/49 2/51 2/52 FTOS# Example (topology) 12 12 24 12 12 up up up up up up up up up down FTOS# show system stack-ports topology Topology: Ring Interface Connection ---------------------0/49 1/49 0/50 0/51 2/49 1/49 0/49 1/50 2/51 2/49 0/51 2/51 1/50 2/52 FTOS# Table 50-1.
PAGE 1449
Parameters 0-7 Enter the stack member unit identifier, from 0 to 7, of the switch on which you want to set the management priority. 1-14 This preference parameter allows you to specify the management priority of one backup switch over another, with 0 the lowest priority and 14 the highest. The switch with the highest priority value will be chosen to become the management unit if the active management unit fails or on the next reload.
PAGE 1450
www.dell.com | support.dell.com stack-unit renumber Change the stack member ID of any stack member or a stand-alone S-Series. s Syntax Parameters stack-unit 0-11 renumber 0-11 0-11 Defaults none Command Modes Command History The first instance of this value is the stack member unit identifier of the switch that you want add to the stack. Range: 0-11. The second instance of this value is the desired new unit identifier number. EXEC Privilege Version 8.3.19.0 Introduced on S4820T Version 7.7.1.
PAGE 1451
Parameters unit-id Enter the stack unit ID. stack-group-id Enter the stack group ID. Range is 0 to 15. Defaults None Command Mode Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Reset command mode from EXEC to CONFIGURATION. Version 8.3.10.2 Introduced on S4810 Usage Information The following message displays to confirm the command. Warning: Setting ports Fo 0/60 as stack group will make their interface configs obsolete after a reload.
PAGE 1452
www.dell.com | support.dell.com Command History 1452 Version 8.3.19.0 Introduced on S4820T Version 7.7.1.0 Introduced on S-Series Usage Information Related Commands | To reboot using the new image, use the command upgrade boot system stack-unit. reload Reboot FTOS. reset stack-unit Reset the designated S-Series stack member. show system (S-Series, S4810 and S4820T) Display the current status of all stack members or a specific member.
PAGE 1453
51 Storm Control Overview The FTOS Storm Control feature allows users to limit or suppress traffic during a traffic storm (Broadcast/Unknown Unicast Rate Limiting, or Multicast on the C-Series and S-Series). Support for particular Dell Force10 platforms (C-Series, E-Series, or S-Series) is indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series, , or .
PAGE 1454
www.dell.com | support.dell.com • • • • When storm control is applied on an interface, the percentage of storm control applied is calculated based on the advertised rate of the line card. It is not based on the speed setting for the line card. Do not apply per-VLAN QoS on an interface that has storm control enabled (either on an interface or globally).
PAGE 1455
Example (E-Series) Version 7.5.1.0 Introduced on C-Series Version 6.5.1.0 Introduced on E-Series FTOS#show storm-control broadcast gigabitethernet 11/11 Broadcast storm control configuration Interface Direction Percentage Wred Profile -------------------------------------------------------------Gi 11/11 Ingress 5.6 Gi 11/11 FTOS# Example (C-Series) Egress 5.
PAGE 1456
www.dell.com | support.dell.
PAGE 1457
Example (E-Series) FTOS#show storm-control unknown-unicast gigabitethernet 11/1 Unknown-unicast storm control configuration Interface Direction Percentage Wred Profile -------------------------------------------------------------Gi 11/1 Ingress 5.9 Gi 11/1 Egress 5.
PAGE 1458
www.dell.com | support.dell.com Usage Information Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series Version 7.4.1.0 E-Series Only: Added percentage decimal value option Version 6.5.1.0 Introduced on E-Series Broadcast storm control is valid on Layer 2/Layer 3 interfaces only. Layer 2 broadcast traffic is treated as unknown-unicast traffic.
PAGE 1459
storm-control multicast (Configuration) Configure the packets per second (pps) of multicast traffic allowed in to the C-Series and S-Series networks only. cs Syntax storm-control multicast packets_per_second in To disable storm-control for multicast traffic into the network, use the no storm-control multicast packets_per_second in command.
PAGE 1460
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on C-Series and S-Series storm-control unknown-unicast (Configuration) ces Syntax Configure the percentage of unknown-unicast traffic allowed in or out of the network.
PAGE 1461
storm-control unknown-unicast (Interface) ces Syntax Configure percentage of unknown-unicast traffic allowed on an interface (ingress only). storm-control unknown-unicast [percentage decimal_value in] | [wred-profile name]] [packets_per_second in] To disable unknown-unicast storm control on the interface, use the no storm-control unknown-unicast [percentage decimal_value in] | [wred-profile name]] [packets_per_second in] command.
PAGE 1462
| Storm Control www.dell.com | support.dell.
PAGE 1463
52 Spanning Tree Protocol (STP) Overview The commands in this chapter configure and monitor the IEEE 802.1d Spanning Tree protocol (STP) and are supported on the Dell Force10 switch/routing platforms, as indicated by the characters under the command headings: e E-Series, c C-Series, s S-Series, , or .
PAGE 1464
www.dell.com | support.dell.com Parameters priority-value Enter a number as the bridge priority value. Range: 0 to 65535. Default: 32768. primary Enter the keyword primary to designate the bridge as the root bridge. secondary Enter the keyword secondary to designate the bridge as a secondary root bridge. Defaults priority-value Command Modes Command History = 32768 SPANNING TREE (The prompt is “config-stp”.) Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.
PAGE 1465
Command History Usage Information Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series When you enable debug spanning-tree bpdu for multiple interfaces, the software only sends information on BPDUs for the last interface specified. protocol spanning-tree Enter SPANNING TREE mode on the switch.
PAGE 1466
www.dell.com | support.dell.com Defaults Enabled (that is, Spanning Tree Protocol is disabled.) Command Modes Command History Related Commands SPANNING TREE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series protocol spanning-tree Enter SPANNING TREE mode.
PAGE 1467
hello-time ces Syntax Set the time interval between generation of Spanning Tree Bridge Protocol Data Units (BPDUs). hello-time seconds To return to the default value, enter no hello-time. Parameters Defaults Command Modes Command History Related Commands seconds Enter a number as the time interval between transmission of BPDUs. Range: 1 to 10. Default: 2 seconds. 2 seconds SPANNING TREE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.
PAGE 1468
www.dell.com | support.dell.com Command History Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series forward-delay Change the wait time before STP transitions to the Forwarding state. hello-time Change the time interval between BPDUs.
PAGE 1469
show config ces Display the current configuration for the mode. Only non-default values are displayed. show config Syntax Command Modes Command History SPANNING TREE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.7.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.
PAGE 1470
www.dell.com | support.dell.com interface interface • • • • Command Modes Usage Information Command History 1470 (OPTIONAL) Enter the keyword interface and the type slot/port of the interface you want displayed. Type slot/port options are the following: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a SONET interface, enter the keyword sonet followed by the slot/port information.
PAGE 1471
Example FTOS#show spann 0 Executing IEEE compatible Spanning Tree Protocol Bridge Identifier has priority 32768, Address 0001.e800.0a56 Configured hello time 2, max age 20, forward delay 15 We are the root of the spanning tree Current root has priority 32768 address 0001.e800.
PAGE 1472
www.dell.com | support.dell.com Table 52-1. Field Description “Number of...” Displays the number of topology changes, the time of the last topology change, and on what interface the topology change occurred. “Timers” Lists the values for the following bridge timers: hold time, topology change, hello time, max age, and forward delay. “Times” List the number of seconds since the last: • hello time • topology change • notification • aging “Port 1...
PAGE 1473
Table 52-2. show spanning-tree 0 guard Command Example Information Field Description Sts Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS), blocking (BLK), or shut down (EDS Shut) Guard Type Type of STP guard configured (Root, Loop, or BPDU guard) spanning-tree 0 ces Assigns a Layer 2 interface to STP instance 0 and configures a port cost or port priority, or enables loop guard, root guard, or the Portfast feature on the interface.
PAGE 1474
www.dell.com | support.dell.com Command Modes Command History Usage Information INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.19.1 Introduced the loopguard and rootguard options on the S4820T. Version 8.3.10.1 Introduced the loopguard and rootguard options on the S4810. Version 8.4.2.1 Introduced the loopguard and rootguard options on the E-Series TeraScale, C-Series, and S-Series. Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduced shutdown-on-violation option.
PAGE 1475
53 System Time and Date Overview The commands in this chapter configure time values on the system, either using FTOS, or the hardware, or using the Network Time Protocol (NTP). With NTP, the switch can act only as a client to an NTP clock host. For details, the “Network Time Protocol” section of the Management chapter in the FTOS Configuration Guide.
PAGE 1476
www.dell.com | support.dell.com • • show ntp associations show ntp status calendar set ces Set the time and date for the switch hardware clock. Syntax Parameters calendar set time month day year time Enter the time in hours:minutes:seconds. For the hour variable, use the 24-hour format, for example, 17:15:00 is 5:15 pm. month Enter the name of one of the 12 months in English. You can enter the name of a day to change the order of the display to time day month year.
PAGE 1477
Related Commands clock read-calendar Set the software clock based on the hardware clock. clock set Set the software clock. clock update-calendar Set the hardware clock based on the software clock. show clock Display clock settings. clock read-calendar ces Set the software clock on the switch from the information set in hardware clock (calendar). Syntax clock read-calendar Defaults Not configured. Command Modes EXEC Privilege Command History Version 8.3.19.
PAGE 1478
www.dell.com | support.dell.com day Enter the number of the day. Range: 1 to 31. You can enter the name of a month to change the order of the display to time month day year. year Enter a four-digit number as the year. Range: 1993 to 2035. Defaults Not configured Command Modes Command History EXEC Privilege Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.
PAGE 1479
Defaults Command Modes Command History Related Commands start-day Enter the number of the day. Range: 1 to 31. You can enter the name of a month to change the order of the display to time day month year. start-year Enter a four-digit number as the year. Range: 1993 to 2035. start-time Enter the time in hours:minutes. For the hour variable, use the 24-hour format, example, 17:15 is 5:15 pm. end-day Enter the number of the day. Range: 1 to 31.
PAGE 1480
www.dell.com | support.dell.com Syntax clock summer-time time-zone recurring [start-week start-day start-month start-time end-week end-day end-month end-time [offset]] To delete a daylight saving time zone configuration, enter no clock summer-time. Parameters time-zone Enter the three-letter name for the time zone. This name is displayed in the show clock output. You can enter up to eight characters.
PAGE 1481
Related Commands Version 7.4.1.0 Updated the start-day and end-day options to allow for using the three-letter abbreviation of the weekday name. pre-Version 6.1.1.0 Introduced for E-Series calendar set Set the hardware clock. clock summer-time date Set a date (and time zone) on which to convert the switch to daylight saving time on a one-time basis. show clock Display the current clock settings. clock timezone ces Configure a timezone for the switch.
PAGE 1482
www.dell.com | support.dell.com clock update-calendar ces Set the switch hardware clock based on the software clock. Syntax clock update-calendar Defaults Not configured. Command Modes EXEC Privilege Command History Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series Usage Information Related Commands Use this command only if you are sure that the hardware clock is inaccurate and the software clock is correct.
PAGE 1483
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series ntp authenticate ces Enable authentication of NTP traffic between the switch and the NTP time serving hosts. Syntax ntp authenticate To disable NTP authentication, enter no ntp authentication. Defaults Not enabled. Command Modes Command History CONFIGURATION Version 8.3.19.
PAGE 1484
www.dell.com | support.dell.com 0 Specify that authentication key will be entered in an unencrypted format (default). 7 Specify that the authentication key will be entered in DES encrypted format. key Enter the authentication key in the previously specified format. Defaults NTP authentication is not configured by default. If you do not specify the option [0 | 7], 0 is selected by default. Command Modes Command History CONFIGURATION Version 8.2.1.
PAGE 1485
Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series ntp disable ces Syntax Prevent an interface from receiving NTP packets. ntp disable To re-enable NTP on an interface, enter no ntp disable. Default Command Modes Command History Disabled (that is, if an NTP host is configured, all interfaces receive NTP packets) INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.
PAGE 1486
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on S4820T Version 8.4.1.0 Added support for IPv6 multicast addresses. Version 8.3.7.0 Introduced on S4810 pre-Version 6.1.1.0 Introduced for E-Series ntp server ces Configure an NTP time-serving host. Syntax Parameters ntp server {hostname | ipv4-address | ipv6-address} [key keyid] [prefer] [version number] ipv4-address | ipv6-address Enter an IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X).
PAGE 1487
Syntax ntp source interface To delete the configuration, enter no ntp source. Parameters interface Defaults Not configured. Command Modes Command History Enter the following keywords and slot/port or number information: • For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 1488
www.dell.com | support.dell.com Command History Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series Usage Information Related Commands The number parameter in the ntp trusted-key command must be the same number as the number parameter in the ntp authentication-key command. If you change the ntp authentication-key command, you must also change the ntp trusted-key command.
PAGE 1489
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.0 Introduced for E-Series Example Related Commands FTOS#show calendar 16:33:30 UTC Tue Jun 26 2001 FTOS# show clock Display the time and date from the switch software clock. show clock ces Display the current clock settings.
PAGE 1490
www.dell.com | support.dell.com show ntp associations ces Display the NTP master and peers. Syntax show ntp associations Command Modes EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Support added for S-Series Version 7.5.1.0 Support added for C-Series pre-Version 6.1.1.
PAGE 1491
Table 53-1. Related Commands show ntp associations Command Fields Field Description offset Displays the relative time of the NTP peer’s clock to the switch clock (in milliseconds). disp Displays the dispersion. show ntp status Display current NTP status. show ntp status ces Display the current NTP status. Syntax show ntp status Command Modes EXEC EXEC Privilege Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.
PAGE 1492
www.dell.com | support.dell.com Table 53-2. 1492 Related Commands | show ntp status Command Example Information Field Description “clock offset is...” Displays the system offset to the synchronized peer and the time delay on the path to the NTP root clock. “root dispersion is...” Displays the root and path dispersion. “peer mode is...” State what NTP mode the switch is. This should be client mode.
PAGE 1493
54 S4810 and S4820T u-Boot Overview All commands in this chapter are in u-Boot. These commands are supported on the platforms only. Dell Force10 and To access this mode, hit any key when the following line appears on the console during a system boot: Hit any key to stop autoboot: You enter u-Boot immediately, as indicated by the => prompt. Note: This chapter discusses only a few commands available in uBoot.
PAGE 1494
www.dell.com | support.dell.com Command History Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Example => printenv baudrate=9600 uboot_filesize=0x80000 bootfile=FTOS-SC-1.2.0.0E3.bin bootcmd=echo Booting primary bootline....;$primary_boot;boot;echo Failed;echo Booting secondary bootline....;$secondary_boot;boot;echo Failed;echo Booting default bootline....;$default_boot;boot;echo Failed;echo Rebooting...
PAGE 1495
reset Reload the S4810 or S4820T system. Syntax Command Modes Command History Usage Information reset uBoot Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. You must save your changes before resetting the system, or all changes will be lost. save Save configurations created in uBoot. Syntax Command Modes Command History Usage Information save uBoot Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810.
PAGE 1496
www.dell.com | support.dell.com secondary_image Enter the keywords secondary_image to configure boot parameters used if the primary operating system boot selection is not available. default_image Enter the keywords default_image to configure boot parameters used if the secondary operating system boot parameter selection is not available. The default location should always be the internal flash device (flash:), and a verified image should be stored there.
PAGE 1497
55 Uplink Failure Detection (UFD) Overview Uplink Failure Detection (UFD) provides detection of the loss of upstream connectivity and, if used with NIC teaming, automatic recovery from a failed link. Uplink Failure Detection is supported on the following platforms: s (S50 only), , and .
PAGE 1498
www.dell.com | support.dell.com Parameters interface interface Specifies one or more downstream interfaces.
PAGE 1499
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 8.4.2.3 Introduced on the S-Series S50. Usage Information Related Commands To turn off debugging event messages, enter the no debug uplink-state-group [group-id] command. clear ufd-disable Re-enable downstream interfaces that are in a UFD-disabled error state. description s S50 only Enter a text description of an uplink-state group.
PAGE 1500
www.dell.com | support.dell.
PAGE 1501
Defaults The auto-recovery of UFD-disabled downstream ports is enabled. Command Modes Command History UPLINK-STATE-GROUP Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 8.4.2.3 Introduced on the S-Series S50. Usage Information Related Commands To disable auto-recovery on downstream links, enter the no downstream auto-recover command. downstream Assign a port or port-channel to the uplink-state group as a downstream interface.
PAGE 1502
www.dell.com | support.dell.com Related Commands downstream Assign a port or port-channel to the uplink-state group as a downstream interface. uplink-state-group Create an uplink-state group and enabling the tracking of upstream links. enable s S50 only Syntax Defaults Command Modes Command History Usage Information Related Commands Enable uplink state group tracking for a specific Uplink Failure Detection (UFD) group.
PAGE 1503
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 8.4.2.3 Introduced on the S-Series S50.
PAGE 1504
www.dell.com | support.dell.
PAGE 1505
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 8.4.2.3 Introduced on the S-Series S50. After you enter the command, you enter uplink-state-group configuration mode to assign upstream and downstream interfaces to the group. An uplink-state group is considered to be operationally up if at least one upstream interface in the group is in the link-up state.
PAGE 1506
www.dell.com | support.dell.com Defaults Command Modes Command History Usage Information None UPLINK-STATE-GROUP Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 Version 8.4.2.3 Introduced on the S-Series S50. You can assign physical port or port-channel interfaces to an uplink-state group. You can assign an interface to only one uplink-state group.
PAGE 1507
56 VLAN Stacking Overview With the VLAN-Stacking feature (also called Stackable VLANs and QinQ), you can “stack” VLANs into one tunnel and switch them through the network transparently. This feature is supported by FTOS on all Dell Force10 platforms as indicated by the characters that appear under each of the command headings: e E-Series, c , or .
PAGE 1508
www.dell.com | support.dell.com • If STP is enabled across the Stackable VLAN network, STP BPDUs from the customer’s networks are consumed and not tunneled across the Stackable VLAN network unless protocol tunneling is enabled. Note: For details on protocol tunneling on the E-Series, refer to Chapter 47, Service Provider Bridging. • • • • • Layer 3 protocols are not supported on a Stackable VLAN network.
PAGE 1509
Parameters 0|1 Enter the bit value you want to map to a color. green | red | yellow Choose a color: • • • Defaults Disabled; Packets with an unmapped DEI value are colored green. Command Mode Command History INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.3.1.0 Introduced on C-Series and S-Series. Usage Information Related Commands Green: High priority packets that are the least preferred to be dropped.
PAGE 1510
www.dell.com | support.dell.com Related Commands dei enable member ces Syntax Assign a Stackable VLAN access or trunk port to a VLAN. The VLAN must contain the vlan-stack compatible command in its configuration. member interface To remove an interface from a Stackable VLAN, use the no member interface command.
PAGE 1511
Parameters Enter the interface type followed by the line card slot and port number. interface slot/port linecard number port-set number Command Mode Enter linecard followed by the line card slot number, then enter port-set followed by the port-pipe number. EXEC Privilege Command History Version 8.3.1.0 Example Introduced on C-Series and S-Series.
PAGE 1512
www.dell.com | support.dell.com stack-unit stack-group Configure stacking group specified by ID. Syntax Parameters Defaults Command Mode Command History Usage Information [no] stack-unit unit-id stack-group stack-group-id unit-id Enter the stack unit ID. stack-group-id Enter the stack group ID. Range is 0 to 16. [no] Use no stack-unit unit-id stack-group stack-id to remove the current stack group configuration. N/A CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.10.
PAGE 1513
Version 7.6.1.0 Support added for C-Series and S-Series E-Series original Command Usage Information Prior to enabling this command, you must enter the switchport command to place the interface in Layer 2 mode. To remove the access port designation, the port must be removed (using the no member interface command) from all Stackable VLAN enabled VLANs. vlan-stack compatible ces Syntax Enable the Stackable VLAN feature on a VLAN.
PAGE 1514
www.dell.com | support.dell.com 5 Active M M M M Gi 13/4 Po1(Gi 13/14-15) Gi 13/18 Gi 13/5 FTOS# vlan-stack dot1p-mapping Map C-Tag dot1p values to a S-Tag dot1p value. C-Tag values may be separated by commas and dashed ranges are permitted. Dynamic Mode CoS overrides any Layer 2 QoS configuration in case of conflicts.
PAGE 1515
Command Modes Command History CONFIGURATION Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduced on the E-Series ExaScale. C-Series and S-Series accept both bytes of the 2-byte S-Tag TPID. Version 8.2.1.0 Introduced on the E-Series ExaScale Version 7.6.1.0 Support added for C-Series and S-Series E-Series original Command Usage Information Refer to the FTOS Configuration Guide for specific interoperability limitations regarding the S-Tag TPID.
PAGE 1516
www.dell.com | support.dell.com vlan-stack trunk ces Syntax Specify a Layer 2 port or port channel as a trunk port to the Stackable VLAN network. vlan-stack trunk To remove a trunk port designation from the selected interface, enter no vlan-stack trunk. Defaults Command Modes Command History Not configured. INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 8.2.1.0 Introduced on the E-Series ExaScale Version 7.8.1.
PAGE 1517
In Example 2 below, the Tag Protocol Identifier (TPID) is set to 8848. The “Gi 3/10” port is configured to act as a VLAN-Stack access port, while the “TenGi 8/0” port will act as a VLAN-Stack trunk port, switching Stackable VLAN traffic for VLAN 10, while also switching untagged traffic for VLAN 30 and tagged traffic for VLAN 40. (To allow VLAN 30 traffic, the native VLAN feature is required, by executing the portmode hybrid command. Refer to portmode hybrid in Interfaces.
PAGE 1518
www.dell.com | support.dell.
PAGE 1519
57 Virtual Link Trunking (VLT) Overview Virtual Link Trunking (VLT) is supported on the and platforms. Virtual link trunking (VLT) allows physical links between two chassis to appear as a single virtual link to the network core or other switches such as Edge, Access or ToR. VLT reduces the role of Spanning Tree protocols by allowing LAG terminations on two separate distribution or core switches, and by supporting a loop free topology.
PAGE 1520
www.dell.com | support.dell.com • • • • • • • • • show vlt counter show vlt role show vlt statistics show vlt statistics igmp-snoop system-mac unit-id vlt domain vlt domain peer-link vlt-peer-lag port-channel back-up Configure the backup link for VLT. Syntax back-up Defaults Not configured. Command Modes VLT DOMAIN Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.12.
PAGE 1521
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.8.0 Introduced on S4810 clear vlt statistics Clear the statistics on VLT operations. Syntax clear vlt statistics Command Modes Command History Related Commands EXEC Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 show vlt statistics Display statistics on VLT operations. delay-restore Configure the delay in bringing up VLT ports after reload or peer-link restoration between the VLT peer switches.
PAGE 1522
www.dell.com | support.dell.com • if the Peer VLT device was up at the time the VLTi link failed to the time when it was restored. lacp ungroup member-independent Enable BMP boot for the device connected to the LACP LAG or by a VLT peer device. Syntax lacp ungroup member-independent {vlt | port-channel port-channel-id} Defaults Not configured.
PAGE 1523
Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Introduced on S4810 peer-link port-channel Configure the specified port channel as the chassis interconnect trunk between VLT peers in the domain. Syntax Parameters peer-link port-channel port-channel-number {peer-down-vlan vlan id} port-channelnumber Enter the port-channel number that will act as the interconnect trunk. peer-down-vlan vlan id (Optional) Configure the VLAN that the VLT peer link uses when the VLT peer is down.
PAGE 1524
www.dell.com | support.dell.com Command Modes VLT DOMAIN Usage Information Command History After you configure the VLT domain on each peer switch on both sides of the interconnect trunk, by default, the FTOS software elects a primary and secondary VLT peer device. Use the priority command to reconfigure the primary role of VLT peer switches. Version 8.3.19.0 Introduced on S4820T Version 8.3.8.
PAGE 1525
show vlt backup-link Displays information on backup link operation Syntax show vlt backup-link Defaults Not configured. Command Modes EXEC Example FTOS_VLTpeer1# show vlt backup-link VLT Backup Link ----------------Destination: Peer HeartBeat status: HeartBeat Timer Interval: HeartBeat Timeout: UDP Port: HeartBeat Messages Sent: HeartBeat Messages Received: Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.8.0 Introduced on S4810 10.11.200.
PAGE 1526
www.dell.com | support.dell.
PAGE 1527
FTOS_VLTpeer2# show vlt role VLT Role ---------VLT Role: System MAC address: System Role Priority: Local System MAC address: Local System Role Priority: Secondary 00:01:e8:8a:df:bc 32768 00:01:e8:8a:df:e6 32768 show vlt statistics Displays statistics on VLT operations. Syntax Defaults Command Modes Command History Example show vlt statistics Not configured. EXEC Version 8.3.19.0 Introduced on S4820T Version 8.3.12.0 Added support in output for ARP, MAC and IGMP snooping. Version 8.3.8.
PAGE 1528
www.dell.com | support.dell.com IGMP IGMP IGMP IGMP IGMP IGMP IGMP Reg Request rcvd: 2 Reg Response sent: 1 Reg Response rcvd: 1 PDU Tunnel Pkt sent:5 PDU Tunnel Pkt rcvd:10 Tunnel PDUs sent: 10 Tunnel PDUs rcvd: 19 VLT ARP Statistics ---------------ARP Tunnel Pkts sent:0 ARP Tunnel Pkts Rcvd:0 ARP-sync Pkts Sent:0 ARP-sync Pkts Rcvd:0 ARP Reg Request sent:19 ARP Reg Request rcvd:10 Command History clear vlt statistics Clear statistics on VLT operations.
PAGE 1529
system-mac Configure the MAC address for the VLT domain on a VLT peer switch. Syntax Parameters system-mac mac-address mac-address Defaults Enter a MAC address in the format aaaa.bbbb.cccc. Automatically assigned based on the primary priority and MAC address of each VLT peer. Command Modes VLT DOMAIN Usage Information When you create a VLT domain on a switch, the FTOS software automatically creates a VLT-system MAC address used for internal system operations.
PAGE 1530
www.dell.com | support.dell.com Use this command to minimize the time required for the VLT system to determine the unit ID assigned to each peer switch when one peer reboots. Command History Version 8.3.19.0 Introduced on S4820T Version 8.3.8.0 Introduced on S4810 vlt domain Use this command to enable VLT on a switch, configure a VLT domain, enter VLT-domain configuration mode, set a VLT port delay time, set VLT priorities and configure a VLT peer link.
PAGE 1531
Command History Related Commands Version 8.3.19.0 Introduced on S4820T Version 8.3.8.0 Introduced on S4810 show vlt Use the show vlt brief command to display the delay-restore value. vlt-peer-lag port-channel Associate the port channel to the corresponding port channel in the VLT peer for the VLT connection to an attached device.
PAGE 1532
www.dell.com | support.dell.
PAGE 1533
58 Virtual Router Redundancy Protocol (VRRP) Virtual Router Redundancy Protocol (VRRP) is supported by FTOS on all Dell Force10 platforms, as indicated by the characters that appear under each of the , or command headings: e E-Series, c C-Series, s S-Series, .
PAGE 1534
www.dell.com | support.dell.com advertise-interval ces Set the time interval between VRRP advertisements. Syntax advertise-interval seconds To return to the default settings, enter no advertise-interval. Parameters seconds Defaults 1 second. Command Modes Command History Enter a number of seconds. Range: 1 to 255. Default: 1 second. INTERFACE-VRRP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.
PAGE 1535
Defaults Not configured. Command Modes Command History VRRP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series Usage Information The password is displayed in the show config output if the encryption-type is unencrypted or clear text. If you choose to encrypt the password, the show config displays an encrypted text string.
PAGE 1536
www.dell.com | support.dell.com Parameters interface Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 1537
Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series disable ces Syntax Disable a VRRP group. disable To re-enable a disabled VRRP group, enter no disable. Defaults C and S-Series default: VRRP is enabled. E-Series default: VRRP is disabled. Command Modes Command History Usage Information Related Commands VRRP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.
PAGE 1538
www.dell.com | support.dell.com Defaults zero (0) seconds Command Modes Command History VRRP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.1 Introduced on E-Series Usage Information Related Commands If a switch is a MASTER and you change the hold timer, you must disable and re-enable VRRP for the new hold timer value to take effect. disable Disable a VRRP group.
PAGE 1539
Parameters Defaults Command Modes Command History Usage Information priority Enter a number as the priority. Enter 255 only if the router’s virtual address is the same as the interface’s primary IP address (that is, the router is the OWNER). Range: 1 to 255 Default: 100 100 VRRP Version 8.3.19.0 Introduced on S4820T Version 8.3.7.0 Introduced on S4810 Version 7.6.1.0 Introduced on S-Series Version 7.5.1.0 Introduced on C-Series pre-Version 6.2.1.
PAGE 1540
www.dell.com | support.dell.com show vrrp ces View the VRRP groups that are active. If no VRRP groups are active, the FTOS returns “No Active VRRP group.” Syntax Parameters Command Modes show vrrp [vrrp-id] [interface] [brief] vrrp-id (OPTIONAL) Enter the Virtual Router Identifier for the VRRP group to view only that group. Range: 1 to 255.
PAGE 1541
Table 58-1. Example Command Example Descriptions: show vrrp brief Item Description Interface Lists the interface type, slot and port on which the VRRP group is configured. Grp Displays the VRRP group ID. Pri Displays the priority value assigned to the interface. If the track command is configured to track that interface and the interface is disabled, the cost is subtracted from the priority value assigned to the interface. Pre States whether preempt is enabled on the interface.
PAGE 1542
www.dell.com | support.dell.com Table 58-2. Line Beginning with Command Example Description: show vrrp Description GigabitEthernet 12/ 3... Displays the Interface, the VRRP group ID, and the network address. If the interface is not sending VRRP packets, 0.0.0.0 appears as the network address. State: master... Displays the interface’s state: • Na/If (not available), • master (MASTER virtual router) • backup (BACKUP virtual router) the interface’s priority and the IP address of the MASTER. Hold Down:.
PAGE 1543
Parameters interface Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.
PAGE 1544
www.dell.com | support.dell.com Parameters Defaults Command Modes Command History Usage Information ip-address1 Enter an IP address of the virtual router in dotted decimal format. The IP address must be on the same subnet as the interface’s primary IP address. ... ip-address12 (OPTIONAL) Enter up to 11 additional IP addresses of virtual routers in dotted decimal format. Separate the IP addresses with a space. The IP addresses must be on the same subnet as the interface’s primary IP address.
PAGE 1545
Command Modes Command History Usage Information INTERFACE Version 8.3.19.0 Introduced on S4820T Version 8.3.8.0 Introduced on S4810 This command applies to a single interface.When used in conjunction with the vrrp CLI, the later timer rules the VRRP enabling. For example, if vrrp delay reload is 600 and the vrrp delay minimum is 300: delay reload • • Related Commands When the system reloads, VRRP waits 600 seconds (10 minutes) to bring up VRRP on all interfaces that are up and configured for vrrp.
PAGE 1546
www.dell.com | support.dell.com You must save the configuration and reload the system for the delay timers to take affect. Related Commands vrrp delay minimum Set the delay time for VRRP initialization after a line card reboot. vrrp-group ces Assign a VRRP ID to an interface. You can configure up to 12 VRRP groups per interface. Syntax Parameters Defaults Command Modes Command History Usage Information Related Commands vrrp-group vrrp-id vrrp-id Enter a number as the group ID. Range: 1 to 255.
PAGE 1547
• • • • • • • • • advertise-interval description disable hold-time preempt priority show config track virtual-address clear counters vrrp ipv6 ecs Clear the counters recorded for IPv6 VRRP groups. Syntax Parameters clear counters vrrp ipv6 [vrid | vrf instance] vrid (OPTIONAL) Enter the number of an IPv6 VRRP group. Range: 1 to 255 vrf instance (OPTIONAL) E-Series only: Enter the name of a VRF instance (32 characters maximum) to clear the counters of all IPv6 VRRP groups in the specified VRF.
PAGE 1548
www.dell.com | support.dell.com Parameters interface Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information. • For a Port Channel interface, enter the keyword port-channel followed by a number: E-Series Range: 1 to 255 for TeraScale • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
PAGE 1549
Parameters vrid (OPTIONAL) Enter the Virtual Router Identifier for the VRRP group to view only that group. Range: 1 to 255. interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
PAGE 1550
www.dell.com | support.dell.com Table 58-3. Command Example Description: show vrrp ipv6 State: master... Displays the interface’s state: • Na/If (not available), • master (MASTER virtual router) • backup (BACKUP virtual router) the interface’s priority and the IP address of the MASTER. Hold Down:... This line displays additional VRRP configuration information: • Hold Down displays the hold down timer interval in seconds.
PAGE 1551
Command History Usage Information Version 8.3.19.0 Introduced on S4820T Version 8.4.2.1 The range of valid VRID values on the E-Series when VRF microcode is loaded in CAM changed to 1-15. Version 8.4.1.0 Introduced on E-Series ExaScale, C-Series, and S-Series. Version 8.3.7.0 Introduced on S4810 Version 8.3.2.0 Introduced on E-Series TeraScale The VRRP group only becomes active and sends VRRP packets when a link-local virtual IP address is configured.
PAGE 1552
www.dell.com | support.dell.
PAGE 1553
59 S-Series Debugging and Diagnostics The basic debugging and diagnostic commands are supported by FTOS on all Dell Force10 platforms, as indicated by the characters that appear under each of the command headings: e E-Series, c C-Series, s S-Series (S25/S50), , or . This chapter contains three sections: • • • Offline Diagnostic Commands Buffer Tuning Commands Hardware Commands Offline Diagnostic Commands The offline diagnostics test suite is useful for isolating faults and debugging hardware.
PAGE 1554
www.dell.com | support.dell.com diag stack-unit s Run offline diagnostics on a stack unit. Syntax Parameters diag stack-unit number [alllevels | level0 | level1 | level2] verbose testname number Enter the stack-unit number. Range: 0 to 7 alllevels Enter the keyword alllevels to run the complete set of offline diagnostic tests. level0 Enter the keyword level0 to run Level 0 diagnostics. Level 0 diagnostics check for the presence of various components and perform essential path verifications.
PAGE 1555
Command Mode Command History Related Commands EXEC Privilege H Version 8.3.11.1 Introduced on Z9000 Version 8.2.1.0 Added warning message to off-line diagnostic Version 7.7.1.0 Introduced on S-Series show environment (S-Series) View S-Series system component status (for example, temperature, voltage). H Usage Information You cannot enter this command on a Master or Standby unit. The system reboots when the off-line diagnostics complete. This is an automatic process.
PAGE 1556
www.dell.com | support.dell.com Buffer Tuning Commands The buffer tuning commands are: • • • • • • buffer (Buffer Profile) buffer (Configuration) buffer-profile (Configuration) buffer-profile (Interface) show buffer-profile show buffer-profile interface Warning: Altering the buffer allocations is a sensitive operation. Do not use any buffer tuning commands without first contacting the Dell Force10 Technical Assistance Center.
PAGE 1557
queue2 number Enter this keyword to allocate an amount of buffer space or packet pointers to Queue 2. Dedicated Buffer Range: 0-2013 Dynamic Buffer Range: FP: 0-2013 CSF: 0-131200 (in multiples of 80) Packet Pointer Range: 0-2047 queue3 number Enter this keyword to allocate an amount of buffer space or packet pointers to Queue 3.
PAGE 1558
www.dell.com | support.dell.com Usage Information If you attempt to apply a buffer profile to a non-existent port-pipe, FTOS displays the following message. However, the configuration still appears in the running-config. %DIFFSERV-2-DSA_BUFF_CARVING_INVALID_PORT_SET: Invalid FP port-set 2 for linecard 2.
PAGE 1559
Related Commands Allocate an amount of dedicated buffer space, dynamic buffer space, or packet pointers to queues 0 to 3. buffer (Buffer Profile) Usage Information The buffer-profile global command fails if you have already applied a custom buffer-profile on an interface. Similarly, when buffer-profile global is configured, you cannot not apply buffer-profile on any interface.
PAGE 1560
www.dell.com | support.dell.com Defaults None Command Mode INTERFACE Command History Version 7.7.1.0 Introduced on S-Series Version 7.6.1.0 Introduced on C-Series Example FTOS#show buffer-profile summary fp-uplink Linecard Port-set Buffer-profile 0 0 test1 4 0 test2 FTOS# Related Commands Create a buffer profile that can be applied to an interface. buffer-profile (Configuration) show buffer-profile interface cs Display the buffer profile that is applied to an interface.
PAGE 1561
Related Commands buffer-profile (Configuration) Create a buffer profile that can be applied to an interface. Hardware Commands These commands display information from a hardware sub-component or ASIC. The commands are: • • • • • • • clear hardware stack-unit clear hardware system-flow hardware watchdog show hardware layer2 acl show hardware layer3 show hardware stack-unit show hardware system-flow clear hardware stack-unit s Syntax Parameters Clear statistics from selected hardware components.
PAGE 1562
www.dell.com | support.dell.com Defaults Command Modes Command History Related Commands No default behavior or values EXEC Privilege Version 7.8.1.0 Introduced on S-Series show hardware stack-unit Display the data plane or management plane input and output statistics of the designated component of the designated stack member. clear hardware system-flow s Syntax Parameters Clear system-flow statistics from selected hardware components.
PAGE 1563
Usage Information This command enables a hardware watchdog mechanism that automatically reboots an FTOS switch/router with a single unresponsive unit. This is a last resort mechanism intended to prevent a manual power cycle. show hardware layer2 acl s Syntax Parameters Defaults Command Modes Command History Display Layer 2 ACL data for the selected stack member and stack member port-pipe.
PAGE 1564
www.dell.com | support.dell.com show hardware stack-unit s Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
PAGE 1565
Command Modes EXEC EXEC Privilege Command History Example (data plane statistics) Example (party-bus statistics) Version 8.3.19.0 Added the buffer parameter for S4820T Version 8.3.10.0 Added the buffer parameter for S4810 Version 7.8.1.0 Modified: stack-port keyword range expanded from 49-52 to 0-52; output modified for the cpu data-plane statistics option; the following options were added: drops [unit 0-1 [port 0-27]]; unit 0-1 {counters | details | port-stats [detail] | register} Version 7.7.1.
PAGE 1566
www.dell.com | support.dell.
PAGE 1567
Example (unit 1 register) FTOS#show hardware stack-unit 0 unit 1 register 0x0068003c AGINGCTRMEMDEBUG.mmu0 = 0x00000000 0x0068003d AGINGEXPMEMDEBUG.mmu0 = 0x00000000 0x00680017 ASFCONFIG.mmu0 = 0x0000000e 0x0060004c ASFPORTSPEED.ge0 = 0x00000000 0x0060104c ASFPORTSPEED.ge1 = 0x00000000 0x0060204c ASFPORTSPEED.ge2 = 0x00000000 0x0060304c ASFPORTSPEED.ge3 = 0x00000000 0x0060404c ASFPORTSPEED.ge4 = 0x00000000 0x0060504c ASFPORTSPEED.ge5 = 0x00000000 0x0060604c ASFPORTSPEED.
PAGE 1568
www.dell.com | support.dell.com 0x0e71c102 BCAST_BLOCK_MASK.cpu0 = 0x00000000 0x0b700001 BCAST_STORM_CONTROL.ge0 = 0x00000000 0x0b701001 BCAST_STORM_CONTROL.ge1 = 0x00000000 0x0b702001 BCAST_STORM_CONTROL.ge2 = 0x00000000 0x0b703001 BCAST_STORM_CONTROL.ge3 = 0x00000000 0x0b704001 BCAST_STORM_CONTROL.ge4 = 0x00000000 0x0b705001 BCAST_STORM_CONTROL.ge5 = 0x00000000 0x0b706001 BCAST_STORM_CONTROL.ge6 = 0x00000000 0x0b707001 BCAST_STORM_CONTROL.ge7 = 0x00000000 0x0b708001 BCAST_STORM_CONTROL.
PAGE 1569
The linkStatus of Front End Port 21 is FALSE The linkStatus of Front End Port 22 is FALSE The linkStatus of Front End Port 23 is TRUE The linkStatus of Hg Port 24 is TRUE The linkStatus of Hg Port 25 is TRUE The linkStatus of Hg Port 26 is FALSE The linkStatus of Hg Port 27 is FALSE !------------------ output truncated ---------------! Example (Per Stack Unit buffer statistics) Example (Per Port buffer statistics for specific port) FTOS(conf)#sh hardware stack-unit 0 buffer total-buffer FTOS#sh hardware
PAGE 1570
www.dell.com | support.dell.com Defaults Command Modes Command History Example (layer2 counters) Example (layer2 non-counters) stack-unit 0-7 Enter the keyword stack-unit followed by 0 to 7 to select a stack member ID. port-set 0-1 [counters] Enter the keyword port-set with a port-pipe number — 0 or 1. The S25 models of the S-Series have only port-pipe 0. (OPTIONAL) Enter the keyword counters to display hit counters for the selected ACL or QoS option. No default behavior EXEC Privilege Version 7.8.1.
PAGE 1571
slice=15, slice_idx=0x01, prio=0x7ff, flags=0x82, Installed tcam: color_indep=0, higig=0, higig_mask=0, KEY=0x00000000 00000000 00000000 0180c200 000e0000 00000000 00000000 , FPF4=0x00 MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000 , 0x00 action={act=Drop, param0=0(0x00), param1=0(0x00)}, action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)}, action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)}, action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)}, meter=NULL, counter={idx=1
PAGE 1572
www.dell.com | support.dell.
PAGE 1573
60 SNMP Traps This chapter lists the traps sent by FTOS. Each trap is listed by the fields Message ID, Trap Type, and Trap Option, and the next is the message(s) associated with the trap. Table 60-1. SNMP Traps and Error Messages Message ID Trap Type Trap Option COLD_START SNMP COLDSTART %SNMP-5-SNMP_COLD_START: SNMP COLD_START trap sent.
PAGE 1574
www.dell.com | support.dell.com Table 60-1.
PAGE 1575
Table 60-1.
PAGE 1576
www.dell.com | support.dell.com Table 60-1.