OS10 Enterprise Edition User Guide Release 10.3.
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. Copyright © 2018 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents 1 Getting Started............................................................................................................................................. 17 Download OS10 image and license................................................................................................................................. 17 Installation.....................................................................................................................................................................
do................................................................................................................................................................................. 44 feature config-os9-style........................................................................................................................................... 45 exit..............................................................................................................................................................
View interface configuration...........................................................................................................................................73 Interface commands........................................................................................................................................................ 74 channel-group...........................................................................................................................................................
Link layer discovery protocol...........................................................................................................................................111 Protocol data units.....................................................................................................................................................111 Optional TLVs...........................................................................................................................................................
Interface parameters................................................................................................................................................ 167 Root bridge selection............................................................................................................................................... 168 EdgePort forward traffic.........................................................................................................................................
Weight attribute....................................................................................................................................................... 207 Enable multipath...................................................................................................................................................... 208 Route-map filters.....................................................................................................................................................
View PBR information............................................................................................................................................. 308 PBR commands....................................................................................................................................................... 309 Virtual router redundancy protocol................................................................................................................................
Security commands.................................................................................................................................................352 Simple network management protocol....................................................................................................................... 360 SNMP commands................................................................................................................................................... 360 OS10 image upgrade.....
deny udp................................................................................................................................................................... 386 deny udp (IPv6)....................................................................................................................................................... 387 description..........................................................................................................................................................
seq deny tcp (IPv6)................................................................................................................................................. 410 seq deny udp..............................................................................................................................................................411 seq deny udp (IPv6).................................................................................................................................................
set weight................................................................................................................................................................. 434 show route-map.......................................................................................................................................................434 7 Quality of service.......................................................................................................................................
match precedence....................................................................................................................................................461 match queue............................................................................................................................................................. 461 match vlan................................................................................................................................................................
VLT unicast routing........................................................................................................................................................484 VRRP Optimized Forwarding....................................................................................................................................... 485 View VLT information....................................................................................................................................................
Password recovery........................................................................................................................................................ 520 Restore factory defaults................................................................................................................................................ 521 SupportAssist........................................................................................................................................................
1 Getting Started Dell EMC Networking OS10 Enterprise Edition is a network operating system supporting multiple architectures and environments. The networking world is moving from a monolithic stack to a pick-your-own-world. The OS10 solution is designed to allow disaggregation of the network functionality.
• Install OS10 on a Dell EMC ONIE switch without an operating system (OS) or license installed: • • Device converted from OS9 or a third-party OS after you uninstall (wipe clean) the original OS • Replacement device received from Dell EMC return material authorization (RMA) Upgrade the OS10 image (see Upgrade OS10). Your OS10 purchase allows you to download software images posted within the first 90 days of ownership.
A replacement switch comes without an operation system or license installed. If you receive a replacement switch, you must assign the STAG of the replacement switch to the SW entitlement in DDL and install the OS10 software and license. Follow the steps for an ONIE switch without an OS installed to download OS10 Enterprise Edition and the license. See Installation and Install OS10 license for complete installation and license information.
If a USB drive is inserted, auto-discovery searches the USB storage supporting FAT or EXT2 file systems. It also searches SCP, FTP, or TFTP servers with the default DNS name of the ONIE server. DHCP options are not used to provide the server IP, and the auto discovery method repeats until a successful software image installation occurs and reboots the switch. Manual installation You can manually install an OS10 software image if a DHCP server is not available.
Last login: Mon Mar 20 13:58:27 2017 on ttyS0 The programs included with the Debian GNU/Linux system are free software; the exact distribution terms for each program are described in the individual files in /usr/share/doc/*/copyright. Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law. -*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* Dell EMC Network Operating System (OS10) *-* *-* Copyright (c) 1999-2017 by Dell Inc. All Rights Reserved.
Hardware Version: X01 Platform Name : x86_64-dellemc_s5100_c2538-r0 PPID : CN0X4XRXCES007980029 Service Tag : 9CLSG02 License Details ---------------Software : OS10-Enterprise Version : 10.3.2E(X) License Type : EVALUATION License Duration: 120 days License Status : 80 day(s) left License location: /mnt/license/9CLSG02.lic --------------------------------------------------------Troubleshoot license installation failure An error message displays if the installation fails.
2 Configure an IPv4 or IPv6 address on the Management interface in INTERFACE mode. ip address A.B.C.D/mask ipv6 address A:B/prefix-length 3 Enable the Management interface in INTERFACE mode. no shutdown Configure Management interface OS10(config)# interface mgmt 1/1/1 OS10(conf-if-ma-1/1/1)# ip address 10.1.1.
• • encryption-type — (Optional) Enter an encryption type for the password: • 0 — Store the password as clear text (default). • 5 — Encrypt the password using an MD5 hash algorithm. • 7 — Encrypt the password using a DES hash algorithm. • 8 — Encrypt the password using a SHA2 hash algorithm. password password — Enter a text string (up to 32 alphanumeric characters).
Completion also applies to other strings, such as filenames, interface names, usernames, and configuration statements. CLI command modes The OS10 CLI has two top-level modes: • EXEC mode — Used to monitor, troubleshoot, check status, and network connectivity. • CONFIGURATION mode — Used to configure network devices. When you enter CONFIGURATION mode, you are changing the current operating configuration, called the running configuration.
quit Leaves or exits the CLI. CONFIGURATION Mode When you initially log in to OS10, you are automatically placed in EXEC mode by default. To access CONFIGURATION mode, enter the configure terminal command. Use CONFIGURATION mode to manage interfaces, protocols, and features. Interface mode is a sub-mode of CONFIGURATION mode.
license location-led lock move no ping ping6 reload show start support-assist-activity system terminal traceroute unlock validate write License and digital fulfillment commands Set location LED Lock candidate configuration Perform a file move/rename operation on local filesystem No commands under exec mode ping -h shows help ping6 -h shows help Reboot Dell EMC Networking Operating System Show running system information Activate transaction based configuration Support Assist related activity System command
track trust username vlt-domain vrrp wred Configure object tracking Configure trust Create or modify users VLT domain configurations Configure VRRP global attributes Configure WRED profile Check device status Use show commands to check the status of a device and monitor activities. • 28 Enter show ? from EXEC mode to view a list of commands to monitor a device.
terminal trace track uptime users the session id version vlan vlt vrrp Show Show Show Show Show terminal configurations for this session trace messages object tracking information the system uptime the current list of users logged into the system , and show Show Vlan Show VRRP the software version on the system status and configuration VLT domain info group status • Enter show command-history from EXEC mode to view trace messages for each executed command.
3 up NORMAL 1 2 8420 8529 up up 4 up NORMAL 1 2 8348 8680 up up Candidate configuration When you enter OS10 configuration commands in the transaction-based configuration mode, changes do not take effect immediately and are stored in the candidate configuration. The configuration changes become active on the network device only after you commit the changes with the commit command. Changes in the candidate configuration are validated and applied to the running configuration.
interface breakout 1/1/8 map 40g-1x interface breakout 1/1/9 map 40g-1x interface breakout 1/1/10 map 40g-1x interface breakout 1/1/11 map 40g-1x interface breakout 1/1/12 map 40g-1x interface breakout 1/1/13 map 40g-1x interface breakout 1/1/14 map 40g-1x interface breakout 1/1/15 map 40g-1x interface breakout 1/1/16 map 40g-1x interface breakout 1/1/17 map 40g-1x interface breakout 1/1/18 map 40g-1x interface breakout 1/1/19 map 40g-1x interface breakout 1/1/20 map 40g-1x interface breakout 1/1/21 map 40g
interface breakout 1/1/14 map 40g-1x interface breakout 1/1/15 map 40g-1x interface breakout 1/1/16 map 40g-1x interface breakout 1/1/17 map 40g-1x interface breakout 1/1/18 map 40g-1x interface breakout 1/1/19 map 40g-1x interface breakout 1/1/20 map 40g-1x interface breakout 1/1/21 map 40g-1x interface breakout 1/1/22 map 40g-1x interface breakout 1/1/23 map 40g-1x interface breakout 1/1/24 map 40g-1x interface breakout 1/1/25 map 40g-1x interface breakout 1/1/26 map 40g-1x interface breakout 1/1/27 map 4
Unlock configuration changes OS10# unlock Change to transaction-based configuration To change to transaction-based configuration mode for a session, enter the start transaction command 1 Change to transaction-based configuration in EXEC mode. start transaction 2 Enable, for example, an interface from INTERFACE mode. interface ethernet 1/1/1/ no shutdown 3 Save the configuration.
Restore startup file from backup OS10# copy config://backup-9-28.xml config://startup.xml OS10# reload Restore startup file from server OS10# copy scp://admin:admin@hostip/backup-9-28.xml config://startup.xml OS10# reload Reload system image Reboot the system manually using the reload command in EXEC mode. You are prompted to confirm the operation. OS10# reload System configuration has been modified.
Alias command The alias command allows you to create shortcuts for commonly used or long commands, and execute long commands along with their parameters. The alias supports the following modes: • Persistent mode — The alias is persistent and can be used in other sessions as well. The aliases created in the Configuration mode are persistent. • Non-persistent mode — The alias can be used only within the current session. Once the session is closed, the alias is removed from the system.
Eth 1/1/25 up 40G A 1 Eth 1/1/26 up 40G A 1 Eth 1/1/27 up 40G A 1 Eth 1/1/28 up 40G A 1 Eth 1/1/29 up 40G A 1 Eth 1/1/30 up 40G A 1 Eth 1/1/31 up 40G A 1 Eth 1/1/32 up 40G A 1 -------------------------------------------------------------------------------View alias output for goint OS10(config)# goint 1/1/1 OS10(conf-if-eth1/1/1)# View alias information OS10# show alias Name ---govlt goint shconfig showint shver Type ---Config Config Local Local Local Number of config aliases : 2 Number of local aliases :
You can use vi or any other editor to create the .cmd file, then use the batch command to execute the file. To execute a series of commands in a file in batch mode (non-interactive processing), use the batch command. OS10 automatically commits all commands in a batch file — you do not have to enter the commit command. • Create a batch file (b.cmd) on a remote device by entering a series of commands. interface ethernet 1/1/4 no switchport ip address 172.17.4.
Execute the batch file. admin@OS10:/opt/dell/os10/bin$ clish -B ~/batch_cfg.txt New user admin logged in at session 15 Verify the BGP configuration executed by the batch file. admin@OS10:/opt/dell/os10/bin$ clish -c "show running-configuration bgp" New user admin logged in at session 16 ! router bgp 100 ! neighbor 100.1.1.1 remote-as 104 no shutdown admin@OS10:/opt/dell/os10/bin$ User admin logged out at session 16 SSH commands You can execute commands remotely using an SSH session.
• OS10# show running-configuration compressed interface breakout 1/1/28 map 10g-4x feature config-os9-style Once this feature is enabled, you cannot use the OS10 format of commands in the new session. OS10(config)# interface vlan 11 OS10(conf-if-vl-11)# tagged ethernet 1/1/15 OS10(conf-if-vl-11)# show configuration ! interface vlan11 no shutdown tagged ethernet 1/1/15 Common commands alias Creates a command alias.
Eth 1/1/19 up 40G A 1 Eth 1/1/20 up 40G A 1 Eth 1/1/21 up 40G A 1 Eth 1/1/22 up 40G A 1 Eth 1/1/23 up 40G A 1 Eth 1/1/24 up 40G A 1 Eth 1/1/25 up 40G A 1 Eth 1/1/26 up 40G A 1 Eth 1/1/27 up 40G A 1 Eth 1/1/28 up 40G A 1 Eth 1/1/29 up 40G A 1 Eth 1/1/30 up 40G A 1 Eth 1/1/31 up 40G A 1 Eth 1/1/32 up 40G A 1 -------------------------------------------------------------------------------OS10# configure terminal OS10(config)# alias goint "interface ethernet $1" OS10(config)# goint 1/1/1 OS10(conf-if-eth1/1/1)#
Default Not configured Command Mode EXEC Usage Information Use this command to configure the location of the OS10 image used to reload the software at boot time. Use the show boot command to view the configured next boot image. This command is applied immediately. Example OS10# boot system standby Supported Releases 10.2.0E or later commit Commits changes in the candidate configuration to the running configuration.
copy Copies the current running configuration to the startup configuration and transfers files between an OS10 switch and a remote device.
Date (modified) --------------------… 2017-02-15T21:19:54Z config.xml … Size (bytes) ------------ Name ------------------------------------------ 54525 Example (replace startup configuration) OS10# home://config.xml config://startup.xml Supported Releases 10.2.0E or later delete Removes or deletes the startup configuration file.
• usb — (Optional) Folder containing files on USB drive. Default Not configured Command Mode EXEC Usage Information Use the dir config command to display configuration files.
no shutdown ! ... Supported Releases 10.2.0E or later feature config-os9-style Configure commands in OS9 environment. Syntax feature config-os9-style Parameters None Default Not configured Command Mode CONFIGURATION Usage Information Once you enable the feature to configure the commands in OS9 format, log out of the session. In the next session, you can configure the commands in OS9 format. The current release supports VLAN tagging and Port channel grouping commands.
license Installs a license file from a local or remote location. Syntax license install [ftp: | http: | localfs: | scp: | sftp: | tftp: | usb:] filepath Parameters • ftp: — (Optional) Install from remote file system (ftp://userid:passwd@hostip/filepath). • http[s]: — (Optional) Install from remote file system (http://hostip/filepath). • http[s]: — (Optional) Request from remote server (http://hostip). • localfs: — (Optional) Install from local file system (localfs://filepath).
management route Configures an IPv4/IPv6 static route used by the Management port. Repeat the command to configure multiple management routes. Syntax Parameters management route {ipv4-address/mask | ipv6-address/prefix-length} {forwardingrouter-address | managementethernet} • ipv4-address/mask — Enter an IPv4 network address in dotted-decimal format (A.B.C.D), then a subnet mask in /prefix-length format (/xx).
Directory contents for Date (modified) --------------------2017-04-26T15:23:46Z Supported Releases folder: config Size (bytes) Name ------------ ----------26704 startup.xml 10.2.0E or later no Disables or deletes commands in EXEC mode. Syntax no [alias | debug | support-assist-activity | terminal] Parameters • alias — Remove an alias definition. • debug — Disable debugging. • support-assist-activity — SupportAssist-related activity. • terminal — Reset terminal settings.
Parameters • brief — Displays brief information of aliases. • detail — Displays detailed information of aliases.
Example OS10# show boot Current system image information: =================================== Type Boot Type Active Standby Next-Boot -------------------------------------------------------------------Node-id 1 Flash Boot [A] 10.2.9999E [B] 10.2.9999E [A] active OS10# show boot detail Current system image information detail: ========================================== Type: Node-id 1 Boot Type: Flash Boot Active Partition: A Active SW Version: 10.2.9999E Active SW Build Version: 10.2.
• prefix-list — (Optional) Current candidate prefix-list configuration. • qos-map — (Optional) Current candidate qos-map configuration. • radius-server — (Optional) Current candidate RADIUS server configuration. • route-map — (Optional) Current candidate route-map configuration. • sflow — (Optional) Current candidate sFlow configuration. • snmp — (Optional) Current candidate SNMP configuration. • spanning-tree — (Optional) Current candidate spanning-tree configuration.
interface range ethernet 1/1/1-1/1/32 switchport access vlan 1 no shutdown ! interface vlan 1 no shutdown ! interface mgmt1/1/1 ip address 10.11.58.145/8 no shutdown ipv6 enable ipv6 address autoconfig ! support-assist ! policy-map type application policy-iscsi ! class-map type application class-iscsi ! class-map type qos class-trust Supported Releases 10.2.0E or later show environment Displays information about environmental system components, such as temperature, fan, and voltage.
show inventory Displays system inventory information. Syntax show inventory Parameters None Default Not configured Command Mode EXEC Usage Information None Example OS10# show inventory Product : S5148F-ON Description : S5148F-ON 48x25GbE, 6x100GbE QSFP28 Interface Module Software version : 10.3.
show ipv6 management-route Displays the IPv6 routes used to access the management port. Syntax show ipv6 management-route [all | connected | summary | static] Parameters • all — (Optional) Display the IPv6 routes that the management interface uses. • connected — (Optional) Display only routes directly connected to the management interface. • summary — (Optional) Display the number of active and non-active management routes and their remote destinations.
License Duration: 120 days License Status : 80 day(s) left License location: /mnt/license/9CLSG02.lic --------------------------------------------------------Supported Releases 10.3.0E or later show running-configuration Displays the configuration currently running on the device.
Default Not configured Command Mode EXEC Usage Information None Example OS10# show running-configuration ! Version 10.2.9999E ! Last configuration change at Apr 11 01:25:02 2017 ! username admin password $6$q9QBeYjZ$jfxzVqGhkxX3smxJSH9DDz7/3OJc6m5wjF8nnLD7/ VKx8SloIhp4NoGZs0I/UNwh8WVuxwfd9q4pWIgNs5BKH. aaa authentication local snmp-server contact http://www.dell.com/support snmp-server location "United States" logging monitor disable ip route 0.0.0.0/0 10.11.58.
policy-map type application policy-iscsi ! class-map type application class-iscsi ! class-map type qos class-trust Supported Releases 10.2.0E or later show startup-configuration Displays the contents of the startup configuration file. Syntax show startup-configuration [compressed] Parameters compressed — (Optional) View a compressed version of the startup configuration file.
no shutdown ! interface mgmt1/1/1 ip address 10.11.58.145/8 no shutdown ipv6 enable ipv6 address autoconfig ! support-assist ! policy-map type application policy-iscsi ! class-map type application class-iscsi ! class-map type qos class-trust Supported Releases 10.2.0E or later show system Displays system information. Syntax show system [brief | node-id] Parameters • brief — View abbreviated list of system information. • node-id — Node ID number.
-- Fan Status -FanTray Status AirFlow Fan Speed(rpm) Status ---------------------------------------------------------------1 up NORMAL 1 8348 up 2 8585 up Example (node-id) 2 up NORMAL 1 2 8278 8718 up up 3 up NORMAL 1 2 8420 8529 up up 4 up NORMAL 1 2 8348 8680 up up OS10# show system node-id 1 fanout-configured Interface Breakout capable Breakout state ----------------------------------------------------Eth 1/1/1 No BREAKOUT_1x1 Eth 1/1/2 No BREAKOUT_1x1 Eth 1/1/3 No BREAKOUT_1x1 Eth 1
Eth Eth Eth Eth Eth Eth Eth Example (brief) 1/1/48 1/1/49 1/1/50 1/1/51 1/1/52 1/1/53 1/1/54 No Yes Yes Yes Yes Yes Yes BREAKOUT_1x1 BREAKOUT_4x1 BREAKOUT_4x1 BREAKOUT_4x1 BREAKOUT_4x1 BREAKOUT_4x1 BREAKOUT_4x1 OS10# show system brief Node Id MAC : 1 : 34:17:eb:3a:bc:80 -- Unit -Unit Status ReqType CurType Version ---------------------------------------------------------------1 up S5148F S5148F 10.3.
Architecture: x86_64 Up Time: 1 day 05:34:06 Supported Releases 10.2.0E or later start Activates the transaction-based configuration mode for the active session. Syntax start transaction Parameters transaction - Enables transaction-based configuration. Default Not configured Command Mode EXEC Usage Information Use this command to save changes to the candidate configuration before applying configuration changes to the running configuration.
Usage Information The system ID is displayed in the stack LED on the front panel. Example OS10(config)# system identifier 1 Supported Releases 10.3.0E or later terminal Sets the number of lines to display on the terminal and enables logging. Syntax terminal {length lines | monitor} Parameters • length lines — Enter the number of lines to display on the terminal (0 to 512, default 24). • monitor — Enables logging on the terminal.
• -UL — (Optional) Use UDPLITE for tracerouting (default port is 53). • -w waittime — (Optional) Enter the time (in seconds) to wait for a response to a probe (default 5 seconds). • -z sendwait — (Optional) Enter the minimal time interval to wait between probes (default 0). A value greater than 10 specifies a number in milliseconds, otherwise it specifies a number of seconds. This option is useful when routers rate-limit ICMP messages.
write Copies the current running configuration to the startup configuration file. Syntax write {memory} Parameters memory — Copy the current running configuration to the startup configuration. Default Not configured Command Mode EXEC Usage Information This command has the same effect as the copy running-configuration startup-configuration command. The running configuration is not saved to a local configuration file other than the startup configuration.
2 Interfaces You can configure and monitor physical interfaces (Ethernet), port-channels, and VLANs in L2 or L3 modes. Table 1.
By default, a trunk interface carries only untagged traffic on the access VLAN — you must manually configure other VLANs for tagged traffic. 1 2 Select one of the two available options: • Configure L2 trunking in INTERFACE mode and the tagged VLAN traffic that the port can transmit. By default, a trunk port is not added to any tagged VLAN. You must create a VLAN before you can assign the interface to it.
3 Enable the Management interface in INTERFACE mode. no shutdown Configure management interface OS10(config)# interface mgmt 1/1/1 OS10(conf-if-ma-1/1/1)# ip address 10.1.1.10/24 OS10(conf-if-ma-1/1/1)# no shutdown VLAN interfaces VLANs are logical interfaces and are, by default, in L2 mode. Physical interfaces and port-channels can be members of VLANs. OS10 supports inter-VLAN routing.
Output 0 errors, Output 0 invalid protocol Time since last interface status change : 00:00:11 Port-channel interfaces Port-channels are not configured by default. Link aggregation is a method of grouping multiple physical interfaces into a single logical interface — a link aggregation group (LAG) or port -channel. A port-channel aggregates the bandwidth of member links, provides redundancy, and load balances traffic. If a member port fails, the OS10 device redirects traffic to the remaining ports.
• You cannot enable flow control on a port-channel interface — flow control is supported on physical interfaces that are port-channel members. • Port-channels support LACP (802.3ad). LACP identifies similarly configured links and dynamically groups ports into a logical channel. LACP activates the maximum number of compatible ports that the switch supports in a port-channel.
Assign Port Channel IP Address OS10(config)# interface ethernet 1/1/1 OS10(conf-if-eth1/1/1)# ip address 1.1.1.1/24 OS10(conf-if-eth1/1/1)# Remove or disable port-channel You can delete or disable a port-channel. 1 Delete a port-channel in CONFIGURATION mode. no interface port-channel channel-number 2 Disable a port-channel to place all interfaces within the port-channel operationally down in CONFIGURATION mode.
Change hash algorithm The load-balancing command selects the hash criteria applied to load balancing of traffic on port-channels. If you do not obtain even traffic distribution, use the hash-algorithm command to select the hash scheme for LAG. Rotate or shift the L2-bit LAG hash until the desired traffic distribution is achieved. • Change the default (0) to another algorithm and apply it to LAG hashing in CONFIGURATION mode.
Configure range of VLANs OS10(config)# interface range vlan 1-100 OS10(conf-range-vl-1-100)# Configure range of port channels OS10(config)# interface range port-channel 1-25 OS10(conf-range-po-1-25)# Forward error correction Forward error correction (FEC) is used to enhance data reliability. FEC modes supported in OS10: • CL74-FC — Supports 25G • CL91-RS — Supports 100G • CL108-RS — Supports 25G • off — Disables FEC NOTE: OS10 does not support FEC on 10G and 40G.
View interface configuration To view basic interface information, use the show interface, show running-configuration, and show interface status commands. You can stop scrolling output from a show command by entering CTRL+C. Display information about a physical or virtual interface in EXEC mode (including up/down status, MAC and IP addresses, and input/output traffic counters). show interface [type] • phy-eth node/slot/port[:subport] — Display information about physical media connected to the interface.
View candidate configuration OS10(conf-if-eth1/1/1)# show configuration candidate ! interface ethernet1/1/1 ip address 1.1.1.1/24 no switchport no shutdown View running configuration OS10# show running-configuration Current Configuration ... ! interface Ethernet 2/6 no ip address shutdown ! interface Ethernet 2/7 no ip address shutdown ! interface Ethernet 2/8 no ip address shutdown ! interface Ethernet 2/9 no ip address shutdown ...
• mode — Sets the LACP actor mode. • active — Sets channeling mode to active. • on — Sets channeling mode to static. • passive — Sets channeling mode to passive. Default Not configured Command Mode INTERFACE Usage Information The no version of this command resets the value to the default, and unassigns the interface from the port-channel group. Example OS10(config)# interface ethernet 1/1/2:1 OS10(conf-if-eth1/1/2:1)# channel-group 20 mode active Supported Releases 10.3.
• auto — Specify to set the physical interface to transmit automatically. Defaults Not configured Command Mode CONFIGURATION Usage Information This command can only be used on the Management port. The no version of this command resets the value to the default. Example OS10(conf-if-ma-1/1/1)# duplex auto Supported Releases 10.3.0E or later fec Configures Forward Error Correction on 25G and 100G interfaces.
Command Mode Usage Information CONFIGURATION • Each breakout interface operates at the configured speed; for example, 10G or 25G. • The no version of the command resets a port to its default speed—40G or 100G. • To configure breakout interfaces on a unified port, use the mode {Eth | FC} command in the Port-Group Configuration mode. Example OS10(config)# interface breakout 1/1/7 map 10g-4x Supported Releases 10.2.2E or later interface ethernet Configures a physical Ethernet interface.
Parameters node/slot/port — Enter the physical port interface information for the Management interface. Default Enabled Command Mode CONFIGURATION Usage Information You cannot delete a Management port. To assign an IP address to the Management port, use the ip address command. Example OS10(config)# interface mgmt 1/1/1 OS10(conf-if-ma-1/1/1)# Supported Releases 10.2.0E or later interface null Configures a null interface on the switch.
interface range Configures a range of Ethernet, port-channel, or VLAN interfaces for bulk configuration. Syntax Parameters interface range {ethernet node/slot/port[:subport]-node/slot/port[:subport], [...]} | {port-channel IDnumber-IDnumber,[ ...]} | vlan vlanID-vlanID,[...]} • node/slot/port[:subport]-node/slot/port[:subport] — Enter a range of Ethernet interfaces. • IDnumber-IDnumber — Enter a range of port-channel numbers (1 to 128). • vlanID-vlanID — Enter a range VLAN ID numbers (1 to 4093).
link-bundle-utilization Configures link-bundle utilization. Syntax link-bundle-utilization trigger-threshold value Parameters value — Enter the percentage of port-channel bandwidth that triggers traffic monitoring on port-channel members (0 to 100). Default Disabled Command Mode CONFIGURATION Usage Information None Example OS10(config)# link-bundle-utilization trigger-threshold 10 Supported Releases 10.2.0E or later mgmt Configures the specified VLAN as the management VLAN.
• • The port channel link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the channel members. For example, if the members have a link MTU of 2100 and an IP MTU 2000, the port channel’s MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU. VLANS • All members of a VLAN must have same IP MTU value. • Members can have different link MTU values.
Last clearing of "show interface" counters: 00:40:14 Queuing strategy: fifo Input statistics: 0 packets, 0 octets 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 0 Broadcasts, 0 Unicasts 0 runts, 0 giants, 0 throttles 0 CRC, 0 overrun, 0 discarded Output statistics: 0 packets, 0 octets 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicast
Supported Releases 10.2.0E or later show port-channel summary Displays port-channel summary information.
Usage Information None Example OS10# show vlan Codes: * - Default VLAN, M - Management VLAN, R - Remote Port Mirroring VLANs Q: A - Access (Untagged), T - Tagged NUM Status Description Q Ports 1 down M 4020 down A Mgmt1/1/1 Supported Releases 10.2.0E or later shutdown Disables an interface. Syntax shutdown Parameters None Default Disabled Command Mode INTERFACE Usage Information This command marks a physical interface as unavailable for traffic.
Usage Information The speed command is supported only on the Management and Fibre Channel interfaces. This command is not supported on Ethernet interfaces. • When you manually configure the management port speed, match the speed of the remote device. Dell EMC highly recommends using auto-negotiation for the management port. • The no version of this command resets the port speed to the default value auto. Example OS10(conf-if-ma-1/1/1)# speed auto Supported Releases 10.3.
• Use the no switchport command to remove all L2 configuration when you configure an interface in L3 mode. • Use the no switchport mode command to restore a trunk port on an interface to L2 access mode on VLAN 1. Example OS10(conf-if-eth1/1/7)# switchport mode access Supported Releases 10.2.0E or later switchport trunk allowed vlan Configures the tagged VLAN traffic that a L2 trunk interface can carry. An L2 trunk port has no tagged VLAN membership and does not transmit tagged traffic.
3 Layer 2 802.1X Verifies device credentials prior to sending or receiving packets using the extensible authentication protocol (see 802.1X Commands). Link Aggregation Control Protocol (LACP) Exchanges information between two systems and automatically establishes a LAG between the systems (see LACP Commands). Link Layer Discovery Enables a LAN device to advertise its configuration and receive configuration information from adjacent LLDPProtocol (LLDP) enabled infrastructure devices (see LLDP Commands).
NOTE: OS10 supports only RADIUS as the back-end authentication server. The authentication process involves three devices: • Supplicant — The device attempting to access the network performs the role of supplicant. Regular traffic from this device does not reach the network until the port associated to the device is authorized. Prior to that, only the supplicant can exchange 802.1x messages (EAPOL frames) with the authenticator.
6 If the identity information the supplicant provides is valid, the authentication server sends an Access Accept frame in which network privileges are specified. The authenticator changes the port state to authorize and forwards an EAP Success frame. If the identity information is invalid, the server sends an Access Reject frame. If the port state remains unauthorized, the authenticator forwards an EAP Failure frame. EAP over RADIUS 802.
Enable 802.1X 1 Enable 802.1X globally in CONFIGURATION mode. dot1x system-auth-control 2 Enter an interface or a range of interfaces in INTERFACE mode. interface range 3 Enable 802.1X on the supplicant interface only in INTERFACE mode. dot1x port-control auto Configure and verify 802.
Identity retransmissions If the authenticator sends a Request Identity frame but the supplicant does not respond, the authenticator waits 30 seconds and then retransmits the frame. There are several reasons why the supplicant might fail to respond — the supplicant may have been booting when the request arrived, there may be a physical layer problem, and so on.
Failure quiet period If the supplicant fails the authentication process, the authenticator sends another Request Identity frame after 30 seconds by default. The quiet period is a transmit interval time after a failed authentication. The Request Identity Re-transmit interval is for an unresponsive supplicant. You can configure the interval for a maximum of 10 times for an unresponsive supplicant.
force-authorized (default) This is an authorized state. A device connected to this port does not use the authentication process but can communicate on the network. Placing the port in this state is same as disabling 802.1X on the port. forceauthorized is the default mode. force-unauthorized This is an unauthorized state. A device connected to a port does not use the authentication process but is not allowed to communicate on the network.
Configure and verify reauthentication time period OS10(config)# interface range ethernet 1/1/7-1/1/8 OS10(conf-range-eth1/1/7-1/1/8)# dot1x re-authentication OS10(conf-range-eth1/1/7-1/1/8)# dot1x timeout re-authperiod 3600 OS10(conf-range-eth1/1/7-1/1/8)# show dot1x interface ethernet 1/1/7 802.
Port Auth Status: Re-Authentication: Tx Period: Quiet Period: Supplicant Timeout: Server Timeout: Re-Auth Interval: Max-EAP-Req: Host Mode: Auth PAE State: Backend State: UNAUTHORIZED Enable 120 seconds 120 seconds 45 seconds 60 seconds 3600 seconds 5 MULTI_HOST Initialize Initialize View interface running configuration OS10(conf-range-eth1/1/7-1/1/8)# do show running-configuration interface ...
Supported Releases 10.2.0E or later dot1x max-req Changes the maximum number of requests that the device sends to a supplicant before restarting 802.1X authentication. Syntax dot1x max-req retry-count Parameters max-req retry-count — Enter the retry count for the request sent to the supplicant before restarting 802.1X reauthentication (1 to 10). Default 2 Command Mode INTERFACE Usage Information The no version of this command resets the value to the default.
Example OS10(conf-range-eth1/1/7-1/1/8)# dot1x re-authentication Supported Releases 10.2.0E or later dot1x timeout quiet-period Sets the number of seconds that the device remains in quiet state following a failed authentication exchange with a supplicant. Syntax dot1x timeout quiet-period seconds Parameters quiet period seconds — Enter the number of seconds for the 802.1X quiet period timeout (1 to 65535).
dot1x timeout supp-timeout Sets the number of seconds that the device waits for the supplicant to respond to an EAP request frame before the device retransmits the frame. Syntax dot1x timeout supp-timeout seconds Parameters supp-timeout seconds — Enter the number of seconds for the 802.1X supplicant timeout (1 to 65535). Default 30 seconds Command Mode INTERFACE Usage Information The no version of this command resets the value to the default.
show dot1x interface Displays 802.1X configuration information. Syntax show dot1x interface ethernet node/slot/port[:subport] Parameters ethernet node/slot/port[:subport] — Enter the Ethernet interface information. Command Mode EXEC Usage Information Use this command to view the dot1x interface configuration for a specific interface. Example OS10# show dot1x interface 802.1x information on ethernet1/1/1 ------------------------------------Dot1x Status: Enable 802.
Link aggregation control protocol Group Ethernet interfaces to form a single link layer interface called a LAG or port-channel. Aggregating multiple links between physical interfaces creates a single logical LAG, which balances traffic across the member links within an aggregated Ethernet bundle and increases the uplink bandwidth. If one member link fails, the LAG continues to carry traffic over the remaining links.
Configure LACP OS10(config)# lacp system-priority 65535 OS10(config)# interface range ethernet 1/1/7-1/1/8 OS10(conf-range-eth1/1/7-1/1/8)# lacp port-priority 4096 OS10(conf-range-eth1/1/7-1/1/8)# lacp rate fast Verify LACP configuration OS10(conf-range-eth1/1/7-1/1/8)# do show running-configuration ... ! interface ethernet1/1/7 lacp port-priority 4096 lacp rate fast no shutdown ! interface ethernet1/1/8 lacp port-priority 4096 lacp rate fast no shutdown ! ...
Configure LACP timeout OS10(conf-if-eth1/1/29)# lacp rate fast View port status OS10# show lacp port-channel Port-channel 20 admin up, oper up, mode lacp Actor System ID: Priority 32768, Address f8:b1:56:00:02:33 Partner System ID: Priority 4096, Address 10:11:22:22:33:33 Actor Admin Key 20, Oper Key 20, Partner Oper Key 10 LACP LAG ID 20 is an aggregatable link A - Active LACP, B - Passive LACP, C - Short Timeout, D - Long Timeout E - Aggregatable Link, F - Individual Link, G - IN_SYNC, H - OUT_OF_SYNC, I
Bravo LAG configuration summary OS10(config)# interface port-channel 1 OS10(conf-if-po-1)# exit OS10(config)# interface ethernet 1/1/49 OS10(conf-if-eth1/1/49)# no switchport OS10(conf-if-eth1/1/49)# channel-group 1 mode active OS10(conf-if-eth1/1/49)# interface ethernet 1/1/50 OS10(conf-if-eth1/1/50)# no switchport OS10(conf-if-eth1/1/50)# channel-group 1 mode active OS10(conf-if-eth1/1/50)# interface ethernet 1/1/51 OS10(conf-if-eth1/1/51)# no switchport OS10(conf-if-eth1/1/51)# channel-group 1 mode activ
0 runts, 0 giants, 0 throttles 0 CRC, 0 overrun, 465 discarded Output statistics: 7840 packets, 938965 octets 0 64-byte pkts,1396 over 64-byte pkts, 6444 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 7840 Multicasts, 0 Broadcasts,0 Unicasts 0 throttles, 0 discarded, 0 Collisions, 0 wreddrops Rate Info(interval 299 seconds): Input 0 Mbits/sec, 0 packets/sec, 0% of line rate Output 0 Mbits/sec, 1 packets/sec, 0% of line rate Time since last interface status change : 01:2
Actor Admin: State Key 1 Priority 32768 Oper: State Key 1 Priority 32768 Partner Admin: State Key 0 Priority 0 Oper: State Key 1 Priority 32768 Port ethernet1/1/31 is Enabled, LACP is enabled and mode is lacp Actor Admin: State Key 1 Priority 32768 Oper: State Key 1 Priority 32768 Partner Admin: State Key 0 Priority 0 Oper: State Key 1 Priority 32768 Verify LAG membership OS10# show lacp interface ethernet 1/1/29 Interface ethernet1/1/29 is up Channel group is 1 port channel is po1 PDUS sent: 17 PDUS rcvd:
• active — Enter to enable the LACP interface. The interface is in the Active Negotiating state when the port starts negotiations with other ports by sending LACP packets. • on — Enter so that the interface is not part of a dynamic LAG but acts as a static LAG member. • passive — Enter to only enable LACP if it detects a device. The interface is in the Passive Negotiation state when the port responds to the LACP packets that it receives but does not initiate negotiation until it detects a device.
Default 32 Command Mode INTERFACE Usage Information The no version of this command resets the maximum bundle size to the default value. Example OS10(conf-if-po-10)# lacp max-bundle 10 Supported Releases 10.2.0E or later lacp port-priority Sets the priority for the physical interfaces for LACP. Syntax lacp port-priority priority Parameters priority — Enter the priority for the physical interfaces (0 to 65535).
lacp system-priority Sets the system priority of the device for LACP. Parameters priority — Enter the priority value for physical interfaces (0 to 65535). Default 32768 Command Mode CONFIGURATION Usage Information Each device that runs LACP has an LACP system priority value. LACP uses the system priority with the MAC address to form the system ID and also during negotiation with other systems. The system ID is unique for each device.
show lacp interface Displays information about specific LACP interfaces. Syntax show lacp interface ethernet node/slot/port Parameters node/slot/port — Enter the interface information. Default Not configured Command Mode EXEC Usage Information The LACP_activity field displays if you configure the link in Active or Passive port-channel mode. The Port Identifier field displays the port priority as part of the information including the port number.
Parameters • interface port-channel — (Optional) Enter the interface port-channel. • channel-number — (Optional) Enter the port-channel number for the LACP neighbor (1 to 128). Default Not configured Command Mode EXEC Usage Information All channel groups display if you do not enter the channel-number parameter.
show lacp system-identifier Displays the LACP system identifier for a device. Syntax show lacp system-identifier Parameters None Default Not configured Command Mode EXEC Usage Information The LACP system ID is a combination of the configurable LACP system priority value and the MAC address. Each system that runs LACP has an LACP system priority value. The default value is 32768 or configure a value between 1 and 65535.
LAN devices transmit LLDPDUs, which encapsulate TLVs, to neighboring LAN devices. LLDP is a one-way protocol and LAN devices (LLDP agents) transmit and/or receive advertisements but they cannot solicit and do not respond to advertisements. There are three mandatory TLVs followed by zero or more optional TLVs and the end of the LLDPDU TLV.
Organizationally-specific TLVs There are eight TLV types defined by the 802.1 and 802.3 working groups as a basic part of LLDP. Configure OS10 to advertise any or all of these TLVs. Optional TLVs 4 — Port description User-defined alphanumeric string that describes the port. 5 — System name User-defined alphanumeric string that identifies the system. 6 — System description Detailed description of all components of the system. 7 — System capabilities Determines the capabilities of the system.
Media endpoint discovery LLDP media endpoint discovery (LLDP-MED) provides additional organizationally-specific TLVs to allow endpoint devices and network connectivity devices to advertise their characteristics and configuration information. LLDP-MED endpoint devices are located at the IEEE 802 LAN network edge and participate in IP communication service using the LLDPMED framework, such as IP phones and conference bridges.
LLDP-MED capabilities Bit 0 LLDP-MED capabilities Bit 1 Network policy Bit 2 Location ID Bit 3 Extended power via MDI-PSE Bit 4 Extended power via MDI-PD Bit 5 Inventory Bits 6-15 Reserved LLDP-MED device types 0 Type not defined 1 Endpoint class 1 2 Endpoint class 2 3 Endpoint class 3 4 Network connectivity 5-255 Reserved Network policies TLVs A network policy in the context of LLDP-MED is a device’s VLAN configuration and associated Layer 2 and Layer 3 configurations.
0 — Reserved — 1 — Voice Used for dedicated IP telephony handsets and other appliances supporting interactive voice services. 2 — Voice signaling Used only if voice control packets use a separate network policy than voice data. 3 — Guest voice Used only for a separate limited voice service for guest users with their own IP telephony handsets and other appliances supporting interactive voice services.
2 Enter the multiplier value for the hold time in CONFIGURATION mode. lldp holdtime-multiplier 3 Enter the delay (in seconds) for LLDP initialization on any interface in CONFIGURATION mode.
Enable LLDP OS10(config)# interface ethernet 1/1/1 OS10(conf-if-eth1/1/1)# lldp transmit OS10(conf-if-eth1/1/1)# lldp receive Disable LLDP globally OS10(config)# no lldp enable Advertise TLVs Configure the system to advertise TLVs out of all interfaces or specific interfaces. If you configure an interface, only the interface sends LLDPDUs with the specified TLVs. 1 Enable basic TLVs attributes to transmit and receive LLDP packets in INTERFACE mode.
• add — Attach the network policy to an interface. • remove — Remove the network policy from an interface. • number — Enter a network policy index number (1 to 32). Configure advertise LLDP-MED network policies OS10(conf-if-eth1/1/5)# lldp-med network-policy add 1 Fast start repeat count Fast start repeat count enables a network connectivity device to advertise itself at a faster rate for a limited amount of time.
View LLDP global traffic OS10# show lldp traffic LLDP traffic statistics: Total Frames Out : 0 Total Entries Aged : 0 Total Frames In : 0 Total Frames Received In Error : 0 Total Frames Discarded : 0 Total TLVS Unrecognized : 0 Total TLVs Discarded : 0 View LLDP interface traffic OS10# show lldp traffic interface ethernet 1/1/1 LLDP Traffic Statistics: Total Frames Out : 0 Total Entries Aged : 0 Total Frames In : 0 Total Frames Received In Error : 0 Total Frames Discarded : 0 Total TLVS Unrecognized : 0 Tot
Remote Management Address (IPv4): 10.1.1.
1 Adjust the TTL value in CONFIGURATION mode. lldp holdtime-multiplier 2 Return to the default multiplier value in CONFIGURATION mode. no lldp holdtime-multiplier Configure TTL OS10(config)# lldp holdtime-multiplier 2 Return multiplier value OS10(config)# no lldp holdtime-multiplier LLDP commands clear lldp counters Clears LLDP and LLDP-MED transmit, receive, and discard statistics from all the physical interfaces.
Parameters None Default Enabled Command Mode CONFIGURATION Usage Information This command enables LLDP globally for all Ethernet (PHY) interfaces, except on those interfaces where LLDP is manually disabled. The no version of this command disables LLDP globally irrespective of whether LLDP is manually enabled on an interface. Example OS10(config)# lldp enable Supported Releases 10.3.1E or later lldp holdtime-multiplier Configures the multiplier value for the hold time (in seconds).
Parameters • enable — Enable LLDP-MED on the interface. • disable — Disable LLDP-MED on the interface. Default Enabled with network-policy TLV Command Mode INTERFACE Usage Information LLDP-MED communicates the types of TLVs that the endpoint device and the network connectivity device support. Use the no lldp med or lldp med disable command to disable LLDP-MED on a specific interface. Example OS10(conf-if-eth1/1/1)# lldp med disable Supported Releases 10.2.
lldp med network-policy (Interface) Attaches or removes an LLDP-MED network policy to or from an interface. Syntax Parameters lldp-med network-policy {add | remove} number • add — Attach the network policy to an interface. • remove — Remove the network policy from an interface. • number — Enter a network policy index number (1 to 32). Default Not configured Command Mode INTERFACE Usage Information Attach only one network policy for per interface.
Example OS10(conf-if-eth1/1/3)# lldp receive Supported Releases 10.2.0E or later lldp reinit Configures the delay time (in seconds) for LLDP to initialize on any interface. Syntax lldp reinit seconds Parameters seconds — Enter the delay timer value in seconds (1 to 10). Default 2 seconds Command Mode CONFIGURATION Usage Information The no version of this command resets the value to the default. Example OS10(config)# lldp reinit 5 Supported Releases 10.2.
Command Mode INTERFACE Usage Information None Example OS10(conf-if-eth1/1/3)# lldp tlv-select basic-tlv system-name Supported Releases 10.2.0E or later lldp tlv-select dot1tlv Enables or disables the dot.1 TLVs to transmit in LLDP packets. Syntax Parameters lldp tlv-select dot1tlv { port-vlan-id | link-aggregation} • port-vlan-id — Enter the port VLAN ID. • link-aggregation — Enable the link aggregation TLV.
lldp transmit Enables the transmission of LLDP packets on a specific interface. Syntax lldp transmit Parameters None Default Not configured Command Mode INTERFACE Usage Information The no version of this command disables the transmission of LLDP packets on a specific interface. Example OS10(conf-if-eth1/1/9)# lldp transmit Supported Releases 10.2.0E or later show lldp interface Displays the LLDP information advertised from a specific interface.
ethernet1/1/20:1| Network Polices : Supported Releases Yes| Yes| No| No| No 10.2.0E or later show lldp errors Displays the LLDP errors related to memory allocation failures, queue overflows, and table overflows. Syntax show lldp errors Parameters None Default Not configured Command Mode EXEC Usage Information None Example OS10# Total Total Total Supported Release 10.2.
ethernet1/1/19 ethernet1/1/20 ethernet1/1/21 ethernet1/1/22 ethernet1/1/23 ethernet1/1/24 ethernet1/1/25 ethernet1/1/26 ethernet1/1/27 ethernet1/1/28 ethernet1/1/29 ethernet1/1/30 ethernet1/1/31 ethernet1/1/32 Supported Releases | | | | | | | | | | | | | | Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| Yes| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No| No
MED Capabilities: Supported: LLDP-MED Capabilities, Network Policy, Location Identification, Extended Power via MDI - PSE, Extended Power via MDI - PD, Inventory Management Current: LLDP-MED Capabilities, Network Policy, Location Identification, Extended Power via MDI - PD, Inventory Management Device Class: Endpoint Class 3 Network Policy: Application: voice, Tag: Tagged, Vlan: 50, L2 Priority: 6, DSCP Value: 46 Inventory Management: H/W Revision : 12.1.1 F/W Revision : 10.1.9750B S/W Revision : 10.1.
Supported Releases 10.2.0E or later show lldp tlv-select interface Displays the TLVs enabled for an interface. Syntax show lldp tlv-select interface ethernet node/slot/port[:subport] Parameters ethernet node/slot/port[:subport] — Enter the Ethernet interface information (1 to 253).
Total TLVs Discarded : 0 LLDP MED Traffic Statistics: Total Med Frames Out : Total Med Frames In : Total Med Frames Discarded : Total Med TLVS Discarded : Total Med Capability TLVS Discarded: Total Med Policy TLVS Discarded : Total Med Inventory TLVS Discarded : Supported Releases 2 1 0 0 0 0 0 10.2.0E or later show nework-policy profile Displays the network policy profiles.
Static MAC Address A static MAC address entry is one that you manually configure. A static entry is not subject to aging. • Create a static MAC address entry in the MAC address table in CONFIGURATION mode.
• all — (Optional) Clear all dynamic entries. • address mac_address — (Optional) Clear a MAC address entry. • vlan vlan-id — (Optional) Clear a MAC address table entry from a VLAN number (1 to 4093). • ethernet node/slot/port[:subport] — (Optional) Clear an Ethernet interface entry. • port—channel number — (Optional) Clear a port-channel number (1 to 128).
Command Mode CONFIGURATION Usage Information Set the aging timer to zero (0) to disable MAC address aging for all dynamic entries. The aging time counts from the last time that the device detected the MAC address. Example OS10(config)# mac address-table aging-time 3600 Supported Releases 10.2.0E or later mac address-table static Configures a static entry for the L2 MAC address table.
• static — (Optional) Displays static MAC address table entries only. • vlan vlan-id — (Optional) Displays VLAN information only (1 to 4093). Default Not configured Command Mode EXEC Usage Information The network device maintains static MAC address entries saved in the startup configuration file, and reboots and flushes dynamic entries.
Configuring MST is a four-step process: 1 Enable MST, if the current running STP version is not MST. 2 (Optional) Map the VLANs to different instances to achieve load balancing. 3 Ensure the same region name is configured in all the bridges running MST. 4 (Optional) Configure the revision number. Configure MST protocol When you enable MST globally, all L2 physical, port-channel, and VLAN interfaces are automatically assigned to MST instance (MSTI) zero (0).
Create instances You can create multiple MSTP instances and map VLANs. A single MSTI provides no more benefit than RSTP. To take full advantage of the MST protocol, create multiple MSTIs and map VLANs to them. 1 Enter an instance number in CONFIGURATION mode. spanning tree mst configuration 2 Enter the MST instance number in MULTIPLE-SPANNING-TREE mode (0 to 63). instance instance-number 3 Enter the VLAN and IDs to participate in the MST instance in MULTIPLE-SPANNING-TREE mode (1 to 4096).
ethernet1/1/17 128.324 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.324 ethernet1/1/18 128.328 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.328 ethernet1/1/19 128.332 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.332 ethernet1/1/20 128.336 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.336 ethernet1/1/21 128.340 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.340 ethernet1/1/22 128.344 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.344 ethernet1/1/23 128.348 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.
Non-Dell hardware OS10 supports only one MST region. For a bridge to be in the same MST region as another, the three unique attributes (name, revision, and VLAN-to-instance-mapping) must match. The default values for name and revision number match on all Dell hardware. If you have non-Dell hardware that participates in MST, ensure these values match on all devices. A region is a combination of three unique attributes: • Name — A mnemonic string you assign to the region (default is the system MAC address).
4 Change the max-hops parameter in CONFIGURATION mode (1 to 40, default 20).
Link type: point-to-point (auto) Boundary: Yes, Bpdu-filter: Disable, Bpdu-Guard: Disable, Shutdown-on-Bpdu-Guard-violation: No Root-Guard: Disable, Loop-Guard: Disable Bpdus (MRecords) Sent: 69, Received: 0 Interface Designated Name PortID Prio Cost Sts Cost Bridge ID PortID ---------------------------------------------------------------------ethernet1/1/7 0.284 0 1 FWD 0 32768 90b1.1cf4.9b8a 0.
Root guard Avoids bridging loops and preserves the root bridge position during network transitions. STP selects the root bridge with the lowest priority value. During network transitions, another bridge with a lower priority may attempt to become the root bridge and cause unpredictable network behavior. Configure the spanning-tree guard root command to avoid such an attempt and preserve the position of the root bridge. Root guard is enabled on ports that are designated ports.
Interface Designated Name PortID Prio Cost Sts Cost Bridge ID PortID -------------------------------------------------------------------------ethernet1/1/4 128.272 128 500 BLK 500 32769 90b1.1cf4.a911 128.
Default 15 seconds Command Mode CONFIGURATION Usage Information The no version of this command resets the value to the default. Example OS10(config)# spanning-tree mst forward-time 16 Supported Releases 10.2.0E or later spanning-tree mst hello-time Sets the time interval between generation and transmission of MSTP BPDUs. Syntax spanning-tree mst hello-time seconds Parameters seconds — Enter a hello-time interval value in seconds (1 to 10).
Usage Information A device receiving BPDUs waits until the max-hops value expires before discarding it. When a device receives the BPDUs, it decrements the received value of the remaining hops and uses the resulting value as remaining-hops in the BPDUs. If the remaining MSTP 1333 hops reach zero, the device discards the BPDU and ages out any information that it holds for the port. The command configuration applies to all common IST (CIST) in the MST region.
spanning-tree mst configuration Enters MST mode to configure MSTP from Configuration mode. Syntax spanning-tree mst configuration Parameters None Default Disabled Command Mode CONFIGURATION Usage Information Use this command to enter STP MST configuration mode. Example OS10(config)# spanning-tree mst configuration OS10(conf-mst)# Supported Releases 10.2.0E or later revision Configures a revision number for the MSTP configuration.
3 4 5 Supported Releases 4 5 6 10.2.0E or later show spanning-tree msti Displays MST instance information. Syntax Parameters show spanning-tree msti [instance-number [brief | guard | interface interface]] • instance-number — (Optional) Displays MST instance information (0 to 63). • brief — (Optional) Displays MST instance summary information. • guard — (Optional) Displays which guard is enabled and current port state.
Edge port:no (default) port guard :none (default) Link type is point-to-point (auto) Boundary :internal bpdu filter : bpdu guard : bpduguard shutdown-onviolation :disable RootGuard: disable LoopGuard disable Bpdus (MRecords) sent 3779, received 7 Interface Designated Name PortID Prio Cost Sts Cost Bridge ID PortID -----------------------------------------------------------ethernet1/1/1 128.132 128 20000 FWD 0 32768 74e6.e2f5.dd80 128.
Usage Information BPDU guard prevents a port from receiving BPDUs. If the port receives a BPDU, it is placed in the Error-Disabled state as a protective measure. Example OS10(conf-if-eth1/1/4)# spanning-tree bpduguard enable Supported Releases 10.2.0E or later spanning-tree guard Enables or disables loop guard or root guard on an interface. Syntax Parameters spanning-tree guard {loop | root | none} • loop — Enables loop guard on an interface. • root — Enables root guard on an interface.
spanning-tree mst Configures an MST instance and determines root and bridge priorities. Syntax spanning-tree mst instance number priority | root {primary | secondary} Parameters • instance number — Enter an MST instance number (0 to 63). • priority priority value — Set a bridge priority value in increments of 4096 (0 to 61440). Valid priority values are: 0, 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, and 61440. All other values are rejected.
Parameters • msti instance — Enter the MST instance number (0 to 63). • cost cost — (Optional) Enter a port cost value (1 to 200000000).
3 Enable Rapid-PVST+ (only required if another variation of STP is present). 4 (Optional) Select a non-default bridge-priority for the VLAN for load balancing. By default, each VLAN instance is assigned default bridge priority 32768. For example, all three instances have the same forwarding topology. Traffic load balancing is not achievable with this kind of priority assignment. You must assign each instance a different priority to achieve load balancing, as shown in Load Balancing with RPVST+.
Enable RPVST+ By default, RPVST+ is enabled and creates an instance only after you add the first member port to a VLAN. Port-channel or physical interfaces must be a member of a VLAN to participate in RPVST+. Add all physical and port-channel interfaces to the default VLAN (VLAN1). • Enable the Rapid-PVST+ mode in CONFIGURATION mode.
We are the root of VLAN 1 Configured hello time 2, max age 20, forward delay 15 Interface Designated Name PortID Prio Cost Sts Cost Bridge ID PortID --------------------------------------------------------------------ethernet1/1/5 128.276 128 500 FWD 0 4097 90b1.1cf4.a523 128.276 ethernet1/1/6 128.280 128 500 FWD 0 4097 90b1.1cf4.a523 128.280 Interface Name Role PortID Prio Cost Sts Cost Link-type Edge -------------------------------------------------------------ethernet1/1/5 Desg 128.
ethernet1/1/8 ethernet1/1/9 ethernet1/1/10 ethernet1/1/11 Disb Disb Disb Disb 128.288 128.292 128.296 128.300 128 128 128 128 200000000 200000000 200000000 200000000 FWD FWD FWD FWD 0 0 0 0 AUTO AUTO AUTO AUTO No No No No Root assignment RPVST+ assigns the root bridge according to the lowest bridge ID. Assign one bridge as root bridge and the other as a secondary root bridge. • Configure the device as the root or secondary root in CONFIGURATION mode.
Port enabled with loop guard conditions • Loop guard is supported on any STP-enabled port or port-channel interface in RPVST+ mode. • You cannot enable root guard and loop guard at the same time on an STP port — the loop guard configuration overwrites an existing root guard configuration and vice versa. • Enabling BPDU guard and loop guard at the same time on a port results in a port that remains in a Blocking state and prevents traffic from flowing through it.
Parameters • interface — Enter the interface type: • ethernet node/slot/port[:subport] — Deletes the spanning-tree counters from a physical port. • port-channel number — Deletes the spanning-tree counters for a port-channel interface (1 to 128). Default Not configured Command Mode EXEC Usage Information Clear all STP counters on the device per Ethernet interface or port-channel. Example OS10# clear spanning-tree counters interface port-channel 10 Supported Releases 10.2.
Bridge ID Priority 32769, Address 74e6.e2f5.bb80 We are the root of VLAN 1 Configured hello time 2, max age 20, forward delay 15 Interface Designated Name PortID Prio Cost Sts Cost Bridge ID PortID ---------------------------------------------------------------------------ethernet1/1/1 128.260 128 200000000 FWD 0 32769 0000.0000.0000 128.260 ethernet1/1/2 128.264 128 200000000 FWD 0 32769 0000.0000.0000 128.264 ethernet1/1/3 128.268 128 200000000 FWD 0 32769 0000.0000.0000 128.268 ethernet1/1/4 128.
Supported Releases 10.2.0E or later spanning-tree guard Enables or disables loop guard or root guard on an interface. Syntax Parameters spanning-tree guard {loop | root | none} • loop — Enables loop guard on an interface. • root — Enables root guard on an interface. • none — Sets the guard mode to none. Default Not configured Usage Information Root guard and loop guard configurations are mutually exclusive. Configuring one overwrites the other from the active configuration.
Default Not configured Command Mode INTERFACE Usage Information When you configure an EdgePort on a device running STP, the port immediately transitions to Forwarding state. Only configured ports connected to end hosts act as EdgePorts. Example OS10(config)# spanning-tree port type edge Supported Releases 10.2.0E or later spanning-tree vlan cost Sets the path cost of the interface per VLAN for PVST calculations.
Supported Releases 10.2.0E or later spanning-tree vlan force-version Configures a forced version of spanning-tree to transmit BPDUs. Syntax Parameters spanning-tree vlan vlan-id force-version {stp | rstp} • stp — Forces the version for the BPDUs transmitted by RPVST+ to STP. • rstp — Forces the version for the BPDUs transmitted by RPVST+ to RSTP Default Not configured Command Mode CONFIGURATION Usage Information Forces a bridge that supports RPVST+ to operate in a STP-compatible mode.
Example OS10(config)# spanning-tree vlan 10 max-age 10 Supported Releases 10.2.0E or later spanning-tree vlan priority Sets the priority value for RPVST+. Syntax spanning-tree vlan vlan-id priority priority value Parameters priority priority value — Enter a bridge-priority value in increments of 4096 (0 to 61440). Valid priority values are: 0, 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, and 61440. All other values are rejected.
Default Not configured Command Mode CONFIGURATION Usage Information None Example OS10(config)# spanning-tree vlan 1 root primary Supported Releases 10.2.0E or later Rapid spanning-tree protocol RSTP is similar to STP but provides faster convergence and interoperability with devices configured with STP and MSTP. RSTP is disabled by default. All enabled interfaces in L2 mode are automatically added to the RSTP topology.
View all port participating in RSTP OS10# show spanning-tree Spanning tree enabled protocol rstp with force-version rstp Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 3417.4455.667f Root Bridge hello time 2, max age 20, forward delay 15 Bridge ID Priority 32768, Address 90b1.1cf4.
Forward-time 15 seconds — Amount of time an interface waits in the Listening state and the Learning state before it transitions to the Forwarding state. Hello-time 2 seconds — Time interval in which the bridge sends RSTP BPDUs. Max-age 20 seconds — Length of time the bridge maintains configuration information before it refreshes that information by recomputing the RSTP topology.
Port cost Value that is based on the interface type. The previous table lists the default values. The greater the port cost, the less likely the port is selected to be a forwarding port. Port priority Influences the likelihood that a port is selected to be a forwarding port in case that several ports have the same port cost. • Change the port cost of an interface in INTERFACE mode (1 to 200000000).
ethernet1/1/6:3 ethernet1/1/6:4 Root Altr 128.282 128 128.283 128 2000 FWD 0 2000 BLK 0 AUTO AUTO No No EdgePort forward traffic EdgePort allows the interface to forward traffic approximately 30 seconds sooner as it skips the Blocking and Learning states. The spanning-tree bpduguard enable command causes the interface hardware to shut down when it receives a BPDU. CAUTION: Configure EdgePort only on links connecting to an end station.
BPDUs using the spanning-tree guard loop command. After BPDUs are received, the port moves out of the Loop-Inconsistent (or blocking) state and transitions to an appropriate state determined by STP. Enabling loop guard on a per port basis enables it on all VLANs configured on the port. If you disable loop guard on a port, it is moved to the Listening state. If you enable BPDU filter and BPDU guard on the same port, the BPDU filter configuration takes precedence.
Boundary: NO bpdu filter : bpdu guard : bpduguard shutdown-onviolation :disable RootGuard: disable LoopGuard enable Bpdus (MRecords) sent 7, received 20 Interface Designated Name PortID Prio Cost Sts Cost Bridge ID PortID ------------------------------------------------------------------------ethernet1/1/4 128.272 128 500 FWD 0 32769 90b1.1cf4.9d3b 128.
Command Mode EXEC Usage Information None Example OS10# show spanning-tree active Spanning tree enabled protocol rstp with force-version rstp Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 90b1.1cf4.9b8a Root Bridge hello time 2, max age 20, forward delay 15 Bridge ID Priority 32768, Address 90b1.1cf4.
spanning-tree bpdufilter Enables or disables BPDU filtering on an interface. Syntax Parameters spanning-tree bpdufilter {enable | disable} • enable — Enables the BPDU filtering on an interface. • disable — Disables the BPDU filtering on an interface. Default Disabled Command Mode INTERFACE Usage Information Use the enable parameter to enable BPDU filtering. Example OS10(conf-if-eth1/1/4)# spanning-tree bpdufilter enable Supported Releases 10.2.
Usage Information Root guard and loop guard configurations are mutually exclusive. Configuring one overwrites the other from the active configuration. Command Mode INTERFACE Example OS10(conf-if-eth1/1/4)# spanning-tree guard root Supported Releases 10.2.0E or later spanning-tree mode Enables an STP type (RSTP, Rapid-PVST+, or MST). Syntax spanning-tree mode {rstp | mst | rapid-pvst} Parameters • rstp — Sets the STP mode to RSTP. • mst — Sets the STP mode to MST.
spanning-tree rstp force-version Configures a forced version of spanning tree to transmit BPDUs. Syntax spanning-tree rstp force-version stp Parameters stp — Force the version for the BPDUs transmitted by RSTP. Default Not configured Command Mode CONFIGURATION Usage Information Forces a bridge that supports RSTP or MST to operate in a STP-compatible manner to avoid frame misordering and duplication in known LAN protocols that are sensitive.
spanning-tree rstp max-age Configures the time period the bridge maintains configuration information before refreshing the information by recomputing the RSTP topology. Syntax max-age seconds Parameters seconds — Enter a maximum age value in seconds (6 to 40). Default 20 seconds Command Mode CONFIGURATION Usage Information None Example OS10(config)# spanning-tree rstp max-age 10 Supported Releases 10.2.0E or later spanning-tree rstp Sets the priority value for RSTP.
• Ease network management Default VLAN All interface ports are administratively up (in L2 mode) and are automatically placed in the default VLAN as untagged interfaces. When you assign a port to a non-default VLAN in Trunk mode, the interface remains an untagged member of the default VLAN and a tagged member of the new VLAN. When you assign a port to a non-default VLAN in Access mode, it removes from the default VLAN and is assigned to the new VLAN as an untagged member of the new VLAN.
When you delete a VLAN (no interface vlan vlan-id command), any interfaces assigned to that VLAN are assigned to the default VLAN as untagged interfaces. Configure a port-based VLAN, enter INTERFACE-VLAN mode for VLAN related configuration tasks and create a VLAN. Assign interfaces in L2 mode to the VLAN to enable it. 1 Create a VLAN and enter the VLAN number in INTERFACE mode (1 to 4093). interface vlan vlan-id 2 Delete a VLAN in CONFIGURATION mode.
Change the access port membership in a VLAN by specifying the new VLAN. You must create the VLAN before you can assign the port in Access mode to that VLAN. Use the no switchport access vlan command to reset to default VLAN. 1 Configure a port in INTERFACE mode. interface ethernet node/slot/port[:subport] 2 Set the interface to Switchport mode as access in INTERFACE mode. switchport mode access 3 Enter the VLAN number for the untagged port in INTERFACE mode.
! ... Assign IP address You can assign an IP address to each VLAN to make it a L3 VLAN — the ports in that VLAN belong to that particular IP subnet. The traffic between the ports in different VLANs route using the IP address. Configure the L3 VLAN interface to remain administratively UP or DOWN using the shutdown and no shutdown commands. This provisioning only affects the L3 traffic across the members of a VLAN and does not affect the L2 traffic.
Last clearing of "show interface" counters Queueing strategy: fifo Time since last interface status change: View VLAN configuration You can view configuration information related to VLANs using show commands. • • • View the VLAN status and configuration information in EXEC mode. show vlan View the VLAN interface configuration in EXEC mode. show interfaces vlan View the VLAN interface configuration for a specific VLAN ID in EXEC mode.
Flowcontrol rx off tx off ARP type: ARPA, ARP Timeout: 240 Last clearing of "show interface" counters Queueing strategy: fifo Time since last interface status change: View interface configuration for specific VLAN OS10# show interface vlan 320 Vlan 320 is up, line protocol is up Address is , Current address is Interface index is 69209184 Internet address is not set MTU 1532 bytes LineSpeed auto Flowcontrol rx off tx off ARP type: ARPA, ARP Timeout: 240 Last clearing of "show interface" counters Queueing str
show vlan Displays VLAN configurations. Syntax show vlan vlan-id Parameters vlan-id — (Optional) Enter a VLAN ID number (1 to 4093). Default Not configured Command Mode EXEC Usage Information Use this command to view VLAN configuration information for a specific VLAN ID.
3 Enter the source and direction of monitored traffic in MONITOR-SESSION mode. source interface interface-type {both | rx | tx} 4 Enter the destination of traffic in MONITOR-SESSION mode.
Default Not configured Command Mode MONITOR-SESSION Usage Information The no version of this command resets the value to the default. Example OS10(conf-mon-local-10)# destination interface port-channel 10 Supported Releases 10.2.0E or later monitor session Creates a session for monitoring traffic with port monitoring. Syntax Parameters monitor session session-id type local ] • session-id — Enter a monitor session ID (1 to 18). • local — (Optional) Enter a local monitoring session.
shut Disables the monitoring session. Syntax shut Parameters None Default Disabled Command Mode MONITOR-SESSION Usage Information The no version of this command enables the monitoring session. Example OS10(config)# monitor session 1 OS10(conf-mon-local-1)# no shut Supported Releases 10.2.0E or later source (Port Monitoring) Configures a source for port monitoring. .
4 Layer 3 Border Gateway Protocol (BGP) Provides an external gateway protocol that transmits inter-domain routing information within and between autonomous systems (see BGP Commands). Equal Cost MultiPath (ECMP) Provides next-hop packet forwarding to a single destination over multiple best paths (see ECMP Commands). IPv4 Routing Provides forwarding of packets to a destination IP address, based on a routing table.
path to reach a router external to the AS. EBGP routers exchange information with other EBGP routers and IBGP routers to maintain connectivity and accessibility. Classless interdomain routing BGPv4 supports classless interdomain routing (CIDR) with aggregate routes and AS paths. CIDR defines a network using a prefix consisting of an IP address and mask, resulting in efficient use of the IPv4 address space. Using aggregate routes reduces the size of routing tables.
Established Keepalive messages exchange, and after a successful receipt, the router is in the Established state. Keepalive messages continue to send at regular periods. The keepalive timer establishes the state to verify connections. After the connection is established, the router sends and receives keepalive, update, and notification messages to and from its peer. Peer templates Peer templates allow BGP neighbors to inherit the same outbound policies.
Multiprotocol BGP Multiprotocol BGP (MBGP) is an extension to BGP that supports multiple address families—IPv4 and IPv6. MBGP carries multiple sets of unicast and multicast routes depending on the address family. You can enable the MBGP feature on a per router, per template, and/or a per peer basis. The default is the IPv4 unicast routes.
• A path with no AS_PATH configured has a path length of 0 • AS_CONFED_SET is not included in the AS_PATH length • AS_CONFED_SEQUENCE has a path length of 1 no matter how many ASs are in the AS_CONFED_SEQUENCE 4 Prefer the path with the lowest ORIGIN type—IGP is lower than EGP and EGP is lower than INCOMPLETE. 5 Prefer the path with the lowest multiexit discriminator (MED) attribute: • This comparison is only done if the first neighboring AS is the same in the two paths.
Multiexit discriminators If two autonomous systems connect in more than one place, use a multiexit discriminator (MED) to assign a preference to a preferred path. MED is one of the criteria used to determine best path—other criteria may also impact selection. One AS assigns the MED a value. Other AS uses that value to decide the preferred path. Assume that the MED is the only attribute applied and there are two connections between AS 100 and AS 200. Each connection is a BGP session.
The question mark (?) indicates an origin code of INCOMPLETE, and the lower case letter (i) indicates an origin code of IGP. Origin configuration OS10# show ip bgp BGP local RIB : Routes to be Added , Replaced , Withdrawn BGP local router ID is 30.1.1.
If you configure the bgp bestpath as-path ignore command and the bestpath as-path multipath-relax command at the same time, an error message displays—only enable one command at a time. More path support More path (Add-Path) reduces convergence times by advertising multiple paths to its peers for the same address prefix without replacing existing paths with new ones. By default, a BGP speaker advertises only the best path to its peers for a given address prefix.
4-Byte AS numbers OS10 supports 4-byte AS number configurations by default. The 4-byte support is advertised as a new BGP capability - 4-BYTE-AS, in the OPEN message. A BGP speaker that advertises 4-Byte-AS capability to a peer, and receives the same from that peer must encode AS numbers as 4-octet entities in all messages. If the AS number of the peer is different, the 4-byte speaker brings up the neighbor session using a reserved 2-byte ASN,23456 called AS_TRANS.
The Local-AS does not prepend the updates with the AS number received from the EBGP peer if you use the no prepend command. If you do not select no prepend, the default, the Local-AS adds to the first AS segment in the AS-PATH. If you use an inbound route-map to prepend the AS-PATH to the update from the peer, the Local-AS adds first. If Router B has an inbound route-map applied on Router C to prepend 65001 65002 to the AS-PATH, these events take place on Router B: • • • Receive and validate the update.
connected to the router. The BGP process first determines if all internal BGP peers are reachable, then it determines which peers outside the AS are reachable. 1 Assign an AS number, and enter ROUTER-BGP mode from CONFIGURATION mode (1 to 65535 for 2-byte, 1 to 4294967295 for 4byte). Only one AS number is supported per system. If you enter a 4-byte AS number, 4-byte AS support is enabled automatically. router bgp as-number 2 Enter a neighbor in ROUTER-BGP mode.
Prefixes accepted 3, Prefixes advertised 0 Connections established 3; dropped 2 Closed by neighbor sent 00:03:26 ago Local host: 5.1.1.2, Local port: 43115 Foreign host: 5.1.1.1, Foreign port: 179 View BGP running configuration OS10# show running-configuration router bgp 65123 router-id 192.168.10.2 ! address-family ipv4 unicast ! neighbor 10.10.21.1 remote-as 65123 no shutdown ! neighbor 10.10.32.3 remote-as 65123 no shutdown ! neighbor 100.10.92.9 remote-as 65192 no shutdown ! neighbor 192.168.10.
peer template and assign a name to it before adding members to the peer template. Create a peer template before configuring any route policies for the template. NOTE: An outbound filter policy, distribute list or route map, is not supported on a peer group member. 1 Enable BGP, and assign the AS number to the local BGP speaker in CONFIGURATION mode, from 1 to 65535 for 2 byte, 1 to 4294967295 | 0.1 to 65535.65535 for 4 byte, or 0.1 to 65535.65535 in dotted format.
Minimum time between advertisement runs is 30 seconds For address family: Unicast BGP neighbor is ebgppg, peer-group external Update packing has 4_OCTET_AS support enabled Number of peers in this group 1 Peer-group members: View running configuration OS10(config-router-neighbor)# do show running-configuration bgp ! router bgp 300 ! neighbor 3.1.1.
Received 23 messages 1 opens, 0 notifications, 1 updates 21 keepalives, 0 route refresh requests Sent 21 messages 1 opens, 0 notifications, 0 updates 20 keepalives, 0 route refresh requests Minimum time between advertisement runs is 30 seconds Minimum time before advertisements start is 0 seconds Capabilities received from neighbor for IPv4 Unicast: MULTIPROTO_EXT(1) ROUTE_REFRESH(2) CISCO_ROUTE_REFRESH(128) 4_OCTET_AS(65) Capabilities advertised to neighbor for IPv4 Unicast: MULTIPROTO_EXT(1) ROUTE_REFRESH
Fast external fallover is enabled by default. To disable or re-enable it, use the [no] fast-external-fallover command. For the fast-external-fallover command to take effect on an established BGP session, you must reset the session using the clear ip bgp {* | peer-ipv4-address | peer-ipv6-address} command. View fast external fallover configuration OS10(config)# do show running-configuration bgp ! router bgp 300 ! neighbor 3.1.1.
BGP router identifier 11.11.11.11 local AS number 300 Neighbor AS MsgRcvd MsgSent Up/Down State/Pfx ----------------------------------------------------------------3.1.1.1 100 7 4 00:00:29 3 3::1 100 9 5 00:00:29 4 OS10(conf-if-eth1/1/1)# OS10(config-router-bgp-neighbor-af)# Apr 27 01:39:03 OS10 dn_sm[2065]: Node.1-Unit.1:PRI:alert [os10:event], %Dell EMC (OS10) %BGP_NBR_BKWD_STATE_CHG: Backward state change occurred Hold Time expired for Nbr:3.1.1.3 VRF:default Apr 27 01:39:03 OS10 dn_sm[2065]: Node.
2 Enter a local-as number for the peer, and the AS values not prepended to announcements from the neighbors in ROUTERNEIGHBOR mode (1 to 4294967295). local-as as number [no prepend] 3 Return to ROUTER-BGP mode. exit 4 Enter a template name to assign to the peer-groups in ROUTER-BGP mode (up to 16 characters). template template-name 5 Enter a local-as number for the peer in ROUTER-TEMPLATE mode.
neighbor 17.1.1.
1 Assign an AS number in CONFIGURATION mode. router bgp as-number 2 Enter a neighbor and IP address (A.B.C.D) in ROUTER-BGP mode. neighbor ip-address 3 Enter Address Family mode in ROUTER-NEIGHBOR mode. address-family {[ipv4 | ipv6] [unicast]) 4 Allow the specified neighbor to send or receive multiple path advertisements in ROUTER-BGP mode. The count parameter controls the number of paths that are advertised — not the number of paths received.
4 Enter the neighbor to apply the route map configuration in ROUTER-BGP mode. neighbor {ip-address} 5 Apply the route map to the neighbor’s incoming or outgoing routes in ROUTER-BGP-NEIGHBOR-AF mode. route-map map-name {in | out) 6 Enter the peer group to apply the route map configuration in ROUTER-BGP mode. template template-name 7 Apply the route map to the peer group’s incoming or outgoing routes in CONFIG-ROUTER-TEMPLATE-AF mode.
OS10(config-router-bgp-10)# template zanzibar OS10(config-router-template)# weight 200 Enable multipath You can have one path to a destination by default, and enable multipath to allow up to 64 parallel paths to a destination. The show ip bgp network command includes multipath information for that network. • Enable multiple parallel paths in ROUTER-BGP mode.
Configure clusters of routers where one router is a concentration router and the others are clients who receive their updates from the concentration router. 1 Assign an ID to a router reflector cluster in ROUTER-BGP mode. You can have multiple clusters in an AS. cluster-id cluster-id 2 Assign a neighbor to the router reflector cluster in ROUTER-BGP mode. neighbor {ip-address} 3 Configure the neighbor as a route-reflector client in ROUTER-NEIGHBOR mode, then return to ROUTER-BGP mode.
! neighbor 32.1.1.2 remote-as 104 no shutdown ! address-family ipv4 unicast Confederations Another way to organize routers within an AS and reduce the mesh for IBGP peers is to configure BGP confederations. As with route reflectors, Dell EMC recommends BGP confederations only for IBGP peering involving many IBGP peering sessions per router. When you configure BGP confederations, you break the AS into smaller sub-ASs. To devices outside your network, the confederations appear as one AS.
Route dampening When EBGP routes become unavailable, they “flap” and the router issues both WITHDRAWN and UPDATE notices. A flap occurs when a route is withdrawn, readvertised after being withdrawn, or has an attribute change. The constant router reaction to the WITHDRAWN and UPDATE notices causes instability in the BGP process. To minimize this instability, configure penalties (a numeric value) for routes that flap.
View dampened paths OS10# show ip bgp dampened-paths BGP local router ID is 80.1.1.1 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Origin codes: i - IGP, e - EGP, ? - incomplete Network From Reuse Path d* 3.1.2.0/24 80.1.1.2 00:00:12 800 9 8 i d* 3.1.3.0/24 80.1.1.2 00:00:12 800 9 8 i d* 3.1.4.0/24 80.1.1.2 00:00:12 800 9 8 i d* 3.1.5.0/24 80.1.1.2 00:00:12 800 9 8 i d* 3.1.6.0/24 80.1.1.
1 Enable soft-reconfiguration for the BGP neighbor and BGP template in ROUTER-BGP mode. BGP stores all the updates that the neighbor receives but does not reset the peer-session. Entering this command starts the storage of updates, which is required to do inbound soft reconfiguration. neighbor {ip-address} soft-reconfiguration inbound 2 Enter Address Family mode in ROUTER-NEIGHBOR mode. address-family {[ipv4 | ipv6] [unicast]} 3 Configure soft-configuration for the neighbors belonging to the template.
• receive — Receive multiple paths from the peer. • send path count — Enter the number of multiple paths to send multiple to the peer, from 2 to 64. Default Not configured Command Mode ROUTER-BGP-NEIGHBOR-AF Usage Information Advertising multiple paths to peers for the same address prefix without replacing the existing path with a new one reduces convergence times. The no version of this command disables the multiple path advertisements for the same destination.
Usage Information The time interval applies to all peer group members of the template in ROUTER-TEMPLATE mode. The no version of this command resets the advertisement-interval value to the default. Example OS10(conf-router-neighbor)# advertisement-interval 50 Supported Releases 10.3.0E or later advertisement-start Delays initiating the OPEN message for the specified time.
allowas-in Sets the number of times a local AS number appears in the AS path. Syntax allowas-in as-number Parameters as-number—Enter the number of occurrences for a local AS number, from 1 to 10. Default Disabled Command Mode ROUTER-BPG-TEMPLATE-AF Usage Information Use this command to enable the BGP speaker to allow the AS number to be present for the specified number of times in updates received from the peer. You cannot set this configuration for a peer associated with a peer group.
Command Mode ROUTER-BGP Usage Information To enable load-balancing across different EBGP peers, configure the mutlipath-relax option. If you configure both ignore or multipath-relax options at the same time, a system-generated error message appears. The no version of this command disables configuration. Example OS10(conf-router-bgp-10)# bestpath as-path multipath-relax Supported Releases 10.3.0E or later bestpath med Changes the best path MED attributes during MED comparison for path selection.
Parameters • IPv4–address — Enter an IPv4 address to clear a BGP neighbor configuration. • IPv6–address — Enter an IPv6 address to clear a BGP neighbor configuration. • * — Clears all BGP sessions. Default Not configured Command Mode EXEC Usage Information To reset BGP IPv4 or IPv6 neighbor sessions, use this command. Example OS10# clear ip bgp 1.1.15.4 Supported Releases 10.3.0E or later clear ip bgp * Resets BGP sessions.
Usage Information Configure your system to accept 4-byte formats before entering a 4-byte AS number. All routers in the Confederation must be 4-byte or 2-byte identified routers. You cannot have a mix of 2-byte and 4-byte identified routers. The autonomous system number you configure in this command is visible to the EBGP neighbors. Each autonomous system is fully meshed and contains a few connections to other autonomous systems.
cluster-id Assigns a cluster ID to a BGP cluster with multiple route reflectors. Syntax cluster-id {number | ip-address} Parameters • number—Enter a route reflector cluster ID as a 32-bit number, from 1 to 4294967295. • ip-address—Enter an IP address as the route-reflector cluster ID. Default Router ID Command Mode ROUTER-BGP Usage Information If a cluster contains only one route reflector, the cluster ID is the route reflector’s router ID.
Supported Releases 10.3.0E or later default-metric Assigns a default-metric of redistributed routes to locally originated routes. Syntax default-metric number Parameters number — Enter a number as the metric to assign to routes from other protocols, from 1 to 4294967295. Default Disabled Command Mode ROUTER-BGP Usage Information Assigns a metric for locally-originated routes such as redistributed routes.
Command Mode ROUTER-NEIGHBOR Usage Information This command avoids installation of default multihop peer routes to prevent loops and creates neighbor relationships between peers. Networks indirectly connected are not valid for best path selection. The no version of this command removes multihop session. Example OS10(conf-router-neighbor)# ebgp-multihop 2 Supported Releases 10.3.
fast-external-fallover Resets BGP sessions immediately when a link to a directly connected external peer fails. Syntax fast-external-fallover Parameters None Default Not configured Command Mode ROUTER-BGP Usage Information Fast external fall-over terminates the EBGP session immediately after the IP unreachability or link failure is detected. This only applies after you manually reset all existing BGP sessions. For the configuration to take effect, use the clear ip bgp command.
Supported Releases 10.2.0E or later local-as Configures a local AS number for a peer. Syntax local-as as-number [no-prepend] Parameters • as-number—Enter the local AS number, from 1 to 4294967295. • no-prepend—(Optional) Enter so that local AS values are not prepended to announcements from the neighbor. Default Disabled Command Mode ROUTER-NEIGHBOR or ROUTER-TEMPLATE Usage Information Facilitates the BGP network migration operation and allows you to maintain existing AS numbers.
• number—Enter the number of parallel paths, from 1 to 64. Default 64 paths Command Mode ROUTER-BGP Usage Information Dell EMC recommends not using multipath and add path simultaneously in a route reflector. To recompute the best path, use the clear ip bgp * command. The no version of this command resets the value to the default. Example (EBGP) OS10(conf-router-bgp-2)# maximum-paths ebgp 2 maxpaths Example (IBGP) OS10(conf-router-bgp-2)# maximum-paths ibgp 4 maxpaths Supported Releases 10.3.
Example OS10(conf-router-bgp-2)# neighbor 32.1.0.0 OS10(conf-router-neighbor)# Supported Releases 10.3.0E or later next-hop-self Disables the next-hop calculation for a neighbor. Syntax next-hop-self Parameters None Default Enabled Command Mode ROUTER-NEIGHBOR-AF Usage Information Influences next-hop processing of EBGP routes to IBGP peers. The no version of this command disables the nexthop calculation. Example OS10(conf-router-neighbor-af)# next-hop-self Supported Releases 10.3.
Usage Information Enable or disable outbound optimization dynamically to reset all neighbor sessions. When you enable outbound optimization, all peers receive the same update packets. The next-hop address chosen as one of the addresses of neighbor’s reachable interfaces is also the same for the peers. The no version of this command disables outbound optimization. Example OS10(conf-router-bgp-10)# outbound-optimization Supported Releases 10.3.
Example (Static — IPv6) OS10(conf-router-bgp-102)# address-family ipv6 unicast OS10(conf-router-bgpv6-af)# redistribute static Example (OSPF — IPv4) OS10(conf-router-bgp-102)# address-family ipv4 unicast OS10(conf-router-bgpv4-af)# redistribute ospf 1 Example (OSPF — IPv6) OS10(conf-router-bgp-102)# address-family ipv6 unicast OS10(conf-router-bgpv6-af)# redistribute ospf 1 Supported Releases 10.2.0E or later route-reflector-client Configures a neighbor as a member of a route-reflector cluster.
router-id Assigns a user-given ID to a BGP router. Syntax router-id ip-address Parameters ip-address — Enter an IP address in dotted decimal format. Default First configured IP address or random number Command Mode ROUTER-BGP Usage Information Change the router ID of a BGP router to reset peer-sessions. The no version of this command resets the value to the default. Example OS10(conf-router-bgp-10)# router-id 10.10.10.40 Supported Releases 10.3.
Example (IPv4) OS10(conf-router-bgp-102)# neighbor 3.3.3.1 OS10(conf-router-neighbor)# address-family ipv4 unicast OS10(conf-router-bgp-neighbor-af)# sender-side-loop-detection Example (IPv6) OS10(conf-router-bgp-102)# neighbor 32::1 OS10(conf-router-neighbor)# address-family ipv6 unicast OS10(conf-router-bgp-neighbor-af)# no sender-side-loop-detection Supported Releases 10.3.0E or later show ip bgp Displays information that BGP neighbors exchange.
Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Origin codes: i - IGP, e - EGP, ? - incomplete Network From Reuse Path d* 3.1.2.0/24 80.1.1.2 00:00:12 800 9 8 i d* 3.1.3.0/24 80.1.1.2 00:00:12 800 9 8 i d* 3.1.4.0/24 80.1.1.2 00:00:12 800 9 8 i d* 3.1.5.0/24 80.1.1.2 00:00:12 800 9 8 i d* 3.1.6.0/24 80.1.1.2 00:00:12 800 9 8 i Total number of prefixes: 5 Supported Releases 10.3.0E or later show ip bgp flap-statistics Displays BGP flap statistics on BGP routes.
Command Mode EXEC Usage Information This command provides output which displays locally advertised BGPv4 routes configured using the network command. These routes show as r for redistributed/network-learned routes. Example OS10# show ip bgp ipv4 unicast summary BGP router identifier 80.1.1.1 local AS number 102 Neighbor AS MsgRcvd MsgSent Up/Down State/Pfx 80.1.1.2 800 8 4 00:01:10 5 Supported Releases 10.3.0E or later show ip bgp ipv6 unicast Displays route information for BGP IPv6 routes.
Command Mode Usage Information EXEC • BGP neighbor — Displays the BGP neighbor address and its AS number. The last phrase in the line indicates whether the link between the BGP router and its neighbor is an external or internal one. If they are located in the same AS, the link is internal; otherwise the link is external. • BGP version — Displays the BGP version (always version 4) and the remote router ID.
Example advertised- OS10# show ip bgp ipv6 unicast neighbors 192:168:1::2 advertised-routes BGP local router ID is 100.1.1.
Total number of prefixes: 10 OS10# Supported Releases 10.3.0E or later show ip bgp peer-group Displays information on BGP peers in a peer-group. Syntax show ip bgp peer-group peer-group-name Parameters peer-group-name — (Optional) Enter the peer group name to view information about that peer-group only. Default Not configured Command Mode EXEC Usage Information Example • Peer-group — Displays the peer group name. Minimum time displays the time interval between BGP advertisements.
• AS—Displays the AS number of the neighbor • MsgRcvd—Displays the number of BGP messages that the neighbor received. • MsgSent—Displays the number of BGP messages that the neighbor sent. • Up/Down—Displays the amount of time that the neighbor is in the Established stage. If the neighbor has never moved into the Established stage, the word never displays.
Command Mode CONFIG-ROUTER-BGP Usage Information Members of a peer-group template inherit the configuration properties of the template and share the same update policy. The no version of this command removes a peer-template configuration. Example OS10(conf-router-bgp-10)# template solar OS10(conf-router-bgp-template)# Supported Releases 10.3.0E or later timers Adjusts BGP keepalive and holdtime timers.
Equal cost multi-path ECMP is a routing technique where next-hop packet forwarding to a single destination occurs over multiple best paths. OS10 uses a hashing algorithm to determine the next-hop when you enable ECMP. The hashing algorithm makes hashing decisions based on values in various packet fields as well as some internal values. • Configure the hash algorithm in CONFIGURATION mode.
hash-algorithm Changes the hash algorithm that distributes traffic flows across ECMP paths and the LAG. Syntax Parameters hash-algorithm {ecmp | lag} crc • ecmp — Enables ECMP hash configuration. • lag — Enables LAG hash configuration for L2 only. • crc — Enables CRC polynomial for hash computation. Default crc Command Mode CONFIGURATION Usage Information The hash value calculated with this command is unique to the entire system.
Parameters Default Command Mode Usage Information • ingress-port enable — Enables load-balancing on ingress ports. • tcp-udp-selection — Enables the TCP UDP port for load-balancing configuration. • ip-selection — Enables IPv4 key parameters to use in the hash computation. • ipv6-selection — Enables IPV6 key parameters to use in hash computation. • destination-ip — Enables the destination IP address in the hash calculation. • source-ip — Enables the source IP address in the hash calculation.
Command Mode EXEC Usage Information None Example OS10# show hash-algorithm EcmpAlgo - crc LabAlgo - xor Supported Releases 10.3.0E or later IPv4 routing OS10 supports IPv4 addressing including variable-length subnetting mask (VLSM), address resolution protocol (ARP), static routing, and routing protocols. With VLSM, you can configure one network with different masks. You can also use supernetting, which increases the number of subnets.
Interface index is 16866084 Internet address is not set Mode of IPv4 Address Assignment: not set MTU 1532 bytes LineSpeed 40G, Auto-Negotiation on Flowcontrol rx off tx off ARP type: ARPA, ARP Timeout: 60 Last clearing of "show interface" counters: 3 weeks 1 day 23:12:50 Queuing strategy: fifo Input statistics: 0 packets, 0 octets 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 0 Broadcasts, 0 Unicasts 0 runts, 0 giant
ethernet 1/1/5 has IP address on subnet 100.0.0.0/8, and if 10.1.1.0/24 recursively resolves to 100.1.1.1, the system installs the static route: • When the interface goes down, OS10 withdraws the route. • When the interface comes up, OS10 reinstalls the route. • When the recursive resolution is broken, OS10 withdraws the route. • When the recursive resolution is satisfied, OS10 reinstalls the route.
• A.B.C.D/mask —Specify the IP route to be removed from the IP routing table. This option refreshes all the routes in the routing table, but the traffic flow is affected only for the specified route in the switch. Default Not configured Command Mode EXEC Usage Information This command does not remove the static routes from the routing table. Example OS10# clear ipv6 Supported Releases 10.3.0E or later route 10.1.1.0/24 ip address Configures IP address to an interface.
Default Not configured Command Mode INTERFACE Usage Information Do not use Class D (multicast) or Class E (reserved) IP addresses. Zero MAC addresses (00:00:00:00:00:00) are also invalid. The no version of this command disables IP ARP configuration. Example OS10(conf-if-eth1/1/6)# ip arp 10.1.1.5 08:00:20:b7:bd:32 Supported Releases 10.2.0E or later ip route Assigns a static route on the network device.
Default Not configured Command Mode EXEC Usage Information This command shows both static and dynamic ARP entries. Example (IP Address) OS10# show ip arp ip 192.168.2.2 Example (Static) OS10# show ip arp summary Total Entries Static Entries Dynamic Entries -----------------------------------------------------------3994 0 3994 OS10# show ip arp 100.1.2.
• summary — (Optional) Displays an IP route summary.
• M and O flags • Reachable time • Retransmission timer • MTU options • Preferred and valid lifetime values for the same prefix The router redirect functionality in the Neighbor Discovery protocol (NDP) is similar to IPv4 router redirect messages. NDP uses ICMPv6 redirect messages (Type 137) to inform nodes that a better router exists on the link.
To enable stateless autoconfiguration of an IPv6 global address and set the interface to Host mode, use the ipv6 address autoconfig command. The router receives network prefixes in IPv6 router advertisements (RAs). An interface ID is appended to the prefix. In Host mode, IPv6 forwarding is disabled. The no ipv6 address autoconfig command disables IPv6 global address autoconfiguration, and sets the interface to Router mode with IPv6 forwarding enabled.
Configure IPv6 static routing and view configuration OS10(config)# ipv6 route 2111:dddd:0eee::22/128 2001:db86:0fff::2 OS10(config)# do show ipv6 route static Codes: C - connected S - static B - BGP, IN - internal BGP, EX - external BGP O - OSPF,IA - OSPF inter area, N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2, E1 - OSPF external type 1, E2 - OSPF external type 2, > - non-active route Gateway of last resort is not set Destination Gateway Dist/Metric Last Change ---------------------------
• A::B/mask — Removes the IPv6 route and refreshes the IPv6 routing table. Traffic flow in the switch is affected only for the specified route. Default Not configured Command Mode EXEC Usage Information This command does not remove the static routes from the routing table. Example OS10# clear ipv6 Supported Releases 10.3.0E or later route * ipv6 address Configures a global unicast IPv6 address on an interface.
OS10(conf-if-eth1/1/1)# ipv6 address autoconfig OS10(conf-if-eth1/1/1)# Supported Releases 10.3.0E or later ipv6 address dhcp Enables DHCP client operations on the interface. Syntax ipv6 address dhcp Parameters None Defaults None Command Mode INTERFACE Usage Information The no version of this command disables the DHCP operations on the interface. Example OS10(config)# interface mgmt 1/1/1 OS10(conf-if-ma-1/1/1)# ipv6 address dhcp Supported Releases 10.3.
show ipv6 route Displays IPv6 routes. Syntax Parameters show ipv6 route [all | bgp | connected | static | A::B/mask | summary] • all—(Optional) Displays all routes including nonactive routes. • bgp—(Optional) Displays BGP route information. • connected—(Optional) Displays only the directly connected routes. • static—(Optional) Displays all static routes. • A::B/mask—(Optional) Enter the IPv6 destination address and mask. • summary—(Optional) Displays the IPv6 route summary.
Open shortest path first OSPF routing is a link-state routing protocol that allows sending of link-state advertisements (LSAs) to all other routers within the same autonomous system (AS) area. Information about attached interfaces, metrics used, and other attributes are included in OSPF LSAs. OSPF routers accumulate link-state information, and use the shortest path first (SPF) algorithm to calculate the shortest path to each node. Autonomous system areas OSPF operates in a type of hierarchy.
The backbone is the only area with a default area number. You configure all other areas Area ID. If you configure two nonbackbone areas, you must enable the B bit in OSPF. Routers, A, B, C, G, H, and I are the backbone, see Autonomous system areas. • • • A stub area (SA) does not receive external route information, except for the default route. These areas do receive information from interarea (IA) routes.
Backbone router A backbone router (BR) is part of the OSPF Backbone, Area 0, and includes all ABRs. The BR includes routers connected only to the backbone and another ABR, but are only part of Area 0—shown as Router I in the example. Area border router Within an AS, an area border router (ABR) connects one or more areas to the backbone. The ABR keeps a copy of the link-state database for every area it connects to. It may keep multiple copies of the link state database.
Inter-Area-Router LSA (OSPFv3) Type 5—ASExternal LSA LSAs contain information imported into OSPF from other routing processes. Type 5 LSAs flood to all areas except stub areas. The link-state ID of the Type 5 LSA is the external network number. Type 7—NSSAExternal LSA (OSPFv2), LSA (OSPFv3) Routers in an NSSA do not receive external LSAs from ABRs but send external routing information for redistribution.
OSPF route limit OS10 supports up to 16,000 OSPF routes. Within this range, the only restriction is on intra-area routes that scale only up to 100 routes. Other OSPF routes can scale up to 16 K. OSPFv2 OSPFv2 supports IPv4 address families. OSPFv2 routers initially exchange hello messages to set up adjacencies with neighbor routers. The hello process establishes adjacencies between routers of the AS. It is not required that every router within the AS areas establish adjacencies.
• process-id—Enter the OSPFv2 process ID for a specific OSPF process from 1 to 65535. • area-id—Enter the OSPFv2 area ID as an IP address (A.B.C.D) or number from 1 to 65535. Enable OSPFv2 configuration OS10(config)# router ospf 100 OS10(conf-router-ospf-100)# exit OS10(config)# interface ethernet 1/1/1 OS10(conf-if-eth1/1/1)# no shutdown OS10(conf-if-eth1/1/1)# no switchport OS10(conf-if-eth1/1/1)# ip address 11.1.1.1/24 OS10(conf-if-eth1/1/1)# ip ospf 100 area 0.0.0.
• area-id—Enter the OSPF area ID as an IP address (A.B.C.D) or number, from 1 to 65535. • no-summary—(Optional) Enter to prevent an ABR from sending summary LSA to the stub area. Configure stub area OS10(config)# router ospf 10 OS10(conf-router-ospf-10)# area 10.10.5.1 stub View stub area configuration OS10(conf-router-ospf-10)# do show ip ospf database OSPF Router with ID (111.2.1.1) (Process ID 10) Router (Area 0.0.0.0) Link ID 111.2.1.1 111.111.111.1 111.111.111.2 112.2.1.1 112.112.112.1 112.112.112.
!! ! You can disable a passive interface using the no ip ospf passive command. Fast convergence Fast convergence sets the minimum origination and arrival LSA parameters to zero (0), allowing rapid route calculation. A higher convergence level can result in occasional loss of OSPF adjacency. Convergence level 1 meets most convergence requirements. The higher the number, the faster the convergence, and the more frequent the route calculations and updates.
Interface parameters To avoid routing errors, interface parameter values must be consistent across all interfaces. For example, set the same time interval for the hello packets on all routers in the OSPF network to prevent misconfiguration of OSPF neighbors. 1 To change the OSPFv2 parameters in CONFIGURATION mode, enter the interface. interface interface-name 2 Change the cost associated with OSPF traffic on the interface in INTERFACE mode, from 1 to 65535. The default depends on the interface speed.
• route-map map-name—Enter the name of a configured route map.
When graceful restart is enabled, the restarting device retains the routes learned by OSPF in the forwarding table. To re establish OSPF adjacencies with neighbors, the restarting OSPF process sends a grace LSA to all neighbors. In response, the helper router enters helper mode and sends an acknowledgement back to the restarting device. OS10 supports graceful restart helper mode. Use the graceful-restart role helper-only command to enable the helper mode in the ROUTER OSPF mode.
• Is the router in the correct area type? • Are the OSPF routes included in the OSPF database? • Are the OSPF routes included in the routing table in addition to the OSPF database? Troubleshooting OSPF with show commands • View a summary of all OSPF process IDs enabled in EXEC mode. show running-configuration ospf • View summary information of IP routes in EXEC mode. show ip route summary • View summary information for the OSPF database in EXEC mode.
area nssa Defines an area as a NSSA. Syntax area area-id nssa [default-information-originate | no-redistribution | nosummary] Parameters • area-id — Enter the OSPF area ID as an IP address (A.B.C.D) or number (1 to 65535). • no-redistribution — (Optional) Prevents the redistribute command from distributing routes into the NSSA. Use no-redistribution command only in an NSSA ABR. • no-summary — (Optional) Ensures that no summary LSAs are sent into the NSSA.
Command Mode ROUTER-OSPF Usage Information The no version of this command deletes a stub area. Example OS10(config)# router ospf 10 OS10(conf-router-ospf-10)# area 10.10.1.5 stub Supported Releases 10.2.0E or later auto-cost reference-bandwidth Calculates default metrics for the interface based on the configured auto-cost reference bandwidth value.
Example OS10(config)# router ospf 10 OS10(config-router-ospf-10)# default-information originate always Supported Releases 10.3.0E or later default-metric Assigns a metric value to redistributed routes for the OSPF process. Syntax default-metric number Parameters number — Enter a default-metric value (1 to 16777214). Default Not configured Command Mode ROUTER-OSPF Usage Information The no version of this command disables the default-metric configuration.
Supported Releases 10.3.0E or later ip ospf area Attaches an interface to an OSPF area. Syntax Parameters ip ospf process-id area area-id • process-id — Set an OSPF process ID for a specific OSPF process (1 to 65535) • area area-id — Enter the OSPF area ID in dotted decimal format (A.B.C.D.) or enter an area ID number (1 to 65535). Default Not configured Command Mode INTERFACE Usage Information The no version of this command removes an interface from an OSPF area.
Example OS10(config)# interface vlan 10 OS10(conf-if-vl-1)# ip ospf cost 10 Supported Releases 10.2.0E or later ip ospf dead-interval Sets the time interval since the last hello-packet was received from a router. After the interval elapses, the neighboring routers declare the router dead. Syntax ip ospf dead-interval seconds Parameters seconds — Enter the dead interval value in seconds (1 to 65535).
Example OS10(config)# interface ethernet 1/1/1 OS10(conf-if-eth1/1/1)# ip ospf message-digest-key 2 md5 sample12345 Supported Releases 10.3.0E or later ip ospf mtu-ignore Disables OSPF MTU mismatch detection on receipt of DBD packets. Syntax ip ospf mtu-ignore Parameters None Default Not configured Command Mode INTERFACE Usage Information When neighbors exchange DBD packets, the OSPF process checks if the neighbors are using the same MTU on a common interface.
Example OS10(conf-if-eth1/1/6)# ip ospf passive Supported Releases 10.2.0E or later ip ospf priority Sets the priority of the interface to determine the designated router for the OSPF network. Syntax ip ospf priority number Parameters number — Enter a router priority number (0 to 255). Default 1 Command Mode INTERFACE Usage Information When two routers attached to a network attempt to become the designated router, the one with the higher router priority takes precedence.
log-adjacency-changes Enables logging of syslog messages about changes in the OSPF adjacency state. Syntax log-adjacency-changes Parameters None Default Disabled Command Mode ROUTER-OSPF Usage Information The no version of this command resets the value to the default. Example OS10(config)# router ospf 10 OS10(conf-router-ospf-10)# log-adjacency-changes Supported Releases 10.2.
redistribute Redistributes information from another routing protocol or routing instance to the OSPFv2 process. Syntax redistribute {bgp as-number| connected | static} [route-map map-name] Parameters • as-number — Enter an autonomous number to redistribute BGP routing information throughout the OSPF instance (1 to 4294967295). • connected — Enter the information from connected (active) routes on interfaces to redistribute.
Command Mode CONFIGURATION Usage Information Assign an IP address to an interface before using this command. The no version of this command deletes an OSPF instance. Example OS10(config)# router ospf 10 Supported Releases 10.2.0E or later show ip ospf Displays OSPF instance configuration information.
Supported Releases 10.2.0E or later show ip ospf database Displays all LSA information. You must enable OSPF to generate output. Syntax show ip ospf [process-id] database Parameters process-id — (Optional) View LSA information for a specific OSPF process ID. If you do not enter a process ID, the command applies only to the first OSPF process. Default Not configured Command Mode EXEC Usage Information Example • Link ID — Identifies the router ID.
Usage Information Example • LS Age—Displays the LS age. • Options—Displays optional capabilities. • LS Type—Displays the Link State type. • Link State ID—Identifies the router ID. • Advertising Router—Identifies the advertising router’s ID. • LS Seq Number—Identifies the LS sequence number (identifies old or duplicate LSAs). • Checksum—Displays the Fletcher checksum of an LSA’s complete contents. • Length—Displays the LSA length in bytes.
• Example Metric — Displays the LSA metric. OS10# show ip ospf 10 database external OSPF Router with ID (111.2.1.1) (Process ID 10) Type-5 AS External LS age: 1424 Options: (No TOS-capability, No DC, E) LS type: Type-5 AS External Link State ID: 110.1.1.0 Advertising Router: 111.2.1.1 LS Seq Number: 0x80000009 Checksum: 0xc69a Length: 36 Network Mask: /24 Metric Type: 2 TOS: 0 Metric: 20 Forward Address: 110.1.1.1 External Route Tag: 0 Supported Releases 10.2.
Advertising Router: 112.2.1.1 LS Seq Number: 0x80000008 Checksum: 0xd2b1 Length: 32 Network Mask: /24 Attached Router: 111.2.1.1 Attached Router: 112.2.1.1 Supported Releases 10.2.0E or later show ip ospf database nssa external Displays information about the NSSA-External (Type 7) LSA. Syntax show ip ospf [process-id]database nssa external Parameters process-id — (Optional) Displays NSSA-External (Type7) LSA information for a specified OSPF Process ID.
Network Mask: /0 Metric Type: 1 TOS: 0 Metric: 0 Forward Address: 0.0.0.0 External Route Tag: 0 LS age: 65 Options: (No TOS-Capability, No DC, No Type 7/5 translation) LS type: NSSA External Link State ID: 12.1.1.0 Advertising Router: 2.2.2.2 LS Seq Number: 0x80000001 Checksum: 0xBDEA Length: 36 Network Mask: /24 Metric Type: 2 TOS: 0 Metric: 20 Forward Address: 0.0.0.0 External Route Tag: 0 LS age: 65 Options: (No TOS-Capability, No DC, No Type 7/5 translation) LS type: NSSA External Link State ID: 13.1.1.
Usage Information Example • LS Age — Displays the LS age. • Options — Displays the optional capabilities available on the router. • LS Type — Displays the Link State type. • Link State ID — Identifies the router ID. • Advertising Router — Identifies the advertising router’s ID. • LS Seq Number — Identifies the LS sequence number (identifies old or duplicate LSAs). • Checksum — Displays the Fletcher checksum of an LSA’s complete contents. • Length — Displays the LSA length in bytes.
• Example Opaque ID — Identifies the Opaque type-specific ID (the remaining 24 bits of the LS ID). OS10# show ip ospf 100 database opaque-as OSPF Router with ID (1.1.1.1) (Process ID 100) Type-11 AS Opaque LS age: 3600 Options: (No TOS-Capability, No DC) LS type: Type-11 AS Opaque Link State ID: 8.1.1.3 Advertising Router: 2.2.2.2 LS Seq Number: 0x8000000D Checksum: 0x61D3 Length: 36 Opaque Type: 8 Opaque ID: 65795 Supported Releases 10.2.
Opaque Type: 8 Opaque ID: 65793 Supported Releases 10.2.0E or later show ip ospf database router Displays information about the router (Type 1) LSA. Syntax show ip ospf process-id database router Parameters process-id — (Optional) Displays the router (Type 1) LSA for an OSPF Process ID. If you do not enter a Process ID, this command applies only to the first OSPF process. Default Not configured Command Mode EXEC Usage Information Output: Example • LS age—Displays the LS age.
(Link ID) Designated Router address: 111.2.1.1 (Link Data) Router Interface address: 111.2.1.1 Number of TOS metric: 0 TOS 0 Metric: 1 Supported Releases 10.2.0E or later show ip ospf database summary Displays the network summary (Type 3) LSA routing information. Syntax show ip ospf [process-id] database summary Parameters process-id—(Optional) Displays LSA information for a specific OSPF process ID. If you do not enter a process ID, this command applies only to the first OSPF process.
Parameters • process-id — (Optional) Displays information for an OSPF Process ID. If you do not enter a Process ID, this command applies only to the first OSPF process. • interface — (Optional) Enter the interface information: • ethernet — Enter the Ethernet interface information (1 to 48) • port channel — Enter the port-channel interface number (1 to 128). • vlan — Enter the VLAN interface number (1 to ).
Parameters • instance-number — (Optional) Enter an OSPF instance number (1 to 65535). • interface interface — (Optional) Enter the interface information: • ethernet node/slot/port[:subport] — Enter an Ethernet port interface. • port-channel number — Enter the port-channel interface number (1 to 128). • vlan vlan-id — Enter the VLAN ID number (1 to 4093).
111.111.111.2 112.2.1.1 112.112.112.1 112.112.112.2 Supported Releases -/B/-/ E/-/-/ -/B/-/ -/B/-/ 1 1 2 2 111.2.1.2 110.1.1.2 110.1.1.2 110.1.1.2 Vl Vl Vl Vl 3053 3050 3050 3050 0 0 0 0 10.2.0E or later summary-address Configures a summary address for an ASBR to advertise one external route as an aggregate, for all redistributed routes covered by specified address range.
• max-interval — Sets the maximum amount of time the system waits before sending the LSA in milliseconds (1 to 600,000). . Default • start-interval — 0 milliseconds • hold-interval — 5000 milliseconds • max-interval — 5000 milliseconds Command Mode ROUTER-OSPF Usage Information The no version of this command removes the LSA transmit timer. Example OS10(config)# router ospf 10 OS10(conf-router-ospf-10)# timers throttle lsa all 100 300 1000 Supported Releases 10.2.
Assign Router ID You can assign a router ID for the OSPFv3 process. Configure an arbitrary value in the IP address format for each router. Each router ID must be unique. Use the fixed router ID for the active OSPFv3 router process. Changing the router ID brings down the existing OSPFv3 adjacency. The new router ID is effective at the next reload. • Assign the router ID for the OSPFv3 process in ROUTER-OSPFv3 mode.
Router Link States (Area 0.0.0.2) ADV Router Age Seq# Fragment ID Link count Bits ------------------------------------------------------------------199.205.134.103 32 0x80000002 0 1 202.254.156.15 33 0x80000002 0 1 B Net Link States (Area 0.0.0.2) ADV Router Age Seq# Link ID Rtr count ---------------------------------------------------------202.254.156.15 38 0x80000001 12 2 Inter Area Prefix Link States (Area 0.0.0.
Interface OSPFv3 Parameters Interface parameter values must be consistent across all interfaces to avoid routing errors. For example, set the same time interval for the hello packets on all routers in the OSPF network to prevent misconfiguration of OSPF neighbors. 1 Enter the interface to change the OSPFv3 parameters in CONFIGURATION mode. interface interface-name 2 Change the cost associated with OSPFv3 traffic on the interface in INTERFACE mode (1 to 65535, default depends on the interface speed).
Troubleshoot OSPFv3 You can troubleshoot OSPFv3 operations, as well as check questions for any typical issues that interrupt a process.
Example OS10(config)# router ospfv3 10 OS10(conf-router-ospfv3-10)# area 10.10.1.5 stub Supported Releases 10.3.0E or later auto-cost reference-bandwidth Calculates default metrics for the interface based on the configured auto-cost reference bandwidth value. Syntax auto-cost reference-bandwidth value Parameters value — Enter the reference bandwidth value to calculate the OSPFv3 interface cost in megabits per second (1 to 4294967).
ipv6 ospf area Attaches an interface to an OSPF area. Syntax ipv6 ospf process-id area area-id Parameters • process-id—Enter an OSPFv3 process ID for a specific OSPFv3 process (1 to 65535). • area-id—Enter the OSPFv3 area ID in dotted decimal format (A.B.C.D) or enter an area ID number (1 to 65535). Default Not configured Command Mode INTERFACE Usage Information The no version of this command removes an interface from an OSPFv3 area.
Example OS10(config)# interface vlan 10 OS10(conf-if-vl-10)# ipv6 ospf dead-interval 10 Supported Releases 10.3.0E or later ipv6 ospf hello-interval Sets the time interval between hello packets sent on an interface. Syntax ipv6 ospf hello-interval seconds Parameters seconds — Enter the hello-interval value in seconds (1 to 65535). Default 10 seconds Command Mode INTERFACE Usage Information All routers in a network must have the same hello time interval between the hello packets.
Example OS10(config)# interface ethernet 1/1/6 OS10(conf-if-eth1/1/6)# ipv6 ospf passive Supported Releases 10.3.0E or later ipv6 ospf priority Sets the priority of the interface to determine the designated router for the OSPFv3 network. Syntax ipv6 ospf priority number Parameters number — Enter a router priority number (0 to 255).
redistribute Redistributes information from another routing protocol or routing instance to the OSPFv3 process. Syntax Parameters redistribute {bgp as-number | connected | static} [route-map route-map name] • as-number — Enter an autonomous number to redistribute BGP routing information throughout the OSPFv3 instance (1 to 4294967295). • route-map name — Enter the name of a configured route-map. • connected — Enter the information from connected (active) routes on interfaces to redistribute.
Command Mode CONFIGURATION Usage Information The no version of this command deletes an OSPFv3 instance. Example OS10(config)# router ospfv3 10 Supported Releases 10.3.0E or later show ipv6 ospf Displays OSPFv3 instance configuration information.
• Checksum—Displays the Fletcher checksum of an LSA’s complete contents. • Link count—Displays the number of interfaces for that router. Example OS10# show ipv6 ospf database OSPF Router with ID (10.0.0.2) (Process ID 200) Router Link States (Area 0.0.0.0) ADV Router Age Seq# Fragment ID Link count Bits ------------------------------------------------------------------1.1.1.1 1610 0x80000144 0 1 B 2.2.2.2 1040 0x8000013A 0 1 10.0.0.2 1039 0x80000002 0 1 Net Link States (Area 0.0.0.
show ipv6 ospf neighbor Displays a list of OSPFv3 neighbors connected to the local router. Syntax show ipv6 ospf neighbor Parameters None Default Not configured Command Mode EXEC Usage Information • Neighbor ID—Displays the neighbor router ID. • Pri—Displays the priority assigned neighbor. • State—Displays the OSPF state of the neighbor. • Dead Time—Displays the expected time until the system declares the neighbor dead.
Figure 1. Object tracking Interface tracking You can create an object that tracks the line-protocol state of a Layer 2 interface, and monitors its operational status (Up or Down). You can configure up to 500 objects. Each object is assigned a unique ID. The no version of this command deletes the tracked object from an interface. When the link-level status goes down, the tracked resource status is also considered Down. If the link-level status goes up, the tracked resource status is also considered Up.
• Loopback — Loopback interface identifier • mgmt — Management interface 1 Configure object tracking in CONFIGURATION mode from 1 to 500. track object-id 2 (Optional) Enter the interface object tracking on the line-protocol state of a Layer 2 interface in OBJECT TRACKING mode. interface interface line-protocol 3 (Optional) Configure the time delay used before communicating a change to the status of a tracked interface in OBJECT TRACKING mode from 0 to 80 seconds; default 0.
Reachability is DOWN 1 changes, Last change 2017-04-26T06:45:31Z OS10 (conf-track-2)# Configure IPv6 host tracking OS10 (conf-track-2)# track 3 OS10 (conf-track-3)# ipv6 20::20 reachability OS10 (conf-track-3)# delay up 20 OS10 (conf-track-3)# do show track 3 IP Host 20::20 reachability Reachability is DOWN 1 changes, Last change 2017-04-26T06:47:04Z OS10 (conf-track-3)# Set tracking delays You can configure an optional Up and/or Down timer for each tracked object.
View interface object tracking information OS10# show track interface TrackID Resource Parameter Status LastChange --------------------------------------------------------------------------------1 line-protocol ethernet1/1/1 DOWN 2017-02-03T08:41:25Z1 OS10# show track ip TrackID Resource Parameter Status LastChange --------------------------------------------------------------------------------2 ipv4-reachablity 1.1.1.
• mgmt — Enter the Management interface. Defaults Not configured Command Mode CONFIGURATION Usage Information None Example OS10(conf-track-100)# interface ethernet line-protocol Supported Releases 10.3.0E or later ip reachability Configures an object to track a specific next-hop host's reachability. Syntax ip host-ip-address reachability Parameters host-ip-address — Enter the IPv4 host address.
Command Mode CONFIGURATION Usage Information Set the interval to 0 to disable the refresh. Example OS10(conf-track-100)# reachability-refresh 600 Supported Releases 10.3.0E or later show track Displays tracked object information. Syntax show track [brief] [object-id] [interface] [ip | ipv6] Parameters • brief — (Optional) Displays brief tracked object information. • object-id — (Optional) Displays the tracked object information for a specific object ID.
Policy-based routing Policy-based routing (PBR) provides a mechanism to redirect IPv4 and IPv6 data packets based on the policies defined to override the switch’s forwarding decisions based on the routing table. Policy-based route-maps A route-map is an ordered set of rules that control the redistribution of IP routes into a protocol domain. When you enable PBR on an interface, all IPv4 or IPv6 data packets received are processed based on the policies that you define in the route-maps.
Apply match parameters to IPv4 route-map OS10(conf-route-map)# route-map map1 OS10(conf-route-map)# match ip address acl5 Apply match and set parameters to IPv6 route-map OS10(conf-route-map)# route-map map1 OS10(conf-route-map)# match ipv6 address acl8 OS10(conf-route-map)# set ipv6 next-hop 20::20 Assign route-map to interface You can assign a route-map to an interface for IPv4 or IPv6 policy-based routing to an interface.
PBR commands clear route-map pbr-statistics Clears all PBR counters. Syntax clear route-map [map-name] pbr-statistics Parameters map-name—Enter the name of a configured route-map (up to 140 characters). Defaults None Command Mode EXEC Usage Information Use the clear route-map pbr-statistics command to clear all PBR counters. Example OS10# clear route-map map1 pbr-statistics Supported Releases 10.3.0E or later match address Matches the access-list to the route-map.
route-map pbr-statistics Enables counters for PBR statistics. Syntax route-map [map-name] pbr-statistics Parameters map-name—Enter the name of a configured route-map (up to 140 characters). Defaults Not configured Command Mode CONFIGURATION Usage Information None Example OS10(config)# route-map map1 pbr-statistics Supported Releases 10.3.0E or later set next-hop Sets an IPv4 or IPv6 next-hop address for policy-based routing.
show policy Displays policy information. Syntax show {ip | ipv6} policy [map-name] Parameters map-name — (Optional) Enter the name of a configured route map (up to 140 characters). Defaults None Command Mode EXEC Usage Information None Example OS10# show ip policy map-name Supported Releases 10.3.0E or later show route-map pbr-statistics Displays the current PBR statistics.
Configuration VRRP specifies a master (active) router that owns the next hop IP and MAC address for end stations on a LAN. The master router is chosen from the virtual routers by an election process and forwards packets sent to the next hop IP address. If the master router fails, VRRP begins the election process to choose a new master router which continues routing traffic. VRRP packets are transmitted with the virtual router MAC address as the source MAC address.
Create virtual router VRRP uses the VRID to identify each virtual router configured. Before using VRRP, you must configure the interface with the primary IP address and enable it. • Create a virtual router for the interface with the VRRP identifier in INTERFACE mode (1 to 255). vrrp-group vrrp-id • Delete a VRRP group in INTERFACE mode.
Set backup switches to VRRPv3 OS10_backup_switch1(config)# vrrp version 3 OS10_backup_switch2(config)# vrrp version 3 Virtual IP addresses Virtual routers contain virtual IP addresses configured for that VRRP group (VRID). A VRRP group does not transmit VRRP packets until you assign the virtual IP address to the VRRP group. To activate a VRRP group on an interface, configure at least one virtual IP address for a VRRP group.
interface ethernet1/1/2 switchport access vlan 1 no shutdown ! interface ethernet1/1/3 switchport access vlan 1 no shutdown ! interface ethernet1/1/4 switchport access vlan 1 --more-View VRRP information When the VRRP process completes initialization, the State field contains either master or backup. OS10# show vrrp brief Interface Group Priority Preemption State Master-addr Virtual addr(s) ---------------------------------------------------------------------------ethernet1/1/1 IPv4 10 100 true master 10.1.
Virtual IP address : 10.1.1.1 master-transitions : 1 advertise-rcvd : 0 advertise-interval-errors : 0 ip-ttl-errors : 0 priority-zero-pkts-rcvd : 0 priority-zero-pkts-sent : 0 invalid-type-pkts-rcvd : 0 address-list-errors : 0 pkt-length-errors : 0 Authentication Simple authentication of VRRP packets ensures that only trusted routers participate in VRRP processes. When you enable authentication, OS10 includes the password in its VRRP transmission.
! Last configuration change at Sep 24 07:17:45 2016 ! debug radius false snmp-server contact http://www.dell.com/support/softwarecontacts snmp-server location "United States" username admin password $6$q9QBeYjZ$jfxzVqGhkxX3smxJSH9DDz7/3OJc6m5wjF8nnLD7/VKx8SloIhp4NoGZs0I/ UNwh8WVuxwfd9q4pWIgNs5BKH. aaa authentication system:local ! interface ethernet1/1/5 ip address 1.1.1.1/16 no switchport no shutdown ! vrrp-group 254 priority 125 virtual-address 1.1.1.
advertisment-interval centisecs 200 priority 200 virtual-address 10.1.1.1 ! interface ethernet1/1/2 switchport access vlan 1 no shutdown Interface/object tracking You can monitor the state of any interface according to the virtual group. OS10 supports a maximum of 10 track groups and each track group can track a maximum of five interfaces. If the tracked interface goes down, the VRRP group’s priority decreases by a default value of 10 — also known as cost.
ip address 10.1.1.1/16 no switchport no shutdown ! vrrp-group 1 priority 200 virtual-address 10.1.1.1 ! interface ethernet1/1/2 switchport access vlan 1 no shutdown ! interface ethernet1/1/3 switchport access vlan 1 no shutdown ! interface ethernet1/1/4 switchport access vlan 1 no shutdown ! interface ethernet1/1/5 switchport access vlan 1 no shutdown ! interface ethernet1/1/6 switchport access vlan 1 no shutdown ! ..... .....
Example OS10(conf-eth1/1/6-vrid-250)# advertise-interval 120 centisecs 100 Supported Releases 10.2.0E or later authentication-type Enables authentication of VRRP data exchanges. Syntax authentication-type simple-text password [auth-text] Parameters • simple-text password — Enter a simple text password. • auth-text — (Optional) Enter a character string up to eight characters long as a password.
Usage Information To guarantee that a VRRP group becomes master, configure the VRRP group’s virtual address with same IP address as the interface’s primary IP address, and change the priority of the VRRP group to 255. If you set this command to 255 and the virtual-address is not equal to the interface’s primary IP address, the system displays an error message. The no version of this command resets the value to the default (100). Example OS10(conf-eth1/1/5-vrid-254)# priority 200 Supported Releases 10.
• priority cost value — (Optional) Enter a cost value to subtract from the priority value (1 to 254) Default 10 Command Mode INTERFACE-VRRP Usage Information If the interface is disabled, the cost value subtracts from the priority value and forces a new Master election. This election process is applicable when the priority value is lower than the priority value in the Backup virtual router. The no version of this command resets the value to the default.
enter or delete the virtual-address command. To guarantee that a VRRP group becomes Master, configure the VRRP group’s virtual address with the same IP address as the interface’s primary IP address and change the priority of the VRRP group to 255. You can ping the virtual addresses configured in all VRRP groups. The no version of this command deletes one or more virtual-addresses configured in the system. Example OS10(conf-eth1/1/5-vrid-254)# virtual address 10.1.1.15 Supported Releases 10.2.
Parameters • 2 — Set to VRRP version 2. • both — Allows in-service migration from VRRP version 2 to VRRP version 3. • 3 — Set to VRRP version 3. Default Not configured Command Mode CONFIGURATION Usage Information Use the both parameter to migrate from VRRPv2 to VRRPv3. When you set the VRRP protocol version to both, the device sends only VRRPv3 advertisements but can receive either VRRPv2 or VRRPv3 packets. The no version of this command disables the VRRP protocol version for the IPv4 group.
5 System management Dynamic host configuration protocol Provides information to dynamically assign IP addresses and other configuration parameters to network hosts based on policies (see DHCP commands). Network time protocol Provides information about how to synchronize timekeeping between time servers and clients (see NTP commands). Security Provides information about role-based access control, RADIUS server, user roles, and user names (see Security eommands).
The table shows common options using DHCP packet formats.
DHCP automates network-parameter assignment to network devices. Even in small networks, DHCP is useful because it makes it easier to add new devices to the network. The DHCP access service minimizes the overhead required to add clients to the network by providing a centralized, server-based setup. This setup means you do not have to manually create and maintain IP address assignments for clients.
Address lease time Use the lease {days [hours] [minutes] | infinite} command to configure an address lease time (default 24 hours). OS10(config)# ip dhcp server OS10(conf-dhcp)# pool Dell OS10(conf-dhcp-Dell)# lease 36 Default gateway Ensure the IP address of the default router is on the same subnet as the client. 1 Enable DHCP server-assigned dynamic addresses on an interface in CONFIGURATION mode. ip dhcp server 2 Create an IP address pool and provide a name in DHCP mode.
NetBIOS WINS address resolution DHCP clients can be one of four types of NetBIOS nodes — broadcast, peer-to-peer, mixed, or hybrid. Dell EMC recommends using hybrid as the NetBIOS node type. 1 Enable DHCP server-assigned dynamic addresses on an interface in DHCP mode. ip dhcp server 2 Create an IP address pool and enter the pool name in DHCP mode. pool name 3 Enter the NetBIOS WINS name servers in order of preference that are available to DHCP clients in DHCP mode.
View DHCP Information Use the show ip dhcp binding command to view the DHCP binding table entries. View DHCP Binding Table OS10# show ip dhcp binding IP Address Hardware address Lease expiration Hostname +-------------------------------------------------------------------------11.1.1.
DHCP commands default-router address Assigns a default gateway to clients based on the IP address pool. Syntax Parameters default-router address [address2...address8] • address — Enter an IPv4 or IPv6 address to use as the default gateway for clients on the subnet in A.B.C.D or A::B format. • address2...address8 — (Optional) Enter up to eight IP addresses, in order of preference.
Command Mode DHCP-POOL Usage Information None Example OS10(conf-dhcp-Dell)# dns-server 192.168.1.1 Supported Releases 10.2.0E or later domain-name Configures the name of the domain where the device is located. Syntax domain-name domain-name Parameters domain-name — Enter the name of the domain (up to 32 characters). Default Not configured Command Mode DHCP-POOL Usage Information This is the default domain name that appends to hostnames that are not fully qualified.
Example OS10(conf-dhcp-Dell)# host 20.1.1.100 Supported Releases 10.2.0E or later ip dhcp server Enters DHCP mode. Syntax ip dhcp server Parameters None Default Not configured Command Mode CONFIGURATION Usage Information This command is used to enter DHCP mode. Example OS10(config)# ip dhcp server OS10(conf-dhcp)# Supported Releases 10.2.0E or later ip helper-address Forwards UDP broadcasts received on an interface to the DHCP server.
Default 24 hours Command Mode DHCP-POOL Usage Information The no version of this command removes the lease configuration. Example OS10(conf-dhcp-Dell)# lease 2 5 10 Example (Infinite) OS10(conf-dhcp-Dell)# lease infinite Supported Releases 10.2.0E or later netbios-name-server address Configures a NetBIOS WINS server which is available to DHCP clients. Syntax netbios-name-server ip-address [address2...address8] Parameters ip-address — Enter the address of the NetBIOS WINS server. address2...
network Configures a range of IPv4 or IPv6 addresses in the address pool. Syntax network address/mask Parameters address/mask — Enter a range of IP addresses and subnet mask in A.B.C.D/x or A::B/x format. Default Not configured Command Mode DHCP-POOL Usage Information Use this command to configure a range of IPv4 or IPv6 addresses. Example OS10(config-dhcp-Dell)# network 20.1.1.1/24 Supported Releases 10.2.0E or later pool Creates an IP address pool name.
DNS commands OS10 supports the configuration of a DNS host and domain parameters. ip domain-list Adds a domain name to the DNS list. This domain name appends to incomplete hostnames in DNS requests. Syntax ip domain-list [server-name] name Parameters • server-name — (Optional) Enter the server name to add a domain name to the DNS list. • name — Enter the name of the domain to append to the DNS list.
Default Not configured Command Mode CONFIGURATION Usage Information The name-to-IP address table uses this mapping information to resolve host names. The no version of this command disables the mapping. Example OS10(config)# ip host dell 1.1.1.1 Supported Releases 10.2.0E or later ip name-server Configures up to a three IPv4 or IPv6 addresses used for network name servers.
--------------------------------------------dell-pc1 20.1.1.1 Supported Releases 10.2.0E or later Network time protocol NTP synchronizes timekeeping among a set of distributed time servers and clients. The protocol coordinates time distribution in a large, diverse network. NTP clients synchronize with NTP servers that provide accurate time measurement. NTP clients choose from several NTP servers to determine which offers the best available source of time and the most reliable transmission of information.
View system clock state OS10(config)# do show system peer: system peer mode: leap indicator: stratum: precision: root distance: root dispersion: reference ID: reference time: system flags: jitter: stability: broadcastdelay: authdelay: ntp status 0.0.0.0 unspec 11 16 -22 0.00000 s 1.28647 s [73.78.73.84] 00000000.00000000 Mon, Jan monitor ntp kernel stats 0.000000 s 0.000 ppm 0.000000 s 0.000000 s 1 1900 0:00:00.
• vlan — Enter the keyword and VLAN number (1 to 4093). • loopback — Enter the keyword and number (0 to 16383). • mgmt — Enter the keyword and node/slot/port information (default 1/1/1). Configure source IP address OS10(config)# ntp source ethernet 1/1/10 View source IP configuration OS10(config)# do show running-configuration | grep source ntp source ethernet1/1/1 Authentication NTP authentication and the corresponding trusted key provide a reliable exchange of NTP packets with trusted time sources.
NTP commands ntp authenticate Enables authentication of NTP traffic between the device and the NTP time serving hosts. Syntax ntp authenticate Parameters None Default Not configured Command Mode CONFIGURATION Usage Information You must also configure an authentication key for NTP traffic using the ntp authentication-key command. The no version of this command disables NTP authentication. Example OS10(config)# ntp authenticate Supported Releases 10.2.
Default Not configured Command Mode INTERFACE Usage Information The no version of this command disables broadcast. Example OS10(conf-if-eth1/1/1)# ntp broadcast client Supported Releases 10.2.0E or later ntp disable By default, NTP is enabled on all interfaces. Prevents an interface from receiving NTP packets.
• prefer — (Optional) Configures this peer to have priority over other servers. Default Not configured Command Mode CONFIGURATION Usage Information You can configure multiple time-serving hosts. From these time-serving hosts, the system chooses one NTP host to synchronize with. To determine which server to select, use the show ntp associations command. Dell EMC recommends limiting the number of hosts you configure, as many polls to the NTP hosts can impact network performance.
Supported Releases 10.2.0E or later show ntp associations Displays the NTP master and peers. Syntax show ntp associations Parameters None Default Not configured Command Mode EXEC Usage Information • (none) — One or more of the following symbols displays: • * — Synchronized to this peer. • # — Almost synchronized to this peer. • + — Peer was selected for possible synchronization. • - — Peer is a candidate for selection. • ~ — Peer is statically configured.
Usage Information Use this command to view NTP status information. Example (Status) OS10# show ntp status system peer: 0.0.0.0 system peer mode: unspec leap indicator: 11 stratum: 16 precision: -22 root distance: 0.00000 s root dispersion: 1.28647 s reference ID: [73.78.73.84] reference time: 00000000.00000000 Mon, Jan 1 1900 0:00:00.000 system flags: monitor ntp kernel stats jitter: 0.000000 s stability: 0.000 ppm broadcastdelay: 0.000000 s authdelay: 0.000000 s Supported Releases 10.2.
year-month-day Enter year-month-day in the format YYYY-MM-DD, where YYYY is a four-digit year, such as 2016; MM is a month from 1 to 12; DD is a day from 1 to 31. Default Not configured Command Mode EXEC Usage Information Use this command to reset the system time if the system clock is out of synch with the NTP time. The hardwarebased real-clock time (RTC) resets to the new time. The new system clock setting is applied immediately.
6 *7 OS10# admin admin 17 10 0 0 0 0 4 0 2017-07-12T03:55:18Z 2017-07-12T04:42:55Z User session management commands exec-timeout Configure timeout in seconds for all the user sessions. Syntax exec-timeout timeout-value Parameters timeout-value — Enter the timeout value in seconds (0 to 3600). Default Not configured Command Mode CONFIGURATION Usage Information The no version of this command disables the timeout. Example OS10(config)# exec-timeout 300 OS10(config)# Supported Releases 10.3.
Current session's operation mode: Non-transaction Session-ID User In-rpcs In-bad-rpcs Out-rpc-err Out-notify Login-time Lock ----------------------------------------------------------------------------------------3 snmp_user 114 0 0 0 2017-07-10T23:58:39Z 4 snmp_user 57 0 0 0 2017-07-10T23:58:40Z 6 admin 17 0 0 4 2017-07-12T03:55:18Z *7 admin 10 0 0 0 2017-07-12T04:42:55Z OS10# Supported Releases 10.3.
Example (disable) OS10(config)# no ip telnet server enable Supported Releases 10.3.1E or later Security Accounting, authentication, and authorization (AAA) services secure networks against unauthorized access. In addition to local authentication, OS10 supports remote authentication dial-in service (RADIUS) and terminal access controller access control system (TACACS+) client/server authentication systems.
RADIUS authentication To configure a RADIUS server for authentication, enter the server's IP address or host name. You can change the UDP port number on the server and the key used to authenticate the OS10 switch on the server. • Configure a RADIUS authentication server in CONFIGURATION mode. By default, a RADIUS server uses UDP port 1812; the switch uses radius_server as the key to log in to a RADIUS server.
Configure global settings OS10(config)# radius-server retransmit 10 OS10(config)# radius-server timeout 10 View RADIUS server host configuration OS10(config)# do show running-configuration ... radius-server retransmit 10 radius-server timeout 10 ... System-defined user roles OS10 provides two system-defined user roles — sysadmin and netoperator. sysadmin Full access to all commands in the system, exclusive access to commands that manipulate the file system, and access to the system shell.
SSH Server The secure shell (SSH) server allows an SSH client to access an OS10 switch through a secure, encrypted connection. Configure SSH server • The SSH server is enabled by default. You can disable the SSH server using no ip ssh server enable. • Challenge response authentication is disabled by default. To enable, use the ip ssh server challenge-responseauthentication command. • Host-based authentication is disabled by default. To enable, use the ip ssh server hostbased-authentication command.
ip ssh server challenge-response-authentication Enable challenge response authentication in an SSH server. Syntax ip ssh server challenge-response-authentication Parameters None Default Disabled Command Mode CONFIGURATION Usage Information The no version of this command disables the challenge response authentication. Example OS10(config)# ip ssh server challenge-response-authentication Supported Releases 10.3.
Supported Releases 10.3.0E or later ip ssh server enable Enable the SSH server. Syntax ip ssh server enable Parameters None Default Enabled Command Mode CONFIGURATION Usage Information The no version of this command disables the SSH server. Example OS10(config)# ip ssh server enable Supported Releases 10.3.0E or later ip ssh server hostbased-authentication Enable host-based authentication in an SSH server.
Default • curve25519-sha256 • diffie-hellman-group14-sha1 • diffie-hellman-group-exchange-sha256 • ecdh-sha2-nistp256 • ecdh-sha2-nistp384 • ecdh-sha2-nistp521 Command Mode CONFIGURATION Usage Information The no version of this command removes the configuration. Example OS10(config)# ip ssh server kex curve25519-sha256 diffie-hellman-group1-sha1 Supported Releases 10.3.
• hmac-sha2-256-etm@openssh.com • hmac-sha2-512-etm@openssh.com • umac-64-etm@openssh.com • umac-128-etm@openssh.com Command Mode CONFIGURATION Usage Information The no version of this command removes the configuration. Example OS10(config)# ip ssh server mac hmac-md5 hmac-md5-96 hmac-ripemd160 Supported Releases 10.3.0E or later ip ssh server password-authentication Enable password authentication in an SSH server.
Command Mode CONFIGURATION Usage Information The no version of this command disables the public key authentication. Example OS10(config)# ip ssh server pubkey-authentication Supported Releases 10.3.0E or later radius-server host Configures a RADIUS authentication server. Syntax Parameters radius-server host {hostname | ip-address} [auth-port port-number | key authentication-key] • hostname — Enter the host name of the RADIUS server. • ip-address — Enter the IPv4 (A.B.C.
radius-server retransmit Configures the number of authentication attempts allowed on RADIUS servers. Syntax radius-server retransmit retries Parameters retries — Enter the number of retry attempts (0 to 100). Default An OS10 switch retransmits a RADIUS authentication request three times. Command Mode CONFIGURATION Usage Information Use this command to globally configure the number of retransmit attempts allowed for authentication requests on RADIUS servers.
etm@openssh.com, SSH Server KEX algorithms: hellman-group14-sha1 Password Authentication: Host-Based Authentication: RSA Authentication: Challenge Response Auth: Supported Releases hmac-sha2-256-etm@openssh.com,hmac-sha2-512hmac-sha1-etm@openssh.com,umac-64@openssh.com, umac-128@openssh.com,hmac-sha2-256, hmac-sha2-512,hmac-sha1 curve25519-sha256@libssh.org,ecdh-sha2-nistp256, ecdh-sha2-nistp384,ecdh-sha2-nistp521, diffie-hellman-group-exchange-sha256,diffieEnabled Disabled Enabled Disabled 10.3.
Example OS10(config)# username smith password MD5 newuser sysadmin Supported Releases 10.2.0E or later Simple network management protocol Network management stations use SNMP to retrieve or alter management data from network elements. Standard and private SNMP management information bases (MIBs) are supported, including all get requests. A managed object is a datum of management information. A MIB is a database that stores managed objects found in network elements.
snmp-server enable traps Enables SNMP traps. Syntax Parameters snmp-server enable traps [envmon environment-type| snmp snmp-traps-type] • • envmon — Specify the type of environmental monitor traps. The following options are available: • fan • supply • temperature snmp snmp-traps-type — Specify the SNMP traps type.
Supported Releases 10.2.0E or later snmp-server location Configures the location of the SNMP server. Syntax snmp-server location text Parameters text — Enter an alphanumeric string (up to 55 characters). Default United States Command Mode CONFIGURATION Usage Information The no version of this command removes the SNMP location. Example OS10(config)# snmp-server location datacenter10 Supported Releases 10.2.
Show version OS10# show version Dell EMC Networking OS10 Enterprise Copyright (c) 1999-2018 by Dell Inc. All Rights Reserved. OS Version: 10.3.2E(R1) Build Version: 10.3.2E(R1.438) Build Time: 2018-01-05T17:21:13-0800 System Type: S5148F-ON Architecture: x86_64 Up Time: 1 day 02:23:47 Boot system partition Set the boot partition to active or standby for subsequent boot cycles. Boot OS10 from standby to load the image on the standby partition, or boot from active to load the currently running image.
boot system Sets the boot partition to use during the next reboot. Syntax boot system {active | standby} Parameters • active — Reset the running partition as the next boot partition. • standby — Set the standby partition as the next boot partition. Default Active Command Mode EXEC Usage Information Use this command to configure the location of the OS10 image used to reload the software at boot time. Use the show boot command to view the configured next boot image.
image download Downloads a new software image to the local file system. Syntax image download file-url Parameters file-url — Set the path to the image file: • ftp://userid:passwd@hostip:/filepath — Enter the path to copy from the remote FTP server. • http[s]://hostip:/filepath — Enter the path to copy from the remote HTTP or HTTPS server. • scp://userid:passwd@hostip:/filepath — Enter the path to copy from the remote SCP file system.
Supported Releases 10.2.0E or later image upgrade Upgrades to software image. Syntax image upgrade file-url Parameters • file-url — Location of the image file: • ftp://userid:passwd@hostip/filepath — Enter the path to upgrade from a remote FTP server. • http[s]://hostip/filepath — Enter the path to upgrade from the remote HTTP or HTTPS server. • scp://userid:passwd@hostip/filepath — Enter the path to upgrade from a remote SCP file system.
Boot Type: Active Partition: Active SW Version: Active Kernel Version: Active Build Date/Time: Standby Partition: Standby SW Version: Standby Build Date/Time: Next-Boot: Supported Releases Flash Boot B 10.2.0E Linux 3.16.7-ckt25 2016-10-03T23:11:14Z A 10.2.0E 2016-10-03T23:11:14Z active[B] 10.2.0E or later show image status Displays image transfer and installation information.
OS Version: 10.3.2E(X) Build Version: 10.3.2E(X.433) Build Time: 2018-01-03T11:57:14-0800 System Type: S5148F-ON Architecture: x86_64 Up Time: 1 day 05:34:06 Supported Releases 368 10.2.
6 Access Control Lists OS10 uses two types of access policies — hardware-based ACLs and software-based route-maps. Use an ACL to filter traffic and drop or forward matching packets. To redistribute routes that match configured criteria, use a route-map. ACLs ACLs are a filter containing criterion to match; for example, examine IP, TCP, or UDP packets, and an action to take such as forwarding or dropping packets at the NPU. ACLs permit or deny traffic based on MAC and/or IP addresses.
• Source and destination UDP port number For ACL, TCP, and UDP filters, match criteria on specific TCP or UDP ports. For ACL TCP filters, you can also match criteria on established TCP sessions. When creating an ACL, the sequence of the filters is important. You can assign sequence numbers to the filters as you enter them or OS10 can assign numbers in the order you create the filters. The sequence numbers display in the show running-configuration and show ip access-lists [in | out] command output.
The examples show denying second and subsequent fragments, and permitting all packets on an interface. These ACLs deny all second and subsequent fragments with destination IP 10.1.1.1, but permit the first fragment and non-fragmented packets with destination IP 10.1.1.1. The second example shows ACLs which permits all packets — both fragmented and non-fragmented — with destination IP 10.1.1.1. Deny second and subsequent fragments OS10(config)# ip access-list ABC OS10(conf-ipv4-acl)# deny ip any 10.1.1.
To log all packets denied and to override the implicit deny rule and the implicit permit rule for TCP/ UDP fragments, use a similar configuration.
• Ingress L3 ACL • Ingress L2 ACL • Egress L3 ACL • Egress L2 ACL Table 2. L2 and L3 targeted traffic L2 ACL / L3 ACL Targeted traffic Deny / Deny L3 ACL denies Deny / Permit L3 ACL permits Permit / Deny L3 ACL denies Permit / Permit L3 ACL permits Assign and apply ACL filters To filter an Ethernet interface, a port-channel interface, or a VLAN, assign an IP ACL filter to a physical interface. The IP ACL applies to all traffic entering a physical or port-channel interface.
To view the number of packets matching the ACL, use the count option when creating ACL entries. • • Create an ACL that uses rules with the count option, see Assign sequence number to filter. Apply the ACL as an inbound or outbound ACL on an interface in CONFIGURATION mode, and view the number of packets matching the ACL. show ip access-list {in | out} Ingress ACL filters To create an ingress ACL filter, use the ip access-group command in EXEC mode. To configure ingress, use the in keyword.
Active on interfaces : ethernet1/1/29 seq 10 deny ip any any fragment count (100 packets) Clear access-list counters Clear IPv4, IPv6, or MAC access-list counters for a specific access-list or all lists. The counter counts the number of packets that match each permit or deny statement in an access-list. To get a more recent count of packets matching an access-list, clear the counters to start at zero. If you do not configure an access-list name, all IP access-list counters clear.
Route-maps Route-maps a series of commands that contain a matching criterion and action. They change the packets meeting the matching criterion. ACLs and prefix-lists can only drop or forward the packet or traffic while route-maps process routes for route redistribution. For example, use a route-map to filter only specific routes and to add a metric. • Route-maps also have an implicit deny.
View route-map configuration OS10(conf-router-bgp-neighbor-af)# do show route-map route-map test1, deny, sequence 10 Match clauses: ip address prefix-list p1 Set clauses: route-map test2, permit, sequence 10 Match clauses: ip address prefix-list p1 Set clauses: route-map test3, deny, sequence 10 Match clauses: ip address prefix-list p2 Set clauses: route-map test4, permit, sequence 10 Match clauses: ip address prefix-list p2 Set clauses: Match routes Configure match criterion for a route-map.
• Enter an ORIGIN attribute in ROUTE-MAP mode. set origin {egp | igp | incomplete} • Enter a tag value for the redistributed routes in ROUTE-MAP mode, from 0 to 4294967295. set tag tag-value • Enter a value as the route’s weight in ROUTE-MAP mode, from 0 to 65535. set weight value Check set conditions OS10(config)# route-map ip permit 1 OS10(conf-route-map)# match metric 2567 continue Clause Only BGP route-maps support the continue clause.
If you configure the flow-based enable command and do not apply an ACL on the source port or the monitored port, both flow-based monitoring and port mirroring do not function. Flow-based monitoring is supported only for ingress traffic. The show monitor session session-id command displays output which indicates if a particular session is enabled for flowmonitoring. View flow-based monitoring OS10# show monitor session 1 S.
View monitor sessions OS10(conf-if-eth1/1/1)# show monitor session all S.Id Source Destination Dir SrcIP DstIP DSCP TTL State Reason ---------------------------------------------------------------------------1 ethernet1/1/1 ethernet1/1/4 both N/A N/A N/A N/A true Is UP ACL commands clear ip access-list counters Clears ACL counters for a specific access-list.
clear mac access-list counters Clears counters for a specific or all MAC access lists. Syntax clear mac access-list counters [access-list-name] Parameters access-list-name — (Optional) Enter the name of the MAC access list to clear counters. A maximum of 140 characters. Default Not configured Command Mode EXEC Usage Information If you do not enter an access-list name, all MAC access-list counters clear.
Supported Releases 10.2.0E or later deny (IPv6) Configures a filter to drop packets with a specific IPv6 address. Syntax deny [protocol-number | icmp | ipv6 | tcp | udp] [A::B | A::B/x | any | host ipv6-address] [A::B | A::B/x | any | host ipv6-address] [capture | dscp value | fragment] Parameters • protocol-number — (Optional) Enter the protocol number identified in the IP header, from 0 to 255. • icmp — (Optional) Enter the ICMP address to deny.
• vlan — (Optional) VLAN number, from 1 to 4093. Default Disabled Command Mode MAC-ACL Usage Information The no version of this command removes the filter. Example OS10(config)# mac access-list macacl OS10(conf-mac-acl)# deny any any cos 7 OS10(conf-mac-acl)# deny any any vlan 2 Supported Releases 10.2.0E or later deny icmp Configures a filter to drop all or specific internet control message protocol (ICMP) messages. Syntax Parameters deny icmp [A.B.C.D | A.B.C.D/x | any | host ip-address] [[A.
• • fragment — (Optional) Use ACLs to control packet fragments. host ipv6-address — (Optional) Enter the IPv6 address to use a host address only. Default Not configured Command Mode IPV6-ACL Usage Information The no version of this command removes the filter. Example OS10(config)# ipv6 access-list ipv6test OS10(conf-ipv6-acl)# deny icmp any any capture session 1 Supported Releases 10.2.0E or later deny ip Configures a filter to drop all or specific packets from an IPv4 address.
• • dscp value — (Optional) Deny a packet based on the DSCP values, from 0 to 63. • fragment — (Optional) Use ACLs to control packet fragments. host ipv6–address — (Optional) Enter the IPv6 address to use a host address only. Default Not configured Command Mode IPV6-ACL Usage Information The no version of this command removes the filter. Example OS10(config)# ipv6 access-list ipv6test OS10(conf-ipv6-acl)# deny ipv6 any any capture session 1 Supported Releases 10.2.
Example OS10(config)# ip access-list testflow OS10(conf-ipv4-acl)# deny tcp any any capture session 1 Supported Releases 10.2.0E or later deny tcp (IPv6) Configures a filter that drops TCP IPv6 packets meeting the filter criteria.
• • • capture — (Optional) Capture packets the filter processes. • dscp value — (Optional) Deny a packet based on the DSCP values, from 0 to 63. • fragment — (Optional) Use ACLs to control packet fragments. • ack — (Optional) Set the bit as acknowledgement. • fin — (Optional) Set the bit as finish—no more data from sender. • psh — (Optional) Set the bit as push. • rst — (Optional) Set the bit as reset. • syn — (Optional) Set the bit as synchronize.
• • operator — (Optional) Enter a logical operator to match the packets on the specified port number. The following options are available: • eq — Equal to • gt — Greater than • lt — Lesser than • neq — Not equal to • range — Range of ports, including the specified port numbers. host ipv6-address — (Optional) Enter the keyword and the IPv6 address to use a host address only. Default Not configured Command Mode IPV6-ACL Usage Information The no version of this command removes the filter.
Example OS10(conf-if-eth1/1/8)# ip access-group testgroup in Supported Releases 10.2.0E or later ip access-list Creates an IP access list to filter based on an IP address. Syntax ip access-list access-list-name Parameters access-list-name — Enter the name of an IPv4 access list. A maximum of 140 characters. Default Not configured Command Mode CONFIGURATION Usage Information None Example OS10(config)# ip access-list acl1 Supported Releases 10.2.
• ASNumber — Enter the AS number. Defaults Not configured Command Mode CONFIGURATION Usage Information The no version of this command removes the access-list. Example OS10(config)# ip as-path access-list abc permit 200 Supported Release 10.3.0E or later ip community-list standard deny Creates a standard community list for BGP to deny access.
• no-export — Enter the keyword for BGP to not advertise this route outside a BGP confederation boundary • internet — Enter the keyword for an Internet community. Defaults Not configured Command Mode CONFIGURATION Usage Information The no version of this command removes the community list. Example OS10(config)# ip community-list standard STD_LIST permit local-AS Supported Release 10.3.0E or later ip extcommunity-list standard deny Creates an extended community list for BGP to deny access.
Example OS10(config)# ip extcommunity-list standard STD_LIST permit 4byteas-generic transitive 1.65412:60 Supported Release 10.3.0E or later ip prefix-list description Configures a description of an IP prefix list. Syntax ip prefix-list name description Parameters • name — Enter the name of the prefix list. • description — Enter the description for the named prefix list.
Parameters • name — Enter the name of the prefix list. • A.B.C.D/x — (Optional) Enter the source network address and mask in /prefix format (/x). • ge — Enter to indicate the network address is greater than or equal to the range specified. • le — Enter to indicate the network address is less than or equal to the range specified. • prefix-len — Enter the prefix length.
• prefix-len — Enter the prefix length. Defaults Not configured Command Mode CONFIGURATION Usage Information The no version of this command removes the specified prefix list. Example OS10(config)# ip prefix-list seqprefix seq 65535 permit 10.10.10.1/16 le 30 Supported Release 10.3.0E or later ipv6 access-group Assigns an IPv6 access list to an interface. Syntax ipv6 access-group access-list-name {in | out} Parameters • access-list-name — Enter the name of an IPv6 ACL.
ipv6 prefix-list deny Creates a prefix list to deny route filtering from a specified IPv6 network address. Syntax Parameters ipv6 prefix-list prefix-list-name deny {A::B/x [ge | le] prefix-len} • prefix-list-name — Enter the IPv6 prefix list name. • A::B/x — Enter the IPv6 address to deny. • ge — Enter to indicate the network address is greater than or equal to the range specified. • le — Enter to indicate the network address is less than or equal to the range specified.
• le — Enter to indicate the network address is less than or equal to the range specified. • prefix-len — Enter the prefix length. Defaults Not configured Command Mode CONFIGURATION Usage Information The no version of this command removes the specified prefix-list. Example OS10(config)# ipv6 prefix-list TEST permit AB20::1/128 ge 10 le 30 Supported Release 10.3.0E or later ipv6 prefix-list seq deny Configures a filter to deny route filtering from a specified prefix-list.
Usage Information The no version of this command removes the specified prefix-list. Example OS10(config)# ipv6 prefix-list TEST seq 65535 permit AB10::1/128 ge 30 Supported Release 10.3.0E or later mac access-group Assigns a MAC access list to an interface. Syntax Parameters mac access-group access-list-name {in | out} • access-list-name — Enter the name of a MAC access list. A maximum of 140 characters. • in — Apply the ACL to incoming traffic. • out — Apply the ACL to outgoing traffic.
Parameters • protocol-number — (Optional) Enter the protocol number identified in the IP header, from 0 to 255. • icmp — (Optional) Enter the ICMP address to permit. • ip — (Optional) Enter the IP address to permit. • tcp — (Optional) Enter the TCP address to permit. • udp — (Optional) Enter the UDP address to permit. • A.B.C.D — Enter the IP address in dotted decimal format. • A.B.C.D/x — Enter the number of bits that must match the dotted decimal address.
Usage Information The no version of this command removes the filter. Example OS10(config)# ipv6 access-list ipv6test OS10(conf-ipv6-acl)# permit udp any any capture session 1 Supported Releases 10.2.0E or later permit (MAC) Configures a filter to allow packets with a specific MAC address. Syntax Parameters permit {nn:nn:nn:nn:nn:nn [00:00:00:00:00:00] | any} {nn:nn:nn:nn:nn:nn [00:00:00:00:00:00] | any} [protocol-number | capture | cos | vlan] • nn:nn:nn:nn:nn:nn — Enter the MAC address.
Command Mode IPV4-ACL Usage Information The no version of this command removes the filter. Example OS10(config)# ip access-list testflow OS10(conf-ipv4-acl)# permit icmp any any capture session 1 Supported Releases 10.2.0E or later permit icmp (IPv6) Configures a filter to permit all or specific ICMP messages.
Command Mode IPV4-ACL Usage Information The no version of this command removes the filter. Example OS10(conf-ipv4-acl)# permit ip any any capture session 1 Supported Releases 10.2.0E or later permit ipv6 Configures a filter to permit all or specific packets from an IPv6 address.
• • • rst — (Optional) Set the bit as reset. • syn — (Optional) Set the bit as synchronize. • urg — (Optional) Set the bit set as urgent. operator — (Optional) Enter a logical operator to match the packets on the specified port number. The following options are available: • eq — Equal to • gt — Greater than • lt — Lesser than • neq — Not equal to • range — Range of ports, including the specified port numbers. host ip-address — (Optional) Enter the IP address to use a host address only.
permit udp Configures a filter that allows UDP packets meeting the filter criteria. Syntax Parameters permit udp [A.B.C.D | A.B.C.D/x | any | host ip-address [eq | lt | gt | neq | range]] [[A.B.C.D | A.B.C.D/x | any | host ip-address [eq | lt | gt | neq | range] ] [ack | fin | psh | rst | syn | urg] [capture | dscp value | fragment] • A.B.C.D — Enter the IP address in dotted decimal format. • A.B.C.D/x — Enter the number of bits that must match the dotted decimal address.
• • • any — (Optional) Enter for all routes to be subject to the filter: • capture — (Optional) Capture packets the filter processes. • dscp value — (Optional) Permit a packet based on the DSCP values, from 0 to 63. • fragment — (Optional) Use ACLs to control packet fragments. • ack — (Optional) Set the bit as acknowledgement. • fin — (Optional) Set the bit as finish—no more data from sender. • psh — (Optional) Set the bit as push. • rst — (Optional) Set the bit as reset.
seq deny Assigns a sequence number to deny IP addresses while creating the filter. Syntax Parameters seq sequence-number deny [protocol-number | icmp | ip | tcp | udp] [A.B.C.D | A.B.C.D/x | any | host ip-address] [A.B.C.D | A.B.C.D/x | any | host ipaddress] [capture | dscp value | fragment] • sequence-number — Enter the sequence number to identify the ACL for editing and sequencing number, from 1 to 16777214. • protocol-number — (Optional) Enter the protocol number, from 0 to 255.
• udp — (Optional) Enter the UDP address to deny. • A::B — Enter the IPv6 address in hexadecimal format separated by colons. • A::B/x — Enter the number of bits that must match the IPv6 address. • any — (Optional) Determine route types: • • capture — (Optional) Enter to capture packets the filter processes. • dscp value — (Optional) Enter to deny a packet based on the DSCP values, from 0 to 63. • fragment — (Optional) Enter to use ACLs to control packet fragments.
seq deny icmp Assigns a filter to deny internet control message protocol (ICMP) messages while creating the filter. Syntax Parameters seq sequence-number deny icmp [A.B.C.D | A.B.C.D/x | any | host ip-address] [A.B.C.D | A.B.C.D/x | any | host ip-address] [capture | dscp value| fragment] • sequence-number — Enter the sequence number to identify the route-map for editing and sequencing number, from 1 to 16777214. • A.B.C.D — Enter the IP address in dotted decimal format. • A.B.C.
Usage Information The no version of this command removes the filter, or use the no seq sequence-number command if you know the filter’s sequence number. Example OS10(config)# ipv6 access-list ipv6test OS10(conf-ipv6-acl)# seq 10 deny icmp any any capture session 1 Supported Releases 10.2.0E or later seq deny ip Assigns a sequence number to deny IP addresses while creating the filter. Syntax seq sequence-number deny ip [A.B.C.D | A.B.C.D/x | any | host ip-address] [A.B.C.D | A.B.C.
• • fragment — (Optional) Use ACLs to control packet fragments. host ip-address — (Optional) Enter the IPv6 address to use a host address only. Default Not configured Command Mode IPV6-ACL Usage Information The no version of this command removes the filter, or use the no seq sequence-number command if you know the filter’s sequence number. Example OS10(config)# ipv6 access-list ipv6test OS10(conf-ipv6-acl)# seq 10 deny ipv6 any any capture session 1 Supported Releases 10.2.
Usage Information The no version of this command removes the filter, or use the no seq sequence-number command if you know the filter’s sequence number. Example OS10(config)# ip access-list egress OS10(conf-ipv4-acl)# seq 10 deny tcp any any capture session 1 Supported Releases 10.2.0E or later seq deny tcp (IPv6) Assigns a filter to deny TCP packets while creating the filter.
seq deny udp Assigns a filter to deny UDP packets while creating the filter. Syntax Parameters seq sequence-number deny udp [A.B.C.D | A.B.C.D/x | any | host ip-address [operator]] [[A.B.C.D | A.B.C.D/x | any | host ip-address [operator] ] [ack | fin | psh | rst | syn | urg] [capture | dscp value | fragment] • sequence-number — Enter the sequence number to identify the route-map for editing and sequencing number, from 1 to 16777214. • A.B.C.D — Enter the IP address in dotted decimal format. • A.B.C.
seq deny udp (IPv6) Assigns a filter to deny UDP packets while creating the filter. Syntax seq sequence-number deny udp [A::B | A::B/x | any | host ipv6-address [operator]] [A::B | A:B/x | any | host ipv6-address [operator]] [ack | fin | psh | rst | syn | urg] [capture | dscp value | fragment] Parameters • sequence-number — Enter the sequence number to identify the route-map for editing and sequencing number, from 1 to 16777214.
seq permit Assigns a sequence number to permit packets while creating the filter. Syntax Parameters seq sequence-number permit [protocol-number A.B.C.D | A.B.C.D/x | any | host ip-address] [A.B.C.D | A.B.C.D/x | any | host ip-address] [capture | dscp value| fragment]] • sequence-number — Enter the sequence number to identify the route-map for editing and sequencing number, from 1 to 16777214. • protocol-number — (Optional) Enter the protocol number, from 0 to 255. • A.B.C.
Default Not configured Command Mode IPV6-ACL Usage Information The no version of this command removes the filter, or use the no seq sequence-number command if you know the filter’s sequence number. Example OS10(config)# ipv6 access-list ipv6test OS10(conf-ipv6-acl)# seq 10 permit ipv6 any any capture session 1 Supported Releases 10.2.0E or later seq permit (MAC) Assigns a sequence number to permit MAC addresses while creating a filter.
Parameters • sequence-number — Enter the sequence number to identify the route-map for editing and sequencing number, from 1 to 16777214. • A.B.C.D — Enter the IP address in dotted decimal format. • A.B.C.D/x — Enter the number of bits that must match the dotted decimal address. • any — (Optional) Set all routes are which subject to the filter: • • capture — (Optional) Capture packets the filter processes. • dscp value — (Optional) Permit a packet based on the DSCP values, from 0 to 63.
seq permit ip Assigns a sequence number to allow packets while creating the filter. Syntax seq sequence-number permit ip [A.B.C.D | A.B.C.D/x | any | host ip-address] [A.B.C.D | A.B.C.D/x | any | host ip-address] [capture | dscp value| fragment] Parameters • sequence-number — Enter the sequence number to identify the route-map for editing and sequencing number, from 1 to 16777214. • A.B.C.D — Enter the IP address in dotted decimal format. • A.B.C.
Usage Information The no version of this command removes the filter, or use the no seq sequence-number command if you know the filter’s sequence number. Example OS10(config)# ipv6 access-list egress OS10(conf-ipv6-acl)# seq 5 permit ipv6 any any capture session 1 Supported Releases 10.2.0E or later seq permit tcp Assigns a sequence number to allow TCP packets while creating the filter. Syntax Parameters seq sequence-number permit tcp [A.B.C.D | A.B.C.D/x | any | host ip-address [operator]] [[A.B.C.
seq permit tcp (IPv6) Assigns a sequence number to allow TCP IPv6 packets while creating the filter. Syntax seq sequence-number permit tcp [A::B | A::B/x | any | host ipv6-address [operator]] [A::B | A:B/x | any | host ipv6-address [operator]] [ack | fin | psh | rst | syn | urg] [capture | dscp value| fragment] Parameters • sequence-number — Enter the sequence number to identify the route-map for editing and sequencing number, from 1 to 16777214.
seq permit udp Assigns a sequence number to allow UDP packets while creating the filter. Syntax Parameters seq sequence-number permit udp [A.B.C.D | A.B.C.D/x | any | host ip-address [operator]] [[A.B.C.D | A.B.C.D/x | any | host ip-address [operator] ] [ack | fin | psh | rst | syn | urg] [capture | dscp value | fragment] • sequence-number — Enter the sequence number to identify the route-map for editing and sequencing number, from 1 to 16777214. • A.B.C.
seq permit udp (IPv6) Assigns a sequence number to allow UDP IPv6 packets while creating a filter. Syntax seq sequence-number permit udp [A::B | A::B/x | any | host ipv6-address [operator]] [A::B | A:B/x | any | host ipv6-address [operator]] [ack | fin | psh | rst | syn | urg] [capture | dscp value | fragment] Parameters • sequence-number — Enter the sequence number to identify the route-map for editing and sequencing number, from 1 to 16777214.
Parameters • ip — View IP access list information. • mac — View MAC access group information. • ipv6 — View IPv6 access group information. • access-group name — Enter the name of the access group.
Active on interfaces : ethernet 3/0 ethernet 3/1 seq 10 permit any any seq 20 permit 11:11:11:11:11:11 22:22:22:22:22:22 any monitor Example (IP In) OS10# show ip access-lists in Ingress IP access list aaaa Active on interfaces : ethernet 3/0 ethernet 3/1 seq 10 permit ip any any seq 20 permit tcp any any seq 30 permit udp any any Example (IP Out) OS10# show ip access-lists out Egress IP access list aaaa Active on interfaces : ethernet 3/0 ethernet 3/1 seq 10 permit ip any any seq 20 permit tcp any any s
Example OS10# show ip as-path-access-list ip as-path access-list hello permit 123 deny 35 Supported Releases 10.3.0E or later show ip community-list Displays the configured IP community lists in alphabetic order. Syntax show ip community-list [name] Parameters name — (Optional) Enter the name of the standard IP community list. A maximum of 140 characters.
Parameters • ip | ipv6—(Optional) Displays information related to IPv4 or IPv6. • prefix-name — Enter a text string for the prefix list name. A maximum of 140 characters. Defaults None Command Mode EXEC Usage Information None Example OS10# show ip prefix-list ip prefix-list hello: seq 10 deny 1.2.3.4/24 seq 20 permit 3.4.4.5/32 Example (IPv6) OS10# show ipv6 prefix-list ipv6 prefix-list hello: seq 10 permit 1::1/64 seq 20 deny 2::2/64 Supported Releases 10.3.
Example OS10(config)# route-map bgp OS10(conf-route-map)# match as-path pathtest1 Supported Releases 10.3.0E or later match community Configures a filter to match routes that have a certain COMMUNITY attribute in their BGP path. Syntax Parameters match community community-list-name [exact-match] • community-list-name — Enter the name of a configured community list. • exact-match — (Optional) Select only those routes with the specified community list name.
• ethernet node/slot/port[:subport] — Enter the Ethernet interface information as the next-hop interface. • port-channel id-number — Enter the port-channel number as the next-hop interface, from 1 to 128. • vlan vlan-id —Enter the VLAN number as the next-hop interface, from 1 to 4093. Default Not configured Command Mode ROUTE-MAP Usage Information The no version of this command deletes the match.
match ipv6 address Configures a filter to match routes based on IPv6 addresses specified in IP prefix lists. Syntax Parameters match ipv6 address {prefix-list prefix-list | access-list} • prefix-list — Enter the name of the configured prefix list. A maximum of 140 characters. • access-list — Enter the name of the access group or list. Default Not configured Command Mode ROUTE-MAP Usage Information The no version of this command deletes the match.
Supported Releases 10.2.0E or later match origin Configures a filter to match routes based on the origin attribute of BGP. Syntax match origin {egp | igp | incomplete} Parameters • egp — Match only remote EGP routes. • igp — Match only on local IGP routes. • incomplete — Match on unknown routes that are learned through some other means. Default Not configured Command Mode ROUTE-MAP Usage Information The no version of this command deletes the match.
match tag Configures a filter to redistribute only routes that match a specific tag value. Syntax match tag tag-value Parameters tag-value — Enter the tag value to match with the tag number, from 0 to 4294967295. Default Not configured Command Mode ROUTE-MAP Usage Information The no version of this command deletes the match. Example OS10(conf-route-map)# match tag 656442 Supported Releases 10.2.0E or later route-map Enables a route-map statement and configures its action and sequence number.
Usage Information The community list you use in the set comm-list delete command must be configured so that each filter contains only one community. For example, the filter deny 100:12 is acceptable, but the filter deny 120:13 140:33 results in an error. If you configure the set comm-list delete command and the set community command in the same route map sequence, the deletion command (set comm-list delete) processes before the insertion command (set community).
set extcommunity Sets the extended community attributes in a route map for BGP updates. Syntax Parameters set extcommunity rt {asn2:nn | asn4:nnnn | ip-addr:nn} • asn2:nn — Enter an AS number in 2-byte format; for example, 1–65535:1–4294967295. • asn4:nnnn — Enter an AS number in 4-byte format; for example, 1–4294967295:1–65535 or 1–65535.1– 65535:1–65535. • ip-addr:nn — Enter an AS number in dotted format, from 1 to 65535.
Default Not configured Command Mode ROUTE-MAP Usage Information To establish an absolute metric, do not enter a plus or minus sign before the metric value. To establish a relative metric, enter a plus or minus sign immediately preceding the metric value. The value is added to or subtracted from the metric of any routes matching the route map. You cannot use both an absolute metric and a relative metric within the same route map sequence. Setting either metric overrides any previously configured value.
set next-hop Sets an IPv4 or IPv6 address as the next-hop. Syntax set {ip | ipv6} next-hop ip-address Parameters ip-address — Enter the IPv4 or IPv6 address for the next-hop. Default Not configured Command Mode ROUTE-MAP Usage Information If you apply a route-map with the set next-hop command in ROUTER-BGP mode, it takes precedence over the next-hop-self command entered in ROUTER-NEIGHBOR mode.
Default Not configured Command Mode CONFIGURATION Usage Information The no version of this command deletes the set clause from a route map. Example OS10(conf-route-map)# set tag 23 Supported Releases 10.2.0E or later set weight Set the BGP weight for the routing table. Syntax set weight weight Parameters weight — Enter a number as the weight the route uses to meet the route map specification, from 0 to 65535. Default Default router-originated is 32768 — all other routes are 0.
7 Quality of service Quality of service (QoS) reserves network resources for highly critical application traffic with precedence over less critical application traffic. QoS enables to prioritize different types of traffic and ensures the required level of quality of service. You can control the following parameters of selected traffic flows: Delay, Bandwidth, Jitter, and Drop.
Configuring QoS is a three-step process: 1 2 Create class-maps to classify the traffic flows. The following are the different types of class-maps: • qos type(default)—Classifies the ingress data traffic. • queuing type—Classifies the egress queues. • control-plane—Classifies the control-plane traffic. • network-qos—Classifies the set of traffic-class IDs for ingress buffer configurations. • application type—Classifies the application type traffic.
• Queuing policies must be applied in the output direction on physical interfaces or on system-qos mode. • Application type policy-map must be applied on system-qos mode. When a policy is applied on system, the policy is effective on all the ports in the system. However, interface level policy gets precedence over system level policy. Class-map configuration You can implement classification or filtering packets into various traffic classes based on a packet match criteria using class-maps.
Create policy-map P1 for class C1 OS10(config)# policy-map p1 OS10(conf-pmap-qos)# class c1 OS10(conf-pmap-c-qos)# set qos-group 1 Show policy-map OS10(conf-pmap-c-qos)# do show policy-map Service-policy(qos) input: p1 Class-map (qos): c1 set qos-group 1 Interface policy-map You can apply policy-maps directly to interfaces. 1 To attach a policy-map to in CONFIGURATION mode, enter interface mode. interface ethernet node/slot/port:[subport] 2 Configure an input or output service-policy in INTERFACE mode.
Control-plane policy-map You can apply the policies created to the control-plane. 1 Enter CONTROL-PLANE configuration mode from CONFIGURATION mode. control-plane 2 Apply the service policy, and create a name for the policy-map in CONTROL-PLANE mode.
• dot1p —Sets the dynamic classification to trust dot1p. • fallback—(Optional) Honor trusting 802.1p (dot1p) only if other match criteria in this policy-map fails to qualify for a packet. Honor 802.
Honor DSCP priority on ingress traffic OS10(config)# policy-map policy-trust OS10(conf-pmap-qos)# class class-trust OS10(conf-pmap-c-qos)# trust diffserv View policy-map OS10(conf-pmap-c-qos)# do show policy-map Service-policy (qos) input: policy-trust Class-map (qos): class-trust trust diffserv Strict priority queuing OS10 uses queues for egress QoS policy-types. You can enable priorities to dequeue all packets from the assigned queue before servicing any other queues.
Enable strict priority on class-map OS10(config)# class-map type queuing magnum OS10(conf-cmap-queuing)# match queue 7 OS10(conf-cmap-queuing)# exit OS10(config)# policy-map type queuing solar OS10(conf-pmap-queuing)# class magnum OS10(conf-pmap-c-que)# priority OS10(conf-pmap-c-que)# exit OS10(conf-pmap-queuing)# exit OS10(config)# system qos OS10(conf-sys-qos)# service-policy output solar View QoS system OS10(conf-sys-qos)# do show qos system Service-policy (output)(queuing): solar Enable strict priority
View policy-map OS10(conf-pmap-c-qos)# do show policy-map Service-policy(qos) input: red Class-map (qos): bluedot1p set qos-group 5 DSCP classification Classify traffic based on the DSCP value. The value of the QoS group represents the queue to which you direct a specific class of traffic. You cannot have two match statements with the same match criterion. If you enter two match statements with same filter-type, the second statement overwrites the first statement.
3 Return to CONFIGURATION mode. exit 4 Define a policy-map type as qos and configure the policy-map name in CONFIGURATION mode. policy-map type qos policy—map-name 5 Associate the policy-map with a class-map in POLICY-MAP mode. class class-map-name 6 Enter a queue number for the matched flow as qos-group ID in POLICY-MAP-CLASS-MAP mode (0 to 7).
IP access-group classification With this classification, traffic that accesses the IP access-list within the class-map is matched. The IP access-list is associated to the class-map using the IP access-group CLI. For a match-all class-map, configure only one access-list as a match filter. You cannot apply any other match criteria. For a match-any class-map, configure up to five access-lists and/or other match criteria. 1 Define a class-map type as qos in CONFIGURATION mode.
2 Apply the L3 precedence match criteria for the QoS policy in the CLASS-MAP configuration mode. Configure the match IP precedence value as single, comma-delimited, or hyphenated range—0 to 7. Use the match not command to match all values except the values configured.
4 Configure marking for QoS group in POLICY-MAP-CLASS-MAP mode.
3 Configure marking for the QoS group in POLICY-MAP-CLASS-MAP mode.
Each egress queue of an interface can be scheduled as per Weighted Deficit Round Robin (WDRR) or by strict-priority (SP), which are mutually exclusive. If the bandwidth percent command is present, you cannot configure the priority command as it is used to assign bandwidth to a queue. In S5148F-ON, bandwidth weight is equally applied to UC and MC. 1 Create a class-map of type queuing and configure a name for the class-map in CONFIGURATION mode.
• 0 to 40000000—kilobits per second (kbps) • 0 to 40000 — megabits per second (mbps) In S5148F-ON, consider the following guidelines for providing the bandwidth rates: • • Queue level shaping • Set the bandwidth rate of shaping in multiples of 11 Mbps, with the minimum bandwidth rate starting from 11 Mbps. If you configure a value other than the multiples of 11, the rate is mapped to the nearest multiple of 11.
4 • cir committed-rate—Enter a committed rate value in kilobits per second (kbps) (0 to 40000000). • bc committed-burst-size—(Optional) Enter a committed burst size in packets for control plane and kbps (16 to 200000, default 200). • pir peak-rate—Enter a peak-rate value in kbps (0 to 40000000). • be peak-burst-size—(Optional) Enter a peak burst size in kbps (16 to 200000, default 200). (Optional) Configure traffic policing for a specific queue in POLICY-MAP-CLASS-MAP mode.
• Associate the QoS policy with a particular rate-limit. • Assign the QoS service policy to control plane queues. By default, the pir and cir values are in packets per second (pps) for control plane. CoPP for CPU queues converts the input rate from kilobits per second (kbps) to packets per second (pps), assuming 64 bytes is the average packet size, and applies that rate to the corresponding queue – 1 kbps is roughly equivalent to 2 pps.
View configuration Use the show commands to display the protocol traffic assigned to each control-plane queue and the current rate-limit applied to each queue. You can also use the show command output to verify the CoPP configuration.
the maximum threshold. After a queue depth exceeds the maximum threshold, all other packets that attempt to enter the queue are discarded. In S5148F-ON, flow based coloring is not supported. Consider the following for buffer configuration on S5148F-ON. • • Ingress buffer configuration: • Configure the lossy buffer profile on the port and not on priority group, with shared static threshold reaching the maximum switch buffer size. Dynamic threshold mode is not supported.
• • Display the configuration details of all existing class-maps in EXEC mode. show class-map type {control-plane | qos | queuing}class-map-name • type—Enter the policy-map type (qos, queuing or control-plane). • qos—Displays all policy-maps in the qos type. • queuing—Displays all policy-maps in the queuing type. • control-plane—Displays all policy-maps in the control-plane type. • class-map-name—Enter the QoS class-map name to display the details of a specific policy-map.
Description Output Dropped Green Drop Yellow Drop Red Drop Packets 2811 0 0 0 0 Bytes 418309 0 0 0 0 View packets and bytes on specific queue OS10# show queuing statistics interface ethernet 1/1/1 queue 3 Interface ethernet 1/1/1 Queue 3 Description Packets Bytes Output 0 0 Dropped 0 0 QoS commands bandwidth Assigns a percentage of weight to the queue. Syntax bandwidth percent value Parameters percent value — Enter the percentage assignment of bandwidth to the queue (1 to 100).
class-map Creates a QoS class-map which filters traffic to match packets to the corresponding policy created for your network. Syntax Parameters Defaults class-map [type {qos | queuing | control-plane}] [{match-any | match-all}] class-map-name • type — Enter a class-map type. • qos — Enter a qos type class-map. • queuing — Enter a queueing type class-map. • control-plane — Enter a control-plane type class-map. • match-all — Determines how packets are evaluated when multiple match criteria exist.
clear qos statistics Clears all QoS related statistics in the system. Syntax clear qos statistics Parameters None Default Not configured Command Mode EXEC Usage Information None Example OS10# clear qos statistics Supported Releases 10.2.0E or later clear qos statistics type Clears all queue counters for the control-plane, qos, and queueing.
Default Not configured Command Mode CONTROL-PLANE Usage Information If you attach an access-list to the class-map type of control-plane, the access-list ignores the permit and deny keywords. Example (class-map) OS10(config)# class-map type control-plane match-any c1 OS10(conf-cmap-control-plane)# Example (policymap) OS10(config)# policy-map type control-plane p1 OS10(conf-pmap-control-plane)# Supported Releases 10.2.
• mac access-group name name — Enter an access-group name for the MAC access-list match criteria (up to 140 characters). • set dscp dscp-value — Enter a DSCP value for marking the DSCP packets (0 to 63). • not — Enter the IP or CoS to negate the match criteria. • vlan vlan-id — Enter a VLAN number for VLAN match criteria (1 to 4093). Default Not configured Command Mode CLASS-MAP Usage Information In a match-any class, you can enter multiple match criteria.
Command Mode CLASS-MAP Usage Information You cannot enter two match statements with the same filter-type. If you enter two match statements with the same filter-type, the second statement overwrites the first statement. The match-all option in a class-map does not support ip-any. Select either ip or IPv6 for the match-all criteria. If you select ip-any, you cannot select ip or ipv6 for the same filter type. Example OS10(conf-cmap-qos)# match ip-any dscp 17-20 Supported Releases 10.2.
match vlan Configures a match criteria based on the VLAN ID number. Syntax match vlan vlan-id Parameters vlan-id — Enter a VLAN ID number (1 to 4093). Default Not configured Command Mode CLASS-MAP Usage Information You cannot enter two match statements with the same filter-type. If you enter two match statements with the same filter-type, the second statement overwrites the first statement. Example OS10(conf-cmap-qos)# match vlan 100 Supported Releases 10.2.
Usage Information This command can only be used under network-qos policy type. Buffer-size, pause-thresholds, and resumethresholds vary based on platform. The no version of this command returns the value to the default. Add the policy-map with pause to system-qos to service an input to enable pause on all ports, based on a per-port linklevel flow-control mode. The xoff and xon threshold settings for link-level flow-control must map to traffic classes mapped to a single PG.
policy-map Enters QoS POLICY-MAP mode and creates or modifies a QoS policy-map. Syntax policy-map policy-map-name [type {qos | queuing | control-plane | application}] Parameters • policy-map-name — Enter a class name for the policy-map (up to 32 characters). • type — Enter the policy-map type. • qos — Create a qos policy-map type. • queuing — Create a queueing policy-map type. • control-plane — Create a control-plane policy-map type. • application — Create an application policy-map type.
• dot1p values — (Optional) Enter either single, comma-delimited, or a hyphenated range of dot1p values (0 to 7). Default 0 Command Mode TRUST-MAP Usage Information If the trust map does not define dot1p values to any traffic class, those flows are mapped to the default traffic class (0). If some of the dot1p values are already mapped to an existing traffic class, you will receive an error. You should have a 1:1 dot1p to traffic class mapping for PFC-enabled CoS values.
Example OS10(conf-tmap-tc-queue-qos)# queue 2 qos-group 5 Supported Releases 10.3.0E or later random-detect Configures WRED parameters for the queue. Syntax random-detect minimum-threshold threshold-value maximum-threshold thresholdvalue drop-probability value percentage [weight value] [color {green | yellow}] Parameters • minimum threshold threshold value — Enter the minimum buffer threshold (1 to 12480 KB). • maximum threshold threshold value — Enter the maximum buffer threshold (1 to 12480 KB).
Example OS10(conf-if-eth1/1/7)# service-policy input type qos p1 Supported Releases 10.2.0E or later set cos Sets a cost of service (CoS) value to mark L2 802.1p (dot1p) packets. Syntax set cos cos-value Parameters cos-value — Enter a CoS value (0 to 7). Default Not configured Command Mode POLICY-MAP-CLASS-MAP Usage Information You cannot enter two set statements with the same action-type. If you enter two set statements with the same action-type, the second statement overwrites the first.
Usage Information The qos or control-plane ingress QoS policy type only supports this command. When class-map type is control-plane, the qos-group corresponds to CPU queues 0 to 11, and when the class-map type is qos, the qos-group corresponds to data queues 0 to 7. Example OS10(conf-pmap-c-qos)# set qos-group 7 Supported Releases 10.2.0E or later shape Shapes the outgoing traffic rate.
Usage Information This command displays all class-maps of qos, queuing, or control-plane type. The class-map-name parameter displays all details of a configured class-map name. Example OS10# show class-map type qos c1 Class-map (qos): c1 (match-all) Match(not): ip-any dscp 10 Supported Releases 10.2.0E or later show control-plane info Displays control-plane queue mapping and rate limits.
4 5 6 7 8 9 10 11 Supported Releases 0 2 0 32048 14140 0 0 0 0 172 0 2180484 2569184 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 10.2.0E or later show qos interface Displays the QoS configuration applied to a specific interface. Syntax show qos interface ethernet node/slot/port[:subport] Parameters node/slot/port[:subport] — Enter the Ethernet interface information.
Service-policy(qos) input: p2 Class-map (qos): c2 set qos-group 2 Supported Releases 10.2.0E or later show qos control-plane Displays the QoS configuration applied to the control-plane. Syntax show qos control-plane Parameters None Default Not configured Command Mode EXEC Usage Information Monitors statistics for the control-plane and troubleshoots CoPP. Example OS10# show qos control-plane Service-policy (Input): p1 Supported Releases 10.2.
show egress buffer-stats interface Displays the buffers statistics for the egress interface. Syntax show egress buffer-stats interface [interface node/slot/port[:subport]] Parameters • interface — (Optional) Enter the interface type. • node/slot/port[:subport] — (Optional) Enter the port information.
2 3 4 5 6 7 OS10# Supported Releases - - - - - - - - - - - - - - - - - - - - 9360 static 12479488 - 10.3.0E or later show ingress buffer-stats interface Displays the buffers statistics for the ingress interface. Syntax Parameters show ingress buffer-stats interface [interface node/slot/port[:subport]] • interface — (Optional) Enter the interface type. • node/slot/port[:subport] — (Optional) Enter the port information.
Usage Information View and verify system-level service-policy configuration information. Example OS10# show qos system Service-policy (Input) (qos) : policy1 Service-policy (Output)(queuing) : policy2 Supported Releases 10.2.0E or later show qos system buffers Displays the system buffer configurations and utilization.
Usage Information None Example (dot1p) OS10# show qos maps type tc-queue queue-map1 Traffic-Class to Queue Map: queue-map1 Queue Traffic-Class -------------------------1 5 2 6 3 7 OS10# show qos maps type trust-map-dot1p dot1p-trustmap1 DOT1P Priority to Traffic-Class Map : dot1p-trustmap1 Traffic-Class DOT1P Priority ------------------------------0 2 1 3 2 4 3 5 4 6 5 7 6 1 OS10# show qos maps type trust-map-dscp dscp-trustmap1 DSCP Priority to Traffic-Class Map : dscp-trustmap1 Traffic-Class DSCP Prior
2 16-23 3 24-31 4 32-39 5 40-47 6 48-55 7 56-63 Default Traffic-Class to Queue Map Traffic-Class Queue number ------------------------------0 0 1 1 2 2 3 3 4 4 5 5 6 6 7 7 OS10# Example (dscp) OS10# show qos trust-map dscp new-dscp-map new-dscp-map qos-group Dscp Id ------------------0 0-7 1 8-15 2 16-23 3 24-31 4 32-39 5 40-47 6 48-55 7 56-63 Supported Releases 10.3.0E or later system qos Enters SYSTEM-QOS mode to configure system-level service policies.
Parameters • diffserv — Set the dynamic classification to trust DSCP. • dot1p — Set the dynamic classification to trust Dot1p. • fallback — (Optional) Honor trusting dot1p or DSCP only if other match criteria in this policy map does not qualifies for a packet. Default Disabled Command Mode POLICY-MAP-CLASS-MAP Usage Information The ingress QoS policy type and class-trust support this command. Example OS10(conf-pmap-c-qos)# trust dot1p Supported Releases 10.3.
qos-map traffic-class Creates user-defined trust map for queue mapping. In S5148F-ON, apply the traffic class only on the egress traffic. Syntax qos-map traffic-class map-name Parameters map-name — Enter the name of the queue trust map (up to 32 characters). Default Not configured Command Mode CONFIGURATION Usage Information The traffic class will route all traffic to the mapped queue if applied on the interface- or system-level. The no version of this command returns the value to the default.
8 Virtual link trunking Virtual link trunking (VLT) is a Layer 2 (L2) aggregate protocol between end devices (servers) connected to different network devices. VLT reduces the role of spanning tree protocols (STPs) by allowing link aggregation group (LAG) terminations on two separate distribution or core switches and supporting a loop-free topology.
VLT physical ports 802.1p, 802.1q, LLDP, flow control, port monitoring, and jumbo frames are supported on VLT physical ports. System management protocols All system management protocols are supported on VLT ports — SNMP, RMON, AAA, ACL, DNS, FTP, SSH, syslog, NTP, RADIUS, SCP, and LLDP. L3 VLAN connectivity Enable L3 VLAN connectivity (VLANs assigned with an IP address) on VLT peers by configuring a VLAN interface for the same VLAN on both devices.
• In a VLT domain, the peer network devices must run the same OS10 software version. • Configure the same VLT domain ID on peer devices. If a VLT domain ID mismatch occurs on VLT peers, the VLTi does not activate. • In a VLT domain, VLT peers support connections to network devices that connect to only one peer. VLT interconnect A VLTi is the link that synchronizes states between VLT peers. OS10 automatically adds VLTi ports to VLANs spanned across VLT peers.
RSTP configuration RSTP mode is supported on VLT ports. Before you configure VLT on peer switches, configure RSTP in the network. RSTP prevents loops during the VLT startup phase. • Enable RSTP on each peer node in CONFIGURATION mode.
Create VLT domain A VLT domain requires an ID number. Configure the same VLT domain ID on both peers, see VLT domain. The no vlt-domain command disables VLT. 1 Configure a VLT domain and enter VLT-DOMAIN mode. Configure the same VLT domain ID on each peer, from 1 to 255. vlt-domain domain-id 2 Repeat the steps on the VLT peer to create the VLT domain.
Configure VLT port-channel A VLT port-channel links an attached device and VLT peer switches, also known as a virtual link trunk. 1 Enter the port-channel ID number on the VLT peer in INTERFACE mode, from 1 to 1024. interface port-channel id-number 2 Assign the same ID to a VLT port-channel on each VLT peer — peers are seen as a single VLT LAG to downstream devices. vlt-port-channel vlt-lag-id 3 Repeat the steps on the VLT peer.
VRRP Optimized Forwarding To enable optimized L3 forwarding over VLT, use VRRP Active-Active mode. By default, VRRP Active-Active mode is enabled on the VLAN interfaces. In Active-Active mode, each peer locally forwards L3 traffic, resulting in reduced traffic flow over the VLTi. Configure the same L3 static and dynamic routing on each peer so that L3 reachability and routing tables are the same on both peers. 1 Enable VRRP Active-Active mode in VLAN-INTERFACE mode.
VLT Peer Unit ID System MAC Address Status IP Address Version -------------------------------------------------------------------------2 90:b1:1c:f4:bc:0a up fda5:74c8:b79e:1::2 1.
VLT Unit ID Port-Channel Status Configured ports Active ports ---------------------------------------------------------------------* 1 port-channel1 down 2 0 2 port-channel1 down 2 0 VLT port channel ID : 2 VLT Unit ID Port-Channel Status Configured ports Active ports ---------------------------------------------------------------------* 1 port-channel2 down 1 0 2 port-channel2 down 1 0 VLT port channel ID : 3 VLT Unit ID Port-Channel Status Configured ports Active ports ------------------------------------
delay-restore Configures a time interval to delay the bringing up of VLT ports after reload or peer-link restoration between the VLT peer switches. Syntax delay-restore seconds Parameters seconds — Enter a delay time, in seconds, to delay bringing up VLT ports after the VLTi device is reloaded, from 1 to 1200. Default 90 seconds Command Mode VLT-DOMAIN Usage Information Use this command to delay the system from bringing up the VLT port for a brief period to allow L3 routing protocols to converge.
Usage Information The no version of this command disables L3 routing. Example OS10(conf-vlt-1)# peer-routing Supported Releases 10.2.0E or later peer-routing-timeout Configures the delay after which peer routing is disabled when the peer is not available. This command is applicable for both IPv6 and IPv4. Syntax peer-routing-timeout value Parameters value — Enter the timeout value in seconds, from 0 to 65535.
Link Type: Point-to-Point BPDU Sent: 15, Received: 5 Supported Releases 10.3.0E or later show vlt Displays information on a VLT domain. Syntax show vlt id Parameter id — Enter a VLT domain ID, from 1 to 255.
show vlt mac-inconsistency Displays inconsistencies in dynamic MAC addresses learnt between VLT peers. Syntax show vlt mac-inconsistency Parameters None Default Not configured Command Mode EXEC Usage Information Use this command to check mismatch of MAC address table entries between VLT peers. To verify VLT configuration mismatch issues on peer switches, use the show vlt domain-name mismatch command. Example OS10# show vlt-mac-inconsistency Checking Vlan 228 .. Found 7 inconsistencies ..
Example (no mismatch) OS10# show vlt 1 mismatch Peer-routing mismatch: No mismatch VLAN mismatch: No mismatch VLT VLAN mismatch: No mismatch Example (mismatch) OS10# show vlt 1 mismatch Peer-routing mismatch: VLT Unit ID Peer-routing ----------------------------------* 1 Enabled 2 Disabled VLAN mismatch: No mismatch VLT VLAN mismatch: VLT ID : 1 VLT Unit ID Mismatch VLAN List ---------------------------------* 1 1 2 2 VLT ID : 2 VLT Unit ID Mismatch VLAN List ----------------------------------* 1 1 2 2 Ex
show vlt role Displays the VLT role of the local peer. Syntax show vlt id role Parameters id — Enter the VLT domain ID, from 1 to 255. Default Not configured Command Mode EXEC Usage Information The * in the mismatch output indicates a local node entry. Example OS10# show vlt 1 role VLT Unit ID Role -----------------------* 1 primary 2 secondary Supported Releases 10.2.0E or later show vlt vlt-port-detail Displays detailed status information about VLT ports.
vlt-domain Creates a VLT domain. Syntax vlt-domain domain-id Parameter domain-id — Enter a VLT domain ID on each peer, from 1 to 255. Default None Command Mode CONFIGURATION Usage Information Configure the same VLT domain ID on each peer. If a VLT domain ID mismatch occurs on VLT peers, the VLTi link between peers does not activate. The no version of this command disables VLT. Example OS10(config)# vlt-domain 1 Supported Releases 10.2.
Example OS10(conf-vlt-1)# vlt-mac 00:00:00:00:00:02 Supported Releases 10.2.0E or later vrrp mode active-active Enables the VRRP peers to locally forward L3 traffic in a VLAN interface. Syntax vrrp mode active-active Parameters None Default Enabled Command Mode VLAN INTERFACE Usage Information The no version of this command disables the configuration. This command is applicable only for VLAN interfaces. Example OS10(conf-if-vl-10)# vrrp mode active-active Supported Releases 10.2.
9 sFlow sFlow is a standard-based sampling technology embedded within switches and routers that monitors network traffic. It provides traffic monitoring for high-speed networks with many switches and routers.
Enable or disable sFlow on a specific interface • Enable sFlow in CONFIGURATION mode. sflow enable • Disable sFlow in CONFIGURATION mode.
sflow enable ! Collector configuration Configure the IPv4 or IPv6 address for the sFlow collector. You can configure a maximum of two sFlow collectors. If you specify two collectors, the samples are sent to both. The agent IP address must be the same for both the collectors. • Enter an IPv4 or IPv6 address for the sFlow collector, IPv4 or IPv6 address for the agent, UDP collector port number (default 6343), maximum datagram size (up to 1400), and the VRF instance number in CONFIGURATION mode.
sflow enable ! Sample-rate configuration Sampling rate is the number of packets skipped before the sample is taken. If the sampling rate is 4096, one sample generates for every 4096 packets observed. • • • Set the sampling rate in CONFIGURATION mode, from 4096 to 65535. The default is 32768. sflow sample-rate sampling-size Disable packet sampling in CONFIGURATION mode. no sflow sample-rate View the sampling rate in EXEC mode.
• View sFlow configuration details on a specific interface in EXEC mode. OS10# show sflow interface port-channel 1 port-channel1 sFlow is enabled on port-channel1 Samples rcvd from h/w: 0 • View the sFlow running configuration in EXEC mode. OS10# show running-configuration sflow sflow enable sflow max-header-size 80 sflow polling-interval 30 sflow sample-rate 4096 sflow collector 10.16.150.1 agent-addr 10.16.132.67 6767 sflow collector 10.16.153.176 agent-addr 3.3.3.
Default Disabled Command Mode CONFIGURATION Usage Information The no version of this command to disables sFlow.
Supported Releases 10.3.0E or later sflow sample-rate Configures the sampling rate. Syntax sflow sample-rate value Parameter value — Enter the packet sample rate, from 4096 to 65535. The default is 32768. Default 32768 Command Mode CONFIGURATION Usage Information Sampling rate is the number of packets skipped before the sample is taken. For example, if the sampling rate is 4096, one sample generates for every 4096 packets observed.
10 Troubleshoot OS10 Critical workloads and applications require constant availability. Dell EMC Networking offers tools to help you monitor and troubleshoot problems before they happen.
* 1 1 1 1 1 1 S5148F-ON S5148F-ON-PWR-2-AC S5148F-ON-FANTRAY-1 S5148F-ON-FANTRAY-2 S5148F-ON-FANTRAY-3 S5148F-ON-FANTRAY-4 0X4XRX 02RPHX 03CH15 03CH15 03CH15 03CH15 X01 A00 A00 A00 A00 A00 CN-0X4XRX-CES00-798-0029 CN-02RPHX-DED00-788-02YZ CN-03CH15-CES00-78C-0076 CN-03CH15-CES00-78C-0073 CN-03CH15-CES00-78C-0095 CN-03CH15-CES00-78C-0075 9CLSG02 203 532 341 78 Boot partition and image Display system boot partition–related and image-related information. • View all boot information in EXEC mode.
2 root 3 root 5 root 7 root 8 root 10 root 11 root 12 root 13 root 14 root 15 root 16 root 17 root 19 root 20 root 21 root 22 root 23 root 24 root 25 root --more-- 20 20 0 20 20 20 20 20 rt rt rt rt 20 0 0 20 0 20 0 25 0 0 -20 0 0 0 0 0 0 0 0 0 0 -20 -20 0 -20 0 -20 5 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 S S S R S S S S S S S S S S S S S S S S 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.0 0.
Capture packets from Ethernet interface $ tcpdump -i e101-003-0 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on e101-003-0, link-type EN10MB (Ethernet), capture size 262144 bytes 01:39:22.457185 IP 3.3.3.1 > 3.3.3.4: ICMP echo request, id 5320, seq 26, length 64 01:39:22.457281 IP 3.3.3.1 > 3.3.3.
When you execute traceroute, the output shows the path a packet takes from your device to the destination IP address. It also lists all intermediate hops (routers) that the packet traverses to reach its destination, including the total number of hops traversed. Check IPv4 connectivity OS10# ping 172.31.1.255 Type Ctrl-C to abort. Sending 5, 100-byte ICMP Echos to 172.31.1.255, timeout is 2 seconds: Reply to request 1 from 172.31.1.208 0 ms Reply to request 1 from 172.31.1.
1 3ffe:501:ffff:100:201:e8ff:fe00:4c8b 000.000 ms 000.000 ms 000.000 ms View diagnostics View system diagnostic information using show commands. The show hash-algorithm command is used to view the current hash algorithms configured for LAG and ECMP.
Hardware Revision Software Version Physical Ports BIOS SMF CPLD1 CPLD2 CPLD3 CPLD4 : : : : : : : : : X01 10.3.2E(X) 48x25GbE, 6x100GbE 3.36.0.1-2 0.1 1.0 1.0 1.0 1.
location-led system Changes the location LED of the system. Syntax location-led system {node-id | node-id/unit-id} {on | off} Parameters • node-id | node-id/unit-id — Enter the system ID. • on | off — Set the system LED to be on or off. Default Not configured Command Mode EXEC Usage Information Use the location-led system command to change the location LED for the specified system ID. Example OS10# location-led system 1 on OS10# location-led system 1 off Supported Releases 10.3.
• -l preload — (Optional) Enter the number of packets that ping sends before waiting for a reply. Only a super-user may preload more than 3. • -L — (Optional) Suppress the loopback of multicast packets for a multicast target address. • -m mark — (Optional) Tags the packets sent to ping a remote device (use with policy routing). • -M pmtudisc_option — (Optional) Enter the path MTU (PMTU) discovery strategy: • do prevents fragmentation, including local.
ping6 Tests network connectivity to an IPv6 device. Syntax ping6 [-aAbBdDfhLnOqrRUvV] [-c count] [-i interval] [-I interface] [-l preload] [-m mark] [-M pmtudisc_option] [-N nodeinfo_option] [-p pattern] [-Q tclass] [s packetsize] [-S sndbuf] [-t ttl] [-T timestamp_option] [-w deadline] [-W timeout] destination Parameters 512 • -a — (Optional) Audible ping. • -A — (Optional) Adaptive ping.
• -T timestamp option — (Optional) Set special IP timestamp options. Valid values for timestamp option — tsonly (only timestamps), tsandaddr (timestamps and addresses) or tsprespec host1 [host2 [host3 [host4]]] (timestamp pre-specified hops). • -v — (Optional) Verbose output. • -V — (Optional) Display version and exit. • -w deadline — (Optional) Enter the time-out value, in seconds, before the ping exits regardless of how many packets are sent or received.
Active Partition: Active SW Version: Active Kernel Version: Active Build Date/Time: Standby Partition: Standby SW Version: Standby Build Date/Time: Next-Boot: Supported Releases B 10.2.0E Linux 3.16.7-ckt25 2016-10-03T23:11:14Z A 10.2.0E 2016-10-03T23:11:14Z active[B] 10.2.0E or later show diag Displays diagnostic information for port adapters and modules. Syntax show diag Parameters None Default Not configured Command Mode EXEC Usage Information None Example OS10# show diag 00:00.
Parameters None Default Not configured Command Mode EXEC Usage Information None Example OS10# show environment Unit State Temperature ------------------------------------1 up 43 Thermal sensors Unit Sensor-Id Sensor-name Temperature -----------------------------------------------------------------------------1 1 CPU On-Board temp sensor 32 1 2 Switch board temp sensor 28 1 3 System Inlet Ambient-1 temp sensor 27 1 4 System Inlet Ambient-2 temp sensor 25 1 5 System Inlet Ambient-3 temp sensor 26 1 6
Description : S5148F-ON 48x25GbE, 6x100GbE QSFP28 Interface Module Software version : 10.3.
Tasks: 1 total, 0 running, 1 sleeping, 0 stopped, 0 zombie %Cpu(s): 9.7 us, 3.9 sy, 0.3 ni, 85.8 id, 0.0 wa, 0.0 hi, 0.3 si, 0.0 st KiB Mem: 3998588 total, 2089040 used, 1909548 free, 143772 buffers KiB Swap: 399856 total, 0 used, 399856 free. 483276 cached Mem PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 1019 root 20 0 1829416 256080 73508 S 6.6 6.4 1212:36 base_nas OS10# Supported Releases 10.3.0E or later show system Displays system information.
Example (node-id) 3 up NORMAL 1 2 8420 8529 up up 4 up NORMAL 1 2 8348 8680 up up OS10# show system node-id 1 fanout-configured Interface Breakout capable Breakout state ----------------------------------------------------Eth 1/1/1 No BREAKOUT_1x1 Eth 1/1/2 No BREAKOUT_1x1 Eth 1/1/3 No BREAKOUT_1x1 Eth 1/1/4 No BREAKOUT_1x1 Eth 1/1/5 No BREAKOUT_1x1 Eth 1/1/6 No BREAKOUT_1x1 Eth 1/1/7 No BREAKOUT_1x1 Eth 1/1/8 No BREAKOUT_1x1 Eth 1/1/9 No BREAKOUT_1x1 Eth 1/1/10 No BREAKOUT_1x1 Eth 1/1/11 No BR
Node Id MAC : 1 : 34:17:eb:3a:bc:80 -- Unit -Unit Status ReqType CurType Version ---------------------------------------------------------------1 up S5148F S5148F 10.3.
• -t tos — (Optional) For IPv4, enter the Type of Service (TOS) and Precedence values to use. 16 sets a low delay; 8 sets a high throughput. • -UL — (Optional) Use UDPLITE for tracerouting (default port is 53). • -w waittime — (Optional) Enter the time (in seconds) to wait for a response to a probe (default 5 seconds). • -z sendwait — (Optional) Enter the minimal time interval to wait between probes (default 0).
| | | set root='(hd0,gpt7)' | | echo 'Loading OS10 ...' | | linux (hd0,gpt7)/boot/os10.linux console=ttyS0,115200 root=/dev/sda7 \rw init=/bin/bash | | initrd (hd0,gpt7)/boot/os10.initrd | +-------------------------------------------------------------------------------------------+ 6 Press Ctrl + x to reboot your system. The system boots up to a root shell without a password. 7 Enter linuxadmin for the username at the system prompt.
Configure SupportAssist SupportAssist is started by default. If you do not accept end user license agreement (EULA), SupportAssist is disabled. 1 Enter SupportAssist mode from CONFIGURATION mode. support-assist 2 (Optional) Configure the SupportAssist server URL or IP address in SUPPORT-ASSIST mode. server url server-url 3 (Optional) Configure the interface used to connect to the SupportAssist server in SUPPORT-ASSIST mode.
Show EULA license OS10# show support-assist eula I accept the terms of the license agreement. You can reject the license agreement by configuring this command 'eula-consent support-assist reject.' By installing SupportAssist, you allow Dell to save your contact information (e.g. name, phone number and/or email address) which would be used to provide technical support for your Dell products and services. Dell may use the information for providing recommendations to improve your IT infrastructure.
Set contact information Configure contact details in SupportAssist Company mode. You can set the name, email addresses, phone, method, and time zone. SupportAssist contact-person configurations are optional for the SupportAssist service. 1 (Optional) Enter the contact name in SUPPORT-ASSIST mode. contact-person first firstname last lastname 2 Enter the email addresses in SUPPORT-ASSIST mode. email-address email-address 3 Enter the preferred contact method in SUPPORT-ASSIST mode.
1 Display the SupportAssist activity in EXEC mode. show support-assist status 2 Display the EULA license agreement in EXEC mode. show support-assist eula View SupportAssist status OS10# show support-assist status EULA : Accepted Service : Enabled Contact-Company : DellCMLCAEOS10 Street Address : 7625 Smetana Lane Dr Bldg 7615 Cube F577 City : Minneapolis State : Minnesota Country : USA Zipcode : 55418 Territory : USA Contact-person : Michael Dale Email : abc@dell.
to Dell and/or to Dell's affiliates, subcontractors or business partners. When making such transfers, Dell shall ensure appropriate protection is in place to safeguard the Collected Data being transferred in connection with SupportAssist. If you are downloading SupportAssist on behalf of a company or other legal entity, you are further certifying to Dell that you have appropriate authority to provide this consent on behalf of that entity.
contact-person Configures the contact name for an individual. Syntax Parameters contact-person [first firstname last lastname] • first firstname — Enter the keyword and the first name for the contact person. Use double quotes for more than one first name. • last lastname — Enter the keyword and the last name for the contact person. Default Not configured Command Mode SUPPORT-ASSIST Usage Information The no version of this command removes the configuration.
Example (Accept) OS10(config)# eula-consent support-assist accept Example (Reject) OS10(config)# eula-consent support-assist reject This action will disable Support Assist and erase all configured data.Do you want to proceed ? [Y/N]:Y Supported Releases 10.2.0E or later preferred-method Configures a preferred method to contact an individual. Syntax preferred-method {email | phone | no-contact} Parameters • email — Enter to select email as the preferred contact method.
Parameters server-url-string — Enter the domain or IP address of the remote SupportAssist server. To include a space, enter a space within double quotes. Default https://stor.g3.ph.dell.com Command Mode SUPPORT-ASSIST Usage Information Only configure one SupportAssist server. If you do not configure the SupportAssist server, the system uses the non-configurable default server. Use the show support-assist status command to view the server configuration.
Supported Releases 10.2.0E or later show support-assist status Displays SupportAssist status information including activities and events.
Default Not configured Command Mode SUPPORT-ASSIST Usage Information Add spaces to the company street address by enclosing the address in quotes. Separate each address with a space to place on a new line. The no version of this command removes the company address configuration. Example OS10(conf-support-assist-Eureka)# street-address "One Dell Way" "Suite 100" Supported Releases 10.2.0E or later support-assist-activity Schedules a time to transfer the activity log.
Parameters territory — Enter the territory for the company. Default Not configured Command Mode CONFIG-SUPPORT-ASSIST Usage Information The no version of this command removes the company territory configuration. Example OS10(conf-support-assist)# contact-company name Eureka OS10(conf-support-assist-Eureka)# territory west Supported Releases 10.2.0E or later Support bundle The Support Bundle is based on the sosreport tool.
Apr 19 17:0:14: %Node.1-Unit.1:PRI:OS10 %log-notice:SUPPORT_BUNDLE_FAILURE: Failure in generate support-bundle execution:All Plugin options enabled generate support-bundle Generates an sosreport tar file that collects configuration and diagnostic information on Linux systems. Syntax generate support-bundle [enable-all-plugin-options] Parameters enable-all-plugin-options — (Optional) Generate a full support bundle with all plugin options enabled.
• log-crit — Critical conditions. • log-err — Error conditions. • log-warning — Warning conditions. • log-notice — Normal but significant conditions (default). • log-info — Informational messages. • log-debug — Debug messages. • Enter the minimum severity level for logging to the console in CONFIGURATION mode. logging console severity • Enter the minimum severity level for logging to the system log file in CONFIGURATION mode.
Jan 4 19:13:17 OS10 usb_monitor: Node.1-Unit.1:PRI:notice %Dell EMC (OS10) %lognotice:USB_DEVICE_INSERTED: Vendor: 8087 Product: 07db Serial: unknown Jan 4 19:13:18 OS10 dn_dot1x[900]: Node.1-Unit.1:PRI:notice [os10:trap], %Dell EMC (OS10) %lognotice:DOT1X_PDU_RX_FAIL: PDU Reception Failed Kernel Index 1 Jan 4 19:13:20 OS10 dn_etl[917]: Node.1-Unit.1:PRI:notice [os10:event], %Dell EMC (OS10) %lognotice:ETL_SERVICE_UP: ETL service is up Jan 4 19:13:50 OS10 dn_eqm[1754]: Node.1-Unit.
-------------------------------------------Thermal sensors Unit Sensor-Id Sensor-name Temperature --------------------------------------------------------1 1 T2 temp sensor 28 1 2 system-NIC temp sensor 25 1 3 Ambient temp sensor 24 1 4 NPU temp sensor 40 --------------------------------------------------------- Link-bundle monitoring Monitoring link aggregation group (LAG) bundles allows the traffic distribution amounts in a link to look for unfair distribution at any given time.
show alarms Displays all current active system alarms. Syntax show alarms Parameters None Default Not configured Command Mode EXEC Usage Information None Example OS10# show alarms Index ----0 1 Supported Releases Severity -------major major Name ------------------------EQM_MORE_PSU_FAULT EQM_FAN_AIRFLOW_MISMATCH Raise-time -------------Sep 7 18:36:11 Sep 7 18:36:11 Source -------------Node.1-Unit.1 Node.1-Unit.1 10.2.0E or later show alarms details Displays details about active alarms.
Clear-time: New: State: Supported Releases true raised 10.2.0E or later show alarms history Displays the history of cleared alarms. Syntax show alarms history [summary] Parameters summary — Enter to view a summary of the alarm history.
Source: Name: Description: Raise-time: Clear-time: New: State: Supported Releases Node.1-Unit.1 EQM_THERMAL_WARN_CROSSED Sep 20 0:16:52 true raised 10.2.0E or later show alarms severity Displays all active alarms using the severity level. Syntax show alarms severity severity Parameters severity — Set the alarm severity: • critical — Critical alarm severity. • major — Major alarm severity. • minor — Minor alarm severity. • warning — Warning alarm severity.
show alarms summary Displays the summary of alarm information. Syntax show alarms summary Parameters None Default Not configured Command Mode EXEC Usage Information None Example OS10# show alarms summary Active-alarm Summary ----------------------Total-count: 6 Critical-count: 0 Major-count: 2 Minor-count: 2 Warning-count: 2 ----------------------- Supported Releases 10.2.0E or later Logging commands clear logging Clears messages in the logging buffer.
To set the severity to the default level, use the no logging console severity command. The default severity level is log-notice. Parameters severity — Set the minimum logging severity level: • log-emerg — Set to unusable. • log-alert — Set to immediate action is needed. • log-crit — Set to critical conditions. • log-err — Set to error conditions. • log-warning — Set to warning conditions. • log-notice — Set to normal but significant conditions (default).
To reset the log-file severity to the default level, use the no logging log-file severity command. The default severity level is log-notice. Parameters severity — Set the minimum logging severity level: • log-emerg — Set the system as unusable. • log-alert — Set to immediate action is needed. • log-crit — Set to critical conditions. • log-err — Set to error conditions. • log-warning — Set to warning conditions. • log-notice — Set to normal but significant conditions (default).
Example OS10(config)# logging monitor severity log-info Supported Releases 10.2.0E or later logging server Configures the remote syslog server. Syntax Parameters logging server {hostname | ipv4–address | ipv6–address} [severity severitylevel] • hostname | ipv4–address | ipv6–address — (Optional) Enter either the hostname or IPv4/IPv6 address of the logging server. • vrf management — (Optional) Configure the logging server for the management VRF instance.
Example (Log-File) OS10# show logging log-file process-name dn_qos Example (ProcessNames) OS10# show logging process-names dn_pas_svc dn_system_mgmt_ dn_env_tmpctl dn_pm dn_eth_drv dn_etl dn_eqa dn_alm dn_eqm dn_issu dn_swupgrade dn_ifm dn_ppm dn_l2_services dn_dot1x dn_l3_core_serv dn_policy dn_qos dn_switch_res_m dn_ospfv3 dn_lacp dn_i3 dn_supportassis --More-- Supported Releases 10.2.0E or later show trace Displays trace messages.
May 23 17:10:04 OS10 base_nas: [NDI:NDI-SAI], conv erted to SAI types (func:2359312) May 23 17:10:04 OS10 base_nas: [NDI:NDI-SAI], (23 59344) May 23 17:10:04 OS10 base_nas: [NDI:NDI-SAI], (23 59345) May 23 17:10:04 OS10 base_nas: [NDI:NDI-SAI], (23 59346) May 23 17:10:04 OS10 base_nas: [NDI:NDI-SAI], (23 59319) May 23 17:10:08 OS10 base_nas: [NETLINK:NHEVENT]:ds_api_linux_neigh.
To log in to OS10 and access the command-line interface, enter su — admin at the Linux shell prompt, then admin as the password. linuxadmin@OS10:~$ su - admin Password: admin OS10# Frequently asked questions This section contains answers to frequently asked questions for ONIE-enabled devices. • • • • • • • • • Installation contains information about how to enter ONIE: Install mode after a reboot, find information about your specific switch, how to log into the OS10 shell, and so on.
Use the show processes node-id node-id-number [pid process-id] command to view the process CPU utilization information. Configuration How do I enter CONFIGURATION mode? Use the configure terminal command to change from EXEC mode to CONFIGURATION mode. I made changes to the running configuration file but the updates are not showing. How do I view my changes? Use the show running-configuration command to view changes that you have made to the running-configuration file.
How do I view configuration of OSPF neighbors connected to the local router? Use the show ip ospf neighbor command. System management How can I view the current interface configuration? Use the show running-configuration command to view all currently configured interfaces. How can I view a list of all system devices? Use the show inventory command to view a complete list. How can I view the software version? Use the show version command to view the currently running software version.
Use the show support-assist status command to view current configuration information. How can I view a list of alarms? Use the show alarms details to view a list of all system alarms. How do I enable or disable system logging? Use the logging enable command or the logging disable command. How do I view system logging messages? Use the show logging command to view messages by log-file or process name.
11 Support resources The Dell EMC Support site provides a range of documents and tools to assist you with effectively using Dell EMC devices. Through the support site you can obtain technical information regarding Dell EMC products, access software upgrades and patches, download available management software, and manage your open cases. The Dell EMC support site provides integrated, secure access to these services. To access the Dell EMC Support site, go to www.dell.com/support/.
