HP Unified Wired-WLAN Products Layer 3 Command Reference HP 830 Unified Wired-WLAN PoE+ Switch Series HP 850 Unified Wired-WLAN Appliance HP 870 Unified Wired-WLAN Appliance HP 11900/10500/7500 20G Unified Wired-WLAN Module Part number: 5998-4790 Software version: 3507P22 (HP 830 PoE+ Switch Series) 2607P22 (HP 850 Appliance) 2607P22 (HP 870 Appliance) 2507P22 (HP 11900/10500/7500 20G Module) Document version: 6W101-20140418
Legal and notice information © Copyright 2014 Hewlett-Packard Development Company, L.P. No part of this documentation may be reproduced or transmitted in any form or by any means without prior written consent of Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Contents ARP configuration commands ··································································································································· 10 arp check enable ··················································································································································· 10 arp max-learning-num ··········································································································································· 10 arp stati
display dhcp server statistics ································································································································ 43 display dhcp server tree ······································································································································· 45 dns-list ····································································································································································· 46 domain-
display dhcp client ················································································································································ 85 ip address dhcp-alloc ············································································································································ 87 DHCP snooping configuration commands ·················································································································· 88 dhcp-snooping ·········
option-group ························································································································································· 134 prefix-pool ···························································································································································· 134 reset ipv6 dhcp server conflict ··························································································································· 135 reset ip
ipv6 host ······························································································································································· 173 NAT configuration commands ······························································································································· 175 display nat address-group ·································································································································· 175 display nat all ·
ipv6 nd ra interval ··············································································································································· 227 ipv6 nd ra no-advlinkmtu ···································································································································· 228 ipv6 nd ra prefix ················································································································································· 228 ipv6 nd ra rou
Static routing configuration commands ················································································································· 278 delete static-routes all ·········································································································································· 278 ip route-static ························································································································································ 278 ip route-static
ARP configuration commands arp check enable Use arp check enable to enable dynamic ARP entry check. Use undo arp check enable to disable dynamic ARP entry check. Syntax arp check enable undo arp check enable Default Dynamic ARP entry check is enabled. Views System view Default command level 2: System level Examples # Enable dynamic ARP entry check.
Parameters number: Specifies the maximum number of dynamic ARP entries that an interface can learn. The value range varies by device model. For more information, see About the Command References for HP Unified Wired-WLAN Products. Usage guidelines When the number argument is set to 0, the interface is disabled from learning dynamic ARP entries. Examples # Specify VLAN-interface 40 to learn up to 500 dynamic ARP entries.
If both the vlan-id and ip-address arguments are specified, the IP address of the VLAN interface corresponding to the vlan-id argument must be in the same network segment as the IP address specified by the ip-address argument. Examples # Configure a static ARP entry, with IP address 202.38.10.2, MAC address 00e0-fc01-0000 and outbound interface Ten-GigabitEthernet 1/0/1 of VLAN 10. system-view [Sysname] arp static 202.38.10.
Views Any view Default command level 1: Monitor level Parameters all: Displays all ARP entries. dynamic: Displays dynamic ARP entries. static: Displays static ARP entries. vlan vlan-id: Displays the ARP entries of the specified VLAN. The value range is 1 to 4094. interface interface-type interface-number: Displays the ARP entries of the interface specified by the argument interface-type interface-number. count: Displays the number of ARP entries.
Field Description ARP entry type: • D—Dynamic. • S—Static. • A—Authorized. Type # Display the number of all ARP entries. display arp all count Total Entry(ies): 5 Related commands • arp static • reset arp display arp ip-address Use display arp ip-address to display the ARP entry for a specific IP address.
display arp timer aging Use display arp timer aging to display the aging timer for dynamic ARP entries. Syntax display arp timer aging [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 2: System level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow.
system-view [Sysname] naturemask-arp enable reset arp Use reset arp to clear ARP entries except authorized ARP entries from the ARP table. Syntax reset arp { all | dynamic | static | interface interface-type interface-number } Views User view Default command level 2: System level Parameters all: Clears all ARP entries except authorized ARP entries. dynamic: Clears all dynamic ARP entries. static: Clears all static ARP entries.
Gratuitous ARP configuration commands arp send-gratuitous-arp Use arp send-gratuitous-arp to enable periodic sending of gratuitous ARP packets and set the sending interval on an interface. Use undo arp send-gratuitous-arp to disable the interface from periodically sending gratuitous ARP packets. Syntax arp send-gratuitous-arp [ interval milliseconds ] undo arp send-gratuitous-arp Default An interface is disabled from sending gratuitous ARP packets periodically.
gratuitous-arp-learning enable Use gratuitous-arp-learning enable to enable the gratuitous ARP packet learning function. Use undo gratuitous-arp-learning enable to disable the function. Syntax gratuitous-arp-learning enable undo gratuitous-arp-learning enable Default The function is enabled.
Examples # Disable a device from sending gratuitous ARP packets upon receiving ARP requests whose sender IP address is on a different subnet.
ARP snooping configuration commands arp-snooping enable Use arp-snooping enable to enable ARP snooping. Use undo arp-snooping enable to disable ARP snooping. Syntax arp-snooping enable undo arp-snooping enable Default ARP snooping is disabled. Views System view Default command level 2: System level Examples # Enable ARP snooping. system-view [Sysname] arp-snooping enable display arp-snooping Use display arp-snooping to display ARP snooping entries.
exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Examples # Display ARP snooping entries for VLAN 1. display arp-snooping vlan 1 IP Address MAC Address Aging Status 3.3.3.3 0003-0003-0003 1 VLAN ID Interface XGE1/0/1 20 Valid 3.3.3.
ARP fast-reply mechanism configuration commands arp fast-reply enable Use arp fast-reply enable to enable the ARP fast-reply for a VLAN. Use undo arp fast-reply enable to restore the default. Syntax arp fast-reply enable undo arp fast-reply enable Default The ARP fast-reply is disabled on a VLAN. Views VLAN view Default command level 2: System level Examples # Enable ARP fast-reply for VLAN 1.
IP addressing configuration commands display ip interface Use display ip interface to display IP configuration information about a Layer 3 interface or all Layer 3 interfaces. Syntax display ip interface [ interface-type interface-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters interface-type interface-number: Specifies an interface by its type and number. |: Filters command output by specifying a regular expression.
Routing redirect: 0 Echo request: 0 Router advert: 0 Router solicit: 0 Time exceed: 0 IP header bad: 0 Timestamp request: 0 Timestamp reply: 0 Information request: 0 Information reply: 0 Netmask request: 0 Netmask reply: 0 Unknown type: 0 Table 2 Command output Field Description Current physical state of the interface: • Administrative DOWN—The interface is shut down with the shutdown current state command.
Field Description TTL invalid packet number Number of TTL-invalid packets received on the interface (statistics start at device startup).
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Usage guidelines If you do not specify the interface type or interface number, this command displays brief IP configuration information about all Layer 3 interfaces. If you specify only the interface type, this command displays brief IP configuration information about all Layer 3 interfaces of the specified type.
Related commands display ip interface ip address Use ip address to assign an IP address and mask to the interface. Use undo ip address to remove all IP addresses from the interface. Use undo ip address ip-address { mask | mask-length } to remove the primary IP address. Use undo ip address ip-address { mask | mask-length } sub to remove a secondary IP address.
DHCP configuration commands DHCP server configuration commands DHCP snooping cannot be configured on DHCP servers. bims-server Use bims-server to specify the IP address, port number, and shared key of the BIMS server in a DHCP address pool. Use undo bims-server to remove the specified BIMS server information. Syntax bims-server ip ip-address [ port port-number ] sharekey [ cipher | simple ] key undo bims-server Default No BIMS server information is specified.
Related commands • dhcp server ip-pool • display dhcp server tree bootfile-name Use bootfile-name to specify a bootfile name in a DHCP address pool. Use undo bootfile-name to remove the specified bootfile name. Syntax bootfile-name bootfile-name undo bootfile-name Default No bootfile name is specified. Views DHCP address pool view Default command level 2: System level Parameters bootfile-name: Specifies the boot file name, a string of 1 to 63 characters.
Views System view Default command level 2: System level Usage guidelines Enable DHCP before performing DHCP server or relay agent configurations. Examples # Enable DHCP. system-view [Sysname] dhcp enable dhcp server apply ip-pool Use dhcp server apply ip-pool to apply an address pool on an interface. Use undo dhcp server apply ip-pool to remove the configuration.
dhcp select server global-pool Use dhcp select server global-pool to enable the DHCP server on an interface. After the interface receives a DHCP request from a client, the DHCP server allocates an IP address from the address pool. Use undo dhcp select server global-pool to remove the configuration. Upon receiving a DHCP request from a client, the interface neither assigns an IP address to the client, nor serves as a DHCP relay agent to forward the request.
Syntax dhcp server client-detect enable undo dhcp server client-detect enable Default The function is disabled. Views Interface view Default command level 2: System level Usage guidelines With this feature enabled, the DHCP server considers that a DHCP client goes offline when the ARP entry for the client ages out. In addition, it removes the client entry and releases the IP address of the client. Examples # Enable client offline detection on the DHCP server.
dhcp server forbidden-ip Use dhcp server forbidden-ip to exclude specific IP addresses from dynamic allocation. Use undo dhcp server forbidden-ip to remove the configuration. Syntax dhcp server forbidden-ip low-ip-address [ high-ip-address ] undo dhcp server forbidden-ip low-ip-address [ high-ip-address ] Default All IP addresses in a DHCP address pool are assignable except IP addresses of the DHCP server interfaces.
dhcp server ip-pool Use dhcp server ip-pool to create a DHCP address pool and enter its view. If the pool has been created, you directly enter its view. Use undo dhcp server ip-pool to remove the specified DHCP address pool. Syntax dhcp server ip-pool pool-name [ extended ] undo dhcp server ip-pool pool-name Default No DHCP address pool is created.
Default command level 2: System level Examples # Disable the DHCP server from outputting logs. system-view [Sysname] undo dhcp server log enable dhcp server ping packets Use dhcp server ping packets to specify the maximum number of ping packets. Use undo dhcp server ping packets to restore the default. Syntax dhcp server ping packets number undo dhcp server ping packets Default The maximum number of ping packets is 1.
Default The ping response timeout time is 500 ms. Views System view Default command level 2: System level Parameters milliseconds: Specifies the timeout time in the range of 0 to 10000 milliseconds. The value of 0 means that no ping operation is performed for address conflict detection. Usage guidelines To avoid IP address conflicts, the DHCP server checks whether an IP address is in use before assigning it to a DHCP client. The DHCP server pings the IP address.
dhcp server threshold Use dhcp server threshold to enable the DHCP server to send trap messages to the network management server when the specified threshold is reached. Use undo dhcp server threshold to restore the default. Syntax dhcp server threshold { allocated-ip threshold-value | average-ip-use threshold-value | max-ip-use threshold-value } undo dhcp server threshold { allocated-ip | average-ip-use | max-ip-use } Default The DHCP server does not send trap messages to the network management server.
dhcp update arp (for DHCP server) Use dhcp update arp to configure the DHCP server to support authorized ARP. Use undo dhcp update arp to restore the default. Syntax dhcp update arp undo dhcp update arp Default The DHCP server does not support authorized ARP. Views Interface view Default command level 2: System level Examples # Configure VLAN-interface 1 of the current DHCP server to support authorized ARP.
Examples # Display information about all IP address conflicts. display dhcp server conflict all Address Discover time 4.4.4.1 Apr 25 2013 16:57:20 4.4.4.2 Apr 25 2013 17:00:10 --- total 2 entry --- Table 4 Command output Field Description Address Conflicted IP address. Discover Time Time when the conflict was discovered. Related commands reset dhcp server conflict display dhcp server expired Use display dhcp server expired to display lease expiration information.
Examples # Display all lease expiration information. display dhcp server expired all IP address Client-identifier/ Lease expiration 4.4.4.6 3030-3066-2e65-3230- Type Hardware address Apr 25 2013 17:10:47 Release 302e-3130-3234-2d457468-6572-6e65-74302f31 --- total 1 entry --- Table 5 Command output Field Description IP address Expired IP address. Client-identifier/Hardware address Client ID or MAC address. Lease expiration Time when the lease expired.
display dhcp server forbidden-ip Use display dhcp server forbidden-ip to display IP addresses excluded from dynamic allocation in DHCP address pool. Syntax display dhcp server forbidden-ip [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Views Any view Default command level 1: Monitor level Parameters all: Displays binding information about all DHCP address pools. ip ip-address: Displays binding information about the specified IP address. pool [ pool-name ]: Displays binding information about the specified IP address pool. The pool name is a string of 1 to 35 characters. If you do not specify any pool name, this command displays binding information about all address pools. |: Filters command output by specifying a regular expression.
Table 7 Command output Field Description Utilization rate of IP addresses in a DHCP address pool, which is the ratio of assigned IP addresses to assignable IP addresses in the DHCP address pool. • When binding information about all DHCP address pools is displayed, this field displays the total utilization rate of IP addresses in all DHCP address pools.
exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Examples # Display the statistics on the DHCP server.
Field Description DHCP packets sent to clients: • • • • BOOTP Reply Bad Messages DHCPOFFER. DHCPACK. DHCPNAK. BOOTPREPLY. Number of bad messages. Related commands reset dhcp server statistics display dhcp server tree Use display dhcp server tree to display information about DHCP address pools.
expired 1 0 0 0 Pool name: 1 static-bind ip-address 10.10.1.2 mask 255.0.0.0 static-bind mac-address 00e0-00fc-0001 PrevSibling node:0 expired unlimited Extended pool: Pool name: 2 network ip range 1.1.1.0 1.1.1.255 network mask 255.255.255.0 expired 0 0 2 0 Table 9 Command output Field Description Global pool Information about a common address pool. Pool name Address pool name. network Subnet for address allocation. static-bind ip-address 10.10.1.2 mask 255.0.0.
Syntax dns-list ip-address&<1-8> undo dns-list { ip-address | all } Default No DNS server address is specified. Views DHCP address pool view Default command level 2: System level Parameters ip-address&<1-8>: Specifies DNS servers. &<1-8> means you can specify up to eight DNS server addresses separated by spaces. all: Specifies all DNS server addresses to be removed. Usage guidelines If you execute the dns-list command multiple times, the most recent configuration takes effect.
Parameters domain-name: Specifies the domain name, a string of 1 to 50 characters. Examples # Specify the domain name mydomain.com in address pool 0. system-view [Sysname] dhcp server ip-pool 0 [Sysname-dhcp-pool-0] domain-name mydomain.com Related commands • dhcp server ip-pool • display dhcp server tree expired Use expired to specify the lease duration in a DHCP address pool. Use undo expired to restore the default lease duration for a DHCP address pool.
[Sysname-dhcp-pool-0] expired day 1 hour 2 minute 3 second 4 Related commands • dhcp server ip-pool • display dhcp server tree forbidden-ip Use forbidden-ip to exclude IP addresses from dynamic allocation in an extended address pool. Use undo forbidden-ip to cancel specified or all excluded IP addresses.
gateway-list Use gateway-list to specify gateway addresses in a DHCP address pool. Use undo gateway-list to remove specified gateway addresses specified for the DHCP client from a DHCP address pool. Syntax gateway-list ip-address&<1-8> undo gateway-list { ip-address | all } Default No gateway address is specified. Views DHCP address pool view Default command level 2: System level Parameters ip-address&<1-8>: Specifies the gateway IP address.
Views DHCP address pool view Default command level 2: System level Parameters ip-address&<1-8>: Specifies WINS server IP addresses. &<1-8> means you can specify up to eight WINS server addresses separated by spaces. all: Specifies all WINS server addresses to be removed. Usage guidelines If you use the nbns-list command multiple times, the most recent configuration takes effect. Examples # Specify WINS server address 10.12.1.99 in DHCP address pool 0.
m-node: Specifies the mixed node. An m-node client broadcasts the destination name, and if receiving no response, then unicasts the destination name to the WINS server to get the mapping. p-node: Specifies the peer-to-peer node. A p-node client sends the destination name in a unicast message to get the mapping from the WINS server. Examples # Specify the NetBIOS node type as b-node in DHCP address pool 0.
Related commands • dhcp server ip-pool • display dhcp server tree network ip range Use network ip range to specify the IP address range for dynamic allocation in an address pool. Use undo network ip range to remove the specified address range. Syntax network ip range min-address max-address undo network ip range Default No IP address range is specified. Views DHCP address pool view Default command level 2: System level Parameters min-address: Specifies the lowest IP address for dynamic allocation.
• display dhcp server tree network mask Use network mask to specify the IP address mask for dynamic allocation in an extended address pool. Use undo network mask to remove the specified IP address mask. Syntax network mask mask undo network mask Default No IP address mask is specified. Views DHCP extended address pool view Default command level 2: System level Parameters mask: Specifies the network mask in dotted decimal notation.
Default No server's IP address is specified in an address pool. Views DHCP address pool view Default command level 2: System level Parameters ip-address: Specifies the IP address of a server. Usage guidelines If you execute this command multiple times, the most recent configuration takes effect. Examples # Specify a server's IP address 1.1.1.1 in DHCP address pool 0. system-view [Sysname] dhcp server ip-pool 0 [Sysname-dhcp-pool-0] next-server 1.1.1.
ip-address ip-address&<1-8>: Specifies the IP addresses as the option content. &<1-8> indicates that you can specify up to eight IP addresses separated by spaces. Usage guidelines If you use the option command multiple times, the most recent configuration takes effect. Examples # Configure the hex digits 0x11 and 0x22 for the self-defined DHCP Option 100 in DHCP address pool 0.
Default command level 2: System level Parameters all: Clears the IP address dynamic binding information about all DHCP address pools. ip ip-address: Clears dynamic binding information about a specific IP address. pool [ pool-name ]: Clears dynamic binding information about a specific address pool. The pool name is a string of 1 to 35 characters. If you do not specify any pool name, this command clears dynamic binding information about all address pools.
Views DHCP address pool view Default command level 2: System level Parameters client-identifier: Specifies the client ID of a static binding, a string with 4 to 160 characters in the format of H-H-H…, each H indicates 4 hex digits except the last H indicates 2 or 4 hex digits. For example, aabb-cccc-dd is a valid ID, but aabb-c-dddd and aabb-cc-dddd are both invalid.
Default command level 2: System level Parameters ip-address: Specifies the IP address of a static binding. If you do not specify any mask or mask length, the natural mask is used. mask-length: Specifies the mask length of the IP address, in the range of 1 to 30. mask mask: Specifies the IP address mask, in dotted decimal format.
Parameters mac-address: Specifies the MAC address of a static binding, in the format of H-H-H. Usage guidelines Use the static-bind mac-address command together with the static-bind ip-address command to complete a static binding configuration. If you use the static-bind mac-address or static-bind client-identifier command multiple times, the most recent configuration takes effect. Examples # Bind the client MAC address 0000-e03f-0305 to the IP address 10.1.1.1 with the mask 255.255.255.
system-view [Sysname] dhcp server ip-pool 0 [Sysname-dhcp-pool-0] tftp-server domain-name aaa Related commands • dhcp server ip-pool • display dhcp server tree tftp-server ip-address Use tftp-server ip-address to specify the TFTP server IP address in a DHCP address pool. Use undo tftp-server ip-address to remove the TFTP server IP address from a DHCP address pool. Syntax tftp-server ip-address ip-address undo tftp-server ip-address Default No TFTP server address is specified.
undo vendor-class-identifier hex-string&<1-255> Default No IP address range is specified for the DHCP clients of any vendor. Views DHCP extended address pool view Default command level 2: System level Parameters hex-string&<1-255>: Specifies a character string, used to match against Option 60 (vendor class identifier option). The hex-string argument is a hexadecimal number ranging from 0 to FF. &<1-255> indicates that you can type up to 255 hexadecimal numbers, which are separated by spaces.
Default No Option 184 content is configured. Views DHCP address pool view Default command level 2: System level Parameters as-ip ip-address: Specifies the IP address for the backup network calling processor. When the primary network calling processor is unavailable, the DHCP client uses the backup network calling processor. fail-over ip-address dialer-string: Specifies the failover IP address and dialer string. The dialer-string is a string of 1 to 39 characters, which can be 0 to 9, and asterisk (*).
Use undo dhcp enable to disable DHCP. Syntax dhcp enable undo dhcp enable Default DHCP is disabled. Views System view Default command level 2: System level Usage guidelines Enable DHCP before performing DHCP server and relay agent configurations. Examples # Enable DHCP. system-view [Sysname] dhcp enable dhcp relay address-check enable Use dhcp relay address-check enable to enable address check on the relay agent.
Examples # Enable address check on the DHCP relay agent. system-view [Sysname] interface vlan-interface 1 [Sysname-Vlan-interface1] dhcp relay address-check enable dhcp relay check mac-address Use dhcp relay check mac-address to enable MAC address check on the DHCP relay agent. Use undo dhcp relay check mac-address to disable MAC address check on the DHCP relay agent. Syntax dhcp relay check mac-address undo dhcp relay check mac-address Default This function is disabled.
Views Interface view Default command level 2: System level Usage guidelines With this feature enabled, the DHCP relay agent considers that a DHCP client goes offline when the ARP entry for the client ages out. In addition, it removes the client entry and sends a DHCP-RELEASE message to the DHCP server to release the IP address of the client. Examples # Enable offline detection on the DHCP relay agent.
[Sysname-Vlan-interface1] dhcp relay information circuit-id format-type ascii Related commands display dhcp relay information dhcp relay information circuit-id string Use dhcp relay information circuit-id string to configure the padding content for the user-defined circuit ID sub-option. Use undo dhcp relay information circuit-id string to restore the default.
Default Option 82 support is disabled on DHCP relay agent. Views Interface view Default command level 2: System level Examples # Enable Option 82 support on the relay agent. system-view [Sysname] interface vlan-interface 1 [Sysname-Vlan-interface1] dhcp relay information enable Related commands display dhcp relay information dhcp relay information format Use dhcp relay information format to specify a padding format for Option 82.
Usage guidelines If configuring the handling strategy of the DHCP relay agent as replace, you need to configure a padding format of Option 82. If the handling strategy is keep or drop, you need not configure any padding format. If sub-option 1 (node identifier) of Option 82 is padded with the device name (sysname) of a node, the device name must contain no spaces. Otherwise, the DHCP relay agent drops the message. Examples # Specify the verbose padding format for Option 82.
[Sysname-Vlan-interface1] dhcp relay information remote-id format-type ascii Related commands display dhcp relay information dhcp relay information remote-id string Use dhcp relay information remote-id string to configure the padding content for the user-defined remote ID sub-option. Use undo dhcp relay information remote-id string to restore the default.
dhcp relay information strategy Use dhcp relay information strategy to configure DHCP relay agent handling strategy for messages containing Option 82. Use undo dhcp relay information strategy to restore the default handling strategy. Syntax dhcp relay information strategy { drop | keep | replace } undo dhcp relay information strategy Default The handling strategy for messages containing Option 82 is replace.
Examples # Request the DHCP server to release the IP address 1.1.1.1. system-view [Sysname] dhcp relay release ip 1.1.1.1 dhcp relay security static Use dhcp relay security static to configure a static client entry, which is the binding between IP address, MAC address, and Layer 3 interface on the relay agent.
Related commands display dhcp relay security dhcp relay security refresh enable Use dhcp relay security refresh enable to enable the DHCP relay agent to periodically refresh dynamic client entries. Use undo dhcp relay security refresh enable to disable periodic refresh of dynamic client entries. Syntax dhcp relay security refresh enable undo dhcp relay security refresh enable Default The DHCP relay agent is enabled to periodically refresh dynamic client entries.
Views System view Default command level 2: System level Parameters interval: Specifies the refreshing interval in seconds in the range of 1 to 120. auto: Specifies the auto refreshing interval, which is the value of 60 seconds divided by the number of binding entries. The more entries there are, the shorter the interval. The shortest interval is no less than 500 ms. Examples # Set the refreshing interval as 100 seconds.
dhcp relay server-group Use dhcp relay server-group to specify a DHCP server for a DHCP server group. Use undo dhcp relay server-group to remove a DHCP server from a DHCP server group. If you do not specify ip ip-address, this command removes all servers in the DHCP server group and the server group itself. Syntax dhcp relay server-group group-id ip ip-address undo dhcp relay server-group group-id [ ip ip-address ] Default No DHCP server is specified for a DHCP server group.
Default No DHCP server group is correlated with an interface on the relay agent. Views Interface view Default command level 2: System level Parameters group-id: Specifies the DHCP server group number to be correlated, in the range of 0 to 19. Usage guidelines A DHCP server group can correlate with one or multiple DHCP relay agent interfaces. A relay agent interface can only correlate with one DHCP server group, and a newly configured correlation overwrites the previous one.
Usage guidelines After DHCP is enabled, the DHCP server is enabled on an interface by default. Upon receiving a client's request from the interface, the DHCP server allocates an IP address from the DHCP address pool to the client. When the working mode of the interface is changed from DHCP server to DHCP relay agent, neither the IP address leases nor the authorized ARP entries are deleted. However, these ARP entries may conflict with new ARP entries generated on the DHCP relay agent.
Views Any view Default command level 1: Monitor level Parameters all: Displays information about DHCP server groups to which all interfaces correspond. interface interface-type interface-number: Displays information about the DHCP server group to which a specific interface corresponds. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
display dhcp relay security Use display dhcp relay security to display information about bindings of DHCP relay agents. If you do not specify any parameter, this command displays information about all bindings. Syntax display dhcp relay security [ ip-address | dynamic | static ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters ip-address: Displays binding information about an IP address.
display dhcp relay security statistics Use display dhcp relay security statistics to display statistics information about bindings of DHCP relay agents. Syntax display dhcp relay security statistics [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Syntax display dhcp relay security tracker [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression.
Examples # Display IP addresses of DHCP servers in DHCP server group 1. display dhcp relay server-group 1 No. Group IP 1 1.1.1.1 2 1.1.1.2 Table 14 Command output Field Description No. Sequence number. Group IP IP address in the server group. display dhcp relay statistics Use display dhcp relay statistics to display DHCP packet statistics related to a specific or all DHCP server groups.
DHCP packets received from clients: 0 DHCPDISCOVER packets received: 0 DHCPREQUEST packets received: 0 DHCPINFORM packets received: 0 DHCPRELEASE packets received: 0 DHCPDECLINE packets received: 0 BOOTPREQUEST packets received: 0 DHCP packets received from servers: 0 DHCPOFFER packets received: 0 DHCPACK packets received: 0 DHCPNAK packets received: 0 BOOTPREPLY packets received: 0 DHCP packets relayed to servers: 0 DHCPDISCOVER packets relayed: 0 DHCPREQUEST packets relayed: 0
DHCPOFFER 0 DHCPACK 0 DHCPNAK 0 BOOTPREPLY 0 Related commands reset dhcp relay statistics reset dhcp relay statistics Use reset dhcp relay statistics to remove statistics from the relay agent. Syntax reset dhcp relay statistics [ server-group group-id ] Views User view Default command level 1: Monitor level Parameters server-group group-id: Specifies a server group number (in the range of 0 to 19) about which to remove statistics from the relay agent.
Views Any view Default command level 1: Monitor level Parameters verbose: Displays verbose DHCP client information. interface interface-type interface-number: Specifies an interface by its type and number. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow.
Table 15 Command output Field Description Vlan-interface1 DHCP client information Information about the interface acting as the DHCP client. Current state of the DHCP client: • HALT—The client stops applying for an IP address. • INIT—The initialization state. • SELECTING—The client has sent out a DHCP-DISCOVER message in search for a DHCP server and is waiting for the response from DHCP servers.
undo ip address dhcp-alloc Default An interface does not use DHCP for IP address acquisition. Views Interface view Default command level 2: System level Parameters client-identifier mac interface-type interface-number: Enables an interface to use its MAC address as the client ID to obtain an IP address. Usage guidelines If no parameter is specified, the client uses a character string comprised of the current interface name and MAC address as its ID for address acquisition.
Default command level 2: System level Usage guidelines When DHCP snooping is disabled, the device forwards all responses received from DHCP servers and does not record MAC-IP binding information about DHCP clients. Examples # Enable DHCP snooping. system-view [Sysname] dhcp-snooping Related commands display dhcp-snooping dhcp-snooping binding database filename Use dhcp-snooping binding database filename to specify a file to store DHCP snooping entries.
dhcp-snooping binding database update interval Use dhcp-snooping binding database update interval to set the interval at which the device updates DHCP snooping entries. Use undo dhcp-snooping binding database update interval to restore the default. Syntax dhcp-snooping binding database update interval minutes undo dhcp-snooping binding database update interval Default The device does not update DHCP snooping entries periodically.
Usage guidelines DHCP snooping entries are stored to the file each time this command is used. This command takes effect only when the DHCP snooping entry file is specified. Examples # Store DHCP snooping entries to the file. system-view [Sysname] dhcp-snooping binding database update now Related commands dhcp-snooping binding database filename dhcp-snooping binding record user-identity Use dhcp-snooping binding record user-identity to enable recording of Option 55 and Option 60 for the user.
Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view Default command level 2: System level Usage guidelines With this function enabled, DHCP snooping compares the chaddr field of a received DHCP request with the source MAC address field in the frame header. If they are the same, DHCP snooping considers this request valid and forwards it to the DHCP server. If not, DHCP snooping discards the DHCP request. Examples # Enable MAC address check for DHCP snooping.
[Sysname-Ten-GigabitEthernet1/0/1] dhcp-snooping check request-message dhcp-snooping information circuit-id format-type Use dhcp-snooping information circuit-id format-type to configure the code type for the non-user-defined circuit ID sub-option. Use undo dhcp-snooping information circuit-id format-type to restore the default.
Syntax dhcp-snooping information [ vlan vlan-id ] circuit-id string circuit-id undo dhcp-snooping information [ vlan vlan-id ] circuit-id string Default The padding content for the circuit ID sub-option depends on the padding format of Option 82. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view Default command level 2: System level Parameters vlan vlan-id: Specifies a VLAN ID in the range of 1 to 4094.
Default command level 2: System level Examples # Configure DHCP snooping to support Option 82. system-view [Sysname] interface ten-gigabitethernet1/0/1 [Sysname-Ten-GigabitEthernet1/0/1] dhcp-snooping information enable Related commands display dhcp-snooping information dhcp-snooping information format Use dhcp-snooping information format to specify the padding format for Option 82. Use undo dhcp-snooping information format to restore the default.
Usage guidelines When you use the undo dhcp-snooping information format command: • If the verbose node-identifier option is not included, the padding format is restored to normal. • If the verbose node-identifier option is included, the padding format is restored to verbose with MAC address as the node identifier. Examples # Specify the padding format as verbose for Option 82.
[Sysname-Ten-GigabitEthernet1/0/1] dhcp-snooping information remote-id format-type ascii Related commands • display dhcp-snooping information • dhcp-snooping information format dhcp-snooping information remote-id string Use dhcp-snooping information remote-id string to configure the padding content for the user-defined remote ID sub-option. Use undo dhcp-snooping information remote-id string to restore the default.
Related commands • dhcp-snooping information format • display dhcp-snooping information dhcp-snooping information strategy Use dhcp-snooping information strategy to configure the handling strategy for Option 82 in requesting messages. Use undo dhcp-snooping information strategy to restore the default. Syntax dhcp-snooping information strategy { append | drop | keep | replace } undo dhcp-snooping information strategy Default The handling strategy for Option 82 in requesting messages is replace.
Syntax dhcp-snooping information [ vlan vlan-id ] sub-option sub-option-code [ string user-string&<1-8> ] undo dhcp-snooping information [ vlan vlan-id ] sub-option sub-option-code Default No sub-option is configured. Views Layer 2 Ethernet port view, Layer 2 aggregate interface view, WLAN-ESS interface view Default command level 2: System level Parameters vlan vlan-id: Specifies a VLAN ID in the range of 1 to 4094. sub-option sub-option-code: Specifies the number of the sub-option.
dhcp-snooping trust Use dhcp-snooping trust to configure a port as a trusted port. Use undo dhcp-snooping trust to restore the default state of a port. Syntax dhcp-snooping trust [ no-user-binding ] undo dhcp-snooping trust Default All ports are untrusted.
Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view, WLAN-ESS interface view Default command level 2: System level Usage guidelines This command enables the DHCP snooping device to drop DHCP-OFFER and DHCP-ACK broadcast messages that do not match any DHCP snooping entries. Examples # Enable the DHCP snooping device to verify DHCP broadcast replies on GigabitEthernet 1/0/1.
Type IP Address MAC Address Lease VLAN SVLAN Interface ==== =============== ============== ============ ==== ===== ================= D --- 10.1.1.1 00e0-fc00-0006 286 1 dhcp-snooping item(s) found 1 2 Ten-GigabitEthernet1/0/1 --- Table 16 Command output Field Description Entry type: Type • D—Dynamic. • S—Static. Static DHCP snooping entries are not supported.
--- 2 dhcp-snooping item(s) found --- Table 17 Command output Field Description Entry type: • Dynamic—Specifies that the DHCP snooping entry is dynamically generated. Type • Static—Specifies that the DHCP snooping entry is statically configured. Static DHCP snooping entries are not supported. • Recovering—Specifies that the DHCP snooping entry is being restored through the DHCP snooping entry file, and the interface in the entry is invalid. IP Address IP address assigned to the DHCP client.
Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression.
Interface Trusted ========================= ============ Ten-GigabitEthernet1/0/1 Trusted The above output shows that DHCP snooping is enabled, DHCP snooping trust is active, and port Ten-GigabitEthernet 1/0/1 is trusted. Related commands dhcp-snooping trust reset dhcp-snooping Use reset dhcp-snooping to clear DHCP snooping entries. Syntax reset dhcp-snooping { all | ip ip-address } Views User view Default command level 2: System level Parameters all: Clears all DHCP snooping entries.
Related commands display dhcp-snooping packet statistics BOOTP client configuration commands BOOTP client configuration can only be used on VLAN interfaces. If several VLAN interfaces sharing the same MAC address obtain IP addresses through a BOOTP relay agent, the BOOTP server cannot be a Windows 2000 Server or Windows 2003 Server. You cannot configure an interface of an aggregation group as a BOOTP client. display bootp client Use display bootp client to display related information about a BOOTP client.
Table 19 Command output Field Description Vlan-interface1 BOOTP client information Information about the interface that serves as a BOOTP client. Allocated IP BOOTP client's IP address allocated by the BOOTP server. Transaction ID Value of the XID field in a BOOTP message, a random number chosen when the BOOTP client sends a BOOTP request to the BOOTP server. It is used to match a response message from the BOOTP server.
DHCPv6 configuration commands DHCPv6 common configuration commands display ipv6 dhcp duid Use display ipv6 dhcp duid to display the DHCP unique identifier (DUID) of the local device. Syntax display ipv6 dhcp duid [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Parameters option-group-number: Specifies a DHCPv6 option group by its ID in the range of 1 to 100. If you do not specify any option group, the command displays information about all DHCPv6 option groups. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow.
Field Description Domain names Domain name suffix. SIP server addresses IP address of the SIP server. SIP server domain names Domain name of the SIP server. DS-Lite addresses IP address of the Address Family Transition Router (AFTR). Options User-defined options. Code Code of the self-defined option. Length Self-defined option string length in bytes. Hex Self-defined option content represented by a hexadecimal string.
Usage guidelines When no non-temporary IPv6 address range is specified, all unicast addresses on the subnet specified by the network command in address pool view are assignable. If a non-temporary IPv6 address range is specified, only the IPv6 addresses in the IPv6 address range are assignable. You can specify only one non-temporary IPv6 address range in an address pool. If you execute the address range command multiple times, the most recent configuration takes effect.
Examples # Display all DHCPv6 address pool information.
Table 21 Command output Field Description Pool DHCPv6 address pool number. Network IPv6 subnet for dynamic IPv6 address assignment. If the subnet is not valid, Not-available is displayed. Preferred lifetime Preferred lifetime in seconds. valid lifetime Valid lifetime in seconds. Static bindings Static IPv6 address or prefix information configured in the address pool. If no static prefix is configured, this field is not displayed. Prefix IPv6 address prefix in the binding.
display ipv6 dhcp prefix-pool Use display ipv6 dhcp prefix-pool to display prefix pool information. Syntax display ipv6 dhcp prefix-pool [ prefix-pool-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters prefix-pool-number: Displays details about the prefix pool specified by the prefix pool number. The value range for the prefix-pool-number argument is 1 to 128.
Field Description Available Number of idle prefixes. In-use Number of assigned prefixes. Static Number of static prefixes. Assigned length Length of prefixes to be assigned. Total prefix number Total number of prefixes. display ipv6 dhcp server Use display ipv6 dhcp server to display DHCPv6 server information.
Table 23 Command output Field Description DHCPv6 server status DHCPv6 server status, Enabled or Disabled. Interface Interface on which the DHCPv6 server is enabled. Address pool applied to the interface. Pool Global indicates that no address pool is applied to the interface. The DHCPv6 server searches all address pools and selects one address pool to assign a prefix or an address to the client. Using pool Address pool applied to the interface. If no address pool is applied, Global is displayed.
1:2::1 Jul 23 2013 16:37:08 1:2::2 Jul 23 2013 16:37:08 1:2::3 Jul 23 2013 16:37:08 1:2::4 Jul 23 2013 16:37:08 --- total 4 entries --- Table 24 Command output Field Description Total number Total number of conflicted addresses. Address IPv6 address that conflicted with another IPv6 address. Detect time Time when the conflict was detected.
2000102030405 1:2::3 00010006498D332 Nov 23 2013 16:12:43 2000102030405 1:2::2 00010006498D332 Nov 23 2013 16:12:43 2000102030405 1:2::1 00010006498D332 Nov 23 2013 16:12:43 2000102030405 --- total 4 entries --- Table 25 Command output Field Description Total number Total number of expired addresses. Address Expired IPv6 address. DUID Client DUID bound to the expired IPv6 address. Expiration time Time when the lease expired.
display ipv6 dhcp server ip-in-use Total number: 4 Address Type Pool Expiration time 2:1::1 Auto(O) 1 3:1::2 Static(C) 1 Jan 1:1::2 Static(F) 2 Not-available 1:2::1f1 Static(O) 3 Oct Jul 10 2013 19:45:01 1 2013 11:11:11 9 2013 09:23:31 # Display IPv6 address binding information about address pool 1.
Field Description Client Link-local address of a DHCPv6 client. For a free static binding, this field is blank. DUID Client DUID. IAID Client IAID. For a free static binding without IAID specified, this field is blank. Will expire at Time when the lease of an IPv6 address will expire. If the lease expires after the year 2100, this field displays Will expire after 2100.
display ipv6 dhcp server pd-in-use Total number: 3 Prefix Type Pool Expiration time 2:1::/24 Auto(O) 1 1:1::/64 Static(F) 2 Not-available 1:2::/64 Static(O) 3 Oct Jul 10 2013 19:45:01 9 2013 09:23:31 # Display prefix binding information about the specified DHCPv6 address pool.
Field Description Pool Address pool to which the prefix binding belongs. Expiration time Time when the prefix lease expires. If the lease expires after the year 2100, this field displays after 2100. For a free static binding, this field displays Not-available. Prefix Pool Prefix pool to which the prefix binding belongs. For a free static binding, this field is blank. Client IPv6 address of the DHCPv6 client. For a free static binding, this field is blank. DUID Client DUID. IAID Client IAID.
RELEASE : 0 DECLINE : 0 INFORMATION-REQUEST: 0 RELAY-FORWARD : 0 Packets dropped : 0 Packets sent : 0 ADVERTISE : 0 RECONFIGURE : 0 REPLY : 0 RELAY-REPLY : 0 Table 28 Command output Field Description Number of messages received by the DHCPv6 server. The message types include: Packets received Packets dropped • • • • • • • • • SOLICIT. REQUEST. CONFIRM. RENEW. REBIND. RELEASE. DECLINE. INFORMATION-REQUEST. RELAY-FORWARD. Number of packets discarded.
Default command level 2: System level Parameters ipv6-address: IPv6 address of a DNS server. Usage guidelines You can configure multiple DNS server addresses. You can configure up to eight DNS servers in an address pool. The precedence of the specified DNS servers depends on the configuration sequence. The formerly specified DNS server takes precedence over the latter one. Examples # Specify the DNS server address to be assigned to the client as 2:2::3.
ds-lite address Use ds-lite address to specify the address of the AFTR. Use undo ds-lite address to delete the address of the AFTR. Syntax ds-lite address ipv6-address undo ds-lite address Default The address of the AFTR is not specified. Views DHCPv6 address pool view, DHCPv6 option group view Default command level 2: System level Parameters ipv6-address: IPv6 address of the AFTR.
Default command level 2: System level Parameters network-address/prefix-length: IPv6 subnet for dynamic assignment. The network-address argument is the IPv6 address and the prefix-length argument is the prefix length. The prefix length ranges from 1 to 128. prefix: Specifies a prefix for dynamic prefix assignment. prefix-number: Specifies the ID of an IPv6 prefix, in the range of 1 to 1024. sub-prefix/sub-prefix-length: Specifies the IPv6 sub-prefix and sub-prefix length.
the subnet 88:99:ffff:100::/64 with the prefix length 64. The first 32-bit prefix is determined by the prefix 3 and the last 2-bit prefix is determined by the sub-prefix. system-view [Sysname] ipv6 prefix 3 88:99::/32 [Sysname] ipv6 dhcp pool 1 [Sysname-dhcp6-pool-1] network prefix 3 3ffe:501:ffff:100::/64 Related commands • display ipv6 dhcp pool • ipv6 dhcp client pd • ipv6 prefix ipv6 dhcp option-group Use ipv6 dhcp option-group to create a static DHCPv6 option group, and enter its view.
ipv6 dhcp pool Use ipv6 dhcp pool to create a DHCPv6 address pool and enter DHCPv6 address pool view, or enter DHCPv6 address pool view if the specified address pool already exists. Use undo ipv6 dhcp pool to remove the address pool. Syntax ipv6 dhcp pool pool-number undo ipv6 dhcp pool pool-number Default No DHCPv6 address pool is configured. Views System view Default command level 2: System level Parameters pool-number: Address pool number in the range of 1 to 128.
prefix: Specifies a prefix by specifying its ID or the prefix. prefix-number: Specifies the ID of the IPv6 prefix, in the range of 1 to 1024. prefix/prefix-len: Specifies the IPv6 prefix and prefix length. The value range for the prefix-len argument is 1 to 128. assign-len assign-len: Specifies the length of the prefix assigned. The value ranges from 1 to 128. The assign-len must be higher than or equal to the prefix-len, and the difference between them must be less than or equal to 16.
Views Interface view Default command level 2: System level Parameters allow-hint: Enables desired address and prefix assignment. apply pool pool-number: Applies an address pool to the interface. The value range for pool number is 1 to 128. If this option is specified, the DHCPv6 server assigns an IPv6 address or prefix from the address pool applied on the interface to the client. If not, the server searches all DHCPv6 address pools to assign an appropriate one to the client.
Syntax ipv6 dhcp server enable undo ipv6 dhcp server enable Default The DHCPv6 server is disabled. Views System view Default command level 2: System level Usage guidelines Other DHCPv6 server related configuration is effective only when the DHCPv6 server is enabled. Examples # Enable the DHCPv6 server. system-view [Sysname] ipv6 dhcp server enable option Use option to configure a self-defined DHCPv6 option. Use to undo option delete a self-defined DHCPv6 option.
Some DHCPv6 options can be specified by the option command or other dedicated commands. For example, to specify the DNS server address, you can use the dns-server command or the option 23 command. If both commands are configured, the dns-server command takes precedence. Examples # Configure the hexadecimal string 020202 for the self-defined DHCP Option 23 in DHCPv6 address pool 1. The DHCPv6 server assigns the DNS server address 2.2.2.2 to clients.
Syntax prefix-pool prefix-pool-number [ preferred-lifetime preferred-lifetime valid-lifetime valid-lifetime ] undo prefix-pool Default No prefix pool is referenced by an address pool. Views DHCPv6 address pool view Default command level 2: System level Parameters prefix-pool-number: Prefix pool number in the range of 1 to 128. preferred-lifetime preferred-lifetime: Specifies the preferred lifetime of prefixes to be assigned. The value ranges from 60 to 4294967295, in seconds.
Default command level 2: System level Parameters address ipv6-address: Clears conflict information about a specific IPv6 address. pool pool-number: Clears IPv6 address conflict information about the address pool specified by the pool number. The value range for the pool number is 1 to 128. Examples # Clear all IPv6 address conflict information.
Default command level 2: System level Parameters address ipv6-address: Clears binding information about a specific IPv6 address. pool pool-number: Clears IPv6 address binding information about the address pool specified by the pool number. The value range for the pool number is 1 to 128. Usage guidelines This command only clears offered and committed static bindings but not free static bindings. This command changes offered and committed static bindings to free static bindings.
Examples # Clear IPv6 prefix binding information about address pool 1. reset ipv6 dhcp server pd-in-use pool 1 # Clear binding information about IPv6 prefix 2001:0:0:1::/64. reset ipv6 dhcp server pd-in-use prefix 2001:0:0:1::/64 reset ipv6 dhcp server statistics Use reset ipv6 dhcp server statistics to clear packet statistics on the DHCPv6 server.
If you use the sip-server command multiple times, the latest configuration does not overwrite the previous one. Examples # Specify the SIP server address as 2:2::4 for the client. system-view [Sysname] ipv6 dhcp pool 1 [Sysname-dhcp6-pool-1] sip-server address 2:2::4 # Specify the domain name of the SIP server as bbb.com for the client. [Sysname-dhcp6-pool-1] sip-server domain-name bbb.com static-bind address Use static-bind address to configure a static IPv6 address binding in an address pool.
Examples # In address pool 1, bind static address 2001:0410::2/35 to the client with DUID 00030001CA0006A400 and IAID A1A1A1A1, and use the default settings of the preferred lifetime and valid lifetime. system-view [Sysname] ipv6 dhcp pool 1 [Sysname-dhcp6-pool-1] static-bind address 2001:0410::2/35 duid 00030001CA0006A400 iaid A1A1A1A1 Related commands display ipv6 dhcp pool static-bind prefix Use static-bind prefix to configure a static prefix.
Examples # In address pool 1, bind static prefix 2001:0410::/35 to the client with DUID 00030001CA0006A400 and IAID A1A1A1A1, and set the preferred lifetime to one day, and the valid lifetime to three days.
Examples # In DHCPv6 address pool 1, configure a temporary IPv6 address range from 3ffe:501:ffff:100::50 to 3ffe:501:ffff:100::60.
1::1 FF02::1:2 Vlan4 Interface: Vlan3 Server address(es) Output Interface 1::1 FF02::1:2 Vlan4 # Display DHCPv6 server addresses on VLAN-interface 2. display ipv6 dhcp relay server-address interface vlan-interface 2 Interface: Vlan2 Server address(es) Output Interface 1::1 FF02::1:2 Vlan4 Table 29 Command output Field Description Interface Interface that serves as the DHCPv6 relay agent. Server address(es) DHCPv6 server addresses specified on the interface.
: 0 Packets received Excess of rate limit : 14 SOLICIT : 0 REQUEST : 0 CONFIRM : 0 RENEW : 0 REBIND : 0 RELEASE : 0 DECLINE : 0 INFORMATION-REQUEST : 7 RELAY-FORWARD : 0 RELAY-REPLY : 7 Packets sent : 14 ADVERTISE : 0 RECONFIGURE : 0 REPLY : 7 RELAY-FORWARD : 7 RELAY-REPLY : 0 Table 30 Command output Field Description Packets dropped Number of discarded packets. Error Number of discarded error packets.
Related commands reset ipv6 dhcp relay statistics ipv6 dhcp relay server-address Use ipv6 dhcp relay server-address to enable DHCPv6 relay agent on the interface and specify a DHCPv6 server. Use undo ipv6 dhcp relay server-address to remove the DHCPv6 server from the interface.
Related commands display ipv6 dhcp relay server-address reset ipv6 dhcp relay statistics Use reset ipv6 dhcp relay statistics to clear packets statistics on the DHCPv6 relay agent. Syntax reset ipv6 dhcp relay statistics Views User view Default command level 1: Monitor level Usage guidelines After this command is executed, the packets statistics are displayed as 0 for the output from the display ipv6 dhcp relay statistics command. Examples # Clear packet statistics on the DHCPv6 relay agent.
include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Usage guidelines If you do not specify any parameters, the command displays DHCPv6 client information about all interfaces. Examples # Display the DHCPv6 client information about VLAN-interface 2.
Views Any view Default command level 1: Monitor level Parameters interface interface-type interface-number: Displays the DHCPv6 client statistics of a specific interface. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression.
Field Description Packets Sent Number of sent packets. Solicit Number of sent solicit packets. Request Number of sent request packets. Confirm Number of sent confirm packets. Renew Number of sent renew packets. Rebind Number of sent rebind packets. Information-request Number of sent information request packets. Release Number of sent release packets. Decline Number of sent decline packets.
[Sysname] interface vlan-interface 10 [Sysname-Vlan-interface10] ipv6 address dhcp-alloc rapid-commit option-group 1 ipv6 dhcp client pd Use ipv6 dhcp client pd to configure an interface to use DHCPv6 for IPv6 prefix acquisition. Use undo ipv6 dhcp client pd to cancel an interface from using DHCPv6. Syntax ipv6 dhcp client pd prefix-number [ option-group group-number | rapid-commit ] * undo ipv6 dhcp client pd Default An interface does not use DHCPv6 for IPv6 prefix acquisition.
Parameters interface interface-type interface-number: Clears DHCPv6 client statistics of a specific interface. Usage guidelines If you do not specify any parameters, the command clears DHCPv6 client statistics of all interfaces. After this command is executed, the packets statistics are displayed as 0 for the display ipv6 dhcp client statistics command output. Examples # Clear DHCPv6 client statistics of all interfaces.
Syntax display ipv6 dhcp snooping user-binding { ipv6-address | dynamic } [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters ipv6-address: Displays DHCPv6 snooping entries of the specified IPv6 address. dynamic: Displays all DHCPv6 snooping entries. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Default Global DHCPv6 snooping is disabled. Views System view Default command level 2: System level Usage guidelines After DHCPv6 snooping is enabled in system view, the DHCPv6 snooping device discards DHCPv6 reply messages received by an untrusted port if any, and does not record these DHCPv6 snooping entries. Examples # Enable DHCPv6 snooping globally.
ipv6 dhcp snooping trust Use ipv6 dhcp snooping trust to configure a DHCPv6 trusted port. Use undo ipv6 dhcp snooping trust to restore the default. Syntax ipv6 dhcp snooping trust undo ipv6 dhcp snooping trust Default All interfaces of a device with DHCPv6 snooping enabled globally are untrusted ports.
Meanwhile, upon receiving a DHCPv6 request from a client in the VLAN, the device forwards the packet through trusted ports rather than any untrusted port in the VLAN, thus reducing network traffic. Examples # Enable DHCPv6 snooping for VLAN 1. system-view [Sysname] vlan 1 [Sysname-vlan1] ipv6 dhcp snooping vlan enable reset ipv6 dhcp snooping user-binding Use reset ipv6 dhcp snooping user-binding to clear DHCPv6 snooping entries.
IPv4 DNS configuration commands display dns domain Use display dns domain to display the domain name suffixes. Syntax display dns domain [ dynamic ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters dynamic: Displays the domain name suffixes dynamically obtained through DHCP or other protocols. |: Filters command output by specifying a regular expression.
display dns host Use display dns host to display dynamic DNS cache information. Syntax display dns host [ ip | ipv6 ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters ip: Displays dynamic cache information about type A queries. A type A query resolves a domain name to the mapped IPv4 address. ipv6: Displays dynamic cache information about type AAAA queries. A type AAAA query resolves a domain name to the mapped IPv6 address.
Related commands reset dns host display dns server Use display dns server to display IPv4 DNS server information. Syntax display dns server [ dynamic ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters dynamic: Displays DNS server information dynamically obtained through DHCP or other protocols. |: Filters command output by specifying a regular expression.
display ip host Use display ip host to display the host names and corresponding IPv4 addresses in the static domain name resolution table. Syntax display ip host [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Syntax dns domain domain-name undo dns domain [ domain-name ] Default No domain name suffix is configured. Only the provided domain name is resolved. Views System view Default command level 2: System level Parameters domain-name: Specifies the domain name suffix, consisting of character strings separated by a dot (for example, aabbcc.com). Each separated string contains no more than 63 characters.
Examples # Enable DNS proxy. system-view [Sysname] dns proxy enable dns resolve Use dns resolve to enable dynamic domain name resolution. Use undo dns resolve to disable dynamic domain name resolution. Syntax dns resolve undo dns resolve Default Dynamic domain name resolution is disabled. Views System view Default command level 2: System level Usage guidelines This command is applicable to both IPv4 DNS and IPv6 DNS. Examples # Enable dynamic domain name resolution.
Views System view, interface view Default command level 2: System level Parameters ip-address: Specifies the IPv4 address of the DNS server. Usage guidelines You can configure up to six DNS servers in system view, including those with IPv6 addresses, and up to six DNS servers on all interfaces of a device. A DNS server configured in system view has a higher priority than one configured in interface view. A DNS server configured earlier has a higher priority than one configured later in the same view.
Usage guidelines The device uses the primary IP address of the specified source interface as the source IP address of a DNS request, which is still forwarded through the output interface of the matching route. Examples # Specify VLAN-interface 2 as the source interface of DNS requests. system-view [Sysname] dns source-interface vlan-interface2 ip host Use ip host to create a host name to IPv4 address mapping in the static resolution table. Use undo ip host to remove a mapping.
Views User view Default command level 2: System level Parameters ip: Clears dynamic cache information about type A queries. A type A query resolves a domain name to the mapped IPv4 address. ipv6: Clears dynamic cache information about type AAAA queries. A type AAAA query resolves a domain name to the mapped IPv6 address. For more information, see Layer 3 Configuration Guide. Usage guidelines If you do not specify any parameter, this command clears dynamic DNS cache information about all query types.
DDNS configuration commands Support for this feature depends on the device model. For more information, see About the Command References for HP Unified Wired-WLAN Products. ddns apply policy Use ddns apply policy to apply the specified DDNS policy to the interface, update the mapping between the specified FQDN and the primary IP address of the interface, and enable DDNS update. Use undo ddns apply policy to remove the DDNS policy application and stop DDNS update.
Use undo ddns policy to delete the DDNS policy. Syntax ddns policy policy-name undo ddns policy policy-name Default No DDNS policy exists. Views System view Default command level 2: System level Parameters policy-name: Specifies the DDNS policy name, a case-insensitive string of 1 to 32 characters. Examples # Create a DDNS policy named steven_policy and enter its view.
Usage guidelines If no policy name is specified, this command displays information about all DDNS policies. Examples # Display information about the DDNS policy steven_policy. display ddns policy steven_policy DDNS policy: steven_policy URL : http://steven:nevets@members.3322.org/dyndns/update? system=dyndns&hostname=&myip= SSL client policy: Interval : 1 days 0 hours 1 minutes Table 38 Command output Field Description DDNS policy DDNS policy name.
If you specify the interval as 0, your device initiates a DDNS update request only when the primary IP address of the interface is changed or the link state of the interface changes from down to up. If you execute the interval command multiple times with different time intervals specified, the most recent configuration takes effect. Examples # Set the interval for sending DDNS update requests to one day and one minute for the DDNS policy steven_policy.
url Use url to specify the URL address for DDNS update requests. Use undo url to delete the URL address. Syntax url request-url undo url Default No URL address is specified for DDNS update requests. Views DDNS policy view Default command level 2: System level Parameters request-url: Specifies the URL address for DDNS update requests, a case-sensitive string of 1 to 240 characters including the login ID, password, and other information.
• To avoid misinterpretation, do not include colons (:), at signs (@), and question marks (?) in your login ID or password, even if you can do so. • If you execute the url command multiple times with different URL addresses, the most recent configuration takes effect. Examples # Specify the URL address for DDNS policy steven_policy with login ID steven and password nevets. The device contacts www.3322.org for DDNS update.
IPv6 DNS configuration commands display dns ipv6 server Use display dns ipv6 server to display IPv6 DNS server information. Syntax display dns ipv6 server [ dynamic ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters dynamic: Displays IPv6 DNS server information acquired dynamically through DHCP or other protocols. |: Filters command output by specifying a regular expression.
display ipv6 host Use display ipv6 host to display the mappings between host names and IPv6 addresses in the static domain name resolution table. Syntax display ipv6 host [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Syntax dns server ipv6 ipv6-address [ interface-type interface-number ] undo dns server ipv6 ipv6-address [ interface-type interface-number ] Default No DNS server is configured. Views System view Default command level 2: System level Parameters ipv6-address: Specifies the IPv6 address of a DNS server. interface-type interface-number: Specifies an interface. When the IPv6 address of the DNS server is a link-local address, the two arguments must be specified.
Usage guidelines Each host name can correspond to only one IPv6 address. If you use the command multiple times, the most recent configuration takes effect. Examples # Configure the mapping between a host name and an IPv6 address.
NAT configuration commands display nat address-group Use display nat address-group to display NAT address pool information. Syntax display nat address-group [ group-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters group-number: Specifies the NAT address group number in the range of 0 to 7. If you do not specify this argument, this command displays information about all NAT address pools.
display nat all Use display nat all to display all NAT configuration information. Syntax display nat all [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow.
Local-VPN : --- NAT static enabled information: Interface Direction Vlan-interface3 out-static Table 42 Command output Field Description There are currently 1 nat address-group(s) See the display nat address-group command for descriptions on the specific fields. NAT bound information: Configuration information about internal address to external address translation. See the display nat bound command for descriptions on the specific fields.
NAT bound information: There are currently 3 nat bound rule(s) Interface:Vlan-interface10 Direction: outbound ACL: 2000 Address-group: 319 NO-PAT: Y Address-group: 300 NO-PAT: N Address-group: --- NO-PAT: N Interface:Vlan-interface10 Direction: outbound ACL: 3000 Interface:Vlan-interface20 Direction: outbound ACL: 2001 Table 43 Command output Field Description NAT bound information: Display configured NAT address translation information.
display nat dns-map NAT DNS mapping information: There are currently 2 NAT DNS mapping(s) Domain-name: www.server.com Global-IP : 202.113.16.117 Global-port: 80(www) Protocol : 6(tcp) Domain-name: ftp.server.com Global-IP : 202.113.16.100 Global-port: 21(ftp) Protocol : 6(tcp) Table 44 Command output Field Description Domain-name Domain name of the internal server. Global-IP External IP address of the internal server. Global-port Public port number of the internal server.
NAT server in private network information: There are currently 2 internal server(s) Interface: Vlan-interface10, Protocol: 6(tcp) Global: 100.100.120.120 : 21(ftp) Local : 192.168.100.100 : 21(ftp) Interface: Vlan-interface11, Protocol: 6(tcp) Global: 100.100.100.121 : 80(www) Local : 192.168.100.101 : 80(www) Table 45 Command output Field Description Server in private network information Information about internal servers. Interface Internal server interface. Protocol Protocol type.
There are currently 1 NAT static configuration(s) single static: Local-IP : 4.4.4.4 Global-IP : 5.5.5.5 Local-VPN : --- NAT static enabled information: Interface Direction Vlan-interface11 out-static Table 46 Command output Field Description NAT static information Configuration information about static NAT. single static One-to-one static NAT. Local-IP Internal IP address. Global-IP External IP address. Local-VPN VPN to which the internal IP address belongs.
Examples # Display NAT statistics. display nat statistics total PAT session table count: 1 total NO-PAT session table count: 0 total SERVER session table count: 0 total STATIC session table count: 0 Table 47 Command output Field Description total PAT session table count Number of PAT session entries. total NO-PAT session table count Number of NO-PAT session entries. total SERVER session table count Number of SERVER session entries.
Usage guidelines An address pool consists of a set of consecutive IP addresses. An address group consists of multiple group members, each of which specifies an address pool with the address command. The address pools of group members may not be consecutive. • You cannot remove an address pool or address group that has been associated with an ACL. • Different address pools must not overlap. • The address pools of group members must not overlap with each other or with other address pools.
Examples # A company provides Web service to external users. The domain name of the internal server is www.server.com, and the public IP address is 202.112.0.1. Configure a DNS mapping, so that internal users can access the Web server using its domain name. system-view [Sysname] nat dns-map domain www.server.com protocol tcp ip 202.112.0.1 port www Related commands display nat dns-map nat outbound Use nat outbound to enable outbound NAT on an interface.
You can bind an ACL to only one address pool on an interface. An address pool can be bound to multiple ACLs. In stateful failover networking, make sure you associate each address pool configured on an interface with one VRRP group only. Otherwise, the system associates the address pool with the VRRP group having the highest group ID. For some devices, the ACL rules referenced by the same interface cannot conflict.
Default command level 2: System level Parameters track vrrp virtual-router-id: Associates static NAT with a VRRP group. The virtual-router-id argument indicates the number of the VRRP group, in the range of 1 to 255. If you do not specify this option, no VRRP group is associated. Examples # Configure a one-to-one NAT mapping and enable static NAT on interface VLAN-interface 1. system-view [Sysname] nat static 192.168.1.1 2.2.2.
interface-type interface-number: Specifies the interface type and interface number. Only loopback interfaces are supported and must be configured. Otherwise, the configuration is considered illegal. global-port1, global-port2: Specifies a range of ports that have a one-to-one correspondence with the IP addresses of the internal hosts. The global-port2 argument must be greater than global-port1.
When the protocol type is not udp (with a protocol number of 17) or tcp (with a protocol number of 6), you can configure one-to-one NAT between an internal IP address and an external IP address only, but cannot specify port numbers. Examples # Allow external hosts to ping the host with an IP address of 10.110.10.12 by using the ping 202.110.10.11 command. system-view [Sysname] interface Vlan-interface 1 [Sysname-Vlan-interface1] nat server protocol icmp global 202.110.10.11 inside 10.110.10.
Parameters acl-number: Specifies an ACL number in the range of 2000 to 3999. You can use an ACL to specify the destination addresses that internal hosts can access. local-ip: Specifies the internal IP address. global-ip: Specifies the external IP address. Examples # Configure static NAT mapping between internal IP address 192.168.1.1 and external IP address 2.2.2.2. system-view [Sysname] nat static 192.168.1.1 2.2.2.2 # Configure static NAT to allow the internal host 192.168.1.
Adjacency table configuration commands display adjacent-table Use display adjacent-table to display IPv4 adjacency table entries. Syntax display adjacent-table { all | physical-interface interface-type interface-number | routing-interface interface-type interface-number } [ count | verbose ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters all: Displays all IPv4 adjacency table entries.
Link Head Information(IP) : N/A Link Head Information(MPLS) : N/A Table 48 Command output Field Description IP Address Next hop IP address. Routing Interface Outgoing interface of the matching entry. Physical Interface Adjacency table physical interface. Logical Interface Adjacency table logical interface: An abstract interface that does not correspond to any physical entity and is used for adjacency table implementation, such as Virtual Ethernet interface and Virtual-Template interface.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Flow classification configuration commands display forwarding policy Use display forwarding policy to display the current flow classification policy. Syntax display forwarding policy [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 2: System level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Usage guidelines Flow classification consumes many system resources. HP recommends that you disable this function to improve device performance. Examples # Disable flow classification.
IPv6 basics configuration commands display ipv6 fib Use display ipv6 fib to display IPv6 FIB entries. If you do not specify any parameter, this command displays all IPv6 FIB entries. Syntax display ipv6 fib [ acl6 acl6-number | ipv6-prefix ipv6-prefix-name ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters acl6 acl6-number: Displays the IPv6 FIB entries permitted by a specific ACL. The ACL number is in the range of 2000 to 2999.
Interface : InLoopBack0 Table 50 Command output Field Description Total number of Routes Total number of routes in the FIB. Destination Destination address. PrefixLength Prefix length of the destination address. NextHop Next hop. Route flag: Flag • • • • • • U—Usable route. G—Gateway route. H—Host route. B—Black hole route. D—Dynamic route. S—Static route. Label Label. Token Label switched path index number. Interface Outgoing interface.
Usage guidelines If you do not specify the prefix-length argument, this command displays the IPv6 FIB entry that most closely matches the destination IPv6 address. If you specify the prefix-length argument, this command displays the IPv6 FIB entry that exactly matches the specified destination IPv6 address and prefix length. Examples # Display the IPv6 FIB entry that most closely matches the destination IPv6 address.
Views Any view Default command level 1: Monitor level Parameters interface-type: Specifies an interface by its type. interface-number: Specifies an interface by its number. brief: Displays brief IPv6 information about an interface. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow.
IPv6 Packet statistics: InReceives: 0 InTooShorts: 0 InTruncatedPkts: 0 InHopLimitExceeds: 0 InBadHeaders: 0 InBadOptions: 0 ReasmReqds: 0 ReasmOKs: 0 InFragDrops: 0 InFragTimeouts: 0 OutFragFails: 0 InUnknownProtos: 0 InDelivers: 0 OutRequests: 0 OutForwDatagrams: 0 InNoRoutes: 0 InTooBigErrors: 0 OutFragOKs: 0 OutFragCreates: 0 InMcastPkts: 0 InMcastNotMembers: 0 OutMcastPkts: 0 InAddrErrors: 0 InDiscards: 0 OutDiscards: 0 Table 52 Command output (on a swi
Field Description valid lifetime Valid lifetime of the global unicast address obtained through stateless autoconfiguration. preferred lifetime Preferred lifetime of the global unicast address obtained through stateless autoconfiguration. Joined group address(es) Addresses of multicast groups that the interface has joined. MTU Maximum transmission unit of the interface. Whether Duplicate Address Detection (DAD) is enabled. In this example, DAD is enabled.
Field Description InNoRoutes IPv6 packets that were discarded because no matched route can be found. InTooBigErrors IPv6 packets that were discarded because they exceeded the Path MTU. OutFragOKs Packets that were fragmented on the outbound interface. OutFragCreates Number of fragmented packets on the outbound interface. InMcastPkts IPv6 multicast packets received on the interface.
Field Description IPv6 Address IPv6 address of the interface. Only the first configured IPv6 address is displayed. If no address is configured for the interface, Unassigned is displayed. display ipv6 neighbors Use display ipv6 neighbors to display neighbor information.
Table 54 Command output Field Description IPv6 Address IPv6 address of a neighbor. Link-layer Link layer address (MAC address) of a neighbor. VID VLAN to which the interface connected with a neighbor belongs. Interface Interface connected with a neighbor. State of a neighbor: • INCMP—The address is being resolved. The link layer address of the neighbor is unknown. State • REACH—The neighbor is reachable. • STALE—The reachability of the neighbor is unknown.
static: Displays the total number of neighbor entries configured statically. interface interface-type interface-number: Displays the total number of neighbor entries of a specific interface. vlan vlan-id: Displays the total number of neighbor entries of a specific VLAN. The value range for the VLAN ID is 1 to 4094. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Examples # Display all path MTU information. display ipv6 pathmtu all IPv6 Destination Address ZoneID PathMTU Age Type fe80::12 0 1300 40 Dynamic 2222::3 0 1280 -- Static Table 55 Command output Field Description IPv6 Destination Address Destination IPv6 address. ZoneID VPN index. If the information is for the public network, this field displays 0. PathMTU Path MTU value on the network path to an IPv6 address. Age Time for a path MTU to live.
Examples # Display information about all IPv6 prefixes. display ipv6 prefix Number Prefix Type 1 1::/16 Static 2 ABCD:77D8::/32 Dynamic # Display information about the IPv6 prefix with the specified ID. display ipv6 prefix 1 Number: 1 Type : Dynamic Prefix: ABCD:77D8::/32 Preferred lifetime 90 sec, valid lifetime 120 sec Table 56 Command output Field Description Number Prefix ID. Prefix type: Type • Static—Static IPv6 prefix. • Dynamic—Dynamic IPv6 prefix.
exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Usage guidelines If you do not specify any parameter, this command displays information about all the sockets. If you specify only the socket type, the command displays information about sockets of the specified type.
Table 57 Command output Field Description SOCK_STREAM TCP socket. SOCK_DGRAM UDP socket. SOCK_RAW Raw IP socket. Task Task name and ID of the created socket. socketid ID assigned by the kernel to the created socket. Proto Protocol type, for example, 6 indicates TCP and 17 indicates UDP. LA Local address and local port number. FA Remote address and remote port number. sndbuf Size of the send buffer. rcvbuf Size of the receive buffer. sb_cc Number of bytes sent by the send buffer.
Usage guidelines You can use the reset ipv6 statistics command to clear all IPv6 and ICMPv6 packet statistics. Examples # Display the statistics of IPv6 packets and ICMPv6 packets.
unknown info type: 0 Deliver failed: bad length: 0 ratelimited: 0 Table 58 Command output Field Description IPv6 Protocol Statistics of IPv6 packets. Statistics of sent IPv6 packets: Sent packets • • • • • • • • Total—Total number of packets sent and forwarded locally. local sent out—Number of packets sent locally. forwarded—Number of forwarded packets. raw packets—Number of packets sent through raw socket. discarded—Number of discarded packets.
Field Description Statistics of sent ICMPv6 packets: Sent packets • • • • • Total—Total number of sent packets. • • • • • • • • • • • parameter problem—Number of Parameter Problem packets. unreached—Number of Destination Unreachable packets. too big—Number of Packet Too Big packets. hopcount exceeded—Number of Hop Limit Exceeded packets. reassembly timeout—Number of Fragment Reassembly Time Exceeded packets. echo request—Number of Echo Request packets. echo replied—Number of Echo Reply packets.
display tcp ipv6 statistics Use display tcp ipv6 statistics to display IPv6 TCP connection statistics. Syntax display tcp ipv6 statistics [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
ACK only packets: 0 (0 delayed) Retransmitted timeout: 0, connections dropped in retransmitted timeout: 0 Keepalive timeout: 0, keepalive probe: 0, Keepalive timeout, so connections disconnected : 0 Initiated connections: 0, accepted connections: 0, established connections: 0 Closed connections: 0 (dropped: 0, initiated dropped: 0) Packets dropped with MD5 authentication: 0 Packets permitted with MD5 authentication: 0 Table 59 Command output Field Description Statistics of received packets: Received pac
Field Description Keepalive timeout, so connections disconnected Number of connections dropped because of keepalive response timeout. Initiated connections Number of initiated connections. accepted connections Number of accepted connections. established connections Number of established connections. Closed connections Number of closed connections. dropped Number of dropped connections (after SYN is received from the peer).
Table 60 Command output Field Description *: TCP6 MD5 Connection The asterisk (*) indicates that the TCP6 connection is secured with MD5 authentication. TCP6CB IPv6 TCP control block address (in hexadecimal). Local Address Local IPv6 address. Foreign Address Remote IPv6 address. IPv6 TCP connection status: State • • • • • • • • • • • Closed. Listening. Syn_Sent. Syn_Rcvd. Established. Close_Wait. Fin_Wait1. Closing. Last_Ack. Fin_Wait2. Time_Wait.
display udp ipv6 statistics Received packets: Total: 0 checksum error: 0 shorter than header: 0, data length larger than packet: 0 unicast(no socket on port): 0 broadcast/multicast(no socket on port): 0 not delivered, input socket full: 0 input packets missing pcb cache: 0 Sent packets: Total: 0 Table 61 Command output Field Description Total Total number of received/sent packets. checksum error Total number of packets with a checksum error.
Examples # Enable IPv6. system-view [Sysname] ipv6 ipv6 address Use ipv6 address to configure an IPv6 global unicast address for an interface. Use undo ipv6 address to remove the IPv6 address from the interface. Syntax ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length } undo ipv6 address [ ipv6-address prefix-length | ipv6-address/prefix-length ] Default No global unicast address is configured for an interface.
Syntax ipv6 address prefix-number sub-prefix/prefix-length undo ipv6 address prefix-number Default No prefix is applied for IPv6 address generation on an interface. Views Interface view Default command level 2: System level Parameters prefix-number: Specifies an IPv6 prefix by its ID in the range of 1 to 1024. sub-prefix/prefix-length: Specifies the sub-prefix bit and host bit for an IPv6 address, and specifies the prefix length. The value range for prefix length is 1 to 128.
Parameters ipv6-address/prefix-length: Specifies an IPv6 anycast address and its prefix length. The value range for prefix length is 1 to 128. Examples # Set the IPv6 anycast address of VLAN-interface 100 to 2001::1 with prefix length 64. system-view [Sysname] interface vlan-interface 100 [Sysname-Vlan-interface100] ipv6 address 2001::1/64 anycast ipv6 address auto link-local Use ipv6 address auto link-local to automatically generate a link-local address for an interface.
[Sysname] interface vlan-interface 100 [Sysname-Vlan-interface100] ipv6 address auto link-local ipv6 address eui-64 Use ipv6 address eui-64 to configure an EUI-64 IPv6 address for an interface. Use undo ipv6 address eui-64 to remove the configured EUI-64 IPv6 address for the interface. Syntax ipv6 address ipv6-address/prefix-length eui-64 undo ipv6 address ipv6-address/prefix-length eui-64 Default No EUI-64 IPv6 address is configured for an interface.
Default command level 2: System level Parameters ipv6-address: Specifies an IPv6 link-local address. The first 10 bits of an address must be 1111111010 (binary). The first group of hexadecimals in the address must be in the range of FE80 to FEBF. Usage guidelines Manual assignment takes precedence over automatic generation. If you first adopt automatic generation and then manual assignment, the manually assigned link-local address overwrites the automatically generated one.
Syntax ipv6 hoplimit-expires enable undo ipv6 hoplimit-expires Default Sending ICMPv6 Time Exceeded packets is enabled. Views System view Default command level 2: System level Usage guidelines After you disable sending ICMPv6 Time Exceeded packets, the device still sends Fragment Reassembly Time Exceeded packets. Examples # Disable sending ICMPv6 Time Exceeded packets.
[Sysname] ipv6 icmp-error bucket 50 ratelimit 100 ipv6 icmpv6 multicast-echo-reply enable Use ipv6 icmpv6 multicast-echo-reply enable to enable replying to multicast echo requests. Use undo ipv6 icmpv6 multicast-echo-reply to disable replying to multicast echo requests. Syntax ipv6 icmpv6 multicast-echo-reply enable undo ipv6 icmpv6 multicast-echo-reply Default The device is disabled from replying to multicast echo requests.
ipv6 nd autoconfig other-flag Use ipv6 nd autoconfig other-flag to set the other stateful configuration flag (O) to 1 so that the host can acquire information other than IPv6 address through stateful autoconfiguration (for example, from a DHCP server). Use undo ipv6 nd autoconfig other-flag to restore the default. Syntax ipv6 nd autoconfig other-flag undo ipv6 nd autoconfig other-flag Default The O flag is set to 0 so that the host can acquire other information through stateless autoconfiguration.
system-view [Sysname] interface vlan-interface 100 [Sysname-Vlan-interface100] ipv6 nd dad attempts 20 Related commands display ipv6 interface ipv6 nd hop-limit Use ipv6 nd hop-limit to configure the hop limit advertised by the device. Use undo ipv6 nd hop-limit to restore the default hop limit. Syntax ipv6 nd hop-limit value undo ipv6 nd hop-limit Default The hop limit advertised by the device is 64.
Views Interface view Default command level 2: System level Parameters value: Specifies the Interval for retransmitting an NS message in milliseconds, in the range of 1000 to 4294967295. Examples # Specify VLAN-interface 100 to retransmit NS messages at intervals of 10000 milliseconds.
ipv6 nd ra halt Use ipv6 nd ra halt to enable RA message suppression. Use undo ipv6 nd ra halt to disable RA message suppression. Syntax ipv6 nd ra halt undo ipv6 nd ra halt Default RA messages are suppressed. Views Interface view Default command level 2: System level Examples # Suppress RA messages on VLAN-interface 100.
Usage guidelines The minimum interval should be three-fourths of the maximum interval or less. The maximum interval for sending RA messages should be less than or equal to the router lifetime in RA messages. Examples # Set the maximum interval for advertising RA messages to 1000 seconds and the minimum interval to 700 seconds.
Default No prefix information is configured in RA messages, and the IPv6 address of the interface sending RA messages is used as the prefix information with a valid lifetime of 2592000 seconds (30 days) and a preferred lifetime of 604800 seconds (7 days). Views Interface view Default command level 2: System level Parameters ipv6-prefix: Specifies the IPv6 prefix. prefix-length: Specifies the prefix length of the IPv6 address.
Usage guidelines The router lifetime in RA messages should be greater than or equal to the advertising interval. Examples # Set the router lifetime in RA messages on VLAN-interface 100 to 1000 seconds. system-view [Sysname] interface vlan-interface 100 [Sysname-Vlan-interface100] ipv6 nd ra router-lifetime 1000 ipv6 neighbor Use ipv6 neighbor to configure a static neighbor entry. Use undo ipv6 neighbor to remove a static neighbor entry.
Examples # Configure a static neighbor entry for Layer 2 port Ten-GigabitEthernet 1/0/1 of VLAN 100. system-view [Sysname] ipv6 neighbor 2000::1 fe-e0-89 100 Ten-GigabitEthernet 1/0/1 Related commands display ipv6 neighbors ipv6 neighbor stale-aging Use ipv6 neighbor stale-aging to set the aging timer for ND entries in stale state. Use undo ipv6 neighbor stale-aging to restore the default.
Views Interface view Default command level 2: System level Parameters number: Specifies the maximum number of dynamic neighbor entries that can be learned by the interface. The value range varies with devices. For more information, see About the Command References for HP Unified Wired-WLAN Products. Examples # Set the maximum number of dynamic neighbor entries that can be learned by VLAN-interface 100 to 10.
Use undo ipv6 pathmtu age to restore the default. Syntax ipv6 pathmtu age age-time undo ipv6 pathmtu age Default The aging time is 10 minutes. Views System view Default command level 2: System level Parameters age-time: Specifies the aging time for path MTU in minutes, in the range of 10 to 100. Usage guidelines The aging time is invalid for a static path MTU. Examples # Set the aging time for a dynamic path MTU to 40 minutes.
Usage guidelines You cannot execute the ipv6 prefix command to modify an existing static prefix. When a DHCPv6 client obtains an IPv6 prefix from a DHCP server, the IPv6 prefix is dynamically generated. You cannot modify or remove the dynamically generated prefix. The prefix IDs of a static IPv6 prefix and a dynamical IPv6 prefix cannot be the same. Examples # Create static IPv6 prefix 2001:0410::/32 with prefix ID 1.
Views System view Default command level 2: System level Examples # Enable sending ICMPv6 destination unreachable packets. system-view [Sysname] ipv6 unreachables enable reset ipv6 neighbors Use reset ipv6 neighbors to clear IPv6 neighbor information. Syntax reset ipv6 neighbors { all | dynamic | interface interface-type interface-number | static } Views User view Default command level 2: System level Parameters all: Clears static and dynamic neighbor information on all interfaces.
Views User view Default command level 2: System level Parameters all: Clears all path MTUs. static: Clears all static path MTUs. dynamic: Clears all dynamic path MTUs. Examples # Clear all path MTUs. reset ipv6 pathmtu all reset ipv6 statistics Use reset ipv6 statistics to clear the statistics of IPv6 packets and ICMPv6 packets.
Usage guidelines You can use the display tcp ipv6 statistics command to display the statistics of IPv6 TCP connections. Examples # Clear the statistics of all IPv6 TCP connections. reset tcp ipv6 statistics reset udp ipv6 statistics Use reset udp ipv6 statistics to clear the statistics of all IPv6 UDP packets.
[Sysname] tcp ipv6 timer fin-timeout 800 tcp ipv6 timer syn-timeout Use tcp ipv6 timer syn-timeout to set the synwait timer for IPv6 TCP connections Use undo tcp ipv6 timer syn-timeout to restore the default. Syntax tcp ipv6 timer syn-timeout wait-time undo tcp ipv6 timer syn-timeout Default The synwait timer of IPv6 TCP connections is 75 seconds.
Examples # Set the size of the IPv6 TCP send/receive buffer to 4 KB.
IP performance optimization commands display fib Use display fib to display FIB entries. Syntax display fib [ acl acl-number | ip-prefix ip-prefix-name ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters acl acl-number: Displays FIB entries matching a specific ACL. The acl-number argument is in the range of 2000 to 2999. If the specified ACL does not exist, this command displays all FIB entries.
# Display FIB entries matching ACL 2000. system-view [Sysname] acl number 2000 [Sysname-acl-basic-2000] rule permit source 10.2.0.0 0.0.255.255 [Sysname-acl-basic-2000] display fib acl 2000 Destination count: 2 FIB entry count: 2 Flag: U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static R:Relay Destination/Mask Nexthop Flag OutInterface InnerLabel Token 10.2.0.0/16 10.2.1.1 U Vlan1 Null Invalid 10.2.1.1/32 127.0.0.
Field Description Flags of routes: Flag • • • • • • • U—Usable route. G—Gateway route. H—Host route. B—Blackhole route. D—Dynamic route. S—Static route. R—Recursive route. OutInterface Outbound interface. InnerLabel Inner label. Token Label switched path index number. display fib ip-address Use display fib ip-address to display FIB entries that match the specified destination IP address.
display fib 10.2.1.1 Destination count: 1 FIB entry count: 1 Flag: U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static R:Relay Destination/Mask Nexthop Flag OutInterface InnerLabel Token 10.2.1.1/32 127.0.0.1 UH InLoop0 Null Invalid For more information about the command output, see Table 62. display icmp statistics Use display icmp statistics to display ICMP statistics.
Related commands • display ip interface • reset ip statistics display ip socket Use display ip socket to display socket information. Syntax display ip socket [ socktype sock-type ] [ task-id socket-id ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters socktype sock-type: Displays socket information for the type specified by the sock-type argument.
socket option = SO_ACCEPTCONN SO_REUSEPORT, socket state = SS_PRIV SS_NBIO Task = ROUT(69), socketid = 10, Proto = 6, LA = 0.0.0.0:179, FA = 192.168.1.45:0, sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0, sb_maxcc = 0, rb_maxcc = 0, socket option = SO_ACCEPTCONN SO_REUSEADDR SO_REUSEPORT SO_SENDVPNID(0), socket state = SS_PRIV SS_ASYNC Task = VTYD(38), socketid = 4, Proto = 6, LA = 192.168.1.40:23, FA = 192.168.1.
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0, sb_maxcc = 0, rb_maxcc = 0, socket option = SO_UDPCHECKSUM, socket state = SS_PRIV Task = TRAP(52), socketid = 1, Proto = 17, LA = 0.0.0.0:1025, FA = 0.0.0.0:0, sndbuf = 9216, rcvbuf = 0, sb_cc = 0, rb_cc = 0, sb_maxcc = 0, rb_maxcc = 0, socket option = SO_UDPCHECKSUM, socket state = SS_PRIV Task = RDSO(56), socketid = 2, Proto = 17, LA = 0.0.0.0:1812, FA = 0.0.0.
Task = RSVP(73), socketid = 1, Proto = 46, LA = 0.0.0.0, FA = 0.0.0.0, sndbuf = 4194304, rcvbuf = 4194304, sb_cc = 0, rb_cc = 0, sb_maxcc = 0, rb_maxcc = 0, socket option = 0, socket state = SS_PRIV SS_NBIO SS_ASYNC Table 63 Command output Field Description SOCK_STREAM TCP socket. SOCK_DGRAM UDP socket. SOCK_RAW Raw IP socket. Task Task number. socketid Socket ID. Proto Protocol number of the socket, indicating the protocol type that IP carries. LA Local address and local port number.
exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Examples # Display statistics of IP packets.
display ip virtual-reassembly Use display ip virtual-reassembly to display the IP virtual fragment reassembly information for an interface. Syntax display ip virtual-reassembly [ interface interface-type interface-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters interface interface-type interface-number: Displays the IP virtual fragment reassembly information for the interface specified by interface-type interface-number.
Total reassembly failures: 0 Table 65 Command output Field Description Concurrent reassemblies (max-reassemblies) Maximum number of concurrent reassemblies. Fragments per reassembly(max-fragments) Maximum number of fragments per reassembly. Reassembly timeout(timeout) Timeout interval of each reassembly. Drop fragments OFF/ON means dropping all fragments is disabled/enabled. Current reassembly count Number of current reassemblies. Current fragment count Number of current fragments.
out-of-order packets: 17 (0 bytes) packets of data after window: 0 (0 bytes) packets received after close: 0 ACK packets: 4625 (141989 bytes) duplicate ACK packets: 1702, too much ACK packets: 0 Sent packets: Total: 6726 urgent packets: 0 control packets: 21 (including 0 RST) window probe packets: 0, window update packets: 0 data packets: 6484 (141984 bytes) data packets retransmitted: 0 (0 bytes) ACK-only packets: 221 (177 delayed) Retransmitted timeout: 0, connections dropped in retransmitted timeout:
Field Sent packets Description Total Total number of packets sent. urgent packets Number of urgent packets sent. control packets Number of control packets sent. window probe packets Number of window probe packets sent. In the brackets are resent packets. window update packets Number of window update packets sent. data packets Number of data packets sent. data packets retransmitted Number of data packets retransmitted. ACK-only packets Number of ACK packets sent.
Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression.
ip redirects enable Use ip redirects enable to enable sending ICMP redirection messages. Use undo ip redirects to disable sending ICMP redirection messages. Syntax ip redirects enable undo ip redirects Default Sending ICMP redirection messages is disabled. Views System view Default command level 2: System level Examples # Enable sending ICMP redirect messages.
ip unreachables enable Use ip unreachables enable to enable sending ICMP destination unreachable messages. Use undo ip unreachables to disable sending ICMP destination unreachable messages. Syntax ip unreachables enable undo ip unreachables Default Sending ICMP destination unreachable messages is disabled. Views System view Default command level 2: System level Examples # Enable sending ICMP destination unreachable messages.
timeout seconds: Specifies the timeout interval of a reassembly in seconds. The value range is 1 to 64, and the default value is 3 seconds. Usage guidelines You can use this command to set the maximum number of fragments per reassembly, the maximum number of concurrent reassemblies, and the timeout interval of a reassembly. When the maximum number of concurrent reassemblies is reached, the device discards all subsequent fragments that do not belong to any existing reassemblies and sends a syslog message.
Views User view Default command level 1: Monitor level Examples # Clear statistics of TCP traffic. reset tcp statistics Related commands display tcp statistics reset udp statistics Use reset udp statistics to clear statistics of UDP traffic. Syntax reset udp statistics Views User view Default command level 1: Monitor level Examples # Clear statistics of UDP traffic. reset udp statistics tcp mss Use tcp mss to configure the TCP MSS. Use undo tcp mss to restore the default.
Usage guidelines TCP MSS = path MTU – IP header length – TCP header length Examples # Set the TCP MSS to 300 bytes on VLAN-interface 100. system-view [Sysname] interface vlan-interface 100 [Sysname-Vlan-interface100] tcp mss 300 tcp path-mtu-discovery Use tcp path-mtu-discovery to enable TCP path MTU discovery. Use undo tcp path-mtu-discovery to disable TCP path MTU discovery, and disable all running path MTU timers.
Default The TCP finwait timer is 675 seconds. Views System view Default command level 2: System level Parameters time-value: Specifies the TCP finwait timer in seconds, in the range of 76 to 3600. Usage guidelines The actual finwait timer is determined by the following formula: Actual finwait timer = (Configured finwait timer – 75) + configured synwait timer Examples # Set the TCP finwait timer to 800 seconds.
Related commands • tcp timer fin-timeout • tcp window tcp window Use tcp window to configure the size of the TCP send/receive buffer. Use undo tcp window to restore the default. Syntax tcp window window-size undo tcp window Default The size of the TCP send/receive buffer is 8 KB. Views System view Default command level 2: System level Parameters window-size: Specifies the size of the send/receive buffer in KB, in the range of 1 to 32.
Basic IP routing commands display ip routing-table Use display ip routing-table to display brief information about active routes in the routing table. Use display ip routing-table verbose to display detailed information about all routes in the routing table.
127.0.0.0/8 Direct 0 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 0 127.0.0.1 InLoop0 192.168.0.0/24 Direct 0 0 192.168.0.1 VT1 192.168.0.1/32 Direct 0 0 127.0.0.1 InLoop0 Table 68 Command output Field Description Destinations Number of destination addresses. Routes Number of routes. Destination/Mask Destination address/mask length. Proto Protocol that installed the route. Pre Preference of the route. Cost Cost of the route. NextHop Next hop address of the route.
Protocol: Direct Preference: 0 IpPrecedence: NextHop: 127.0.0.1 BkNextHop: 0.0.0.0 RelyNextHop: 0.0.0.0 Process ID: 0 Cost: 0 QosLcId: Interface: InLoopBack0 BkInterface: Neighbor : 0.0.0.0 Tunnel ID: 0x0 Label: NULL BKTunnel ID: 0x0 BKLabel: NULL State: Active NoAdv Age: 06h46m36s Tag: 0 Destination: 127.0.0.1/32 Protocol: Direct Preference: 0 IpPrecedence: NextHop: 127.0.0.1 BkNextHop: 0.0.0.0 RelyNextHop: 0.0.0.0 Process ID: 0 Cost: 0 QosLcId: Interface: InLoopBack0 BkInterface: Neighbor : 0.0.
Table 69 Command output Field Description Destination Destination address/mask length. Protocol Protocol that installed the route. Preference Preference of the route. Cost Cost of the route. IpPrecedence IP precedence. QosLcId Local QoS ID. NextHop Next hop address of the route. Interface Output interface for packets to be forwarded along the route. BkNextHop Backup next hop. BkInterface Backup output interface. RelyNextHop Next hop address obtained through routing recursion.
Field Description Age Time for which the route has been in the routing table, in the sequence of hour, minute, and second from left to right. Tag Route tag. display ip routing-table ip-address Use display ip routing-table ip-address to display information about routes to a specific destination address.
If the two operations yield the same result for an entry and this entry is active, the entry is displayed. • display ip routing-table ip-address mask: { The system ANDs the input destination IP address with the input subnet mask. { The system ANDs the destination IP address in each route entry with the input subnet mask. If the two operations yield the same result for an entry and the entry is active with a subnet mask less than or equal to the input subnet mask, the entry is displayed.
11.0.0.0/24 Static 60 0 0.0.0.0 NULL0 # Display brief information about the routes with destination IP address 11.0.0.1, mask length 20, and the longest mask length. display ip routing-table 11.0.0.1 20 longer-match Routing Table : Public Summary Count : 1 Destination/Mask Proto Pre 11.0.0.0/16 Static 60 Cost NextHop Interface 0 0.0.0.0 NULL0 # Display brief information about the routes with destination addresses in the range of 1.1.1.0 to 5.5.5.0.
begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Examples # Display brief information about direct routes.
Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression.
Default command level 1: Monitor level Parameters verbose: Displays detailed information about all IPv6 routes, including both active and inactive routes. Without this keyword, the command displays only brief information about active routes. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow.
Neighbor : :: ProcessID : 0 Interface : InLoopBack0 Protocol : Direct State : Active NoAdv Cost : 0 Tunnel ID : 0x0 Label : NULL Age : 22161sec Table 72 Command output Field Description Destination IPv6 address of the destination network/host. PrefixLength Prefix length of the address. NextHop Next hop address of the route. Preference Preference of the route. IpPrecedence IP precedence. QosLcId Local QoS ID. RelayNextHop Recursive next hop. Tag Tag of the route.
Default command level 1: Monitor level Parameters ipv6-address: Specifies an IPv6 destination address. prefix-length: Specifies the prefix length in the range of 0 to 128. longer-match: Displays the matched route entry with the longest prefix length. ipv6-address1/ipv6-address2: Specifies an IPv6 destination address range. prefix-length1/prefix-length2: Specifies the prefix length in the range of 0 to 128. verbose: Displays detailed information about all routes.
If the two operations yield the same result for multiple entries with a prefix length less than or equal to the input prefix length, the entry that is active with the longest prefix length is displayed. Examples # Display brief information about the routes with destination IPv6 address 10::1.
Interface : NULL0 Cost : 0 # Display brief information about the routes with destination IPv6 addresses in the range of 100::/64 to 300::/64.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Examples # Display brief information about all direct routes.
Table 73 Command output Field Description Protocol Routing protocol that installed the route. route Number of routes installed by the protocol. active Number of active routes. added Number of routes added to the routing table after the router started up or the routing table was most recently cleared. deleted Number of routes marked as deleted, which will be cleared after a period. freed Number of routes that were permanently removed. Total Total number of routes.
all: Clears route statistics for all IPv6 routing protocols. Examples # Clear route statistics for the public network.
Static routing configuration commands delete static-routes all Use delete static-routes all to delete all static routes. Syntax delete static-routes all Views System view Default command level 2: System level Usage guidelines When you use this command, the system prompts you to confirm the operation before deleting all the static routes. To delete one static route, use the undo ip route-static command. To delete all static routes, including the default route, use the delete static-routes all command.
Default No unicast static route is configured. Views System view Default command level 2: System level Parameters dest-address: Specifies a destination IP address of the static route, in dotted decimal notation. mask: Specifies mask of the IP address, in dotted decimal notation. mask-length: Specifies mask length in the range of 0 to 32. next-hop-address: Specifies IP address of the next hop, in dotted decimal notation.
{ If the output interface is a broadcast interface (such as an Ethernet interface or a VLAN interface) that might have multiple next hops, you must specify both the output interface and the next hop address at the same time. • The next hop address of a static route cannot be the IP address of a local interface. Otherwise, the static route does not take effect.
Examples # Set a default preference of 120 for static routes.
IPv6 static routing configuration commands delete ipv6 static-routes all Use delete ipv6 static-routes all to delete all IPv6 static routes. Syntax delete ipv6 static-routes all Views System view Default command level 2: System level Usage guidelines When you use this command, the system prompts you to confirm the operation before deleting all the IPv6 static routes.
Views System view Default command level 2: System level Parameters ipv6-address prefix-length: Specifies the IPv6 address and prefix length. interface-type interface-number: Specifies the output interface by its type and number. If the output interface is a nonbroadcast multiaccess (NBMA) interface or broadcast interface and not a point-to-point (P2P) interface, the next hop address must be specified. Broadcast interfaces include Ethernet interfaces, virtual template interfaces, and VLAN interfaces.
Support and other resources Contacting HP For worldwide technical support information, see the HP support website: http://www.hp.
Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. [] Square brackets enclose syntax choices (keywords or arguments) that are optional. { x | y | ... } Braces enclose a set of required syntax choices separated by vertical bars, from which you select one.
Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access controller, a unified wired-WLAN module, or the switching engine on a unified wired-WLAN switch. Represents an access point.
Index ABDEFGINOPRSTUVW dhcp select server global-pool,31 A dhcp server apply ip-pool,30 address range,112 dhcp server client-detect enable,31 arp check enable,10 dhcp server detect,32 arp fast-reply enable,22 dhcp server forbidden-ip,33 arp max-learning-num,10 dhcp server ip-pool,34 arp send-gratuitous-arp,17 dhcp server log enable,34 arp static,11 dhcp server ping packets,35 arp timer aging,12 dhcp server ping timeout,35 arp-snooping enable,20 dhcp server relay information enable,36 B d
display ipv6 dhcp relay statistics,143 display dhcp relay,77 display dhcp relay information,78 display ipv6 dhcp server,117 display dhcp relay security,80 display ipv6 dhcp server conflict,118 display dhcp relay security statistics,81 display ipv6 dhcp server expired,119 display dhcp relay security tracker,81 display ipv6 dhcp server ip-in-use,120 display dhcp relay server-group,82 display ipv6 dhcp server pd-in-use,122 display dhcp relay statistics,83 display ipv6 dhcp server statistics,124 di
ipv6 hoplimit-expires enable,221 domain-name,126 ds-lite address,127 ipv6 host,173 E ipv6 icmp-error,222 ipv6 icmpv6 multicast-echo-reply enable,223 expired,48 ipv6 nd autoconfig managed-address-flag,223 F ipv6 nd autoconfig other-flag,224 flow-classification enable,193 ipv6 nd dad attempts,224 forbidden-ip,49 ipv6 nd hop-limit,225 G ipv6 nd ns retrans-timer,225 ipv6 nd nud reachable-time,226 gateway-list,50 ipv6 nd ra halt,227 gratuitous-arp-learning enable,18 ipv6 nd ra interval,227 gra
P S prefix-pool,134 sip-server,138 R ssl client policy,168 static-bind address,139 reset arp,16 static-bind client-identifier,57 reset arp-snooping,21 static-bind ip-address,58 reset dhcp relay statistics,85 static-bind mac-address,59 reset dhcp server conflict,56 static-bind prefix,140 reset dhcp server ip-in-use,56 Subscription service,284 reset dhcp server statistics,57 reset dhcp-snooping,107 T reset dhcp-snooping packet statistics,107 tcp ipv6 timer fin-timeout,237 reset dns host,16
