HP FlexFabric 11900 Switch Series Network Management and Monitoring Command Reference Part number: 5998-5281 Software version: Release 2111 and later Document version: 6W100-20140110
Legal and notice information © Copyright 2014 Hewlett-Packard Development Company, L.P. No part of this documentation may be reproduced or transmitted in any form or by any means without prior written consent of Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Contents Ping, tracert, and system debugging commands······································································································· 1 debugging ································································································································································· 1 display debugging ··················································································································································· 2 ping ······
display diagnostic-logfile summary ····················································································································· 55 display info-center ················································································································································· 56 display logbuffer···················································································································································· 57 display logbuffer
snmp-agent calculate-password ························································································································· 107 snmp-agent community ······································································································································· 108 snmp-agent community-map ······························································································································· 110 snmp-agent context····················
filename ································································································································································ 179 frequency ······························································································································································ 180 history-record enable ·········································································································································· 181
nqa server tcp-connect ········································································································································ 223 nqa server udp-echo ··········································································································································· 224 Port mirroring commands ······································································································································· 226 display mirroring-g
monitor process ··················································································································································· 284 monitor thread ····················································································································································· 289 process core ························································································································································· 292 rese
Ping, tracert, and system debugging commands debugging Use debugging to enable debugging for a specific module. Use undo debugging to disable debugging for a specific module. Syntax debugging { all [ timeout time ] | module-name [ option ] } undo debugging { all | module-name [ option ] } Default Debugging functions are disabled for all modules. Views User view Predefined user roles network-admin mdc-admin Parameters all: Enables all debugging functions.
display debugging Use display debugging to display the enabled debugging functions. Syntax display debugging [ module-name ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters module-name: Specifies a module by its name. To display the current module name, use the display debugging ? command. Examples # Display all enabled debugging functions.
-a source-ip: Specifies an IP address of the device as the source IP address of ICMP echo requests. If this option is not specified, the source IP address of ICMP echo requests is the primary IP address of the outbound interface. -c count: Specifies the number of ICMP echo requests that are sent to the destination. The value range is 1 to 4294967295, and the default is 5. -f: Sets the DF bit in the IP header. -h ttl: Specifies the TTL value of ICMP echo requests.
Examples # Test whether the device with an IP address of 1.1.2.2 is reachable. ping 1.1.2.2 Ping 1.1.2.2 (1.1.2.2): 56 data bytes, press CTRL_C to break 56 bytes from 1.1.2.2: icmp_seq=0 ttl=254 time=2.137 ms 56 bytes from 1.1.2.2: icmp_seq=1 ttl=254 time=2.051 ms 56 bytes from 1.1.2.2: icmp_seq=2 ttl=254 time=1.996 ms 56 bytes from 1.1.2.2: icmp_seq=3 ttl=254 time=1.963 ms 56 bytes from 1.1.2.2: icmp_seq=4 ttl=254 time=1.991 ms --- Ping statistics for 1.1.2.
5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss round-trip min/avg/max/std-dev = 4.685/4.761/4.834/0.058 ms The output shows that: • The destination is reachable. • The route is 1.1.1.1 <-> {1.1.1.2; 1.1.2.1} <-> 1.1.2.2. Table 1 Command output Field Description Ping 1.1.2.2 (1.1.2.2): 56 data bytes, press CTRL_C to break Test whether the device with IP address 1.1.2.2 is reachable. There are 56 bytes in each ICMP echo request. Press Ctrl+C to abort the ping operation.
Parameters -a source-ipv6: Specifies an IPv6 address of the device as the source IP address of ICMP echo requests. If this option is not specified, the source IPv6 address of ICMP echo requests is the IPv6 address of the outbound interface. (The address selection rule is defined by RFC 3484.) -c count: Specifies the number of ICMPv6 echo requests that are sent to the destination. The value range is 1 to 4294967295, and the default is 5.
5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss round-trip min/avg/max/std-dev = 4.000/25.000/62.000/20.000 ms # Test whether the IPv6 address (2001::2) is reachable. Only the statistics are displayed. ping ipv6 –q 2001::2 Ping6(56 data bytes) 2001::1 --> 2001::2, press CTRL_C to break --- Ping6 statistics for 2001::2 --5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss round-trip min/avg/max/std-dev = 4.000/25.000/62.000/20.
Field Description round-trip min/avg/max/ std-dev =4.000/25.000/62.000/20.000 ms Minimum/average/maximum/standard deviation response time, in milliseconds. tracert Use tracert to trace the path the packets traverse from source to destination.
ICMP error message (this can be because the destination is unreachable or sending ICMP timeout/destination unreachable packets is disabled). To abort the tracert operation during the execution of the command, press Ctrl+C. Examples # Display the path that the packets traverse from source to destination (1.1.2.2). tracert 1.1.2.2 traceroute to 1.1.2.2(1.1.2.2), 30 hops at most, 40 bytes each packet, press CTRL_C to break 1 1.1.1.2 673 ms 425 ms 30 ms 2 1.1.2.
tracert ipv6 Use tracert ipv6 to display the path that the IPv6 packets traverse from source to destination. Syntax tracert ipv6 [ -f first-hop | -m max-hops | -p port | -q packet-number | -t traffic-class | -vpn-instance vpn-instance-name | -w timeout ] * host Views Any view Predefined user roles network-admin mdc-admin Parameters -f first-hop: Specifies the TTL value of the first packet. The value range is 1 to 255, and the default is 1. The value must be less than the value of the max-hops argument.
1 2001:1::2 0.661 ms 0.618 ms 0.579 ms 2 2001:2::2 0.861 ms 0.718 ms 0.679 ms 3 2001:3::2 0.822 ms 0.731 ms 0.708 ms Table 4 Command output Field Description traceroute to 2001:3::2 Display the route that the IPv6 packets traverse from the current device to the device whose IP address is 2001:3:2. hops at most Maximum number of hops of the probe packets, which can be set by the -m keyword. byte packets Number of bytes of a probe packet. 1 2001:1::2 0.661 ms 0.618 ms 0.
NTP commands The term "interface" in this chapter collectively refers to Layer 3 interfaces, including VLAN interfaces and Layer 3 Ethernet interfaces. You can set an Ethernet port as a Layer 3 interface by using the port link-mode route command (see Layer 2—LAN Switching Configuration Guide). display ntp-service ipv6 sessions Use display ntp-service ipv6 sessions to display information about all IPv6 NTP associations.
Table 5 Command output Field Description • 1—Clock source selected by the system (the current reference source). It has a system clock stratum level less than or equal to 15. [12345] Source • • • • 2—The stratum level of the clock source is less than or equal to 15. 3—The clock source has survived the clock selection algorithm. 4—The clock source is a candidate clock source. 5—The clock source was created by a command. IPv6 address of the NTP server.
Session ID: 36144 Clock stratum: 16 Clock status: configured, insane, valid, unsynced Reference clock ID: INIT VPN instance: Not specified Local mode: sym_active, local poll interval: 6 Peer mode: unspec, peer poll interval: 10 Offset: 0.0000ms, roundtrip delay: 0.0000ms, dispersion: 15937ms Root roundtrip delay: 0.0000ms, root dispersion: 0.0000ms Reachabilities:0, sync distance: 15.938 Precision: 2^10, version: 4, source interface: Not specified Reftime: 00000000.00000000 Thu, Feb 7 2036 6:28:16.
Field Description • If the reference clock is the local clock, the value of this field is related to the value of the Clock stratum field: { { Reference clock ID When the value of the Clock stratum field is 0 or 1, this field displays Local. When the Clock stratum field has another value, this field displays the MD5 digest value of the first 32 bits of the IPv6 address. The MD5 digest value is in dotted decimal format.
Field Description Reachabilities Reachability count of the clock source. 0 indicates that the clock source is unreachable. sync distance Synchronization distance relative to the upper-level clock, in seconds, and calculated from dispersion and roundtrip delay values. Precision Accuracy of the system clock. version NTP version in the range of 1 to 4. source interface Source interface. If the source interface is not specified, this field is Not specified.
Usage guidelines When a device is operating in NTP broadcast or multicast server mode, the display ntp-service sessions command does not display the IPv4 NTP association information corresponding to the broadcast or multicast server, but the associations are counted in the total number of associations. Examples # Display brief information about all IPv4 NTP associations.
Field Description Length of time from when the last NTP message was received or when the local clock was last updated to the current time. Time is in seconds by default. If the time length is greater than 2048 seconds, it is displayed in minutes. If greater than 300 minutes, in hours. If greater than 96 hours, in days; if greater than 999 days, in years.
Table 8 Command output Field Description Clock source IP address of the NTP server. If this field displays 0.0.0.0, the IP address of the NTP server has not been resolved successfully. Clock stratum Stratum level of the NTP server, which determines the clock accuracy. The value is in the range of 1 to 16. A lower stratum level represents greater clock accuracy. A stratum 16 clock is not synchronized and cannot be used as a reference clock.
Field Description Operation mode of the local device: Local mode local poll interval • • • • • • • unspec—The mode is unspecified. active—Active mode. passive—Passive mode. client—Client mode. server—Server mode. broadcast—Broadcast or multicast server mode. bclient—Broadcast or multicast client mode. Polling interval of the local device, in seconds. The value displayed is a power of 2. For example, if the displayed value is 6, the poll interval of the local device is 26, or 64 seconds.
Field Description Xmttime Transmit timestamp in the NTP message. Filter order Sample information order. Reference clock status Total sessions Status of the local clock. The field is displayed only when you use the ntp-service refclock-master command to set the local clock as a reference clock. When the reach field of the local clock is 255, the field is displayed as working normally. Otherwise, the field is displayed as working abnormally. Total number of associations.
Reference clock ID: none Clock jitter: 0.000000 s Stability: 0.000 pps Clock precision: 2^-10 Root delay: 0.00000 ms Root dispersion: 0.00002 ms Reference time: d0c5fc32.92c70b1e Wed, Dec 29 2010 18:28:02.573 Table 9 Command output Field Description Status of the system clock: Clock status • synchronized—The system clock has been synchronized. • unsynchronized—The system clock has not been synchronized. Clock stratum Stratum level of the system clock.
Field Description Alarming status: • 00—Normal. • 01—Leap second, indicates that the last minute in a day has 61 seconds. Leap indicator • 10—Leap second, indicates that the last minute in a day has 59 seconds. • 11—Time is not synchronized. Clock jitter Difference between the system clock and reference clock, in seconds. Stability Clock frequency stability. A lower value represents better stability. Clock precision Accuracy of the system clock.
The output shows that server 127.0.0.1 is synchronized to server 3000::32, and server 3000::32 is synchronized to the local clock. Table 10 Command output Field Description Server IP address of the NTP server. Stratum Stratum level of the NTP server. jitter Root mean square (RMS) value of the clock offset relative to the upper-level clock, in seconds. synch distance Synchronization distance relative to the upper-level NTP server, in seconds, calculated from dispersion and roundtrip delay values.
Usage guidelines You can control NTP access by using ACL. The access rights are in the following order, from least restrictive to most restrictive: peer, server, synchronization, and query. The device processes an NTP request by following these rules: • If no NTP access control is configured, peer is granted to the local device and peer devices.
Usage guidelines Enable NTP authentication in networks that require time synchronization security to make sure NTP clients are only synchronized to authenticated NTP servers. To authenticate an NTP server, set an authentication key and specify it as a trusted key. Examples # Enable NTP authentication.
After you specify an NTP authentication key, use the ntp-service reliable authentication-keyid command to configure the key as a trusted key. The key automatically changes to untrusted after you delete the key. In this case, you do not need to execute the undo ntp-service reliable authentication-keyid command. You can set up to 128 keys by executing the command. The authentication key, set in either plain text or cipher text, is saved to the configuration file in cipher text.
[Sysname-Vlan-interface1] ntp-service broadcast-client Related commands ntp-service broadcast-server ntp-service broadcast-server Use ntp-service broadcast-server to configure the device to operate in NTP broadcast server mode and use the current interface to send NTP broadcast packets. Use undo ntp-service broadcast-server to remove the configuration.
ntp-service dscp Use ntp-server dscp to set a DSCP value for IPv4 NTP packets. Use undo ntp-server dscp to restore the default. Syntax ntp-service dscp dscp-value undo ntp-service dscp Default The DSCP value for IPv4 NTP packets is 48. Views System view Predefined user roles network-admin mdc-admin Parameters dscp-value: Sets a DSCP value in the range of 0 to 63 for IPv4 NTP packets. Usage guidelines The DSCP value is included in the ToS field of an IPv4 packet to identify the packet priority.
Examples # Enable the NTP service. system-view [Sysname] ntp-service enable ntp-service inbound disable Use ntp-service inbound disable to disable an interface from processing NTP messages. Use undo ntp-service inbound disable to restore the default. Syntax ntp-service inbound disable undo ntp-service inbound disable Default An interface processes NTP messages.
Views System view Predefined user roes network-admin mdc-admin Parameters peer: Allows time requests and NTP control queries (such as alarms, authentication status, and time server information) and allows the local device to synchronize itself to a peer device. query: Allows only NTP control queries from a peer device to the local device. server: Allows time requests and NTP control queries, but does not allow the local device to synchronize itself to a peer device.
Use undo ntp-server ipv6 dscp to restore the default. Syntax ntp-service ipv6 dscp dscp-value undo ntp-service ipv6 dscp Default The DSCP value for IPv6 NTP packets is 56. Views System view Predefined user roles network-admin mdc-admin Parameters dscp-value: Specifies a DSCP value in the range of 0 to 63 for IPv6 NTP packets. Usage guidelines The DSCP value is included in the Traffic Class field of an IPv6 packet to identify the packet priority.
Examples # Disable VLAN-interface 1 from processing IPv6 NTP messages. system-view [Sysname] interface vlan-interface 1 [Sysname-Vlan-interface1] ntp-service ipv6 inbound disable ntp-service ipv6 multicast-client Use ntp-service ipv6 multicast-client to configure the device to operate in IPv6 NTP multicast client mode and use the current interface to receive IPv6 NTP multicast packets. Use undo ntp-service ipv6 multicast-client to remove the configuration.
ntp-service ipv6 multicast-server Use ntp-service ipv6 multicast-server to configure the device to operate in IPv6 NTP multicast server mode and use the current interface to send IPv6 NTP multicast packets. Use undo ntp-service ipv6 multicast-server to remove the configuration.
Use undo ntp-service ipv6 source to restore the default. Syntax ntp-service ipv6 source interface-type interface-number undo ntp-service ipv6 source Default No source interface is specified for IPv6 NTP messages. The device automatically selects the source IP address for IPv6 NTP messages. For more information, see RFC 3484. Views System view Predefined user roles network-admin mdc-admin Parameters interface-type interface-number: Specifies an interface by its type and number.
undo ntp-service ipv6 unicast-peer { peer-name | ipv6-address } [ vpn-instance vpn-instance-name ] Default No IPv6 symmetric-passive peer is specified for the device. Views System view Predefined user roles network-admin mdc-admin Parameters peer-name: Specifies the host name of the symmetric-passive peer, a case-insensitive string of 1 to 253 characters. ipv6-address: Specifies the IPv6 address of the symmetric-passive peer. It must be a unicast address, rather than a multicast address.
[Sysname] ntp-service ipv6 unicast-peer 2001::1 source vlan-interface 1 Related commands • ntp-service authentication enable • ntp-service authentication-keyid • ntp-service reliable authentication-keyid ntp-service ipv6 unicast-server Use ntp-service ipv6 unicast-server to specify an IPv6 NTP server for the device. Use undo ntp-service ipv6 unicast-server to remove an IPv6 NTP server specified for the device.
Usage guidelines When you specify an IPv6 NTP server for the device, the device is synchronized to the IPv6 NTP server, but the IPv6 NTP server is not synchronized to the device. To synchronize the PE to a PE or CE in a VPN, specify the vpn-instance vpn-instance-name option in the command. If you include the vpn-instance vpn-instance-name option in the undo ntp-service unicast-server command, the command removes the NTP server with the IP address of ip-address in the specified VPN.
Usage guidelines A single device can have a maximum of 128 concurrent associations, including static associations and dynamic associations. A static association refers to an association that a user has manually created by using an NTP command, while a dynamic association is a temporary association created by the system during operation. Examples # Set the maximum number of dynamic NTP associations allowed to be established to 50.
[Sysname-Vlan-interface1] ntp-service multicast-client 224.0.1.1 Related commands ntp-service multicast-server ntp-service multicast-server Use ntp-service multicast-server to configure the device to operate in NTP multicast server mode and use the current interface to send NTP multicast packets. Use undo ntp-service multicast-server to remove the configuration.
[Sysname] interface vlan-interface 1 [Sysname-Vlan-interface1] ntp-service multicast-server 224.0.1.1 version 4 authentication-keyid 4 Related commands ntp-service multicast-client ntp-service refclock-master Use ntp-service refclock-master to configure the local clock as a reference source for other devices. Use undo ntp-service refclock-master to remove the configuration.
ntp-service reliable authentication-keyid Use ntp-service reliable authentication-keyid to specify the created authentication key as a trusted key. Use undo ntp-service reliable authentication-keyid to remove the configuration. Syntax ntp-service reliable authentication-keyid keyid undo ntp-service reliable authentication-keyid keyid Default No trust key is specified.
Syntax ntp-service source interface-type interface-number undo ntp-service source Default No source interface is specified for NTP messages. The device searches the routing table for the outbound interface of NTP messages, and uses the primary IP address of the outbound interface as the source IP address for NTP messages. Views System view Predefined user roles network-admin mdc-admin Parameters interface-type interface-number: Specifies an interface by its type and number.
Syntax ntp-service unicast-peer { peer-name | ip-address } [ vpn-instance vpn-instance-name ] [ authentication-keyid keyid | priority | source interface-type interface-number | version number ] * undo ntp-service unicast-peer { peer-name | ip-address } [ vpn-instance vpn-instance-name ] Default No symmetric-passive peer is specified for the device.
system-view [Sysname] ntp-service unicast-peer 10.1.1.1 version 4 source-interface vlan-interface 1 Related commands • ntp-service authentication enable • ntp-service authentication-keyid • ntp-service reliable authentication-keyid ntp-service unicast-server Use ntp-service unicast-server to specify an NTP server for the device. Use undo ntp-service unicast-server to remove an NTP server specified for the device.
Usage guidelines When you specify an NTP server for the device, the device is synchronized to the NTP server, but the NTP server is not synchronized to the device. To synchronize the PE to a PE or CE in a VPN, provide vpn-instance vpn-instance-name in your command. If you include the vpn-instance vpn-instance-name option in the undo ntp-service unicast-server command, the command removes the NTP server with the IP address of ip-address in the specified VPN.
SNTP commands display sntp ipv6 sessions Use display sntp ipv6 sessions to display information about all IPv6 SNTP associations. Syntax display sntp ipv6 sessions Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display information about all IPv6 SNTP associations. display sntp ipv6 sessions SNTP server: 2001::1 Stratum: 16 Version: 4 Last receive time: No packet was received.
display sntp sessions Use display sntp sessions to display information about all SNTP associations. Syntax display sntp sessions Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display information about all SNTP associations. display sntp sessions SNTP server Stratum Version Last receive time 1.0.1.11 2 4 Tue, May 17 2011 9:11:20.833 (Synced) Table 12 Command output Field Description SNTP server SNTP server (NTP server).
Predefined user roles network-admin mdc-admin Usage guidelines You need to enable SNTP authentication in networks that require time synchronization security to make sure SNTP clients are only synchronized to authenticated NTP servers. To authenticate an NTP server, set an authentication key and specify it as a trusted key. Examples # Enable SNTP authentication.
Usage guidelines You need to enable SNTP authentication in networks that require time synchronization security to make sure SNTP clients are only synchronized to authenticated NTP servers. Configure the same key ID and key value on the SNTP client and NTP server. Otherwise, the SNTP client cannot be synchronized to the NTP server. After you configure an SNTP authentication key, use the sntp reliable authentication-keyid command to set it as a trusted key.
sntp ipv6 unicast-server Use sntp ipv6 unicast-server to specify an IPv6 NTP server for the device. Use undo sntp ipv6 unicast-server to remove the IPv6 NTP server specified for the device.
If the specified IPv6 address of the NTP server is a link local address, you must specify the source interface for NTP messages and cannot specify a VPN for the NTP server. Examples # Specify the IPv6 NTP server 2001::1 for the device.
Related commands • sntp authentication-keyid • sntp authentication enable sntp unicast-server Use sntp unicast-server to specify an NTP server for the device. Use undo sntp unicast-server to remove the NTP server.
If you do not include the vpn-instance vpn-instance-name option in this command, the command removes the NTP server with the IP address of ip-address in the public network. Examples # Specify NTP server 10.1.1.1 for the device, and configure the device to run NTP version 4. system-view [Sysname] sntp unicast-server 10.1.1.
Information center commands diagnostic-logfile save Use diagnostic-logfile save to manually save diagnostic logs from the diagnostic log buffer to the diagnostic log file. Syntax diagnostic-logfile save Views Any view Predefined user roles network-admin mdc-admin Usage guidelines You can specify the directory to save the diagnostic log file with the info-center diagnostic-logfile directory command.
mdc-admin mdc-operator Examples # Display the diagnostic log file configuration. display diagnostic-logfile summary Diagnostic log file: Enabled. Diagnostic log file size quota: 10 MB Diagnostic log file directory: flash:/diagfile Writing frequency: 24 hour 0 min 0 sec Table 13 Command output Field Description • Enabled—Diagnostic logs can be output to the diagnostic log Diagnostic log file file. • Disabled—Diagnostic logs cannot be output to the diagnostic log file.
Max buffer size 1024, current buffer size 512, Current messages 0, dropped messages 0, overwritten messages 0 Log file: Enabled Security log file: Enabled Information timestamp format: Loghost: Date Other output destination: Date display logbuffer Use display logbuffer to display the state of the log buffer and the log information in the log buffer.
Severity value Level Description Corresponding keyword in commands 4 Warning Warning condition. For example, an interface is disconnected, or the memory resources are used up. warning 5 Notification Normal but significant condition. For example, a terminal logs in to the device, or the device reboots. notification 6 Informationa l Informational message. For example, a command or a ping operation is executed. informational 7 Debug Debugging message.
Field Description Actual buffer size Actual number of logs that can be stored in the log buffer. (This value is specified with the info-center logbuffer size command.) Dropped messages Number of dropped messages. Overwritten messages Number of overwritten messages. Current messages Number of current messages. Related commands • info-center logbuffer • reset logbuffer display logbuffer summary Use display logbuffer summary to display the summary of the log buffer.
2 0 0 0 0 0 0 0 0 3 0 0 0 0 0 0 0 0 4 0 0 0 0 0 0 0 0 5 0 0 0 0 0 0 0 0 6 0 0 0 0 0 0 0 0 7 0 0 0 0 0 0 0 0 8 0 0 0 0 0 0 0 0 9 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 0 11 0 0 0 0 0 0 0 0 12 0 0 0 0 0 0 0 0 13 0 0 0 0 0 0 0 0 14 0 0 0 0 0 0 0 0 15 0 0 0 0 0 0 0 0 16 0 0 0 0 0 0 0 0 17 0 0 111 87 2 48 264 0 # (In IRF mode.) Display the summary of the log buffer.
Field Description WARN Represents warning. For more information, see 0. NOTIF Represents notification. For more information, see 0. INFO Represents informational. For more information, see 0. DEBUG Represents debug. For more information, see 0. display logfile summary Use display logfile summary to display the log file configuration.
Views Any view Predefined user roles security-audit Usage guidelines A local user can use this command only after being authorized as the security log administrator by the system administrator through the authorization-attribute user-role security-audit command. For more information about security log administrator, see Security Configuration Guide. Examples # Display the summary of the security log file.
Views Interface view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Disable port Ten-GigabitEthernet1/0/1 from generating link up or link down logs. system-view [Sysname] interface ten-gigabitethernet 1/0/1 [Sysname-Ten-GigabitEthernet1/0/1] undo enable log updown info-center diagnostic-logfile enable Use info-center diagnostic-logfile enable to enable saving diagnostic logs into the diagnostic log file.
Use undo info-center diagnostic-logfile frequency to restore the default saving interval. Syntax info-center diagnostic-logfile frequency freq-sec undo info-center diagnostic-logfile frequency Default The default saving interval is 86400 seconds. Views System view Predefined user roles network-admin mdc-admin Parameters freq-sec: Specifies the interval at which the system saves diagnostic logs from the diagnostic log file buffer to the diagnostic log file, in seconds.
Parameters size: Specifies the maximum size of the diagnostic log file, in the range of 1 to 10 MB. Examples # Set the maximum size of the diagnostic log file to 6 MB. system-view [Sysname] info-center diagnostic-logfile quota 6 info-center diagnostic-logfile directory Use info-center diagnostic-logfile directory to configure the directory to save the diagnostic log file.
Syntax info-center logfile overwrite-protection [ all-port-powerdown ] undo info-center logfile overwrite-protection Default Logfile overwrite-protection is disabled. Views System view Predefined user roles network-admin mdc-admin Parameters all-port-powerdown: Shuts down all the physical ports except for the management port and IRF ports when the log file is full or the storage device runs out of space. Usage guidelines This command is supported only in FIPS mode.
Examples # Enable the information center. system-view [Sysname] info-center enable Information center is enabled. info-center format Use info-center format to set the format of logs sent to a log host. Use undo info-center format to restore the default. Syntax info-center format { unicom | cmcc } undo info-center format Default Logs are sent to a log host in HP format. Views System view Predefined user roles network-admin mdc-admin Parameters unicom: Specifies the unicom format.
Default Logs are allowed to be output to the log buffer. Views System view Predefined user roles network-admin mdc-admin Examples # Configure output of log information to the log buffer. system-view [Sysname] info-center logbuffer Related commands • display logbuffer • info-center enable info-center logbuffer size Use info-center logbuffer size to set the maximum number of logs that can be stored in the log buffer. Use undo info-center logbuffer size to restore the default.
Related commands • display logbuffer • info-center enable info-center logfile enable Use info-center logfile enable to enable the log file feature. Use undo info-center logfile enable to disable the log file feature. Syntax info-center logfile enable undo info-center logfile enable Default The log file feature is enabled. Views System view Predefined user roles network-admin mdc-admin Examples # Enable the output of logs to a log file.
Parameters freq-sec: Specifies the interval at which the system saves logs to the log file, in the range of 1 to 86400 seconds. The default setting is 86400 seconds. Usage guidelines With this command executed, the system saves logs in the log file buffer to the log file at the specified interval. Examples # Set the interval for saving logs to the log file to 60000 seconds.
info-center logfile directory Use info-center logfile directory to configure the directory where the log file is saved. Syntax info-center logfile directory dir-name Default The log file is saved in the flash:/logfile directory. Views System view Predefined user roles network-admin mdc-admin Parameters dir-name: Specifies a directory by its name, a string of 1 to 64 characters. Usage guidelines The specified directory must have been created. The suffix of a log file is .log.
Default Duplicate log suppression is disabled. Views System view Predefined user roles network-admin mdc-admin Usage guidelines Outputting consecutive duplicate logs at an interval of less than 30 seconds wastes system and network resources. With this feature enabled, the system starts a suppression period when outputting a new log: • During the suppression period, the system does not output logs with the same module name, level, mnemonic, location, and text as the previous log.
%Jan 1 07:30:19:542 2000 Sysname CFGMAN/5/CFGMAN_CFGCHANGED: -EventIndex=[12]-CommandSource=[2]-ConfigSource=[4]-ConfigDestination=[2]; Configuration is changed. The output shows that a different log is generated during the suppression period. %Jan 1 07:30:24:643 2000 Sysname ARP/6/DUPIFIP: Duplicate address 172.16.0.1 on interface Vlan-interface100, sourced from 00e0-fc58-123d %Jan 1 07:30:55:645 2000 Sysname ARP/6/DUPIFIP: Duplicate address 172.16.0.
Examples # Output logs to the log host 1.1.1.1. system-view [Sysname] info-center loghost 1.1.1.1 info-center loghost source Use info-center loghost source to specify the source IP address for output logs. Use undo info-center loghost source to restore the default. Syntax info-center loghost source interface-type interface-number undo info-center loghost source Default The source IP address of output logs is the primary IP address of the matching route's egress interface.
undo info-center security-logfile alarm-threshold Default The alarm threshold for security log file usage is 80. When the usage of the security log file reaches 80%, the system outputs a message to inform the administrator. Views System view Predefined user roles network-admin mdc-admin Parameters usage: Specifies an alarm threshold. The value must be an integer in the range of 1 to 100.
Usage guidelines This feature enables the system to output security logs into the security log file buffer, and saves the logs from the buffer to the security log file at a specific interval. Examples # Enable saving security logs into the security log file. system-view [Sysname] info-center security-logfile enable info-center security-logfile frequency Use info-center security-logfile frequency to configure the interval for saving security logs to the security log file.
Syntax info-center security-logfile size-quota size undo info-center security-logfile size-quota Default The maximum size of the security log file is 10 MB. Views System view Predefined user roles network-admin mdc-admin Parameters size: Specifies the maximum size of the security log file, in the range of 1 to 10 MB. Examples # Set the maximum size for the security log file to 6 MB.
(In IRF mode.) The configuration made by this command cannot survive an IRF reboot or a global active/standby switchover in an IRF fabric. Examples # Set the directory to save the security log file as flash:/test. mkdir test Creating directory flash:/test... Done. system-view [Sysname] info-center security-logfile directory flash:/test info-center source Use info-center source to configure a log output rule for a module. Use undo info-center source to restore the default.
Parameters module-name: Specifies a module by its name. For instance, to output FTP information, specify this argument as FTP. You can use the info-center source ? command to view the modules supported by the device. default: Specifies all modules, which can be displayed by using the info-center source ? command. console: Outputs logs to the console. logbuffer: Outputs logs to the log buffer. logfile: Outputs logs to a log file. loghost: Outputs logs to the log host.
Default Synchronous information output is disabled. Views System view Predefined user roles network-admin mdc-admin Usage guidelines The system log output interrupts ongoing configuration operations, obscuring previously input commands before the logs. Synchronous information output can show the previous input after log output. It also privodes a command prompt in command editing mode, or a [Y/N] string in interaction mode so you can continue your operation from where you were stopped.
Syntax info-center timestamp { boot | date | none } undo info-center timestamp Default The timestamp format for logs sent to the console, monitor terminal, log buffer, and log file is date. Views System view Predefined user roles network-admin mdc-admin Parameters boot: Sets the timestamp format as xxx.yyy, where xxx is the most significant 32 bits (in milliseconds) and yyy is the least significant 32 bits. For example, 0.21990989 equals Jun 25 14:09:26:881 2007.
Views System view Predefined user roles network-admin mdc-admin Parameters date: Sets the timestamp format as "mmm dd hh:mm:ss yyyy". Such as Dec 8 10:12:21 2007. The date time shows the current system time. iso: Sets the ISO 8601 timestamp format, for example, 2009-09-21T15:32:55. no-year-date: Sets the timestamp format as the current system date and time without year. none: Indicates that no timestamp information is provided.
logfile save Use logfile save to manually save logs in the log file buffer into the log file. Syntax logfile save Views Any view Predefined user roles 2: System level Usage guidelines You can specify the directory to save the log file with the info-center logfile directory command. The system clears the log file buffer after saving logs from the buffer to the log file automatically or manually. Examples # Manually save logs from the log file buffer into the log file.
security-logfile save Use security-logfile save to manually save security logs from the security log file buffer into the security log file. Syntax security-logfile save Views Any view Predefined user roles security-audit Usage guidelines The system clears the security log file buffer after saving security logs into the security log file automatically or manually. A local user can use this command only after being authorized as the security log administrator by the system administrator.
Usage guidelines To view the debug information on the console, execute the terminal debugging command, enable the information center (enabled by default), and use a debugging command to enable the related debugging. To view debug information on the current terminal, execute the terminal monitor and terminal debugging commands, enable the information center (enabled by default), and use a debugging command to enable the related debugging.
The configuration of this command is valid for only the current connection between the terminal and the device. If a new connection is established, the display of logs on the terminal restores the default. Examples # Set the lowest level of the logs that can be output on the monitor terminal to 7 (Debugging). terminal logging level 7 terminal monitor Use terminal monitor to enable the monitoring of logs on the current terminal.
SNMP commands The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about FIPS mode, see Security Configuration Guide. The SNMP agent sends notifications (traps and informs) to inform the NMS of significant events, such as link state changes and user logins or logouts. Unless otherwise stated, the trap keyword in the command line includes both traps and informs.
Community name: bb Group name: bb Storage-type: nonVolatile Community name: userv1 Group name: testv1 Storage-type: nonVolatile Table 20 Command output Field Description Community name Displays the community name created by using the snmp-agent community command or the username created by using the snmp-agent usm-user { v1 | v2c } command. SNMP group name. Group name • If the community is created by using the snmp-agent community command, the group name is the same as the community name.
Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters context-name: Specifies an SNMP context by its name, a case-sensitive string of 1 to 32 characters. If no SNMP context is specified, the command displays all SNMP contexts created on the device. Examples # Display all SNMP contexts created on the device.
Writeview: Notifyview: Storage-type: nonVolatile Table 21 Command output Field Description Group name SNMP group name. Security model of the SNMP group: Security model • authPriv—authentication with privacy. • authNoPriv—authentication without privacy. • noAuthNoPriv—no authentication, no privacy. Security model of an SNMPv1 or SNMPv2c group can only be noAuthNoPriv. Readview Read-only MIB view accessible to the SNMP group.
SNMP local engine ID: 800007DB7F0000013859 Related commands snmp-agent local-engineid display snmp-agent mib-node Use display snmp-agent mib-node to display SNMP MIB node information. Syntax display snmp-agent mib-node [ details | index-node | trap-node | verbose ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters details: Specifies detailed MIB node information, including node name, last octet of an OID string, and name of the next leaf node.
|-lldpObjects<1.0.8802.1.1.2.1>(NA) |-lldpConfiguration<1.0.8802.1.1.2.1.1>(NA) |-*lldpMessageTxInterval<1.0.8802.1.1.2.1.1.1>(RW) |-*lldpMessageTxHoldMultiplier<1.0.8802.1.1.2.1.1.2>(RW) |-*lldpReinitDelay<1.0.8802.1.1.2.1.1.3>(RW) Table 22 Command output Field Description -std MIB node name. <1.0> OID of a MIB node. Permissions to MIB nodes: NA—Not accessible. NF—Supports notifications. (NA) RO—Supports read-only access. RW—Supports read and write access. RC—Supports read-write-create access.
Table 23 Command output Field Description -std MIB node name. (0) Last bit of a MIB OID string. (lldpMessageTxInterval) Name of a leaf node. * Leaf node or MIB table node. # Display MIB table names, and node names and OIDs of MIB index nodes. display snmp-agent mib-node index-node Table |lldpPortConfigTable Index ||lldpPortConfigPortNum OID ||| Table Index 1.0.8802.1.1.2.1.1.6.1.1 |lldpConfigManAddrTable ||lldpLocManAddrSubtype OID ||| Index ||lldpLocManAddr 1.0.8802.1.1.2.
Name |||lldpStatsRemTablesDeletes OID ||||1.0.8802.1.1.2.1.2.3 Name |||lldpStatsRemTablesDrops OID ||||1.0.8802.1.1.2.1.2.4 Name |||lldpStatsRemTablesAgeouts OID ||||1.0.8802.1.1.2.1.2.5 Name |lldpXMedTopologyChangeDetected OID ||1.0.8802.1.1.2.1.5.4795.0.1 Trap Object Name |||lldpRemChassisIdSubtype OID ||||1.0.8802.1.1.2.1.4.1.1.4 Name |||lldpRemChassisId OID ||||1.0.8802.1.1.2.1.4.1.1.5 Name |||lldpXMedRemDeviceClass OID ||||1.0.8802.1.1.2.1.5.4795.1.3.1.1.
Name |lldpPortConfigTable OID ||1.0.8802.1.1.2.1.1.6 Properties ||NodeType: Table ||AccessType: NA ||DataType: NA ||MOR: 0x00000000 Parent ||lldpConfiguration First child ||lldpPortConfigEntry Next leaf ||lldpPortConfigPortNum Next sibling ||lldpConfigManAddrTable Name |lldpPortConfigEntry OID ||1.0.8802.1.1.2.1.1.6.
Index ||[indexImplied:0, indexLength:1]: Value range || || ['txOnly', 1] || ['rxOnly', 2] || ['txAndRx', 3] || ['disabled', 4] Table 26 Command output Field Description Name MIB node name. OID OID of a MIB node. MIB node types: NodeType • • • • • • • Table—Table node. Row—Row node in a MIB table. Column—Column node in a MIB table. Leaf—Leaf node. Group—Group node (parent node of a leaf node). Trapnode—Notification node. Other—Other node types.
Field Description Parent Name of a parent node. First child Name of the first leaf node. Next leaf Name of the next leaf node. Next sibling Name of the next sibling node. Operation types allowed: • • • • Allow get/set/getnext—All operations. get—Get operation. set—Set operation. getnext—GetNext operation. Value range Value range of a MIB node. Index Table index. This field appears only for a table node. display snmp-agent mib-view Use display snmp-agent mib-view to display MIB views.
Subtree mask: Storage-type: nonVolatile View Type: included View status: active View name: ViewDefault MIB Subtree: snmpUsmMIB Subtree mask: Storage-type: nonVolatile View Type: excluded View status: active View name: ViewDefault MIB Subtree: snmpVacmMIB Subtree mask: Storage-type: nonVolatile View Type: excluded View status: active View name: ViewDefault MIB Subtree: snmpModules.18 Subtree mask: Storage-type: nonVolatile View Type: excluded View status: active ViewDefault is the default MIB view.
display snmp-agent remote Use display snmp-agent remote to display remote SNMP engine IDs configured by using the snmp-agent remote command. Syntax display snmp-agent remote [ ip-address [ vpn-instance vpn-instance-name ] | ipv6 ipv6-address [ vpn-instance vpn-instance-name ] ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters ip-address: Specifies the IP address of a remote SNMP entity to display its SNMP engine ID.
Related commands snmp-agent remote display snmp-agent statistics Use display snmp-agent statistics to display SNMP message statistics. Syntax display snmp-agent statistics Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display SNMP message statistics. display snmp-agent statistics 1684 messages delivered to the SNMP entity. 5 messages were for an unsupported version. 0 messages used an unknown SNMP community name.
Field Description messages were for an unsupported version Number of messages that had an SNMP version not configured on the SNMP agent. messages used an unknown SNMP community name Number of messages that used an unknown SNMP community name. messages represented an illegal operation for the community supplied Number of messages carrying an operation that the community has no right to perform. ASN.1 or BER errors in the process of decoding Number of messages that had ASN.
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters contact: Displays the system contact. location: Displays the physical location of the device. version: Displays the SNMP agent version. Usage guidelines If none of the parameters is specified, this command displays all SNMP agent system information. Examples # Display all SNMP agent system information.
Examples # Display the trap queue configuration and usage status. display snmp-agent trap queue Queue size: 100 Message number: 6 Related commands • snmp-agent trap life • snmp-agent trap queue-size display snmp-agent trap-list Use display snmp-agent trap-list to display modules that can generate SNMP notifications and their notification function status (enable or disable).
Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters engineid engineid: Displays SNMPv3 user information for the SNMP engine ID identified by engineid. When an SNMPv3 user is created, the system records the local SNMP entity engine ID. The user becomes invalid when the engine ID changes and becomes valid again when the recorded engine ID is restored. group group-name: Displays SNMPv3 user information for a specified SNMP group name.
Field Description Storage type: Storage-type • • • • • volatile. nonvolatile. permanent. readOnly. other. For more information about these storage types, see Table 20. SNMP user status: UserStatus • • • • active—The SNMP user is effective. notInService—The SNMP user is correctly configured but not activated. notReady—The SNMP user configuration is incomplete. other—Any other status. SNMP users are active upon their creation at the CLI.
Usage guidelines For an interface to generate linkUp/linkDown notifications when its state changes, you must also enable the linkUp/linkDown notification function globally using the snmp-agent trap enable standard [ linkdown | linkup ] * command. Examples # Enable port Ten-GigabitEthernet 1/0/1 to send linkUp/linkDown SNMP traps to 10.1.1.1 in the community public. system-view [Sysname] snmp-agent trap enable [Sysname] snmp-agent target-host trap address udp-domain 10.1.1.
snmp-agent calculate-password Use snmp-agent calculate-password to convert a plaintext key to a ciphertext key for authentication or encryption in SNMPv3.
The encrypted key is: 09659EC5A9AE91BA189E5845E1DDE0CC Related commands • snmp-agent local-engineid • snmp-agent usm-user v3 snmp-agent community Use snmp-agent community to configure an SNMP community. Use undo snmp-agent community to delete an SNMP community.
acl ipv6 ipv6-acl-number: Specifies a basic IPv6 ACL to filter NMSs by source IPv6 address. The ipv6-acl-number argument represents an ACL number in the range of 2000 to 2999. In the specified community, only NMSs with an IPv6 address permitted in the IPv6 ACL can access the SNMP agent. If no ACL is specified, the specified ACL does not exist, or the specified ACL does not have any rules, all NMSs in the SNMP community can access the SNMP agent.
snmp-agent community-map Use snmp-agent community-map to map an SNMP community to an SNMP context. Use undo snmp-agent community-map to delete the mapping between an SNMP community and an SNMP context. Syntax snmp-agent community-map community-name context context-name undo snmp-agent community-map community-name context context-name Default No mapping between an SNMP community and an SNMP context exists on the device.
Views System view Predefined use roles network-admin mdc-admin Parameters context-name: Specifies an SNMP context, a case-sensitive string of 1 to 32 characters. Usage guidelines An NMS and an SNMP agent can communicate with each other, if the following conditions exist: • No SNMP context is configured on the NMS and the SNMP agent. • The NMS and the SNMP agent use the same SNMP context. Otherwise, a timeout message appears, indicating a communication failure between the NMS and SNMP agent.
Default No SNMP group exists. SNMPv3 groups use the no authentication, no privacy security model if neither authentication nor privacy is specified. Views System view Predefined use roles network-admin mdc-admin Parameters v1: Specifies SNMPv1. v2c: Specifies SNMPv2c. v3: Specifies SNMPv3. group-name: Specifies an SNMP group name, a string of 1 to 32 case-sensitive characters. authentication: Specifies the authentication without privacy security model for the SNMPv3 group.
All SNMPv3 users in a group share the same security model, but can use different authentication and privacy key settings. To implement a security model for a user and avoid SNMP communication failures, make sure the security model configuration for the group and the security key settings for the user are compliant with Table 31 and match the settings on the NMS.
Predefined user roles network-admin mdc-admin Parameters engineid: Specifies an SNMP engine ID as a hexadecimal string. It must comprise an even number of hexadecimal characters, in the range of 10 to 64. All-zero and all-F strings are invalid. Usage guidelines An SNMP engine ID uniquely identifies an SNMP entity in an SNMP managed network. Make sure the local SNMP engine ID is unique within your SNMP managed network to avoid communication problems.
Usage guidelines Use SNMP logging to record the SNMP operations performed on the SNMP agent for auditing NMS behaviors. The SNMP agent sends log data to the information center. You can configure the information center to output the data to a specific destination as needed. Examples # Enable logging SNMP Get operations. system-view [Sysname] snmp-agent log get-operation # Enable logging SNMP Set operations.
Each view-name oid-tree pair represents a view record. If you specify the same record with different MIB subtree masks multiple times, the most recent configuration takes effect. The system can store entries for up to 20 unique MIB view records. In addition to the four default MIB view records, you can create up to 16 unique MIB view records. After you delete the default view with the undo snmp-agent mib-view command, you can create up to 20 unique MIB view records.
Examples # Set the maximum SNMP packet size to 1024 bytes. system-view [Sysname] snmp-agent packet max-size 1024 snmp-agent port Use snmp-agent port to specify the UDP port for receiving SNMP packets. Use undo snmp-agent port to restore the default. Syntax snmp-agent port port-num undo snmp-agent port Default The device uses UDP port 161 for receiving SNMP packets.
Syntax snmp-agent remote { ip-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ] engineid engineid undo snmp-agent remote ip-address Default No remote SNMP engine ID has been configured. Views System view Predefined user roles network-admin mdc-admin Parameters ip-address: Specifies the IP address of a remote SNMP entity. ipv6 ipv6-address: Specifies the IPv6 address of a remote SNMP entity. vpn-instance vpn-instance-name: Specifies the VPN for a remote SNMP entity.
Default The SNMP agent uses the IP address of the outgoing routed interface as the source IP address of notifications. Views System view Predefined user roles network-admin mdc-admin Parameters inform: Specifies informs. trap: Specifies traps. interface-type interface-number: Specifies an interface by its type and number.
Default The default is null. Views System view Predefined user roles network-admin mdc-admin Parameters sys-contact: Specifies the system contact, a string of 1 to 255 characters. Usage guidelines Configure the system contact for system maintenance and management. Examples # Configure the system contact as Dial System Operator # 27345.
system-view [Sysname] snmp-agent sys-info location Room524-row1-3 Related commands display snmp-agent sys-info snmp-agent sys-info version Use snmp-agent sys-info version to enable SNMP versions. Use undo snmp-agent sys-info version to disable SNMP versions.
snmp-agent target-host Use snmp-agent target-host to configure the SNMP agent to send SNMP notifications (informs or traps) to a host. Use undo snmp-agent target-host to remove an SNMP notification target host.
vpn-instance vpn-instance-name: Specifies the VPN for the target host. The vpn-instance-name argument specifies the name of the MPLS L3VPN, a case-sensitive string of 1 to 31 characters. If this parameter is not specified, the target host is in public network. params securityname security-string: Specifies the authentication parameter. The security-string argument specifies an SNMPv1 or SNMPv2c community name or an SNMPv3 username, a string of 1 to 32 characters. v1: Specifies SNMPv1.
Default SNMP configuration notifications, standard notifications, and system notifications are enabled. Whether other SNMP notifications are enabled varies by modules. Views System view Predefined user roles network-admin mdc-admin Parameters configuration: Specifies configuration notifications. If configuration notifications are enabled, the system checks the running configuration and the startup configuration every 10 minutes for any change and generates a notification for the most recent change.
Related commands snmp-agent target-host snmp-agent trap if-mib link extended Use snmp-agent trap if-mib link extended to configure the SNMP agent to send extended linkUp/linkDown notifications. Use undo snmp-agent trap if-mib link extended to restore the default. Syntax snmp-agent trap if-mib link extended undo snmp-agent trap if-mib link extended Default The SNMP agent sends standard linkUp/linkDown notifications.
Predefined user roles network-admin mdc-admin Parameters seconds: Sets a lifetime in seconds, in the range of 1 to 2592000. Usage guidelines When congestion occurs, the SNMP agent buffers notifications in a queue. The notification lifetime sets how long a notification can stay in the queue. A trap is deleted when its lifetime expires. Examples # Set the SNMP notification lifetime to 60 seconds.
snmp-agent trap queue-size Use snmp-agent trap queue-size to set the SNMP notification queue size. Use undo snmp-agent trap queue-size to restore the default queue size. Syntax snmp-agent trap queue-size size undo snmp-agent trap queue-size Default The SNMP notification queue can store up to 100 notifications. Views System view Predefined user roles network-admin mdc-admin Parameters size: Sets the maximum number of notifications that the SNMP notification queue can hold. The value range is 1 to 1000.
Default No SNMP users have been configured. Views System view Predefined user roles network-admin mdc-admin Parameters v1: Specifies SNMPv1. v2c: Specifies SNMPv2c. user-name: Specifies an SNMP username, a case-sensitive string of 1 to 32 characters. group-name: Specifies an SNMPv1 or SNMPv2c group name, a case-sensitive string of 1 to 32 characters. The group can be one that has been created or not. If the group has not been created, the user takes effect after you create the group.
# Add the user userv2c in the SNMPv2c group readCom so only the NMS at 1.1.1.1 can use the protocol SNMPv2c and read-only community name userv2c to access the device. system-view [Sysname] acl number 2001 [Sysname-acl-basic-2001] rule permit source 1.1.1.1 0.0.0.
group-name: Specifies an SNMPv3 group name, a case-sensitive string of 1 to 32 characters. remote { ip-address | ipv6 ipv6-address }: Specifies the IPv4 or IPv6 address of the remote SNMP entity. To send SNMPv3 informs to an NMS, you must specify the IPv4 or IPv6 address of the NMS in the snmp-agent usm-user v3 command and map the IPv4 or IPv6 address to the SNMP engine ID of the NMS by using the snmp-agent remote command.
permitted in the ACL can use the specified username to access the SNMP agent. If no ACL is specified, the specified ACL does not exist, or the specified ACL does not have any rules, any NMS can use the specified username to access the SNMP agent. acl ipv6 ipv6-acl-number: Specifies a basic IPv6 ACL to filter NMSs by source IPv6 address. The ipv6-acl-number argument represents an ACL number in the range of 2000 to 2999.
# Add the user remoteUser for the SNMP remote engine at 10.1.1.1 to the SNMPv3 group testGroup, enable the authentication and privacy security model for the group, specify the authentication algorithm SHA-1, the privacy algorithm AES, the plaintext authentication key 123456TESTauth&!, and the plaintext privacy key 123456TESTencr&! for the user. system-view [Sysname] snmp-agent remote 10.1.1.
RMON commands display rmon alarm Use display rmon alarm to display entries in the RMON alarm table. Syntax display rmon alarm [entry-number] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters entry-number: Specifies an alarm entry index in the range of 1 to 65535. If no entry is specified, the command displays all entries in the RMON alarm table. Examples # Display all entries in the RMON alarm table.
Table 35 Command output Field Description Alarm entry owner and status: • entry-number—Alarm entry index (MIB object alarmIndex). • owner—Entry owner (MIB object alarmOwner). • status—Entry status (MIB object alarmStatus): AlarmEntry entry-number owned by owner is status. { VALID—The entry is valid. { UNDERCREATION—The entry is invalid. The status field is not configurable at the CLI. All alarm entries created from the CLI are valid by default.
Field Description Alarm that can be generated when the entry becomes valid (MIB object alarmStartupAlarm): • risingAlarm—Generates a rising alarm if the first sample after the entry becomes valid is greater than or equal to the rising threshold. Alarm sent upon entry startup • fallingAlarm—Generates a falling alarm if the first sample after the entry becomes valid is less than or equal to the rising threshold.
Table 36 Command output Field Description Event entry owner and status. • entry-number—Event entry index (MIB object eventIndex). • owner—Entry owner (MIB object eventOwner). • status—Entry status (MIB object eventStatus): EventEntry entry-number owned by owner is status. { VALID—The entry is valid. { UNDERCREATION—The entry is invalid. The status field is not configurable at the CLI. All alarm entries created from the CLI are valid by default.
Parameters entry-number: Specifies an event entry index in the range of 1 to 65535. If no entry is specified, the command displays log entries for all event entries. Usage guidelines If the log action is specified for an event, the system adds a record in the event log table each time the event occurs. Each record contains the log entry index, time when the event was logged (the amount of time that elapsed since system startup), and event description. The system can maintain up to 10 records for an event.
Field Description Description Record description (MIB object logDescription). Related commands rmon event display rmon history Use display rmon history to display RMON history control entries and history samples of Ethernet statistics for Ethernet interfaces.
Sampling record 2 : dropevents : 0 , octets : 5367 packets : 55 , broadcast packets : 1 multicast packets : 7 , CRC alignment errors : 0 undersize packets : 0 , oversize packets : 0 fragments : 0 , jabbers : 0 collisions : 0 , utilization : 0 dropevents : 0 , octets : 936 packets : 10 , broadcast packets : 0 Sampling record 3 : multicast packets : 6 , CRC alignment errors : 0 undersize packets : 0 , oversize packets : 0 fragments : 0 , jabbers : 0 collisions : 0 , ut
Field Description Total number of events in which packets were dropped during the sampling interval (MIB object etherHistoryDropEvents). dropevents NOTE: This statistic is the number of times that a drop condition occurred. It is not necessarily the total number of dropped packets. octets Total number of octets received during the sampling interval (MIB object etherHistoryOctets).
Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters entry-number: Specifies an alarm entry index in the range of 1 to 65535. If no entry is specified, the command displays all private alarm entries. Examples # Display all private alarm entries. display rmon prialarm PrialarmEntry 1 owned by user1 is VALID. Sample type : absolute Variable formula : (.1.3.6.1.2.1.16.1.1.1.6.1*100/.1.3.6.1.2.1.16.1.1.1.5.1) Description : ifUtilization.
Field Description Sampling interval Interval (in seconds) at which data is sampled and compared with the rising and falling thresholds. The MIB object for this field is hpRmonExtAlarmInterval. Alarm rising threshold (MIB node hpRmonExtAlarmRisingThreshold). Rising threshold A rising alarm will be generated if the current sampled value is greater than or equal to this threshold, and the value at the previous sampling interval was less than this threshold.
display rmon statistics Use display rmon statistics to display RMON statistics. Syntax display rmon statistics [ interface-type interface-number ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters interface-type interface-number: Specifies an interface by its type and number. If no interface is specified, the command displays RMON statistics for all interfaces.
Table 40 Command output Field Description Statistics entry owner and status: • entry-number—Statistics entry index (MIB object etherStatsIndex). • owner—Entry owner (MIB object etherStatsOwner). • status—Entry status (MIB object etherStatsStatus): EtherStatsEntry entry-number owned by owner is status. { VALID—The entry is valid. { UNDERCREATION—The entry is invalid. The status field is not configurable at the CLI. All alarm entries created from the CLI are valid by default.
Field Description Incoming-packet statistics by packet length: • 64—Number of 64-byte packets. The value is stored in the MIB node etherStatsPkts64Octets. • 65-127—Number of 65- to 127-byte packets. The value is stored in the MIB node etherStatsPkts65to127Octets. • 128-255—Number of 128- to 255-byte packets. The value is stored in the MIB node etherStatsPkts128to255Octets. Incoming packets by size: • 256-511—Number of 256- to 511-byte packets.
Format Examples Dotted OID format: 1.3.6.1.2.1.2.1.10.1 entry.integer.instance etherStatsOctets.1 etherStatsPkts.1 etherStatsBroadcastPkts.1 Object name.instance ifInOctets.1 ifInUcastPkts.1 ifInNUcastPkts.1 sampling-interval: Sets the sampling interval in the range of 5 to 65535 seconds. absolute: Specifies absolute sampling. RMON compares the value of the variable with the rising and falling thresholds at the end of the sampling interval. delta: Specifies delta sampling.
RMON samples the monitored alarm variable at the specified sampling interval, compares the sampled value with the predefined thresholds, and does one of the following: • Triggers the event associated with the rising alarm if the sampled value is equal to or greater than the rising threshold. • Triggers the event associated with the falling alarm if the sampled value is equal to or less than the falling threshold.
Parameters entry-number: Specifies an event entry index in the range of 1 to 65535. description string: Configures an event description, a case-sensitive string of 1 to 127 characters. The string can contain spaces, but it cannot contain the question mark (?) or any unprintable control characters in the US ASCII character set. log: Logs the event when it occurs. log-trap: Logs the event and sends an SNMP notification when the event occurs.
Syntax rmon history entry-number buckets number interval sampling-interval [ owner text ] undo rmon history entry-number Default The RMON history control table does not contain any entries. Views Layer 2 Ethernet interface view, Layer 3 Ethernet interface view Predefined user roles network-admin mdc-admin Parameters entry-number: Specifies a history control entry index in the range of 1 to 65535.
Syntax rmon prialarm entry-number prialarm-formula prialarm-des sampling-interval { absolute | delta } [ startup-alarm { falling | rising | rising-falling } ] rising-threshold threshold-value1 event-entry1 falling-threshold threshold-value2 event-entry2 entrytype { forever | cycle cycle-period } [ owner text ] undo rmon prialarm entry-number Default The private alarm table does not contain any entries.
falling-threshold threshold-value2 event-entry2: Sets the falling threshold. The threshold-value2 argument represents the falling threshold in the range of –2147483648 to +2147483647. The event-entry2 argument represents the index of the event that is triggered when the falling threshold is crossed. The value range for the event-entry2 argument is 0 to 65535. If 0 is specified, the alarm does not trigger any event. forever: Configures the entry as a permanent entry.
The last number in the OID forms of variables must be the same as the statistics entry index for the interface. For example, if you execute the rmon statistics 5 command, you must replace 1.3.6.1.2.1.16.1.1.1.6.1 and 1.3.6.1.2.1.16.1.1.1.5.1 with 1.3.6.1.2.1.16.1.1.1.6.5 and 1.3.6.1.2.1.16.1.1.1.5.5, respectively. Related commands • display rmon prialarm • rmon event rmon statistics Use rmon statistics to create an entry in the RMON statistics table.
Related commands display rmon statistics 153
NQA commands NQA client commands advantage-factor Use advantage-factor to configure the advantage factor that is used to count Mean Opinion Scores (MOS) and Calculated Planning Impairment Factor (ICPIF) values. Use undo advantage-factor to restore the default. Syntax advantage-factor factor undo advantage-factor Default The advantage factor is 0. Views Voice operation view Predefined user roles network-admin mdc-admin Parameters factor: Specifies the advantage factor in the range of 0 to 20.
Syntax codec-type { g711a | g711u | g729a } undo codec-type Default The codec type for the voice operation is G.711 A-law. Views Voice operation view Predefined user roles network-admin mdc-admin Parameters g711a: Specifies G.711 A-law codec type. g711u: Specifies G.711 μ-law codec type g729a: Specifies G.729 A-law codec type. Examples # Configure the codec type for the voice operation as g729a.
Usage guidelines If the payload length is smaller than the string length, only the first part of the string is filled. For example, if you configure the string as abcd and the payload size as 3 bytes, abc is filled. If the payload length is greater than the string length, the system fills the payload with the string cyclically until the payload is full. For example, if you configure the string as abcd and the payload size as 6 bytes, abcdab is filled.
Operation type Codec type Default size (bytes) UDP jitter N/A 100 Path jitter N/A 100 Voice G.711 A-law 172 Voice G.711 μ-law 172 Voice G.729 A-law 32 Views ICMP echo operation view, path jitter operation view, UDP echo operation view, UDP jitter operation view, voice operation view, ICMP template view Predefined user roles network-admin mdc-admin Parameters size: Specifies the size of the payload in each probe packet in bytes.
Predefined user roles network-admin mdc-admin Parameters text: Specifies a case-sensitive string of 1 to 200 characters. Examples # Configure the description for an NQA operation as icmp-probe. system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] description icmp-probe # In ICMP template view, configure the description for an NQA operation as icmp-probe.
# In ICMP template view, configure the destination IP address for the ICMP echo operation as 10.1.1.1. system-view [Sysname] nqa template icmp icmptplt [Sysname-nqatplt-icmp-icmptplt] destination ip 10.1.1.1 destination ipv6 Use destination ipv6 to configure the destination IPv6 address for the operation. Use undo destination ipv6 to remove the destination IPv6 address.
Predefined user roles network-admin mdc-admin Parameters port-number: Specifies the destination port number for the operation, in the range of 1 to 65535. Examples # Configure the destination port number for the UDP echo operation as 9000. system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type udp-echo [Sysname-nqa-admin-test-udp-echo] destination port 9000 # In TCP template view, configure the destination port number for the UDP echo operation as 9000.
display nqa history administrator test NQA entry (admin administrator, tag test) history records: Index Response Status Time 10 329 Succeeded 2011-04-29 20:54:26.5 9 344 Succeeded 2011-04-29 20:54:26.2 8 328 Succeeded 2011-04-29 20:54:25.8 7 328 Succeeded 2011-04-29 20:54:25.5 6 328 Succeeded 2011-04-29 20:54:25.1 5 328 Succeeded 2011-04-29 20:54:24.8 4 328 Succeeded 2011-04-29 20:54:24.5 3 328 Succeeded 2011-04-29 20:54:24.
case-insensitive string of 1 to 32 characters that cannot contain hyphens (-). If these two arguments are not specified, the command displays the current monitoring results of reaction entries for all NQA operations. item-number: Specifies a reaction entry by its ID in the range of 1 to 10. If no reaction entry is provided, the results of all reaction entries are displayed.
Monitored performance metric Threshold type Collect data in Checked Num Over-threshold Num consecutive Probes after the operation starts. Number of completed probes. Number of probe failures. accumulate Packets sent after the operation starts. Number of sent packets. Number of packets with round-trip time exceeding threshold. average N/A N/A N/A accumulate Packets sent after the operation starts. Number of sent packets. Number of packets with the one-way jitter exceeding the threshold.
Examples # Display the most recent result of the TCP operation with the administrator name administrator and the operation tag test. display nqa result admin test NQA entry (admin admin, tag test) test results: Send operation times: 1 Receive response times: 1 Min/Max/Average round trip time: 35/35/35 Square-Sum of round trip time: 1225 Last succeeded probe time: 2011-05-29 10:50:33.
Sum of SD delay: 125 Sum of DS delay: 132 Square-Sum of SD delay: 1805 Square-Sum of DS delay: 1988 SD lost packets: 0 DS lost packets: 0 Lost packets for unknown reason: 0 # Display the most recent result of the voice operation. display nqa result admin test NQA entry (admin admin, tag test) test results: Send operation times: 1000 Receive response times: 0 Min/Max/Average round trip time: 0/0/0 Square-Sum of round trip time: 0 Last packet received time: 0-00-00 00:00:00.
Receive response times: 10 Min/Max/Average round trip time: 1/1/1 Square-Sum of round trip time: 10 Extended Results: Packet loss ratio: 0% Failures due to timeout: 0 Failures due to internal error: 0 Failures due to other errors: 0 Packets out of sequence: 0 Packets arrived late: 0 Path-Jitter Results: Jitter number: 9 Min/Max/Average jitter: 0/0/0 Positive jitter number: 0 Min/Max/Average positive jitter: 0/0/0 Sum/Square-Sum positive jitter: 0/0 Negative jitter number: 0 Min/Max/Average negative jitter:
Field Description Square-Sum of round trip time Square sum of round-trip time. Last succeeded probe time Last packet received time Time when the last successful probe was completed. If no probes are successful in an operation, the field displays 0. This field is not available for UDP jitter, path jitter, and voice operations. Time when the last response packet was received. If no response packets in a probe were received, the field displays 0.
Field Description Max negative DS Maximum absolute value among negative jitters from destination to source. Negative SD number Number of negative jitters from source to destination. Negative DS number Number of negative jitters from destination to source. Negative SD sum Sum of absolute values of negative jitters from source to destination. Negative DS sum Sum of absolute values of negative jitters from destination to source.
Field Description Sum/Square-Sum positive jitter Sum/square sum of the positive jitter, available only in the path jitter operation. Negative jitter number Number of negative jitter, available only in the path jitter operation. Min/Max/Average negative jitter Minimum/maximum/average negative jitter in milliseconds, available only in the path jitter operation. Sum/Square-Sum negative jitter Sum/square sum of the negative jitter, available only in the path jitter operation.
Send operation times: 1 Receive response times: 1 Min/Max/Average round trip time: 13/13/13 Square-Sum of round trip time: 169 Extended results: Packet loss ratio: 0% Failures due to timeout: 0 Failures due to disconnect: 0 Failures due to no connection: 0 Failures due to internal error: 0 Failures due to other errors: 0 # Display the statistics for the UDP jitter operation. display nqa statistics admin test NQA entry (admin admin, tag test) test statistics: NO.
Reaction statistics: Index Checked Element Threshold Type Checked Num Over-threshold Num 1 jitter-DS accumulate 90 25 2 jitter-SD average - - 3 OWD-DS - 100 24 4 OWD-SD - 100 13 5 packet-loss accumulate 0 0 6 RTT accumulate 100 52 # Display the statistics for the voice operation. display nqa statistics admin test NQA entry (admin admin, tag test) test statistics: NO. : 1 Start time: 2007-01-01 09:33:45.
Max ICPIF value: 0 Min ICPIF value: 0 Reaction statistics: Index Checked Element Threshold Type Checked Num Over-threshold Num 1 ICPIF - - - 2 MOS - - - # Display the statistics for the path jitter operation. display nqa statistics admin test NQA entry (admin admin, tag test) test statistics: NO. : 1 Path 1: Hop IP 192.168.40.
Positive jitter number: 0 Min/Max/Average positive jitter: 0/0/0 Sum/Square-Sum positive jitter: 0/0 Negative jitter number: 0 Min/Max/Average negative jitter: 0/0/0 Sum/Square-Sum negative jitter: 0/0 Table 46 Command output Field Description No. Statistics group ID. Start time Time when the operation started. Life time Duration of the operation in seconds. Send operation times Number of probe packets sent. Receive response times Number of response packets received.
Field Description Positive SD square-sum Square sum of positive jitters from source to destination. Positive DS square-sum Square sum of positive jitters from destination to source. Min negative SD Minimum absolute value among negative jitters from source to destination. Min negative DS Minimum absolute value among negative jitters from destination to source. Max negative SD Maximum absolute value among negative jitters from source to destination.
Field Description Max MOS value Maximum MOS value. Min MOS value Minimum MOS value. Max ICPIF value Maximum ICPIF value. Min ICPIF value Minimum ICPIF value. Reaction statistics Statistics about the reaction entry in the counting interval. Index ID of a reaction entry. Checked Element Monitored element. Threshold Type Threshold type. Checked Num Number of targets that have been monitored for data collection. Over-threshold Num Number of threshold violations.
Monitored performance metric Threshold type Collect data in Checked Num Over-threshold Num consecutive Probes in the counting interval. Number of completed probes. Number of probes of which the duration exceeds the threshold. accumulate Probes in the counting interval. Number of completed probes. Number of probe failures. consecutive Probes in the counting interval. Number of completed probes. Number of probe failures. accumulate Packets sent in the counting interval.
mdc-admin Parameters expression: Specifies the expected data, a case-sensitive string of 1 to 200 characters. offset number: Specifies the offset between the expected data and the actual data. The value range for the number argument is 0 to 1000, and the default value is 0. Usage guidelines After you configure the expected data for the NQA operation, the NQA client checks the data in the received response. If the actual data is the same as the expected data, it considers the NQA destination device legal.
Examples # In HTTP template view, configure the expected status codes 200, 300, and 400 to 500. system-view [Sysname] nqa template http httptplt [Sysname-nqatplt-http-httptplt] expect status 200 300 400 to 500 expect ip Use expect ip to specify the expected IP address. Use undo expect ip to remove all expected IP addresses. Syntax expect ip ip-address undo expect ip Default No expected IP address is configured.
Views DNS template view Predefined user roles network-admin mdc-admin Parameters ip-address: Specifies the expected IPv6 address for a DNS echo request. Usage guidelines During a DNS operation, the NQA client compares the expected IPv6 address with the IPv6 address resolved by the DNS server. If they are the same, it considers the DNS server legal. Examples # In DNS template view, configure the expected IPv6 address as 1::1.
# In FTP template view, specify the file to be transferred between the FTP server and the FTP client as config.txt. system-view [Sysname] nqa template ftp ftptplt [Sysname-nqatplt-ftp-ftptplt] filename config.txt frequency Use frequency to specify the interval at which the NQA operation repeats. Use undo frequency to restore the default.
history-record enable Use history-record enable to enable the saving of history records for the NQA operation. Use undo history-record enable to disable the saving of history records. Syntax history-record enable undo history-record enable Default The saving of history records is disabled for the NQA operation.
Views DHCP operation view, DLSw operation view, DNS operation view, FTP operation view, HTTP operation view, ICMP echo operation view, SNMP operation view, TCP operation view, UDP echo operation view Predefined user roles network-admin mdc-admin Parameters keep-time: Specifies how long the history records can be saved. The value is in the range of 1 to 1440 minutes. Usage guidelines When an NQA operation completes, the timer starts. All records are removed when the lifetime is reached.
Usage guidelines If the number of history records for an NQA operation exceeds the maximum number, earliest history records are removed. Examples # Set the maximum number of history records for an NQA operation to 10. system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] history-record number 10 lsr-path Use lsr-path to set a loose source routing (LSR) path. Use undo lsr-path to restore the default.
Use undo mode to restore the default. Syntax mode { active | passive } undo mode Default The data transmission mode of active is used by the FTP operation. Views FTP operation view, FTP template view Predefined user roles network-admin mdc-admin Parameters active: Sets the data transmission mode to active. The FTP server initiates a connection request. passive: Sets the data transmission mode to passive. The FTP client initiates a connection request.
Parameters ip-address: Specifies the IP address of the next hop. Examples # Specify the next hop IP address as 10.1.1.1 for the ICMP echo operation. system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] next-hop 10.1.1.1 nqa Use nqa to create an NQA operation and enter its view. Use undo nqa to remove the operation.
nqa template Use nqa template to create an NQA template and enter its view. Use undo nqa template to remove the NQA template. Syntax nqa template { dns | ftp | http | icmp | tcp } name undo nqa template { dns | ftp | http | icmp | tcp } name Default No NQA template is created. Views System view Predefined user roles network-admin mdc-admin Parameters name: Specifies the name of the NQA template, a case-insensitive string of 1 to 31 characters.
system-view [Sysname] nqa agent enable Related commands nqa server enable nqa schedule Use nqa schedule to configure the scheduling parameters for an NQA operation. Use undo nqa schedule to stop the operation. Syntax nqa schedule admin-name operation-tag start-time { hh:mm:ss [ yyyy/mm/dd | mm/dd/yyyy ] | now } lifetime { lifetime | forever } [ recurring ] undo nqa schedule admin-name operation-tag Default No schedule is configured for an NQA operation.
Examples # Schedule the operation with the administrator name admin and operation tag test to start on 08:08:08 2008/08/08 and last 1000 seconds. system-view [Sysname] nqa schedule admin test start-time 08:08:08 2008/08/08 lifetime 1000 recurring Related commands • destination ip • nqa entry • type operation (FTP operation view) Use operation to specify the operation type for the FTP operation. Use undo operation to restore the default.
# In FTP template view, specify the operation type for the FTP operation as put. system-view [Sysname] nqa template ftp ftptplt [Sysname-nqatplt-ftp-ftptplt] operation put operation (HTTP operation view) Use operation to specify the operation type for the HTTP operation. Use undo operation to restore the default. Syntax operation { get | post | raw } undo operation Default The HTTP operation type is get.
Use undo password to remove the configuration. Syntax password { cipher | simple } password undo password Default No FTP or HTTP login password is configured. Views FTP operation view, HTTP operation view, FTP template view, HTTP template view Predefined user roles network-admin mdc-admin Parameters cipher: Sets a ciphertext password. simple: Sets a plaintext password. password: Specifies the password string. This argument is case sensitive.
Syntax probe count times undo probe count Default An operation performs one probe. Views DHCP operation view, DNS operation view, DLSw operation view, FTP operation view, HTTP operation view, ICMP echo operation view, SNMP operation view, TCP operation, UDP echo operation view Predefined user roles network-admin mdc-admin Parameters times: Specifies the probe times in the range of 1 to 15.
Use undo probe packet-interval to restore the default. Syntax probe packet-interval packet-interval undo probe packet-interval Default The interval is 20 milliseconds. Views Path jitter operation view, UDP jitter operation view, voice operation view Predefined user roles network-admin mdc-admin Parameters packet-interval: Specifies the interval for sending packets, in the range of 10 to 60000 milliseconds.
Examples # Configure the UDP jitter probe to send 100 packets. system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type udp-jitter [Sysname-nqa-admin-test-udp-jitter] probe packet-number 100 probe packet-timeout Use probe packet-timeout to configure the timeout time for waiting for a response in the UDP jitter, path jitter, or voice operation. Use undo probe packet-timeout to restore the default.
Default The timeout time of a probe is 3000 milliseconds. Views DHCP operation view, DNS operation view, DLSw operation view, FTP operation view, HTTP operation view, ICMP echo operation view, SNMP operation view, TCP operation view, UDP echo operation view, any NQA template view Predefined user roles network-admin mdc-admin Parameters timeout: Specifies the probe timeout time in milliseconds. The available value ranges include: • 10 to 86400000 for the FTP or HTTP operation.
Usage guidelines This command places you in raw request view and deletes the content of the previously configured GET request. Examples # Enter raw request view and specify the content of a request for the HTTP operation. system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type http [Sysname-nqa-admin-test-http] raw-request [Sysname-nqa-admin-test-http-raw-request] # In HTTP template view, enter raw request view and specify the content of a request for the HTTP operation.
trap-only: Specifies the action of displaying results on the terminal display and meanwhile sending SNMP trap messages to the NMS. Usage guidelines You cannot edit a reaction entry after it is created. To change the attributes in a reaction entry, use undo reaction to delete the entry first and reconfigure a new one. Examples # Create reaction entry 1 for monitoring the ICPIF value in the voice operation, setting the upper limit to 50 and lower limit to 5.
accumulate accumulate-occurrences: Checks the maximum number of threshold violations in the operation. The value is in the range of 1 to 14999 for the UDP jitter operation, and 1 to 59999 for the voice operation. average: Checks the average one-way jitter. threshold-value: Specifies threshold range in milliseconds. upper-threshold: Specifies the upper limit in the range of 0 to 3600000. lower-threshold: Specifies the lower limit in the range of 0 to 3600000. It must not be greater than the upper limit.
Use undo reaction to delete the specified reaction entry. Syntax reaction item-number checked-element [ action-type { none | trap-only } ] mos threshold-value upper-threshold lower-threshold undo reaction item-number Default No reaction entry for monitoring the MOS value is configured. Views Voice operation view Predefined user roles network-admin mdc-admin Parameters item-number: Assigns an ID to the reaction entry, in the range of 1 to 10. threshold-value: Specifies threshold range.
reaction checked-element { owd-ds | owd-sd } Use reaction checked-element { owd-ds | owd-sd } to configure a reaction entry for monitoring the one-way delay. Use undo reaction to delete the specified reaction entry. Syntax reaction item-number checked-element { owd-ds | owd-sd } threshold-value upper-threshold lower-threshold undo reaction item-number Default No reaction entry for monitoring the one-way delay is configured.
[Sysname-nqa-admin-test] type udp-jitter [Sysname-nqa-admin-test-udp-jitter] reaction 1 checked-element owd-ds threshold-value 50 5 reaction checked-element packet-loss Use reaction checked-element packet-loss to configure a reaction entry for monitoring packet loss in UDP jitter or voice operation. Use undo reaction to delete the specified reaction entry.
[Sysname-nqa-admin-test-udp-jitter] reaction 1 checked-element packet-loss threshold-type accumulate 100 action-type trap-only reaction checked-element probe-duration Use reaction checked-element probe-duration to configure a reaction entry for monitoring the probe duration. Use undo reaction to delete the specified reaction entry.
Only successful probe packets are monitored. Statistics about failed probe packets are not collected. Examples # Create reaction entry 1 for monitoring the average probe duration of ICMP echo operation, setting the upper limit to 50 milliseconds and lower limit to 5 milliseconds. Before the NQA operation starts, the initial state of the reaction entry is invalid. After the operation, the average probe duration is checked. If it exceeds the upper limit, the state is set to over-threshold.
Default No reaction entry for monitoring probe failures is configured. Views DHCP operation view, DLSw operation view, DNS operation view, FTP operation view, HTTP operation view, ICMP echo operation view, SNMP operation view, TCP operation view, UDP echo operation view Predefined user roles network-admin mdc-admin Parameters item-number: Assigns an ID to the reaction entry, in the range of 1 to 10. threshold-type: Specifies a threshold type.
reaction checked-element probe-fail (for trigger) Use reaction checked-element probe-fail to configure a reaction entry for monitoring probe failures. Use undo reaction to remove the specified reaction entry. Syntax reaction item-number checked-element probe-fail threshold-type consecutive consecutive-occurrences action-type trigger-only undo reaction item-number Default No reaction entry for monitoring probe failures is configured.
Use undo reaction to delete the specified reaction entry. Syntax reaction item-number checked-element rtt threshold-type { accumulate accumulate-occurrences | average } threshold-value upper-threshold lower-threshold [ action-type { none | trap-only } ] undo reaction item-number Default No reaction entry for monitoring packet round-trip time is configured.
[Sysname] nqa entry admin test [Sysname-nqa-admin-test] type udp-jitter [Sysname-nqa-admin-test-udp-jitter] reaction 1 checked-element rtt threshold-type average threshold-value 50 5 action-type trap-only # Create reaction entry 2 for monitoring the round-trip time of UDP jitter probe packets, setting the upper limit to 50 milliseconds and lower limit to 5 milliseconds. Before the NQA operation starts, the initial state of the reaction entry is invalid.
Usage guidelines The reaction trap test-complete command is supported only for the UDP jitter and voice operations. Examples # Configure the system to send a trap if the number of consecutive probe failures in an ICMP echo operation is greater than or equal to 5.
Syntax reaction trigger probe-pass count undo reaction trigger probe-pass Default When the number of consecutive successful probes reaches 3, the operation succeeds. Views Any NQA template view Predefined user roles network-admin mdc-admin Parameters count: Specifies the number of consecutive successful probes, in the range of 1 to 15.
Parameters domain-name: Specifies the domain name to be resolved. It is a dot-separated case-sensitive string of 1 to 255 characters including letters, digits, hyphens (-), and underscores (_) (for example, aabbcc.com). Each part consists of 1 to 63 characters, and consecutive dots (.) are not allowed. Examples # Set the domain name domain1 to be resolved.
route-option bypass-route Use route-option bypass-route to enable the routing table bypass function to test the connectivity to the direct destination. Use undo route-option bypass-route to disable the routing table bypass function. Syntax route-option bypass-route undo route-option bypass-route Default The routing table bypass function is disabled.
Predefined user roles network-admin mdc-admin Parameters interface-type interface-number: Specifies an interface by its type and number. Usage guidelines If you configure both the source interface command and the source ip command, the most recent configuration takes effect. The specified source interface must be up. Otherwise, no ICMP echo requests can be sent out. Examples # Specify the IP address of interface VLAN-interface 2 as the source IP address of ICMP echo request packets.
Parameters ip-address: Specifies the source IP address of the operation. Usage guidelines If you configure both the source interface command and the source ip command for an ICMP echo operation, the most recent configuration takes effect. For operations except a DHCP operation, the specified source IP address must be the IP address of a local interface. The local interface must be up. Otherwise, no probe packets can be sent out. Examples # Configure the source IP address for ICMP echo requests as 10.1.1.
Usage guidelines If you configure both the source interface command and the source ipv6 command for an ICMP echo operation, the most recent configuration takes effect. The specified source IPv6 address must be the IPv6 address of a local interface. The local interface must be up. Otherwise, no probe packets can be sent out. Examples # In ICMP template view, configure the source IPv6 address for ICMP echo requests as 1::1.
statistics hold-time Use statistics hold-time to configure the hold time of statistics groups for an NQA operation. Use undo statistics hold-time to restore the default. Syntax statistics hold-time hold-time undo statistics hold-time Default The hold time of statistics groups is 120 minutes. Views Any operation view Predefined user roles network-admin mdc-admin Parameters hold-time: Specifies the hold time in minutes, in the range of 1 to 1440.
mdc-admin Parameters interval: Specifies the interval in minutes, in the range of 1 to 35791394. Usage guidelines NQA collects statistics for operations completed within a specific period. The statistics form a statistics group. To view information about the statistics groups, use the display nqa statistics command. Examples # Configure the system to collect the ICMP echo operation statistics at 2-minute intervals.
target-only Use target-only to perform the path jitter operation on destination only. Use undo target-only to restore the default. Syntax target-only undo target-only Default NQA performs the path jitter operation to the destination hop by hop. Views Path jitter operation view Predefined user roles network-admin mdc-admin Examples # Perform the path jitter operation on the destination address only.
Examples # Configure the ToS value in an IP packet header of probe packets as 1. system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] tos 1 # In ICMP template view, configure the ToS value in an IP packet header of probe packets as 1. system-view [Sysname] nqa template icmp icmptplt [Sysname-nqatplt-icmp-icmptplt] tos 1 ttl Use ttl to specify the TTL for probe packets. Use undo ttl to restore the default.
type Use type to specify the operation type of the NQA operation and enter operation type view. Syntax type { dhcp | dlsw | dns | ftp | http | icmp-echo | path-jitter | snmp | tcp | udp-echo | udp-jitter | voice } Default No operation type is specified. Views NQA operation view Predefined user roles network-admin mdc-admin Parameters dhcp: Specifies the DHCP operation type. dlsw: Specifies the DLSw operation type. dns: Specifies the DNS operation type. ftp: Specifies the FTP operation type.
Syntax url url undo url Views FTP operation view, HTTP operation view, FTP template view, HTTP template view Predefined user roles network-admin mdc-admin Parameters url: Specifies the URL of the destination server, a case-sensitive string of 1 to 255 characters. Spaces and question marks (?) are not allowed. The following table describes the URL format and parameters for different operations.
Views FTP operation view, HTTP operation view, FTP template view, HTTP template view Predefined user roles network-admin mdc-admin Parameters username: Specifies the username string. It is a case-sensitive string of 1 to 32 characters. Valid characters include letters, digits, exclamation marks (!), dollar signs ($), asterisks (*), brackets (()), underscores (_), quotation marks ('), commas (,), dots (.), and hyphens (-). Examples # Set the FTP login username to administrator.
Examples # Configure the HTTP operation to use the HTTP version 1.1. system-view [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type http [Sysname-nqa-admin-test-http] version v1.1 vpn-instance Use vpn-instance to apply the operation to the specified VPN. Use undo vpn-instance to restore the default. Syntax vpn-instance vpn-instance-name undo vpn-instance Default The operation applies to the public network.
IMPORTANT: Configure the NQA server only for UDP jitter, TCP, UDP echo, and voice operations. display nqa server Use display nqa server status to display NQA server status. Syntax display nqa server Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display NQA server status. display nqa server nqa server is: enabled tcp-connect: IP Address Port Vpn-instance 2.2.2.2 2000 - IP Address Port Vpn-instance 3.3.3.
Syntax nqa server enable undo nqa server enable Default The NQA server is disabled. Views System view Predefined user roles network-admin mdc-admin Examples # Enable the NQA server.
tos: Specifies the ToS value in the IP packet header of NQA probe packets. The value range is 0 to 255 and the default value is 0. vpn-instance-name: Specifies the name of the MPLS L3VPN instance, a case-sensitive string of 1 to 31 characters. If you do not specify this argument, the NQA server listens on a public IP address. Usage guidelines Use this command on the NQA server for only the TCP operation. You can use this command to specify the ToS value in the IP packet header of NQA probe packets.
vpn-instance-name: Specifies the name of the MPLS L3VPN instance, a case-sensitive string of 1 to 31 characters. If you do not specify this argument, the NQA server listens on a public IP address. Usage guidelines Use this command on the NQA server for only the UDP jitter, UDP echo, and voice operations. You can use this command to specify the ToS value in the IP packet header of NQA probe packets.
Port mirroring commands The port mirroring commands are available on both Layer 2 and Layer 3 Ethernet interfaces. The term "interface" in this chapter collectively refers to these two types of interfaces. You can use the port link-mode command to configure an Ethernet port as a Layer 2 or Layer 3 interface (see Layer 2—LAN Switching Configuration Guide). display mirroring-group Use display mirroring-group to display mirroring group information.
Slot 4 Inbound Monitor port: Ten-GigabitEthernet1/0/3 Mirroring group 2: Type: Remote source Status: Incomplete Mirroring port: Ten-GigabitEthernet1/0/4 Both Remote probe VLAN: 1900 Mirroring group 3: Type: Remote destination Status: Active Monitor port: Ten-GigabitEthernet1/0/6 Remote probe VLAN: 1901 Table 49 Command output Field Description Mirroring group Number of the mirroring group. Type of the mirroring group: Type • Local. • Remote source. • Remote destination.
mdc-admin Parameters group-id: Specifies the number of a mirroring group, in the range of 1 to 4. local: Specifies a local mirroring group. remote-destination: Specifies a remote destination group. remote-source: Specifies a remote source group. all: Specifies all mirroring groups. Examples # Create local mirroring group 1. system-view [Sysname] mirroring-group 1 local mirroring-group mirroring-cpu Use mirroring-group mirroring-cpu to configure source CPUs for a mirroring group.
chassis chassis-number slot slot-number-list: Specifies a slot number list of cards that holds the source CPUs on the specified IRF member device. The chassis-number argument specifies the ID of the IRF member device. The slot-number-list argument specifies a list containing multiple numbers of slots that hold the cards, in the format of slot-number-list = { slot-number [ to slot-number ] }&<1-8>. &<1-8> indicates that you can specify up to eight slot numbers or number ranges.
Parameters group-id: Specifies the number of a mirroring group, in the range of 1 to 4. The mirroring group specified by the group-id argument must already exist. both: Mirrors both received and sent packets on the specified port. inbound: Mirrors only received packets on the specified port. outbound: Mirrors only sent packets on the specified port. Usage guidelines You can configure source ports only for a local mirroring group or remote source group but not for a remote destination group.
mdc-admin Parameters group-id: Specifies the number of a mirroring group, in the range of 1 to 4. The mirroring group specified by the group-id argument must already exist. interface-list: Source port list, containing one or more ports, in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] }&<1-8>. The interface-type interface-number argument specifies an interface by its type and number.
In interface view: mirroring-group group-id monitor-egress undo mirroring-group group-id monitor-egress Default No egress port is configured for a mirroring group. Views System view, interface view Predefined user roles network-admin mdc-admin Parameters group-id: Specifies the number of a mirroring group, in the range of 1 to 4. The mirroring group specified by group-id must already exist. interface-type interface-number: Specifies a port to be configured as the egress port by its type and number.
Syntax mirroring-group group-id monitor-port undo mirroring-group group-id monitor-port Default No monitor port is configured for a mirroring group. Views Interface view Predefined user roles network-admin mdc-admin Parameters group-id: Specifies the number of a mirroring group, in the range of 1 to 4. The mirroring group specified by group-id must already exist.
Default No monitor port is configured for a mirroring group. Views System view Predefined user roles network-admin mdc-admin Parameters group-id: Specifies the number of a mirroring group, in the range of 1 to 4. The mirroring group specified by group-id must already exist. interface-type interface-number: Specifies a port to be configured as the monitor port by its type and number.
undo mirroring-group group-id reflector-port Default No reflector port is configured for a mirroring group, and a port does not serve as the reflector port for a mirroring group. Views System view, interface view Predefined user roles network-admin mdc-admin Parameters group-id: Specifies the number of a mirroring group, in the range of 1 to 4. The mirroring group specified by group-id must already exist.
mirroring-group remote-probe vlan Use mirroring-group remote-probe vlan to specify a VLAN as the remote probe VLAN for a mirroring group. Use undo mirroring-group remote-probe vlan to remove a remote probe VLAN from a mirroring group. Syntax mirroring-group group-id remote-probe vlan vlan-id undo mirroring-group group-id remote-probe vlan vlan-id Default No remote probe VLAN is configured for a mirroring group.
Related commands mirroring-group 237
Traffic mirroring commands The traffic mirroring commands are available on both Layer 2 and Layer 3 Ethernet interfaces. The term "interface" in this chapter collectively refers to these two types of interfaces. You can use the port link-mode command to configure an Ethernet port as a Layer 2 or Layer 3 interface (see Layer 2—LAN Switching Configuration Guide). mirror-to Use mirror-to to specify the mirroring destination for a traffic behavior. Use undo mirror-to to cancel the configuration.
system-view [Sysname] traffic behavior 1 [Sysname-behavior-1] mirror-to vlan 100 239
sFlow commands display sflow Use display sflow to display sFlow configuration and operation information. Syntax display sflow Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Examples # Display sFlow configuration and operation information. display sflow sFlow datagram version: 5 Global information: Agent IP: 10.10.10.1(CLI) Source address: 10.0.0.
Field Description ID sFlow collector ID. IP sFlow collector IP address. Port sFlow collector port. Aging Remaining lifetime of the sFlow collector. If this field displays N/A, the sFlow collector never ages out. Size Maximum length of the sFlow data portion in an sFlow packet. VPN-instance Name of the VPN bound with the sFlow collector. Description Description of the sFlow collector. Port information Information about interfaces configured with sFlow.
Predefined user roles network-admin mdc-admin Parameters ip ip-address: Specifies an IPv4 address for the sFlow agent. ipv6 ipv6-address: Specifies an IPv6 address for the sFlow agent. Usage guidelines HP recommends that you manually configure an IP address for the sFlow agent. Only one IP address can be specified for the sFlow agent on the device. A newly configured IP address overwrites the existing one. Examples # Specify IP address 10.10.10.1 for the sFlow agent.
datagram-size size: Specifies the maximum length of the sFlow data portion in an sFlow packet. The value range for the size argument is 200 to 3000 bytes and the default is 1400 bytes. port port-number: Specifies the port number of the sFlow collector, in the range of 1 to 65535. The default is 6343. time-out seconds: Specifies the aging timer of the sFlow collector, in the range of 1 to 2147483647 seconds. When the aging timer expires, the sFlow collector is deleted.
Use undo sflow counter collector to restore the default. Syntax sflow counter collector collector-id undo sflow counter collector Default No sFlow collector is specified for counter sampling. Views Layer 2 Ethernet interface view, Layer 3 Ethernet interface view Predefined user roles network-admin mdc-admin Parameters collector-id: Specifies an sFlow collector by its ID in the range of 1 to 10. Examples # Specify sFlow collector 2 on Ten-GigabitEthernet 1/0/1 for counter sampling.
[Sysname] interface ten-gigabitethernet 1/0/1 [Sysname-Ten-GigabitEthernet1/0/1] sflow flow collector 2 sflow flow max-header Use sflow flow max-header to set the maximum number of bytes of a packet (starting from the packet header) that flow sampling can copy. Use undo sflow flow max-header to restore the default. Syntax sflow flow max-header length undo sflow flow max-header Default Flow sampling can copy up to 128 bytes of a packet.
Predefined user roles network-admin mdc-admin Parameters determine: Specifies the fixed sampling mode. For example, if the flow sampling interval is set to 4000 (by using the sflow sampling-rate command), the device randomly samples a packet, like the tenth packet, from the first 4000 packets. The next time the device samples the 4010th packet, and so on. The switch does not support the determine mode. random: Specifies the random sampling mode.
system-view [Sysname] interface ten-gigabitethernet 1/0/1 [Sysname-Ten-GigabitEthernet1/0/1] sflow sampling-rate 4000 Related commands sflow sampling-mode sflow source Use sflow source to specify the source IP address of sFlow packets. Use undo sflow source to restore the default. Syntax sflow source { ip ip-address | ipv6 ipv6-address } * undo sflow source { ip | ipv6 } * Default The source IP address of sent sFlow packets is determined by routing.
Sampler configuration commands display sampler Use display sampler to display configuration information about a sampler. Syntax In standalone mode: display sampler [ sampler-name ] [ slot slot-number ] In IRF mode: display sampler [ sampler-name ] [ chassis chassis-number slot slot-number ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters sampler-name: Specifies a sampler by its name, a case-insensitive string of 1 to 31 characters.
Table 51 Command output Field Description Sampler name Name of the sampler. Mode Sampling mode. Fixed indicates the fixed mode. Packet-interval Sampling rate. sampler Use sampler to create a sampler. Use undo sampler to delete a sampler. Syntax sampler sampler-name mode fixed packet-interval rate undo sampler sampler-name Default No sampler exists.
Process monitoring and maintenance commands The display memory, display process, display process cpu, monitor process and monitor thread commands display information about both user processes and kernel threads. In these commands, "process" refers to both user processes and kernel threads. display exception context Use display exception context to display the context information for process exceptions.
Table 52 Command output Filed Description Crashed PID ID of the crashed process. Signal that leads to the crash: • • • • • • • • • • • Crash signal SIGABRT—Abort. SIGBUS—Bus error. SIGFPE—Erroneous arithmetic operation. SIGILL—Illegal hardware instructions. SIGIOT—I/O error. SIGQUIT—Quit signal sent by the controlling terminal. SIGSEGV—Invalid memory access. SIGSYS—Invalid system call. SIGTRAP—Traces exception breakpoints. SIGXCPU—CPU usage limit exceeded. SIGXFSZ—File size limit exceeded.
Examples # Display the core file directory on the active MPU. (In standalone mode.) display exception filepath The exception filepath on slot 16 is flash:/. # Display the core file directory on the standby MPU. (In standalone mode.) display exception filepath slot 17 The exception filepath on slot 17 is NULL. # Display the core file directory on the global active MPU. (In IRF mode.) display exception filepath The exception filepath on chassis 1 slot 16 is flash:/.
Context : thread context Chassis : 0 Slot : 0 CPU ID : 0 Kernel module info : module name (mrpnc) module address (0xe332a000) module name (12500) module address (0xe00bd000) # Display detailed information about the latest kernel thread deadloop. display kernel deadloop 1 verbose ----------------- Deadloop record 1 ----------------Description : BUG: soft lockup - CPU#0 stuck for 61! [comsh: 16306] Recorded at : 2013-07-01 11:16:00.823018 Occurred at : 2013-07-01 11:16:00.
Reg: dsisr, Val = 0x40000000 ; Reg: result, Val = 0x00020300 ; Dump stack (total 1024 bytes, 16 bytes/line): 0xe2be5ea0: 02 be 5e c0 24 00 00 24 00 00 00 00 05 7d 94 84 0xe2be5eb0: 00 00 00 04 00 00 00 00 00 00 00 28 05 8d 34 c4 0xe2be5ec0: 02 be 60 a0 01 86 ef f0 00 00 00 00 00 00 00 00 0xe2be5ed0: 02 04 05 b4 00 00 00 00 00 00 00 00 00 00 00 00 0xe2be5ee0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0xe2be5ef0: 95 47 73 35 00 00 00 00 00 00 00 00 00 00 00 00 0xe2be5f00: a0 e1 64 21 00 00 00 00 00 0
41a2fe9c 812300ec 800200ec 7f890000 409efe8c 80010014 540b07b9 40a2fe80 4bfffe6c 80780290 7f64db78 4804ea35 <807f002c> 38800000 38a00080 3863000c Table 53 Command output Field Description Description Description for the kernel thread deadloop, including the CPU number, thread running time, thread name, and thread number. Recorded at Time when the kernel thread deadloop was recorded on the MPU, with microsecond precision.
display kernel deadloop configuration [ chassis chassis-number slot slot-number ] Views Any view Predefined user roles network-admin Parameters slot slot-number: Specifies an MPU by its slot number. Without this option, the command displays kernel thread deadloop detection configuration for the active MPU. (In standalone mode.) chassis chassis-number slot slot-number: Specifies an MPU on an IRF member device.
Predefined user roles network-admin Parameters show-number: Specifies the number of kernel exceptions to display, in the range of 1 to 20. offset: Specifies the offset between the starting exception and the latest exception, in the range of 0 to 19. The default value is 0. verbose: Displays detailed information. Without this keyword, the command displays brief information. slot slot-number: Specifies an MPU by its slot number.
swapper (11:16:00.833018)--> kthreadd (11:16:00.833518)--> swapper (11:16:00.833550)--> test_12500 (11:16:00.
0xe2be5fd0: 02 be 5f f0 00 e8 93 7e 02 be 5f f8 02 be 5f fc 0xe2be5fe0: 00 00 00 00 00 00 00 00 00 00 00 00 02 be 60 18 0xe2be5ff0: 02 be 60 10 00 e9 65 98 00 00 00 58 00 00 2a 4f 0xe2be6000: 02 be 60 10 00 00 00 00 00 00 00 00 02 be 60 68 0xe2be6010: 02 be 60 40 00 e8 c6 a0 00 00 11 17 00 00 00 00 0xe2be6020: 02 be 60 40 00 00 00 00 00 00 00 00 02 be 60 98 0xe2be6030: 02 27 00 00 00 00 00 00 00 00 00 00 02 be 60 68 0xe2be6040: 02 be 60 60 00 00 00 01 00 00 b0 30 02 be 60 98 0xe2be6050: 00 00 00 04 02 21 00
Parameters show-number: Specifies the number of kernel thread reboots to display, in the range of 1 to 20. offset: Specifies the offset between the starting reboot and the latest reboot, in the range of 0 to 19. The default value is 0. verbose: Displays detailed information. Without this keyword, the command displays brief information. slot slot-number: Specifies an MPU by its slot number. Without this option, the command displays kernel thread reboot information for the active MPU. (In standalone mode.
0xe2be5ec0: 02 be 60 a0 01 86 ef f0 00 00 00 00 00 00 00 00 0xe2be5ed0: 02 04 05 b4 00 00 00 00 00 00 00 00 00 00 00 00 0xe2be5ee0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0xe2be5ef0: 95 47 73 35 00 00 00 00 00 00 00 00 00 00 00 00 0xe2be5f00: a0 e1 64 21 00 00 00 00 00 00 00 00 00 00 00 00 0xe2be5f10: 00 00 00 00 00 00 00 00 00 00 00 00 01 e9 00 00 0xe2be5f20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0xe2be5f30: 00 00 00 00 00 00 00 00 02 be 66 c0 02 be 66 d0 0xe2be5f40: 02 be 61 e0 00 00 00
Field Description Reason Reboot reason. Thread Name and number of the rebooted kernel thread. Context Context where the reboot occurred. Chassis Number of the IRF member device where the kernel thread ran. Slot Slot number of the MPU where the kernel thread ran. CPU ID Number of the CPU where the kernel thread rebooted. Kernel module info Information about kernel modules that had been loaded when the kernel thread rebooted, including kernel module name and memory address.
chassis chassis-number slot slot-number: Specifies an MPU on an IRF member device. Without this option, the command displays kernel thread starvation information for the global active MPU. (In IRF mode.) Examples # Display brief information about the latest kernel thread starvation. display kernel starvation 1 ----------------- Starvation record 1 ----------------Description : INFO: task comsh: 16306 blocked for more than 10 seconds. Recorded at : 2013-07-01 11:16:00.
Reg: r16, Val = 0xe2be5f00 ; Reg: r17, Val = 0x00000000 ; Reg: r18, Val = 0x00000000 ; Reg: r19, Val = 0x00000000 ; Reg: r20, Val = 0x024c10f8 ; Reg: r21, Val = 0x057d9244 ; Reg: r22, Val = 0x00002000 ; Reg: r23, Val = 0x0000002c ; Reg: r24, Val = 0x00000002 ; Reg: r25, Val = 0x24000024 ; Reg: r26, Val = 0x00000000 ; Reg: r27, Val = 0x057d9484 ; Reg: r28, Val = 0x0000002c ; Reg: r29, Val = 0x00000000 ; Reg: r30, Val = 0x0000002c ; Reg: r31, Val = 0x00000000 ; Reg: cr, Val = 0x840000
Call trace: Function Address = 0x8012a4b4 Function Address = 0x8017989c Function Address = 0x80179b30 Function Address = 0x80127438 Function Address = 0x8012d734 Function Address = 0x80100a00 Function Address = 0xe0071004 Function Address = 0x8016ce0c Function Address = 0x801223a0 Instruction dump: 41a2fe9c 812300ec 800200ec 7f890000 409efe8c 80010014 540b07b9 40a2fe80 4bfffe6c 80780290 7f64db78 4804ea35 <807f002c> 38800000 38a00080 3863000c For detailed information about the command output, see Table 53.
Table 56 Command output Field Description Starvation timer (in seconds): n Time interval (in seconds) to identify a kernel thread starvation. A kernel thread starvation occurs if a kernel thread does not run within n seconds. Threads excluded from monitoring Kernel threads excluded from kernel thread starvation detection. Name Kernel thread name. TID Kernel thread number.
Examples # Display state information for process scmd. display process name scmd Job ID: 1 PID: 1 Parent JID: 0 Parent PID: 0 Executable path: Instance: 0 Respawn: OFF Respawn count: 1 Max. spawns per minute: 0 Last started: Wed Jun 1 14:45:46 2013 Process state: sleeping Max. core: 0 ARGS: TID LAST_CPU 1 Stack PRI State 0K 120 S 0 HH:MM:SS:MESC Name 0:0:5:220 scmd Table 57 Command output Field Description Job ID Job ID of the process. The job ID never changes.
Field Description Max. core Maximum number of core files that the process can create. 0 indicates that the process never creates a core file. A process creates a core file after it abnormally restarts. If the number of core files reaches the maximum value, no more core files are created. Core files are helpful for troubleshooting. ARGS Parameters carried by the process during startup. If the process carries no parameters, this field displays a hyphen (-). TID Thread ID.
Table 58 Command output Field Description JID Job ID of a process. It never changes. PID Number of a process. %CPU CPU usage in percentage (%). %MEM Memory usage in percentage (%). State of a process: STAT • • • • • R—Running. S—Sleeping. T—Traced or stopped. D—Uninterruptible sleep. Z—Zombie. PRI Priority of a process for scheduling. TTY TTY used by a process. It displays a hyphen (-) for non-default MDCs. HH:MM:SS Running time since the latest start.
Examples # Display CPU usage for all processes. display process cpu CPU utilization in 5 secs: 16.8%; 1 min: 4.7%; 5 mins: 4.7% JID 5Sec 1Min 5Min Name 1 0.0% 0.0% 0.0% scmd 2 0.0% 0.0% 0.0% [kthreadd] 3 0.1% 0.0% 0.0% [ksoftirqd/0] 4 0.0% 0.0% 0.0% [watchdog/0] 5 0.0% 0.0% 0.0% [events/0] 6 0.0% 0.0% 0.0% [khelper] 29 0.0% 0.0% 0.0% [kblockd/0] 49 0.0% 0.0% 0.0% [vzmond] 52 0.0% 0.0% 0.0% [pdflush] 53 0.0% 0.0% 0.0% [pdflush] 54 0.0% 0.
In IRF mode: display process log [ chassis chassis-number slot slot-number ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters slot slot-number: Specifies a card by its slot number. Without this option, the command displays log information for all user processes on the active MPU. (In standalone mode.) chassis chassis-number slot slot-number: Specifies a card on an IRF member device.
display process memory Use display process memory to display memory usage for all user processes. Syntax In standalone mode: display process memory [ slot slot-number ] In IRF mode: display process memory [ chassis chassis-number slot slot-number ] Views Any view Predefined user roles network-admin network-operator mdc-admin mdc-operator Parameters slot slot-number: Specifies a card by its slot number. Without this option, the command displays memory usage for all user processes on the active MPU.
---- More ---- Table 61 Command output Field Description JID Job ID of a process. It never changes. Text Text memory used by the user process, in KB. The value for a kernel thread is 0. Data Data memory used by the user process, in KB. The value for a kernel thread is 0. Stack Stack memory used by the user process, in KB. The value for a kernel thread is 0. Dynamic Dynamic memory used by the user process, in KB. The value for a kernel thread is 0. Name Name of the user process.
Usage guidelines Heap memory comprises fixed-sized blocks such as 16-byte or 64-byte blocks. It stores data and variables used by the user process. When a user process starts, the system dynamically allocates heap memory to the process. Each memory block has an address represented in hexadecimal format, which can be used to access the memory block.
display process memory heap address Use display process memory heap address to display memory content starting from a specified memory block for a process.
Related commands • display process memory heap • display process memory heap size display process memory heap size Use display process memory heap size to display the addresses of memory blocks with a specified size used by a process.
0xb7e30140 0xb7e30150 0xb7e30160 0xb7e30170 0xb7e30180 0xb7e30190 0xb7e301a0 0xb7e301b0 0xb7e301c0 0xb7e301d0 0xb7e301e0 0xb7e301f0 0xb7e30200 0xb7e30210 0xb7e30220 0xb7e30230 # Display the addresses of 16-byte memory blocks starting from the fifth block used by process job 1.
Related commands • display exception filepath • process core monitor kernel deadloop enable Use monitor kernel deadloop enable to enable kernel thread deadloop detection. Use undo monitor kernel deadloop enable to disable kernel thread deadloop detection.
Related commands • display kernel deadloop • display kernel deadloop configuration • monitor kernel deadloop exclude-thread • monitor kernel deadloop time monitor kernel deadloop exclude-thread Use monitor kernel deadloop exclude-thread to disable kernel thread deadloop detection for a kernel thread. Use undo monitor kernel deadloop exclude-thread to enable kernel thread deadloop detection for a kernel thread.
system-view [Sysname]monitor kernel deadloop exclude-thread 15 Related commands • display kernel deadloop configuration • display kernel deadloop • monitor kernel deadloop enable • monitor kernel deadloop time monitor kernel deadloop time Use monitor kernel deadloop time to set the interval for identifying a kernel thread deadloop. Use undo monitor kernel deadloop time to restore the default.
Examples # Set the interval for identifying a kernel thread deadloop to 8 seconds. system-view [Sysname] monitor kernel deadloop time 8 Related commands • display kernel deadloop configuration • display kernel deadloop • monitor kernel deadloop enable • monitor kernel deadloop exclude-thread monitor kernel starvation enable Use monitor kernel starvation enable to enable kernel thread starvation detection.
Inappropriate use of this command can cause service problems or system breakdown. Make sure you understand the impact of this command on your network before you use it. Examples # Enable kernel thread starvation detection.
Usage guidelines You can disable kernel thread starvation detection for up to 128 kernel threads by executing the command. HP recommends using the default settings. Inappropriate use of this command can cause service problems or system breakdown. Make sure you understand the impact of this command on your network before you use it. Examples # Disable kernel thread starvation detection for kernel thread 15.
Usage guidelines If a thread is not executed within the specified interval, the system considers that a starvation has occurred, and outputs a starvation message. HP recommends using the default settings. Inappropriate use of this command can cause service problems or system breakdown. Make sure you understand the impact of this command on your network before you use it. Examples # Set the interval for identifying a kernel thread starvation to 20 seconds.
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. Without this option, the command displays process statistics for the global active MPU. (In IRF mode.) Usage guidelines If you do not specify the dumbtty keyword, the command displays process statistics in an interactive mode. In this mode, the system automatically determines the number of displayed processes according to the screen size, and does not display exceeding processes.
6 6 115 S 0 0K 00:00:01 0.00% [events/0] 7 7 115 S 0 0K 00:00:00 0.00% [khelper] 4797 4797 120 S 8 28832K 00:00:02 0.00% comsh 5117 5117 120 S 8 1496K 00:00:00 0.00% top # Display process statistics twice in dumbtty mode. monitor process dumbtty iteration 2 76 processes; 103 threads; 687 fds Thread states: 1 running, 102 sleeping, 0 stopped, 0 zombie CPU states: 44.84% idle, 0.51% user, 39.17% kernel, 15.
5 5 99 S 0 0K 00:00:00 0.00% [watchdog/0] 7 7 115 S 0 0K 00:00:00 0.00% [khelper] 4796 4796 120 S 11 2744K 00:00:00 0.00% login 4797 4797 120 S 8 28832K 00:00:03 0.00% comsh # Display process statistics in interactive mode. monitor process 76 processes; 103 threads; 687 fds Thread states: 1 running, 102 sleeping, 0 stopped, 0 zombie CPU states: 78.98% idle, 0.16% user, 14.57% kernel, 6.
Thread states: 2 running, 111 sleeping, 0 stopped, 0 zombie CPU states: 86.57% idle, 0.83% user, 11.74% kernel, 0.83% interrupt Memory: 755M total, 414M available, page size 4K JID PID PRI State FDs MEM HH:MM:SS CPU Name 864 864 120 S 24 27020K 00:00:43 8.95% syslogd 1173 1173 120 R 24 2664K 00:00:01 2.37% top 866 866 120 S 18 10276K 00:00:09 0.69% devd 1 1 120 S 16 1968K 00:00:04 0.41% scmd 881 881 120 S 8 2420K 00:00:07 0.
Field Description State of a process: State • • • • • R—Running. S—Sleeping. T—Traced or stopped. D—Uninterruptible sleep. Z—Zombie. FDs Number of open files for a process. MEM Memory usage. It displays 0 for a kernel thread. HH:MM:SS Running time of a process since last restart. CPU CPU usage of a process. Name Name of a process. If square brackets ([ ]) exist in a process name, the process is a kernel thread. monitor thread Use monitor thread to display thread statistics.
Usage guidelines If you do not specify the dumbtty keyword, the command displays thread statistics in an interactive mode. In this mode, the system automatically determines the number of displayed thread processes according to the screen size and does not display exceeding processes. You can also input interactive commands as shown in Table 65 to perform relevant operations. Table 65 Interactive commands Commands Description ? or h Displays help information that includes available interactive commands.
CPU states: 94.43% idle, 0.76% user, 3.64% kernel, 1.15% interrupt Memory: 755M total, 417M available, page size 4K • JID TID LAST_CPU PRI State HH:MM:SS MAX CPU Name 1176 1176 0 120 R 00:00:01 1 3.42% top 866 866 0 120 S 00:00:12 1 0.85% devd 881 881 0 120 S 00:00:09 1 0.64% diagd 1 1 0 120 S 00:00:06 1 0.42% scmd 1160 1160 0 120 S 00:00:01 1 0.21% sshd 2 2 0 115 S 00:00:00 0 0.00% [kthreadd] 3 3 0 115 S 00:00:01 0 0.
JID TID LAST_CPU PRI State HH:MM:SS MAX CPU Name 1176 1176 0 120 R 00:00:04 1 1.86% top 866 866 0 120 S 00:00:14 1 0.87% devd 1 1 0 120 S 00:00:07 1 0.49% scmd 730 730 0 0 S 00:00:04 1 0.12% [DIBC] 762 762 0 120 S 00:00:22 1 0.12% [MNET] Enter q to quit interactive mode. • Table 66 Command output Field Description 84 processes; 107 threads Numbers of processes and threads. JID Job ID of a thread, which never changes. TID ID of a thread.
Default A process generates a core file for the first exception and does not generate any core files for subsequent exceptions. Predefined user roles network-admin mdc-admin Parameters off: Disables core file generation. maxcore value: Enables core file generation and sets the maximum number of core files, in the range of 1 to 10. name process-name: Specifies a process by its name, a case-insensitive string of 1 to 15 characters. The process core command applies to all instances of the process.
Views User view Predefined user roles network-admin mdc-admin Parameters slot slot-number: Specifies an MPU by its slot number. If you do not specify this option, the active MPU is specified. (In standalone mode.) chassis chassis-number slot slot-number: Specifies an MPU on an IRF member device. If you do not specify this option, the global active MPU is specified. (In IRF mode.) Examples # Clear context information for exceptions.
reset kernel exception Use reset kernel exception to clear kernel thread exception information. Syntax In standalone mode: reset kernel exception [ slot slot-number ] In IRF mode: reset kernel exception [ chassis chassis-number slot slot-number ] Views User view Predefined user roles network-admin Parameters slot slot-number: Specifies an MPU by its slot number. If you do not specify this option, the command clears kernel thread exception information for the active MPU. (In standalone mode.
chassis chassis-number slot slot-number: Specifies an MPU on an IRF member device. If you do not specify this option, the command clears kernel thread reboot information for the global active MPU. (In IRF mode.) Examples # Clear kernel thread reboot information. reset kernel reboot Related commands display kernel reboot reset kernel starvation Use reset kernel starvation to clear kernel thread starvation information.
GOLD commands Only switching fabric modules support GOLD. diagnostic event-log size Use diagnostic event-log size to configure the maximum number of GOLD log entries. Use undo diagnostic event-log size to restore the default. Syntax diagnostic event-log size number undo diagnostic event-log size Default GOLD can save up to 512 log entries. Views System view Predefined user roles network-admin Parameters number: Specifies the maximum number of log entries in the range of 0 to 1024.
In IRF mode: diagnostic monitor enable chassis chassis-number slot slot-number-list [ test test-name ] undo diagnostic monitor enable chassis chassis-number slot slot-number-list [ test test-name ] Default By default, all monitoring diagnostic tests are disabled. Views System view Predefined user roles network-admin Parameters slot slot-number-list: Specifies a space-separated list of up to 7 slot numbers.
diagnostic monitor interval slot slot-number-list [ test test-name ] time time undo diagnostic monitor interval slot slot-number-list [ test test-name ] In IRF mode: diagnostic monitor interval chassis chassis-number slot slot-number-list [ test test-name ] time time undo diagnostic monitor interval chassis chassis-number slot slot-number-list [ test test-name ] Default The default execution interval for monitoring diagnostic tests is 10 seconds.
• display diagnostic content diagnostic simulation Use diagnostic simulation to simulate diagnostic tests. Use undo diagnostic simulation to restore the default.
# (In IRF mode.) Simulate test HGMonitor as failed on card 10 of IRF member device 1. diagnostic simulation chassis 1 slot 10 test HGMonitor failure Related commands display diagnostic simulation display diagnostic content Use display diagnostic content to display information about diagnostic tests.
BoardSteady B***** -NA- # (In IRF mode.) Display brief information about all diagnostic tests on card 10 of IRF member device 1.
Test interval : 00:00:10 Min interval : 00:00:10 Correct-action : -NA- Description : A real-time test that checks HG channel status, disabled by default. Table 67 Command output Field Description B/* Boot-up/Not boot-up. The device does not support boot-up diagnostics. O/* On-demand/Not on-demand. The device does not support on-demand diagnostics. M/* Monitoring/Not monitoring. D/* Disruptive/Non-disruptive. P/* Port-related/Not port-related.
The system records information about test execution in the form of logs. A log entry contains test name, execution time, test result, and failure cause. Log entries are generated for every execution. To reduce the burden of the information center, GOLD logs are not sent to the information center. GOLD logs are cleared when the device starts or when an active and standby switchover occurs. Examples # (In standalone mode.) Display all GOLD log entries.
test test-name: Specifies a test by its name, a case-insensitive string of 1 to 31 characters. If you do not specify this option, test results for all diagnostic tests on the specified card are displayed. verbose: Displays detailed test results for diagnostic tests that are enabled or executed. (Statistics are not included.) Without this parameter, brief test results for the diagnostic tests are displayed. Examples # (In standalone mode.) Display brief test results for all diagnostic tests on card 10.
Field Description Last failure reason Cause for the most recent failed test. If the failed test is simulated, Simulated Test is displayed. If no failure occurs, –NA– is displayed. Next execution time Time for the next execution. If the test is a monitoring test, its next execution time is the most recent execution time plus the execution interval. If the test is not a monitoring test, –NA– is displayed.
display diagnostic simulation chassis 1 slot 10 Chassis 1 slot 10: Name Mode HGMonitor failure Related commands diagnostic simulation reset diagnostic event-log Use reset diagnostic event-log to clear GOLD logs. Syntax reset diagnostic event-log Views User view Predefined user roles network-admin Examples # Clear GOLD logs. reset diagnostic event-log Related commands display diagnostic event-log reset diagnostic result Use reset diagnostic result to clear test results.
diagnostic tests on all devices. If no card is specified, this command clears test results for diagnostic tests on all cards of the device. (In IRF mode.) test test-name: Specifies a test by its name, a case-insensitive string of 1 to 31 characters. If you do not specify this option, test results for all diagnostic tests on the specified card are cleared. Usage guidelines This command does not clear the next execution time in detailed test results. Examples # (In standalone mode.
Support and other resources Contacting HP For worldwide technical support information, see the HP support website: http://www.hp.
Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. [] Square brackets enclose syntax choices (keywords or arguments) that are optional. { x | y | ... } Braces enclose a set of required syntax choices separated by vertical bars, from which you select one.
Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access controller, a unified wired-WLAN module, or the switching engine on a unified wired-WLAN switch. Represents an access point.
Index ACDEFHILMNOPRSTUV display nqa reaction counters,161 A display nqa result,163 advantage-factor,154 display nqa server,222 C display nqa statistics,169 codec-type,154 display ntp-service ipv6 sessions,12 D display ntp-service sessions,16 display ntp-service status,21 data-fill,155 display ntp-service trace,23 data-size,156 display process,266 debugging,1 display process cpu,269 description (any NQA operation type view),157 display process log,270 destination ip,158 display process me
E logfile save,83 enable log updown,62 lsr-path,183 enable snmp trap updown,105 M exception filepath,277 mirroring-group,227 expect data,176 mirroring-group mirroring-cpu,228 expect ip,178 mirroring-group mirroring-port (interface view),229 expect ipv6,178 mirroring-group mirroring-port (system view),230 expect status,177 mirroring-group monitor-egress,231 F mirroring-group monitor-port (interface view),232 filename,179 mirroring-group monitor-port (system view),233 mirroring-group reflec
ntp-service ipv6 source,34 reset kernel reboot,295 ntp-service ipv6 unicast-peer,35 reset kernel starvation,296 ntp-service ipv6 unicast-server,37 reset logbuffer,83 ntp-service max-dynamic-sessions,38 resolve-target,208 ntp-service multicast-client,39 resolve-type,209 ntp-service multicast-server,40 rmon alarm,145 ntp-service refclock-master,41 rmon event,147 ntp-service reliable authentication-keyid,42 rmon history,148 ntp-service source,42 rmon prialarm,149 ntp-service unicast-peer,43
snmp-agent trap queue-size,127 target-only,216 snmp-agent usm-user { v1 | v2c },127 terminal debugging,84 snmp-agent usm-user v3,129 terminal logging level,85 sntp authentication enable,48 terminal monitor,86 sntp authentication-keyid,49 tos,216 sntp enable,50 tracert,8 sntp ipv6 unicast-server,51 tracert ipv6,10 sntp reliable authentication-keyid,52 ttl,217 sntp unicast-server,53 type,218 source interface,210 U source ip,211 url,218 source ipv6,212 username,219 source port,213 stati
