HP FlexFabric 5930 Switch Series Layer 3—IP Services Command Reference Part number: 5998-4568 Software version: Release 2406 & Release 2407P01 Document version: 6W101-20140404
Legal and notice information © Copyright 2014 Hewlett-Packard Development Company, L.P. No part of this documentation may be reproduced or transmitted in any form or by any means without prior written consent of Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Contents ARP commands····························································································································································· 1 arp check log enable ··············································································································································· 1 arp max-learning-num ··············································································································································
expired ··································································································································································· 39 forbidden-ip···························································································································································· 40 gateway-list ························································································································································
dhcp snooping max-learning-num ······················································································································· 84 dhcp snooping rate-limit ······································································································································· 85 dhcp snooping trust ··············································································································································· 85 display dhcp snooping bindi
udp-helper enable ··············································································································································· 131 udp-helper port ···················································································································································· 131 udp-helper server ················································································································································· 132 IPv6 bas
mtu ········································································································································································ 188 reset counters interface ······································································································································· 189 shutdown ······························································································································································ 18
ARP commands arp check log enable Use arp check log enable to enable the ARP logging function. Use undo arp check log enable to disable the ARP logging function. Syntax arp check log enable undo arp check log enable Default ARP logging is disabled. Views System view Predefined user roles network-admin Usage guidelines The device sends ARP log messages to the information center. You can use the info-center source command to set the log output rules on the information center.
Views Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, VLAN interface view, Layer 2 aggregate interface view, Layer 3 aggregate interface view Predefined user roles network-admin Parameters number: Specifies the maximum number of dynamic ARP entries for an interface. The value range is 0 to 16384. Usage guidelines An interface can dynamically learn ARP entries.
Views System view Predefined user roles network-admin Parameters Number: Specifies the maximum number of dynamic ARP entries for a device. The value range is 0 to 16384. slot slot-number: The slot-number argument specifies the ID of the device, and its value must be 1. Usage guidelines A device can dynamically learn ARP entries. To prevent a device from holding too many ARP entries, you can set the maximum number of dynamic ARP entries that a device can learn.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN for a static ARP entry. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. The VPN instance must already exist. To specify a static ARP entry on the public network, do not specify this option. Usage guidelines A static ARP entry is manually configured and maintained. It does not age out and cannot be overwritten by any dynamic ARP entry. Static ARP entries can be classified into long and short static ARP entries.
Predefined user roles network-admin Parameters aging-time: Sets the aging timer for dynamic ARP entries, in the range of 1 to 1440 minutes. Usage guidelines Each dynamic ARP entry in the ARP table has a limited lifetime, called aging timer. The aging timer of a dynamic ARP entry is reset each time the dynamic ARP entry is updated. Dynamic ARP entries that are not updated before their aging timers expire are deleted from the ARP table. Examples # Set the aging timer for dynamic ARP entries to 10 minutes.
If you do not specify any parameters, the command displays all ARP entries. Examples # Display all ARP entries. display arp all Type: S-Static D-Dynamic O-Openflow M-Multiport I-Invalid IP Address MAC Address VLAN Interface Aging Type 20.1.1.1 00e0-fc00-0001 N/A N/A N/A S 193.1.1.70 00e0-fe50-6503 100 FGE1/0/1 N/A IS 192.168.0.115 000d-88f7-9f7d 1 FGE1/0/2 18 D 192.168.0.39 0012-a990-2241 1 FGE1/0/3 20 D 22.1.1.
Field Description Vpn Instance Name of VPN instance. If no VPN instance is configured for the ARP entry, this field displays [No Vrf]. Total number of entries Number of ARP entries. Related commands • arp static • reset arp display arp ip-address Use display arp ip-address to display the ARP entry for a specific IP address.
Syntax display arp timer aging Views Any view Predefined user roles network-admin network-operator Examples # Display the aging timer of dynamic ARP entries. display arp timer aging Current ARP aging time is 10 minute(s) Related commands arp timer aging display arp vpn-instance Use display arp vpn-instance to display the ARP entries for a specific VPN.
reset arp Use reset arp to clear ARP entries from the ARP table. Syntax reset arp { all | dynamic | interface interface-type interface-number| slot slot-number | static } Views User view Predefined user roles network-admin Parameters all: Clears all ARP entries. dynamic: Clears all dynamic ARP entries. static: Clears all static ARP entries. slot slot-number: The slot-number argument specifies the ID of the device, and its value must be 1.
Gratuitous ARP commands arp send-gratuitous-arp Use arp send-gratuitous-arp to enable periodic sending of gratuitous ARP packets and set the sending interval on an interface. Use undo arp send-gratuitous-arp to disable the interface from periodically sending gratuitous ARP packets. Syntax arp send-gratuitous-arp [ interval milliseconds ] undo arp send-gratuitous-arp Default Periodic sending of gratuitous ARP is disabled.
gratuitous-arp-learning enable Use gratuitous-arp-learning enable to enable learning of gratuitous ARP packets. Use undo gratuitous-arp-learning enable to disable learning of gratuitous ARP packets. Syntax gratuitous-arp-learning enable undo gratuitous-arp-learning enable Default Learning of gratuitous ARP packets is enabled.
Predefined user roles network-admin Examples # Disable a device from sending gratuitous ARP packets upon receiving ARP requests whose target IP address is on a different subnet.
IP addressing commands display ip interface Use display ip interface to display IP configuration and statistics for the specified Layer 3 interface or all Layer 3 interfaces. Syntax display ip interface [ interface-type interface-number ] Views Any view Predefined user roles network-admin network-operator Parameters interface-type interface-number: Specifies an interface by its type and number.
Router solicit: 0 Time exceed: 0 IP header bad: 0 Timestamp request: 0 Timestamp reply: 0 Information request: 0 Information reply: 0 Netmask request: 0 Netmask reply: 0 Unknown type: 0 Table 2 Command output Field Description Current physical state of the interface: • Administrative DOWN—The interface is shut down with the shutdown current state command. • DOWN—The interface is administratively up but its physical state is down, which might be caused by a connection or link failure.
Field ICMP packet input number: Echo reply: Unreachable: Source quench: Routing redirect: Echo request: Router advert: Router solicit: Time exceed: IP header bad: Timestamp request: Timestamp reply: Information request: Information reply: Netmask request: Netmask reply: Unknown type: Description Total number of ICMP packets received on the interface (statistics start at the device startup): • • • • • • • • • • • • • • • • Echo reply packets. Unreachable packets. Source quench packets.
If you do not specify the interface type and interface number, this command displays the brief IP configuration information for all Layer 3 interfaces. If you specify only the interface type, this command displays the brief IP configuration information for all Layer 3 interfaces of the specified type. If you specify both the interface type and interface number, this command displays the brief IP configuration information for the specified interface.
Use undo ip address to remove the IP address from the interface. Syntax ip address ip-address { mask-length | mask } [ sub ] undo ip address [ ip-address { mask-length | mask } [ sub ] ] Default No IP address is assigned to an interface. Views Interface view Predefined user roles network-admin Parameters ip-address: Specifies the IP address of the interface, in dotted decimal notation. mask-length: Specifies the subnet mask length in the range of 1 to 31.
DHCP commands Common DHCP commands dhcp dscp Use dhcp dscp to set the DSCP value for DHCP packets sent by the DHCP server or the DHCP relay agent. Use undo dhcp dscp to restore the default. Syntax dhcp dscp dscp-value undo dhcp dscp Default The DSCP value in DHCP packets is 56. Views System view Predefined user roles network-admin Parameters dscp-value: Sets the DSCP value for DHCP packets, in the range of 0 to 63.
Views System view Predefined user roles network-admin Usage guidelines Enable DHCP before you perform DHCP server or relay agent configurations. Examples # Enable DHCP. system-view [Sysname] dhcp enable dhcp select Use dhcp select to enable the DHCP server or DHCP relay agent on an interface. Use undo dhcp select to disable the DHCP server or DHCP relay agent on an interface. The interface discards DHCP packets.
DHCP server commands address range Use address range to configure an IP address range in a DHCP address pool for dynamic allocation. Use undo address range to remove the IP address range in the address pool. Syntax address range start-ip-address end-ip-address undo address range Default No IP address range is configured. Views DHCP address pool view Predefined user roles network-admin Parameters start-ip-address: Specifies the start IP address. end-ip-address: Specifies the end IP address.
bims-server Use bims-server to specify the IP address, port number, and shared key of the BIMS server in a DHCP address pool. Use undo bims-server to remove the specified BIMS server information. Syntax bims-server ip ip-address [ port port-number ] sharekey { cipher | simple } key undo bims-server Default No BIMS server information is specified. Views DHCP address pool view Predefined user roles network-admin Parameters ip ip-address: Specifies the IP address of the BIMS server.
Syntax bootfile-name bootfile-name undo bootfile-name Default No bootfile name is specified. Views DHCP address pool view Predefined user roles network-admin Parameters bootfile-name: Specifies the boot file name, a case-sensitive string of 1 to 63 characters. Usage guidelines If you use the bootfile-name command multiple times, the most recent configuration takes effect. Examples # Specify the boot file name boot.cfg in DHCP address pool 0.
Parameters class-name: Specifies the name of a DHCP user class, a case-insensitive string of 1 to 63 characters. If the specified user class does not exist, the DHCP server will not assign the addresses in the address range specified for the user class to any client. start-ip-address: Specifies the start IP address. end-ip-address: Specifies the end IP address. Usage guidelines The class command enables you to divide an address range into multiple address ranges for different DHCP user classes.
Parameters class-name: Specifies the name of a DHCP user class, a case-insensitive string of 1 to 63 characters. Usage guidelines In the DHCP user class view, use the if-match command to configure a match rule to match specific clients. Then use the class command to specify an IP address range for the matching clients. Examples # Create a DHCP user class test and enter DHCP user class view.
system-view [Sysname] dhcp server always-broadcast dhcp server apply ip-pool Use dhcp server apply ip-pool to apply an address pool on an interface. Use undo dhcp server apply ip-pool to remove the configuration.
Default The DHCP server does not ignore BOOTP requests. Views System view Predefined user roles network-admin Usage guidelines The lease duration of IP addresses obtained by BOOTP clients is unlimited. For scenarios that do not allow unlimited leases, you can configure the DHCP server to ignore BOOTP requests. Examples # Configure the DHCP server to ignore BOOTP requests.
dhcp server forbidden-ip Use dhcp server forbidden-ip to exclude specific IP addresses from dynamic allocation. Use undo dhcp server forbidden-ip to remove the configuration. Syntax dhcp server forbidden-ip start-ip-address [ end-ip-address ] undo dhcp server forbidden-ip start-ip-address [ end-ip-address ] Default No IP addresses are excluded from dynamic allocation. Views System view Predefined user roles network-admin Parameters start-ip-address: Specifies the start IP address.
Syntax dhcp server ip-pool pool-name undo dhcp server ip-pool pool-name Default No DHCP address pool is created. Views System view Predefined user roles network-admin Parameters pool-name: Specifies the name for the DHCP address pool, a case-insensitive string of 1 to 63 characters used to uniquely identify this pool. Usage guidelines A DHCP address pool is used to store the configuration parameters to be assigned to DHCP clients. Examples # Create a DHCP address pool named pool1.
Usage guidelines To avoid IP address conflicts, the DHCP server pings an IP address before assigning it to a DHCP client. If a ping attempt succeeds, the server considers that the IP address is in use and picks a new IP address. If all the ping attempts are failed, the server assigns the IP address to the requesting DHCP client. Examples # Specify the maximum number of ping packets as 10.
• display dhcp server conflict • reset dhcp server conflict dhcp server relay information enable Use dhcp server relay information enable to enable the DHCP server to handle Option 82. Use undo dhcp server relay information enable to configure the DHCP server to ignore Option 82. Syntax dhcp server relay information enable undo dhcp server relay information enable Default The DHCP server handles Option 82.
• Before assigning an IP address to a DHCP client, the DHCP server pings the IP address and discovers that it has been used by other host. • The DHCP client sends a DECLINE packet to the DHCP server to inform the server of an IP address conflict. • The DHCP server discovers that the only assignable address in the address pool is its own IP address. Examples # Display information about all IP address conflicts. display dhcp server conflict IP address Detect time 4.4.4.
Examples # Display all lease expiration information. display dhcp server expired IP address Client-identifier/Hardware address Lease expiration 4.4.4.6 3030-3066-2e65-3230-302e-3130-3234 Apr 25 17:10:47 2007 -2d45-7468-6572-6e65-7430-2f31 Table 5 Command output Field Description IP address Expired IP address. Client-identifier/Hardware address Client ID or MAC address. Lease expiration Time when the lease expired.
Pool name: 2 Network: 20.1.1.0 mask 255.255.255.0 IP ranges from 20.1.1.0 to 20.1.1.255 Table 6 Command output Field Description Pool name Name of the address pool. Network Assignable network. IP ranges Assignable IP address range. Secondary networks Assignable secondary networks. Related commands • address range • dhcp server ip-pool • network display dhcp server ip-in-use Use display dhcp server ip-in-use to display binding information about assigned IP addresses.
10.1.1.1 4444-4444-4444 Not used Static(F) 10.1.1.2 3030-3030-2e30-3030- May 1 14:02:49 2009 Auto(C) After 2100 Static(C) 662e-3030-3033-2d457468-6572-6e65-74 10.1.1.3 1111-1111-1111 Table 7 Command output Field Description IP address IP address assigned. Client identifier/Hardware address Client ID or hardware address. Lease expiration time: • Exact time (May 1 14:02:49 2009 in this example)—Time when the lease will expire.
Parameters pool-name: Displays information about the specified address pool. The pool name is a case-insensitive string of 1 to 63 characters. If you do not specify the pool-name argument, the command displays information about all address pools. Examples # Display information about all DHCP address pools. display dhcp server pool Pool name: 0 Network 20.1.1.0 mask 255.255.255.0 class a range 20.1.1.50 20.1.1.60 bootfile-name abc.cfg dns-list 20.1.1.66 20.1.1.67 20.1.1.68 domain-name www.aabbcc.
ip-address 10.10.1.2 mask 255.0.0.0 hardware-address 00e0-00fc-0001 ethernet ip-address 10.10.1.3 mask 255.0.0.0 client-identifier aaaa-bbbb expired unlimited Table 8 Command output Field Description Pool name Name of an address pool. Network Assignable network. secondary networks Assignable secondary networks. address range Assignable address range. class class-name range DHCP user class and its address range. static bindings Static IP-to-MAC/client ID bindings.
Views Any view Predefined user roles network-admin network-operator Parameters pool pool-name: Specifies an address pool by its name, a case-insensitive string of 1 to 63 characters. Without this option, the command displays information about all address pools. Examples # Display the DHCP server statistics. display dhcp server statistics Pool number: 1 Pool utilization: 0.
Field Description Conflict Total number of conflict addresses. This field is not displayed if you display statistics for a specific address pool. DHCP packets received from clients: Messages received • • • • • • DHCPDISCOVER DHCPREQUEST DHCPDECLINE DHCPRELEASE DHCPINFORM BOOTPREQUEST This field is not displayed if you display statistics for a specific address pool.
Usage guidelines If you use the dns-list command multiple times, the most recent configuration takes effect. The undo dns-list command without any parameter specified deletes all DNS server addresses in the DHCP address pool. Examples # Specify the DNS server address 10.1.1.254 in DHCP address pool 0. system-view [Sysname] dhcp server ip-pool 0 [Sysname-dhcp-pool-0] dns-list 10.1.1.
Use undo expired to restore the default lease duration for a DHCP address pool. Syntax expired { day day [ hour hour [ minute minute [ second second ] ] ] | unlimited } undo expired Default The lease duration of a dynamic address pool is one day. Views DHCP address pool view Predefined user roles network-admin Parameters day day: Specifies the number of days, in the range of 0 to 365. hour hour: Specifies the number of hours, in the range of 0 to 23.
Default No IP addresses are excluded from dynamic allocation in an address pool. Views DHCP address pool view Predefined user roles network-admin Parameters ip-address&<1-8>: Specifies excluded IP addresses. &<1-8> indicates that you can specify up to eight IP addresses, separated by spaces. Usage guidelines The excluded IP addresses in an address pool are still assignable in other address pools. You can exclude a maximum of 4096 IP addresses in an address pool.
Parameters ip-address&<1-8>: Specifies gateways. &<1-8> indicates that you can specify up to eight gateway addresses separated by spaces. Gateway addresses must reside on the same subnet as the assignable IP addresses. Usage guidelines If you use this command multiple times, the most recent configuration takes effect. Without any parameters specified, the undo gateway-list command deletes all gateway addresses.
mask mask: Specifies the mask used to match the option content. The mask argument is a hex string of even numbers in the range of 2 to 256. The length of mask must be the same as that of hex-string. offset offset: Specifies the offset to match the option, in the range of 0 to 254 bytes. If you do not specify the offset argument, the server matches the entire option with the rule. length length: Matches the specified length of the option, in the range of 1 to 128 bytes.
nbns-list Use nbns-list to specify WINS server addresses in a DHCP address pool. Use undo nbns-list to remove the specified WINS server addresses. Syntax nbns-list ip-address&<1-8> undo nbns-list [ ip-address&<1-8> ] Default No WINS server address is specified. Views DHCP address pool view Predefined user roles network-admin Parameters ip-address&<1-8>: Specifies WINS server IP addresses. &<1-8> indicates that you can specify up to eight WINS server addresses separated by spaces.
Views DHCP address pool view Predefined user roles network-admin Parameters b-node: Specifies the broadcast node. A b-node client sends the destination name in a broadcast message to get the name-to-IP mapping from a server. h-node: Specifies the hybrid node. An h-node client unicasts the destination name to a WINS server. If it does not receive a response, the h-node client broadcasts the destination name to get the mapping from a server. m-node: Specifies the mixed node.
Parameters network-address: Specifies the subnet for dynamic allocation. If no mask length or mask is specified, the natural mask will be used. mask-length: Specifies the mask length in the range of 1 to 30. mask mask: Specifies the mask in dotted decimal format. secondary: Specifies the subnet as a secondary subnet. Without this keyword, this command specifies the primary subnet. If the addresses in the primary subnet are used up, the DHCP server can select addresses from a secondary subnet for clients.
Views DHCP address pool view Predefined user roles network-admin Parameters ip-address: Specifies the IP address of a server. Usage guidelines Upon startup, the DHCP client obtains its own IP address and the specified server IP address, and then contacts the specified server, such as a TFTP server, to get other boot information. If you use the next-server command multiple times, the most recent configuration takes effect. Examples # Specify a server's IP address 10.1.1.254 in DHCP address pool 0.
Usage guidelines The DHCP server fills the customized option with the specified ASCII string, hex string, or IP addresses, and sends it in a response to the client. If you use the option command with the same code specified, the most recent configuration takes effect. You can customize options for the following purposes: • Add newly released options. • Add options for which the vendor defines the contents, for example, Option 43.
Examples # Clear all IP address conflict information. reset dhcp server conflict Related commands display dhcp server conflict reset dhcp server expired Use reset dhcp server expired to clear binding information about expired IP addresses. Syntax reset dhcp server expired [ ip ip-address | pool pool-name ] Views User view Predefined user roles network-admin Parameters ip ip-address: Clears binding information about the specified expired IP address.
pool pool-name: Clears binding information about the specified address pool. The pool name is a case-insensitive string of 1 to 63 characters. Usage guidelines Using this command without any parameter clears binding information about all assigned IP addresses. If you use this command to clear information about an assigned static binding, the static binding becomes an unassigned static binding. Examples # Clear binding information about the IP address 10.110.1.1.
Predefined user roles network-admin Parameters ip-address ip-address: Specifies the IP address of the static binding. The natural mask is used if no mask length or mask is specified. mask-length: Specifies the mask length in the range of 1 to 30. mask mask: Specifies the mask, in dotted decimal format. client-identifier client-identifier: Specifies the client ID of the static binding, a string of 4 to 254 characters that can contain only hexadecimal numbers and hyphen (-), in the format of H-H-H….
Default No TFTP server name is specified. Views DHCP address pool view Predefined user roles network-admin Parameters domain-name: Specifies the TFTP server name, a case-sensitive string of 1 to 63 characters. Usage guidelines If you use this command multiple times, the most recent configuration takes effect. Examples # Specify the TFTP server name aaa in DHCP address pool 0.
system-view [Sysname] dhcp server ip-pool 0 [Sysname-dhcp-pool-0] tftp-server ip-address 10.1.1.1 Related commands • display dhcp server pool • tftp-server domain-name voice-config Use voice-config to configure the content for Option 184 in a DHCP address pool. Use undo voice-config to remove the Option 184 content from a DHCP address pool.
Related commands display dhcp server pool DHCP relay agent commands dhcp relay check mac-address Use dhcp relay check mac-address to enable MAC address check on the relay agent. Use undo dhcp relay check mac-address to disable MAC address check on the relay agent. Syntax dhcp relay check mac-address undo dhcp relay check mac-address Default The MAC address check function is disabled.
Use undo dhcp relay check mac-address aging time to restore the default. Syntax dhcp relay check mac-address aging-time time undo dhcp relay check mac-address aging-time Default The aging time is 300 seconds. Views System view Predefined user roles network-admin Parameters time: Specifies the aging time for MAC address check entries in seconds, in the range of 30 to 600. Usage guidelines This command takes effect only after you execute the dhcp relay check mac-address command.
Examples # Enable recording of relay entries on the relay agent. system-view [Sysname] dhcp relay client-information record Related commands • dhcp relay client-information refresh • dhcp relay client-information refresh enable dhcp relay client-information refresh Use dhcp relay client-information refresh to configure the interval at which the DHCP relay agent periodically refreshes relay entries. Use undo dhcp relay client-information refresh to restore the default.
Use undo dhcp relay client-information refresh enable to disable the relay agent to periodically refresh dynamic relay entries. Syntax dhcp relay client-information refresh enable undo dhcp relay client-information refresh enable Default The DHCP relay agent periodically refreshes relay entries. Views System view Predefined user roles network-admin Usage guidelines A DHCP client unicasts a DHCP-RELEASE message to the DHCP server to release its IP address.
undo dhcp relay information circuit-id Default The content mode is normal and the padding format is hex. Views Interface view Predefined user roles network-admin Parameters string circuit-id: Specifies a case-sensitive string of 3 to 63 characters as the content of the circuit ID sub-option. normal: Specifies the normal mode, in which the padding content consists of the VLAN ID and port number. verbose: Specifies the verbose mode. The padding content includes the VLAN ID and interface number.
Table 10 Padding format for different modes Keyword (mode) If no padding format is specified If the padding format is ascii The padding format is hex string circuit-id You cannot specify a padding format, and the padding format is always ASCII. N/A N/A normal Hex. ASCII. Hex. Hex for the VLAN ID. verbose ASCII for the node identifier, Ethernet type, and interface number. ASCII. ASCII for the node identifier and Ethernet type. Hex for the interface number and VLAN ID.
Usage guidelines This command enables the DHCP relay agent to add Option 82 to DHCP requests that do not contain Option 82 before forwarding the requests to the DHCP server. The content of Option 82 is determined by the dhcp relay information circuit-id and dhcp relay information remote-id commands. If the DHCP requests contain Option 82, the relay agent handles the requests according to the strategy configured with the dhcp relay information strategy command.
string remote-id: Specifies a case-sensitive string of 1 to 63 characters as the content of the remote ID sub-option. sysname: Uses the device name as the content of the remote ID sub-option. You can set the device name by using the sysname command. Usage guidelines The padding format for the specified character string (string) or the device name (sysname) is always ASCII. The padding format for the normal mode is determined by the command.
When enabled to support Option 82, the DHCP relay agent always adds Option 82 into DHCP requests that do not contain Option 82 before forwarding the requests to the DHCP. Examples # Specify the handling strategy for Option 82 as keep.
undo dhcp relay server-address [ ip-address ] Default No DHCP server is specified on the relay agent. Views Interface view Predefined user roles network-admin Parameters ip-address: Specifies the IP address of a DHCP server. The DHCP relay agent forwards DHCP packets received from DHCP clients to this DHCP server. Usage guidelines The specified IP address of the DHCP server must not reside on the same subnet as the IP address of the DHCP relay agent interface.
23f3-1122-adf1 FGE1/0/1 10 23f3-1122-2230 FGE1/0/2 30 Table 11 Command output Field Description Source MAC Source MAC address of the attacker. Interface Interface where the attack comes from. Aging-time Aging time of the MAC address check entry, in seconds. display dhcp relay client-information Use display dhcp relay client-information to display relay entries on the relay agent.
Table 12 Command output Field Description Total number of client-information items Total number of relay entries. Total number of dynamic items Total number of dynamic relay entries. Total number of temporary items Total number of temporary relay entries. IP address IP address of the DHCP client. MAC address MAC address of the DHCP client. Relay entry type: • Dynamic—The relay agent creates a dynamic relay entry upon receiving an ACK response from the DHCP server.
Remote ID Pattern: Sysname Circuit ID format-type: Undefined Remote ID format-type: ASCII Node identifier: aabbcc Interface: Vlan-interface200 Status: Enable Strategy: Replace Circuit ID Pattern: User Defined Remote ID Pattern: User Defined Circuit ID format-type: ASCII Remote ID format-type: ASCII User defined: Circuit ID: vlan100 Remote ID: device001 Table 13 Command output Field Description Interface Interface name.
Predefined user roles network-admin network-operator Parameters interface interface-type interface-number: Displays DHCP server addresses on the specified interface. If you do not specify any interface, the command displays DHCP server addresses on all interfaces operating in DHCP relay agent mode. Examples # Display DHCP server addresses on all interfaces operating in DHCP relay agent mode. display dhcp relay server-address Interface name FortyGigE1/0/1 Server IP address 2.2.2.
DHCPREQUEST: 0 DHCPINFORM: 0 DHCPRELEASE: 0 DHCPDECLINE: 0 BOOTPREQUEST: 0 DHCP packets received from servers: 0 DHCPOFFER: 0 DHCPACK: 0 DHCPNAK: 0 BOOTPREPLY: 0 DHCP packets relayed to servers: 0 DHCPDISCOVER: 0 DHCPREQUEST: 0 DHCPINFORM: 0 DHCPRELEASE: 0 DHCPDECLINE: 0 BOOTPREQUEST: 0 DHCP packets relayed to clients: 0 DHCPOFFER: 0 DHCPACK: 0 DHCPNAK: 0 BOOTPREPLY: 0 DHCP packets sent to servers: 0 DHCPDISCOVER: 0 DHCPREQUEST: 0 DHCPINFORM: 0 DHCPRELEASE
Predefined user roles network-admin Parameters interface interface-type interface-number: Clears relay entries on the specified interface. ip ip-address: Clears the relay entry for the specified IP address. vpn-instance vpn-instance-name: Clears the relay entry for the specified IP address in the specified MPLS L3VPN instance. The vpn-instance-name is a case-sensitive string of 1 to 31 characters. If you do not specify any VPN instance, the command clears the relay entry in the public network.
Use undo dhcp client dad enable to disable duplicate address detection. Syntax dhcp client dad enable undo dhcp client dad enable Default The duplicate address detection feature is enabled on an interface. Views System view Predefined user roles network-admin Usage guidelines DHCP client detects IP address conflict through ARP packets. An attacker can act as the IP address owner to send an ARP reply, which makes the client unable to use the IP address assigned by the server.
system-view [Sysname] dhcp client dscp 30 dhcp client identifier Use dhcp client identifier to configure a DHCP client ID for an interface. Use undo dhcp client identifier to restore the default. Syntax dhcp client identifier { ascii string | hex string | mac interface-type interface-number } undo dhcp client identifier Default An interface generates an ASCII character string as the DHCP client ID based on its MAC address and the interface name.
Views Any view Predefined user roles network-admin network-operator Parameters verbose: Displays verbose DHCP client information. interface interface-type interface-number: Specifies an interface by its type and number. Usage guidelines If you do not specify any interface, the command displays DHCP client information about all interfaces. Examples # Display DHCP client information about all interfaces.
Field Description Current state of the DHCP client: • HALT—The client stops applying for an IP address. • INIT—The initialization state. • SELECTING—The client has sent out a DHCP-DISCOVER message in search for a DHCP server and is waiting for the response from DHCP servers. Current state • REQUESTING—The client has sent out a DHCP-REQUEST message requesting for an IP address and is waiting for the response from DHCP servers.
• ip address dhcp-alloc ip address dhcp-alloc Use ip address dhcp-alloc to configure an interface to use DHCP for IP address acquisition. Use undo ip address dhcp-alloc to cancel an interface from using DHCP. Syntax ip address dhcp-alloc undo ip address dhcp-alloc Default An interface does not use DHCP for IP address acquisition.
Views System view Predefined user roles network-admin Parameters filename: Specifies the name of a local file. For information about the filename argument, see Fundamentals Configuration Guide. url url: Specifies the URL of a remote file. Do not include any username or password in the URL. Case sensitivity and the supported path format type depend on the server. username username: Specifies the username for logging in to the remote device. cipher: Sets a ciphertext password.
# Save DHCP snooping entries to file database.dhcp in the working directory of the TFTP server at 10.1.1.1. system-view [Sysname] dhcp snooping binding database filename tftp://10.1.1.1/database.dhcp Related commands dhcp snooping binding database update interval dhcp snooping binding database update interval Use dhcp snooping binding database update interval to set the amount of time to wait to update the database file after a DHCP snooping entry changes.
Syntax dhcp snooping binding database update now Views System view Predefined user roles network-admin Usage guidelines Use this command to manually save DHCP snooping entries to the database file. Use the dhcp snooping binding database filename command before performing the manual saving operation. Otherwise, the manual saving does not take effect. Examples # Save DHCP snooping entries to the database file.
dhcp snooping check mac-address Use dhcp snooping check mac-address to enable MAC address check for DHCP snooping. Use undo dhcp snooping check mac-address to disable MAC address check for DHCP snooping. Syntax dhcp snooping check mac-address undo dhcp snooping check mac-address Default This function is disabled.
Usage guidelines DHCP-REQUEST packets include lease renewal packets, DHCP-DECLINE packets, and DHCP-RELEASE packets. This function prevents unauthorized clients that forge DHCP-REQUEST packets from attacking the DHCP server. With this function enabled, DHCP snooping looks for a matching DHCP snooping entry for each received DHCP-REQUEST message. • If a match is found, DHCP snooping compares the entry with the message.
dhcp snooping information circuit-id Use dhcp snooping information circuit-id to configure the padding content and code type for the circuit ID sub-option. Use undo dhcp snooping information circuit-id to restore the default.
Usage guidelines If you use this command multiple times, the most recent configuration takes effect. The padding format for the user-defined string, the normal mode, or the verbose modes varies with the command configuration. Table 16 shows how the padding format is determined for different modes.
Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Usage guidelines This command enables DHCP snooping to add Option 82 into DHCP request packets that do not contain Option 82 before forwarding the requests to the DHCP server. The content of Option 82 is determined by the dhcp snooping information circuit-id and dhcp snooping information remote-id commands.
string remote-id: Specifies the character string as the remote ID sub-option, a case-sensitive string of 1 to 63 characters. sysname: Specifies the device name as the remote ID sub-option. You can configure the device name by using the sysname command in system view. normal: Specifies the normal padding format. The padding content is the MAC address of the receiving interface. format: Specifies the code type for the remote ID sub-option. The default code type is hex. ascii: Specifies the ASCII code type.
Parameters drop: Drops DHCP messages that contain Option 82. keep: Keeps the original Option 82 intact. replace: Replaces the original Option 82 with the configured Option 82. Usage guidelines This command takes effect only on DHCP requests that contain Option 82. When enabled to support Option 82, the DHCP relay agent always adds Option 82 into DHCP requests that do not contain Option 82 before forwarding the requests to the DHCP.
[Sysname-FortyGigE1/0/1] dhcp snooping max-learning-num 1000 dhcp snooping rate-limit Use dhcp snooping rate-limit to configure the maximum rate at which an interface can receive DHCP packets. Use undo dhcp snooping rate-limit to remove the rate limit. Syntax dhcp snooping rate-limit rate undo dhcp snooping rate-limit Default Incoming DHCP packets on an interface are not rate limited.
Default After you enable DHCP snooping, all ports are untrusted. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Usage guidelines Specify the ports facing the DHCP server as trusted ports and specify the other ports as untrusted ports so DHCP clients can obtain valid IP addresses. Examples # Specify the Layer 2 Ethernet interface FortyGigE 1/0/1 as a trusted port.
1.1.1.4 0000-0101-0104 16907530 2 3 BAGG1023 1.1.1.7 0000-0101-0107 16907533 2 3 BAGG1023 1.1.1.11 0000-0101-010b 16907537 2 3 BAGG1023 Table 17 Command output Field Description DHCP snooping entries found Number of DHCP snooping entries. IP address IP address assigned to the DHCP client. MAC address MAC address of the DHCP client. Lease Remaining lease duration in seconds. VLAN When the DHCP packet contains two VLAN tags, this field identifies the outer VLAN tag.
Table 18 Command output Field Description File name Name of the database file that stores the DHCP snooping entries. Username Username for logging in to the remote device. Password Password for logging in to the remote device. This field displays ****** if a password is configured. Update interval Waiting period before the database file is updated, in seconds. Latest write time Most recent time the file was written.
Circuit ID: abcd Remote ID: company Table 19 Command output Field Description Interface Interface name. Status Option 82 status, Enable or Disable. Strategy Handling strategy for DHCP requests that contain Option 82, Drop, Keep, or Replace. Circuit ID Content of the Circuit ID sub-option. Padding format of Option 82: • For circuit ID sub-option, the padding format can be Normal, User Defined, Verbose (sysname), Verbose (MAC), or Verbose (user defined).
Invalid DHCP packets dropped : 0 Related commands reset dhcp snooping packet statistics display dhcp snooping trust Use display dhcp snooping trust to display information about trusted ports. Syntax display dhcp snooping trust Views Any view Predefined user roles network-admin network-operator Examples # Display information about trusted ports. display dhcp snooping trust DHCP snooping is enabled. DHCP snooping trust becomes active.
Usage guidelines This command applies to all slots. Examples # Clear all DHCP snooping entries. reset dhcp snooping binding all Related commands display dhcp snooping binding reset dhcp snooping packet statistics Use reset dhcp snooping packet statistics to clear DHCP packet statistics for DHCP snooping.
Parameters interface interface-type interface-number: Specifies an interface by its type and number. Usage guidelines If you do not specify any interface, the command displays BOOTP client information about all interfaces. Examples # Display BOOTP client information about VLAN-interface 10. display bootp client interface vlan-interface 10 Vlan-interface10 BOOTP client information: Allocated IP: 169.254.0.2 255.255.0.
Examples # Configure VLAN-interface 10 to use BOOTP for IP address acquisition.
DNS commands display dns domain Use display dns domain to display the domain name suffixes. Syntax display dns domain [ dynamic ] [ vpn-instance vpn-instance-name ] Views Any view Predefined user roles network-admin network-operator Parameters dynamic: Displays the domain name suffixes dynamically obtained through DHCP or other protocols. If this keyword is not specified, the command displays the statically configured and dynamically obtained domain name suffixes.
display dns host Use display dns host to display information about domain name-to-IP address mappings. Syntax display dns host [ ip ] [ vpn-instance vpn-instance-name ] Views Any view Predefined user roles network-admin network-operator Parameters ip: Specifies type A queries. A type A query resolves a domain name to the mapped IPv4 address. vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
Field Description Query type Query type IP addresses Replied IP address: Related commands • ip host • reset dns host display dns server Use display dns server to display IPv4 DNS server information. Syntax display dns server [ dynamic ] [ vpn-instance vpn-instance-name ] Views Any view Predefined user roles network-admin network-operator Parameters dynamic: Displays IPv4 DNS server information dynamically obtained through DHCP or other protocols.
Field Description IP address IPv4 address of the DNS server. Related commands dns server dns domain Use dns domain to configure a domain name suffix. Use undo dns domain to delete the specified domain name suffix. Syntax dns domain domain-name [ vpn-instance vpn-instance-name ] undo dns domain domain-name [ vpn-instance vpn-instance-name ] Default No domain name suffix is configured. Only the provided domain name is resolved.
dns dscp Use dns dscp to set the DSCP value for DNS packets sent by a DNS client. Use undo dns dscp to restore the default. Syntax dns dscp dscp-value undo dns dscp Default The DSCP value in DNS packets is 0. Views System view Predefined user roles network-admin Parameters dscp-value: Sets the DSCP value for outgoing DNS packets, in the range of 0 to 63. Usage guidelines The DSCP value of a packet specifies the priority level of the packet and affects the transmission priority of the packet.
Parameters ip-address: Specifies an IPv4 address of a DNS server. vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. To specify an IPv4 address on the public network, do not use this option. Usage guidelines The device sends DNS query request to the DNS servers in the order their IPv4 addresses are specified.
Examples # Specify VLAN-interface 2 as the source interface for DNS packets on the public network. system-view [Sysname] dns source-interface vlan-interface 2 dns trust-interface Use dns trust-interface to specify the DNS trusted interface. Use undo dns trust-interface to remove the specified DNS trusted interface. If no interface is specified, the undo dns trust-interface command removes all DNS trusted interfaces.
Default No mappings are created. Views System view Predefined user roles network-admin Parameters host-name: Specifies a host name, a case-insensitive string of 1 to 253 characters. It can include letters, digits, hyphens (-), underscores (_), and dots (.). ip-address: Specifies the IPv4 address of the host. vpn-instance vpn-instance-name: Specifies the name of an MPLS L3VPN instance, a case-sensitive string of 1 to 31 characters.
Usage guidelines Using the reset dns host command without the ip keyword clears dynamic DNS cache information about all query types. Examples # Clear dynamic DNS cache information about all query types on the public network.
Basic IP forwarding commands display fib Use display fib to display FIB entries. Syntax display fib [ vpn-instance vpn-instance-name ] [ ip-address [ mask | mask-length ] ] Views Any view Predefined user roles network-admin network-operator Parameters vpn-instance vpn-instance-name: Displays the FIB table of the specified VPN. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If you do not specify any VPN, the command displays the FIB entries of the public network.
127.0.0.0/32 127.0.0.1 UH InLoop0 Null 127.0.0.1/32 127.0.0.1 UH InLoop0 Null 127.255.255.255/32 127.0.0.1 UH InLoop0 Null 192.168.0.0/24 192.168.0.63 U M-GE0/0/0 Null 192.168.0.0/32 192.168.0.63 UBH M-GE0/0/0 Null 192.168.0.2/32 192.168.0.2 UH M-GE0/0/0 Null 192.168.0.3/32 192.168.0.3 UH M-GE0/0/0 Null # Display the FIB entries for VPN vpn1.
Field Description Flags of routes: Flag • • • • • • • • U—Usable route. G—Gateway route. H—Host route. B—Blackhole route. D—Dynamic route. S—Static route. R—Relay route. F—Fast reroute. OutInterface/Token Output interface/LSP index number. Label Inner label.
IP performance optimization commands display icmp statistics Use display icmp statistics to display ICMP statistics. Syntax display icmp statistics [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: The slot-number argument specifies the ID of the device, and its value must be 1. Usage guidelines ICMP statistics include information about received and sent ICMP packets. Examples # Display ICMP statistics.
Syntax display ip statistics [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: The slot-number argument specifies the ID of the device, and its value must be 1. Usage guidelines IP statistics include information about received and sent packets and reassembly. Examples # Display IP packet statistics.
Field Reassembling Description output Total number of fragments sent. dropped Total number of fragments dropped. fragmented Total number of packets successfully fragmented. couldn't fragment Total number of packets failed to be fragmented. sum Total number of packets reassembled. timeouts Total number of reassembly timeouts.
Table 26 Command output Field Description Concurrent reassemblies (max-reassemblies) Maximum number of concurrent reassemblies. Fragments per reassembly (max-fragments) Maximum number of fragments per reassembly. Reassembly timeout (timeout) Timeout interval of each reassembly. Drop fragments • Yes—Drops all fragments. • No—Does not drop any fragments. Current reassembly count Number of current reassemblies. Current fragment count Number of current fragments.
Field Description Protocol Protocol number. PCB Protocol control block. display rawip verbose Use display rawip verbose to display detailed information about RawIP connections. Syntax display rawip verbose [ slot slot-number [ pcb pcb-index ] ] Views Any view Predefined user roles network-admin network-operator Parameters pcb pcb-index: Displays detailed RawIP connection information for the specified PCB. The pcb-index argument specifies the index of the PCB, in the range of 1 to 16.
Table 28 Command output Field Description Total RawIP socket number Total number of RawIP sockets. Creator Name of the operation that created the socket. The number in brackets is the process number of the creator. State State of the socket. Options Socket options. Error Error code. Displays receive buffer information in the following order: Receiving buffer (cc/hiwat/lowat/state) • • • • cc—Used space. hiwat—Maximum space. lowat—Minimum space.
Field Description Flags in the Internet PCB: • • • • • • • • • Inpcb flags INP_RECVOPTS—Receives IP options. INP_RECVRETOPTS—Receives replied IP options. INP_RECVDSTADDR—Receives destination IP address. INP_HDRINCL—Provides the entire IP header. INP_REUSEADDR—Reuses the IP address. INP_REUSEPORT—Reuses the port number. INP_ANONPORT—Port number not specified. INP_RECVIF—Records the input interface of the packet. INP_RECVTTL—Receives TTL of the packet. Only UDP and RawIP support this flag.
Predefined user roles network-admin network-operator Parameters slot slot-number: The slot-number argument specifies the ID of the device, and its value must be 1. Usage guidelines Brief TCP connection information includes local IP address, local port number, peer IP address, peer port number, and TCP connection state. Examples # Display brief information about TCP connections. display tcp *: TCP MD5 Connection Local Addr:port Foreign Addr:port State Slot PCB 0.0.0.
Examples # Display TCP traffic statistics.
SACK scoreboard overflows: 0 Other statistics: retransmitted timeout: 0, connections dropped in retransmitted timeout: 0 persist timeout: 0 keepalive timeout: 21, keepalive probe: 0 keepalive timeout, so connections disconnected: 0 fin_wait_2 timeout, so connections disconnected: 0 initiated connections: 29, accepted connections: 12, established connections: 23 closed connections: 50051 (dropped: 0, initiated dropped: 0) bad connection attempt: 0 ignored RSTs in the window: 0 listen queue overflows: 0 RTT
TCP inpcb number: 1(tcpcb number: 1) Slot: 6 Creator: telnetd_mips[199] State: ISCONNECTED Options: N/A Error: 0 Receiving buffer(cc/hiwat/lowat/state): 0 / 65700 / 1 / N/A Sending buffer(cc/hiwat/lowat/state): 0 / 65700 / 512 / N/A Type: 1 Protocol: 6 Connection info: src = 192.168.20.200:23 , dst = 192.168.20.
Field Description Displays send buffer information in the following order: Sending buffer (cc/hiwat/lowat/state) • • • • cc—Used space. hiwat—Maximum space. lowat—Minimum space. state—Buffer state: { CANTSENDMORE—Unable to send data to the peer. { CANTRCVMORE—Unable to receive data from the peer. { RCVATMARK—Receiving tag. { N/A—None of the above states. Socket type: • 1—SOCK_STREAM. This socket uses TCP to provide reliable transmission of byte streams. Type • 2—SOCK_DGRAM.
Field Description IP version flags in the Internet PCB: • • • • • • Inpcb vflag INP_IPV4—IPv4 protocol. INP_TIMEWAIT—In TIMEWAIT state. INP_ONESBCAST—Sends broadcast packets. INP_DROPPED—Protocol dropped flag. INP_SOCKREF—Strong socket reference. INP_DONTBLOCK—Do not block synchronization of the Internet PCB. • N/A—None of the above flags. TTL TTL value in the Internet PCB. display udp Use display udp to display brief information about UDP connections.
display udp statistics Use display udp statistics to display UDP traffic statistics. Syntax display udp statistics [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: The slot-number argument specifies the ID of the device, and its value must be 1. Usage guidelines UDP traffic statistics include information about received and sent UDP packets. Examples # Display UDP traffic statistics.
Parameters pcb pcb-index: Displays detailed UDP connection information for the specified PCB. The pcb-index argument specifies the index of the PCB, in the range of 1 to 16. slot slot-number: The slot-number argument specifies the ID of the device, and its value must be 1. Usage guidelines Detailed UDP connection information includes the socket creator, status, option, type, the protocol number, the source IP address and port number, and the destination IP address and port number for UDP connections.
Field Description Displays receive buffer information in the following order: Receiving buffer(cc/hiwat/lowat/state) • • • • cc—Used space. hiwat—Maximum space. lowat—Minimum space. state—Buffer state: { CANTSENDMORE—Unable to send data to the peer. { CANTRCVMORE—Unable to receive data from the peer. { RCVATMARK—Receiving tag. { N/A—None of the above states. Displays send buffer information in the following order: Sending buffer(cc/hiwat/lowat/state) • • • • cc—Used space.
Field Description Flags in the Internet PCB: • • • • • • • • • Inpcb flags INP_RECVOPTS—Receives IP options. INP_RECVRETOPTS—Receives replied IP options. INP_RECVDSTADDR—Receives destination IP address. INP_HDRINCL—Provides the entire IP header. INP_REUSEADDR—Reuses the IP address. INP_REUSEPORT—Reuses the port number. INP_ANONPORT—Port number not specified. INP_RECVIF—Records the input interface of the packet. INP_RECVTTL—Receives TTL of the packet. Only UDP and RawIP support this flag.
Default An interface cannot receive or forward directed broadcasts destined for the directly connected network. Views Interface view Predefined user roles network-admin Usage guidelines A directed broadcast packet is destined for all hosts on a specific network. In the destination IP address of the directed broadcast, the network ID identifies the target network, and the host ID is made up of all ones.
A host that has only one route destined to the default gateway sends all packets to the default gateway. The default gateway sends an ICMP redirect packet to inform the host of a correct next hop by following these rules: • The receiving and sending interfaces are the same. • The selected route is not created or modified by any ICMP redirect packet. • The selected route is not destined for 0.0.0.0. • There is no source route option in the received packet.
ip unreachables enable Use ip unreachables enable to enable sending ICMP destination unreachable packets. Use undo ip unreachables enable to disable sending ICMP destination unreachable packets. Syntax ip unreachables enable undo ip unreachables enable Default Sending ICMP destination unreachable packets is disabled.
Default The IP virtual fragment reassembly feature is disabled. Views Layer 3 Ethernet interface view, Layer 3 aggregate interface view, VLAN interface view Predefined user roles network-admin Parameters drop-fragments: Drops all fragments. max-fragments number: Specifies the maximum number of fragments per reassembly. The value range is 1 to 255, and the default is 16. max-reassemblies number: Specifies the maximum number of concurrent reassemblies. The value range is 1 to 1024, and the default is 64.
Parameters slot slot-number: The slot-number argument specifies the ID of the device, and its value must be 1. Usage guidelines To collect new IP traffic statistics within a period of time, use this command to clear history IP traffic statistics first. Examples # Clear IP traffic statistics. reset ip statistics Related commands • display ip interface • display ip statistics reset tcp statistics Use reset tcp statistics to clear TCP traffic statistics.
Related commands display udp statistics tcp timer fin-timeout Use tcp timer fin-timeout to configure the TCP FIN wait timer. Use undo tcp timer fin-timeout to restore the default. Syntax tcp timer fin-timeout time-value undo tcp timer fin-timeout Default The TCP FIN wait timer is 675 seconds. Views System view Predefined user roles network-admin Parameters time-value: Specifies the TCP FIN wait timer in the range of 76 to 3600 seconds.
Predefined user roles network-admin Parameters time-value: Specifies the TCP SYN wait timer in the range of 2 to 600 seconds. Usage guidelines TCP starts the SYN wait timer after sending a SYN packet. If no response packet is received within the SYN wait timer interval, TCP fails to establish the connection. Examples # Set the TCP SYN wait timer to 80 seconds. system-view [Sysname] tcp timer syn-timeout 80 tcp window Use tcp window to configure the size of the TCP receive/send buffer.
UDP helper commands display udp-helper interface Use display udp-helper interface to display information about packets forwarded by UDP helper on an interface. Syntax display udp-helper interface interface-type interface-number Views Any view Predefined user roles network-admin network-operator Parameters interface-type interface-number: Specifies an interface by its type and number.
Syntax reset udp-helper statistics Views User view Predefined user roles network-admin Examples # Clear the statistics of UDP packets forwarded by UDP helper. reset udp-helper statistics Related commands display udp-helper interface udp-helper enable Use udp-helper enable to enable UDP helper. Use undo udp-helper enable to disable UDP helper. Syntax udp-helper enable undo udp-helper enable Default UDP helper is disabled.
undo udp-helper port { port-number | dns | netbios-ds | netbios-ns | tacacs | tftp | time } Default No UDP port number is specified for UDP helper. Views System view Predefined user roles network-admin Parameters port-number: Specifies a UDP port number in the range of 1 to 65535 (except 67 and 68). dns: Specifies the UDP port 53 used by DNS packets. netbios-ds: Specifies the UDP port 138 used by NetBIOS datagram distribution service packets.
Predefined user roles network-admin Parameters ip-address: Specifies the IP address of a destination server, in dotted decimal notation. Usage guidelines Specify destination servers on an interface that receives UDP broadcast packets. You can specify up to 20 destination servers on an interface. If you do not specify the ip-address argument, the undo udp-helper server command removes all destination servers on the interface. Examples # Specify the destination server 192.1.1.2 on VLAN-interface 100.
IPv6 basics commands display ipv6 fib Use display ipv6 fib to display IPv6 FIB entries. Syntax display ipv6 fib [ vpn-instance vpn-instance-name ] [ ipv6-address [ prefix-length ] ] Views Any view Predefined user roles network-admin network-operator Parameters vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. ipv6-address: Specifies an IPv6 address.
Table 34 Command output Field Description Destination count Total number of destination addresses. FIB entry count Total number of IPv6 FIB entries. Destination Destination address. Prefix length Prefix length of the destination address. Nexthop Next hop. Route flag: Flags • • • • • • • • U—Usable route. G—Gateway route. H—Host route. B—Black hole route. D—Dynamic route. S—Static route. R—Recursive route. F—Fast re-route. Time stamp Time when the IPv6 FIB entry was generated.
checksum error 0 path MTU changed 0 too big bad length destination unreachable 0 parameter problem echo request 0 echo reply neighbor solicit 0 neighbor advertisement router solicit 0 router advertisement redirect output: parameter problem 0 unreachable admin unreachable address echo request 0 0 0 0 0 0 unreachable beyond scope 0 0 unreachable no port 0 time exceed transit time exceed reassembly 0 ratelimited 0 unreachable no route 0 too big 0 router renumbering 0 echo repl
Vlan-interface2 current state: UP Line protocol current state: UP IPv6 is enabled, link-local address is FE80::1234:56FF:FE65:4322 [TENTATIVE] Global unicast address(es): 10::1234:56FF:FE65:4322, subnet is 10::/64 [TENTATIVE] [AUTOCFG] [valid lifetime 4641s/preferred lifetime 4637s] 20::1234:56ff:fe65:4322, subnet is 20::/64 [TENTATIVE] [EUI-64] 30::1, subnet is 30::/64 [TENTATIVE] [ANYCAST] 40::2, subnet is 40::/64 [TENTATIVE] [DHCP] 50::3, subnet is 50::/64 [TENTATIVE] Joined group address(es): FF02::1 FF
Table 35 Command output Field Description Physical state of the interface: • Administratively DOWN—The VLAN interface has been administratively shut down with the shutdown command. Vlan-interface2 current state • DOWN—The VLAN interface is administratively up but its physical state is down because all ports in the VLAN are down. • UP—The administrative and physical states of the VLAN interface are both up.
Field Description ND reachable time Time during which a neighboring device is reachable. ND retransmit interval Interval for retransmitting an NS message. Hosts use stateless autoconfig for addresses Hosts obtained IPv6 addresses through stateless autoconfiguration. InReceives All IPv6 packets received by the interface, including error packets. InTooShorts Received IPv6 packets that are too short, with a length less than 40 bytes, for example.
*down: administratively down (s): spoofing Interface Physical Protocol IPv6 Address Vlan-interface1 down down Unassigned Vlan-interface2 Vlan-interface100 up up 2001::1 up up Unassigned Table 36 Command output Field Description *down: administratively down The interface has been administratively shut down with the shutdown command. Spoofing attribute of the interface.
Examples # Display IPv6 prefix information for VLAN-interface 10. display ipv6 interface Vlan-interface10 prefix Prefix: 1001::/65 Age: Origin: ADDRESS - Flag: AL Lifetime(Valid/Preferred): 2592000/604800 Prefix: 2001::/64 Age: Origin: STATIC - Flag: L Lifetime(Valid/Preferred): 3000/2000 Prefix: 3001::/64 Age: Origin: RA 600 Flag: A Lifetime(Valid/Preferred): - Table 37 Command output Filed Description Prefix IPv6 address prefix.
network-operator Parameters ipv6-address: Specifies the IPv6 address of a neighbor whose information is displayed. all: Displays information about all neighbors, including neighbors acquired dynamically and configured statically on the public network and all private networks. dynamic: Displays information about all neighbors acquired dynamically. static: Displays information about all neighbors configured statically.
Field Description State of a neighbor: • INCMP—The address is being resolved. The link layer address of the neighbor is unknown. State • REACH—The neighbor is reachable. • STALE—Whether the neighbor is reachable is unknown. The device does not verify the reachability any longer unless data is sent to the neighbor. • DELAY—Whether the neighbor is reachable is unknown. The device sends an NS message after a delay. • PROBE—Whether the neighbor is reachable is unknown.
interface interface-type interface-number: Displays the total number of neighbor entries of a specific interface. The interface-type interface-number specifies an interface by its type and number. vlan vlan-id: Displays the total number of neighbor entries in the specified VLAN. The value range for VLAN ID is 1 to 4094. Examples # Display the total number of neighbor entries created dynamically.
Field Description Neighbor state: • INCMP—The address is being resolved. The link layer address of the neighbor is unknown. State • REACH—The neighbor is reachable. • STALE—Whether the neighbor is reachable is unknown. The device does not verify the reachability any longer unless data is sent to the neighbor. • DELAY—Whether the neighbor is reachable is unknown. The device sends an NS message after a delay. • PROBE—Whether the neighbor is reachable is unknown.
2002::100 :: 2002::138 58 :: 1 58 0x0000000000000008 1 0x0000000000000002 Table 40 Command output Field Description Local Addr Local IPv6 address. Foreign Addr Peer IPv6 address. Protocol Protocol number. PCB PCB index. display ipv6 rawip verbose Use display ipv6 rawip verbose to display detailed information about IPv6 RawIP connections.
Inpcb flags: N/A Inpcb vflag: INP_IPV6 Hop limit: 255 (minimum hop limit: 0) Send VRF: 0xffff Receive VRF: 0xffff Table 41 Command output Field Description Total RawIP socket number Total number of IPv6 RawIP sockets. Creator Task name of the socket. The process number is in the square brackets. State Socket state. Options Socket options. Displays receive buffer information in the following order: Receiving buffer(cc/hiwat/lowat/state) • • • • cc—Used space. hiwat—Maximum space.
Field Description Flags in the Internet PCB: • • • • • • • • • INP_RECVOPTS—Receives IPv6 options. INP_RECVRETOPTS—Receives replied IPv6 options. INP_RECVDSTADDR—Receives destination IPv6 address. INP_HDRINCL—Provides the entire IPv6 header. INP_REUSEADDR—Reuses the IPv6 address. INP_REUSEPORT—Reuses the port number. INP_ANONPORT—Port number not specified. INP_PROTOCOL_PACKET—Identifies a protocol packet. INP_RCVVLANID—Receives the VLAN ID of the packet. Only UDP and RawIP support this flag.
display ipv6 statistics Use display ipv6 statistics to display IPv6 and ICMPv6 packet statistics. Syntax display ipv6 statistics [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: The slot-number argument specifies the ID of the device, and its value must be 1. Usage guidelines This command displays statistics about received and sent IPv6 and ICMPv6 packets.
Neighbor solicits: 0 Neighbor adverts: Router solicits: 0 Router adverts: 0 0 Other errors: 0 0 Too short: Redirects: 0 0 Send failed: Rate limitation: Received packets: Total: 0 Checksum errors: Bad codes: 0 0 Unreachable: 0 Too big: 0 Hop limit exceeded: 0 Reassembly timeouts: 0 Parameter problems: 0 Unknown error types: 0 Echo requests: Neighbor solicits: Router solicits: 0 Echo replies: 0 Neighbor adverts: 0 Redirects: Router adverts: 0 Unknown info types: Route
*2001:2002:2003:2 3001:3002:3003:3 004:2005:2006:20 004:3005:3006:30 ESTABLISHED 1 0x000000000000c387 07:2008->1200 07:3008->1200 2001::1->23 2001::5->1284 ESTABLISHED 1 2003::1->25 2001::2->1283 LISTEN 1 0x0000000000000008 0x0000000000000009 Table 42 Command output Field Description * Indicates the TCP connection uses MD5 authentication. LAddr->port Local IPv6 address and port number. FAddr->port Peer IPv6 address and port number.
Usage guidelines Detailed information about an IPv6 TCP connection includes socket's creator, state, option, type, protocol number, source IPv6 address and port number, destination IPv6 address and port number, and the connection state. Examples # Display detailed information about an IPv6 TCP connection.
Field Description Displays send buffer information in the following order: Sending buffer(cc/hiwat/lowat/state) • • • • cc—Used space. hiwat—Maximum space. lowat—Minimum space. state—Buffer state: { CANTSENDMORE—Unable to send data to the peer. { CANTRCVMORE—Unable to receive data from the peer. { RCVATMARK—Receiving tag. { N/A—None of the above states. Socket type: • 1—SOCK_STREAM. This socket uses TCP to provide reliable transmission of byte streams. Type • 2—SOCK_DGRAM.
Field Description Flags in the Internet PCB: • • • • • • • • • INP_RECVOPTS—Receives IPv6 options. INP_RECVRETOPTS—Receives replied IPv6 options. INP_RECVDSTADDR—Receives destination IPv6 address. INP_HDRINCL—Provides the entire IPv6 header. INP_REUSEADDR—Reuses the IPv6 address. INP_REUSEPORT—Reuses the port number. INP_ANONPORT—Port number not specified. INP_PROTOCOL_PACKET—Identifies a protocol packet. INP_RCVVLANID—Receives the VLAN ID of the packet. Only UDP and RawIP support this flag.
Field Description TCP connection state: • CLOSED—The server receives a disconnection request's reply from the client. • LISTEN—The server is waiting for connection requests. • SYN_SENT—The client is waiting for the server to reply to the connection request. • SYN_RCVD—The server receives a connection request. • ESTABLISHED—The server and client have established connections and can Connection state transmit data bidirectionally. • CLOSE_WAIT—The server receives a disconnection request from the client.
004:2005:2006:20 004:3005:3006:30 07:2008->1200 07:3008->1200 2001::1->23 2001::5->1284 1 2003::1->25 2001::2->1283 1 0x0000000000000008 0x0000000000000009 Table 44 Command output Field Description LAddr->port Local IPv6 address and port number. FAddr->port Peer IPv6 address and port number. PCB PCB index. display ipv6 udp verbose Use display ipv6 udp verbose to display detailed information about IPv6 UDP connections.
Protocol: 17 Connection info: src = ::->69, dst = ::->0 Inpcb flags: N/A Inpcb vflag: INP_IPV6 Hop limit: 255 (minimum hop limit: 0) Send VRF: 0xffff Receive VRF: 0xffff Table 45 Command output Field Description Total UDP socket number Total number of IPv6 UDP sockets. Creator Task name of the socket. The progress number is in the square brackets. State Socket state. Options Socket options. Error Error code.
Field Description Flags in the Internet PCB: • • • • • • • • • INP_RECVOPTS—Receives IPv6 options. INP_RECVRETOPTS—Receives replied IPv6 options. INP_RECVDSTADDR—Receives destination IPv6 address. INP_HDRINCL—Provides the entire IPv6 header. INP_REUSEADDR—Reuses the IPv6 address. INP_REUSEPORT—Reuses the port number. INP_ANONPORT—Port number not specified. INP_PROTOCOL_PACKET—Identifies a protocol packet. INP_RCVVLANID—Receives the VLAN ID of the packet. Only UDP and RawIP support this flag.
ipv6 address Use ipv6 address to configure an IPv6 global unicast address for an interface. Use undo ipv6 address to remove the IPv6 global unicast address of the interface. Syntax ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length } undo ipv6 address [ ipv6-address prefix-length | ipv6-address/prefix-length ] Default No IPv6 global unicast address is configured for an interface.
undo ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length } anycast Default No IPv6 anycast address is configured for an interface. Views Interface view Predefined user roles network-admin Parameters ipv6-address: Specifies an IPv6 anycast address. prefix-length: Specifies a prefix length in the range of 1 to 128. Examples # Set the IPv6 anycast address of VLAN-interface 100 to 2001::1 with prefix length 64.
Examples # Enable stateless address autoconfiguration on VLAN-interface 100. system-view [Sysname] interface vlan-interface 100 [Sysname-Vlan-interface100] ipv6 address auto ipv6 address auto link-local Use ipv6 address auto link-local to automatically generate a link-local address for an interface. Use undo ipv6 address auto link-local to remove the automatically generated link-local address for the interface.
Examples # Configure VLAN-interface 100 to automatically generate a link-local address. system-view [Sysname] interface vlan-interface 100 [Sysname-Vlan-interface100] ipv6 address auto link-local Related commands ipv6 address link-local ipv6 address eui-64 Use ipv6 address eui-64 to configure an EUI-64 IPv6 address for an interface. Use undo ipv6 address eui-64 to remove the EUI-64 IPv6 address of the interface.
Related commands display ipv6 interface ipv6 address link-local Use ipv6 address link-local to configure a link-local address for the interface. Use undo ipv6 address link-local to remove the link-local address of the interface. Syntax ipv6 address ipv6-address link-local undo ipv6 address ipv6-address link-local Default No link-local address is configured for the interface. Views Interface view Predefined user roles network-admin Parameters ipv6-address: IPv6 link-local address.
Use undo ipv6 nd autoconfig managed-address-flag to restore the default. Syntax ipv6 nd autoconfig managed-address-flag undo ipv6 nd autoconfig managed-address-flag Default The M flag is set to 0 so that the host can obtain an IPv6 address through stateless autoconfiguration. Views Interface view Predefined user roles network-admin Usage guidelines The M flag determines whether a host uses stateful autoconfiguration to obtain an IPv6 address.
If the O flag is set to 1, the host uses stateful autoconfiguration (for example, from a DHCPv6 server) to obtain configuration information other than IPv6 address. Otherwise, the host uses stateless autoconfiguration. Examples # Configure the host to obtain configuration information other than IPv6 address through stateless autoconfiguration.
ipv6 nd ns retrans-timer Use ipv6 nd ns retrans-timer to set the interval for retransmitting an NS message. Use undo ipv6 nd ns retrans-timer to restore the default. Syntax ipv6 nd ns retrans-timer value undo ipv6 nd ns retrans-timer Default The local interface sends NS messages at an interval of 1000 milliseconds, and the Retrans Timer field in the RA messages sent is 0, so that the interval for retransmitting an NS message is determined by the receiving device.
Default The neighbor reachable time on the local interface is 30000 milliseconds and the value of the Reachable Time field in RA messages is 0, so that the reachable time is determined by the receiving device. Views Interface view Predefined user roles network-admin Parameters value: Neighbor reachable time in the range of 1 to 3600000 milliseconds.
[Sysname] interface vlan-interface 100 [Sysname-Vlan-interface100] undo ipv6 nd ra halt ipv6 nd ra hop-limit unspecified Use ipv6 nd ra hop-limit unspecified to specify unlimited hops in RA messages. Use undo ipv6 nd ra hop-limit unspecified to restore the default. Syntax ipv6 nd ra hop-limit unspecified undo ipv6 nd ra hop-limit unspecified Default The maximum number of hops in the RA messages is limited to 64.
Predefined user roles network-admin Parameters max-interval-value: Specifies the maximum interval for advertising RA messages in seconds, in the range of 4 to 1800. min-interval-value: Specifies the minimum interval for advertising RA messages, in the range of 3 seconds to three-fourths of the maximum interval. Usage guidelines The device advertises RA messages at intervals of a random value between the maximum interval and the minimum interval.
[Sysname] interface vlan-interface 100 [Sysname-Vlan-interface100] ipv6 nd ra no-advlinkmtu ipv6 nd ra prefix Use ipv6 nd ra prefix to configure the prefix information in RA messages. Use undo ipv6 nd ra prefix to remove the prefix information from RA messages.
[Sysname-Vlan-interface100] ipv6 nd ra prefix 2001:10::100/64 100 10 Method 2: system-view [Sysname] interface vlan-interface 100 [Sysname-Vlan-interface100] ipv6 nd ra prefix 2001:10::100 64 100 10 ipv6 nd ra router-lifetime Use ipv6 nd ra router-lifetime to configure the router lifetime in RA messages. Use undo ipv6 nd ra router-lifetime to restore the default. Syntax ipv6 nd ra router-lifetime value undo ipv6 nd ra router-lifetime Default The router lifetime in RA messages is 1800 seconds.
Syntax ipv6 nd router-preference { high | low | medium } undo ipv6 nd router-preference Default The router preference is medium. Views Interface view Predefined user roles network-admin Parameters high: Sets the router preference to the highest. low: Sets the router preference to the lowest. medium: Sets the router preference to the medium. Usage guidelines A hosts selects a router with the highest preference as the default router.
Parameters ipv6-address: Specifies the IPv6 address of the static neighbor entry. mac-address: Specifies the MAC address (48 bits) of the static neighbor entry, in the format of H-H-H. vlan-id: Specifies the VLAN ID of the static neighbor entry, in the range of 1 to 4094. port-type port-number: Specifies a Layer 2 port of the static neighbor entry by its type and number. interface interface-type interface-number: Specifies a Layer 3 interface of the static neighbor entry by its type and number.
undo ipv6 neighbor link-local minimize Default All ND entries are assigned to the driver. Views System view Predefined user roles network-admin Usage guidelines Perform this command to minimize link-local ND entries assigned to the driver. Link-local ND entries refer to ND entries comprising link-local addresses. By default, the device assigns all ND entries to the driver.
Examples # Set the age timer for ND entries in stale state to 120 minutes. system-view [Sysname] ipv6 neighbor stale-aging 120 local-proxy-nd enable Use local-proxy-nd enable to enable local ND proxy. Use undo local-proxy-nd enable to restore the default. Syntax local-proxy-nd enable undo local-proxy-nd enable Default Local ND proxy is disabled.
Examples # Enable common ND proxy on VLAN-interface 100. system-view [Sysname] interface vlan-interface 100 [Sysname-Vlan-interface100] proxy-nd enable Related commands local-proxy-nd enable ipv6 neighbors max-learning-num Use ipv6 neighbors max-learning-num to set the maximum number of dynamic neighbor entries that an interface can learn, to prevent the interface from occupying too many neighbor table resources. Use undo ipv6 neighbors max-learning-num to restore the default.
Use undo ipv6 prefer temporary-address to restore the default. Syntax ipv6 prefer temporary-address undo ipv6 prefer temporary-address Default The system does not preferentially use the temporary IPv6 address of the sending interface as the source address of a packet.
Parameters valid-lifetime: Specifies the valid lifetime for temporary IPv6 addresses, in the range of 600 to 4294967295 seconds. The default valid lifetime is 604800 seconds (7 days). The valid lifetime must be greater than or equal to the preferred lifetime. preferred-lifetime: Specifies the preferred lifetime for temporary IPv6 addresses, in the range of 600 to 4294967295 seconds. The default preferred lifetime is 86400 seconds (1 day).
Syntax reset ipv6 neighbors { all | dynamic | interface interface-type interface-number | slot slot-number | static } Views User view Predefined user roles network-admin Parameters all: Clears static and dynamic neighbor information for all interfaces. dynamic: Clears dynamic neighbor information for all interfaces. interface interface-type interface-number: Clears dynamic neighbor information for the interface specified by its type and number.
Usage guidelines You can use the display ipv6 statistics command to display the IPv6 and ICMPv6 packet statistics. Examples # Clear IPv6 and ICMPv6 packet statistics.
Tunneling commands bandwidth Use bandwidth to configure the expected bandwidth of an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth is 64 kbps. Views Tunnel interface view Predefined user roles network-admin Parameters bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps. Usage guidelines The expected bandwidth of an interface affects the link costs in OSPF and OSPFv3.
Usage guidelines The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you use it in a live network. This command might fail to restore the default settings for some commands for reasons such as command dependencies or system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to individually restore their default settings.
destination Use destination to specify the destination address for a tunnel interface. Use undo destination to remove the configured tunnel destination address. Syntax destination { ip-address | ipv6-address } undo destination Default No tunnel destination address is configured. Views Tunnel interface view Predefined user roles network-admin Parameters ip-address: Specifies the tunnel destination IPv4 address. ipv6-address: Specifies the tunnel destination IPv6 address.
• source display interface tunnel Use display interface tunnel to display information about tunnel interfaces, including the source address, destination address, and tunnel mode. Syntax display interface [ tunnel ] [ brief [ down ] ] display interface [ tunnel [ number ] ] [ brief [ description ] ] Views Any view Predefined user roles network-admin network-operator Parameters number: Specifies the number of a tunnel interface. brief: Displays brief interface information.
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Input: 0 packets, 0 bytes, 0 drops Output: 0 packets, 0 bytes, 0 drops Table 46 Command output Field Description Tunnel1 Information about the tunnel interface Tunnel 1. Physical state of the tunnel interface: • Administratively DOWN—The interface has been shut down by the shutdown command.
Field Description Last 300 seconds input: 0 bytes/sec, 0 packets/sec Average input rate in the last 300 seconds. Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Average output rate in the last 300 seconds. # Display brief information about the interface Tunnel 1.
Field Description Physical link state of the interface: • UP—The link is physically up. • DOWN—The link is physically down. • ADM—The link has been administratively shut down. To bring it up, use Link the undo shutdown command. • Stby—The interface is a backup interface. Link layer protocol state whose value is determined by the parameter negotiation on the link layer: Protocol • UP—The protocol state of the interface is up.
mode gre: Specifies GRE over IPv4 tunnel mode. mode gre ipv6: Specifies GRE over IPv6 tunnel mode. mode ipv4-ipv4: Specifies IPv4 over IPv4 tunnel mode. mode ipv6: Specifies IPv6 tunnel mode. Set this mode for IPv4 over IPv6 manual and IPv6 over IPv6 tunnels. mode ipv6-ipv4: Specifies IPv6 over IPv4 manual tunnel mode. mode ipv6-ipv4 6to4: Specifies 6to4 tunnel mode. mode ipv6-ipv4 isatap: Specifies ISATAP tunnel mode.
Usage guidelines Set an appropriate MTU to avoid fragmentation. The MTU for the tunnel interface applies only to unicast packets. An MTU set on any tunnel interface is effective on all existing tunnel interfaces. Examples # Set the MTU for IPv4 packets on the interface Tunnel 1 to 10000 bytes. system-view [Sysname] interface tunnel 1 [Sysname-Tunnel1] mtu 10000 reset counters interface Use reset counters interface to clear the statistics of tunnel interfaces.
undo shutdown Default The tunnel interface is enabled. Views Tunnel interface view Predefined user roles network-admin Usage guidelines This command disconnects all links set up on the interface. Make sure you fully understand the impact of the command on your network. Examples # Shut down the interface Tunnel 1.
Usage guidelines The specified source address or the address of the specified source interface is used as the source address of tunneled packets. To view the configured tunnel source address, use the display interface tunnel command. The source address of the local tunnel interface must be the destination address of the peer tunnel interface, and vice versa. If you use this command multiple times, the most recent configuration takes effect.
Examples # Set the DF bit for tunneled packets on the interface Tunnel 1. system-view [Sysname] interface tunnel 1 mode gre [Sysname-Tunnel1] tunnel dfbit enable tunnel discard ipv4-compatible-packet Use tunnel discard ipv4-compatible-packet to enable dropping of IPv6 packets using IPv4-compatible IPv6 addresses. Use undo tunnel discard ipv4-compatible-packet to restore the default.
Predefined user roles network-admin Parameters tos-value: Specifies the ToS of tunneled packets, in the range of 0 to 255. Usage guidelines After you configure this command, all the tunneled packets of different services sent on the tunnel interface will use the same configured ToS. For more information about ToS, see ACL and QoS Configuration Guide. Examples # Set the ToS of tunneled packets on the interface Tunnel 1 to 20.
Related commands display interface tunnel 194
GRE commands keepalive Use keepalive to enable the GRE keepalive function, and set the keepalive interval and the keepalive number. Use undo keepalive to disable the keepalive function. Syntax keepalive [ interval [ times ] ] undo keepalive Default The GRE keepalive function is disabled. Views Tunnel interface view Predefined user roles network-admin Parameters interval: Specifies the keepalive interval in the range of 1 to 32767 seconds. The default value is 10.
Support and other resources Contacting HP For worldwide technical support information, see the HP support website: http://www.hp.
Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. [] Square brackets enclose syntax choices (keywords or arguments) that are optional. { x | y | ... } Braces enclose a set of required syntax choices separated by vertical bars, from which you select one.
Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access controller, a unified wired-WLAN module, or the switching engine on a unified wired-WLAN switch. Represents an access point.
Index ABCDEFGIKLMNOPRSTUVW dhcp server always-broadcast,24 A dhcp server apply ip-pool,25 address range,20 dhcp server bootp ignore,25 arp check log enable,1 dhcp server bootp reply-rfc-1048,26 arp max-learning-num,1 dhcp server forbidden-ip,27 arp max-learning-number,2 dhcp server ip-pool,27 arp send-gratuitous-arp,10 dhcp server ping packets,28 arp static,3 dhcp server ping timeout,29 arp timer aging,4 dhcp server relay information enable,30 B dhcp snooping binding database filename,74
dns-list,38 display dhcp server pool,34 display dhcp server statistics,36 Documents,196 display dhcp snooping binding,86 domain-name,39 display dhcp snooping binding database,87 E display dhcp snooping information,88 expired,39 display dhcp snooping packet statistics,89 display dhcp snooping trust,90 F display dns domain,94 forbidden-ip,40 display dns host,95 G display dns server,96 gateway-list,41 display fib,103 gratuitous-arp-learning enable,11 display icmp statistics,106 gratuitous-a
ipv6 neighbor stale-aging,174 reset dns host,101 ipv6 neighbors max-learning-num,176 reset ip statistics,126 ipv6 prefer temporary-address,176 reset ipv6 neighbors,178 ipv6 temporary-address,177 reset ipv6 statistics,179 K reset tcp statistics,127 reset udp statistics,127 keepalive,195 reset udp-helper statistics,130 L S local-proxy-nd enable,175 shutdown,189 M source,190 mtu,188 static-bind,50 N Subscription service,196 nbns-list,44 T netbios-type,44 tcp timer fin-timeout,128 netw
