HP HSR6800 Routers Layer 2 - LAN Switching Command Reference Part number: 5998-4504 Software version: HSR6800-CMW520-R3303P05 Document version: 6PW105-20140507
Legal and notice information © Copyright 2014 Hewlett-Packard Development Company, L.P. No part of this documentation may be reproduced or transmitted in any form or by any means without prior written consent of Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Contents MAC address table configuration commands ··········································································································· 1 display mac-address ················································································································································ 1 display mac-address aging-time ····························································································································· 3 display mac-address mac-le
display stp abnormal-port ····································································································································· 49 display stp bpdu-statistics ····································································································································· 50 display stp down-port ············································································································································ 52 display stp histor
name ······································································································································································· 97 reset counters interface vlan-interface ················································································································· 98 shutdown ································································································································································ 99 vlan ·
garp timer leave ·················································································································································· 144 garp timer leaveall ·············································································································································· 145 gvrp ······································································································································································· 146
Index ········································································································································································ 190 v
MAC address table configuration commands The MAC address table can contain only Layer 2 Ethernet ports and Layer 2 aggregate interfaces. This document covers only the configuration of unicast MAC address table entries, including static, dynamic, and destination blackhole MAC address table entries. For more information about configuring static multicast MAC address table entries, see IP Multicast Configuration Guide.
Usage guidelines If you execute this command without specifying any parameters, it displays information of all MAC address entries on the device, including unicast MAC address entries and static multicast MAC address entries. If you execute this command using only the vlan keyword or the count keyword, or only these two keywords, it displays information of unicast MAC address entries and static multicast MAC address entries. Examples # Display the MAC address table entry for MAC address 000f-e201-0101.
display mac-address aging-time Use display mac-address aging-time to display the aging time of dynamic entries in the MAC address table. Syntax display mac-address aging-time [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Parameters interface-type interface-number: Specifies an interface by its type and number. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Examples # Display the statistics of the MAC address table.
Default command level 2: System level Parameters dynamic: Specifies dynamic MAC address entries. These entries can age. static: Specifies static MAC address entries. They do not age, but you can add or remove them. mac-address: Specifies a MAC address in the format of H-H-H, where 0s at the beginning of each H (16-bit hexadecimal digit) can be omitted. For example, entering "f-e2-1" indicates that the MAC address is "000f-00e2-0001.
Default No MAC address entry is configured. Views System view Default command level 2: System level Parameters blackhole: Specifies destination blackhole MAC address entries. These entries do not age, but you can add or remove them. The packets whose destination MAC addresses match destination blackhole MAC address entries are dropped. mac-address: Specifies a MAC address in the format of H-H-H, where 0s at the beginning of each H (16-bit hexadecimal digit) can be omitted.
mac-address mac-learning disable Use mac-address mac-learning disable to disable MAC address learning. Depending on the view that you entered, you can disable it globally, on a Layer 2 Ethernet interface, on all ports in a port group, or on a VLAN. Use undo mac-address mac-learning disable to enable MAC address learning. Depending on the view that you entered, you can disable it globally, on a Layer 2 Ethernet interface, on all ports in a port group, or on a VLAN.
Related commands display mac-address mac-learning mac-address max-mac-count Use mac-address max-mac-count count to configure the maximum number of MAC addresses that can be learned on a port. Use undo mac-address max-mac-count to restore the default maximum number of MAC addresses that can be learned on an Ethernet port.
Default The aging timer for dynamic MAC address entries is 300 seconds. Views System view Default command level 2: System level Parameters aging seconds: Sets an aging timer for dynamic MAC address entries, in the range of 10 to 1000000 seconds. no-aging: Sets dynamic MAC address entries not to age.
MAC Information configuration commands The MAC Information feature is available on only SAP modules that are operating in bridge mode. MAC Information applies only to Layer 2 Ethernet interfaces. mac-address information enable (interface view) Use mac-address information enable to enable MAC Information on the Layer 2 Ethernet interface. Use undo mac-address information enable to restore the default.
undo mac-address information enable Default MAC Information is disabled globally. Views System view Default command level 2: System level Examples # Enable MAC Information globally. system-view [Sysname] mac-address information enable mac-address information interval Use mac-address information interval to set the interval for sending syslog or trap messages. Use undo mac-address information interval to restore the default.
undo mac-address information mode Default Trap messages are sent to inform the remote network management device of MAC address changes. Views System view Default command level 2: System level Parameters syslog: Specifies that the device sends syslog messages to inform the remote network management device of MAC address changes. trap: Specifies that the device sends trap messages to inform the remote network management device of MAC address changes.
Ethernet link aggregation configuration commands Layer 2 aggregation groups are supported only on SAP modules operating in bridge mode. bandwidth Use bandwidth to set the expected bandwidth for an aggregate interface or subinterface. Use undo bandwidth to cancel the configuration.
undo description Default The description of an interface is interface-name Interface. For example, the default description of Bridge-Aggregation1 is Bridge-Aggregation1 Interface. Views Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view Default command level 2: System level Parameters text: Specifies the interface description, a string of 1 to 240 characters.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Line protocol current state: DOWN Description: Route-Aggregation1 Interface The Maximum Transmit Unit is 1500 Internet protocol processing : disabled IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 000f-e20a-0001 IPv6 Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 000f-e20a-0001 Output queue : (Urgent queuing : Size/Length/Discards) 0/100/0 Output queue : (Protocol queuing : Size/Length/Discards) Output queue : (FIFO queuing : Size/Length/Discards) Last clearing of counters: 0/500/0 0/
Field Description Unknown-speed mode, unknown-duplex mode The interface speed and duplex mode are unknown. PVID Port VLAN ID. Last clearing of counters Time when the reset counters interface command was last used to clear the interface statistics. Never indicates the reset counters interface command has never been used on the interface since the device's startup. Last 300 seconds input/output Average input/output rate over the last 300 seconds.
Field Description Interface Abbreviated interface name. Link Physical link state of the interface. Speed Interface speed, in bps. Cause Cause of a DOWN physical link. display lacp system-id Use display lacp system-id to display the system ID of the local system. Syntax display lacp system-id [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression.
display link-aggregation load-sharing mode Use display link-aggregation load-sharing mode to display global or group-specific link-aggregation load sharing criteria.
Link-Aggregation Load-Sharing Mode: destination-mac address, source-mac address # Display the default link-aggregation load sharing criteria of the aggregation group corresponding to Layer 2 aggregate interface Bridge-Aggregation 10.
display link-aggregation member-port Use display link-aggregation member-port to display detailed link aggregation information for the specified member ports. If no port is specified, this command displays detailed link aggregation information for all member ports.
Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation, D -- Synchronization, E -- Collecting, F -- Distributing, G -- Defaulted, H -- Expired GigabitEthernet4/0/2: Aggregation Interface: Bridge-Aggregation10 Local: Port Number: 2 Port Priority: 32768 Oper-Key: 2 Flag: {ACDEF} Remote: System ID: 0x8000, 000f-e267-6c6a Port Number: 26 Port Priority: 32768 Oper-Key: 2 Flag: {ACDEF} Received LACP Packets: 5 packet(s) Illegal: 0 packet(s) Sent LACP Packets: 7 packet(s) Table 7 Command output Field De
Field Description Remote Information about the remote end. System ID Remote end system ID, comprising the system LACP priority and the system MAC address. Received LACP Packets Total number of LACP packets received. Illegal Total number of illegal packets. Sent LACP Packets Total number of LACP packets sent. display link-aggregation summary Use display link-aggregation summary to display the summary information for all aggregation groups.
BAGG1 S none 1 0 Shar BAGG10 D 0x8000, 000f-e267-57ad 2 0 Shar Table 8 Command output Field Description Aggregate interface type: Aggregation Interface Type • BAGG—Layer 2 aggregate interface. • RAGG—Layer 3 aggregate interface. Aggregation group type: Aggregation Mode • S—Static link aggregation. • D—Dynamic aggregation. Load sharing type: Loadsharing Type • Shar—Load sharing. • NonS—Non-load sharing.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing Port Status: S -- Selected, U -- Unselected Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation, D -- Synchronization, E -- Collecting, F -- Distributing, G -- Defaulted, H -- Expired Aggregation Interface: Bridge-Aggregation20 Aggregation Mode: Static Loadsharing Type: NonS Port Status Priority Oper-Key -------------------------------------------------------------------------------GE4/0/21 U 32768 1 GE4/0/22 U 32768 1 G
Field Description Port Port type and number. Status Port state: selected or unselected. Priority Port aggregation priority. Oper-Key Operational key. Flag LACP protocol state flag. Remote Information about the remote end. Actor Local port type and number. Partner Remote port index. enable snmp trap updown Use enable snmp trap updown to enable linkUp/linkDown trap generation for the aggregate interface.
interface bridge-aggregation Use interface bridge-aggregation to create a Layer 2 aggregate interface and enter the Layer 2 aggregate interface view. Use undo interface bridge-aggregation to remove a Layer 2 aggregate interface. Syntax interface bridge-aggregation interface-number undo interface bridge-aggregation interface-number Views System view Default command level 2: System level Parameters interface-number: Specifies a Layer 2 aggregate interface number in the range of 1 to 128.
interface-number.subnumber: Specifies a subinterface of a Layer 3 aggregate interface. The interface-number argument specifies the main interface number. The subnumber argument specifies the subinterface number and is separated from the main interface number by a dot (.). The value range for the subnumber argument is 1 to 4094. Usage guidelines When you create a Layer 3 aggregate interface, a Layer 3 aggregation group with the same number is automatically created.
Syntax lacp system-priority system-priority undo lacp system-priority Default The system LACP priority is 32768. Views System view Default command level 2: System level Parameters system-priority: Specifies the LACP priority of the local system in the range of 0 to 65535. The smaller the value, the higher the system LACP priority. Examples # Set the system LACP priority to 64.
Usage guidelines The load sharing criteria that you configure will overwrite the previous criteria. If unsupported load sharing criteria are configured, an error prompt will appear. Only the destination-ip and source-ip keywords or the destination-mac and source-mac keywords can be configured together. Examples # Configure the source MAC address and destination MAC address as the global link-aggregation load sharing criteria.
Syntax link-aggregation mode dynamic undo link-aggregation mode Default An aggregation group operates in static aggregation mode. Views Layer 2 aggregate interface view, Layer 3 aggregate interface view Default command level 2: System level Usage guidelines To change the aggregation mode of an aggregation group that contains member ports, remove all the member ports from the aggregation group first.
Examples # Set the aggregation priority of port GigabitEthernet 4/0/1 to 64. system-view [Sysname] interface GigabitEthernet 4/0/1 [Sysname-GigabitEthernet4/0/1] link-aggregation port-priority 64 mtu Use mtu to set the MTU of a Layer 3 aggregate interface or subinterface. Use undo mtu to restore the default setting. Syntax mtu size undo mtu Default The MTU for Layer 3 aggregate interfaces and subinterfaces is 1500 bytes.
undo port link-aggregation group Views Ethernet interface view Default command level 2: System level Parameters number: Specifies the number of the aggregate interface corresponding to an aggregation group. The value range for the this argument is 1 to 128 for Layer 2 Ethernet interfaces and 1 to 1024 for Layer 3 Ethernet interfaces.
• If no keyword or argument is specified, the command clears the statistics of all interfaces in the system. • If only the bridge-aggregation or route-aggregation keyword is specified, the command clears the statistics of all Layer 2 or Layer 3 aggregate interfaces. • If the bridge-aggregation interface-number or route-aggregation interface-number option is specified, the command clears the statistics of the specified Layer 2 or Layer 3 aggregate interface.
service chassis chassis-number slot slot-number undo service chassis Default Traffic on a Layer 3 aggregate interface whose member ports are located on the same card is processed and forwarded by the card that houses the member ports, and traffic on a Layer 3 aggregate interface whose member ports are located on different cards is processed and forwarded by the card that houses the first selected member port.
Syntax shutdown undo shutdown Default Aggregate interfaces and subinterfaces are up. Views Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view Default command level 2: System level Usage guidelines Shutting down or bringing up a Layer 3 aggregate interface also shuts down or brings up its subinterfaces. Shutting down or bringing up a Layer 3 aggregate subinterface does not affect its main interface.
Port isolation configuration commands The commands in this chapter are supported on SAP cards that are operating in bridge mode. display port-isolate group Use display port-isolate group to display port isolation group information. Syntax display port-isolate group [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression.
port-isolate enable Use port-isolate enable to assign a port to the isolation group (group 1). Use undo port-isolate enable to remove a port from the isolation group. Syntax port-isolate enable undo port-isolate enable Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view Default command level 2: System level Usage guidelines To assign Ethernet ports to the isolation group one by one, perform the command in Layer 2 Ethernet interface view.
[Sysname-GigabitEthernet4/0/1] quit [Sysname] interface gigabitethernet 4/0/2 [Sysname-GigabitEthernet4/0/2] port link-aggregation group 1 [Sysname-GigabitEthernet4/0/2] quit [Sysname] interface bridge-aggregation 1 [Sysname-Bridge-Aggregation1] port-isolate enable 41
Spanning tree configuration commands The spanning tree commands are supported on SAP modules that are operating in bridge mode. active region-configuration Use active region-configuration to activate your MST region configuration. Syntax active region-configuration Views MST region view Default command level 2: System level Usage guidelines When you configure MST region-related parameters, MSTP launches a new spanning tree calculation process that might cause network topology instability.
Syntax check region-configuration Views MST region view Default command level 2: System level Usage guidelines Two or more spanning tree devices belong to the same MST region only if they are configured with the same format selector (0, which is not configurable), MST region name, MST region revision level, and the same VLAN-to-instance mapping entries in the MST region, and if they are connected by a physical link.
display stp Use display stp to display the spanning tree status and statistics information.
• If you do not specify any port, this command displays the spanning tree information for all ports. The displayed information is sorted by port name. • If you specify a port list, this command displays the spanning tree information for the specified ports. The displayed information is sorted by port name. In MSTP mode: • If you do not specify any MSTI or port, this command displays the spanning tree information of all MSTIs on all ports.
Field Description Protection type on the port: • • • • • Protection ROOT—Root guard. LOOP—Loop guard. BPDU—BPDU guard. BPDU/ROOT—BPDU guard and root guard. NONE—No protection. # In MSTP mode, display the spanning tree status and statistics information of all MSTIs on all ports. display stp -------[CIST Global Info][Mode MSTP]------CIST Bridge :32768.000f-e200-2200 Bridge Times :Hello 2s MaxAge 20s FwDly 15s MaxHop 20 CIST Root/ERPC :0.00e0-fc0e-6554 / 200200 CIST RegRoot/IRPC :32768.
MSTI Root Type :PRIMARY root Master Bridge :32768.000f-e23e-9ca4 Cost to Master :0 TC received :0 Time since last TC :0 days 0h:5m:42s # Display the spanning tree status and statistics when the spanning tree feature is disabled. display stp Protocol Status :disabled Protocol Std. :IEEE 802.1s Version :3 Bridge-Prio.
Field Port Cost(Legacy) Description Path cost of the port. The field in parentheses indicates the standard (legacy, dot1d-1998, or dot1t) used for port path cost calculation. • Config—Configured value. • Active—Actual value. Designated bridge ID and port ID of the port. Desg. Bridge/Port The port ID displayed is insignificant for a port which does not support port priority. The port is an edge port or non-edge port. Port Edged • Config—Configured value. • Active—Actual value.
Field Description TC received Number of received TC BPDUs. Protocol Status Spanning tree protocol status. Protocol Std. Spanning tree protocol standard. Version Spanning tree protocol version. Bridge-Prio. In MSTP mode, this field indicates the device's priority in the CIST. Max age(s) Aging timer (in seconds) for BPDUs. Forward delay(s) Port state transition delay (in seconds). Hello time(s) Interval (in seconds) for the root bridge to send BPDUs. Max hops Maximum hops in the MSTI.
Table 14 Command output Field Description Blocked Port Name of a blocked port, which corresponds to the related MSTI or VLAN. Reason the port was blocked: Reason • ROOT-Protected—Root guard function. • LOOP-Protected—Loop guard function. • Formatcompatibility-Protected—MSTP BPDU format incompatibility protection function. • InconsistentPortType-Protected—Port type inconsistent protection function. display stp bpdu-statistics Use display stp bpdu-statistics to display the BPDU statistics on ports.
• If you do not specify any port, this command displays the BPDU statistics of on all ports. The displayed information is sorted by port name. • If you specify a port, this command displays the BPDU statistics on the port. Examples # In MSTP mode, display the BPDU statistics of all MSTIs on GigabitEthernet 4/0/1.
Type Count Last Updated --------------------------- ---------- ----------------Timeout BPDUs 0 MAX-hoped BPDUs 0 TC detected 0 TC sent 0 TC received 0 Table 15 Command output Field Description Port Port name. Instance-independent Statistics not related to any particular MSTI. Type Statistical item. Looped-back BPDUs BPDUs sent and then received by the same port. Max-Aged BPDUs BPDUs whose max age was exceeded. TCN Sent TCN BPDUs sent. TCN Received TCN BPDUs received.
Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression.
Parameters instance instance-id: Displays the historical port role calculation information for a specific MSTI. The value range for this argument is 0 to 31. The value 0 represents the CIST. slot slot-number: Specifies a card by its slot number. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays the historical port role calculation information on all cards. (In standalone mode.
display stp instance 2 history chassis 1 slot 1 ---------- STP chassis 1 slot 1 history trace -------------------------- Instance 2 --------------------- Port Ten-GigabitEthernet1/0/1 Role change : ROOT->DESI (Aged) Time : 2009/02/08 00:22:56 Port priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1 Port Ten-GigabitEthernet1/0/2 Role change : ALTER->ROOT Time : 2009/02/08 00:22:56 Port priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.
Format selector :0 Region name :hello Revision level :0 Configuration digest :0x5f762d9a46311effb7a488a3267fca9f Instance Vlans Mapped 0 21 to 4094 1 1 to 10 2 11 to 20 Table 18 Command output Field Description Format selector Format selector defined by the spanning tree protocol. The default value is 0 and the selector cannot be configured. Region name MST region name.
display stp root MSTID 0 Root Bridge ID ExtPathCost IntPathCost Root Port 0.00e0-fc0e-6554 200200 0 GigabitEthernet4/0/1 Table 19 Command output Field Description ExtPathCost External path cost. The device automatically calculates the default path cost of a port. Otherwise, you can use the stp cost command to configure the path cost of a port. IntPathCost Internal path cost. The device automatically calculates the default path cost of a port.
exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Usage guidelines In STP or RSTP mode, the displayed information is sorted by port name.
undo instance instance-id [ vlan vlan-list ] Default All VLANs are mapped to the CIST. Views MST region view Default command level 2: System level Parameters instance-id: Specifies an MSTI ID. The value range for this argument is 0 to 31. The value 0 represents the CIST.
Views MST region view Default command level 2: System level Parameters name: Specifies the MST region name, a string of 1 to 32 characters. Usage guidelines The MST region name, the VLAN-to-instance mapping table, and the MSTP revision level of a device determine the device's MST region. After configuring this command, run the active region-configuration command to activate the configured MST region name. Examples # Set the MST region name of the device to hello.
Usage guidelines The MSTP statistics information includes the numbers of TCN BPDUs, configuration BPDUs, RST BPDUs and MST BPDUs sent/received through the specified ports. Examples # Clear the spanning tree-related statistics on ports GigabitEthernet 4/0/1 through GigabitEthernet 4/0/3. reset stp interface GigabitEthernet 4/0/1 to GigabitEthernet 4/0/3 Related commands display stp revision-level Use revision-level to configure the MSTP revision level.
• instance • region-name • vlan-mapping modulo stp bpdu-protection Use stp bpdu-protection to enable the BPDU guard function. Use undo stp bpdu-protection to disable the BPDU guard function. Syntax stp bpdu-protection undo stp bpdu-protection Default The BPDU guard function is disabled. Views System view Default command level 2: System level Examples # Enable the BPDU guard function.
Usage guidelines An appropriate setting of hello time, forward delay, and max age can speed up network convergence. The values of these timers are related to the network size, and you can set the timers by setting the network diameter. With the network diameter set to 7 (the default), the three timers will also be set to their defaults. Each MST region is considered as a device, and the configured network diameter of the switched network takes effect only on the CIST (or MSTI 0) but not on other MSTIs.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves the aggregation group. Examples # Configure GigabitEthernet 4/1 to receive and send only standard-format (802.1s) MSTP packets. system-view [Sysname] interface GigabitEthernet 4/0/1 [Sysname-GigabitEthernet4/0/1] stp compliance dot1s stp config-digest-snooping Use stp config-digest-snooping to enable Digest Snooping. Use undo stp config-digest-snooping to disable Digest Snooping.
Related commands display stp stp cost Use stp cost to set the path cost of the port or ports. Use undo stp cost to restore the default. Syntax stp [ instance instance-id ] cost cost undo stp [ instance instance-id ] cost Default The device automatically calculates the path costs of ports in each spanning tree based on the corresponding standard.
The path cost setting of a port can affect the role selection of the port. When the path cost of a port is changed, the system re-calculates the role of the port and initiates a state transition. Examples # In MSTP mode, set the path cost of port GigabitEthernet 4/0/3 in MSTI 2 to 200.
Typically, configuration BPDUs from other devices cannot reach an edge port, because the edge port does not connect to any other device. If a port receives a configuration BPDU when the BPDU guard function is disabled, the port functions as a non-edge port even if you configure it as an edge port. You cannot configure edge port settings and loop guard on a port at the same time. Examples # Configure GigabitEthernet 4/0/1 as an edge port.
[Sysname] interface GigabitEthernet 4/0/1 [Sysname-GigabitEthernet4/0/1] undo stp enable Related commands stp mode stp loop-protection Use stp loop-protection to enable the loop guard function on the ports. Use undo stp loop-protection to disable the loop guard function on the ports. Syntax stp loop-protection undo stp loop-protection Default The loop guard function is disabled.
Syntax stp max-hops hops undo stp max-hops Default The maximum number of hops of an MST region is 20. Views System view Default command level 2: System level Parameters hops: Sets the maximum hops in the range of 1 to 40. Usage guidelines The maximum hops limit the size of the MST region. Examples # Set the maximum hops of the MST region to 35. system-view [Sysname] stp max-hops 35 Related commands display stp stp mcheck Use stp mcheck to perform the mCheck operation globally or on a port.
operation on the ports interconnecting Device B and Device C, in addition to configuring the spanning tree to operate in RSTP or MSTP mode on Device B. The device operates in STP, RSTP, or MSTP mode depending on the spanning tree mode setting. The stp mcheck command is effective only when the device operates in MSTP or RSTP mode. Configured in system view, the setting takes effect globally. Configured in Ethernet interface view, the setting takes effect only on the interface.
[Sysname] stp mode stp Related commands • stp enable • stp mcheck stp no-agreement-check Use stp no-agreement-check to enable No Agreement Check on the ports. Use undo stp no-agreement-check to disable No Agreement Check on the ports. Syntax stp no-agreement-check undo stp no-agreement-check Default No Agreement Check is disabled.
Default The legacy standard is used. Views System view Default command level 2: System level Parameters dot1d-1998: Configures the device to calculate the default path cost for ports based on IEEE 802.1d-1998. dot1t: Configures the device to calculate the default path cost for ports based on IEEE 802.1t. legacy: Configures the device to calculate the default path cost for ports based on a private standard.
force-true: Specifies the point-to-point link type. Usage guidelines Configured in Ethernet interface view, the setting takes effect only on the interface. Configured in port group view, the setting takes effect on all member ports in the port group. Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface. Configured on a member port in an aggregation group, the setting takes effect only after the port leaves the aggregation group.
priority: Port priority, which is in the range of 0 to 240 in increments of 16 (as indicated by 0, 16, 32). Usage guidelines Configured in Ethernet interface view, the setting takes effect only on the interface. Configured in port group view, the setting takes effect on all member ports in the port group. Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
system-view [Sysname] stp port-log instance 2 %Aug 16 00:49:41:856 2006 Sysname MSTP/3/MSTP_DISCARDING: Instance 2's GigabitEthernet4/0/1 has been set to discarding state! %Aug 16 00:49:41:856 2006 Sysname MSTP/3/MSTP_DISCARDING: Instance 2's GigabitEthernet4/0/2 has been set to forwarding state! The output shows that GigabitEthernet 4/0/1 in MSTI 2 transited to the discarding state and GigabitEthernet 4/0/2 in MSTI 2 transited to the forwarding state.
Syntax stp region-configuration undo stp region-configuration Views System view Default command level 2: System level Usage guidelines These are the default settings for the MST region: • The MST region name of the device is the MAC address of the device. • All VLANs are mapped to the CIST. • The MSTP revision level is 0. After you enter MST region view, you can configure the MST region-related parameters, including the region name, VLAN-to-instance mappings, and revision level.
Usage guidelines To set an MSTP device as the root bridge in a specific MSTI, use this command with the MSTI specified. To set an MSTP device in the CIST or an STP or RSTP device as the root bridge, use this command without specifying any MSTI. Once you specify the device as the root bridge, you cannot change the priority of the device. Examples # In MSTP mode, specify the device as the root bridge of MSTI 1.
• stp root primary stp root-protection Use stp root-protection to enable the root guard function on the ports. Use undo stp root-protection to disable the root guard function on the ports. Syntax stp root-protection undo stp root-protection Default The root guard function is disabled.
Views System view Default command level 2: System level Usage guidelines With the TC-BPDU guard function, you can set the maximum number of immediate forwarding address entry flushes that the device can perform every a certain period of time (10 seconds). For TC-BPDUs received in excess of the limit, the device performs a forwarding address entry flush when the time period expires. This prevents frequent flushing of forwarding address entries.
stp tc-snooping Use stp tc-snooping to enable topology change (TC) snooping. Use undo stp tc-snooping to disable TC snooping. Syntax stp tc-snooping undo stp tc-snooping Default TC snooping is disabled. Views System view Default command level 2: System level Usage guidelines This command is supported only on the HSR6802/HSR6804/HSR6808 routers that have SAP-4EXP cards. TC snooping and spanning tree protocols are mutually exclusive.
Views System view Default command level 2: System level Parameters time: Sets the forward delay (in 0.01 seconds), in the range of 400 to 3000 in increments of 100 (as indicated by 400, 500, 600). Usage guidelines The forward delay timer determines the time interval of state transition. To prevent temporary loops, a spanning tree port goes through the learning (intermediate) state before it transits from the discarding to the forwarding state.
Parameters time: Sets the hello time (in 0.01 seconds), in the range of 100 to 1000 in increments of 100 (as indicated by 100, 200, 300). Usage guidelines Hello time is the time interval at which spanning tree devices send configuration BPDUs to maintain spanning tree. If a device fails to receive configuration BPDUs within the set period of time, a new spanning tree calculation process will be triggered due to timeout. HP recommends not setting the hello time with this command.
HP recommends not setting the max age timer with this command. Instead, you can specify the network diameter of the switched network by using the stp bridge-diameter command and let spanning tree protocols automatically calculate optimal settings of the max age timer. If the network diameter uses the default value, the max age timer also uses the default value. Examples # In MSTP mode, set the max age timer to 10 seconds.
[Sysname] stp timer-factor 7 Related commands stp timer hello stp transmit-limit Use stp transmit-limit to set the maximum number of BPDUs that the ports can send within each hello time. Use undo stp transmit-limit to restore the default. Syntax stp transmit-limit limit undo stp transmit-limit Default The maximum transmission rate of all ports is 10. Each port can send up to 10 BPDUs within each hello time.
Syntax vlan-mapping modulo modulo Default All VLANs are mapped to the CIST (MSTI 0). Views MST region view Default command level 2: System level Parameters modulo: Sets the modulo value. The value range for this argument is 1 to 31. Usage guidelines You cannot map a VLAN to different MSTIs. If you map a VLAN that has been mapped to an MSTI to a new MSTI, the old mapping will be automatically removed.
BPDU tunneling configuration commands The commands in this chapter are supported on SAP interface modules that are operating in bridge mode. bpdu-tunnel dot1q Use bpdu-tunnel dot1q to enable BPDU tunneling for a protocol on the ports. Use undo bpdu-tunnel dot1q to disable BPDU tunneling for a protocol on the ports.
Usage guidelines Settings made in Layer 2 Ethernet interface view or Layer 2 aggregate interface view take effect only on the Ethernet interface or aggregate interface. Settings made in port group view take effect on all member ports in the port group. You cannot enable BPDU tunneling on a member port of a service loopback group. Before you enable BPDU tunneling for DLDP, EOAM, GVRP, HGMP, LLDP, or STP on a port, disable the protocol on the port first.
Default command level 2: System level Parameters mac-address: Specifies a destination multicast MAC address for BPDUs, in the format of H-H-H. The allowed values are 0x0100-0CCD-CDD0, 0x0100-0CCD-CDD1, 0x0100-0CCD-CDD2, and 0x010F-E200-0003. Examples # Set the destination multicast MAC address for BPDUs to 0x0100-0CCD-CDD0.
VLAN configuration commands The commands in this chapter are supported on SAP modules that are operating in bridge mode. Basic VLAN configuration commands bandwidth Use bandwidth to set the expected bandwidth for a VLAN-interface. Use undo bandwidth to cancel the configuration. Syntax bandwidth bandwidth-value undo bandwidth Views VLAN-interface view Default command level 2: System level Parameters bandwidth-value: Sets the expected bandwidth in the range of 1 to 4,294,967,295 kbps.
Default The description for a VLAN is VLAN vlan-id, which is the ID of the VLAN. For example, the default description of VLAN 100 is VLAN 0100. The default description for a VLAN-interface is the name of the interface. For example, the default description of VLAN-interface 1 is Vlan-interface1 Interface. Views VLAN view, VLAN-interface view Default command level 2: System level Parameters text: Specifies a description for a VLAN or VLAN-interface.
display interface vlan-interface Use display interface vlan-interface to display information about a specified or all VLAN-interfaces. Syntax display interface [ vlan-interface ] [ brief [ down ] ] [ | { begin | exclude | include } regular-expression ] display interface vlan-interface vlan-interface-id [ brief [ description ] ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters vlan-interface-id: Specifies a VLAN-interface number.
Output queue: Strict-priority queue Last clearing of counters: Never # Display brief information for VLAN-interface 2. display interface vlan-interface 2 brief The brief information of interface(s) under route mode: Link: ADM - administratively down; Stby - standby Protocol: (s) - spoofing Interface Link Protocol Main IP Vlan2 DOWN DOWN Description -- # Display brief information for VLAN-interfaces in DOWN state.
Field Last clearing of counters The brief information of interface(s) under route mode Description Time when the reset counters interface vlan-interface command was last used to clear the interface statistics. Never indicates the reset counters interface vlan-interface command has never been used on the interface after the device's startup. Brief information about Layer 3 interfaces.
vlan-id1 to vlan-id2: Displays information about VLANs specified by a VLAN ID range. vlan-id2 must be no smaller than vlan-id1. all: Displays all VLAN information but the reserved VLANs. dynamic: Displays the number of dynamic VLANs and the ID for each dynamic VLAN. The dynamic VLANs are generated through GVRP or those distributed by a RADIUS server. reserved: Displays information about the reserved VLANs.
Field Description Description Description of the VLAN. Name Name configured for the VLAN. IP Address Primary IP address of the VLAN-interface. This is available only when an IP address is configured for the VLAN-interface. To display secondary IP addresses, use the display interface vlan-interface command in any view or the display this command in VLAN-interface view. Subnet Mask Subnet mask of the primary IP address. This is available only when an IP address is configured for the VLAN-interface.
Related commands display interface vlan-interface ip address Use ip address to assign an IP address and subnet mask to a VLAN-interface. Use undo ip address to remove the IP address and subnet mask for a VLAN-interface. Syntax ip address ip-address { mask | mask-length } [ sub ] undo ip address [ ip-address { mask | mask-length } [ sub ] ] Default No IP address is assigned to any VLAN-interface.
mtu Use mtu to set the MTU for a VLAN-interface. Use undo mtu to restore the default. Syntax mtu size undo mtu Default The MTU of a VLAN-interface is 1500 bytes. Views VLAN-interface view Default command level 2: System level Parameters size: Sets the MTU in bytes. The value range for this argument is 46 to 2000. Examples # Set the MTU to 1492 bytes for VLAN-interface 1.
Parameters text: Specifies a VLAN name, a string of 1 to 32 characters.
Related commands display interface vlan-interface shutdown Use shutdown to manually shut down a VLAN-interface. Use undo shutdown to cancel the action of shutting down a VLAN-interface. Syntax shutdown undo shutdown Default A VLAN-interface is not manually shut down. The VLAN-interface is up if one or more ports in the VLAN is up, and goes down if all ports in the VLAN go down.
Syntax vlan { vlan-id1 [ to vlan-id2 ] | all } undo vlan { vlan-id1 [ to vlan-id2 ] | all } Default Only the default VLAN (VLAN 1) exists in the system. Views System view Default command level 2: System level Parameters vlan-id1, vlan-id2: Specifies a VLAN ID in the range of 1 to 4094. vlan-id1 to vlan-id2: Specifies a VLAN range. vlan-id2 must be no smaller than vlan-id1. all: Creates or removes all VLANs except reserved VLANs. Usage guidelines You cannot create or remove the default VLAN (VLAN 1).
Port-based VLAN configuration commands display port Use display port to display information about the hybrid or trunk ports on the device, including the port names, PVIDs, and allowed VLAN IDs. Syntax display port { hybrid | trunk } [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters hybrid: Displays hybrid ports. trunk: Displays trunk ports. |: Filters command output by specifying a regular expression.
Field Description Tagged VLANs for which the port sends packets without removing VLAN tags. Untagged VLANs for which the port sends packets after removing VLAN tags. port Use port to assign the specified access ports to the VLAN. Use undo port to remove the specified access ports from the VLAN. Syntax port interface-list undo port interface-list Default All ports are in VLAN 1. All ports are access ports. However, you can manually configure the port type. For more information, see "port link-type.
Syntax port access vlan vlan-id undo port access vlan Default All access ports belong to VLAN 1. Views Ethernet interface view, port group view, Layer 2 aggregate interface view Default command level 2: System level Parameters vlan-id: Specifies a VLAN ID in the range of 1 to 4094. Make sure the VLAN specified by the VLAN ID already exists. Usage guidelines The configuration made in Ethernet interface view applies only to the port.
undo port hybrid pvid Default The PVID of a hybrid port is VLAN 1. Views Ethernet interface view, port group view, Layer 2 aggregate interface view Default command level 2: System level Parameters vlan-id: Specifies a VLAN ID in the range of 1 to 4094. Usage guidelines You can use a nonexistent VLAN as the PVID for a hybrid port. If you use the undo vlan command to remove the PVID of a hybrid port, it does not affect the setting of the PVID on the port.
port hybrid vlan Use port hybrid vlan to assign the hybrid ports to the specified VLANs. Use undo port hybrid vlan to remove the hybrid ports from the specified VLANs. Syntax port hybrid vlan vlan-list { tagged | untagged } undo port hybrid vlan vlan-list Default A hybrid port only allows packets from VLAN 1 to pass through untagged.
system-view [Sysname] vlan 2 [Sysname-vlan2] quit [Sysname] port-group manual 2 [Sysname-port-group-manual-2] group-member GigabitEthernet 4/0/1 to GigabitEthernet 4/0/6 [Sysname-port-group-manual-2] port link-type hybrid [Sysname-port-group-manual-2] port hybrid vlan 2 untagged Configuring GigabitEthernet4/0/1... Done. Configuring GigabitEthernet4/0/2... Done. Configuring GigabitEthernet4/0/3... Done. Configuring GigabitEthernet4/0/4... Done. Configuring GigabitEthernet4/0/5... Done.
Parameters access: Configures the link type of a port as access. hybrid: Configures the link type of a port as hybrid. trunk: Configures the link type of a port as trunk. Usage guidelines To change the link type of a port from trunk to hybrid or vice versa, you must first set the link type to access.
Default A trunk port allows only packets from VLAN 1 to pass through.
Configuring GigabitEthernet4/0/1... Done. Configuring GigabitEthernet4/0/2... Done. Configuring GigabitEthernet4/0/3... Done. The output shows that GigabitEthernet 4/0/1, GigabitEthernet 4/0/2, and GigabitEthernet 4/0/3 are the member ports of the aggregation group corresponding to Bridge-Aggregation 1. Related commands port link-type port trunk pvid Use port trunk pvid to configure the PVID for the trunk port. Use undo port trunk pvid to restore the default.
Examples # Configure VLAN 100 as the PVID of the trunk port GigabitEthernet 4/0/1, and assign GigabitEthernet 4/0/1 to VLAN 100. system-view [Sysname] interface GigabitEthernet 4/0/1 [Sysname-GigabitEthernet4/0/1] port link-type trunk [Sysname-GigabitEthernet4/0/1] port trunk pvid vlan 100 [Sysname-GigabitEthernet4/0/1] port trunk permit vlan 100 # Configure VLAN 100 as the PVID of the trunk Layer 2 aggregate interface Bridge-Aggregation 1, and assign Bridge-Aggregation 1 to VLAN 100.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Views Any view Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression.
[Sysname–GigabitEthernet4/0/1] mac-vlan enable mac-vlan mac-address Use mac-vlan mac-address to associate the specified VLAN and priority value with the specified MAC addresses. Use undo mac-vlan to remove the association. Syntax mac-vlan mac-address mac-address [ mask mac-mask ] vlan vlan-id [ priority pri ] undo mac-vlan { all | mac-address mac-address [ mask mac-mask ] | vlan vlan-id } Default The hexadecimal digits of this argument are all Fs.
vlan precedence Use vlan precedence to set the order of VLAN matching. Use undo vlan precedence to restore the default. Syntax vlan precedence { mac-vlan | ip-subnet-vlan } undo vlan precedence Default VLANs are matched based on single MAC addresses preferentially. Views Layer 2 Ethernet port view, port group view Default command level 2: System level Parameters mac-vlan: Matches VLANs based on single MAC addresses preferentially. ip-subnet-vlan: Matches VLANs based on IP subnets preferentially.
Default command level 2: System level Parameters interface-type interface-number1: Specifies an interface by its type and number. interface-type interface-number1 to interface-type interface-number2: Specifies an interface range. all: Displays information about protocol-based VLANs on all ports. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
vlan-id1 to vlan-id2: Displays protocol-based VLAN information of a VLAN range from vlan-id1 to vlan-id2. vlan-id1 and vlan-id2 represent VLAN IDs and each in the range of 1 to 4094. vlan-id2 must be no smaller than vlan-id1. all: Displays information about all protocol-based VLANs. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Default command level 2: System level Parameters vlan vlan-id: Specifies a VLAN ID in the range of 1 to 4094. protocol-index: Specifies a protocol index. The value can be specified by the users or assigned by the system automatically when the protocol-based VLAN is created. You can use the display protocol-vlan vlan all command to display the protocol indexes. The value range for this argument is 0 to 15. to protocol-end: Specifies the end protocol index.
Default No VLAN is bound to any protocol template. Views VLAN view Default command level 2: System level Parameters at: Specifies the AppleTalk based VLAN. ipv4: Specifies the IPv4 based VLAN. ipv6: Specifies the IPv6 based VLAN. ipx: Specifies the IPX based VLAN. The keywords ethernetii, llc, raw, and snap are encapsulation formats for IPX. mode: Configures a user-defined protocol template for the VLAN, which could also have the following encapsulation formats: ethernetii, llc, and snap.
You can set etype-id to 0x0800, 0x809B, or 0x86DD, corresponding to IPv4, AppleTalk, and IPv6, respectively. Examples CAUTION: IP uses ARP for address resolution in Ethernet. To prevent communication failure, configure the IP and ARP templates in the same VLAN and associate them with the same port. # Configure VLAN 3 as an IPv4 based VLAN.
exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Examples # Display IP subnet-based VLANs and IP subnet indexes on GigabitEthernet 4/0/1.
Examples # Display the IP subnet-based VLAN information and IP subnet indexes for all VLANs. display ip-subnet-vlan vlan all VLAN ID: 3 Subnet Index IP Address Subnet Mask ==================================================== 0 192.168.1.0 255.255.255.0 Table 28 Command output Field Description Subnet Index IP subnet index. IP Address IP address of the subnet (either an IP address or a network address). Subnet Mask Mask of the IP subnet.
Usage guidelines The IP subnet or IP address cannot be a multicast network segment or a multicast address. Examples # Configure VLAN 3 as an IP subnet-based VLAN and associate it with the 192.168.1.0/24 network segment. system-view [Sysname] vlan 3 [Sysname-vlan3] ip-subnet-vlan ip 192.168.1.0 255.255.255.0 Related commands display ip-subnet-vlan vlan port hybrid ip-subnet-vlan Use port hybrid ip-subnet-vlan to associate the Ethernet port with the specified IP subnet-based VLAN.
Examples # Associate GigabitEthernet 4/0/1 with the IP subnet-based VLAN 3. system-view [Sysname] vlan 3 [Sysname-vlan3] ip-subnet-vlan ip 192.168.1.0 255.255.255.0 [Sysname-vlan3] quit [Sysname] interface GigabitEthernet 4/0/1 [Sysname-GigabitEthernet4/0/1] port link-type hybrid [Sysname-GigabitEthernet4/0/1] port hybrid vlan 3 untagged Please wait... Done.
Super VLAN configuration commands The super VLAN feature is supported on SAP modules that are operating in bridge mode. display supervlan Use display supervlan to display the mapping between a super VLAN and sub-VLANs, and to display information about these VLANs. Syntax display supervlan [ supervlan-id ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters supervlan-id: Specifies a super VLAN ID in the range of 1 to 4094.
VLAN Type: static It is a Sub VLAN. Route Interface: not configured Description: VLAN 0003 Name: VLAN 0003 Tagged Ports: none Untagged Ports: GigabitEthernet4/0/3 VLAN ID: 4 VLAN Type: static It is a Sub VLAN. Route Interface: not configured Description: VLAN 0004 Name: VLAN 0004 Tagged Ports: none Untagged Ports: GigabitEthernet4/0/4 VLAN ID: 5 VLAN Type: static It is a Sub VLAN.
Related commands • subvlan • supervlan subvlan Use subvlan to associate the super VLAN with sub-VLANs specified by vlan-list. Use undo subvlan to remove the association.
undo supervlan Views VLAN view Default command level 2: System level Usage guidelines You cannot configure a super VLAN as the guest VLAN for a port, and vice versa. For more information about guest VLANs, see Security Configuration Guide. You can configure Layer 2 multicast for a super VLAN. However, the configuration cannot take effect. You can configure DHCP, Layer 3 multicast, dynamic routing, and NAT for the VLAN-interface of a super VLAN. However, only DHCP can take effect.
Voice VLAN configuration commands The voice VLAN feature is supported on SAP modules that are operating in bridge mode. display voice vlan oui Use display voice vlan oui to display the supported organizationally unique identifier (OUI) addresses, the OUI address masks, and the description strings.
Table 30 Command output Field Description Oui Address OUI addresses supported. Mask Masks of the OUI addresses supported. Description Description strings of the OUI addresses supported. Related commands voice vlan mac-address display voice vlan state Use display voice vlan state to display voice VLAN configuration.
Field Description Current Voice VLANs Number of existing voice VLANs. Security mode of the voice VLAN: Voice VLAN security mode • Security. • Normal. Voice VLAN aging time Aging time of the voice VLAN. Voice VLAN enabled port and its mode Voice VLAN-enabled port and its voice VLAN assignment mode. PORT Voice VLAN-enabled port name. VLAN ID of the voice VLAN enabled on the port. MODE Voice VLAN assignment mode of the port, manual or automatic. COS 802.
Examples # Configure the voice VLAN aging time as 100 minutes. system-view [Sysname] voice vlan aging 100 Related commands display voice vlan state voice vlan enable Use voice vlan enable to enable the voice VLAN feature and to configure a VLAN as the voice VLAN for the Ethernet port. Use undo voice vlan enable to disable the voice VLAN feature on an Ethernet port. Syntax voice vlan vlan-id enable undo voice vlan [ vlan-id ] enable Default The voice VLAN feature is disabled on ports.
Default The system is configured with the default OUI addresses. You can remove the default OUI addresses, and then add recognizable OUI addresses manually.
Use undo voice vlan mode auto to configure the port to operate in manual voice VLAN assignment mode. Syntax voice vlan mode auto undo voice vlan mode auto Default A port operates in automatic voice VLAN assignment mode. Views Ethernet interface view Default command level 2: System level Usage guidelines The voice VLAN modes of different ports are independent of one another.
Usage guidelines Configure the QoS priority settings for voice VLAN traffic on an interface before you enable voice VLAN on the interface. If the configuration order is reversed, the priority settings will fail. The voice vlan qos command and the voice vlan qos trust command can overwrite each other. When you execute the two commands on a port multiple times, the most recent configuration takes effect.
Related commands voice vlan qos voice vlan security enable Use voice vlan security enable to enable the voice VLAN security mode. Use undo voice vlan security enable to disable the voice VLAN security mode. Syntax voice vlan security enable undo voice vlan security enable Default The voice VLAN security mode is enabled. Views System view Default command level 2: System level Usage guidelines When you enable the security mode for a voice VLAN, only voice traffic can be transmitted in the voice VLAN.
GVRP configuration commands The commands in this chapter are supported on SAP modules that are operating in bridge mode. display garp statistics Use display garp statistics to display the GARP statistics of the specified ports. If no ports are specified, this command displays the GARP statistics for all ports.
display garp statistics interface GigabitEthernet 4/0/1 to GigabitEthernet 4/0/2 GARP statistics on port GigabitEthernet4/0/1 Number of GVRP Frames Received : 5 Number of GVRP Frames Transmitted : 2 Number of Frames Discarded : 1 GARP statistics on port GigabitEthernet4/0/2 Number of GVRP Frames Received : 3 Number of GVRP Frames Transmitted : 4 Number of Frames Discarded : 2 Related commands reset garp statistics display garp timer Use display garp timer to display GARP timers on
Garp Join Time : 20 centiseconds Garp Leave Time : 60 centiseconds Garp LeaveAll Time : 1000 centiseconds Garp Hold Time : 10 centiseconds Related commands • garp timer hold • garp timer join • garp timer leave • garp timer leaveall display gvrp local-vlan Use display gvrp local-vlan to display the local VLAN information maintained by GVRP on the specified port.
Views Any view Default command level 0: Visit level Parameters interface interface-type interface-number: Specifies an interface by its type and number. vlan vlan-id: Specifies a VLAN ID in the range of 1 to 4094. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow.
Field Description The Applicant state machine handles attribute declarations. Its state can be VA, AA, QA, LA, VP, AP, QP, VO, AO, QO, LO, VON, AON, and QON. Each state consists of two or three letters. The first letter indicates the state: • V—Very anxious, which means that the local participant has not declared the attribute or has not received any Join message containing the attribute.
Default command level 1: Monitor level Parameters interface interface-list: Displays the GVRP statistics of one or multiple Ethernet ports.
Default command level 1: Monitor level Parameters |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression.
Operations of adding VLAN to TRUNK : 2-100 Operations of deleting VLAN from TRUNK : none garp timer hold Use garp timer hold to set the GARP Hold timer for an Ethernet port, Layer-2 aggregate interface, or all ports in a port group. Use undo garp timer hold to restore the default of the GARP Hold timer. This operation might fail if the default is beyond the valid value range for the Hold timer. Syntax garp timer hold timer-value undo garp timer hold Default The Hold timer is 10 centiseconds.
Default The Join timer is set to 20 centiseconds. Views Ethernet interface view, Layer-2 aggregate interface view, port group view Default command level 2: System level Parameters timer-value: Specifies the Join timer (in centiseconds), which must be a multiple of 5 and range from twice the Hold timer (inclusive) and half the Leave timer (inclusive). Examples # Set the GARP Join timer to 25 centiseconds, assuming that both the Hold timer and the Leave timer are using the default.
Examples # Set the GARP Leave timer to 100 centiseconds, assuming that both the Join timer and the LeaveAll timer are using the default. system-view [Sysname] interface GigabitEthernet 4/0/1 [Sysname-GigabitEthernet4/0/1] garp timer leave 100 Related commands • display garp timer • garp timer join • garp timer leaveall garp timer leaveall Use garp timer leaveall to set the GARP LeaveAll timer. Use undo garp timer leaveall to restore the default.
gvrp Use gvrp to enable GVRP. Use undo gvrp to disable GVRP. Syntax gvrp undo gvrp Default GVRP is disabled. Views System view, Ethernet interface view, Layer-2 aggregate interface view, port group view Default command level 2: System level Usage guidelines Settings in system view take effect globally. Settings in Ethernet view or Layer 2 aggregate interface take effect on the current interface. Settings in port group view take effect on all ports in the port group.
Default command level 2: System level Parameters fixed: Sets the GVRP registration mode to fixed. forbidden: Sets the GVRP registration mode to forbidden. normal: Sets the GVRP registration mode to normal. Usage guidelines Settings in system view take effect globally. Settings in Ethernet view or Layer 2 aggregate interface take effect on the current interface. Settings in port group view take effect on all ports in the port group. This command is only available on trunk ports.
Related commands display garp statistics 148
QinQ configuration commands The QinQ configuration commands are supported on SAP modules that are operating in bridge mode. The HSR6800 series routers implement selective QinQ through QoS policies. For more information about QoS policies, see ACL and QoS Command Reference. This document uses the following terms: • CVLAN—Customer network VLANs, also called "inner VLANs," refer to VLANs that a customer uses on the private network.
qinq enable Use qinq enable to enable basic QinQ. Use undo qinq enable to disable basic QinQ. Syntax qinq enable undo qinq enable Default Basic QinQ is disabled on Ethernet ports. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view Default command level 2: System level Usage guidelines A basic QinQ-enabled port tags received frames with its PVID tag.
Default The TPID value for CVLAN tags is 0x8100. Views System view Default command level 2: System level Parameters hex-value: Specifies a hexadecimal TPID value. The value range is 0x0001 to 0xFFFF, excluding the EtherType values listed in 错误！未找到引用源。. Table 35 Common EtherType values Protocol type Value ARP 0x0806 PUP 0x0200 RARP 0x8035 IP 0x0800 IPv6 0x86DD PPPoE 0x8863/0x8864 MPLS 0x8847/0x8848 IPX/SPX 0x8137 IS-IS 0x8000 LACP 0x8809 802.
Syntax qinq ethernet-type service-tag hex-value undo qinq ethernet-type service-tag Default The TPID value is 0x8100 for SVLAN tags. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view Default command level 2: System level Parameters hex-value: Specifies a hexadecimal TPID value. The value range is 0x0001 to 0xFFFF, excluding the EtherType values in 错误！未找到引用源。. Description SVLAN TPIDs are configurable on a per-port basis.
Default command level 2: System level Parameters vlan-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a single VLAN ID or a VLAN ID range in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The ID for vlan-id2 must be equal to or greater than the ID for vlan-id1. all: Specifies all VLANs. Usage guidelines When basic QinQ is enabled on a port, all packets passing through the port are tagged with the port's PVID tag.
VLAN termination configuration commands dot1q ethernet-type Use dot1q ethernet-type to set the TPID value in the outermost VLAN tag of packets received and sent by the interface. Use undo dot1q ethernet-type to restore the default. Syntax dot1q ethernet-type hex-value undo dot1q ethernet-type Default The TPID value for the outmost VLAN tag of VLAN-tagged packets received and sent by the interface is 0x8100.
Usage guidelines After you execute the dot1q ethernet-type command, only packets whose TPID in the outermost VLAN tag is 0x8100 or the value you configured will be processed as VLAN-tagged packets. When sending a packet, the interface sets the TPID value in the outermost VLAN tag to the configured value, and sets the TPID values in the other VLAN tags to 0x8100 if the packet carries two or more layers of VLAN tags.
Syntax vlan-type dot1q vid vlan-list undo vlan-type dot1q vid vlan-list Views Layer 3 Ethernet subinterface view, Layer 3 aggregate subinterface view Default command level 2: System level Parameters vlan-list: Specifies a space-separated list of up to outermost 10 VLAN items. Each item specifies a single VLAN ID or a VLAN ID range in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The ID for vlan-id2 must be equal to or greater than the ID for vlan-id1.
Layer 2 VLAN IDs specified by the any keyword, and another subinterface under the same interface is configured with the vlan-type dot1q vid x second-dot1q vlan-list command. The any keyword specifies all VLAN IDs between 1 and 4094 other than the Layer 2 VLAN IDs specified by the vlan-list argument.
Layer 3 Ethernet subinterface Layer 1 VLAN ID of VLAN-tagged packets that the subinterface can terminate Layer 2 VLAN IDs of VLAN-tagged packets that the subinterface can terminate GigabitEthernet 4/0/1.1 100 100 GigabitEthernet 4/0/1.2 100 200–300 GigabitEthernet 4/0/1.3 100 1–99, 101–199, 301–499, and 601–4094 GigabitEthernet 4/0/1.4 100 500–600 GigabitEthernet 4/0/1.
VLAN mapping configuration commands The commands in this chapter are supported on SAP modules that are operating in bridge mode. nest Use nest to add a VLAN nest action to a traffic behavior. Use undo nest to remove the action. Syntax nest top-most vlan-id vlan-id undo nest top-most Views Traffic behavior view Default command level 2: System level Parameters top-most: Inserts an outer VLAN tag in VLAN tagged traffic. vlan-id vlan-id: Specifies a VLAN tag ID in the range of 1 to 4094.
Views Layer 2 Ethernet interface view, port group view, Layer 2 aggregate interface view Default command level 2: System level Usage guidelines Configured in Layer 2 Ethernet interface view, the command takes effect on the port only. Configured in port group view, the command takes effect on all ports in the port group. Examples # Enable customer-side QinQ on port GigabitEthernet 4/0/1.
# Enable network-side QinQ on port group 1. system-view [Sysname] port-group manual 1 [Sysname-port-group-manual-1] group-member GigabitEthernet 4/0/1 to GigabitEthernet 4/0/6 [Sysname-port-group-manual-1] qinq enable uplink remark customer-vlan-id Use remark customer-vlan-id to add a CVLAN marking action to a traffic behavior. Use undo remark customer-vlan-id to remove the action from the traffic behavior.
Examples # Configure traffic behavior b1 to mark matching packets with SVLAN 222.
LLDP configuration commands display lldp local-information Use display lldp local-information to display the LLDP information to be sent. This information, contained in the LLDP TLVs, is sent to neighbor devices. Syntax display lldp local-information [ global | interface interface-type interface-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters global: Displays the global LLDP information to be sent.
System capabilities enabled :Router MED information Device class: Connectivity device (MED inventory information of master board) HardwareRev : Ver.B FirmwareRev : 1.04 SoftwareRev : 1.
Field Description MED device class: • Connectivity device—Network device. • Class I—Normal terminal device. It requires the basic LLDP discovery services. Device class • Class II—Media terminal device. It supports media streams and can also function as a normal terminal device. • Class III—Communication terminal device. It supports the IP communication systems of end users and can also function as a normal terminal device or media terminal device. HardwareRev Hardware version.
Parameters brief: Displays the summary of LLDP information sent from the neighboring devices. If this keyword is not specified, this command displays detailed LLDP information sent from the neighboring devices. interface interface-type interface-number: Displays the LLDP information sent from the neighboring devices received through a port specified by its type and number.
Power pairs : Signal Port power classification : Class 0 Link aggregation supported : Yes Link aggregation enabled : No Aggregation port ID : 0 Maximum frame Size: 1500 # Display the LLDP information sent from all neighboring devices in a list.
Field Description Capabilities supported on the neighboring device: System capabilities supported • Repeater—Signal repeating is supported. • Bridge—Switching is supported. • Router—Routing is supported. Capabilities enabled on the neighboring device: System capabilities enabled • Repeater—Signal repeating is enabled. • Bridge—Switching is enabled. • Router—Routing is enabled. Management address OID Management address object ID.
Default command level 1: Monitor level Parameters global: Displays the global LLDP statistics. interface interface-type interface-number: Specifies a port by its type and number. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression.
Field Description The number of LLDP neighbor information dropped Number of times of dropping neighbor information due to lack of available memory space. display lldp status Use display lldp status to display LLDP status information of a port.
Trap flag : No Polling interval : 0s Number of neighbors : 0 Number of MED neighbors : 0 Number of CDP neighbors : 0 Number of sent optional TLV : 19 Number of received unknown TLV : 0 Table 40 Command output Field Description Global status of LLDP Indicates whether LLDP is globally enabled. LLDP neighbor information last changed time Time when the neighbor information was last updated. Transmit interval LLDPDU transmit interval. Hold multiplier TTL multiplier.
Syntax display lldp tlv-config [ interface interface-type interface-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters interface interface-type interface-number: Specifies a port by its type and number. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
Location Identification TLV NO NO Extended Power via MDI TLV YES YES Inventory TLV YES YES Table 41 Command output Field Description LLDP tlv-config of port 1 Advertisable optional TLVs of port 1. NAME TLV type. STATUS Indicates whether a specific type of TLV is sent through a port. DEFAULT Indicates whether a specific type of TLV is sent through a port by default. Basic TLVs: Basic optional TLV • • • • • Port description TLV. System name TLV. System description TLV.
Views Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, port group view Default command level 2: System level Parameters disable: Specifies the Disable mode. A port in this mode does not send or receive LLDPDUs. rx: Specifies the Rx mode. A port in this mode only receives LLDPDUs. tx: Specifies the Tx mode. A port in this mode only sends LLDPDUs. txrx: Specifies the TxRx mode. A port in this mode sends and receives LLDPDUs.
Command HSR6802/HSR6804/HSR6808 lldp check-change-interval Yes on SAP modules operating in bridge mode Examples # Enable LLDP polling on GigabitEthernet 4/0/1, setting the polling interval to 30 seconds. system-view [Sysname] interface GigabitEthernet 4/0/1 [Sysname-GigabitEthernet4/0/1] lldp check-change-interval 30 lldp compliance admin-status cdp Use lldp compliance admin-status cdp to configure the operating mode of CDP-compatible LLDP on a port or all ports in a port group.
lldp compliance cdp Use lldp compliance cdp to enable global CDP compatibility. Use undo lldp compliance cdp to restore the default. Syntax lldp compliance cdp undo lldp compliance cdp Default CDP compatibility is globally disabled. Views System view Default command level 2: System level Usage guidelines Because the maximum TTL allowed by CDP is 255 seconds, the TTL configuration must be no more than 255 seconds for CDP-compatible LLDP to operate with Cisco IP phones.
Usage guidelines LLDP takes effect on a port only when LLDP is enabled both globally and on the port. The following matrix shows the command and router compatibility in Layer 2 Ethernet interface view: Command HSR6802/HSR6804/HSR6808 lldp enable Yes on SAP modules operating in bridge mode Examples # Disable LLDP on GigabitEthernet 4/0/1.
lldp fast-count Use lldp fast-count to set the number of the LLDPDUs sent each time fast LLDPDU transmission is triggered. Use undo lldp fast-count to restore the default. Syntax lldp fast-count count undo lldp fast-count Default The number is 3. Views System view Default command level 2: System level Parameters count: Sets the number of the LLDPDUs sent each time fast LLDPDU transmission is triggered. The value range is 1 to 10.
The TTL configuration of a device is determined by the expression: TTL multiplier × LLDPDU transmit interval The TTL can be up to 65535 seconds. Longer TTLs will be rounded off to 65535 seconds. Examples # Set the TTL multiplier to 6. system-view [Sysname] lldp hold-multiplier 6 Related commands lldp timer tx-interval lldp management-address-format string Use lldp management-address-format string to encapsulate the management address in the form of strings in TLVs.
lldp management-address-tlv Use lldp management-address-tlv to enable management address advertising and set the management address. Use undo lldp management-address-tlv to disable management address advertising in LLDPDUs. Syntax lldp management-address-tlv [ ip-address ] undo lldp management-address-tlv Default The management address is advertised through LLDPDUs. For a Layer 2 Ethernet port, the management address is the main IP address of the lowest-ID VLAN carried on the port.
lldp notification remote-change enable Use lldp notification remote-change enable to enable LLDP trapping for a port or all ports in a port group. Use undo lldp notification remote-change enable to disable LLDP trapping. Syntax lldp notification remote-change enable undo lldp notification remote-change enable Default LLDP trapping is disabled on ports.
Parameters interval: Sets the LLDP trap transmit interval in the range of 5 to 3600 seconds. Examples # Set the LLDP trap transmit interval to 8 seconds. system-view [Sysname] lldp timer notification-interval 8 lldp timer reinit-delay Use lldp timer reinit-delay to set the LLDP re-initialization delay. Use undo lldp timer reinit-delay to restore the default. Syntax lldp timer reinit-delay delay undo lldp timer reinit-delay Default The LLDP re-initialization delay is 2 seconds.
Default command level 2: System level Parameters delay: Sets the LLDPDU transmit delay in the range of 1 to 8192 seconds. Usage guidelines It is a good practice to set the LLDPDU transmit delay to be no greater than a quarter of the LLDPDU transmit interval. If the LLDPDU transmit delay is greater than the LLDPDU transmit interval, the device uses the LLDPDU transmit delay as the transmit interval. Examples # Set the LLDPDU transmit delay to 4 seconds.
[Sysname] lldp timer tx-interval 20 Related commands lldp timer tx-delay lldp tlv-enable Use lldp tlv-enable to configure the types of advertisable TLVs for a port or all ports in a port group. Use undo lldp tlv-enable to disable the advertising of specific types of TLVs.
port-description: Advertises port description TLVs. system-capability: Advertises system capabilities TLVs. system-description: Advertises system description TLVs. system-name: Advertises system name TLVs. dot1-tlv: Advertises IEEE 802.1 organizationally specific LLDP TLVs. port-vlan-id: Advertises port VLAN ID TLVs. protocol-vlan-id [ vlan-id ]: Advertises port and protocol VLAN ID TLVs. The vlan-id argument specifies a VLAN ID in the TLVs to be advertised.
To disable the device from advertising MAC/PHY configuration/status TLVs, you must first disable it from advertising LLDP-MED capabilities TLVs. If you enable the device to advertise LLDP-MED capabilities TLVs, you also enable it to advertise MAC/PHY configuration/status TLVs. You can configure multiple types of TLVs by using the lldp tlv-enable command without the all keyword specified.
Support and other resources Contacting HP For worldwide technical support information, see the HP support website: http://www.hp.
Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. [] Square brackets enclose syntax choices (keywords or arguments) that are optional. { x | y | ... } Braces enclose a set of required syntax choices separated by vertical bars, from which you select one.
Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access controller, a unified wired-WLAN module, or the switching engine on a unified wired-WLAN switch. Represents an access point.
Index ABCDEGILMNPQRSVW display mac-address statistics,4 A display mac-vlan,110 active region-configuration,42 display mac-vlan interface,111 B display port,101 bandwidth,89 display port-isolate group,39 bandwidth,14 display protocol-vlan interface,114 bpdu-tunnel dot1q,86 display protocol-vlan vlan,115 bpdu-tunnel tunnel-dmac,87 display stp,44 display stp abnormal-port,49 C display stp bpdu-statistics,50 check region-configuration,42 display stp down-port,52 D display stp history,53 des
port,102 L port access vlan,102 lacp period short,30 port hybrid ip-subnet-vlan,122 lacp system-priority,30 port hybrid protocol-vlan,116 link-aggregation load-sharing mode,31 port hybrid pvid,103 link-aggregation load-sharing mode local-first,32 port hybrid vlan,105 link-aggregation mode,32 port link-aggregation group,34 link-aggregation port-priority,33 port link-type,106 lldp admin-status,173 port trunk permit vlan,107 lldp check-change-interval,174 port trunk pvid,109 lldp compliance
stp mode,70 subvlan,126 stp no-agreement-check,71 supervlan,126 stp pathcost-standard,71 V stp point-to-point,72 vlan,99 stp port priority,73 vlan precedence,114 stp port-log,74 vlan-mapping modulo,84 stp priority,75 vlan-termination broadcast enable,155 stp region-configuration,75 vlan-type dot1q vid,155 stp root primary,76 vlan-type dot1q vid second-dot1q,156 stp root secondary,77 voice vlan aging,130 stp root-protection,78 voice vlan enable,131 stp tc-protection,78 voice vlan mac-a
