G8052 CR 8-3

LenovoRackSwitchG8052
ISCLIIndustryStandardCLI
CommandReference
ForNetworkingOS8.3
Note:Beforeusingthisinformationandtheproductitsupports,readthegeneralinformationintheSafetyinformationand
EnvironmentalNoticesandUserGuidedocumentsontheLenovoDocumentationCDandtheWarrantyInformationdocumentthatcomes
withtheproduct.
FirstEdition(May2015)
CopyrightLenovo2015
PortionsCopyrightIBMCorporation2014.
LIMITEDANDRESTRICTEDRIGHTSNOTICE:IfdataorsoftwareisdeliveredpursuantaGeneralServices
AdministrationGSAcontract,use,reproduction,ordisclosureissubjecttorestrictionssetforthinContractNo.
GS35F05925.
LenovoandtheLenovologoaretrademarksofLenovointheUnitedStates,othercountries,orboth.
Contents
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
WhoShouldUseThisBook .......................16
HowThisBookIsOrganized .......................17
TypographicConventions ........................18
Chapter 1. ISCLI Basics . . . . . . . . . . . . . . . . . . . . . 21
ISCLICommandModes.........................22
GlobalCommands ...........................26
CommandLineInterfaceShortcuts....................28
CLIListandRangeInputs......................28
CommandAbbreviation .......................28
TabCompletion...........................28
UserAccessLevels ...........................29
IdleTimeout..............................30
Chapter 2. Information Commands . . . . . . . . . . . . . . . . 31
SystemInformation...........................32
CLIDisplayInformation.......................34
ErrorDisableandRecoveryInformation ................35
SNMPv3SystemInformation .....................36
SNMPv3USMUserTableInformation ...............37
SNMPv3ViewTableInformation .................38
SNMPv3AccessTableInformation ................39
SNMPv3GroupTableInformation.................40
SNMPv3CommunityTableInformation..............40
SNMPv3TargetAddressTableInformation .............41
SNMPv3TargetParametersTableInformation ...........42
SNMPv3NotifyTableInformation.................42
SNMPv3DumpInformation...................43
GeneralSystemInformation .....................44
ShowSpecificSystemInformation.................45
ShowRecentSyslogMessages ....................46
UserStatus .............................47
StackingInformation ..........................48
StackingSwitchInformation .....................51
Layer2Information ...........................52
802.1XInformation .........................55
FDBInformation ..........................57
FDBMulticastInformation....................58
ShowAllFDBInformation....................59
ClearingEntriesfromtheForwardingDatabase ...........59
LinkAggregationControlProtocolInformation .............60
LinkAggregationControlProtocol ................61
Layer2FailoverInformation .....................62
Layer2FailoverInformation ...................62
HotLinksInformation ........................64
LLDPInformation..........................65
Copyright Lenovo 2015
LLDPRemoteDeviceInformation ................. 66
UnidirectionalLinkDetectionInformation............... 67
UDLDPortInformation ..................... 67
802.1xDiscoveryInformation..................... 68
802.1xPortInformation..................... 68
OAMDiscoveryInformation..................... 69
OAMPortInformation...................... 69
vLAGInformation......................... 70
vLAGTrunkInformation .................... 71
SpanningTreeInformation...................... 72
RSTPInformation........................ 73
PVRSTInformation....................... 75
SpanningTreeBridgeInformation................. 77
SpanningTreeRootInformation ................. 78
MultipleSpanningTreeInformation ................ 79
TrunkGroupInformation ...................... 81
VLANInformation......................... 82
Layer3Information........................... 84
IPRoutingInformation ....................... 88
ShowAllIPRouteInformation.................. 89
ARPInformation .......................... 91
ARPAddressListInformation.................. 92
ShowAllARPEntryInformation................. 93
DynamicARPInspectionInformation............... 94
BGPInformation.......................... 95
BGPPeerInformation...................... 96
BGPSummaryInformation .................... 96
DumpBGPInformation ..................... 96
OSPFInformation.......................... 97
OSPFGeneralInformation.................... 99
OSPFInterfaceInformation .................... 99
OSPFLoopbackInformation .................. 100
OSPFPortInformation ..................... 100
OSPFInformationRouteCodes ................. 100
OSPFDatabaseInformation .................. 101
OSPFv3Information ....................... 103
OSPFv3InformationDump................... 105
OSPFv3InterfaceInformation.................. 105
OSPFv3DatabaseInformation ................. 106
OSPFv3RouteCodesInformation................ 107
RoutingInformationProtocol ................... 108
RIPRoutesInformation.................... 109
RIPInterfaceInformation ................... 109
IPv6RoutingInformation ..................... 110
IPv6RoutingTableInformation ................. 111
IPv6NeighborCacheInformation.................. 112
IPv6NeighborCacheInformation................ 112
IPv6NeighborDiscoveryPrefixInformation ............. 113
ECMPStaticRouteInformation ................... 114
IGMPInformation ........................ 115
IGMPQuerierInformation ................... 117
G8052 Command Reference for N/OS 8.3
IGMPGroupInformation....................118
IGMPMulticastRouterInformation...............118
IPMCGroupInformation ....................119
MLDInformation.........................120
VRRPInformation ........................122
InterfaceInformation.......................124
IPv6InterfaceInformation.....................125
IPv6PathMTUInformation....................126
IPInformation ..........................127
IKEv2Information ........................129
IKEv2InformationDump....................130
IPSecurityInformation ......................131
IPsecManualPolicyInformation ................132
DHCPSnoopingBindingTableInformation.............133
PIMInformation.........................134
PIMComponentInformation ..................135
PIMInterfaceInformation ...................135
PIMNeighborInformation ...................136
PIMMulticastRouteInformationCommands...........137
PIMMulticastRouteInformation ................138
QualityofServiceInformation.....................139
802.1pInformation........................140
WREDandECNInformation....................141
AccessControlListInformation ....................142
AccessControlListInformation ...................143
AccessControlIPv6ListInformation ................145
OpenFlowInformation........................146
OpenFlowGlobalConfigurationInformation.............147
OpenFlowFlowAllocationInformation ...............149
OpenFlowGroupInformation...................151
OpenFlowConfigurationInformation ................152
OpenFlowTableInformation....................154
RMONInformationCommands....................156
RMONHistoryInformation....................157
RMONAlarmInformation.....................158
RMONEventInformation .....................159
LinkStatusInformation ........................160
PortInformation...........................161
PortTransceiverStatus........................162
VMReadyInformation ........................164
VMInformation .........................165
VMCheckInformation ......................166
VMwareInformation.......................166
VMwareHostInformation ...................167
EVBInformation...........................168
InformationDump ..........................169
Contents
Chapter 3. Statistics Commands . . . . . . . . . . . . . . . . . 171

PortStatistics ............................ 172
802.1XAuthenticatorStatistics ................... 175
802.1XAuthenticatorDiagnostics.................. 176
BootStrapProtocolRelayStatistics ................. 179
BridgingStatistics......................... 180
EthernetStatistics ......................... 181
InterfaceStatistics......................... 184
InterfaceProtocolStatistics ..................... 187
LinkStatistics .......................... 187
RMONStatistics ......................... 188
QoSQueueCounterBasedStatistics................. 191
QoSQueueRateBasedStatistics .................. 192
TrunkGroupStatistics........................ 193
Layer2Statistics ........................... 194
FDBStatistics........................... 196
LACPStatistics.......................... 197
HotlinksStatistics ......................... 198
LLDPPortStatistics ........................ 199
OAMStatistics .......................... 200
vLAGStatistics .......................... 201
vLAGISLStatistics ...................... 202
Layer3Statistics ........................... 203
IPv4Statistics .......................... 208
IPv6Statistics .......................... 210
IPv4RouteStatistics........................ 215
IPv6RouteStatistics........................ 216
ARPstatistics........................... 217
DNSStatistics.......................... 218
ICMPStatistics .......................... 219
TCPStatistics........................... 221
UDPStatistics.......................... 223
IGMPStatistics.......................... 224
MLDStatistics .......................... 226
MLDGlobalStatistics ..................... 227
OSPFStatistics .......................... 229
OSPFGlobalStatistics ..................... 230
OSPFv3Statistics ......................... 234
OSPFv3GlobalStatistics .................... 235
VRRPStatistics.......................... 239
PIMStatistics........................... 240
RoutingInformationProtocolStatistics ............... 241
DHCPStatistics.......................... 242
DHCPSnoopingStatistics................... 242
OpenFlowStatistics.......................... 243
ManagementProcessorStatistics .................... 259
MPPacketStatisticsCommands .................. 260
MPPacketStatistics ........................ 261
LoggedPacketStatistics ...................... 265
TCPStatistics ...........................269
UDPStatistics ..........................270
CPUStatistics...........................271
CPUStatisticsHistory .......................272
QoSStatistics.............................273
AccessControlListStatistics ......................275
ACLStatistics...........................276
VMAPStatistics..........................276
SNMPStatistics ...........................277
NTPStatistics ............................281
StatisticsDump............................283
Chapter 4. Configuration Commands . . . . . . . . . . . . . . . . 285
ViewingandSavingChanges .....................287
SavingtheConfiguration......................287
SystemConfiguration.........................288
SystemErrorDisableandRecoveryConfiguration...........293
LinkFlapDampeningConfiguration ...............294
SystemHostLogConfiguration ...................295
SSHServerConfiguration.....................299
RADIUSServerConfiguration...................301
TACACS+ServerConfiguration...................303
LDAPServerConfiguration ....................308
NTPServerConfiguration.....................310
SystemSNMPConfiguration ....................312
SNMPv3Configuration......................315
UserSecurityModelConfiguration ...............317
SNMPv3ViewConfiguration ..................318
ViewbasedAccessControlModelConfiguration .........319
SNMPv3GroupConfiguration.................320
SNMPv3CommunityTableConfiguration ............321
SNMPv3TargetAddressTableConfiguration ...........322
SNMPv3TargetParametersTableConfiguration .........323
SNMPv3NotifyTableConfiguration ...............324
SystemAccessConfiguration....................325
ManagementNetworkConfiguration ..............326
NETCONFConfiguration ...................328
NETCONFoverSSHConfiguration ...............328
UserAccessControlConfiguration.................329
SystemUserIDConfiguration..................330
StrongPasswordConfiguration .................331
HTTPSAccessConfiguration ..................332
CustomDaylightSavingTimeConfiguration.............335
sFlowConfiguration........................336
sFlowPortConfiguration ....................337
ServerPortConfiguration.....................338
PortConfiguration ..........................339
PortErrorDisableandRecoveryConfiguration ............344
PortLinkFlapDampeningConfiguration.............344
PortLinkConfiguration......................345
Contents
TemporarilyDisablingaPort .................... 346

UniDirectionalLinkDetectionConfiguration ............. 347
PortOAMConfiguration ..................... 348
PortACLConfiguration ...................... 349
PortWREDConfiguration ..................... 350
PortWREDTransmitQueueConfiguration ............ 351
StackingConfiguration ........................ 352
StackingSwitchConfiguration................... 353
QualityofServiceConfiguration .................... 354
802.1pConfiguration ....................... 354
DSCPConfiguration ....................... 355
ControlPlaneProtection ...................... 356
WeightedRandomEarlyDetectionConfiguration ........... 358
WREDTransmitQueueConfiguration................ 359
AccessControlConfiguration ..................... 360
AccessControlListConfiguration.................. 361
ACLMirroringConfiguration.................. 362
EthernetFilteringConfiguration ................ 362
IPv4FilteringConfiguration .................. 364
TCP/UDPFilteringConfiguration ................ 365
PacketFormatFilteringConfiguration .............. 367
ACLMeteringConfiguration .................. 368
ACLReMarkConfiguration.................. 369
ACLIPv6Configuration ...................... 371
IPv6FilteringConfiguration .................. 372
IPv6TCP/UDPFilteringConfiguration.............. 373
IPv6ReMarkConfiguration .................. 375
IPv6MeteringConfiguration .................. 377
ACLLogConfiguration...................... 378
ACLGroupConfiguration..................... 379
ManagementACLConfiguration .................. 380
MACLIPv4FilteringConfiguration ............... 380
MACLTCP/UDPFilteringConfiguration............. 382
VMAPConfiguration....................... 384
PortMirroring ............................ 390
PortMirroringConfiguration ................... 390
Layer2 Configuration......................... 391
802.1XConfiguration ....................... 391
802.1XGlobalConfiguration .................. 392
802.1XGuestVLANConfiguration............... 394
802.1XPortConfiguration ................... 395
SpanningTreeConfiguration .................... 397
MSTPConfiguration...................... 400
RSTP/PVRSTConfiguration .................. 403
ForwardingDatabaseConfiguration................. 407
StaticMulticastMACConfiguration............... 408
StaticFDBConfiguration .................... 409
ECPConfiguration ........................ 411
LLDPConfiguration ....................... 412
LLDPPortConfiguration.................... 413
LLDPOptionalTLVconfiguration ................414
TrunkConfiguration .......................416
TrunkHashConfiguration .....................417
TrunkHashSettings......................418
StaticInPortHashSettings...................419
VirtualLinkAggregationGroupConfiguration............420
vLAGHealthCheckConfiguration ...............422
vLAGISLConfiguration ....................423
LinkAggregationControlProtocolConfiguration...........424
LACPPortConfiguration....................425
Layer2FailoverConfiguration...................427
FailoverTriggerConfiguration.................427
FailoverManualMonitorPortConfiguration ...........428
FailoverManualMonitorControlConfiguration ..........429
HotLinksConfiguration......................430
HotLinksTriggerConfiguration ................431
HotLinksMasterConfiguration .................432
HotLinksBackupConfiguration ................433
VLANConfiguration.......................434
ProtocolBasedVLANConfiguration...............435
PrivateVLANConfiguration..................437
FloodingVLANConfigurationMenu ..............438
Layer3Configuration .........................439
IPInterfaceConfiguration .....................441
IPv6NeighborDiscoveryConfiguration...............443
DefaultGatewayConfiguration ...................446
IPv4StaticRouteConfiguration ...................447
IPMulticastRouteConfiguration..................449
ARPConfiguration ........................450
ARPStaticConfiguration ....................450
DynamicARPInspectionConfiguration .............452
IPForwardingConfiguration....................453
NetworkFilterConfiguration ....................454
RoutingMapConfiguration ....................455
IPAccessListConfiguration..................458
PolicyBasedRoutingConfiguration ...............459
AutonomousSystemFilterPathConfiguration..........461
RoutingInformationProtocolConfiguration .............462
RIPInterfaceConfiguration ...................463
RIPRouteRedistributionConfiguration.............465
OpenShortestPathFirstConfiguration ...............466
AreaIndexConfiguration ...................467
OSPFSummaryRangeConfiguration..............469
OSPFInterfaceConfiguration..................470
OSPFVirtualLinkConfiguration................472
OSPFHostEntryConfiguration .................474
OSPFRouteRedistributionConfiguration ............475
OSPFMD5KeyConfiguration .................475
OpenShortestPathFirstVersion3Configuration ...........476
OSPFv3AreaIndexConfiguration ................478
OSPFv3SummaryRangeConfiguration.............481
Contents
OSPFv3ASExternalRangeConfiguration ............ 482

OSPFv3InterfaceConfiguration ................. 483
OSPFv3overIPSecConfiguration ................ 486
OSPFv3VirtualLinkConfiguration............... 488
OSPFv3overIPSecforVirtualLinkConfiguration ......... 489
OSPFv3HostEntryConfiguration ................ 490
OSPFv3RedistributeEntryConfiguration............ 491
OSPFv3RedistributeConfiguration............... 492
BorderGatewayProtocolConfiguration ............... 493
BGPPeerConfiguration.................... 495
BGPAggregationConfiguration ................ 498
BGPNeighborRedistributionConfiguration ........... 499
IGMPConfiguration ....................... 503
IGMPSnoopingConfiguration ................. 504
IGMPv3Configuration..................... 505
IGMPRelayConfiguration ................... 506
IGMPRelayMulticastRouterConfiguration ........... 507
IGMPStaticMulticastRouterConfiguration........... 508
IGMPFilteringConfiguration .................. 509
IGMPAdvancedConfiguration................. 511
IGMPQuerierConfiguration .................. 512
IKEv2Configuration....................... 515
IKEv2PreshareKeyConfiguration ............... 515
IKEv2ProposalConfiguration ................. 516
IKEv2IdentificationConfiguration............... 517
IPsecConfiguration........................ 518
IPsecTransformSetConfiguration ............... 518
IPsecTrafficSelectorConfiguration............... 519
IPsecDynamicPolicyConfiguration ............... 520
IPsecManualPolicyConfiguration............... 521
DomainNameSystemConfiguration ................ 523
BootstrapProtocolRelayConfiguration ............... 525
BOOTPRelayBroadcastDomainConfiguration .......... 525
Option82Configuration .................... 526
VRRPConfiguration ....................... 527
VirtualRouterConfiguration .................. 528
VirtualRouterPriorityTrackingConfiguration.......... 531
VirtualRouterGroupConfiguration ............... 532
VRRPInterfaceConfiguration ................. 535
VRRPTrackingConfiguration ................. 536
ProtocolIndependentMulticastConfiguration............ 537
PIMComponentConfiguration ................. 538
RPCandidateConfiguration .................. 539
RPStaticConfiguration.................... 539
PIMInterfaceConfiguration.................. 540
IPv6DefaultGatewayConfiguration................ 543
IPv6StaticRouteConfiguration................... 544
IPv6NeighborDiscoveryCacheConfiguration ............ 544
IPv6PathMTUConfiguration ................... 545
IPv6NeighborDiscoveryPrefixConfiguration ............ 545
IPv6PrefixPolicyTableConfiguration................ 547
10
IPLoopbackInterfaceConfiguration.................548
DHCPSnooping.........................549
RemoteMonitoringConfiguration...................550
RMONHistoryConfiguration ...................550
RMONEventConfiguration ....................551
RMONAlarmConfiguration ....................552
VMReadyConfiguration........................554
VMPolicyBandwidthManagement.................555
VMGroupConfiguration .....................556
VMCheckConfiguration......................559
VMProfileConfiguration .....................560
VMWareConfiguration ......................562
MiscellaneousVMreadyConfiguration ...............563
EdgeVirtualBridgeConfiguration ...................564
EdgeVirtualBridgeVSITypeDatabaseConfiguration.........565
EdgeVirtualBridgeVSITypeProfileConfiguration ..........567
OpenFlowConfiguration .......................568
StaticFlowsConfiguration .....................577
MicroburstDetection .........................581
ServiceLocationProtocolConfiguration.................582
ConfigurationDump .........................584
SavingtheActiveSwitchConfiguration .................585
RestoringtheActiveSwitchConfiguration ................586
USBCopy ..............................587
CopytoUSB...........................587
CopyfromUSB ..........................587
Contents
11
Chapter 5. Operations Commands. . . . . . . . . . . . . . . . . 589

OperationsLevelPortCommands ................... 590
OperationsLevelVRRPCommands .................. 591
VMwareOperations......................... 592
VMwareDistributedVirtualSwitchOperations ............. 594
VMwareDistributedPortGroupOperations ............. 595
EdgeVirtualBridgeOperations .................... 596
Chapter 6. Boot Options . . . . . . . . . . . . . . . . . . . . . 597
StackingBootOptions ....................... 598
ScheduledRebootoftheSwitch .................... 601
NetbootConfiguration........................ 602
MachineTypeModelConfiguration ................. 603
USBBootConfiguration ........................ 604
UpdatingtheSwitchSoftwareImage.................. 605
LoadingNewSoftwaretoYourSwitch ............... 606
SelectingaSoftwareImagetoRun ................. 607
UploadingaSoftwareImagefromYourSwitch............ 607
SelectingaConfigurationBlock .................... 608
SettinganEntitlementSerialNumber.................. 609
RebootingtheSwitch ......................... 610
ChangingtheSwitchProfile ...................... 611
UsingtheBootManagementMenu ................... 612
BootRecoveryMode....................... 613
RecoveringfromaFailedImageUpgradeusingXModemDownload .. 614
PhysicalPresence......................... 616
Chapter 7. Maintenance Commands . . . . . . . . . . . . . . . . 617
ForwardingDatabaseMaintenance................... 619
DebuggingCommands........................ 620
IPsecDebugging ........................... 622
vLAGDebugging .......................... 623
LLDPCacheManipulation....................... 624
ARPCacheMaintenance ....................... 625
IPRouteManipulation........................ 626
IGMPSnoopingMaintenance..................... 627
IGMPMulticastRoutersMaintenance .................. 628
IPv6NeighborCacheManipulation ................... 629
IPv6RouteMaintenance........................ 630
StackingMaintenance ......................... 631
UuencodeFlashDump ........................ 632
TFTP,SFTPorFTPSystemDumpCopy................. 633
ClearingDumpInformation ...................... 634
UnscheduledSystemDumps...................... 635
12
Appendix A. Lenovo N/OS System Log Messages . . . . . . . . . . 637

LOG_ALERT............................638
LOG_CRIT.............................642
LOG_ERR ..............................643
LOG_INFO .............................646
LOG_NOTICE ............................650
LOG_WARNING ..........................658
Appendix B. Getting help and technical assistance . . . . . . . . . . 661
Appendix C. Notices . . . . . . . . . . . . . . . . . . . . . . . 663
Trademarks .............................665
ImportantNotes ...........................666
RecyclingInformation .........................667
ParticulateContamination .......................668
TelecommunicationRegulatoryStatement ................669
ElectronicEmissionNotices ......................670
FederalCommunicationsCommission(FCC)Statement ........670
IndustryCanadaClassAEmissionComplianceStatement.......670
AvisdeConformitlaRglementationdIndustrieCanada ......670
AustraliaandNewZealandClassAStatement ............670
EuropeanUnionEMCDirectiveConformanceStatement ........670
GermanyClassAStatement....................671
JapanVCCIClassAStatement ...................672
JapanElectronicsandInformationTechnologyIndustriesAssociation
(JEITA) Statement .........................673
KoreaCommunicationsCommission(KCC)Statement .........673
RussiaElectromagneticInterference(EMI)ClassAstatement ........674
PeoplesRepublicofChinaClassAelectronicemissionstatement ......675
TaiwanClassAcompliancestatement ..................676
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 677
Contents
13
14
Preface
TheLenovoRackSwitchG8052ISCLIIndustryStandardCLICommandReferencefor
NetworkingOS8.3describeshowtoconfigureandusetheLenovoN/OS8.3
softwarewithyourRackSwitchG8052(referredtoasG8052throughoutthis
document).Thisguidelistseachcommand,togetherwiththecompletesyntaxand
afunctionaldescription,fromtheISCommandLineInterface(ISCLI).
Fordocumentationoninstallingtheswitchesphysically,seetheInstallationGuide
foryourRackSwitchG8052.Fordetailsaboutconfigurationandoperationofyour
G8052,seetheLenovoN/OS8.3ApplicationGuide.
15
Who Should Use This Book

Thisbookisintendedfornetworkinstallersandsystemadministratorsengagedin
configuringandmaintaininganetwork.Theadministratorshouldbefamiliarwith
Ethernetconcepts,IPaddressing,SpanningTreeProtocolandSNMPconfiguration
parameters.
16
How This Book Is Organized

Chapter 1,ISCLIBasics,describeshowtoconnecttotheswitchandaccessthe
informationandconfigurationcommands.Thischapterprovidesanoverviewof
thecommandsyntax,includingcommandmodes,globalcommandsand
shortcuts.
Chapter 2,InformationCommands,showshowtoviewswitchconfiguration
parameters.
Chapter 3,StatisticsCommands,showshowtoviewswitchperformancestatistics.
Chapter 4,ConfigurationCommands,showshowtoconfigureswitchsystem
parameters,ports,VLANs,SpanningTreeProtocol,SNMP,PortMirroring,IP
Routing,PortTrunkingandmore.
Chapter 5,OperationsCommands,showshowtousecommandswhichaffect
switchperformanceimmediately,butdonotalterpermanentswitch
configurations(suchastemporarilydisablingports).Thecommandsdescribehow
toactivateordeactivateoptionalsoftwarefeatures.
Chapter 6,BootOptions,describestheuseoftheprimaryandalternateswitch
images,howtoloadanewsoftwareimageandhowtoresetthesoftwaretofactory
defaults.
Chapter 7,MaintenanceCommands,showshowtogenerateandaccessadumpof
criticalswitchstateinformation,howtoclearitandhowtoclearpartorallofthe
forwardingdatabase.
AppendixA,LenovoN/OSSystemLogMessages,showsalistingofsyslog
messages.
AppendixB,Gettinghelpandtechnicalassistance,liststheresourcesavailable
fromLenovotoassistyou.
AppendixC,Notices,displaysLenovolegalinformation.
Indexincludespointerstothedescriptionofthekeywordsusedthroughoutthe
book.
Preface
17
Typographic Conventions
Thefollowingtabledescribesthetypographicstylesusedinthisbook.
Table 1. TypographicConventions
Typeface or Symbol
Meaning
plainfixedwidth Thistypeisusedfornamesofcommands,files,and
text
directoriesusedwithinthetext.Forexample:
Viewthereadme.txtfile.
Italsodepictsonscreencomputeroutputandprompts.
boldfixedwidth
text
Thisboldtypeappearsincommandexamples.Itshows
textthatmustbetypedinexactlyasshown.For
example:
showsysinfo
boldbodytext
Thisboldtypeindicatesobjectssuchaswindownames,
dialogboxnames,andicons,aswellasuserinterface
objectssuchasbuttons,andtabs.
italicizedbodytext
Thisitalicizedtypeindicatesbooktitles,specialterms,
orwordstobeemphasized.
anglebrackets<>
Indicateavariabletoenterbasedonthedescription
insidethebrackets.Donottypethebracketswhen
enteringthecommand.
Example:Ifthecommandsyntaxis
ping<IPaddress>
youenter
ping192.32.10.12
braces{}
Indicaterequiredelementsinsyntaxdescriptions
wherethereismorethanoneoption.Youmustchoose
onlyoneoftheoptions.Donottypethebraceswhen
enteringthecommand.
showportchannel{<152>|hash|information}
youenter:
show portchannel <152>
or
showportchannelhash
or
showportchannelinformation
18
Table 1. TypographicConventions(continued)
Typeface or Symbol
Meaning
brackets[]
Indicateoptionalelementsinsyntaxdescriptions.Do
nottypethebracketswhenenteringthecommand.
showinterfaceip [<1128>]
youenter
showinterfaceip
or
showinterfaceip <1128>
verticalline|
Separateschoicesforcommandkeywordsand
arguments.Enteronlyoneofthechoices.Donottype
theverticallinewhenenteringthecommand.
showportchannel{<152>|hash|information}
youmustenter:
show portchannel <152>
or
showportchannelhash
or
Preface
19
20
Chapter 1. ISCLI Basics

YourRackSwitchG8052isreadytoperformbasicswitchingfunctionsrightoutof
thebox.Someofthemoreadvancedfeatures,however,requiresome
administrativeconfigurationbeforetheycanbeusedeffectively.
ThisguidedescribestheindividualISCLIcommandsavailablefortheG8052.
TheISCLIprovidesadirectmethodforcollectingswitchinformationand
performingswitchconfiguration.Usingabasicterminal,theISCLIallowsyouto
viewinformationandstatisticsabouttheswitch,andtoperformanynecessary
configuration.
ThischapterexplainshowtoaccesstheISCommandLineInterface(ISCLI)forthe
switch.
21
ISCLI Command Modes

TheISCLIhasthreemajorcommandmodeslistedinorderofincreasingprivileges,
asfollows:
UserEXECmode
Thisistheinitialmodeofaccess.Bydefault,passwordcheckingisdisabledfor
thismode,onconsole.
PrivilegedEXECmode
ThismodeisaccessedfromUserEXECmode.Thismodecanbeaccessedusing
thefollowingcommand:enable
GlobalConfigurationmode
Thismodeallowsyoutomakechangestotherunningconfiguration.Ifyousave
theconfiguration,thesettingssurviveareloadoftheG8052.Severalsubmodes
canbeaccessedfromtheGlobalConfigurationmode.Formoredetails,see
Table 2.Thismodecanbeaccessedusingthefollowingcommand:configure
terminal
Eachmodeprovidesaspecificsetofcommands.Thecommandsetofa
higherprivilegemodeisasupersetofalowerprivilegemodealllowerprivilege
modecommandsareaccessiblewhenusingahigherprivilegemode.
ThefollowingtableliststheISCLIcommandmodes.
Table 2. ISCLICommandModes
Command Mode/Prompt
Command used to enter or exit
UserEXEC
Defaultmode,enteredautomaticallyonconsole
RS G8052>
Exit:exitorlogout
PrivilegedEXEC
EnterPrivilegedEXECmode,fromUserEXECmode:enable
RS G8052#
ExittoUserEXECmode:disable
QuitISCLI:exitorlogout
GlobalConfiguration
RS G8052(config)#
EnterGlobalConfigurationmode,fromPrivilegedEXECmode:
configureterminal
ExittoPrivilegedEXEC:endorexit
InterfaceIP
RS G8052(configipif)#
EnterInterfaceIPConfigurationmode,fromGlobal
Configurationmode:interfaceip<IPinterfacenumber>
ExittoGlobalConfigurationmode:exit
ExittoPrivilegedEXECmode:end
Interfaceloopback
RS G8052(configiploopback)#
EnterInterfaceLoopbackConfigurationmode,fromGlobal
Configurationmode:interfaceloopback<15>
22
Table 2. ISCLICommandModes(continued)
Command Mode/Prompt
Interfaceport
EnterPortConfigurationmode,fromGlobalConfiguration
mode:
interfaceport<portaliasornumber>
RS G8052(configif)#
ExittoPrivilegedEXECmode:exit
ExittoGlobalConfigurationmode:end
InterfacePortChannel
RS G8052(configPortChannel)#
EnterPortChannel(trunkgroup)Configurationmode,from
GlobalConfigurationmode:
interfaceportchannel{<trunknumber>|lacp<key>}
ExittoPrivilegedEXECmode:exit
ExittoGlobalConfigurationmode:end
VLAN
RS G8052(configvlan)#
EnterVLANConfigurationmode,fromGlobalConfiguration
mode:
vlan<VLANID(14094)>
RouterOSPF
RS G8052(configrouterospf)#
EnterOSPFConfigurationmode,fromGlobalConfiguration
mode:
routerospf
RouterOSPFv3
EnterOSPFv3Configurationmode,fromGlobalConfiguration
mode:
RS G8052(configrouterospf3)# ipv6routerospf
RouterBGP
RS G8052(configrouterbgp)#
EnterBGPConfigurationmode,fromGlobalConfiguration
mode:
routerbgp
RouterRIP
RS G8052(configrouterrip)#
EnterRIPConfigurationmode,fromGlobalConfiguration
mode:
routerrip
Chapter 1: ISCLI Basics
23
Command Mode/Prompt
RouteMap
EnterRouteMapConfigurationmode,fromGlobal
Configurationmode:
routemap<1255>
RS G8052(configroutemap)#
RouterVRRP
RS G8052(configvrrp)#
EnterVRRPConfigurationmode,fromGlobalConfiguration
mode:
routervrrp
PIMComponent
RS G8052(configippimcomp)#
EnterProtocolIndependentMulticast(PIM)Component
Configurationmode,fromGlobalConfigurationmode:
ippimcomponent<12>
IKEv2Proposal
RS G8052(configikev2prop)#
EnterIKEv2ProposalConfigurationmode,fromGlobal
Configurationmode:
ikev2proposal
MLDConfiguration
RS G8052(configroutermld)#
EnterMulticastListenerDiscoveryProtocolConfiguration
mode,fromGlobalConfigurationmode:
ipv6mld
MSTConfiguration
RS G8052(configmst)#
EnterMultipleSpanningTreeProtocolConfigurationmode,
fromGlobalConfigurationmode:
spanningtreemstconfiguration
OpenFlowInstance
RS G8052(configopenflow
instance)#
EnterOpenFlowInstanceConfigurationmode,fromGlobal
Configurationmode:
openflowinstance<12>
24
Command Mode/Prompt
VSIDatabase
EnterVirtualStationInterfaceDatabaseConfigurationmode,
fromGlobalConfigurationmode:
virtevbvsidb<VSIDBnumber>
RS G8052(confvsidb)#
EVBProfile
RS G8052(confevbprof)#
EnterEdgeVirtualBridgingVSITypeProfileConfiguration
mode,fromGlobalConfigurationmode:
virtevbprofile<116>
25
Global Commands
SomebasiccommandsarerecognizedthroughouttheISCLIcommandmodes.
Thesecommandsareusefulforobtainingonlinehelp,navigatingthroughthe
interface,andforsavingconfigurationchanges.
Forhelponaspecificcommand,typethecommand,followedbyhelp.
Table 3. DescriptionofGlobalCommands
Command
Action
Providesmoreinformationaboutaspecific
commandorlistscommandsavailableatthecurrent
level.
list
Liststhecommandsavailableatthecurrentlevel.
exit
Gouponelevelinthecommandmodestructure.If
alreadyatthetoplevel,exitfromthecommandline
interfaceandlogout.
copyrunningconfig Writeconfigurationchangestononvolatileflash
startupconfig
memory.
logout
Exitfromthecommandlineinterfaceandlogout.
ping
Usethiscommandtoverifystationtostation
connectivityacrossthenetwork.Theformatisas
follows:
ping<hostname>|<IPaddress>[n<tries
(04294967295)>][w<msecdelay(04294967295)>]
[l<length(0/3265500/2080)>][s<IPsource>]
[i<ttl(1255)>][v<tos(0255)>][f][t]
Where:
n:Setsthenumberofattempts(optional).
w:Setsthenumberofmillisecondsbetween
attempts(optional).
l:Setsthepingrequestpayloadsize
(optional).
s:SetstheIPsourceaddressfortheIPpacket
(optional).
i:SetstheTimetoliveintheIPheader.
v:SetstheTypeofServicebitsintheIPheader.
f:SetsthedontfragmentbitintheIPheader
(onlyforIPv4addresses).
t:Pingscontinuously(sameasn0).
26
Table 3. DescriptionofGlobalCommands
Command
Action
traceroute
Usethiscommandtoidentifytherouteusedfor
stationtostationconnectivityacrossthenetwork.
Theformatisasfollows:
traceroute<hostname>|<IPaddress>
[<maxhops(132)>[<msecdelay(14294967295)>]]
Wherehostname/IPaddressisthehostnameorIP
addressofthetargetstation,maxhops(optional)is
themaximumdistancetotrace(132devices),and
msecdelay(optional)isthenumberofmillisecondsto
waitfortheresponse.
Aswithping,theDNSparametersmustbe
configuredifspecifyinghostnames.
telnet
ThiscommandisusedtoformaTelnetsession
betweentheswitchandanothernetworkdevice.The
formatisasfollows:
telnet{<hostname>|<IPaddress>}[<port>]
WhereIPaddressorhostnamespecifiesthetarget
station.UseofahostnamerequiresDNSparameters
tobeconfiguredontheswitch.
PortisthelogicalTelnetportorservicenumber.
showhistory
Thiscommanddisplaysthelasttenissued
commands.
showwho
Displaysalistofuserswhoarecurrentlyloggedin.
showline
Displaysalistofuserswhoarecurrentlyloggedin,
intableformat.
27
Command Line Interface Shortcuts

Thefollowingshortcutsallowyoutoentercommandsquicklyandeasily.
CLI List and Range Inputs

ForVLANandportcommandsthatallowanindividualitemtobeselectedfrom
withinanumericrange,listsandrangesofitemscannowbespecified.For
example,thevlancommandpermitsthefollowingoptions:
RS
RS
RS
RS
G8052(config)#vlan1,3,4094
(accessVLANs1,3,and4094)
G8052(config)#vlan120
(accessVLANs1through20)
G8052(config)#vlan15,9099,40904094(accessmultipleranges)
G8052(config)#vlan15,19,20,40904094(accessamixoflistsandranges)
Thenumbersinarangemustbeseparatedbyadash:<startofrange><endofrange>
Multiplerangesorlistitemsarepermittedusingacomma:<rangeoritem1>,
<rangeoritem2>
Donotusespaceswithinlistandrangespecifications.
Rangescanalsobeusedtoapplythesamecommandoptiontomultipleitems.For
example,toaccessmultipleportswithonecommand:
RS G8052(config)#interfaceport14
(Accessports1though4)
Command Abbreviation
Mostcommandscanbeabbreviatedbyenteringthefirstcharacterswhich
distinguishthecommandfromtheothersinthesamemode.Forexample,consider
thefollowingfullcommandandavalidabbreviation:
RS G8052(config)#showmacaddresstableinterfaceport12
or:
RS G8052(config)#shmaip12
Tab Completion
Byenteringthefirstletterofacommandatanypromptandpressing<Tab>,the
ISCLIdisplaysallavailablecommandsoroptionsthatbeginwiththatletter.
Enteringadditionallettersfurtherrefinesthelistofcommandsoroptions
displayed.Ifonlyonecommandfitstheinputtextwhen<Tab>ispressed,that
commandissuppliedonthecommandline,waitingtobeentered.
Ifmultiplecommandssharethetypedcharacters,whenyoupress<Tab>,the
ISCLIcompletesthecommonpartofthesharedsyntax.
28
User Access Levels

Toenablebetterswitchmanagementanduseraccountability,threelevelsorclasses
ofuseraccesshavebeenimplementedontheG8052.LevelsofaccesstoCLI,Web
managementfunctions,andscreensincreaseasneededtoperformvariousswitch
managementtasks.Conceptually,accessclassesaredefinedasfollows:
user
Interactionwiththeswitchiscompletelypassivenothingcanbechangedon
theG8052.Usersmaydisplayinformationthathasnosecurityorprivacy
implications,suchasswitchstatisticsandcurrentoperationalstateinformation.
oper
OperatorscanmaketemporarychangesontheG8052.Thesechangesarelost
whentheswitchisrebooted.Operatorshaveaccesstotheswitchmanagement
featuresusedfordailyswitchoperations.Becauseanychangesanoperator
makesareundonebyarebootoftheswitch,operatorscannotseverelyimpact
switchoperation.
admin
Administratorsaretheonlyonesthatmaymakepermanentchangestothe
switchconfigurationchangesthatarepersistentacrossarebootoftheswitch.
Administratorscanaccessswitchfunctionstoconfigureandtroubleshoot
problemsontheG8052.Becauseadministratorscanalsomaketemporary
(operatorlevel)changesaswell,theymustbeawareoftheinteractionsbetween
temporaryandpermanentchanges.
Accesstoswitchfunctionsiscontrolledthroughtheuseofuniquesurnamesand
passwords.OnceyouareconnectedtotheswitchvialocalTelnet,remoteTelnet,or
SSH,youarepromptedtoenterapassword.Thedefaultusernames/passwordfor
eachaccesslevelarelistedinthefollowingtable.
Note: Itisrecommendedthatyouchangedefaultswitchpasswordsafterinitial
configurationandasregularlyasrequiredunderyournetworksecuritypolicies.
Table 4. UserAccessLevels
User Account
Description and Tasks Performed
Password
User
TheUserhasnodirectresponsibilityforswitch
management.Heorshecanviewallswitchstatus
informationandstatistics,butcannotmakeany
configurationchangestotheswitch.
Operator
TheOperatorcanmaketemporarychangesthat
arelostwhentheswitchisrebooted.Operators
haveaccesstotheswitchmanagementfeatures
usedfordailyswitchoperations.
ThesuperuserAdministratorhascompleteaccess admin
Administrator toallcommandmodes,information,and
configurationcommandsontheRackSwitch
G8052,includingtheabilitytochangeboththe
userandadministratorpasswords.
Note: Withtheexceptionoftheadminuser,accesstoeachuserlevelcanbe
disabledbysettingthepasswordtoanemptyvalue.
29
Idle Timeout
Bydefault,theswitchwilldisconnectyourTelnetsessionaftertenminutesof
inactivity.Thisfunctioniscontrolledbythefollowingcommand,whichcanbeset
from1to60minutes,ordisabledwhensetto0:
systemidle<060>
Commandmode:GlobalConfiguration
30
Chapter 2. Information Commands

Youcanviewconfigurationinformationfortheswitchinboththeuserand
administratorcommandmodes.Thischapterdiscusseshowtousethecommand
lineinterfacetodisplayswitchinformation.
Table 5. InformationCommands
Command Syntax and Usage
showinterfacestatus<portaliasornumber>
Displaysconfigurationinformationabouttheselectedport(s),including:
Portaliasandnumber
Portspeed
Duplexmode(half,fullorauto)
Flowcontrolfortransmitandreceive(no,yesorboth)
Linkstatus(up,downordisabled)
Portdescription
Fordetails,seepage 160.
Commandmode:All
showinterfacetrunk<portaliasornumber>
Displaysportstatusinformation,including:
Portaliasandnumber
WhethertheportusesVLANTaggingornot
PortVLANID(PVID)
Portdescription
VLANmembership
FDBLearningstatus
Floodingstatus
Commandmode:All
showinterfacetransceiver
Displaysthestatusoftheporttransceivermoduleoneachport.Fordetails,see
page 162.
Commandmode:All
showinformationdump
Dumpsallswitchinformationavailable(10Kormore,dependingonyour
configuration).
Ifyouwanttocapturedumpdatatoafile,setyourcommunicationsoftware
onyourworkstationtocapturesessiondatapriortoissuingthedump
commands.
Commandmode:All
31
System Information
Theinformationprovidedbyeachcommandoptionisbrieflydescribedinthe
followingtable,withpointerstowheredetailedinformationcanbefound.
Table 6. SystemInformationOptions
showsysinfo
Displayssysteminformation,including:
Systemdateandtime
Switchmodelnameandnumber
Switchnameandlocation
Timeoflastboot
MACaddressoftheswitchmanagementprocessor
IPaddressofmanagementinterface
Hardwareversionandpartnumber
Softwareimagefileandversionnumber
Configurationname
Loginbanner,ifoneisconfigured
Internaltemperatures
Fanstatus
Powersupplystatus
Commandmode:All
32
Table 6. SystemInformationOptions(continued)
showlogging[messages][severity<07>][reverse]
[|{include|exclude|section|begin|head<12000>|
|last<12000>}]
Displaysthecurrentsyslogconfiguration,followedbythemostrecent2000
syslogmessages.
messagesdisplaysthemostrecent2000syslogmessagesonly
severitydisplayssyslogmessagesofthespecifiedseveritylevel
reversedisplayssyslogmessagesstartingwiththemostrecentmessage
|displayssyslogmessagesthatmatchoneofthefollowingfilters:
includedisplayssyslogmessagesthatmatchthespecifiedexpression
excludedisplayssyslogmessagesthatdontmatchthespecified
expression
sectiondisplayssyslogmessagesthatmatchthespecifiedsection
begindisplayssyslogmessagesbeginningfromthefirstmessagethat
matchesthespecifiedexpression
headdisplaystheoldestsyslogmessagesforthespecifiedvalue
lastdisplaysthemostrecentsyslogmessagesforthespecifiedvalue
Commandmode:All
showaccessuser
Displaysconfiguredusernamesandtheirstatus.
Commandmode:PrivilegedEXEC
Chapter 2: Information Commands
33
CLI Display Information

Thesecommandsallowyoutodisplayinformationaboutthenumberoflinesper
screendisplayedintheCLI.
Table 7. CLIDisplayInformationOptions
showterminallength
DisplaysthenumberoflinesperscreendisplayedintheCLIforthecurrent
session.Avalueof0meanspagingisdisabled.
Commandmode:All
showlineconsolelength
DisplaysthenumberoflinesperscreendisplayedintheCLIbydefaultfor
consolesessions.Avalueof0meanspagingisdisabled.
Commandmode:All
showlinevtylength
DisplaysthenumberoflinesperscreendisplayedintheCLIbydefaultfor
TelnetandSSHsessions.Avalueof0meanspagingisdisabled.
Commandmode:All
34
Error Disable and Recovery Information

ThesecommandsallowyoutodisplayinformationabouttheErrorDisableand
Recoveryfeatureforinterfaceports.
Table 8. ErrorDisableInformationOptions
showerrdisableinformation
DisplaysallErrorDisableandRecoveryinformation.
Commandmode:All
showerrdisablelinkflap[information]
Displaysportsthathavebeendisabledduetoexcessivelinkflaps.
Commandmode:All
showerrdisablerecovery
DisplaysalistportswiththeirErrorRecoverystatus.
Commandmode:All
showerrdisabletimers
Displaysalistofactiverecoverytimers,ifapplicable.
Commandmode:All
35
SNMPv3 System Information

SNMPversion3(SNMPv3)isanextensibleSNMPFrameworkthatsupplements
theSNMPv2frameworkbysupportingthefollowing:
anewSNMPmessageformat
securityformessages
accesscontrol
remoteconfigurationofSNMPparameters
FormoredetailsontheSNMPv3architecturepleaserefertoRFC2271toRFC2276.
Table 9. SNMPv3InformationOptions
showsnmpserverv3
DisplaysalltheSNMPv3information.Toviewasample,seepage 43.
Commandmode:All
showsnmpserverv3access
DisplaysViewbasedAccessControlinformation.Toviewasample,see
page 39.
Commandmode:All
showsnmpserverv3community
Displaysinformationaboutthecommunitytableinformation.Toviewa
sample,seepage 40.
Commandmode:All
showsnmpserverv3group
Displaysinformationaboutthegroup,includingthesecuritymodel,user
nameandgroupname.Toviewasample,seepage 40.
Commandmode:All
showsnmpserverv3notify
DisplaystheNotifytableinformation.Toviewasample,seepage 42.
Commandmode:All
showsnmpserverv3targetaddress
DisplaystheTargetAddresstableinformation.Toviewasample,seepage 41.
Commandmode:All
showsnmpserverv3targetparameters
DisplaystheTargetparameterstableinformation.Toviewasample,seepage 42.
Commandmode:All
36
Table 9. SNMPv3InformationOptions(continued)
showsnmpserverv3user
DisplaysUserSecurityModel(USM)tableinformation.Toviewthetable,see
page 37.
Commandmode:All
showsnmpserverv3view
Displaysinformationaboutview,subtrees,maskandtypeofview.Toviewa
sample,seepage 38.
Commandmode:All
SNMPv3 USM User Table Information

TheUserbasedSecurityModel(USM)inSNMPv3providessecurityservicessuch
asauthenticationandprivacyofmessages.Thissecuritymodelmakesuseofa
definedsetofuseridentitiesdisplayedintheUSMusertable.Thefollowing
commanddisplaysSNMPv3userinformation:
showsnmpserverv3user
Commandmode:All
TheUSMusertablecontainsthefollowinginformation:
theusername
asecuritynameintheformofastringwhoseformatisindependentofthe
SecuityModel
anauthenticationprotocol,whichisanindicationthatthemessagessenton
behalfoftheusercanbeauthenticated
theprivacyprotocol
EngineID=80:00:4F:4D:03:08:17:F4:8C:E8:00
usmUserTable:
UserNameProtocol
adminmd5HMAC_MD5,DESPRIVACY
adminshaHMAC_SHA,DESPRIVACY
v1v2onlyNOAUTH,NOPRIVACY
adminshaaesHMAC_SHA,AESPRIVACY
Table 10. USMUserTableInformationParameters

Field
Description
UserName Astringrepresentingtheusernameyoucanusetoaccesstheswitch.
Protocol
Whethermessagessentfromthisuserareprotectedfromdisclosure
usingaprivacyprotocol.LenovoN/OSsupportsDESalgorithmfor
privacyandtwoauthenticationalgorithms:MD5andHMACSHA.
37
SNMPv3 View Table Information

Theusercancontrolandrestricttheaccessallowedtoagrouptoonlyasubsetof
themanagementinformationinthemanagementdomainthatthegroupcanaccess
withineachcontextbyspecifyingthegroupsrightsintermsofaparticularMIB
viewforsecurityreasons.
ThefollowingcommanddisplaystheSNMPv3ViewTable:
showsnmpserverv3view
Commandmode:All
ViewNameSubtreeMaskType
iso1.3included
v1v2only1.3included
v1v2only1.3.6.1.6.3.15excluded
Table 11. SNMPv3ViewTableInformationParameters
38
Field
Description
ViewName
Displaysthenameoftheview.
Subtree
DisplaystheMIBsubtreeasanOIDstring.Aviewsubtreeisthe
setofallMIBobjectinstanceswhichhaveacommonObject
Identifierprefixtotheirnames.
Mask
Displaysthebitmask.
Type
Displayswhetherafamilyofviewsubtreesisincludedor
excludedfromtheMIBview.
SNMPv3 Access Table Information

Theaccesscontrolsubsystemprovidesauthorizationservices.
ThevacmAccessTablemapsagroupname,securityinformation,acontext,anda
messagetype,whichcouldbethereadorwritetypeofoperationornotification
intoaMIBview.
TheViewbasedAccessControlModeldefinesasetofservicesthatanapplication
canuseforcheckingaccessrightsofagroup.Thisgroupsaccessrightsare
determinedbyareadview,awriteviewandanotifyview.Thereadview
representsthesetofobjectinstancesauthorizedforthegroupwhilereadingthe
objects.Thewriteviewrepresentsthesetofobjectinstancesauthorizedforthe
groupwhenwritingobjects.Thenotifyviewrepresentsthesetofobjectinstances
authorizedforthegroupwhensendinganotification.
ThefollowingcommanddisplaysSNMPv3accessinformation:
showsnmpserverv3access
Commandmode:All
GroupNameModelLevelReadVWriteVNotifyV
v1v2grpsnmpv1noAuthNoPrivisoisov1v2only
admingrpusmauthPrivisoisoiso
Table 12. SNMPv3AccessTableInformation
Field
Description
GroupName
Displaysthenameofgroup.
Model
Displaysthesecuritymodelused,forexample,SNMPv1,or
SNMPv2orUSM.
Level
Displaystheminimumlevelofsecurityrequiredtogainrights
ofaccess.Forexample,noAuthNoPriv,authNoPriv,or
authPriv.
ReadV
DisplaystheMIBviewtowhichthisentryauthorizestheread
access.
WriteV
DisplaystheMIBviewtowhichthisentryauthorizesthewrite
access.
NotifyV
DisplaystheNotifyviewtowhichthisentryauthorizesthe
notifyaccess.
39
SNMPv3 Group Table Information

Agroupisacombinationofsecuritymodelandsecuritynamethatdefinesthe
accessrightsassignedtoallthesecuritynamesbelongingtothatgroup.Thegroup
isidentifiedbyagroupname.
ThefollowingcommanddisplaysSNMPv3groupinformation:
showsnmpserverv3group
Commandmode:All
AllactiveSNMPv3groupsarelistedbelow:
SecModelUserNameGroupName
snmpv1v1v2onlyv1v2grp
usmadminmd5admingrp
usmadminshaadmingrp
usmadminshaaesadmingrp
Table 13. SNMPv3GroupTableInformationParameters

Field
Description
SecModel
Displaysthesecuritymodelused,whichisanyoneof:USM,
SNMPv1,SNMPv2,andSNMPv3.
UserName
Displaysthenameforthegroup.
GroupName
Displaystheaccessnameofthegroup.
SNMPv3 Community Table Information

ThefollowingcommanddisplaystheSNMPv3communitytableinformation
storedintheSNMPengine:
showsnmpserverv3community
Commandmode:All
IndexNameUserNameTag
trap1publicv1v2onlyv1v2trap
Table 14. SNMPv3CommunityTableInformationParameters

Field
Description
Index
Displaystheuniqueindexvalueofarowinthistable
Name
Displaysthecommunitystring,whichrepresentstheconfiguration.
UserName DisplaystheUserSecurityModel(USM)username.
Tag
40
Displaysthecommunitytag.Thistagspecifiesasetoftransport
endpointsfromwhichacommandresponderapplicationaccepts
managementrequestsandtowhichacommandresponder
applicationsendsanSNMPtrap.
SNMPv3 Target Address Table Information

ThefollowingcommanddisplaysSNMPv3targetaddressinformationstoredin
theSNMPengine:
showsnmpserverv3targetaddress
Commandmode:All
NameTransportAddrPortTaglistParams
trap147.81.25.66162v1v2trapv1v2param
Table 15. SNMPv3TargetAddressTableInformationParameters
Field
Description
Name
Displaysthelocallyarbitrary,butuniqueidentifierassociated
withthissnmpTargetAddrEntry.
Transport
Addr
Displaysthetransportaddresses.
Port
DisplaystheSNMPUDPportnumber.
Taglist
Thiscolumncontainsalistoftagvalueswhichareusedtoselect
targetaddressesforaparticularSNMPmessage.
Params
Thevalueofthisobjectidentifiesanentryinthe
snmpTargetParamsTable.Theidentifiedentrycontains
SNMPparameterstobeusedwhengeneratingmessagestobe
senttothistransportaddress.
41
SNMPv3 Target Parameters Table Information

ThefollowingcommanddisplaysSNMPv3targetparametersinformation:
showsnmpserverv3targetparameters
Commandmode:All
NameMPModelUserNameSecModelSecLevel
v1v2paramsnmpv2cv1v2onlysnmpv1noAuthNoPriv
Table 16. SNMPv3TargetParametersTableInformation

Field
Description
Name
Displaysthelocallyarbitrary,butuniqueidentifierassociatedwith
thissnmpTargeParamsEntry.
MPModel
DisplaystheMessageProcessingModelusedwhengenerating
SNMPmessagesusingthisentry.
UserName
DisplaysthesecurityName,whichidentifiestheentryonwhose
behalfSNMPmessageswillbegeneratedusingthisentry.
SecModel
DisplaysthesecuritymodelusedwhengeneratingSNMP
messagesusingthisentry.Thesystemmaychoosetoreturnan
inconsistentValueerrorifanattemptismadetosetthis
variabletoavalueforasecuritymodelthesystemdoesnot
support.
SecLevel
DisplaysthelevelofsecurityusedwhengeneratingSNMP
messagesusingthisentry.
SNMPv3 Notify Table Information

ThefollowingcommanddisplaystheSNMPv3NotifyTable:
showsnmpserverv3notify
Commandmode:All
NameTag
v1v2trapv1v2trap
Table 17. SNMPv3NotifyTableInformation
42
Field
Description
Name
Thelocallyarbitrary,butuniqueidentifierassociatedwiththis
snmpNotifyEntry.
Tag
Thisrepresentsasingletagvaluewhichisusedtoselectentriesin
thesnmpTargetAddrTable.Anyentryinthe
snmpTargetAddrTablethatcontainsatagvalueequaltothe
valueofthisentry,isselected.Ifthisentrycontainsavalueofzero
length,noentriesareselected.
SNMPv3 Dump Information

ThefollowingcommanddisplaysSNMPv3information:
showsnmpserverv3
Commandmode:All
EngineID=80:00:4F:4D:03:08:17:F4:8C:E8:00
usmUserTable:
UserNameProtocol
adminmd5HMAC_MD5,DESPRIVACY
adminshaHMAC_SHA,DESPRIVACY
v1v2onlyNOAUTH,NOPRIVACY
adminshaaesHMAC_SHA,AESPRIVACY
vacmAccessTable:
GroupNameModelLevelReadVWriteVNotifyV
v1v2grpsnmpv1noAuthNoPrivisoisov1v2only
admingrpusmauthPrivisoisoiso
vacmViewTreeFamilyTable:
ViewNameSubtreeMaskType
iso1included
v1v2only1included
vacmSecurityToGroupTable:
AllactiveSNMPv3groupsarelistedbelow:
SecModelUserNameGroupName
snmpv1v1v2onlyv1v2grp
usmadminmd5admingrp
usmadminshaadmingrp
usmadminshaaesadmingrp
snmpCommunityTable:
IndexNameUserNameTag
trap1publicv1v2onlyv1v2trap
snmpNotifyTable:
NameTag
v1v2trapv1v2trap
snmpTargetAddrTable:
NameTransportAddrPortTaglistParams
trap147.81.25.66162v1v2trapv1v2param
snmpTargetParamsTable:
NameMPModelUserNameSecModelSecLevel
v1v2paramsnmpv2cv1v2onlysnmpv1noAuthNoPriv
43
General System Information

Thefollowingcommanddisplayssysteminformation:
showsysinfo
Commandmode:All
SystemInformationat15:03:47TueApr7,2015
Timezone:Notimezoneconfigured
DaylightSavingsTimeStatus:Disabled
LenovoRackSwitchG8052
Switchhasbeenupfor0days,0hours,9minutesand38seconds.
Lastboot:17:16:46SunDec27,2003(resetfromconsole)
MACaddress:de:eb:00:00:00:00IP(If1)address:192.168.49.50
HardwareRevision:0
BoardRevision:*
SwitchSerialNo:CH4105001Q
HardwarePartNo:BAC0006900SparePartNo:BAC0006900
Manufacturingdate:11/04
SoftwareVersion8.3.1(FLASHimage2),activeconfiguration.
Bootkernelversion8.3.1
USBBoot:disabled
TemperatureTop:29C
TemperatureBottom:23C
TemperatureFanCtrl88:31C
TemperatureFanCtrl8a:34C
TemperatureFanCtrl8c:35C
TemperaturePhy0x01:39C
SystemWarningat60C/Shutdownat80C/SetPointis55C
PHYsWarningat100C/Shutdownat120C
Fan1Module1:NotInstalled
Fan2Module1:NotInstalled
Fan3Module2:7837rpm90pwm(9%bias:65)FrontToBack
SystemFanAirflow:FrontToBack
PowerSupply1:FrontToBack[DS4503_REV02.XM]
PowerSupply2:FrontToBack[DS4503_REV02.XM]
PowerFaults:PS1VinPS1Pwr
FanFaults:None
ServiceFaults:None
44
Note: Thedisplayoftemperaturewillcomeuponlyifthetemperatureofanyof
thesensorsexceedsthetemperaturethreshold.Therewillbeawarningfromthe
softwareifanyofthesensorsexceedsthistemperaturethreshold.Theswitchwill
shutdownifthepowersupplyoverheats.
Systeminformationincludes:
Systemdateandtime
Switchmodel
Timeoflastboot
Softwareimagefileandversionnumber,andconfigurationname.
IPaddressofthemanagementinterface
Fanstatus
Powersupplystatus
Show Specific System Information

Thefollowingtablelistscommandsusedfordisplayingspecificentriesfromthe
generalsysteminformationscreen.
Table 18. SpecificSystemInformationOptions
showenvironmentfan
Displaysinformationaboutinternaltemperaturesandfanstatus.
Commandmode:All
showenvironmentpower
Displaysinformationaboutpowersupplystatus.
Commandmode:All
showversionbrief
Displaysthesoftwareversionnumber,imagefileandconfigurationname.For
asampleoutput,seebelow.
Commandmode:All
Sampleoutputforcommandshowversionbrief:
SoftwareVersion8.3.1(FLASHimage2),activeconfiguration.
Displaysthesoftwareversionnumber,imagefileandconfigurationname.
45
Show Recent Syslog Messages

Thefollowingcommanddisplayssystemlogmessages:
Commandmode:All
Currentsyslogconfiguration:
host0.0.0.0,severity7,facility0
host20.0.0.0,severity27,facility20
consoleenabled
severitylevelofconsoleoutput6
severitylevelofwritetoflash7
sysloggingallfeatures
Syslogsourceloopbackinterfacenotset
Nov25:49:53172.25.254.19INFOconsole:Systemlogclearedbyuser
admin.
Nov25:51:23172.25.254.19CRITsystem:FanMod4Removed
Nov25:54:27172.25.254.19CRITsystem:****MAXTEMPERATURE(61)
ABOVEFAILTHRESH****
Nov25:54:27172.25.254.19CRITsystem:****PLATFORMTHERMAL
SHUTDOWN****
Nov26:02:060.0.0.0NOTICEsystem:linkuponmanagementportMGT
Nov26:02:060.0.0.0INFOsystem:bootedversion0.0.0fromFLASH
image2,activeconfiguration
Nov26:02:090.0.0.0NOTICEsystem:SRSFP+insertedatport63is
Approved
Nov26:02:120.0.0.0NOTICEsystem:1mDACinsertedatport64is
Accepted
Nov26:03:11172.25.254.19NOTICEsystem:ReceivedDHCPOffer
IP:172.25.254.19Mask:255.255.0.
Broadcast172.25.255.255GW:172.25.1.1
Nov26:22:54172.25.254.19NOTICEmgmt:admin(admin)loginonConsole
Nov26:33:00172.25.254.19NOTICEmgmt:admin(admin)idletimeout
fromConsole
Eachsyslogmessagehasaseveritylevelassociatedwithit,includedintextformas
aprefixtothelogmessage.Oneofeightdifferentprefixesisused,dependingon
theconditionthattheadministratorisbeingnotifiedof,asshownhere.
EMERG
ALERT
CRIT
ERR
WARNING
NOTICE
INFO
DEBUG
Indicatesthesystemisunusable
Indicatesactionshouldbetakenimmediately
Indicatescriticalconditions
Indicateserrorconditionsorerroredoperations
Indicateswarningconditions
Indicatesanormalbutsignificantcondition
Indicatesaninformationmessage
Indicatesadebuglevelmessage
Theseverityoptionfiltersonlysyslogmessageswithaspecificseveritylevel
between0and7,fromEMERGtoDEBUGcorrespondingly.
Thereverseoptiondisplaystheoutputinreverseorder,fromthenewestentryto
theoldest.
46
User Status
Thefollowingcommanddisplaysuserstatusinformation:
showaccessuser
Commandmode:AllexceptUserEXEC
Usernames:
userenabledoffline
operdisabledoffline
adminAlwaysEnabledonline1session
CurrentUserIDtable:
1:namepaul,dis,cosuser,passwordvalid,offline
Currentstrongpasswordsettings:
strongpasswordstatus:disabled
Thiscommanddisplaysthestatusoftheconfiguredusernames.
47
Stacking Information
ThefollowingcommandslisttheStackinginformationoptions.
Note: Thefollowingcommandsareavailableonlyinstacking.
Table 19. StackingInformationOptions
showinterfacelinkstatedetached
Displayslinkinformationforalldetachedports.
Commandmode:All
showinterfacelinktype{external|nonstacking|stacking}
Displayslinkinformationforallportsthatmatchoneofthefollowingoptions:
externaldisplayslinkinformationforexternalportsonly
nonstackingdisplayslinkinformationfornonstackingportsonly
stackingdisplayslinkinformationforstackingportsonly
Commandmode:All
showinterfacelinkswitch<configuredswitchnumber(18)>
Displayslinkinformationforthespecifiedconfiguredswitch.
Note:Thiscommandisavailableonlyonthemasterswitch.
Commandmode:All
showinterfacelinkswitch<configuredswitchnumber(18)>state
{detached|disabled|down|errdisabled|up}
Displayslinkinformationforalltheportsofthespecifiedconfiguredswitch
thatmatchoneofthefollowingoptions:
detacheddisplayslinkinformationfordetachedportsonly
disableddisplayslinkinformationfordisabledportsonly
downdisplayslinkinformationonlyforportsinlinkdownportstate
errdisableddisplayslinkinformationforerrordisabledportsonly
updisplayslinkinformationonlyforportsinlinkupportstate
Commandmode:All
showinterfacelinkswitch<configuredswitchnumber(18)>type
{external|nonstacking|stacking}
Displayslinkinformationforalltheportsofthespecifiedconfiguredswitch
thatmatchoneofthefollowingoptions:
externaldisplayslinkinformationforexternalportsonly
nonstackingdisplayslinkinformationfornonstackingportsonly
stackingdisplayslinkinformationforstackingportsonly
Commandmode:All
48

showsysinfoswn<attachedswitchnumber(116)>
Displayssysteminformationforthespecifiedattachedswitch,including:
Systemdateandtime
Switchmodelnameandnumber
Timeoflastboot
IPaddressofmanagementinterface
Softwareimagefileandversionnumber
Configurationname
Fanstatus
Powersupplystatus
Commandmode:All
showstackattachedswitches
Displaystheattachedswitchesinthestack.
Commandmode:All
showstackbackup
Displaystheunitnumberofthebackupswitch.
Commandmode:All
showstackdynamic
Displaysallstackinginformation.
Commandmode:All
showstacklink
Displayslinkinformationforeachswitchinthestack,listedbyassigned
switchnumber.
Commandmode:All
showstackname
Displaysthenameofthestack.
Commandmode:All
49

showstackpathmap[<configuredswitchnumber(18)>]
Displaysthestackingpacketpathmapthatshowshowthestackswitchesare
connected.
Commandmode:All
showstackpushstatus
Displaysthestatusofthemostrecentfirmwareandconfigurationfilepush
fromthemastertomemberswitches.
Commandmode:All
showstackswitch
Displaysinformationabouteachswitchinthestack,including:
ConfiguredSwitchNumber(csnum)
AttachedSwitchNumber(asnum)
MACaddress
Stackingstate
Commandmode:All
showstackswitchnumber[<configuredswitchnumber(18)>]
DisplaystheMACaddressesforallconfiguredswitchesinthestackora
specificconfiguredswitch.
Commandmode:All
showstackversion
Displaysthefirmwareversionnumberfortheselectedswitch.
Commandmode:All
50
Stacking Switch Information

ThefollowingcommanddisplaysStackingswitchinformation:
showstackswitch
Commandmode:All
Stackname:MyStack
Localswitchisthemaster.
Localswitch:
csnum1
MACfc:cf:62:b2:ff:00
SwitchType10(G8052)
SwitchMode(cfg)Master
Priority225
StackMACfc:cf:62:b2:ff:1f
Masterswitch:
csnum1
MACfc:cf:62:b2:ff:00
Backupswitch:
csnum2
MACfc:cf:62:5e:94:00
ConfiguredSwitches:
csnumMACasnum
C1fc:cf:62:b2:ff:00A1
C2fc:cf:62:5e:94:00A2
C3fc:cf:62:b1:a0:00A3
C4fc:cf:62:b2:c6:00A4
C5fc:cf:62:b3:03:00A5
AttachedSwitchesinStack:
asnumMACcsnumState
A1fc:cf:62:b2:ff:00C1IN_STACK
A2fc:cf:62:5e:94:00C2IN_STACK
A3fc:cf:62:b1:a0:00C3IN_STACK
A4fc:cf:62:b2:c6:00C4IN_STACK
A5fc:cf:62:b3:03:00C5IN_STACK
Stackswitchinformationincludesthefollowing:
Stackname
Detailsaboutthelocalswitchfromwhichthecommandwasissued
ConfiguredswitchnumberandMACoftheStackMasterandStackBackup
Configuredswitchnumbersandtheirassociatedassignedswitchnumbers
Attachedswitchnumbersandtheirassociatedconfiguredswitchnumbers
51
Layer 2 Information
ThefollowingcommandsdisplayLayer2information:
Table 20. Layer2InformationCommands
showdot1xinformation
Displays802.1XInformation.Fordetails,seepage 55.
Commandmode:All
showfailovertrigger<18>information
DisplaysLayer2Failoverinformation.Fordetails,seepage 62.
Commandmode:All
showhotlinksinformation
DisplaysHotLinksinformation.Fordetails,seepage 64.
Commandmode:All
showlayer2information
DumpsallLayer2switchinformationavailable(10Klinesormore,depending
onyourconfiguration).
onyourworkstationtocapturesessiondatapriortoissuingthedump
commands.
Commandmode:All
showlldpinformation
DisplaysLinkLayerDiscoveryProtocol(LLDP)information.Fordetails,see
page 65.
Commandmode:All
Displaysthestateofeachportinthevarioustrunkgroups.Fordetails,see
page 81.
Commandmode:All
52
Table 20. Layer2InformationCommands(continued)

showspanningtree
DisplaysSpanningTreeinformation,includingthestatus(onoroff),Spanning
Treemode(RSTP,PVRST,orMSTP)andVLANmembership.
InadditiontoseeingifSTGisenabledordisabled,youcanviewthefollowing
STGbridgeinformation:
Priority
Hellointerval
Maximumagevalue
Forwardingdelay
Agingtime
YoucanalsoseethefollowingportspecificSTGinformation:
Portaliasandpriority
Cost
State
Commandmode:All
showspanningtreeblockedports
ListstheportsblockedbyeachSTPinstance.
Commandmode:All
showspanningtreemstconfiguration
DisplaysthecurrentMSTPsettings.
Commandmode:All
showspanningtreemst<032>[information]
DisplaysSpanningTreeinformationforthespecifiedinstance.0isusedfor
CIST.
CISTbridgeinformationincludes:
Priority
Hellointerval
Maximumagevalue
Forwardingdelay
Rootbridgeinformation(priority,MACaddress,pathcost,rootport)
CISTportinformationincludes:
Portnumberandpriority
Cost
State
Commandmode:All
53

showspanningtreeroot
DisplaysrootbridgeIDforeveryspanningtreeinstanceandthepathcost
associatedtoit.Fordetails,seepage 78.
Commandmode:All
showspanningtreestp<1128>[information]
DisplaysinformationaboutaspecificSpanningTreeGroup.Fordetails,see
page 73.
Commandmode:All
showvlag
DisplaysvLAGInformation.Fordetails,seepage 70.
Commandmode:All
showvlan
DisplaysVLANconfigurationinformationforallconfiguredVLANs,
including:
VLANNumber
VLANName
Status
PortmembershipoftheVLAN
Commandmode:All
54
802.1X Information
Thefollowingcommanddisplays802.1Xinformation:
showdot1xinformation
Commandmode:All
Systemcapability:Authenticator
Systemstatus:disabled
Protocolversion:1
GuestVLANstatus:disabled
GuestVLAN:none
AuthenticatorBackendAssigned
PortAuthModeAuthStatusPAEStateAuthStateVLAN
*1forceauthunauthorizedinitializeinitializenone
ThefollowingtabledescribestheIEEE802.1Xparameters.
Table 21. 802.1XParameterDescriptions
Parameter
Description
Port
Displayseachportsalias.
AuthMode
DisplaystheAccessControlauthorizationmodeforthe
port.TheAuthorizationmodecanbeoneofthefollowing:
forceunauth
auto
forceauth
AuthStatus
Displaysthecurrentauthorizationstatusoftheport,either
authorizedorunauthorized.
Authenticator
PAEState
DisplaystheAuthenticatorPortAccessEntityState.The
PAEstatecanbeoneofthefollowing:
initialize
disconnected
connecting
authenticating
authenticated
aborting
held
forceAuth
55
Table 21. 802.1XParameterDescriptions(continued)

Parameter
Description
BackendAuth
State
DisplaystheBackendAuthorizationState.TheBackend
Authorizationstatecanbeoneofthefollowing:
AssignedVLAN
56
initialize
request
response
success
fail
timeout
idle
DisplayscorrespondingVLANassociatedwiththeport.
FDB Information
Theforwardingdatabase(FDB)containsinformationthatmapsthemediaaccess
control(MAC)addressofeachknowndevicetotheswitchportwherethedevice
addresswaslearned.TheFDBalsoshowswhichotherportshaveseenframes
destinedforaparticularMACaddress.
Note: Themasterforwardingdatabasesupportsupto32KMACaddressentries
ontheMPperswitch.
Table 22. FDBInformationOptions
showmacaddresstable
DisplaysallentriesintheForwardingDatabase.
Commandmode:All
showmacaddresstableall
DisplaysallunicastandmulticastentriesintheForwardingDatabase.
Commandmode:All
showmacaddresstableaddress<MACaddress>
DisplaysasingledatabaseentrybyitsMACaddress.Youarepromptedto
entertheMACaddressofthedevice.EntertheMACaddressusingtheformat,
xx:xx:xx:xx:xx:xx.Forexample,08:00:20:12:34:56.
YoucanalsoentertheMACaddressusingtheformat,xxxxxxxxxxxx.
For example,080020123456.
Commandmode:All
showmacaddresstableconfiguredstatic
DisplaysallconfiguredstaticMACentriesintheFDB.
Commandmode:All
showmacaddresstableinterfaceport<portaliasornumber>
DisplaysallFDBentriesforaparticularport.
Commandmode:All
showmacaddresstablemulticast
DisplaysallstaticmulticastMACentriesintheFDB.Fordetails,seepage 58.
Commandmode:All
showmacaddresstableportchannel<1104>
DisplaysallFDBentriesforaparticulartrunkgroup(portchannel).
Commandmode:All
showmacaddresstableprivatevlan<VLANID(24094)>
DisplaysallFDBentriesonasingleprivateVLAN.
Commandmode:All
57
Table 22. FDBInformationOptions(continued)

showmacaddresstablestate{unknown|forward|trunk}
DisplaysallFDBentriesforaparticularstate.
Commandmode:All
showmacaddresstablestatic
DisplaysallstaticunicastMACentriesintheFDB.
Commandmode:All
showmacaddresstablevlan<VLANID(14094)>
DisplaysallFDBentriesonasingleVLAN.
Commandmode:All
FDB Multicast Information

ThefollowingcommandsdisplayFDBmulticastinformation.
Table 23. MulticastFDBInformationOptions
DisplaysallMulticastMACentriesintheFDB.
Commandmode:All
showmacaddresstablemulticastaddress<MACaddress>
DisplaysasinglemulticastentrybyitsMACaddress.Youarepromptedto
entertheMACaddressofthedevice.EntertheMACaddressusingtheformat,
xx:xx:xx:xx:xx:xx.Forexample,08:00:20:12:34:56.
YoucanalsoentertheMACaddressusingtheformat,xxxxxxxxxxxx.
Forexample,080020123456.
Commandmode:All
showmacaddresstablemulticastinterface
port<portaliasornumber>
Displaysallmulticastentriesforaparticularport.
Commandmode:All
showmacaddresstablemulticastvlan<VLANID(14094)>
DisplaysallmulticastentriesonasingleVLAN.
Commandmode:All
58
Show All FDB Information

ThefollowingcommanddisplaysForwardingDatabaseinformation:
showmacaddresstable
Commandmode:All
MACaddressVLANPortTrnkStatePermanent
00:04:38:90:54:1814FWD
00:09:6b:9b:01:5f113FWD
00:11:43:c4:79:8314FWDP
Anaddressthatisintheforwarding(FWD)state,meansthatithasbeenlearnedby
theswitch.Wheninthetrunking(TRK)state,theportfieldrepresentsthetrunk
groupnumber.Ifthestatefortheportislistedasunknown(UNK),theMAC
addresshasnotyetbeenlearnedbytheswitch,buthasonlybeenseenasa
destinationaddress.
Whenanaddressisintheunknownstate,nooutboundportisindicated,although
portswhichreferencetheaddressasadestinationarelistedunderReference
ports.
Clearing Entries from the Forwarding Database

TocleartheentireFDB,refertoForwardingDatabaseMaintenanceonpage 619.
59
Link Aggregation Control Protocol Information

UsethesecommandstodisplayLACPstatusinformationabouteachportonthe
G8052.
Table 24. LACPInformationOptions
showlacp
DisplaysthecurrentLCAPconfiguration.
Commandmode:All
showlacpaggregator<aggregatorID>
DisplaysdetailedinformationabouttheLACPaggregator.
Commandmode:All
showlacpinformation
DisplaysasummaryofLACPinformation.Fordetails,seepage 61.
Commandmode:All
showlacpinformationstate{down|off|up}
DisplaysasummaryofLACPinformationfortheinterfacesthataredown,off
orup.
Commandmode:All
showinterfaceport<portaliasornumber>lacp[information]
DisplaysLACPinformationabouttheselectedport.
Commandmode:All
60
Link Aggregation Control Protocol

ThefollowingcommanddisplaysLACPinformation:
showlacpinformation
Commandmode:All
portmodeadminkeyoperkeyselectedprioaggrtrunkstatusminlinks
1active6553565535yes32768165up1
2active6553565535yes32768165up1
3active6553565535individual32768down1
4active6553565535yes32768165up1
5active6553565535yes32768165up1
6active6553565535yes32768165up1
7active6553565535yes32768165up1
8active6553565535yes32768165up1
9active10001000suspended32768down1
10active10001000suspended32768down1
...
(*)LACPPortChannelisstaticallyboundtotheadminkey
LACPdumpincludesthefollowinginformationforeachportintheG8052:
mode
DisplaystheportsLACPmode(active,passiveoroff).
adminkey
Displaysthevalueoftheportsadminkey.
operkey
Showsthevalueoftheportsoperationalkey.
selected
Indicateswhethertheporthasbeenselectedtobepartofa
LinkAggregationGroup.
prio
Showsthevalueoftheportpriority.
aggr
Displaystheaggregatorassociatedwitheachport.
trunk
ThisvaluerepresentstheLACPtrunkgroupnumber.
status
DisplaysthestatusofLACPontheport(upordown).
minlinks
DisplaystheminimumnumberofactivelinksintheLACP
trunk.
61
Layer 2 Failover Information

ThefollowingcommandsdisplayLayer2Failoverinformation:
Table 25. Layer2FailoverInformationOptions
showfailovertrigger[information]
DisplaysasummaryofLayer2Failoverinformation.Fordetails,seepage 62.
Commandmode:All
showfailovertrigger<triggernumber>[information]
DisplaysdetailedinformationabouttheselectedLayer2Failovertrigger.
Commandmode:All
Layer 2 Failover Information

ThefollowingcommanddisplaysLayer2Failoverinformation:
showfailovertriggerinformation
Commandmode:All
Failover:On
Trigger1ManualMonitor:Enabled
Trigger1limit:0
MonitorState:Up
MemberStatus
17Operational
ControlState:AutoControlled
MemberStatus
Physicalports
1Operational
Trigger2:Disabled
Trigger3:Disabled
Trigger4:Disabled
Trigger5:Disabled
Trigger6:Disabled
Trigger7:Disabled
Trigger8:Disabled
62
AmonitorportsFailoverstatusisOperationalonlyifallthefollowing
conditionsholdtrue:
Portlinkisup.
IfSpanningTreeisenabled,theportisintheForwardingstate.
IftheportisamemberofanLACPtrunkgroup,theportisaggregated.
Ifanyoftheseconditionsarenottrue,themonitorportisconsideredtobefailed.
AcontrolportisconsideredtobeoperationalifthemonitortriggerstateisUp.
EvenifaportslinkstatusisDown,SpanningTreestatusisBlocking,andthe
LACPstatusisNotAggregated,fromateamingperspectivetheportstatusis
Operational,sincethetriggerisUp.
AcontrolportsstatusisdisplayedasFailedonlyifthemonitortriggerstateis
Down.
63
Hot Links Information

ThefollowingcommanddisplaysHotLinksinformation:
showhotlinksinformation
Commandmode:All
HotLinksInfo:Trigger
CurrentglobalHotLinkssetting:ON
HotLinksBPDUflood:disabled
HotLinksFDBupdate:disabled
FDBupdaterate(pps):200
CurrentTrigger1setting:enabled
name"Trigger1",preemptenabled,fdelay1sec
Activestate:None
Mastersettings:
port1
Backupsettings:
port2
HotLinksinformationincludesthefollowing:
64
HotLinksstatus(onoroff)
StatusofBPDUfloodoption
StatusofFDBsendoption
StatusandconfigurationofeachHotLinkstrigger
LLDP Information
ThefollowingcommandsdisplayLLDPinformation.
Table 26. LLDPInformationOptions
showlldp
DisplaysthecurrentLinkLayerDiscoveryProtocol(LLDP)configuration.
Commandmode:All
showlldpinformation
DisplaysallLLDPinformation.
Commandmode:All
showlldpport[<portaliasornumber>]
DisplaysLLDPinformationforallportsoraspecificport.
Commandmode:All
showlldpport<portaliasornumber>tlvevb
DisplaysEdgeVirtualBridge(EVB)typelengthvalue(TLV)informationfor
thespecifiedport.
Commandmode:All
showlldpreceive
DisplaysinformationabouttheLLDPreceivestatemachine.
Commandmode:All
showlldpremotedevice[<1256>|detail]
DisplaysinformationreceivedfromLLDPcapabledevices.Formore
information,seepage 66.
Commandmode:All
showlldpremotedeviceport<portaliasornumber>
DisplaysinformationreceivedfromLLDPcapabledevicesforaspecificport.
Alistofportsneedstobedelimitedby,andarangeofportsdelimitedby.
Commandmode:All
showlldptransmit
DisplaysinformationabouttheLLDPtransmitstatemachine.
Commandmode:All
65
LLDP Remote Device Information

ThefollowingcommanddisplaysLLDPremotedeviceinformation:
showlldpremotedevice
Commandmode:All
LLDPRemoteDevicesInformation
Legend(possiblevaluesinDMACcolumn):
NBNearestBridge0180C200000E
NnTBNearestnonTPMRBridge0180C2000003
NCBNearestCustomerBridge0180C2000000
Totalnumberofcurrententries:9
LocalPort|Index|RemoteChassisID|RemotePort|RemoteSystemName|DMAC
|||||
1|1|0000c9e547e3|0000c9e547e3||NB
1|2|0000c9e547e3|0000c9e547e3||NnTB
2|3|0090fa750ec5|0090fa750ec5||NB
14|4|a897dcd1f800|60||NB
14|5|a897dcd1f800|60||NnTB
15|6|a897dcd1f800|80||NB
15|7|a897dcd1f800|80||NnTB
18|8|0090fa3d4849|0090fa3d4849||NB
MGT|9|749975c50800|6|G805254|NB
LLDPremotedeviceinformationprovidesasummaryofinformationabout
remotedevicesconnectedtotheswitch.Toviewdetailedinformationabouta
device,asshownbelow,followthecommandwiththeindexnumberoftheremote
device.Toviewdetailedinformationaboutalldevices,usethedetailoption.
LocalPortAlias:1
RemoteDeviceIndex:15
RemoteDeviceTTL:99
RemoteDeviceRxChanges:false
ChassisType:MacAddress
ChassisId:0018b1331d00
PortType:LocallyAssigned
PortId:23
PortDescription:23
SystemName:
SystemDescription:LenovoRackSwitchG8296,LenovoNetworking
OS:version8.2.0.3,Bootimage:version8.2.0.3
SystemCapabilitiesSupported:bridge,router
SystemCapabilitiesEnabled:bridge,router
RemoteManagementAddress:
Subtype:IPv4
Address:10.100.120.181
InterfaceSubtype:ifIndex
InterfaceNumber:128
ObjectIdentifier:
66
Unidirectional Link Detection Information

ThefollowingcommandsdisplayUDLDinformation:
Table 27. UDLDInformationOptions
showudld
DisplaysallUDLDinformation.
Commandmode:All
showinterfaceport<portaliasornumber>udld
DisplaysUDLDinformationabouttheselectedport.
Commandmode:All
UDLD Port Information

ThefollowingcommanddisplaysUDLDinformationfortheselectedport:
Commandmode:All
UDLDinformationonport1
Portenableadministrativeconfigurationsetting:Enabled
Portadministrativemode:normal
Portenableoperationalstate:linkup
Portoperationalstate:advertisement
Portbidirectionalstatus:bidirectional
Messageinterval:15
Timeoutinterval:5
Neighborcache:1neighbordetected
Entry#1
Expirationtime:31seconds
DeviceName:
DeviceID:00:da:c0:00:04:00
PortID:1
UDLDinformationincludesthefollowing:
Status(enabledordisabled)
Mode(normaloraggressive)
Portstate(linkuporlinkdown)
Bidirectionalstatus(unknown,unidirectional,bidirectional,TXRXloop,
neighbormismatch)
67
802.1x Discovery Information

Thefollowingcommandsdisplay802.1xinformation:
Table 28. 802.1xDiscoveryInformationOptions
showinterfaceport<portaliasornumber>dot1x
Displays802.1xinformationabouttheselectedport.
Commandmode:All
showdot1x
Displaysall802.1xinformation.
Commandmode:All
showdot1x<portaliasornumber>
Displays802.1xinformationforspecifiedport.
Commandmode:All
802.1x Port Information

Thefollowingcommanddisplays802.1xinformationfortheselectedport:
Commandmode:All
QuietTxMaxSuppServerReAuthReAuthVLAN
PortAuthModePeriodPeriodReqTimeoutTimeoutStatusPeriodAssign
Gforceauth603023030off3600off
1forceauth603023030off3600off
GGlobalportconfiguration
802.1xportdisplayshowsinformationabouttheselectedportandthepeerto
whichthelinkisconnected.
68
OAM Discovery Information

ThefollowingcommandsdisplayOAMinformation:
Table 29. OAMDiscoveryInformationOptions
showinterfaceport<portaliasornumber>oam
DisplaysOAMinformationabouttheselectedport.
Commandmode:All
showoam
DisplaysallOAMinformation.
Commandmode:All
OAM Port Information

ThefollowingcommanddisplaysOAMinformationfortheselectedport:
Commandmode:All
OAMinformationonport1
Stateenabled
Modeactive
Linkup
SatisfiedYes
EvaluatingNo
Remoteportinformation:
Modeactive
MACaddress00:da:c0:00:04:00
StableYes
StatevalidYes
EvaluatingNo
OAMportdisplayshowsinformationabouttheselectedportandthepeerto
whichthelinkisconnected.
69
vLAG Information
ThefollowingcommandsdisplayVirtualLinkAggregationGroup(vLAG)
information:
Table 30. vLAGInformationOptions
showvlag
DisplaysthecurrentvLAGconfiguration.
Commandmode:All
showvlagadminkey<165535>
DisplaysvLAGLACPinformation.
Commandmode:All
showvlagadminkey<165535>information
DisplaysallvLAGLACPinformation.
Commandmode:All
showvlaginformation
DisplaysallvLAGinformation.
Commandmode:All
showvlagisl
DisplaysvLAGInterSwitchLink(ISL)information.
Commandmode:All
showvlagportchannel<152>
DisplaysvLAGstatictrunkgroupinformation.
Commandmode:All
showvlagportchannel<152>information
DisplaysallvLAGstatictrunkgroupinformation.
Commandmode:All
70
vLAG Trunk Information

ThefollowingcommanddisplaysvLAGinformationforthetrunkgroup:
showvlagportchannel<152>
Commandmode:All
vLAGisenabledontrunk13
ProtocolStatic
Currentsettings:enabled
ports:13
CurrentL2trunkhashsettings:
smacdmac
CurrentL3trunkhashsettings:
sipdip
Currentingressporthash:disabled
CurrentL4porthash:disabled
71
Spanning Tree Information

ThefollowingcommanddisplaysSpanningTreeinformation:
showspanningtree
Commandmode:All
Pvst+compatibilitymodeenabled
MstpDigest:0x9170ece876e20888e8c7c15170abd4dc
CommonInternalSpanningTree:
VLANsMAPPED:1244093
VLANs:1
CurrentRoot:PathCostPortMaxAgeFwdDel
8000de:eb:00:00:00:00002015
CistRegionalRoot:PathCost
8000de:eb:00:00:00:000
Parameters:PriorityMaxAgeFwdDelHops
32768201520
PortPrioCostStateRoleDesignatedBridgeDesPortHelloType
112820000!FWDDESG8000de:eb:00:00:00:0080012P2P
!=Automaticpathcost.
SpanningTreeGroup3:On(MSTP)
VLANsMAPPED:3
VLANs:3
CurrentRoot:PathCostPort
8000de:eb:00:00:00:0000
Parameters:PriorityAgingTopologyChangeCounts
327683000
PortPrioCostStateRoleDesignatedBridgeDesPortType
Note:ThereisnoactiveSTPportinSpanningTreeGroup3.
VLANsMAPPED:4094
VLANs:4094
8000de:eb:00:00:00:0000
327683001
112820000!FWDDESG8000de:eb:00:00:00:008001P2P
72
RSTP Information
ThefollowingcommanddisplaysRSTPinformation:
showspanningtreestp<1128>information
Commandmode:All
SpanningTreeGroup1:On(RSTP)
VLANs:134094
CurrentRoot:PathCostPortHelloMaxAgeFwdDel
8000de:eb:00:00:00:000022015
Parameters:PriorityHelloMaxAgeFwdDelAgingTopologyChangeCounts
32768220153001
112820000!FWDDESG8000de:eb:00:00:00:008001P2P
TheswitchsoftwareusesthePerVLANRapidSpanningTreeProtocol(PVRST)
spanningtreemode,withIEEE802.1D(2004)RapidSpanningTreeProtocol(RSTP)
orIEEE802.1Q(2003)MultipleSpanningTreeProtocol(MSTP),asalternatives.
Thefollowingportspecificinformationisalsodisplayed:
Table 31. PVRST/RSTP/MSTPPortParameterDescriptions
Parameter
Description
Priority
(port)
ThePortPriorityparameterhelpsdeterminewhichbridgeport
becomesthedesignatedport.Inanetworktopologythathas
multiplebridgeportsconnectedtoasinglesegment,theportwith
thelowestportprioritybecomesthedesignatedportforthe
segment.
Cost
ThePortPathcostparameterisusedtohelpdeterminethe
designatedportforasegment.Generallyspeaking,thefasterthe
port,thelowerthepathcost.Asettingof0indicatesthatthecost
willbesettotheappropriatedefaultafterthelinkspeedhasbeen
autonegotiated.
State
TheStatefieldshowsthecurrentstateoftheport.TheStatefield
canbeoneofthefollowing:Discarding(DISC),Learning(LRN),or
Forwarding(FWD).
Role
TheRolefieldshowsthecurrentroleofthisportintheSpanning
Tree.Theportrolecanbeoneofthefollowing:Designated(DESG),
Root(ROOT),Alternate(ALTN),Backup(BKUP).
Designated TheDesignatedBridgeshowsinformationaboutthebridge
Bridge
connectedtoeachport,ifapplicable.Informationincludesthe
priority(inhexadecimalnotation)andMACaddressofthe
DesignatedBridge.
73
Table 31. PVRST/RSTP/MSTPPortParameterDescriptions(continued)

Parameter
Description
Designated TheDesignatedPortfieldshowstheportontheDesignatedBridge
Port
towhichthisportisconnected.
Type
74
Typeoflinkconnectedtotheport,andwhethertheportisanedge
port.LinktypevaluesareAUTO,P2P,orSHARED.
PVRST Information
ThefollowingcommanddisplaysPVRSTinformation:
showspanningtreestp<1128>information
Commandmode:All
Pvst+compatibilitymodeenabled
SpanningTreeGroup1:On(PVRST)
VLANs:11274094
CurrentRoot:PathCostPortHelloMaxAgeFwdDel
800108:17:f4:8c:bc:0020002022015
Parameters:PriorityHelloMaxAgeFwdDelAgingTopologyChangeCounts
3276922015300254
1128500!FWDDESG800108:17:f4:af:ae:008001P2P
17(pc1)128990!+FWDDESG800108:17:f4:af:ae:008400P2P
18(pc1)128990!+FWDDESG800108:17:f4:af:ae:008400P2P
1900FWD*
201282000!FWDROOT800108:17:f4:8c:bc:00801cP2P
*=STPturnedoffforthisport.
+=Portchannelcost,nottheindividualportcost.
YoucanconfiguretheswitchsoftwaretousetheIEEE802.1D(2004)Rapid
SpanningTreeProtocol(RSTP),theIEEE802.1Q(2003)MultipleSpanningTree
Protocol(MSTP)orPerVLANRapidSpanningTreeProtocol(PVRST).
Thefollowingportspecificinformationisalsodisplayed:
Table 32. RSTP/MSTP/PVRSTPortParameterDescriptions
Parameter
Description
Prio(port)
ThePortPriorityparameterhelpsdeterminewhichbridge
portbecomesthedesignatedport.Inanetworktopologythat
hasmultiplebridgeportsconnectedtoasinglesegment,the
portwiththelowestportprioritybecomesthedesignated
portforthesegment.
Cost
TheportPathCostparameterisusedtohelpdeterminethe
designatedportforasegment.Generallyspeaking,thefaster
theport,thelowerthepathcost.Asettingof0indicatesthat
thecostwillbesettotheappropriatedefaultafterthelink
speedhasbeenautonegotiated.
State
TheStatefieldshowsthecurrentstateoftheport.TheState
fieldinRSTPorMSTPmodecanbeoneofthefollowing:
Discarding(DISC),Learning(LRN),Forwarding(FWD)or
Disabled(DSB).
75
Table 32. RSTP/MSTP/PVRSTPortParameterDescriptions(continued)
76
Parameter
Description
Role
TheRolefieldshowsthecurrentroleofthisportinthe
SpanningTree.Theportrolecanbeoneofthefollowing:
Designated(DESG),Root(ROOT),Alternate(ALTN),Backup
(BKUP)orDisabled(DSB).
Designated
Bridge
TheDesignatedBridgeshowsinformationaboutthebridge
connectedtoeachport,ifapplicable.Informationincludes
thepriority(inhexadecimalnotation)andMACaddressof
theDesignatedBridge.
DesignatedPort
TheportIDoftheportontheDesignatedBridgetowhich
thisportisconnected.
Type
Typeoflinkconnectedtotheport,andwhethertheportisan
edgeport.LinktypevaluesareAUTO,P2PorSHARED.
Spanning Tree Bridge Information

ThefollowingcommanddisplaysSpanningTreebridgeinformation:
showspanningtreebridge
Commandmode:All
STGPriorityHelloMaxAgeFwdDelProtocolVLANs
13276822015PVRST1
23276822015PVRST2
1283276822015PVRST4095
showspanningtreevlan<VLANID(14094)>bridge
Commandmode:All
VlanPriorityHelloMaxAgeFwdDelProtocol
13276822015MSTP
Table 33. BridgeParameterDescriptions
Parameter
Description
VLAN
VLANsthatarepartoftheSpanningTreeGroup
Priority
Thebridgepriorityparametercontrolswhichbridgeonthe
networkwillbecometheSTProotbridge.Thelowerthe
value,thehigherthepriority.
Hello
Thehellotimeparameterspecifies,inseconds,howoftenthe
bridgetransmitsaconfigurationbridgeprotocoldataunit
(BPDU).Anybridgethatisnottherootbridgeusestheroot
bridgehellovalue.
MaxAge
Themaximumageparameterspecifies,inseconds,the
maximumtimethebridgewaitswithoutreceivinga
configurationbridgeprotocoldataunitbeforeitreconfigures
theSTPnetwork.
FwdDel
Theforwarddelayparameterspecifies,inseconds,the
amountoftimethatabridgeporthastowaitbeforeit
changesfromlearningstatetolearningstateandfrom
learningstatetoforwardingstate.
Protocol
TheSTPprotocolrunbytheSpanningTreeGroup
77
Spanning Tree Root Information

ThefollowingcommanddisplaysinformationabouttherootbridgeIDforevery
spanningtreeinstanceandthepathcostassociatedtoit:
Commandmode:All
InstanceRootIDPathCostHelloMaxAgeFwdDelRootPort
1800108:17:f4:32:95:000220150
3800308:17:f4:32:95:000220150
6800108:17:f4:fb:d8:00200002201527
17801108:17:f4:32:95:000220150
Table 34. BridgeParameterDescriptions
78
Parameter
Description
Instance
SpanningTreeinstance
RootID
IndicatestherootswitchbridgepriorityandMACaddress.
PathCost
Theportpathcostisusedtohelpdeterminethedesignated
portforasegment.
Hello
bridgehellovalue.
MaxAge
configurationbridgeprotocoldataunitbeforeitreconfigure
theSTPnetwork.
FwdDel
RootPort
TheelectedrootportfortheSTPinstance(portusedtoreach
therootswitch).
Multiple Spanning Tree Information

ThefollowingcommanddisplaysMultipleSpanningTree(MSTP)information:
showspanningtreemst<032>information
Commandmode:All
MstpDigest:0x9f71e12a07f4e3004fe0ce1f241a7b66
VLANsMAPPED:5
VLANs:5
0000a8:97:dc:88:c9:0000
03001
1(pc105)128156!+FWDDESG0000a8:97:dc:88:c9:0080e8P2P
4128500!FWDDESG0000a8:97:dc:88:c9:00800aP2P,edge
+=Portchannelcost,nottheindividualportcost.
InadditiontoseeingCommonInternalSpanningTree(CIST)status,youcanview
thefollowingCISTbridgeinformation:
Table 35. CISTParameterDescriptions
Parameter
Description
CISTRoot
TheCISTRootshowsinformationabouttherootbridgefor
theCommonInternalSpanningTree(CIST).Valuesonthis
rowofinformationrefertotheCISTroot.
CISTRegional
Root
TheCISTRegionalRootshowsinformationabouttheroot
bridgeforthisMSTPregion.Valuesonthisrowof
informationrefertotheregionalroot.
Priority(bridge)
Thebridgepriorityparametercontrolswhichbridgeonthe
networkwillbecometheSTProotbridge.
Hello
bridgehellovalue.
MaxAge
configurationbridgeprotocoldataunitbeforeitreconfigure
theSTPnetwork.
79
Table 35. CISTParameterDescriptions(continued)

Parameter
Description
FwdDel
Hops
Themaximumnumberofbridgehopsapacketcantraverse
beforeitisdropped.Thedefaultvalueis20.
ThefollowingportspecificCISTinformationisalsodisplayed:
Table 36. CISTParameterDescriptions
80
Parameter
Description
Prio(port)
Theportpriorityparameterhelpsdeterminewhichbridge
portbecomesthedesignatedport.Inanetworktopologythat
hasmultiplebridgeportsconnectedtoasinglesegment,the
portwiththelowestportprioritybecomesthedesignated
portforthesegment.
Cost
Theportpathcostparameterisusedtohelpdeterminethe
designatedportforasegment.Generallyspeaking,thefaster
theport,thelowerthepathcost.Asettingof0indicatesthat
thecostwillbesettotheappropriatedefaultafterthelink
speedhasbeenautonegotiated.
State
Thestatefieldshowsthecurrentstateoftheport.Thestate
fieldcanbeeitherDiscarding(DISC),Learning(LRN)or
Forwarding(FWD).
Role
TheRolefieldshowsthecurrentroleofthisportinthe
SpanningTree.Theportrolecanbeoneofthefollowing:
Designated(DESG),Root(ROOT),Alternate(ALTN),Backup
(BKUP),Disabled(DSB),Master(MAST)orUnknown(UNK).
Designated
Bridge
TheDesignatedBridgeshowsinformationaboutthebridge
connectedtoeachport,ifapplicable.Informationincludes
thepriority(inhexadecimalnotation)andMACaddressof
theDesignatedBridge.
DesignatedPort
TheportIDoftheportontheDesignatedBridgetowhich
thisportisconnected.
Type
Typeoflinkconnectedtotheport,andwhethertheportisan
edgeport.LinktypevaluesareAUTO,P2PorSHARED.
Trunk Group Information

ThefollowingcommanddisplaysTrunkGroupinformation:
Commandmode:All
Trunkgroup1:Enabled
ProtocolStatic
Portstate:
1:STG1forwarding
2:STG1forwarding
Whentrunkgroupsareconfigured,youcanviewthestateofeachportinthe
varioustrunkgroups.
Note: IfSpanningTreeProtocolonanyportinthetrunkgroupissetto
forwarding,theremainingportsinthetrunkgroupwillalsobesetto
forwarding.
81
VLAN Information
ThefollowingcommandsdisplayVLANinformation:
Table 37. VLANInformationOptions
showvlan
DisplaysthecurrentVLANconfiguration.
Commandmode:All
showvlan<VLANID(14094)>
DisplaysthecurrentconfigurationforthespecifiedVLAN.
Commandmode:All
showvlanprivatevlan[type]
DisplaysPrivateVLANinformation.
typelistsonlytheVLANtypeforeachprivateVLAN:community,isolated
orprimary
Commandmode:All
showvlaninformation
DisplaysinformationaboutallVLANs,including:
VLANnumberandname
VLANstatistics
VLANcreationtime
Portmembership
VLANstatus(enabledordisabled)
ProtocolVLANstatus
SpanningTreemembership
VMAPconfiguration
Commandmode:All
showvlan<VLANID(14094)>information
DisplaysinformationonlyaboutthespecifiedVLAN.
Commandmode:All
showprotocolvlan<protocolnumber(18)>
DisplaysProtocolVLANinformation.
Commandmode:All
82
ThefollowingcommanddisplaysVLANinformation:
showvlan
Commandmode:All
VLANNameStatusPorts
1DefaultVLANena120
2VLAN2dis2122
100VLAN100enaempty
200VLAN200enaempty
300VLAN300enaempty
4095MgmtVLANenaMGT
PrimarySecondaryTypePorts
100200isolated14
100300community12
ThisinformationdisplayincludesallconfiguredVLANsandallmemberportsthat
haveanactivelinkstate.Portmembershipisrepresentedinslot/portformat.
VLANinformationincludes:
VLANNumber
VLANName
Status
PortmembershipoftheVLAN
ProtocolVLANinformation(ifavailable)
PrivateVLANinformation(ifavailable)
83
Layer 3 Information
ThefollowingcommandsdisplayLayer3information:
Table 38. Layer3InformationCommands
showikev2
DisplaysIKEv2information.Formoreinformationoptions,seepage 129.
Commandmode:All
showinterfaceip
DisplaysIPinterfaceInformation.Fordetails,seepage 124.
Commandmode:All
show[ip]arp
DisplaysAddressResolutionProtocol(ARP)information.Fordetails,see
page 91.
Commandmode:All
showipbgp
DisplaysBorderGatewayProtocol(BGP)information.Fordetails,seepage 96.
Commandmode:All
showipbootprelay
DisplaysthecurrentparametersfortheBOOTPRelaybroadcastdomain.
Commandmode:All
showipdhcpsnooping
DisplaysDHCPSnoopinginformation.Fordetails,seepage 133.
Commandmode:All
showipdns
DisplaysthecurrentDomainNameSystemsettings.
Commandmode:All
showipecmp
DisplaysECMPstaticrouteinformation.Fordetails,seepage 114.
Commandmode:All
showipgateway<14>
Displaysthecurrentgatewaysettings.
Commandmode:All
showipv6gateway6
DisplaysthecurrentIPv6defaultgatewayconfiguration.
Commandmode:All
84

showipigmp
DisplaysIGMPInformation.FormoreIGMPinformationoptions,see
page 115.
Commandmode:All
showipinformation
DisplaysallIPinformation.
Commandmode:All
showipinterfacebrief
DisplaysIPInformation.Fordetails,seepage 127.
IPinformation,includes:
IPinterfaceinformation:Interfacenumber,IPaddress,subnetmask,VLAN
number,andoperationalstatus.
Defaultgatewayinformation:Metricforselectingwhichconfigured
gatewaytouse,gatewaynumber,IPaddress,andhealthstatus
IPforwardingsettings,networkfiltersettings,routemapsettings
Commandmode:All
showipv6interface<interfacenumber>
DisplaysIPv6interfaceinformation.Fordetails,seepage 125.
Commandmode:All
showipmatchaddress[<1256>]
DisplaysthecurrenttheNetworkFilterconfiguration.
Commandmode:All
showipmroute
DisplaysthecurrentIPmulticastroutes.
Commandmode:All
showipv6mld
DisplaysMulticastListenerDiscovery(MLD)information.FormoreMLD
informationoptions,seepage 120.
Commandmode:All
showipv6neighbors
DisplaysIPv6NeighborCacheinformation.Formoreinformationoptions,see
page 112.
Commandmode:All
showipospfinformation
DisplaystheOSPFinformation.Fordetails,seepage 97.
Commandmode:All
85

showipv6ospfinformation
DisplaysOSPFv3information.FormoreOSPFv3informationoptions,see
page 103.
Commandmode:All
showippimcomponent[<12>]
DisplaysProtocolIndependentMulticast(PIM)componentinformation.For
morePIMinformationoptions,seepage 134.
Commandmode:All
showipv6pmtu[<destinationIPv6address>]
DisplaysIPv6PathMTUinformation.Fordetails,seepage 126.
Commandmode:All
showippolicy
Displaysthecurrentroutingpolicyinformation.
Commandmode:All
showipprefixpolicy
DisplaysthecurrentPrefixPolicyTableconfiguration.
Commandmode:All
showipv6prefix
DisplaysIPv6NeighborDiscoveryprefixinformation.Fordetails,see
page 113.
Commandmode:All
showiprip
DisplaysthecurrentRoutingInformationProtocol(RIP)configuration.For
details,seepage 108.
Commandmode:All
showiproute
Displaysallroutesconfiguredontheswitch.Fordetails,seepage 89.
Commandmode:All
showipv6route
DisplaysIPv6routinginformation.Formoreinformationoptions,see
page 110.
Commandmode:All
showiprouting
DisplaysthecurrentIPforwardingsettings.
Commandmode:All
86

showipslpinformation
DisplaysServiceLocationProtocol(SLP)information.
Commandmode:All
showipslpdirectoryagents
DisplaysSLPDirectoryAgent(DA)information.
Commandmode:All
showipslpuseragents
DisplaysSLPUserAgent(UA)information.
Commandmode:All
showipvrrpinformation
DisplaysVRRPinformation.Fordetails,seepage 122.
Commandmode:All
showipsecmanualpolicy
DisplaysinformationaboutmanualkeymanagementpolicyforIPsecurity.
Formoreinformationoptions,seepage 131.
Commandmode:All
showlayer3
DumpsallLayer3switchinformationavailable(10Kormore,dependingon
yourconfiguration).
onyourworkstationtocapturesessiondatabeforeissuingthedump
commands.
Commandmode:All
showlayer3igmpgroups
DisplaysthetotalnumberofIGMPgroupsthatareregisteredontheswitch.
Commandmode:All
showlayer3ipmcgroups
DisplaysthetotalnumberofcurrentIPmulticast(IPMC)groupsthatare
registeredontheswitch.
Commandmode:All
87
IP Routing Information
Usingthecommandslistedinthefollowingtable,youcandisplayalloraportion
oftheIProutescurrentlyheldintheswitch.
Table 39. RouteInformationOptions
showiproute[all]
Displaysallroutesconfiguredintheswitch.Formoreinformation,see
page 89.
Commandmode:All
showiprouteaddress<IPaddress>
DisplaysasingleroutebydestinationIPaddress.
Commandmode:All
showiprouteecmphash
DisplaysthecurrentECMPhashingmechanism.
Commandmode:All
showiproutegateway<IPaddress>
Displaysroutestoasinglegateway.
Commandmode:All
showiprouteinterface<interfacenumber>
Displaysroutesonasingleinterface.
Commandmode:All
showiprouteport<portaliasornumber>
Displaysroutesonasingleport.
Commandmode:All
showiproutestatic
Displaysstaticroutesconfiguredontheswitch.
Commandmode:All
showiproutetag{address|bgp|broadcast|fixed|martian|
|multicast|ospf|rip|static}
Displaysroutesofasingletag.ForadescriptionofIProutingtags,seeTable 41
onpage 89.
Commandmode:All
showiproutetype{broadcast|direct|indirect|local|
|martian|multicast}
Displaysroutesofasingletype.ForadescriptionofIProutingtypes,see
Table 40onpage 89.
Commandmode:All
88
Show All IP Route Information

ThefollowingcommanddisplaysIProuteinformation:
showiproute
Commandmode:All
Statuscode:*best
DestinationMaskGatewayTypeTagMetrIf
*0.0.0.00.0.0.0172.31.1.1indirectstatic1
*12.0.0.0255.0.0.00.0.0.0martianmartian
*12.31.0.0255.255.0.0172.31.36.139directfixed1
*12.31.36.139255.255.255.255172.31.36.139localaddr1
*12.31.255.255255.255.255.255172.31.255.255broadcastbroadcast1
*224.0.0.0224.0.0.00.0.0.0martianmartian
*224.0.0.0240.0.0.00.0.0.0multicastaddr
*255.255.255.255255.255.255.255255.255.255.255broadcastbroadcast
ThefollowingtabledescribestheTypeparameters.
Table 40. IPRoutingTypeParameters
Parameter
Description
indirect
Thenexthoptothehostorsubnetdestinationwillbeforwarded
througharouterattheGatewayaddress.
direct
Packetswillbedeliveredtoadestinationhostorsubnet
attachedtotheswitch.
local
IndicatesaroutetooneoftheswitchsIPinterfaces.
broadcast
Indicatesabroadcastroute.
martian
Thedestinationbelongstoahostorsubnetwhichisfilteredout.
Packetstothisdestinationarediscarded.
multicast
Indicatesamulticastroute.
ThefollowingtabledescribestheTagparameters.
Table 41. IPRoutingTagParameters
Parameter
Description
fixed
Theaddressbelongstoahostorsubnetattachedtotheswitch.
static
Theaddressisastaticroutewhichhasbeenconfiguredonthe
RackSwitchG8052.
addr
TheaddressbelongstooneoftheswitchsIPinterfaces.
rip
TheaddresswaslearnedbytheRoutingInformationProtocol
(RIP).
ospf
TheaddresswaslearnedbyOpenShortestPathFirst(OSPF).
bgp
TheaddresswaslearnedviaBorderGatewayProtocol(BGP).
89
Table 41. IPRoutingTagParameters(continued)
90
Parameter
Description
broadcast
Indicatesabroadcastaddress.
martian
Theaddressbelongstoafilteredgroup.
multicast
Indicatesamulticastaddress.
ARP Information
TheARPinformationincludesIPaddressandMACaddressofeachentry,address
statusflags(seeTable 43onpage 93),VLAN,ageandportfortheaddress.
Table 42. ARPInformationOptions
show[ip]arp[all]
DisplaysallARPentries.including:
IPaddressandMACaddressofeachentry
Addressstatusflag
TheVLANandporttowhichtheaddressbelongs
Theelapsedtime(inseconds)sincetheARPentrywaslearned
Formoreinformation,seepage 93.
Commandmode:All
show[ip]arpfind<IPaddress>
DisplaysasingleARPentrybyIPaddress.
Commandmode:All
showiparpinspection
DisplaysthecurrentDynamicARPInspection(DAI)configurationsettings.
Commandmode:All
show[ip]arpinterfaceport<portaliasornumber>
DisplaystheARPentriesonasingleport.
Commandmode:All
show[ip]arpreply
DisplaystheARPentriesfortheswitchsIPinterfaces.
Commandmode:All
show[ip]arpstatic
DisplaysallstaticARPentries.
Commandmode:All
show[ip]arpvlan<VLANID(14095)>
DisplaystheARPentriesonasingleVLAN.
Commandmode:All
91
ARP Address List Information

ThefollowingcommanddisplaysownedARPaddresslistinformation:
show[ip]arpreply
Commandmode:All
IPaddressIPmaskMACaddressVLANPassUp
1.1.1.1255.255.255.25508:17:f4:62:64:001
2.2.2.2255.255.255.25508:17:f4:62:64:001
46.0.0.1255.255.255.25508:17:f4:62:64:004094
3.3.3.20255.255.255.25508:17:f4:62:64:003
92
Show All ARP Entry Information

ThefollowingcommanddisplaysARPinformation:
show[ip]arp
Commandmode:All
CurrentARPconfiguration:
rearp5
NostaticARPconfigured.
TotalnumberdataARPentries:12
IPaddressFlagsMACaddressVLANAgePort
10.100.121.100:22:00:ad:45:00409401
10.100.121.2Pfc:cf:62:e7:7f:004094
10.100.121.1844:37:e6:6f:69:9740941361
10.100.121.13008:17:f4:6f:1e:fe409461
10.100.121.14534:40:b5:40:3f:fe4094831
10.100.121.15134:40:b5:40:ad:fe40942721
10.100.121.15234:40:b5:40:53:fe40941411
10.100.121.17034:40:b5:df:32:8a40942741
10.100.121.17134:40:b5:df:32:8a409461
10.100.121.247a8:97:dc:d1:df:fe4094821
10.100.121.250a8:97:dc:dd:eb:fe4094981
11.0.0.1Pfc:cf:62:e7:7f:004094
ThePortfieldshowsthetargetportoftheARPentry.
TheFlagsfieldisinterpretedasfollows:
Table 43. ARPFlagParameters
Flag
Description
PermanententrycreatedforswitchIPinterface.
Indirectrouteentry.
UnresolvedARPentry.TheMACaddresshasnotbeenlearned.
93
Dynamic ARP Inspection Information

ThefollowingcommandsdisplayDynamicARPInspection(DAI)information:
Table 44. DynamicARPInspectionInformationOptions
showiparpinspection
DisplaysthecurrentDAIconfigurationsettings.
Commandmode:All
showiparpinspectioninterfaces[<portaliasornumber>]
DisplaysthecurrentDAIconfigurationsettingsfortheselectedinterfaces.
Commandmode:All
showiparpinspectionvlan[<VLANID(14094)>]
DisplaysthecurrentDAIconfigurationsettingsfortheselectedVLANs.
Commandmode:All
showiparpinspectioninterfaces[<portaliasornumber>]
Commandmode:All
InterfaceTrustState
1Trusted
2Trusted
3Untrusted
4Untrusted
...
showiparpinspectionvlan[<VLANID(14094)>]
Commandmode:All
VlanConfiguration
2Enabled
94
BGP Information
ThefollowingcommandsdisplayBGPinformation:
Table 45. BGPPeerInformationOptions
showipbgpaggregateaddress[<116>]
DisplaysthecurrentBGPaggregationconfiguration.
Commandmode:All
showipbgpinformation
DisplaystheBGProutingtable.Seepage 96forasampleoutput.
Commandmode:All
showipbgpneighbor[<112>]
DisplaysthecurrentBGPpeerconfiguration.
Commandmode:All
showipbgpneighboradvertisedroutes
DisplaysallBGPadvertisedroutestoallneighbors.
Commandmode:All
showipbgpneighbor<112>advertisedroutes
DisplaysallBGPadvertisedroutestoaspecificpeer.
Commandmode:All
showipbgpneighborinformation
DisplaysBGPpeerinformation.Seepage 96forasampleoutput.
Commandmode:All
showipbgpneighbor<112>information
DisplaysBGPpeerinformationforaspecificpeer.
Commandmode:All
showipbgpneighbor<112>redistribute
DisplaysBGPneighborredistribution.
Commandmode:All
showipbgpneighbor<112>routes
DisplaysBGPpeerroutes.
Commandmode:All
showipbgpneighborsummary
DisplayspeersummaryinformationsuchasAS,messagereceived,message
sent,up/downorstate.Seepage 96forasampleoutput.
Commandmode:All
95
BGP Peer Information

Followingisanexampleoftheinformationprovidedbythefollowingcommand:
showipbgpneighborinformation
Commandmode:All
BGPPeerInformation:
StaticPeers:
1:3.5.0.3,version4,TTL255,TTLSecurityhops0
RemoteAS:10000,LocalAS:10000,Linktype:IBGP
RemoterouterID:3.3.3.3,LocalrouterID:5.5.5.5
nexthopselfdisabled
RRclientdisabled
BGPstatus:established,Oldstatus:established
Totalreceivedpackets:4321,Totalsentpackets:4309
Receivedupdates:12,Sentupdates:0
Keepalive:60,Holdtime:180,MinAdvTime:60
LastErrorCode:unknown(0),LastErrorSubcode:unspecified(0)
Establishedstatetransitions:1
BGP Summary Information

showipbgpneighborsummary
Commandmode:All
BGPPeerSummaryInformation:
PeerVASMsgRcvdMsgSentUp/DownState
1:205.178.23.142414211312100:00:28established
2:205.178.15.148014800neverconnect
Dump BGP Information

showipbgpinformation[<IPv4network><IPv4mask>]
Commandmode:All
Statuscodes:*valid,>best,=multipath,iinternal
Origincodes:iIGP,eEGP,?incomplete
NetworkMaskNextHopMetricLcPrfWghtPath
*>1.1.1.0255.255.255.00.0.0.00?
*>10.100.100.0255.255.255.00.0.0.00?
*>10.100.120.0255.255.255.00.0.0.00?
TheIPv4networkandmaskoptionsrestricttheoutputtoaspecificnetworkinthe
BGProutingtable.
96
OSPF Information
ThefollowingcommandsdisplayOSPFinformation:
Table 46. OSPFInformationOptions
showinterfaceip<interfacenumber>ospf
DisplaysthecurrentOSPFsettingsforthespecifiedIPinterface.
Commandmode:All
showipospfarea<019>
DisplaysOSPFsettingsforaparticularareaindex.
Commandmode:All
showipospfareainformation[<019>]
Displaysareainformationforallareasoraparticularareaindex.
Commandmode:All
showipospfarearange<116>
DisplaysthecurrentOSPFsummaryrangesettings.
Commandmode:All
showipospfareavirtuallink<13>
DisplaysthecurrentOSPFvirtuallinksettings.
Commandmode:All
showipospfareavirtuallinkinformation
Displaysinformationaboutalltheconfiguredvirtuallinks.
Commandmode:All
showipospfgeneralinformation
DisplaysgeneralOSPFinformation.Seepage 99forasampleoutput.
Commandmode:All
showipospfhost<1128>
DisplaysthecurrentOSPFhostentries.
Commandmode:All
showipospfhostinformation
DisplaysOSPFhostconfigurationinformation.
Commandmode:All
showipospfinformation
DisplaystheOSPFinformation.
Commandmode:All
97
Table 46. OSPFInformationOptions(continued)

showipospfinterface[<IPinterfacenumber>]
DisplaysOSPFinformationforallIPinterfacesoraparticularinterface.See
page 99forasampleoutput.
Commandmode:All
showipospfinterfaceloopback[<15>]
DisplaysOSPFinformationforallloopbackinterfacesoraparticularloopback
interface.Seepage 100forasampleoutput.
Commandmode:All
showipospfinterfaceport[<portaliasornumber>]
DisplaysOSPFinformationforallportsoraparticularport.Fordetails,see
page 100.
Commandmode:All
showipospfneighbor
Displaysthestatusofallthecurrentneighbors.
Commandmode:All
showipospfredistribute
DisplaysthecurrentOSPFredistributesettings.
Commandmode:All
showipospfroutes
DisplaysOSPFroutingtable.Seepage 100forasampleoutput.
Commandmode:All
showipospfsummaryrange<019>
DisplaysthelistofsummaryrangesbelongingtononNSSAareas.
Commandmode:All
showipospfsummaryrangenssa<019>
DisplaysthelistofsummaryrangesbelongingtoNSSAareas.
Commandmode:All
98
OSPF General Information

ThefollowingcommanddisplaysgeneralOSPFinformation:
showipospfgeneralinformation
Commandmode:All
OSPFVersion2
RouterID:10.10.10.1
Startedat1663andtheprocessuptimeis4626
AreaBorderRouter:yes,ASBoundaryRouter:no
LStypessupportedare6
ExternalLSAcount0
ExternalLSAchecksumsum0x0
Numberofinterfacesinthisrouteris2
Numberofvirtuallinksinthisrouteris1
16newlsareceivedand34lsaoriginatedfromthisrouter
TotalnumberofentriesintheLSDB10
Databasechecksumsum0x0
Totalneighborsare1,ofwhich
2are>=INITstate,
2are>=EXCHstate,
2are=FULLstate
Numberofareasis2,ofwhich3transit0nssa
AreaId:0.0.0.0
Authentication:none
ImportASExtern:yes
NumberoftimesSPFran:8
AreaBorderRoutercount:2
ASBoundaryRoutercount:0
LSAcount:5
LSAChecksumsum:0x2237B
Summary:noSummary
OSPF Interface Information

ThefollowingcommanddisplaysOSPFinterfaceinformation:
showipospfinterface<interfacenumber>
Commandmode:All
IpAddress10.10.12.1,Area0.0.0.1,AdminStatusUP
RouterID10.10.10.1,StateDR,Priority1
DesignatedRouter(ID)10.10.10.1,IpAddress10.10.12.1
BackupDesignatedRouter(ID)10.10.14.1,IpAddress10.10.12.2
Timerintervals,Hello10,Dead40,Wait1663,Retransmit5,
Pollinterval0,Transitdelay1
Neighborcountis1IfEvents4,Authenticationtypenone
99
OSPF Loopback Information

ThefollowingcommanddisplaysOSPFinformationforaparticularloopback
interface.Ifnoparameterissupplied,itdisplaysOSPFinformationforallthe
loopbackinterfaces:
showipospfinterfaceloopback<15>
Commandmode:All
IpAddress123.123.123.1,Area0.0.0.0,Passiveinterface,AdminStatusUP
RouterID1.1.1.1,StateLoopback,Priority1
Timerintervals,Hello10,Dead40,Wait40,Retransmit5,Transitdelay1
OSPF Port Information

ThefollowingcommanddisplaysOSPFinformationforaparticularport.Ifno
parameterissupplied,itdisplaysOSPFinformationforalltheports:
showipospfinterfaceport<portaliasornumber>
Commandmode:All
IpAddress10.241.39.82,Area0.0.0.0,AdminStatusUP
RouterID1.1.1.1,StateWaiting,Priority1
Timerintervals,Hello10,Dead40,Wait40,Retransmit5,Transitdelay1
OSPF Information Route Codes

ThefollowingcommanddisplaysOSPFrouteinformation:
showipospfroutes
Commandmode:All
Codes:IAOSPFinterarea,
N1OSPFNSSAexternaltype1,N2OSPFNSSAexternaltype2
E1OSPFexternaltype1,E2OSPFexternaltype2
IA10.10.0.0/16via200.1.1.2
IA40.1.1.0/28via20.1.1.2
IA80.1.1.0/24via200.1.1.2
IA100.1.1.0/24via20.1.1.2
IA140.1.1.0/27via20.1.1.2
IA150.1.1.0/28via200.1.1.2
E2172.18.1.1/32via30.1.1.2
E2172.18.1.2/32via30.1.1.2
E2172.18.1.3/32via30.1.1.2
E2172.18.1.4/32via30.1.1.2
E2172.18.1.5/32via30.1.1.2
E2172.18.1.6/32via30.1.1.2
E2172.18.1.7/32via30.1.1.2
E2172.18.1.8/32via30.1.1.2
100
OSPF Database Information

ThefollowingcommandsdisplayOSPFDatabaseinformation:
Table 47. OSPFDatabaseInformationOptions
showipospfdatabase
DisplaysalltheLinkStateAdvertisements(LSAs).
Commandmode:All
showipospfdatabaseadvertisingrouter<routerID(IPaddress)>
Takesadvertisingrouterasaparameter.DisplaysalltheLSAsintheLS
databasethathavetheadvertisingrouterwiththespecifiedrouterID,for
example:20.1.1.1.
Commandmode:All
showipospfdatabasearea<019>
DisplaysLSdatabaseinformationforthespecifiedOSPFarea.
Commandmode:All
showipospfdatabaseasbrsummary[advertisingrouter
<routerID(IPaddress)>|linkstateid<linkstateID(IPaddress)>|self]
DisplaysASBRsummaryLSAs.Theusageofthiscommandisasfollows:
asbrsummaryadvertisingrouter20.1.1.1displaysASBR
summaryLSAshavingtheadvertisingrouter20.1.1.1.
asbrsummarylinkstateid10.1.1.1displaysASBRsummary
LSAshavingthelinkstateID10.1.1.1.
asbrsummaryselfdisplaystheselfadvertisedASBRsummaryLSAs.
asbrsummarywithnoparametersdisplaysalltheASBRsummaryLSAs.
Commandmode:All
showipospfdatabasedatabasesummary
DisplaysthefollowinginformationabouttheLSdatabaseinatableformat:
NumberofLSAsofeachtypeineacharea.
TotalnumberofLSAsforeacharea.
TotalnumberofLSAsforeachLSAtypeforallareascombined.
TotalnumberofLSAsforallLSAtypesforallareascombined.
Noparametersarerequired.
Commandmode:All
showipospfdatabaseexternal[advertisingrouter
DisplaystheASexternal(type5)LSAswithdetailedinformationofeachfield
oftheLSAs.
Commandmode:All
101
Table 47. OSPFDatabaseInformationOptions(continued)

showipospfdatabasenetwork[advertisingrouter
Displaysthenetwork(type2)LSAswithdetailedinformationofeachfieldof
theLSA.
Commandmode:All
showipospfdatabasenssa[advertisingrouter
DisplaystheNSSA(type7)LSAswithdetailedinformationofeachfieldofthe
LSAs.
Commandmode:All
showipospfdatabaserouter[advertisingrouter
Displaystherouter(type1)LSAswithdetailedinformationofeachfieldofthe
LSAs.
Commandmode:All
showipospfdatabaseself
DisplaysalltheselfadvertisedLSAs.Noparametersarerequired.
Commandmode:All
showipospfdatabasesummary[advertisingrouter
Displaysthenetworksummary(type3)LSAswithdetailedinformationof
eachfieldoftheLSAs.
Commandmode:All
102
OSPFv3 Information
ThefollowingcommandsdisplayOSPFv3information:
Table 48. OSPFv3InformationOptions
showipv6ospfarea<areaindex(02)>
DisplaystheOSPFv3areainformation.
Commandmode:All
showipv6ospfareas
DisplaystheOSPFv3AreaTable.
Commandmode:All
showipv6ospfarearange<116>
DisplaysthecurrentOSPFv3summaryrangesettings.
Commandmode:All
showipv6ospfarearangeinformation
DisplaysOSPFv3summaryranges.
Commandmode:All
showipv6ospfareavirtuallink<13>
DisplaysthecurrentOSPFv3virtuallinksettings.
Commandmode:All
showipv6ospfareavirtuallinkinformation
Displaysinformationaboutalltheconfiguredvirtuallinks.
Commandmode:All
showipv6ospfborderrouters
DisplaysOSPFv3routestoanABRorASBR.
Commandmode:All
showipv6ospfhost<1128>
DisplaysthecurrentOSPFv3hostentries.
Commandmode:All
showipv6ospfhostinformation
DisplaysOSPFv3hostconfigurationinformation.
Commandmode:All
DisplaysallOSPFv3information.Toviewasampledisplay,seepage 105.
Commandmode:All
103
Table 48. OSPFv3InformationOptions(continued)

showipv6ospfinterface[<interfacenumber>]
Displaysinterfaceinformationforaparticularinterface.Ifnoparameteris
supplied,itdisplaysinformationforalltheinterfaces.Toviewasample
display,seepage 105.
Commandmode:All
showipv6ospfneighbor[<nbrrouterID(IPaddress)>]
DisplaysthestatusofaneighborwithaparticularrouterID.IfnorouterIDis
supplied,itdisplaystheinformationaboutallthecurrentneighbors.
Commandmode:All
showipv6ospfredistconfig<1128>
DisplaysthecurrentOSPFv3redistributionconfigurationforthespecified
entry.
Commandmode:All
showipv6ospfredistconfiginformation
DisplaysOSPFv3redistributioninformationtobeappliedtorouteslearned
fromtheroutetable.
Commandmode:All
showipv6ospfrequestlist[<nbrrouterID(IPaddress)>]
DisplaystheOSPFv3requestlist.IfnorouterIDissupplied,itdisplaysthe
informationaboutallthecurrentneighbors.
Commandmode:All
showipv6ospfretranslist[<nbrrouterID(IPaddress)>]
DisplaystheOSPFv3retransmissionlist.IfnorouterIDissupplied,itdisplays
theinformationaboutallthecurrentneighbors.
Commandmode:All
showipv6ospfroutes
DisplaysOSPFv3routingtable.Toviewasampledisplay,seepage 107.
Commandmode:All
showipv6ospfsummaryprefix<116>
DisplaysthecurrentOSPFv3ASexternalrange.
Commandmode:All
showipv6ospfsummaryprefixinformation
DisplaystheOSPFv3externalsummaryaddressconfigurationinformation.
Commandmode:All
104
OSPFv3 Information Dump

ThefollowingcommanddisplaysOSPFv3information:
Commandmode:All
RouterId:1.0.0.1ABRType:StandardABR
SPFscheduledelay:5secsHoldtimebetweentwoSPFs:10secs
ExitOverflowInterval:0RefBW:100000ExtLsdbLimit:none
TraceValue:0x00008000AsScopeLsa:2ChecksumSum:0xfe16
PassiveInterface:Disable
NssaAsbrDefaultRouteTranslation:Disable
AutonomousSystemBoundaryRouter
RedistributingExternalRoutesfromconnected,metric10,metrictype
asExtType1,notagset
NumberofAreasinthisrouter1
Area0.0.0.0
Numberofinterfacesinthisareais1
NumberofAreaScopeLsa:7ChecksumSum:0x28512
NumberofIndicationLsa:0SPFalgorithmexecuted:2times
OSPFv3 Interface Information

ThefollowingcommanddisplaysOSPFv3interfaceinformation:
showipv6ospfinterface
Commandmode:All
Ospfv3InterfaceInformation
InterfaceId:1InstanceId:0AreaId:0.0.0.0
LocalAddress:fe80::222:ff:fe7d:5d00RouterId:1.0.0.1
NetworkType:BROADCASTCost:1State:BACKUP
DesignatedRouterId:2.0.0.2localaddress:
fe80::218:b1ff:fea1:6c01
BackupDesignatedRouterId:1.0.0.1localaddress:
fe80::222:ff:fe7d:5d00
TransmitDelay:1secPriority:1IfOptions:0x0
Timerintervalsconfigured:
Hello:10,Dead:40,Retransmit:5
Helloduein6sec
NeighborCountis:1,Adjacentneighborcountis:1
Adjacentwithneighbor2.0.0.2
105
OSPFv3 Database Information

ThefollowingcommandsdisplayOSPFv3Databaseinformation:
Table 49. OSPFv3DatabaseInformationOptions
showipv6ospfdatabase[detail|hex]
DisplaysalltheLinkStateAdvertisements(LSAs).
Commandmode:All
showipv6ospfdatabaseasexternal[detail|hex]
DisplaysASExternalLSAsdatabaseinformation.Ifnoparameterissupplied,
itdisplayscondensedinformation.
Commandmode:All
showipv6ospfdatabaseinterprefix[detail|hex]
DisplaysInterAreaPrefixLSAsdatabaseinformation.Ifnoparameteris
supplied,itdisplayscondensedinformation.
Commandmode:All
showipv6ospfdatabaseinterrouter[detail|hex]
DisplaysInterArearouterLSAsdatabaseinformation.Ifnoparameteris
Commandmode:All
showipv6ospfdatabaseintraprefix[detail|hex]
DisplaysIntraAreaPrefixLSAsdatabaseinformation.Ifnoparameteris
Commandmode:All
showipv6ospfdatabaselink[detail|hex]
DisplaysLinkLSAsdatabaseinformation.Ifnoparameterissupplied,it
displayscondensedinformation.
Commandmode:All
showipv6ospfdatabasenetwork[detail|hex]
DisplaysNetworkLSAsdatabaseinformation.Ifnoparameterissupplied,it
displayscondensedinformation.
Commandmode:All
showipv6ospfdatabasenssa[detail|hex]
DisplaysType7(NSSA)LSAdatabaseinformation.Ifnoparameteris
Commandmode:All
showipv6ospfdatabaserouter[detail|hex]
DisplaystheRouterLSAswithdetailedinformationofeachfieldoftheLSAs.
Ifnoparameterissupplied,itdisplayscondensedinformation.
Commandmode:All
106
OSPFv3 Route Codes Information

ThefollowingcommanddisplaysOSPFv3routeinformation:
showipv6ospfroutes
Commandmode:All
Dest/NextHp/CostRt.TypeArea
PrefixLengthIfIndex
3ffe::10:0:0:0fe80::290:69ff30interArea0.0.0.0
/80fe90:b4bf/vlan1
/80fe90:b4bf/vlan1
3ffe::30:0:0:0::/vlan210intraArea0.0.0.0
/80
/128fe33:4426/vlan2
107
Routing Information Protocol

Thefollowingcommandsdisplayinformation:
Table 50. RoutingInformationProtocolOptions
showiprip
DisplaysthecurrentRIPconfiguration.
Commandmode:All
showipripinterface[<IPinterfacenumber>|port<portaliasornumber>]
DisplaysthecurrentRIPinterfaceconfiguration.Formoreinformation,see
page 109.
Commandmode:All
showipripredistribute
DisplaysthecurrentRIProuteredistributeconfiguration.
Commandmode:All
showipriproutes
DisplaysRIProutes.Formoreinformation,seepage 109.
Commandmode:All
108
RIP Routes Information

ThefollowingcommanddisplaysRIProuteinformation:
showipriproutes
Commandmode:All
>>IPRouting#
30.1.1.0/24directlyconnected
3.0.0.0/8via30.1.1.11metric4
4.0.0.0/16via30.1.1.11metric16
10.0.0.0/8via30.1.1.2metric3
20.0.0.0/8via30.1.1.2metric2
ThistablecontainsalldynamicrouteslearnedthroughRIP,includingtheroutes
thatareundergoinggarbagecollectionwithmetric=16.Thistabledoesnotcontain
locallyconfiguredstaticroutes.
RIP Interface Information

ThefollowingcommanddisplaysRIPuserinformation:
showipripinterface<interfacenumber>
Commandmode:All
RIPUSERCONFIGURATION:
RIP:ON,update30
RIPonInterface49:101.1.1.10,enabled
version2,listenenabled,supplyenabled,defaultnone
poisondisabled,splithorizonenabled,triggenabled,mcastenabled,metric1
authnone,keynone
109
IPv6 Routing Information

ThefollowingtablediscribestheIPv6Routinginformationoptions.
Table 51. IPv6RoutingInformationOptions
showipv6route
DisplaysallIPv6routinginformation.Formoreinformation,seepage 111.
Commandmode:All
showipv6routeaddress<IPv6address>
DisplaysasingleroutebydestinationIPv6address.
Commandmode:All
showipv6routegateway<IPv6gatewayaddress>
Displaysroutestoasinglegateway.
Commandmode:All
showipv6routeinterface<interfacenumber>
Displaysroutesonasingleinterface.
Commandmode:All
showipv6routestatic
Displaysthecurrentstaticrouteconfiguration.
Commandmode:All
showipv6routesummary
DisplaysasummaryofIPv6routinginformation,includinginactiveroutes.
Commandmode:All
showipv6routetype{connected|static|ospf}
Displaysroutesofasingletype.ForadescriptionofIProutingtypes,see
Table 40onpage 89.
Commandmode:All
110
IPv6 Routing Table Information

ThefollowingcommanddisplaysIPv6routinginformation:
showipv6route
Commandmode:All
IPv6RoutingTable3entries
Codes:CConnected,SStatic
OOSPF
DDataGatewayfromRA
S::/0[1/20]
via2001:2:3:4::1,Interface2
C2001:2:3:4::/64[1/1]
via::,Interface2
Cfe80::20f:6aff:feec:f701/128[1/1]
Notethatthefirstnumberinsidethebracketsrepresentsthemetricandthesecond
numberrepresentsthepreferencefortheroute.
111
IPv6 Neighbor Cache Information

ThefollowingcommandsdisplayIPv6NeighborCacheinformation:
Table 52. IPv6NeighborCacheInformationOptions
showipv6neighbors
DisplaysallIPv6NeighborCacheentries.Formoreinformation,seepage 112.
Commandmode:All
showipv6neighborsfind<IPv6address>
DisplaysasingleIPv6NeighborCacheentrybyIPaddress.
Commandmode:All
showipv6neighborsinterfaceport<portaliasornumber>
DisplaysIPv6NeighborCacheentriesonasingleport.
Commandmode:All
showipv6neighborsstatic
DisplaysstaticIPv6NeighborCacheentries.
Commandmode:All
showipv6neighborsvlan<VLANID(14094)>
DisplaysIPv6NeighborCacheentriesonasingleVLAN.
Commandmode:All
IPv6 Neighbor Cache Information

ThefollowingcommanddisplaysasummaryofIPv6NeighborCacheinformation:
showipv6neighbors
Commandmode:All
IPv6AddressAgeLinklayerAddrStateIFVLANPort
2001:2:3:4::11000:50:bf:b7:76:b0Reachable211
fe80::250:bfff:feb7:76b0000:50:bf:b7:76:b0Stale212
112
IPv6 Neighbor Discovery Prefix Information

ThefollowingcommanddisplaysasummaryofIPv6NeighborDiscoveryprefix
information:
showipv6prefix
Commandmode:All
Codes:AAddress,PPrefixAdvertisement
DDefault,NNotAdvertised
[L]OnlinkFlagisset
[A]AutonomousFlagisset
AD10::64[LA]Validlifetime2592000,Preferredlifetime604800
P20::64[LA]Validlifetime200,Preferredlifetime100
NeighborDiscoveryprefixinformationincludesinformationaboutallconfigured
prefixes.
ThefollowingcommanddisplaysIPv6NeighborDiscoveryprefixinformationfor
aninterface:
showipv6prefixinterface<interfacenumber>
Commandmode:All
113
ECMP Static Route Information

ThefollowingcommanddisplaysEqualCostMultiPath(ECMP)route
information:
showipecmp
Commandmode:All
Currentecmpstaticroutes:
DestinationMaskGatewayIfGWStatus
10.10.1.1255.255.255.255100.10.1.11up
200.20.2.21down
10.20.2.2255.255.255.25510.233.3.31up
10.20.2.2255.255.255.25510.234.4.41up
10.20.2.2255.255.255.25510.235.5.51up
ECMPhealthcheckpinginterval:1
ECMPhealthcheckretriesnumber:3
ECMPHashMechanism:dipsip
ECMProuteinformationshowsthestatusofeachECMProuteconfiguredonthe
switch.
114
IGMP Information
ThefollowingcommandsdisplayIGMPinformation:
Table 53. IGMPMulticastGroupInformationCommands
showipigmp
DisplaysthecurrentIGMPconfigurationparameters.
Commandmode:All
showipigmpfiltering
DisplayscurrentIGMPFilteringparameters.
Commandmode:All
showipigmpgroups
Displaysinformationforallmulticastgroups.Fordetails,seepage 118.
Commandmode:All
showipigmpgroupsaddress<IPaddress>
DisplaysasingleIGMPmulticastgroupbyitsIPaddress.
Commandmode:All
showipigmpgroupsdetail<IPaddress>
DisplaysdetailsaboutanIGMPmulticastgroup,includingsourceandtimer
information.
Commandmode:All
showipigmpgroupsinterfaceport<portaliasornumber>
DisplaysallIGMPmulticastgroupsonasingleport.
Commandmode:All
showipigmpgroupsportchannel<1104>
DisplaysallIGMPmulticastgroupsonasingletrunkgroup.
Commandmode:All
showipigmpgroupsvlan<VLANID(14094)>
DisplaysallIGMPmulticastgroupsonasingleVLAN.
Commandmode:All
showipigmpipmcgrp
DisplaysinformationforallIPMCgroups.Fordetails,seepage 119.
Commandmode:All
showipigmpmrouter[dynamic|interfaceport
<portaliasornumber>|portchannel<1104>|static]
DisplaysinformationforallMrouters,alldynamic/staticMrouterports
installedorMrouterportsspecifictoaspecifiedinterface/portchannel.
Commandmode:All
115
Table 53. IGMPMulticastGroupInformationCommands(continued)

showipigmpmrouterinformation
DisplaysIGMPMulticastRouterinformation.Fordetails,seepage 118.
Commandmode:All
showipigmpmroutervlan<VLANID(14094)>
DisplaysIGMPMulticastRouterinformationforthespecifiedVLAN.
Commandmode:All
showipigmpprofile<116>
DisplaysinformationaboutthecurrentIGMPfilter.
Commandmode:All
showipigmpquerierport<portaliasornumber>
DisplaysIGMPQuerierinformationforaparticularport.
Commandmode:All
showipigmpqueriervlan<VLANID(14094)>
DisplaysIGMPQuerierinformationforaparticularVLAN.Fordetails,see
page 117.
Commandmode:All
showipigmprelay
DisplaysIGMPRelayinformation.
Commandmode:All
showipigmpsnoop
DisplaysIGMPSnoopinginformation.
Commandmode:All
showipigmpsnoopigmpv3
DisplaysthecurrentIGMPv3Snoopingconfiguration.
Commandmode:All
116
IGMP Querier Information

ThefollowingcommanddisplaysIGMPQuerierinformationforaparticular
VLAN:
Commandmode:All
CurrentIGMPQuerierinformation:
IGMPQuerierinformationforvlan1:
OtherIGMPqueriernone
Switchquerierenabled,currentstate:Querier
Switchqueriertype:Ipv4,address1.1.1.1,
Switchqueriergeneralqueryinterval:125secs,
Switchqueriermaxresponseinterval:100'tenthsofsecs',
Switchquerierstartupinterval:31secs,count:2
Switchquerierrobustness:2
IGMPconfiguredversionisv3
IGMPOperatingversionisv3
IGMPQuerierinformationincludes:
VLANnumber
Querierstatus
OtherIGMPqueriernone
IGMPquerierpresent,address:(IPorMACaddress)
OtherIGMPquerierpresent,interval(minutes:seconds)
Querierelectiontype(IPv4orMAC)andaddress
Queryinterval
Querierstartupinterval
Maximumqueryresponseinterval
Querierrobustnessvalue
IGMPversionnumber
117
IGMP Group Information

ThefollowingcommanddisplaysIGMPGroupinformation:
showipigmpgroups
Commandmode:All
Totalentries:5TotalIGMPgroups:2
Note:The<TotalIGMPgroups>numberiscomputedas
thenumberofunique(Group,Vlan)entries!
Note:Localgroups(224.0.0.x)arenotsnoopedandwillnotappear.
SourceGroupVLANPortVersionModeExpiresFwd
10.1.1.1232.1.1.124V3INC4:16Yes
10.1.1.5232.1.1.124V3INC4:16Yes
*232.1.1.124V3INCNo
10.10.10.43235.0.0.191V3EXC2:26No
*235.0.0.191V3EXCYes
IGMPGroupinformationincludes:
IGMPsourceaddress
IGMPGroupaddress
VLANandport
IGMPversion
IGMPv3filtermode
Expirationtimervalue
IGMPmulticastforwardingstate
IGMP Multicast Router Information

ThefollowingcommanddisplaysMrouterinformation:
Commandmode:All
Totalentries:3Totalnumberofdynamicmrouters:2
Totalnumberofinstalledstaticmrouters:1
SrcIPVLANPortVersionExpiresMRTQRVQQIC
10.1.1.1221V34:091282125
10.1.1.5223V24:09125
*924V2static
IGMPMrouterinformationincludes:
118
SourceIPaddress
VLANandportwheretheMrouterisconnected
IGMPversion
Mrouterexpiration
Maximumqueryresponsetime
QueriersRobustnessVariable(QRV)
QueriersQueryIntervalCode(QQIC)
IPMC Group Information

ThefollowingcommanddisplaysIGMPIPMCgroupinformation:
showipigmpipmcgrp
Commandmode:All
Totalnumberofdisplayedipmcgroups:4
Legend(possiblevaluesinTypecolumn):
SHstatichostDRdynamicregistered
SPstaticprimaryDUdynamicunregistered
SBstaticbackupMmrouter
Oother
SourceGroupVlanPortTypeTimeleft
============================================================
*232.0.0.11DU6sec
*232.0.0.21DU6sec
*232.0.0.31DU6sec
*232.0.0.41DU6sec
IGMPIPMCGroupinformationincludes:
IGMPsourceaddress
IGMPgroupaddress
VLANandport
TypeofIPMCgroup
Expirationtimervalue
119
MLD Information
ThefollowingtabledescribesthecommandsusedtoviewMLDinformation.
Table 54. MLDInformationCommands
showipv6mldgroups
DisplaysMLDmulticastgroupinformation.
Commandmode:All
showipv6mldgroupsaddress<IPv6address>
DisplaysgroupinformationforthespecifiedIPv6address.
Commandmode:All
showipv6mldgroupsinterfaceport<portaliasornumber>
DisplaysMLDgroupsonasingleinterfaceport.
Commandmode:All
showipv6mldgroupsportchannel<1104>
Displaysgroupsonasingleportchannel.
Commandmode:All
showipv6mldgroupsvlan<VLANID(14094)>
DisplaysgroupsonasingleVLAN.
Commandmode:All
showipv6mldinterface[<1128>]
DisplaysinformationforallMLDinterfacesoraspecificMLDinterface.
Commandmode:All
showipv6mldmrouter
DisplaysallMLDMrouterports.Seepage 121forsampleoutput.
Commandmode:All
120
MLD Mrouter Information

ThefollowingcommanddisplaysMLDMrouterinformation:
showipv6mldmrouter
Commandmode:All
Source:fe80:0:0:0:200:14ff:fea8:40c9
Port/Vlan:26/4
Interface:3
QRV:2QQIC:125
MaximumResponseDelay:1000
Version:MLDv2Expires:1:02
ThefollowingtabledescribestheMLDMrouterinformationdisplayedinthe
output.
Table 55. MLDMrouter
Statistic
Description
Source
Displaysthelinklocaladdressofthereporter.
Port/Vlan
Displaystheport/vlanonwhichthegeneralqueryis
received.
Interface
Displaystheinterfacenumberonwhichthegeneralquery
isreceived.
QRV
DisplaystheQueriersrobustnessvariablevalue.
QQIC
DisplaystheQueriersqueryintervalcode.
MaximumResponse Displaystheconfiguredmaximumqueryresponsetime.
Delay
Version
DisplaystheMLDversionconfiguredontheinterface.
Expires
Displaystheamountoftimethatmustpassbeforethe
multicastrouterdecidesthattherearenomorelisteners
foramulticastaddressoraparticularsourceonalink.
121
VRRP Information
VirtualRouterRedundancyProtocol(VRRP)supportonRackSwitchG8052provides
redundancybetweenroutersinaLAN.Thisisaccomplishedbyconfiguringthe
samevirtualrouterIPaddressandIDnumberoneachparticipatingVRRPcapable
routingdevice.Oneofthevirtualroutersisthenelectedasthemaster,basedona
numberofprioritycriteria,andassumescontrolofthesharedvirtualrouterIP
address.Ifthemasterfails,oneofthebackupvirtualrouterswillassumerouting
authorityandtakecontrolofthevirtualrouterIPaddress.
ThefollowingtabledescribescommandstoviewVRRPinformation:
Table 56. VRRPInformationCommands
showipvrrp
DisplaysthecurrentVRRPparameters.
Commandmode:All
showipvrrpgroup
Displaysthecurrentconfigurationinformationforthevirtualroutergroup.
Commandmode:All
showipvrrpgrouptrack
Displaysthecurrentconfigurationforprioritytrackingforthevirtualrouter.
Commandmode:All
DisplaysVRRPinformation.Fordetails,seepage 123.
Commandmode:All
showipvrrpinterface<1128>
DisplaysthecurrentconfigurationforthisIPinterfacesauthentication
parameters.
Commandmode:All
showipvrrptrackingpriorityincrement
Displaysthecurrentconfigurationofprioritytrackingincrementvalues.
Commandmode:All
showipvrrpvirtualrouter<1128>
Displaysthecurrentconfigurationinformationforthisvirtualrouter.
Commandmode:All
showipvrrpvirtualrouter<1128>track
Displaysthecurrentconfigurationforprioritytrackingforthisvirtualrouter.
Commandmode:All
122
ThefollowingcommanddisplaysVRRPinformation:
Commandmode:All
VRRPinformation:
1: vrid2,205.178.18.210, if1,renter,prio100,master
2: vrid1,205.178.18.202, if1,renter,prio100,backup
3: vrid3,205.178.18.204, if1,renter,prio100,master
Whenvirtualroutersareconfigured,youcanviewthestatusofeachvirtualrouter
usingthiscommand.VRRPinformationincludes:
Virtualrouternumber
VirtualrouterIDandIPaddress
Interfacenumber
Ownershipstatus
owneridentifiesthepreferredmastervirtualrouter.Avirtualrouteristhe
ownerwhentheIPaddressofthevirtualrouteranditsIPinterfacearethe
same.
renteridentifiesvirtualrouterswhicharenotownedbythisdevice.
Priorityvalue.Duringtheelectionprocess,thevirtualrouterwiththehighest
prioritybecomesmaster.
Activitystatus
masteridentifiestheelectedmastervirtualrouter.
backupidentifiesthatthevirtualrouterisinbackupmode.
initidentifiesthatthevirtualrouteriswaitingforastartupevent.
Forexample,onceitreceivesastartupevent,ittransitionstomasterifits
priorityis255,(theIPaddressowner)ortransitionstobackupifitisnottheIP
addressowner.
123
Interface Information
Thefollowingcommanddisplaysinterfaceinformation:
showinterfaceip
Commandmode:All
Interfaceinformation:
1:IP4127.31.35.5255.255.0.0172.31.255.255,vlan1,up
2:IP62002:0:0:0:0:0:0:5/64,vlan1,up
fe80::213:aff:fe4f:7c01
3:IP63003:0:0:0:0:0:0:5/64,vlan2,up
fe80::213:aff:fe4f:7c02
127:IP610:90:90:0:0:0:0:97/64,vlan4095,DOWN
128:IP410.90.90.97255.255.255.010.90.90.255,vlan4095,up
Foreachinterface,thefollowinginformationisdisplayed:
IPv4interfaceaddressandsubnetmask
IPv6addressandprefix
VLANassignment
Status(up,DOWN,disabled)
Note: IfroutingisenabledusingthenoswitchportcommandinInterface
Portmode,thiscommandalsodisplaysIPinterfacesconfiguredonphysicalports
aswellasLACPandLAGs.
124
IPv6 Interface Information

ThefollowingcommanddisplaysIPv6interfaceinformation:
showipv6interface<interfacenumber>
Commandmode:All
2:IP62001:0:0:0:225:3ff:febb:bb15/64,vlan1,up
fe80::225:3ff:febb:bb15
Linklocaladdress:
fe80::225:3ff:febb:bb15
Globalunicastaddress(es):
2001::225:3ff:febb:bb15/64
Anycastaddress(es):
NotConfigured.
Joinedgroupaddress(es):
ff02::1
ff02::2
ff02::1:ffbb:bb15
MTUis1500
ICMPredirectsareenabled
NDDADisenabled,NumberofDADattempts:1
NDrouteradvertisementisdisabled
Foreachinterface,thefollowinginformationisdisplayed:
IPv6interfaceaddressandprefix
VLANassignment
Status(up,downordisabled)
PathMTUsize
StatusofICMPredirects
StatusofNeighborDiscovery(ND)DuplicateAddressDetection(DAD)
StatusofNeighborDiscoveryrouteradvertisements
125
IPv6 Path MTU Information

ThefollowingcommanddisplaysIPv6PathMTUinformation:
showipv6pmtu[<destinationIPv6address>]
Commandmode:All
PathMTUDiscoveryinfo:
MaxCacheEntryNumber:10
CurrentCacheEntryNumber:2
CacheTimeoutInterval:10minutes
DestinationAddressSincePMTU
5000:1::300:02:261400
FE80::203:A0FF:FED6:141D00:06:551280
PathMTUDiscoveryinformationprovidesinformationaboutentriesinthePath
MTUcache.ThePMTUfieldindicatesthemaximumpacketsizeinoctetsthatcan
successfullytraversethepathfromtheswitchtothedestinationnode.Itisequalto
theminimumlinkMTUofallthelinksinthepathtothedestinationnode.
126
IP Information
ThefollowingcommanddisplaysLayer3information:
showipinterfacebrief
Commandmode:All
IPinformation:
ASnumber0
1:IP410.241.37.30255.255.255.12810.241.37.127,vlan1,up
Loopbackinterfaceinformation:
Defaultgatewayinformation:metricstrict
1:10.241.37.1,upactive
DefaultIP6gatewayinformation:
ECMPHashMechanism:dipsip
CurrentBOOTPrelaysettings:OFF
Globalservers:
Server1address0.0.0.0
CurrentBOOTPrelayoption82settings:OFF
CurrentBOOTPrelayoption82policy:Replace
CurrentDHCPSnoopingsettings:Off
DHCPSnoopingisconfiguredonthefollowingVLANs:
empty
Insertionofoption82informationisDisable
InterfaceTrustedRatelimit(pps)
1Nonone
2Nonone
3Nonone
4Nonone
5Nonone
...
47Nonone
48Nonone
XGE1Nonone
XGE2Nonone
XGE3Nonone
XGE4Nonone
CurrentIPforwardingsettings:ON,dirbrdisabled,noicmprddisabled,
ICMPv6redirectdisabled
Currentnetworkfiltersettings:none
Currentroutemapsettings:none
RIPisdisabled.
OSPFisdisabled.
CurrentOSPFv3settings:OSPFv3isdisabled.
CurrentPIMsettings:OFF
BGPisdisabled.
127
IPinformationincludes:
128
IPinterfaceinformation:Interfacenumber,IPaddress,subnetmask,broadcast
address,VLANnumberandoperationalstatus.
Defaultgatewayinformation:Metricforselectingwhichconfiguredgatewayto
use,gatewaynumber,IPaddressandhealthstatus
BootPrelaysettings
IPforwardingsettings,includingtheforwardingstatusofdirectedbroadcasts
andthestatusofICMPredirects
Networkfiltersettings,ifapplicable
Routemapsettings,ifapplicable
IKEv2 Information
ThefollowingtablelistscommandsthatdisplayinformationaboutIKEv2.
Table 57. IKEv2InformationCommands
showikev2
DisplaysallIKEv2information.Seepage 130forsampleoutput.
Commandmode:All
showikev2cacert
DisplaystheCAcertificate.
Commandmode:All
showikev2hostcert
Displaysthehostcertificate.
Commandmode:All
showikev2identity
DisplaysIKEv2identityinformation.
Commandmode:All
showikev2presharekey
DisplaystheIKEv2presharekey.
Commandmode:All
showikev2proposal
DisplaystheIKEv2proposal.
Commandmode:All
showikev2retransmitinterval
DisplaystheIKEv2retransmitinterval.
Commandmode:All
showikev2sa
DisplaystheIKEv2SA.
Commandmode:All
129
IKEv2 Information Dump

ThefollowingcommanddisplaysIKEv2information:
showikev2
Commandmode:All
IKEv2retransmittime:20
IKEv2cookienotification:disable
IKEv2authenticationmethod:Presharedkey
IKEv2proposal:
Cipher:3des
Authentication:sha1
DHGroup:dh24
Localpresharekey:ibm123
IKEv2chooseIPv6addressasIDtype
IKEv2informationincludes:
130
IKEv2retransmittime,inseconds.
WhetherIKEv2cookienotificationisenabled.
TheIKEv2proposalinforce.Thisincludestheencryptionalgorithm(cipher),
theauthenticationalgorithmtypeandtheDiffieHellman(DH)group,which
determinesthestrengthofthekeyusedinthekeyexchangeprocess.HigherDH
groupnumbersaremoresecurebutrequireadditionaltimetocomputethekey.
Thelocalpresharekey.
WhetherIKEv2isusingIPv4orIPv6addressesastheIDtype.
IP Security Information
ThefollowingtabledescribesthecommandsusedtodisplayinformationaboutIP
security.
Table 58. IPsecInformationCommands
showipsecdynamicpolicy[<110>]
Displaysdynamicpolicyinformation.
Commandmode:All
showipsecmanualpolicy[<110>]
Displaysmanualpolicyinformation.Seepage 132forsampleoutput.
Commandmode:All
showipsecsa
Displaysallsecurityassociationinformation.
Commandmode:All
showipsecspd
Displaysallsecuritypolicyinformation.
Commandmode:All
showipsectrafficselector[<110>]
DisplaysIPsectrafficselectorinformation.
Commandmode:All
showipsectransformset[<110>]
DisplaysIPsectransformsetinformation.
Commandmode:All
131
IPsec Manual Policy Information

ThefollowingcommanddisplaysIPsecmanualkeymanagementpolicy
information:
showipsecmanualpolicy
Commandmode:All
IPsecmanualpolicy1
IPAddress:2002:0:0:0:0:0:0:151
AssociatedtransformID:1
AssociatedtrafficselectorID:1
INESPSPI:9900
INESPencryptionKEY:3456789abcdef012
INESPauthenticationKEY:23456789abcdef0123456789abcdef0123456789
OUTESPSPI:7700
OUTESPencryptionKEY:6789abcdef012345
OUTESPauthenticationKEY:56789abcdef0123456789abcdef0123456789abc
Appliedoninterface:
interface1
IPsecmanualpolicyinformationincludes:
132
TheIPaddressoftheremotepeer
ThetransformsetIDassociatedwiththispolicy
TrafficselectorIDassociatedwiththispolicy
ESPinboundSPI
ESPinboundencryptionkey
ESPinboundauthenticationkey
ESPoutboundSPI
ESPoutboundencryptionkey
ESPoutboundauthenticationkey
Theinterfacetowhichthismanualpolicyhasbeenapplied
DHCP Snooping Binding Table Information

ThefollowingcommanddisplaystheDHCPbindingtable:
showipdhcpsnoopingbinding
Commandmode:All
MacAddressIPAddressLease(seconds)TypeVLANInterface
00:00:01:00:02:0110.0.0.11600dynamic100port1
02:1c:5f:d1:18:9c210.38.197.6386337Static1271
06:51:4d:e6:16:2d194.116.155.19086337Static1051
08:69:0f:1d:ba:3d40.90.17.2686337Static1501
08:a2:6d:00:36:5640.194.18.21386337Static1081
0e:a7:f8:a2:74:2c130.254.47.12986337Static1711
0e:b7:64:02:97:7c35.92.27.11086337Static2491
Totalnumberofbindings:7
TheDHCPSnoopingbindingtabledisplaysinformationforeachentryinthetable.
EachentryhasaMACaddress,anIPaddress,theleasetime,theinterfacetowhich
theentryappliesandtheVLANtowhichtheinterfacebelongs.
133
PIM Information
ThefollowingcommandsdisplayPIMinformation:
Table 59. PIMInformationOptions
showippimbsr[<componentID(12)>]
DisplaysinformationaboutthePIMbootstraprouter(BSR).
Commandmode:All
showippimcomponent[<componentID(12)>]
DisplaysPIMcomponentinformation.Fordetails,seepage 135.
Commandmode:All
showippimelectedrp[group<multicastgroupIPaddress>]
DisplaysalistoftheelectedRendezvousPoints.
Commandmode:All
showippiminterface[<interfacenumber>|detail|
|loopback<loopbackinterfacenumber>|port<portaliasornumber>]
DisplaysPIMinterfaceinformation.Toviewsampleoutput,seepage 135.
Commandmode:All
showippimmroute
DisplaysinformationaboutPIMmulticastroutes.Formoreinformationabout
displayingPIMmulticastrouteinformation,seepage 137.
Commandmode:All
showippimneighbor[<interfacenumber>|port<portaliasornumber>]
DisplaysPIMneighborinformation.Toviewsampleoutput,seepage 136.
Commandmode:All
showippimneighborfilters
DisplaysinformationaboutPIMneighborfilters.
Commandmode:All
showippimrpcandidate[<componentID(12)>]
DisplaysalistofthecandidateRendezvousPointsconfigured.
Commandmode:All
showippimrpset[<RPIPaddress>]
DisplaysalistoftheRendezvousPointslearned.
Commandmode:All
showippimrpstatic[<componentID(12)>]
DisplaysalistofthestaticRendezvousPointsconfigured.
Commandmode:All
134
PIM Component Information

ThefollowingcommanddisplaysProtocolIndependentMulticast(PIM)
componentinformation:
showippimcomponent[<componentID(12)>]
Commandmode:All
PIMComponentInformation
ComponentId:1
PIMMode:sparse,PIMVersion:2
ElectedBSR:0.0.0.0
CandidateRPHoldtime:0
PIMcomponentinformationincludesthefollowing:
ComponentID
Mode(sparse,dense)
PIMVersion
ElectedBootstrapRouter(BSR)address
CandidateRendezvousPoint(RP)holdtime,inseconds
PIM Interface Information

ThefollowingcommanddisplaysinformationaboutPIMinterfaces:
showippiminterface
Commandmode:All
AddressIfName/IfIdVer/ModeNbrQryDRAddressDRPrioCountInterval
40.0.0.3net4/42/Sparse13040.0.0.31
50.0.0.3net5/52/Sparse03050.0.0.31
PIMinterfaceinformationincludesthefollowingforeachPIMinterface:
IPaddress
NameandID
Versionandmode
Neighborcount
Queryinterval
DesignatedRouteraddress
DesignatedRouterpriorityvalue
135
PIM Neighbor Information

ThefollowingcommanddisplaysPIMneighborinformation:
showippimneighbor
Commandmode:All
NeighbourIfName/IdxUptime/ExpiryVerDRPri/ModeCompIdOverrideLan
AddressIntervalDelay
40.0.0.2net4/400:00:37/79v21/S100
40.0.0.4net1/16000:03:41/92v232/S200
PIMneighborinformationincludesthefollowing:
136
NeighborIPaddress,interfacenameandinterfaceID
NameandIDofinterfaceusedtoreachthePIMneighbor
Uptime(thetimesincethisneighborbecametheneighborofthelocalrouter)
ExpiryTime(theminimumtimeremainingbeforethisPIMneighborexpires)
Versionnumber
DesignatedRouterpriorityandmode
ComponentID
Overrideinterval
LANdelayinterval
PIM Multicast Route Information Commands

ThefollowingcommandsdisplayPIMMulticastRouteinformation:
Table 60. PIMMulticastRouteInformationOptions
showippimmroute
DisplaysinformationaboutallPIMmulticastroutes.
Commandmode:All
showippimmroute[<componentID(12)>]
DisplaysPIMmulticastroutesfortheselectedcomponent.
Commandmode:All
showippimmroutecount
DisplaysacountofPIMmulticastroutesofeachtype.
Commandmode:All
showippimmrouteflags[s][r][w]
DisplaysPIMmulticastroutesbasedontheselectedentryflags.Enterflagsin
anycombination:
S:ShortestPathTree(SPT)bit
R:RendezvousPointTree(RPT)bit
W:Wildcardbit
Commandmode:All
showippimmroutegroup<multicastgroupIPaddress>
DisplaysPIMmulticastroutesfortheselectedmulticastgroup.
Commandmode:All
showippimmrouteinterface{<interfacenumber>|port
<portaliasornumber>}
DisplaysPIMmulticastroutesfortheselectedincomingIPinterface.
Commandmode:All
showippimmroutesource<multicastsourceIPaddress>
DisplaysPIMmulticastroutesfortheselectedsourceIPaddress.
Commandmode:All
137
PIM Multicast Route Information

ThefollowingcommanddisplaysPIMmulticastrouteinformation:
showippimmroute
Commandmode:All
IPMulticastRoutingTable
RouteFlagsS:SPTBitW:WildCardBitR:RPTBit
Timers:Uptime/Expires
(8.8.8.111,224.2.2.100),00:42:03/00:01:11
IncomingInterface:net44,RPFnbr:44.44.44.1,RouteFlags:S
OutgoingInterfaceList:
net17,Forwarding/Sparse,00:42:03/
(*,224.2.2.100),00:45:15/,RP:88.88.88.2
IncomingInterface:net5,RPFnbr:5.5.5.2,RouteFlags:WR
OutgoingInterfaceList:
net17,Forwarding/Sparse,00:45:15/
Totalnumberof(*,G)entries:1
Totalnumberof(S,G)entries:1
138
Quality of Service Information

ThefollowingcommandsdisplayQoSinformation:
Table 61. QoSinformationOptions
showqosprotocolpacketcontrolinformationqueue
Displaysthepacketrateconfiguredforeachpacketqueue.
Commandmode:All
showqosprotocolpacketcontrolinformationprotocol
Displaysofmappingofprotocolpackettypestoeachpacketqueuenumber.
Thestatusindicateswhethertheprotocolisrunningornotrunning.
Commandmode:All
showqosrandomdetect
DisplaysWREDandECNinformation.Fordetails,seepage 141.
Commandmode:All
showqostransmitqueue
Displaysthecurrent802.1pparameters.
Commandmode:All
showqostransmitqueueinformation
Displaysall802.1pinformation.Fordetails,seepage 140.
Commandmode:All
139
802.1p Information
Thefollowingcommanddisplays802.1pinformation:
showqostransmitqueueinformation
Commandmode:All
CurrentprioritytoCOSqueueinformation:
PriorityCOSqWeight
001
101
201
301
401
501
601
714
Currentportpriorityinformation:
PortPriorityCOSqWeight
1001
2001
3001
4001
5001
6001
7001
...
48001
XGE1001
XGE2001
XGE3001
XGE4001
ThefollowingtabledescribestheIEEE802.1pprioritytoCOSqueueinformation.
Table 62. 802.1pPrioritytoCOSQueueParameterDescriptions
Parameter
Description
Priority
Displaysthe802.1pPrioritylevel.
COSq
DisplaystheClassofServicequeue.
Weight
DisplaystheschedulingweightoftheCOSqueue.
ThefollowingtabledescribestheIEEE802.1pportpriorityinformation.
Table 63. 802.1pPortPriorityParameterDescriptions
140
Parameter
Description
Port
Displaystheportalias.
Priority
Displaysthe802.1pPrioritylevel.
Table 63. 802.1pPortPriorityParameterDescriptions(continued)

Parameter
Description
COSq
DisplaystheClassofServicequeue.
Weight
Displaystheschedulingweight.
WRED and ECN Information

ThefollowingcommanddisplaysWREDandECNinformation:
showqosrandomdetect
Commandmode:All
Currentwredandecnconfiguration:
GlobalECN:Disable
GlobalWRED:Disable
WREDTcpMinThrTcpMaxThrTcpDrateNonTcpMinThrNonTcpMaxThrNonTcpDrate
TQ0:Dis000000
TQ1:Dis000000
TQ2:Dis000000
TQ3:Dis000000
TQ4:Dis000000
TQ5:Dis000000
TQ6:Dis000000
TQ7:Dis000000
141
Access Control List Information

ThefollowingcommandsdisplayAccessControlList(ACL)information:
Table 64. ACLInformationOptions
showaccesscontrolgroup[<1640>]
DisplaysACLgroupinformation.
Commandmode:All
showaccesscontrollist[<1640>]
DisplaysACLlistinformation.Fordetails,seepage 143.
Commandmode:All
showaccesscontrollist6[<1128>]
DisplaysIPv6ACLlistinformation.Fordetails,seepage 145.
Commandmode:All
showaccesscontrollog
DisplaysthecurrentACLlogparameters.
Commandmode:All
showaccesscontrolmacl[<1128>]
DisplaysthecurrentMACLparameters.
Commandmode:All
showaccesscontrolvmap[<1128>]
DisplaysVMAPinformation.
Commandmode:All
142
Access Control List Information

ThefollowingcommandsdisplayIPv4AccessControlList(ACL)information:
Table 65. IPv4AccessControlListInformationCommands
showaccesscontrollist[<1640>]
DisplaysACLlistinformation.Toviewsampleoutput,seepage 144.
Commandmode:All
showaccesscontrollist<1640>ethernet
DisplaysthecurrentEthernetparametersforthespecifiedACL.
Commandmode:All
showaccesscontrollist<1640>ipv4
DisplaysthecurrentIPv4parametersforthespecifiedACL.
Commandmode:All
showaccesscontrollist<1640>meter
DisplaysthecurrentmeteringparametersforthespecifiedACL.
Commandmode:All
showaccesscontrollist<1640>mirror
DisplaysthecurrentportmirroringparametersforthespecifiedACL.
Commandmode:All
showaccesscontrollist<1640>packetformat
DisplaysthecurrentPacketFormatparametersforthespecifiedACL.
Commandmode:All
showaccesscontrollist<1640>remark
DisplaysthecurrentremarkparametersforthespecifiedACL.
Commandmode:All
showaccesscontrollist<1640>tcpudp
DisplaysthecurrentTCP/UDPFilteringparametersforthespecifiedACL.
Commandmode:All
143
ThefollowingcommanddisplaysAccessControlList(ACL)information:
showaccesscontrollist<1640>
Commandmode:All
CurrentACLListinformation:
Filter1profile:
Ethernet
SMAC:00:00:aa:aa:01:fe/ff:ff:ff:ff:ff:ff
DMAC:00:0d:60:9c:ec:d5/ff:ff:ff:ff:ff:ff
VID:10/0xfff
Ethertype:IP(0x0800)
Priority:3
Meter
Settodisabled
Setcommittedrate:64
Setmaxburstsize:32
ReMark
SetuseofTOSprecedencetodisabled
PacketFormat
Ethernetformat:None
Taggingformat:Any
IPformat:None
Actions:Deny
Statistics:enabled
MirrorTargetConfiguration:
Mirrortargetdestination:port
Egressportformirrortarget:4
IftheACLisbeingusedwithPolicyBasedRouting(PBR),theoutputfromthis
commandismorelikethefollowing:
Filter1profile:routemap16
IPv4
Protocol:17
Actions:Permit
:dscp22
Statistics:enabled
InstalledonPort16
AccessControlList(ACL)informationincludesconfigurationsettingsforeach
ACL.
Table 66. ACLListParameterDescriptions
144
Parameter
Description
Filterx
profile
IndicatestheACLnumber.
Ethernet
DisplaystheACLEthernetheaderparameters,ifconfigured.
IPv4
DisplaystheACLIPv4headerparameters,ifconfigured.
TCP/UDP
DisplaystheACLTCP/UDPheaderparameters,ifconfigured.
Meter
DisplaystheACLmeterparameters.
Table 66. ACLListParameterDescriptions

Parameter
Description
ReMark
DisplaystheACLremarkparameters.
Packet
Format
DisplaystheACLPacketFormatparameters,ifconfigured.
Actions
DisplaystheconfiguredactionfortheACL.
Statistics
DisplaysstatusofACLstatistics(enabledordisabled).
DisplaysACLportmirroringparameters.
Mirror
Target
Configurat
ion
Filterx
profile
IndicatestheACLnumber.
Access Control IPv6 List Information

ThefollowingcommandsdisplayIPv4AccessControlList(ACL)information:
Table 67. IPv6AccessControlListInformationCommands
showaccesscontrollist6[<1128>]
DisplaysthecurrentACLparameters.
Commandmode:All
showaccesscontrollist6<1128>ipv6
DisplaysthecurrentIPv6parametersforthespecifiedACL.
Commandmode:All
showaccesscontrollist6<1128>meter
DisplayscurrentmeteringparametersforthespecifiedACL.
Commandmode:All
showaccesscontrollist6<1128>remark
DisplayscurrentremarkparametersforthespecifiedACL.
Commandmode:All
showaccesscontrollist6<1128>tcpudp
DisplaysthecurrentTCP/UDPFilteringparametersforthespecifiedACL.
Commandmode:All
145
OpenFlow Information
ThefollowingcommandsdisplayOpenFlowinformation.
Table 68. OpenFlowInformationOptions
showopenflow[flowallocation|group|information|table]
DisplaysthecurrentOpenFlowconfiguration.Formoreinformation,see
page 147.
flowallocationdisplaystheconfigured,currentandmaximum
numberofflowsforallOpenFlowinstances.Formoreinformation,see
page 149.
groupdisplaysgroupinformationforallOpenFlow1.3instances.Formore
informationdisplaystheconfigurationforallOpenFlowinstances.For
moreinformation,seepage 152.
tabledisplaysthebasicandemergencyflowtablesforallOpenFlow
instances.Formoreinformation,seepage 154.
Commandmode:All
showopenflowinstance<12>[group|information|table]
DisplaysOpenFlowinformationforthespecifiedinstanceID:
groupdisplaysgroupinformationperinstance
informationdisplaystheinstanceconfiguration
tabledisplaysthebasicandemergencyflowtablesperinstance
Commandmode:All
146
OpenFlow Global Configuration Information

ThefollowingcommanddisplaystheglobalOpenFlowconfigurationparameters
forallinstances:
showopenflow
Commandmode:All
InOpenFlow1.0:
ProtocolVersion:1.0
OpenflowState:Enabled
FDBTablePriority:1000
FDBTableFDBtimeout:Disabled
Openflowinstance1iscurrentlydisabled
OpenflowInstanceID:2
state:enabled,buffering:disabled
retry4,emergencytimeout30
echoreqinterval30,echoreplytimeout15
minflowtimeout:usecontrollerprovidedvalues.
maxflowsacl:MaximumAvailable
maxflowsunicastfdb:MaximumAvailable
maxflowsmulticastfdb:MaximumAvailable
emergencyfeature:disabled
dpid:0x0002749975ab5c00
ports:1819,24,3538
edgeports:3536
ControllerId:1
ActiveController
IPAddress:9.70.31.71,port:6633
147
InOpenFlow1.3:
ProtocolVersion:1.3.1
OpenflowState:Enabled
FDBTablePriority:1000
FDBTableFDBtimeout:Disabled
state:enabled,buffering:disabled,tablemiss:drop
echoreqinterval30,echoreplytimeout15,retry4
dpid:0x0000000000000da3
tablemisscookie:0xffffffffffffffff
mirrortocontrollercookie:0xffffffffffffffff
sendtocontrollercookie:0xffffffffffffffff
ports:12
portchannel:52,104
edgeportchannel:52,104
ControllerId:1
ActiveController
IPAddress:9.228.143.52,port:6633
state:disabled,buffering:disabled,tablemiss:drop
echoreqinterval30,echoreplytimeout15,retry4
dpid:0x0002fccf62b1b300
tablemisscookie:0xffffffffffffffff
mirrortocontrollercookie:0xffffffffffffffff
sendtocontrollercookie:0xffffffffffffffff
148
OpenFlow Flow Allocation Information

ThefollowingcommanddisplaystheOpenFlowflowallocationforallinstances:
showopenflowflowallocation
Commandmode:All
InOpenFlow1.0:
FlowAllocationInformation
Instance1
MaximumACLCountConfigured:MaximumAvailable
MaximumUnicastFDBCountConfigured:MaximumAvailable
MaximumMulticastFDBCountConfigured:MaximumAvailable
BasicEntries
CurrentACLCount:6
CurrentUnicastFDBCount:0
CurrentMulticastFDBCount:0
EmergencyEntries
CurrentACLCount:0
MaximumCurrentAvailability
MaximumAvailableACLCount:1494
MaximumAvailableUnicastFDBCount:30976
MaximumAvailableMulticastFDBCount:1024
Instance2
...
149
InOpenFlow1.3:
FlowAllocationInformation
Instance1
BasicEntries
CurrentACLCount:5
StaticEntries
CurrentstaticACLCount:0
Instance2
BasicEntries
CurrentACLCount:0
StaticEntries
CurrentstaticACLCount:0
150
OpenFlow Group Information

ThefollowingcommanddisplaystheOpenFlow1.3groupinformationforall
instances:
showopenflowgroup
Commandmode:All
OpenflowInstanceId:1
Groupcount:3
Group1,Type:ALL,Bucketcount:2
Bucket#0:output:INGRESS
Bucket#1:output:1
Bucket#0:output:INGRESS
Bucket#1:output:PCH104
151
OpenFlow Configuration Information

ThefollowingcommanddisplaystheOpenFlowconfigurationforallinstances:
showopenflowinformation
Commandmode:All
InOpenFlow1.0:
OpenflowfeatureisEnabled
State:Enabled
DataPathID:0x0002749975ab5c00
MaxRetriespercontroller:4
EchoRequestInterval:30
EchoReplyTimeout:15
EmergencyTimeout:30
Minflowtimeout:0,usecontrollerprovidedvalues.
MaxACLFlows:MaximumAvailable
MaxUnicastFDBFlows:MaximumAvailable
MaxMulticastFDBFlows:MaximumAvailable
Buffering:Disabled
OperationalMode:Normal
MissSendLen:65535
PortAliasStatusStateConfigCurrentAdvertisedSupportedPeer
1818e0x2000x20xc00x00x00x0
1919e0x2000x20xc00x00x00x0
2424d0x2010x20xc00x00x00x0
3535d0x2010x20x00x00x00x0
3636d0x2010x20x00x00x00x0
3737d0x2010x20x00x00x00x0
3838d0x2010x20x00x00x00x0
NumberofPorts:7
ConfiguredControllers:
OpenflowController1:
IPAddress:9.70.31.71
Port:6633
State:Active
RetryCount:0
152
InOpenFlow1.3:
OpenflowfeatureisEnabled
State:Enabled
DataPathID:0x0000000000000da3
Tablemisscookie:0xffffffffffffffff
Mirrortocontrollercookie:0xffffffffffffffff
Sendtocontrollercookie:0xffffffffffffffff
MaxRetriespercontroller:4
EchoRequestInterval:30
EchoReplyTimeout:15
Minflowtimeout:0,usecontrollerprovidedvalues.
MaxACLFlows:MaximumAvailable
MaxUnicastFDBFlows:MaximumAvailable
MaxMulticastFDBFlows:MaximumAvailable
Buffering:Disabled
TableMiss:Drop
OperationalMode:Normal
MissSendLen:65535
PortAliasStatusStateConfigCurrentAdvertisedSupportedPeer
11e0x00x00x28200x00x00x0
22e0x00x00x28200x00x00x0
10052PCH52e0x00x00x2c000x00x00x0
10104PCH104e0x00x00x2c000x00x00x0
NumberofPorts:2
NumberofPortchannels:2
Openflowedgeportchannel:52,104
ConfiguredControllers:
OpenflowController1:
IPAddress:9.228.143.52
Port:6633
State:Active
153
OpenFlow Table Information

Thefollowingcommanddisplaysthebasicandemergencyflowtablesforall
instances:
showopenflowtable
Commandmode:All
InOpenFlow1.0:
BASICFLOWTABLE
CONTROLLERADDEDFLOWS
Flow:1
FilterBased,priority:0,hardtimeout:0,idletimeout:0
cookie:0x0
QUALIFIERS:
ACTION:drop
STATS:packets=0,bytes=0
Flow:2
cookie:0x0
QUALIFIERS:ethertype:0x88cc
protocol:0,tos:0
srcip:0.0.0.0/32,dstip:0.0.0.0/32
srcport:0,dstport:0
ACTION:output:CONTROLLER[MaxLen:65535/bytes(C/S)]
Flow:3
cookie:0x0
QUALIFIERS:
EMERGENCYFLOWTABLE
CONTROLLERADDEDFLOWS
Flow:1
cookie:0x0
QUALIFIERS:srcmac:003333333333
ACTION:output:46
Flow:2
cookie:0x0
QUALIFIERS:srcmac:001122330855
ACTION:output:46
154
InOpenFlow1.3:
CONTROLLERaddedFLOWs
Flow1,FDBBased,priority:1000,hardtimeout:0
cookie:0x0
QUALIFIERS:ethdst:00:00:08:00:00:01,vlanvid:5
Instruction:write_action
ACTION:output:PCH52
cookie:0x0
ACTION:group:3
cookie:0x0
ACTION:output:PCH104
Flow4,FilterBased,priority:181,hardtimeout:0,idletimeout:0
cookie:0x0
QUALIFIERS:inport:1
ethdst:00:00:08:00:00:05
vlanvid:5
ACTION:group:2
cookie:0x0
QUALIFIERS:ethtype:0x88cc
cookie:0x0
QUALIFIERS:
Instruction:empty
ACTION:drop
OpenFlowtableinformationincludesdetailedconfigurationinformationforeach
entryintheflowtable.
Note: Flowqualifiersusedformatchingpacketsarenotlistedinthedisplayifthe
qualifierissettoany.
155
RMON Information Commands

ThefollowingtabledescribestheRemoteMonitoring(RMON)Information
commands.
Table 69. RMONInformationOptions
showrmon
DisplaysallRMONinformation.
Commandmode:All
showrmonalarm[<165535>]
DisplaysRMONAlarminformation.Fordetails,seepage 158.
Commandmode:All
showrmonevent[<165535>]
DisplaysRMONEventinformation.Fordetails,seepage 159.
Commandmode:All
showrmonhistory[<165535>]
DisplaysRMONHistoryinformation.Fordetails,seepage 157.
Commandmode:All
156
RMON History Information

ThefollowingcommanddisplaysRMONHistoryinformation:
showrmonhistory
Commandmode:All
RMONHistorygroupconfiguration:
IndexIFOIDIntervalRbnumGbnum
11.3.6.1.2.1.2.2.1.1.243055
21.3.6.1.2.1.2.2.1.1.223055
31.3.6.1.2.1.2.2.1.1.203055
41.3.6.1.2.1.2.2.1.1.193055
51.3.6.1.2.1.2.2.1.1.24180055
IndexOwner
1dan
ThefollowingtabledescribestheRMONHistoryInformationparameters.
Table 70. RMONHistoryParameterDescriptions
Parameter
Description
Index
Displaystheindexnumberthatidentifieseachhistoryinstance.
IFOID
DisplaystheMIBObjectIdentifier.
Interval
Displaysthetimeintervalforeachsamplingbucket.
Rbnum
Displaysthenumberofrequestedbuckets,whichisthenumberof
dataslotsintowhichdataistobesaved.
Gbnum
Displaysthenumberofgrantedbucketsthatmayholdsampled
data.
Owner
Displaystheownerofthehistoryinstance.
157
RMON Alarm Information

ThefollowingcommanddisplaysRMONalarminformation:
showrmonalarm
Commandmode:All
RMONAlarmgroupconfiguration:
IndexIntervalSampleTyperLimitfLimitlastvalue
11800abseither007822
IndexrEvtIdxfEvtIdxOID
1001.3.6.1.2.1.2.2.1.10.1
IndexOwner
1dan
ThefollowingtabledescribestheRMONAlarmInformationparameters.
Table 71. RMONAlarmParameterDescriptions
Parameter
Description
Index
Displaystheindexnumberthatidentifieseachalarminstance.
Interval
Displaysthetimeintervaloverwhichdataissampledand
comparedwiththerisingandfallingthresholds.
Sample
Displaysthemethodofsamplingtheselectedvariableand
calculatingthevaluetobecomparedagainstthethresholds,as
follows:
Type
158
absabsolutevalue,thevalueoftheselectedvariableis
compareddirectlywiththethresholdsattheendofthe
samplinginterval.
deltadeltavalue,thevalueoftheselectedvariableatthelast
sampleissubtractedfromthecurrentvalue,andthedifference
comparedwiththethresholds.
Displaysthetypeofalarm,asfollows:
fallingalarmistriggeredwhenafallingthresholdis
crossed.
risingalarmistriggeredwhenarisingthresholdiscrossed.
eitheralarmistriggeredwheneitherarisingorfalling
thresholdiscrossed.
rLimit
Displaystherisingthresholdforthesampledstatistic.
fLimit
Displaysthefallingthresholdforthesampledstatistic.
Lastvalue
Displaysthelastsampledvalue.
Table 71. RMONAlarmParameterDescriptions(continued)

Parameter
Description
rEvtIdx
Displaystherisingalarmeventindexthatistriggeredwhenarising
thresholdiscrossed.
fEvtIdx
Displaysthefallingalarmeventindexthatistriggeredwhena
fallingthresholdiscrossed.
OID
DisplaystheMIBObjectIdentifierforeachalarmindex.
Owner
Displaystheownerofthealarminstance.
RMON Event Information

ThefollowingcommanddisplaysRMONeventinformation:
showrmonevent
Commandmode:All
RMONEventgroupconfiguration:
IndexTypeLastSentDescription
1both0D:0H:1M:20SEvent_1
2none0D:0H:0M:0SEvent_2
3log0D:0H:0M:0SEvent_3
4trap0D:0H:0M:0SEvent_4
5both0D:0H:0M:0SLogandtrapeventforLinkDown
10both0D:0H:0M:0SLogandtrapeventforLinkUp
11both0D:0H:0M:0SSendlogandtrapforicmpInMsg
15both0D:0H:0M:0SSendlogandtrapforicmpInEchos
IndexOwner
1dan
ThefollowingtabledescribestheRMONEventInformationparameters.
Table 72. RMONEventParameterDescriptions
Parameter
Description
Index
Displaystheindexnumberthatidentifieseacheventinstance.
Type
Displaysthetypeofnotificationprovidedforthisevent,as
follows:none,log,traporboth.
Lastsent
Displaysthetimethatpassedsincethelastswitchreboot,when
themostrecenteventwastriggered.Thisvalueisclearedwhen
theswitchreboots.
Description
Displaysatextdescriptionoftheevent.
Owner
Displaystheownerofthealarminstance.
159
Link Status Information

Thefollowingcommanddisplayslinkinformation:
showinterfacestatus[<portaliasornumber>]
Commandmode:All
AliasPortSpeedDuplexFlowCtrlLinkDescription
TXRX
11anyautononodown1
22100fullnonoup2
33anyautononodown3
44anyautononodown4
55anyautononodown5
66anyautononodown6
77anyautononodown7
88anyautononodown8
99anyautononodown9
1010anyautononodown10
...
XGE1491G/10GfullnonodownXGE1
UsethiscommandtodisplaylinkstatusinformationabouteachportontheG8052,
including:
160
Portaliasorportnumber
Portdescription
PortspeedandDuplexmode(half,fullorany)
Flowcontrolfortransmitandreceive(no,yesorboth)
Linkstatus(up,downordisabled)
Port Information
Thefollowingcommanddisplaysportinformation:
showinterfacetrunk<portaliasornumber>
Commandmode:All
AliasPortTagRMONLrnFldOpenflowPVIDDESCRIPTIONVLAN(s)
TrkNVLAN
11ndeed40944094
22ndeed11
33ndeed11
44ndeed11
55ndeed11
66ndeed11
77ndeed11
88ndeed11
99ndeed11
1010ndeed11
...
4747ndeed11
4848ndeed11
XGE149ndeed11
XGE250ndeed11
XGE351ndeed11
XGE452ndeed11
*=PVID/NativeVLANistagged.
#=PVIDisingresstagged.
Trk=Trunkmode
NVLAN=NativeVLAN
Portinformationincludes:
Portaliasornumber
WhethertheportusesVLANtaggingornot(yorn)
WhethertheporthasRemoteMonitoring(RMON)enabled
WhethertheporthasFDBlearningenabled(Lrn)
WhethertheporthasPortFloodingenabled(Fld)
WhethertheporthasOpenFlowenabled(Openflow)
WhethertheportusesingressVLANtaggingornot(#)
WhethertheportusesPVID/NativeVLANtaggingornot(*)
PortVLANID(PVID)
Portdescription
VLANmembership
161
Port Transceiver Status

Thefollowingcommanddisplaysthestatusofthetransceivermoduleoneach
port:
showinterfacetransceiver
Commandmode:All
PortLinkTransceiverVendorPartApprove
XGE1xge1LINKPasDAC1.0mBLADENETWORKBNQSSPCBL1MAccepted
XGE2xge2LINKPasDAC3.0mBLADENETWORKBNSPCBL3MApproved
XGE3xge3LINKSR_SFP+850nmBLADENETWORKBNCKMSPSRApproved
XGE4xge4LINKSR_SFP+850nmBLADENETWORKBNCKMSPSRApproved
Thiscommanddisplaysinformationaboutthetransceivermoduleoneachport,as
follows:
162
Portnumberandalias
Portstatus
Media/Transceivertype(LX,LR,SX,SR,DAC,PasDAC)andlaserwavelength,
innanometers
Vendorname
Partnumber
Approvalstatus
Usethefollowingcommandtodisplayextendedtransceiverinformation:
showinterfaceport<portaliasornumber>transceiverdetails
Commandmode:All
PortTXLinkTXFltVoltsDegsCTXuWRXuWTransceiverApprove
XGE1xge1EnaLINKN/AN/AN/AN/AN/APasQD1.0mApproved
BLADENETWORKPart:BNQSQSCBL1MDate:110925S/N:3548Y350VT19P8EM
163
VM Ready Information
ThefollowingcommanddisplayinformationaboutVirtualMachines(VMs).
Table 73. VirtualMachinesInformationOptions
showvirt
Displaysthecurrentvirtualizationparameters.
Commandmode:All
showvirtoui
DisplaysalltheconfiguredMACOUIs.
Commandmode:All
showvirtport<portaliasornumber>
DisplaysVirtualMachineinformationfortheselectedport.
Commandmode:All
showvirtportchannel<1104>
DisplaysVirtualMachineinformationfortheselectedportchannel.
Commandmode:All
showvirtvm[v][r]
DisplaysallVirtualMachineinformation.
vdisplaysverboseinformation
rrescansdatacenter
Commandmode:All
showvirtvmcheck
DisplaysthecurrentVMChecksettings.
Commandmode:All
showvirtvmgroup[<11024>]
DisplaysthecurrentVMGroupparameters.
Commandmode:All
showvirtvmpolicyvmbandwidth
[<MACaddress>|<UUID>|<name>|<IPaddress>|<indexnumber>]
DisplaysthecurrentVMbandwidthmanagementparameters.
Commandmode:All
164
Table 73. VirtualMachinesInformationOptions

showvirtvmprofile[<profilename>]
DisplaysthecurrentVMProfileparameters.
Commandmode:All
showvirtvmware
DisplaysthecurrentVMwareparameters.
Commandmode:All
VM Information
ThefollowingcommanddisplaysVMinformation:
showvirtvm
Commandmode:All
IPAddressVMACAddressIndexPortVMGroup(Profile)CheckStatus
*127.31.46.5000:50:56:4e:62:f543
*127.31.46.1000:50:56:4f:f2:8524
+127.31.46.5100:50:56:72:ec:8613
+127.31.46.1100:50:56:7c:1c:ca34
127.31.46.2500:50:56:9c:00:c854
127.31.46.1500:50:56:9c:21:2f04
127.31.46.3500:50:56:9c:29:2963
Numberofentries:7
*indicatesVMwareESXServiceConsoleInterface
+indicatesVMwareESX/ESXiVMKernelorManagementInterface
VMinformationincludesthefollowingforeachVirtualMachine(VM):
StateoftheVirtualMachine(~indicatestheVMisinactive/idle)
IPaddress
MACaddress
IndexnumberassignedtotheVM
ServerportonwhichtheVMwasdetected
VMgroupthatcontainstheVM,ifapplicable
VMCheckstatusforthecorrespondingVM
165
VM Check Information
ThefollowingcommanddisplaysVMCheckinformation:
showvirtvmcheck
Commandmode:All
ActiontotakeforspoofedVMs:
Basic:Operdisablethelink
Advanced:InstallACLtodroptraffic
Maximumnumberofaclsthatcanbeusedformacspoofing:50
Trustedportsbyconfiguration:empty
VMware Information
UsethesecommandstodisplayinformationaboutVirtualMachines(VMs)and
VMwarehostsinthedatacenter.Thesecommandsrequirethepresenceofa
configuredVirtualCenter.
Table 74. VMwareInformationOptions
showvirtvmwarehello
DisplaysVirtualMachinehellosettings.
Commandmode:All
showvirtvmwarehosts
DisplaysalistofVMwarehosts.
Commandmode:All
showvirtvmwareshowhost{<hostUUID>|<hostIPaddress>|<hostname>}
DisplaysdetailedinformationaboutaspecificVMwarehost.
Commandmode:All
showvirtvmwareshowvm{<VMUUID>|<VMIPaddress>|<VMname>}
DisplaysdetailedinformationaboutaspecificVirtualMachine(VM).
Commandmode:All
showvirtvmwareswitchportmapping
DisplaysESXServerswitchportmapping.
Commandmode:All
showvirtvmwarevms
DisplaystheUUIDsandthenamesofallVMwareVMs.
Commandmode:All
166
VMware Host Information

ThefollowingcommanddisplaysVMhostinformation:
showvirtvmwarehosts
Commandmode:All
UUIDName(s),IPAddress
80a42681d0e55910a0bfbd23bd3f7803127.12.41.30
3c2e063c153cdd118b32a78dd1909a69127.12.46.10
64f1fe30143cdd1184f2a8ba2cd7ae40127.12.44.50
c818938e143cdd119f7ad8defa4b83bf127.12.46.20
fc719af0093cdd1195beb0adac1bcf86127.12.46.30
009a581a143cdd11be4cc9fb65ff04ec127.12.46.40
VMhostinformationincludesthefollowing:
UUIDassociatedwiththeVMwarehost.
NameorIPaddressoftheVMwarehost.
167
EVB Information
ThefollowingcommandsdisplayEdgeVirtualBridge(EVB)VirtualStation
Interface(VDP)discoveryandconfigurationinformation.
Table 75. EVBInformationOptions
showvirtevbprofile
DisplaysallEVBprofileparameters.
Commandmode:All
showvirtevbprofile<profilenumber>[ports]
DisplaystheselectedEVBprofileparameters.Itcanincludeports.
Commandmode:All
showvirtevbprofileports
DisplaysallEVBprofileparametersincludingports.
Commandmode:All
showvirtevbvdptlv
DisplaysallactiveVirtualStationInterface(VSI)DiscoveryandConfiguration
Protocol(VDP)typelengthvalues(TLVs).
Commandmode:All
showvirtevbvdpvm
DisplaysallassociatedVirtualMachines(VMs).
Commandmode:All
showvirtevbvsidb<VSIdatabasenumber(1)>
DisplaysVirtualStationInterfacedatabaseinformation.
Commandmode:All
showvirtevbvsitypes[mgrid<0255>|typeid<116777215>|
|version<0255>]
DisplaysthecurrentVirtualStationInterfaceTypedatabaseparameters.
Commandmode:All
168
Information Dump
Thefollowingcommanddumpsswitchinformation:
showinformationdump
Commandmode:All
Usethedumpcommandtodumpallswitchinformationavailable(10Kormore,
dependingonyourconfiguration).Thisdataisusefulfortuninganddebugging
switchperformance.
Ifyouwanttocapturedumpdatatoafile,setyourcommunicationsoftwareon
yourworkstationtocapturesessiondatapriortoissuingthedumpcommands.
169
170
Chapter 3. Statistics Commands

YoucanusetheStatisticsCommandstoviewswitchperformancestatisticsinboth
theuserandadministratorcommandmodes.Thischapterdiscusseshowtousethe
commandlineinterfacetodisplayswitchstatistics.
Table 76. StatisticsCommands
showcounters
Dumpsallswitchstatistics.Usethiscommandtogatherdatafortuningand
debuggingswitchperformance.Ifyouwanttocapturedumpdatatoafile,set
yourcommunicationsoftwareonyourworkstationtocapturesessiondata
priortoissuingthedumpcommand.Fordetails,seepage 283.
Commandmode:All
showlayer3counters
DisplaysLayer3statistics.
Commandmode:All
showntpcounters
DisplaysNetworkTimeProtocol(NTP)Statistics.Seepage 281forasample
outputandadescriptionofNTPStatistics.
Commandmode:All
showsnmpservercounters
DisplaysSNMPstatistics.Seepage 277forsampleoutput.
Commandmode:All
clearcpu
ClearsallCPUutilizationstatistics.
clearcounters
Clearsallstatisticsforallinterfaces.
clearinterfaceport<portaliasornumber>counters
Clearsallstatisticsforthespecifiedport.
Commandmode:All
clearmpcounters
ClearsallMPrelatedstatistics.
171
Port Statistics
Thesecommandsdisplaytrafficstatisticsonaportbyportbasis.Trafficstatistics
includeSNMPManagementInformationBase(MIB)objects.
Table 77. PortStatisticsCommands
showinterfaceport<portaliasornumber>bitrateusage
Displaysthetrafficrateinkilobitspersecond.
Commandmode:All
showinterfaceport<portaliasornumber>bridgingcounters
Displaysbridging(dot1)statisticsfortheport.Seepage 180forsample
output.
Commandmode:All
showinterfaceport<portaliasornumber>bridgingrate
Displayspersecondbridging(dot1)statisticsfortheport.
Commandmode:All
showinterfaceport<portaliasornumber>dot1xcounters
DisplaysIEEE802.1Xstatisticsfortheport.Seepage 175forsampleoutput.
Commandmode:All
showinterfaceport<portaliasornumber>egressqueuecounters
[<queuenumber(07)>|drop]
Displaysthetotalnumberofpacketsandbyteseithersuccessfullytransmitted
ordroppedforeachqueueofthespecifiedports.
queuenumberfilterstheoutputtothespecifiedqueuenumber
droplistsonlythequeueswithdroppedtraffic(nonzerocountersfor
droppedpackets/bytescounters)
Seepage 191forsampleoutput.
Commandmode:All
showinterfaceport<portaliasornumber>egressqueuerate
[<queuenumber(07)>|drop]
Displaysthenumberofpacketsandbytespersecondeithersuccessfully
transmittedordroppedforeachqueueofthespecifiedports.
queuenumberfilterstheoutputtothespecifiedqueuenumber
droplistsonlythequeueswithdroppedtraffic(nonzeroratesfordropped
packets/bytes)
Seepage 192forsampleoutput.
Commandmode:All
172
Table 77. PortStatisticsCommands(continued)

showinterfaceport<portaliasornumber>ethernetcounters
DisplaysEthernet(dot3)statisticsfortheport.Seepage 181forsample
output.
Commandmode:All
showinterfaceport<portaliasornumber>ethernetrate
DisplayspersecondEthernet(dot3)statisticsfortheport.
Commandmode:All
showinterfaceport<portaliasornumber>interfacecounters
Displaysinterfacestatisticsfortheport.Seepage 184forsampleoutput.
Commandmode:All
showinterfaceport<portaliasornumber>interfacerate
Displayspersecondinterfacestatisticsfortheport.
Commandmode:All
showinterfaceport<portaliasornumber>ipcounters
DisplaysIPstatisticsfortheport.Seepage 187forsampleoutput.
Commandmode:All
showinterfaceport<portaliasornumber>iprate
DisplayspersecondIPstatisticsfortheport.
Commandmode:All
showinterfaceport<portaliasornumber>linkcounters
Displayslinkstatisticsfortheport.Seepage 187forsampleoutput.
Commandmode:All
showinterfaceport<portaliasornumber>oamcounters
DisplaysOperation,Administrative,andMaintenance(OAM)protocol
statisticsfortheport.
Commandmode:All
showinterfaceport<portaliasornumber>rmoncounters
DisplaysRemoteMonitoring(RMON)statisticsfortheport.Seepage 188for
sampleoutput.
Commandmode:All
showipbootprelaycountersinterface<portaliasornumber>
DisplaysBOOTPrelaystatisticsfortheport.Seepage 179forsampleoutput.
Commandmode:All
clearcounters
Clearsstatisticsforallports.
Chapter 3: Statistics Commands
173
Table 77. PortStatisticsCommands(continued)

clearinterfaces
Clearscountersforallinterfacesandqueues.
clearinterfaceport<portaliasornumber>counters
Clearsallstatisticsfortheport.
clearinterfaceport<portaliasornumber>egressqueuecounter
ClearsallQoSegresscountersforthespecifiedportsforallqueues.
clearipbootprelaycounters[interface<portaliasornumber>]
ClearsBOOTPrelaystatisticsforaspecificportsorallports.
174
802.1X Authenticator Statistics

Usethefollowingcommandtodisplaythe802.1Xauthenticatorstatisticsofthe
selectedport:
Commandmode:All
AuthenticatorStatistics:
eapolFramesRx=925
eapolFramesTx=3201
eapolStartFramesRx=2
eapolLogoffFramesRx=0
eapolRespIdFramesRx=463
eapolRespFramesRx=460
eapolReqIdFramesTx=1820
eapolReqFramesTx=1381
invalidEapolFramesRx=0
eapLengthErrorFramesRx=0
lastEapolFrameVersion=1
lastEapolFrameSource=00:01:02:45:ac:51
Thefollowingtabledescribesthe802.1Xauthenticatorstatistics.
Table 78. 802.1XAuthenticatorStatisticsofaPort
Statistics
Description
eapolFramesRx
TotalnumberofEAPOLframesreceived
eapolFramesTx
TotalnumberofEAPOLframestransmitted
eapolStartFramesRx
TotalnumberofEAPOLStartframesreceived
eapolLogoffFramesRx
TotalnumberofEAPOLLogoffframesreceived
eapolRespIdFramesRx
TotalnumberofEAPOLResponseIdentityframes
received
eapolRespFramesRx
TotalnumberofResponseframesreceived
eapolReqIdFramesTx
TotalnumberofRequestIdentityframes
transmitted
eapolReqFramesTx
TotalnumberofRequestframestransmitted
invalidEapolFramesRx
TotalnumberofinvalidEAPOLframesreceived
eapLengthErrorFramesRx
TotalnumberofEAPlengtherrorframesreceived
lastEapolFrameVersion
Theprotocolversionnumbercarriedinthemost
recentlyreceivedEAPOLframe.
lastEapolFrameSource
ThesourceMACaddresscarriedinthemost
recentlyreceivedEAPOLframe.
175
802.1X Authenticator Diagnostics

Usethefollowingcommandtodisplaythe802.1Xauthenticatordiagnosticsofthe
selectedport:
Commandmode:All
AuthenticatorDiagnostics:
authEntersConnecting=1820
authEapLogoffsWhileConnecting=0
authEntersAuthenticating=463
authSuccessesWhileAuthenticating=5
authTimeoutsWhileAuthenticating=0
authFailWhileAuthenticating=458
authReauthsWhileAuthenticating=0
authEapStartsWhileAuthenticating=0
authEapLogoffWhileAuthenticating=0
authReauthsWhileAuthenticated=3
authEapStartsWhileAuthenticated=0
authEapLogoffWhileAuthenticated=0
backendResponses=923
backendAccessChallenges=460
backendOtherRequestsToSupplicant=460
backendNonNakResponsesFromSupplicant=460
backendAuthSuccesses=5
backendAuthFails=458
Thefollowingtabledescribesthe802.1Xauthenticatordiagnosticsstatistics.
Table 79. 802.1XAuthenticatorDiagnosticsofaPort
176
Statistics
Description
authEntersConnecting
Totalnumberoftimesthatthestate
machinetransitionstotheCONNECTING
statefromanyotherstate.
authEapLogoffsWhileConnecting
machinetransitionsfromCONNECTING
toDISCONNECTEDasaresultof
receivinganEAPOLLogoffmessage.
authEntersAuthenticating
machinetransitionsfromCONNECTING
toAUTHENTICATING,asaresultofan
EAPResponse/Identitymessagebeing
receivedfromtheSupplicant.
authSuccessesWhileAuthenticating
machinetransitionsfrom
AUTHENTICATINGto
AUTHENTICATED,asaresultofthe
BackendAuthenticationstatemachine
indicatingsuccessfulauthenticationofthe
Supplicant.
Table 79. 802.1XAuthenticatorDiagnosticsofaPort(continued)

Statistics
Description
authTimeoutsWhileAuthenticating
AUTHENTICATINGtoABORTING,asa
resultoftheBackendAuthenticationstate
machineindicatingauthenticationtimeout.
authFailWhileAuthenticating
AUTHENTICATINGtoHELD,asaresult
oftheBackendAuthenticationstate
machineindicatingauthenticationfailure.
authReauthsWhileAuthenticating
resultofareauthenticationrequest
authEapStartsWhileAuthenticating
resultofanEAPOLStartmessagebeing
authEapLogoffWhileAuthenticating Totalnumberoftimesthatthestate
resultofanEAPOLLogoffmessagebeing
authReauthsWhileAuthenticated
AUTHENTICATEDtoCONNECTING,as
aresultofareauthenticationrequest.
authEapStartsWhileAuthenticated
AUTHENTICATEDtoCONNECTING,as
aresultofanEAPOLStartmessagebeing
authEapLogoffWhileAuthenticated
AUTHENTICATEDtoDISCONNECTED,
asaresultofanEAPOLLogoffmessage
beingreceivedfromtheSupplicant.
backendResponses
machinesendsaninitialAccessRequest
packettotheAuthenticationserver.
IndicatesthattheAuthenticatorattempted
communicationwiththeAuthentication
Server.
177
Table 79. 802.1XAuthenticatorDiagnosticsofaPort(continued)
178
Statistics
Description
backendAccessChallenges
machinereceivesaninitial
AccessChallengepacketfromthe
Authenticationserver.Indicatesthatthe
AuthenticationServerhascommunication
withtheAuthenticator.
backendOtherRequests
ToSupplicant
machinesendsanEAPRequestpacket
(otherthananIdentity,Notification,
Failure,orSuccessmessage)tothe
Supplicant.Indicatesthatthe
AuthenticatorchoseanEAPmethod.
backendNonNakResponses
FromSupplicant
machinereceivesaresponsefromthe
SupplicanttoaninitialEAPRequest,and
theresponseissomethingotherthan
EAPNAK.IndicatesthattheSupplicant
canrespondtotheAuthenticator.schosen
EAPmethod.
backendAuthSuccesses
machinereceivesanAcceptmessagefrom
theAuthenticationServer.Indicatesthat
theSupplicanthassuccessfully
authenticatedtotheAuthenticationServer.
backendAuthFails
machinereceivesaRejectmessagefromthe
AuthenticationServer.Indicatesthatthe
Supplicanthasnotauthenticatedtothe
AuthenticationServer.
BootStrap Protocol Relay Statistics

UsethefollowingcommandtodisplaytheBOOTPRelaystatisticsoftheselected
port:
showipbootprelaycountersinterface<portaliasornumber>
Commandmode:All
BOOTPRelaystatisticsforport1:
Requestsreceivedfromclient:0
Requestsrelayedtoserver:0
Requestsrelayedwithoption82:0
Requestsdroppeddueto...
relaynotallowed:0
noserverorunreachableserver:0
packetorprocessingerrors:0
Repliesreceivedfromserver:0
Repliesrelayedtoclient:0
Repliesdroppeddueto...
packetorprocessingerrors:0
179
Bridging Statistics
Usethefollowingcommandtodisplaythebridgingstatisticsoftheselectedport:
showinterfaceport<portaliasornumber>bridgingcounters
Commandmode:All
Bridgingstatisticsforport1:
dot1PortInFrames:63242584
dot1PortOutFrames:63277826
dot1PortInDiscards:0
dot1TpLearnedEntryDiscards:0
dot1StpPortForwardTransitions:0
Thefollowingtabledescribesthebridgingstatistics.
Table 80. BridgingStatisticsofaPort
180
Statistics
Description
dot1PortInFrames
Thenumberofframesthathavebeenreceivedbythis
portfromitssegment.Aframereceivedontheinterface
correspondingtothisportisonlycountedbythisobject
ifandonlyifitisforaprotocolbeingprocessedbythe
localbridgingfunction,includingbridgemanagement
frames.
dot1PortOutFrames
Thenumberofframesthathavebeentransmittedby
thisporttoitssegment.Notethataframetransmitted
ontheinterfacecorrespondingtothisportisonly
countedbythisobjectifandonlyifitisforaprotocol
beingprocessedbythelocalbridgingfunction,
includingbridgemanagementframes.
dot1PortInDiscards
Countofvalidframesreceivedwhichwerediscarded
(thatis,filtered)bytheForwardingProcess.
dot1TpLearnedEntry
Discards
ThetotalnumberofForwardingDatabaseentries,
whichhavebeenorwouldhavebeenlearnt,buthave
beendiscardedduetoalackofspacetostorethemin
theForwardingDatabase.Ifthiscounterisincreasing,it
indicatesthattheForwardingDatabaseisregularly
becomingfull(aconditionwhichhasunpleasant
performanceeffectsonthesubnetwork).Ifthiscounter
hasasignificantvaluebutisnotpresentlyincreasing,it
indicatesthattheproblemhasbeenoccurringbutisnot
persistent.
dot1StpPortForward
Transitions
Thenumberoftimesthisporthastransitionedfromthe
LearningstatetotheForwardingstate.
Ethernet Statistics
Usethefollowingcommandtodisplaytheethernetstatisticsoftheselectedport:
showinterfaceport<portaliasornumber>ethernetcounters
Commandmode:All
Ethernetstatisticsforport1:
dot3StatsAlignmentErrors:0
dot3StatsFCSErrors:0
dot3StatsSingleCollisionFrames:0
dot3StatsMultipleCollisionFrames:0
dot3StatsLateCollisions:0
dot3StatsExcessiveCollisions:0
dot3StatsInternalMacTransmitErrors:NA
dot3StatsFrameTooLongs:0
dot3StatsInternalMacReceiveErrors:0
Thefollowingtabledescribestheethernetstatistics.
Table 81. EthernetStatisticsofaPort
Statistics
Description
dot3StatsAlignmentErrors Acountofframesreceivedonaparticularinterface
thatarenotanintegralnumberofoctetsinlength
anddonotpasstheFrameCheckSequence(FCS)
check.
Thecountrepresentedbyaninstanceofthisobjectis
incrementedwhenthealignmentErrorstatusis
returnedbytheMACservicetotheLogicalLink
Control(LLC)(orotherMACuser).Receivedframes
forwhichmultipleerrorconditionsobtainedare,
accordingtotheconventionsofIEEE802.3Layer
Management,countedexclusivelyaccordingtothe
errorstatuspresentedtotheLLC.
dot3StatsFCSErrors
Acountofframesreceivedonaparticularinterface
thatareanintegralnumberofoctetsinlengthbutdo
notpasstheFrameCheckSequence(FCS)check.
incrementedwhentheframeCheckErrorstatusis
returnedbytheMACservicetotheLLC(orother
MACuser).Receivedframesforwhichmultiple
errorconditionsobtainedare,accordingtothe
conventionsofIEEE802.3LayerManagement,
countedexclusivelyaccordingtotheerrorstatus
presentedtotheLLC.
181
Table 81. EthernetStatisticsofaPort(continued)

Statistics
Description
dot3StatsSingleCollision
Frames
Acountofsuccessfullytransmittedframesona
particularinterfaceforwhichtransmissionis
inhibitedbyexactlyonecollision.
Aframethatiscountedbyaninstanceofthisobject
isalsocountedbythecorrespondinginstanceof
eithertheifOutUcastPkts,
ifOutMulticastPkts,or
ifOutBroadcastPkts,andisnotcountedbythe
correspondinginstanceofthe
dot3StatsMultipleCollisionFrameobject.
dot3StatsMultipleCollision Acountofsuccessfullytransmittedframesona
Frames
particularinterfaceforwhichtransmissionis
inhibitedbymorethanonecollision.
Aframethatiscountedbyaninstanceofthisobject
isalsocountedbythecorrespondinginstanceof
eithertheifOutUcastPkts,
ifOutMulticastPkts,or
ifOutBroadcastPkts,andisnotcountedbythe
correspondinginstanceofthe
dot3StatsSingleCollisionFramesobject.
dot3StatsLateCollisions
Thenumberoftimesthatacollisionisdetectedona
particularinterfacelaterthan512bittimesintothe
transmissionofapacket.
Fivehundredandtwelvebittimescorrespondsto
51.2microsecondsona10Mbit/ssystem.A(late)
collisionincludedinacountrepresentedbyan
instanceofthisobjectisalsoconsideredasa
(generic)collisionforpurposesofother
collisionrelatedstatistics.
dot3StatsExcessive
Collisions
Acountofframesforwhichtransmissionona
particularinterfacefailsduetoexcessivecollisions.
dot3StatsInternalMac
TransmitErrors
Acountofframesforwhichtransmissionona
particularinterfacefailsduetoaninternalMACsub
layertransmiterror.Aframeisonlycountedbyan
instanceofthisobjectifitisnotcountedbythe
correspondinginstanceofeitherthe
dot3StatsLateCollisionsobject,the
dot3StatsExcessiveCollisionsobject,orthe
dot3StatsCarrierSenseErrorsobject.
Theprecisemeaningofthecountrepresentedbyan
instanceofthisobjectisimplementationspecific.In
particular,aninstanceofthisobjectmayrepresenta
countoftransmissionerrorsonaparticularinterface
thatarenototherwisecounted.
182
Table 81. EthernetStatisticsofaPort(continued)

Statistics
Description
dot3StatsFrameTooLongs
Acountofframesreceivedonaparticularinterface
thatexceedthemaximumpermittedframesize.
incrementedwhentheframeTooLongstatusis
returnedbytheMACservicetotheLLC(orother
MACuser).Receivedframesforwhichmultiple
errorconditionsobtainedare,accordingtothe
conventionsofIEEE802.3LayerManagement,
countedexclusivelyaccordingtotheerrorstatus
presentedtotheLLC.
dot3StatsInternalMac
ReceiveErrors
Acountofframesforwhichreceptionona
particularinterfacefailsduetoaninternalMACsub
layerreceiveerror.Aframeisonlycountedbyan
instanceofthisobjectifitisnotcountedbythe
correspondinginstanceofeitherthe
dot3StatsFrameTooLongsobject,the
dot3StatsAlignmentErrorsobject,orthe
dot3StatsFCSErrorsobject.
Theprecisemeaningofthecountrepresentedbyan
instanceofthisobjectisimplementationspecific.In
particular,aninstanceofthisobjectmayrepresenta
countofreceivederrorsonaparticularinterfacethat
arenototherwisecounted.
183
Interface Statistics
Usethefollowingcommandtodisplaytheinterfacestatisticsoftheselectedport:
showinterfaceport<portaliasornumber>interfacecounters
Commandmode:All
Interfacestatisticsforport1:
ifHCInCountersifHCOutCounters
Octets:5169708031351721056808
UcastPkts:6535639965385714
BroadcastPkts:06516
MulticastPkts:00
FlowCtrlPkts:00
PriFlowCtrlPkts:00
Discards:00
Errors:021187
IngressDiscardreasons:EgressDiscardreasons:
VLANDiscards:0HOLblockingDiscards:0
FilterDiscards:0MMUDiscards:0
PolicyDiscards:0CellErrorDiscards:0
NonForwardingState:0MMUAgingDiscards:0
IBP/CBPDiscards:0OtherDiscards:0
EmptyEgressPortmap:3085*
*Checkfor"HOLblocking"discardsonassociatedegressports
Thefollowingtabledescribestheinterfacestatistics.
Table 82. InterfaceStatisticsofaPort
184
Statistics
Description
ifInOctets
Thetotalnumberofoctetsreceivedontheinterface,
includingframingcharacters.
ifInUcastPkts
Thenumberofpackets,deliveredbythissublayertoa
highersublayer,whichwerenotaddressedtoa
multicastorbroadcastaddressatthissublayer.
ifInBroadcastPkts
Thenumberofpackets,deliveredbythissublayertoa
highersublayer,whichwereaddressedtoabroadcast
addressatthissublayer.
ifInMulticastPkts
Thetotalnumberofpacketsthathigherlevelprotocols
requestedtobetransmitted,andwhichwereaddressed
toamulticastaddressatthissublayer,includingthose
thatwerediscardedornotsent.ForaMAClayer
protocol,thisincludesbothGroupandFunctional
addresses.
ifInFlowControlPkts
Thetotalnumberofflowcontrolpausepackets
receivedontheinterface.
Table 82. InterfaceStatisticsofaPort(continued)

Statistics
Description
ifInPriFlowControlPkts Thetotalnumberofpriorityflowcontrolpausepackets
receivedontheinterface.
ifInDiscards
Thenumberofinboundpacketswhichwerechosento
bediscardedeventhoughnoerrorshadbeendetectedto
preventtheirbeingdeliveredtoahigherlayerprotocol.
Onepossiblereasonfordiscardingsuchapacketcould
betofreeupbufferspace.
ifInErrors
Forpacketorientedinterfaces,thenumberofinbound
packetsthatcontainederrorspreventingthemfrom
beingdeliveredtoahigherlayerprotocol.For
characterorientedorfixedlengthinterfaces,the
numberofinboundtransmissionunitsthatcontained
errorspreventingthemfrombeingdeliverabletoa
higherlayerprotocol.
ifOutOctets
Thetotalnumberofoctetstransmittedoutofthe
interface,includingframingcharacters.
ifOutUcastPkts
requestedtobetransmitted,andwhichwerenot
addressedtoamulticastorbroadcastaddressatthis
sublayer,includingthosethatwerediscardedornot
sent.
ifOutBroadcastPkts
toabroadcastaddressatthissublayer,includingthose
thatwerediscardedornotsent.Thisobjectisa64bit
versionofifOutBroadcastPkts.
ifOutMulticastPkts
toamulticastaddressatthissublayer,includingthose
thatwerediscardedornotsent.ForaMAClayer
protocol,thisincludesbothGroupandFunctional
addresses.Thisobjectisa64bitversionof
ifOutMulticastPkts.
ifOutFlowControlPkts
Thetotalnumberofflowcontrolpausepackets
transmittedoutoftheinterface.
ifOutDiscards
Thenumberofoutboundpacketswhichwerechosento
bediscardedeventhoughnoerrorshadbeendetectedto
preventtheirbeingtransmitted.Onepossiblereasonfor
discardingsuchapacketcouldbetofreeupbuffer
space.
185
Table 82. InterfaceStatisticsofaPort(continued)

Statistics
Description
ifOutErrors
Forpacketorientedinterfaces,thenumberofoutbound
packetsthatcouldnotbetransmittedbecauseoferrors.
Forcharacterorientedorfixedlengthinterfaces,the
numberofoutboundtransmissionunitsthatcouldnot
betransmittedbecauseoferrors.
VLANDiscards
DiscardedbecausethepacketwastaggedwithaVLAN
towhichthisportisnotamember.
FilterDiscards
DroppedbytheContentAwareEngine(userconfigured
filter).
PolicyDiscards
Droppedduetopolicysetting.Forexample,duetoa
userconfiguredstaticentry.
NonForwardingState
Discardedbecausetheingressportisnotinthe
forwardingstate.
IBP/CBPDiscards
DiscardedbecauseofIngressBackPressure(flow
control),orbecausetheCommonBufferPoolisfull(for
example,insufficientpacketbuffering).
HOLblockingDis
DiscardedbecauseoftheHeadOfLine(HOL)blocking
cards
mechanism.Lowprioritypacketsareplacedinasepa
ratequeueandcanbediscardedwhileapplicationsor
theTCPprotocoldeterminewhetheraretransmissionis
necessary.HOLblockingforcestransmissiontostop
untiltheoverloadedegressportbuffercanreceivedata
again.
MMUDiscards
DiscardedbecauseoftheMemoryManagementUnit.
CellErrorDiscards
MMUAgingDiscards
OtherDiscards
186
Discardedpacketsnotincludedinanycategory.
Interface Protocol Statistics

Usethefollowingcommandtodisplaytheinterfaceprotocolstatisticsofthe
selectedport:
showinterfaceport<portaliasornumber>ipcounters
Commandmode:All
GEAIPstatisticsforport1:
ipInReceives:0
ipInHeaderError:0
ipInDiscards:0
Thefollowingtabledescribestheinterfaceprotocolstatistics.
Table 83. InterfaceProtocolStatisticsofaPort
Statistics
Description
ipInReceives
Thetotalnumberofinputdatagramsreceivedfrom
interfaces,includingthosereceivedinerror.
ipInHeaderErrors
ThenumberofinputdatagramsdiscardedbecausetheIP
addressintheirIPheadersdestinationfieldwasnota
validaddresstobereceivedatthisentity(theswitch).
ipInDiscards
ThenumberofinputIPdatagramsforwhichnoproblems
wereencounteredtopreventtheircontinuedprocessing,
butwhichwerediscarded(forexample,forlackofbuffer
space).Notethatthiscounterdoesnotincludeany
datagramsdiscardedwhileawaitingreassembly.
Link Statistics
Usethefollowingcommandtodisplaythelinkstatisticsoftheselectedport:
showinterfaceport<portaliasornumber>linkcounters
Commandmode:All
Linkstatisticsforport1:
linkStateChange:1
Thefollowingtabledescribesthelinkstatistics.
Table 84. LinkStatisticsofaPort
Statistics
Description
linkStateChange
Thetotalnumberoflinkstatechanges.
187
RMON Statistics
UsethefollowingcommandtodisplaytheRemoteMonitoring(RMON)statistics
oftheselectedport:
showinterfaceport<portaliasornumber>rmoncounters
Commandmode:All
RMONstatisticsforport1:
etherStatsDropEvents:NA
etherStatsOctets:538
etherStatsPkts:4
etherStatsBroadcastPkts:1
etherStatsMulticastPkts:3
etherStatsCRCAlignErrors:0
etherStatsUndersizePkts:0
etherStatsOversizePkts:0
etherStatsFragments:0
etherStatsJabbers:0
etherStatsCollisions:0
etherStatsPkts64Octets:3
etherStatsPkts65to127Octets:0
ThefollowingtabledescribestheRMONstatistics.
Table 85. RMONStatisticsofaPort
188
Statistics
Description
etherStatsDropEvents
Thetotalnumberofpacketsreceivedthatwere
droppedbecauseofsystemresource
constraints.
etherStatsOctets
Thetotalnumberofoctetsofdata(including
thoseinbadpackets)receivedonthenetwork
(excludingframingbitsbutincludingFCS
octets).
etherStatsPkts
Thetotalnumberofpackets(includingbad
packets,broadcastpackets,andmulticast
packets)received.
etherStatsBroadcastPkts
Thetotalnumberofgoodpacketsreceivedthat
weredirectedtothebroadcastaddress.
etherStatsMulticastPkts
Thetotalnumberofgoodpacketsreceivedthat
weredirectedtoamulticastaddress.
Table 85. RMONStatisticsofaPort(continued)
Statistics
Description
etherStatsCRCAlignErrors
Thetotalnumberofpacketsreceivedthathad
alength(excludingframingbits,butincluding
FCSoctets)ofbetween64and1518octets,
inclusive,buthadeitherabadFrameCheck
Sequence(FCS)withanintegralnumberof
octets(FCSError)orabadFCSwitha
nonintegralnumberofoctets(Alignment
Error).
etherStatsUndersizePkts
lessthan64octetslong(excludingframingbits
butincludingFCSoctets)andwereotherwise
wellformed.
etherStatsOversizePkts
longerthan1518octets(excludingframingbits
butincludingFCSoctets)andwereotherwise
wellformed.
etherStatsFragments
lessthan64octetsinlength(excludingframing
bitsbutincludingFCSoctets)andhadeithera
badFrameCheckSequence(FCS)withan
integralnumberofoctets(FCSError)orabad
FCSwithanonintegralnumberofoctets
(AlignmentError).
etherStatsJabbers
longerthan1518octets(excludingframing
bits,butincludingFCSoctets),andhadeither
abadFrameCheckSequence(FCS)withan
integralnumberofoctets(FCSError)orabad
FCSwithanonintegralnumberofoctets
(AlignmentError).Jabberisdefinedasthe
conditionwhereanypacketexceeds20ms.
Theallowedrangetodetectjabberisbetween
20msand150ms.
etherStatsCollisions
Thebestestimateofthetotalnumberof
collisionsonthisEthernetsegment.
etherStatsPkts64Octets
packets)receivedthatwerelessthanorequal
to64octetsinlength(excludingframingbits
butincludingFCSoctets).
etherStatsPkts65to127Octets
packets)receivedthatweregreaterthan64
octetsinlength(excludingframingbitsbut
includingFCSoctets).
189
Table 85. RMONStatisticsofaPort(continued)
190
Statistics
Description
etherStatsPkts512to1023
Octets
etherStatsPkts1024to1518
Octets
QoS Queue Counter-Based Statistics

UsethefollowingcommandtodisplaythecounterbasedQoSqueuestatisticsof
theselectedport:
showinterfaceport<portaliasornumber>egressqueuecounters
Commandmode:All
QoSstatisticsforport1:
QoSQueue0:
TxPackets:31
DroppedPackets:0
TxBytes:10444
DroppedBytes:0
QoSQueue1:
TxPackets:0
DroppedPackets:0
TxBytes:0
DroppedBytes:0
QoSQueue2:
TxPackets:0
DroppedPackets:0
TxBytes:0
DroppedBytes:0
QoSQueue3:
TxPackets:0
DroppedPackets:0
TxBytes:0
DroppedBytes:0
...
QoSQueue7:
TxPackets:900
DroppedPackets:0
TxBytes:64320
DroppedBytes:0
ThefollowingtabledescribesthecounterbasedQoSqueuestatistics.
Table 86. QoSQueueCounterBasedStatisticsofaPort
Statistics
Description
TxPackets
Totalnumberofsuccessfullytransmitted
packetsfortheQoSqueue
DroppedPackets
TotalnumberofdroppedpacketsfortheQoS
queue
TxBytes
Totalnumberofsuccessfullytransmittedbytes
fortheQoSqueue
DroppedBytes
TotalnumberofdroppedbytesfortheQoS
queue
191
QoS Queue Rate-Based Statistics

UsethefollowingcommandtodisplaytheratebasedQoSqueuestatisticsofthe
selectedport:
showinterfaceport<portaliasornumber>egressqueuerate
Commandmode:All
QoSRateforport1:
QoSQueue0:
TxPackets:5
DroppedPackets:0
TxBytes:363
DroppedBytes:0
QoSQueue1:
TxPackets:0
DroppedPackets:0
TxBytes:0
DroppedBytes:0
QoSQueue2:
TxPackets:0
DroppedPackets:0
TxBytes:0
DroppedBytes:0
QoSQueue3:
TxPackets:0
DroppedPackets:0
TxBytes:0
DroppedBytes:0
...
QoSQueue7:
TxPackets:0
DroppedPackets:0
TxBytes:0
DroppedBytes:0
ThefollowingtabledescribestheratebasedQoSqueuestatistics.
Table 87. QoSQueueRateBasedStatisticsofaPort
192
Statistics
Description
TxPackets
Numberofsuccessfullytransmittedpackets
persecondfortheQoSqueue
DroppedPackets
Numberofdroppedpacketspersecondforthe
QoSqueue
TxBytes
Numberofsuccessfullytransmittedbytesper
secondfortheQoSqueue
DroppedBytes
Numberofdroppedbytespersecondforthe
QoSqueue
Trunk Group Statistics

ThefollowingcommandsdisplayTrunkGroupstatistics:
Table 88. TrunkGroupStatisticsCommands
showinterfaceportchannel<1104>
interfacecounters
Displaysinterfacestatisticsforthetrunkgroup.
Commandmode:All
clearinterfaceportchannel<1104>counters
Clearsallthestatisticsontheselectedtrunkgroup.
193
Layer 2 Statistics
ThefollowingcommandsdisplayLayer2statistics:
Table 89. Layer2StatisticsCommands
showhotlinkscounters
DisplaysHotLinksstatistics.Seepage 198forsampleoutput.
Commandmode:All
showinterfaceport<portaliasornumber>lacpcounters
DisplaysLinkAggregationControlProtocol(LACP)statistics.Seepage 197
forsampleoutput.
Commandmode:All
showinterfaceport<portaliasornumber>lldpcounters
DisplaysLLDPstatistics.Seepage 199forsampleoutput.
Commandmode:All
showmacaddresstablecounters
DisplaysFDBstatistics.Seepage 196forsampleoutput.
Commandmode:All
showmacaddresstablecountersall
DisplaysallFDBstatisticsforallFDBentries.
Commandmode:All
showmacaddresstablecountersinterfaceport
<portaliasornumber>
DisplaysFDBstatisticsforaparticularport.
Commandmode:All
showmacaddresstablecountersportchannel <1104>
DisplaysallFDBstatisticsforaparticulartrunkgroup(portchannel).
Commandmode:All
showmacaddresstablecountersstate{unknown|forward|
|trunk}
DisplaysallFDBstatisticsforaparticularstate.
Commandmode:All
showmacaddresstablecountersstatic
DisplaysallFDBstatisticsforallstaticFDBentries.
Commandmode:All
194

showmacaddresstablecountersunicast
DisplaysallFDBstatisticsforallUnicastFDBentries.
Commandmode:All
showmacaddresstablecountersvlan <VLANID(14094)>
DisplaysallFDBstatisticsonasingleVLAN.
Commandmode:All
showoamcounters
DisplaysOAMstatistics.Seepage 200forsampleoutput.
Commandmode:All
showvlagstatistics
DisplaysallvLAGstatistics.Seepage 201forsampleoutput.
Commandmode:All
clearhotlinks
ClearsallHotLinksstatistics.
clearinterfaceport<portaliasornumber>lacpcounters
ClearsLinkAggregationControlProtocol(LACP)statistics.
clearinterfaceport<portaliasornumber>lldpcounters
ClearsLinkLayerDetectionProtocol(LLDP)statisticsforthespecifiedport.
clearmacaddresstablecounters
ClearsFDBstatistics.
clearvlagstatistics
ClearsallvLAGstatistics.
195
FDB Statistics
Usethefollowingcommandtodisplaystatisticsregardingtheuseofthe
forwardingdatabase,includingthenumberofnewentries,finds,andunsuccessful
searches:
showmacaddresstablecounters
Commandmode:All
FDBstatistics:
current:83hiwat:855
FDBstatisticsaredescribedinthefollowingtable:
Table 90. ForwardingDatabaseStatistics
196
Statistic
Description
current
CurrentnumberofentriesintheForwardingDatabase.
hiwat
Highestnumberofentriesrecordedatanygiventimein
theForwardingDatabase.
LACP Statistics
UsethefollowingcommandtodisplayLinkAggregationControlProtocol(LACP)
statistics:
showinterfaceport<portaliasornumber>lacpcounters
Commandmode:All
Port1:
ValidLACPDUsreceived:870
ValidMarkerPDUsreceived:0
ValidMarkerRspPDUsreceived:0
Unknownversion/TLVtype:0
Illegalsubtypereceived:0
LACPDUstransmitted:6031
MarkerPDUstransmitted:0
MarkerRspPDUstransmitted:0
LinkAggregationControlProtocol(LACP)statisticsaredescribedinthefollowing
table:
Table 91. LACPStatistics
Statistic
Description
ValidLACPDUs
received
TotalnumberofvalidLACPdataunitsreceived.
ValidMarkerPDUs
received
TotalnumberofvalidLACPmarkerdataunitsreceived.
ValidMarkerRsp
PDUsreceived
TotalnumberofvalidLACPmarkerresponsedataunits
received.
Unknown
version/TLVtype
TotalnumberofLACPdataunitswithanunknown
versionortype,length,andvalue(TLV)received.
Illegalsubtype
received
TotalnumberofLACPdataunitswithanillegalsubtype
received.
LACPDUs
transmitted
TotalnumberofLACPdataunitstransmitted.
MarkerPDUs
transmitted
TotalnumberofLACPmarkerdataunitstransmitted.
MarkerRspPDUs
transmitted
TotalnumberofLACPmarkerresponsedataunits
transmitted.
197
Hotlinks Statistics
UsethefollowingcommandtodisplayHotLinksstatistics:
showhotlinkscounters
Commandmode:All
HotLinksTriggerStats:
Trigger1statistics:
TriggerName:Trigger1
Masteractive:0
Backupactive:0
FDBupdate:0failed:0
ThefollowingtabledescribestheHotlinksstatistics:
Table 92. HotlinksStatistics
198
Statistic
Description
Masteractive
TotalnumberoftimestheMasterinterfacetransitionedtothe
Activestate.
Backupactive
TotalnumberoftimestheBackupinterfacetransitionedtothe
Activestate.
FDBupdate
TotalnumberofFDBupdaterequestssent.
failed
TotalnumberofFDBupdaterequeststhatfailed.
LLDP Port Statistics

UsethefollowingcommandtodisplayLLDPstatistics:
showinterfaceport<portaliasornumber>lldpcounters
Commandmode:All
LLDPPort1Statistics
FramesTransmitted:0
FramesReceived:0
FramesReceivedinErrors:0
FramesDiscarded:0
TLVsUnrecognized:0
NeighborsAgedOut:0
...
ThefollowingtabledescribestheLLDPportstatistics:
Table 93. LLDPportStatistics
Statistic
Description
Frames
Transmitted
TotalnumberofLLDPframestransmitted.
FramesReceived
TotalnumberofLLDPframesreceived.
FramesReceived TotalnumberofLLDPframesthathaderrors.
inErrors
Frames
Discarded
TotalnumberofLLDPframesdiscarded.
TLVs
Unrecognized
TotalnumberofunrecognizedTLV(Type,Length,and
Value)fieldsreceived.
NeighborsAged
Out
Totalnumberofneighbordevicesthathavehadtheir
LLDPinformationagedout.
199
OAM Statistics
UsethefollowingcommandtodisplayOAMstatistics:
showoamcounters
Commandmode:All
OAMstatisticsonport1
InformationOAMPDUTx:0
InformationOAMPDURx:0
UnsupportedOAMPDUTx:0
UnsupportedOAMPDUTx:0
Localfaults
0Linkfaultrecords
0Criticalevents
0Dyinggasps
Remotefaults
0Linkfaultrecords
0Criticalevents
0Dyinggasps
OAMstatisticsincludethefollowing:
200
TotalnumberofOAMProtocolDataUnits(OAMPDU)transmittedand
received.
TotalnumberofunsupportedOAMProtocolDataUnits(OAMPDU)
transmittedandreceived.
Localfaultsdetected.
Remotefaultsdetected.
vLAG Statistics
ThefollowingtabledescribesthevLAGstatisticscommands:
Table 94. vLAGStatisticsOptions
showvlagstatistics
DisplaysallvLAGstatistics.Seepage 201forsampleoutput.
Commandmode:All
showvlagislstatistics
DisplaysvLAGISLstatisticsfortheselectedport.Seepage 202forsample
output.
Commandmode:All
clearvlagstatistics
ClearsallvLAGstatistics.
UsethefollowingcommandtodisplayvLAGstatistics:
showvlagstatistics
Commandmode:All
vLAGPDUsent:
RoleElection:10SystemInfo:7
PeerInstanceEnable:624PeerInstanceDisable:52
FDBDynamicAdd:166079FDBDynamicDel:33856
FDBInactiveAdd:0FDBInactiveDel:0
HealthCheck:4665ISLHello:2126
Other:0Unknown:0
vLAGPDUreceived:
RoleElection:11SystemInfo:6
PeerInstanceEnable:572PeerInstanceDisable:52
FDBDynamicAdd:122523FDBDynamicDel:38991
FDBInactiveAdd:7200FDBInactiveDel:0
HealthCheck:4656ISLHello:2114
Other:0Unknown:0
vLAGIGMPpacketsforwarded:
IGMPReports:0
IGMPLeaves:0
201
ThefollowingtabledescribesthevLAGstatistics:
Table 95. VLAGStatistics
Statistic
Description
RoleElection
TotalnumberofvLAGPDUssent/receivedforrole
elections.
SystemInfo
TotalnumberofvLAGPDUssent/receivedforgetting
systeminformation.
PeerInstance
Enable
TotalnumberofvLAGPDUssent/receivedforenabling
peerinstance.
PeerInstance
Disable
TotalnumberofvLAGPDUssent/receivedfordisabling
peerinstance.
FDBDynamicAdd
TotalnumberofvLAGPDUssent/receivedforaddition
ofFDBdynamicentry.
FDBDynamicDel
TotalnumberofvLAGPDUssent/receivedfordeletion
ofFDBdynamicentry.
FDBInactiveAdd
TotalnumberofvLAGPDUssent/receivedforaddition
ofFDBinactiveentry.
FDBInactiveDel
TotalnumberofvLAGPDUssent/receivedfordeletion
ofFDBinactiveentry.
HealthCheck
TotalnumberofvLAGPDUssent/receivedforhealth
checks.
ISLHello
TotalnumberofvLAGPDUssent/receivedforISL
hello.
Other
TotalnumberofvLAGPDUssent/receivedforother
reasons.
Unknown
TotalnumberofvLAGPDUssent/receivedforunknown
operations.
vLAG ISL Statistics

UsethefollowingcommandtodisplayvLAGstatistics:
showvlagislstatistics
Commandmode:All
InCounterOutCounter
Octets:27558202288
Packets:2104426
ISLstatisticsincludethetotalnumberofoctetsreceived/transmitted,andthetotal
numberofpacketsreceived/transmittedovertheInterSwitchLink(ISL).
202
Layer 3 Statistics
ThefollowingcommandsdisplayLayer3statistics:
show[ip]arpcounters
DisplaysAddressResolutionProtocol(ARP)statistics.Seepage 217for
sampleoutput.
Commandmode:All
showiparpinspectionstatistics[vlan<VLANID(14094)>]
DisplaysDynamicARPInspectionstatistics.Seepage 217forsampleoutput.
Commandmode:All
showipcounters
DisplaysInternetProtocol(IP)statistics.Seepage 208forsampleoutput.
Commandmode:All
showipv6counters
DisplaysInternetProtocolversion6(IPv6)statistics.Seepage 210forsample
output.
Commandmode:All
showipdhcpsnoopingcounters
DisplaysDynamicHostControlProtocol(DHCP)Snoopingstatistics.
Commandmode:All
showipdnscounters
DisplaysDomainNameSystem(DNS)statistics.Seepage 218forsample
output.
Commandmode:All
showipgea[bucket<IPaddress>|ecmp<IPaddress><IPnetmask>]
DisplaysGigabitEthernetAggregators(GEA)statistics.GEAstatisticsare
usedbyserviceandsupportpersonnel.
Commandmode:All
showipicmpcounters
DisplaysInternetControlMessageProtocol(ICMP)statistics.Seepage 219for
sampleoutput.
Commandmode:All
showipigmpcounters
DisplaysInternetGroupManagementProtocol(IGMP)statistics.Seepage 224
forsampleoutput.
Commandmode:All
203
Table 96. Layer3StatisticsCommands(continued)

showipigmpport<portaliasornumber>counter
DisplaysportIGMPstatistics.
Commandmode:All
showipigmpvlan<VLANID(14094)>counter
DisplaysIGMPstatisticsforaspecificVLAN.Seepage 224forsampleoutput.
Commandmode:All
showipv6mldcounters
DisplaysMLDstatistics.Seepage 227forsampleoutput.
Commandmode:All
showipv6neighborscounters
DisplaysIPv6NeighborCachestatistics.
Commandmode:All
showipospfcounters
DisplaysOpenShortestPathFirst(OSPF)statistics.Seepage 230forsample
output.
Commandmode:All
showipv6ospfcounters
DisplaysOpenShortestPathFirstversion3(OSPFv3)statistics.Seepage 235
forsampleoutput.
Commandmode:All
showippimcounters
DisplaysProtocolIndependentMulticast(PIM)statisticsforallconfigured
PIMinterfaces.Seepage 240forsampleoutput.
Commandmode:All
showippiminterface{<interfacenumber>|loopback|port
<portaliasornumber>}counters
DisplaysPIMstatisticsfortheselectedinterface.
Commandmode:All
showippimmroutecount
Displaysstatisticsofvariousmulticastentrytypes.
Commandmode:All
showippolicystatistics
Displaysstatisticsforthecurrentroutingpolicy.
Commandmode:All
204

showipripcounters
DisplaysRoutingInformationProtocol(RIP)statistics.Seepage 241for
sampleoutput.
Commandmode:All
showiproutecounters
DisplaysIPv4routestatistics.Seepage 215forsampleoutput.
Commandmode:All
showipv6routecounters
DisplaysIPv6routestatistics.Seepage 216forsampleoutput.
Commandmode:All
showipslpcounters
DisplaysServiceLocationProtocol(SLP)statistics.
Commandmode:All
showiptcpcounters
DisplaysTransmissionControlProtocol(TCP)statistics.Seepage 221for
sampleoutput.
Commandmode:All
showipudpcounters
DisplaysUserDatagramProtocol(UDP)statistics.Seepage 223forsample
output.
Commandmode:All
showipvrrpcounters
Whenvirtualroutersareconfigured,youcandisplaytheprotocolstatisticsfor
VirtualRouterRedundancyProtocol(VRRP).Seepage 239forsampleoutput.
Commandmode:All
showlayer3counters
DumpsallLayer3statistics.Usethiscommandtogatherdatafortuningand
debuggingswitchperformance.Ifyouwanttocapturedumpdatatoafile,set
yourcommunicationsoftwareonyourworkstationtocapturesessiondata
priortoissuingthedumpcommand.
Commandmode:All
cleariparpcounters
ClearsAddressResolutionProtocol(ARP)statistics.
cleariparpinspectionstatistics[vlan<VLANID(14094)>]
ClearsDynamicARPInspectionstatistics.
205

clearipcounters
ClearsIPv4statistics.UsethiscommandwithcautionasitdeletesalltheIPv4
statistics.
clearipv6counters
ClearsIPv6statistics.UsethiscommandwithcautionasitdeletesalltheIPv6
statistics.
clearipdhcpsnoopingcounters
ClearsDHCPSnoopingstatistics.
clearipdnscounters
ClearsDomainNameSystem(DNS)statistics.
clearipicmpcounters
ClearsInternetControlMessageProtocol(ICMP)statistics.
clearipigmp[<VLANID(14094)>]counters
ClearsallIGMPstatistics.ThevlanoptionclearsIGMPstatisticsonlyfora
specificVLAN.
clearipv6mldcounters
ClearsMLDstatistics.
clearipv6neighborscounters
ClearsallIPv6NeighborCachestatisticsfromswitchmemory.
clearipospfcounters
ClearsOpenShortestPathFirst(OSPF)statistics.
clearipv6ospfcounters
ClearsOpenShortestPathFirstversion3(OSPFv3)statistics.
clearippimcounters
ClearsPIMstatisticsforallinterfaces.
206

clearippiminterface{<interfacenumber>|port<portaliasornumber>}
counters
ClearsPIMstatisticsontheselectedinterface.
clearipripcounters
ClearsRoutingInformationProtocol(RIP)statistics.
cleariproutecounters
ClearsIPv4routestatistics.
Commandmode:PrivlegedEXEC
clearipv6routecounters
ClearsIPv6routestatistics.
clearipslpcounters
ClearsSLPstatistics.
cleariptcpcounters
ClearsTransmissionControlProtocol(TCP)statistics.
clearipudpcounters
ClearsUserDatagramProtocol(UDP)statistics.
clearipvrrpcounters
ClearsVRRPstatistics.
207
IPv4 Statistics
ThefollowingcommanddisplaysIPv4statistics:
showipcounters
Commandmode:All
IPstatistics:
ipInReceives:0ipInHdrErrors:0
ipInAddrErrors:0
ipInUnknownProtos:0ipInDiscards:0
ipInDelivers:0ipOutRequests:1274
ipOutDiscards:0
ipDefaultTTL:255
UsethefollowingcommandtoclearIPv4statistics:
clearipcounters
Table 97. IPv4Statistics
Statistics
Description
ipInReceives
Thetotalnumberofinputdatagramsreceivedfrom
interfaces,includingthosereceivedinerror.
ipInHdrErrors
Thenumberofinputdatagramsdiscardedduetoerrorsin
theirIPheaders,includingbadchecksums,version
numbermismatch,otherformaterrors,timetolive
exceeded,errorsdiscoveredinprocessingtheirIPoptions,
andsoforth.
ipInAddrErrors
ThenumberofinputdatagramsdiscardedbecausetheIP
addressintheirIPheadersdestinationfieldwasnota
validaddresstobereceivedatthisentity(theswitch).This
countincludesinvalidaddresses(forexample,0.0.0.0)and
addressesofunsupportedClasses(forexample,ClassE).
ForentitieswhicharenotIPGatewaysandthereforedo
notforwarddatagrams,thiscounterincludesdatagrams
discardedbecausethedestinationaddresswasnotalocal
address.
ipInUnknownProtos Thenumberoflocallyaddresseddatagramsreceived
successfullybutdiscardedbecauseofanunknownor
unsupportedprotocol.
208
ipInDiscards
ThenumberofinputIPdatagramsforwhichnoproblems
wereencounteredtopreventtheircontinuedprocessing,
butwhichwerediscarded(forexample,forlackofbuffer
space).Notethatthiscounterdoesnotincludeany
datagramsdiscardedwhileawaitingreassembly.
ipInDelivers
Thetotalnumberofinputdatagramssuccessfully
deliveredtoIPuserprotocols(includingICMP).
Table 97. IPv4Statistics(continued)
Statistics
Description
ipOutRequests
ThetotalnumberofIPdatagramswhichlocalIP
userprotocols(includingICMP)suppliedtoIPinrequests
fortransmission.Notethatthiscounterdoesnotinclude
anydatagramscountedinipForwDatagrams.
ipOutDiscards
ThenumberofoutputIPdatagramsforwhichnoproblem
wasencounteredtopreventtheirtransmissiontotheir
destination,butwhichwerediscarded(forexample,for
lackofbufferspace).Notethatthiscounterwouldinclude
datagramscountedinipForwDatagramsifanysuch
packetsmetthis(discretionary)discardcriterion.
ipDefaultTTL
ThedefaultvalueinsertedintotheTimeToLive(TTL)
fieldoftheIPheaderofdatagramsoriginatedatthisentity
(theswitch),wheneveraTTLvalueisnotsuppliedbythe
transportlayerprotocol.
209
IPv6 Statistics
ThefollowingcommanddisplaysIPv6statistics:
showipv6counters
Commandmode:All
IPv6Statistics
***************
144Rcvd0HdrErrors0TooBigErrors
0AddrErrors0FwdDgrams0UnknownProtos
0Discards144Delivers130OutRequests
0OutDiscards0OutNoRoutes0ReasmReqds
0ReasmOKs0ReasmFails
0FragOKs0FragFails0FragCreates
7RcvdMCastPkt2SentMcastPkts0TruncatedPkts
0RcvdRedirects0SentRedirects
ICMPStatistics
***************
Received:
33ICMPPkts0ICMPErrPkt0DestUnreach0TimeExcds
0ParmProbs0PktTooBigMsg9ICMPEchoReq10ICMPEchoReps
0RouterSols0RouterAdv5NeighSols9NeighAdv
0Redirects0AdminProhib0ICMPBadCode
Sent:
19ICMPMsgs0ICMPErrMsgs0DstUnReach0TimeExcds
0ParmProbs0PktTooBigs10EchoReq9EchoReply
0RouterSols0RouterAdv11NeighSols5NeighborAdv
0RedirectMsgs0AdminProhibMsgs
UDPstatistics
**************
Received:
0UDPDgrams0UDPNoPorts0UDPErrPkts
Sent:
0UDPDgrams
UsethefollowingcommandtoclearIPv6statistics:
clearipv6counters
ThefollowingtabledescribestheIPv6statistics.
Table 98. IPv6Statistics
210
Statistic
Description
Rcvd
Numberofdatagramsreceivedfrominterfaces,including
thosereceivedinerror.
HdrErrors
NumberofdatagramsdiscardedduetoerrorsintheirIP
headers,includingbadchecksums,versionnumber
mismatch,otherformaterrors,timetoliveexceeded,errors
discoveredinprocessingtheirIPoptions,andsoforth.
TooBigErrors
Thenumberofinputdatagramsthatcouldnotbeforwarded
becausetheirsizeexceededthelinkMTUofoutgoing
interface.
Statistic
Description
AddrErrors
NumberofdatagramsdiscardedbecausetheIPaddressin
theirIPheadersdestinationfieldwasnotavalidaddressto
bereceivedatthisentity(theswitch).Thiscountincludes
invalidaddresses.ForentitieswhicharenotIPGateways
andthereforedonotforwarddatagrams,thiscounter
includesdatagramsdiscardedbecausethedestination
addresswasnotalocaladdress.
FwdDgrams
Numberofinputdatagramsforwhichthisentity(the
switch)wasnottheirfinalIPdestination,asaresultofwhich
anattemptwasmadetofindaroutetoforwardthemtothat
finaldestination.InentitieswhichdonotactasIPGateways,
thiscounterwillincludeonlythosepackets,whichwere
SourceRoutedviathisentity(theswitch),andtheSource
Routeoptionprocessingwassuccessful.
UnknownProtos
Numberoflocallyaddresseddatagramsreceived
successfullybutdiscardedbecauseofanunknownor
unsupportedprotocol.
Discards
NumberofIPdatagramsforwhichnoproblemswere
encounteredtopreventtheircontinuedprocessing,but
whichwerediscarded(forexample,forlackofbufferspace).
Notethatthiscounterdoesnotincludeanydatagrams
discardedwhileawaitingreassembly.
Delivers
NumberofdatagramssuccessfullydeliveredtoIP
userprotocols(includingICMP).
OutRequests
NumberofIPdatagramswhichlocalIPuserprotocols
(includingICMP)suppliedtoIPinrequestsfor
transmission.
OutDiscards
NumberofoutputIPdatagramsforwhichnoproblemwas
encounteredtopreventtheirtransmissiontotheir
destination,butwhichwerediscarded(forexample,forlack
ofbufferspace).
OutNoRoutes
NumberofIPdatagramsdiscardedbecausenoroutecould
befoundtotransmitthemtotheirdestination.Notethatthis
includesanydatagramswhichahostcannotroutebecause
allofitsdefaultgatewaysaredown.
ReasmReqds
NumberofIPfragmentsreceivedwhichneededtobe
reassembledatthisentity(theswitch).
ReasmOKs
NumberofIPdatagramssuccessfullyreassembled.
ReasmFails
NumberoffailuresdetectedbytheIPreassembly
algorithm(forwhateverreason:timedout,errors,andso
forth).Notethatthisisnotnecessarilyacountofdiscarded
IPfragmentssincesomealgorithms(notablythealgorithm
inRFC815)canlosetrackofthenumberoffragmentsby
combiningthemastheyarereceived.
211

Statistic
Description
FragOKs
NumberofIPdatagramsthathavebeensuccessfully
fragmentedatthisentity(theswitch).
FragFails
NumberofIPdatagramsthathavebeendiscardedbecause
theyneededtobefragmentedatthisentity(theswitch)but
couldnotbe,forexample,becausetheirDon'tFragment
flagwasset.
FragCreates
NumberofIPdatagramfragmentsthathavebeengenerated
asaresultoffragmentationatthisentity(theswitch).
RcvdMCastPkt
Thenumberofmulticastpacketsreceivedbytheinterface.
SentMcastPkts
Thenumberofmulticastpacketstransmittedbythe
interface.
TruncatedPkts
Thenumberofinputdatagramsdiscardedbecause
datagramframedidntcarryenoughdata.
RcvdRedirects
ThenumberofRedirectmessagesreceivedbytheinterface.
SentRedirects
ThenumberofRedirectmessagessent.
ThefollowingtabledescribestheIPv6ICMPstatistics.
Table 99. ICMPStatistics
Statistic
Description
Received
212
ICMPPkts
NumberofICMPmessageswhichtheentity(theswitch)
received.
ICMPErrPkt
NumberofICMPmessageswhichtheentity(theswitch)
receivedbutdeterminedashavingICMPspecificerrors
(badICMPchecksums,badlength,andsoforth).
DestUnreach
NumberofICMPDestinationUnreachablemessages
received.
TimeExcds
NumberofICMPTimeExceededmessagesreceived.
ParmProbs
NumberofICMPParameterProblemmessagesreceived.
PktTooBigMsg
ThenumberofICMPPacketTooBigmessagesreceivedby
theinterface.
ICMPEchoReq
NumberofICMPEcho(request)messagesreceived.
ICMPEchoReps
NumberofICMPEchoReplymessagesreceived.
RouterSols
NumberofRouterSolicitationmessagesreceivedbytheswitch.
RouterAdv
NumberofRouterAdvertisementsreceivedbytheswitch.
NeighSols
NumberofNeighborSolicitationsreceivedbytheswitch.
NeighAdv
NumberofNeighborAdvertisementsreceivedbythe
switch.

Statistic
Description
Redirects
NumberofICMPRedirectmessagesreceived.
AdminProhib
ThenumberofICMPdestinationunreachable/communication
administrativelyprohibitedmessagesreceivedbytheinterface.
ICMPBadCode
ThenumberofICMPParameterProblemmessagesreceived
bytheinterface.
Sent
ICMPMsgs
NumberofICMPmessageswhichthisentity(theswitch)
attemptedtosend.
ICMPErrMsgs
NumberofICMPmessageswhichthisentity(theswitch)
didnotsendduetoproblemsdiscoveredwithinICMPsuch
asalackofbuffer.Thisvalueshouldnotincludeerrors
discoveredoutsidetheICMPlayersuchastheinabilityofIP
toroutetheresultantdatagram.Insomeimplementations
theremaybenotypesoferrorsthatcontributetothis
countersvalue.
DstUnReach
NumberofICMPDestinationUnreachablemessagessent.
TimeExcds
NumberofICMPTimeExceededmessagessent.
ParmProbs
NumberofICMPParameterProblemmessagessent.
PktTooBigs
ThenumberofICMPPacketTooBigmessagessentbythe
interface.
EchoReq
NumberofICMPEcho(request)messagessent.
EchoReply
NumberofICMPEchoReplymessagessent.
RouterSols
NumberofRouterSolicitationmessagessentbytheswitch.
RouterAdv
NumberofRouterAdvertisementssentbytheswitch.
NeighSols
NumberofNeighborSolicitationssentbytheswitch.
NeighAdv
NumberofNeighborAdvertisementssentbytheswitch.
RedirectMsgs
NumberofICMPRedirectmessagessent.Forahost,this
objectwillalwaysbezero,sincehostsdonotsendredirects.
AdminProhibMsgs NumberofICMPdestinationunreachable/communication
administrativelyprohibitedmessagessent.
213
ThefollowingtabledescribestheUDPstatistics.
Table 100. UDPStatistics
Statistic
Description
Received
UDPDgrams
NumberofUDPdatagramsreceivedbytheswitch.
UDPNoPorts
NumberofreceivedUDPdatagramsforwhichtherewasno
applicationatthedestinationport.
UDPErrPkts
NumberofreceivedUDPdatagramsthatcouldnotbe
deliveredforreasonsotherthanthelackofanapplicationat
thedestinationport.
Sent
UDPDgrams
214
NumberofUDPdatagramssentfromthisentity(the
switch).
IPv4 Route Statistics

ThefollowingcommanddisplaysIPv4routestatistics:
showiproutecounters
Commandmode:All
Routestatistics:
Currenttotaloutstandingroutes:2
Highestnumbereverrecorded:2
Currentstaticroutes:0
CurrentRIProutes:0
CurrentOSPFroutes:0
CurrentBGProutes:0
Maximumsupportedroutes:4096
ECMPstatistics(activeinASIC):
MaximumnumberofECMProutes:3782
MaximumnumberofstaticECMProutes:128
NumberofrouteswithECMPpaths:0
ThefollowingtabledescribestheIPv4routestatistics.
Table 101. IPv4RouteStatistics
Statistics
Description
Currenttotal
outstandingroutes
Totalnumberofoutstandingroutesintheroutetable.
Highestnumberever Highestnumberofrouteseverrecordedintheroutetable.
recorded
Currentstaticroutes
Totalnumberofstaticroutesintheroutetable.
CurrentRIProutes
TotalnumberofRIProutesintheroutetable.
CurrentOSPFroutes
TotalnumberofOSPFroutesintheroutetable.
CurrentBGProutes
TotalnumberofBGProutesintheroutetable.
Maximumsupported Maximumnumberofroutesthataresupported.
routes
Maximumnumberof MaximumnumberofECMProutesthataresupported.
ECMProutes
Maximumnumberof MaximumnumberofstaticECMProutesthatare
staticECMProutes
supported.
Numberofroutes
withECMPpaths
CurrentnumberofroutesthatcontainECMPpaths.
UsethefollowingcommandtoclearallIPv4routestatistics:
cleariproutecounters
215
IPv6 Route Statistics

ThefollowingcommanddisplaysIPv6routestatistics:
showipv6routecounters
Commandmode:All
IPV6Routestatistics:
ipv6RoutesCur:4ipv6RoutesHighWater:6
ipv6RoutesMax:1156
ECMPstatistics:
MaximumnumberofECMProutes:600
MaxECMPpathsallowedforoneroute:5
NumberofrouteswithECMPpaths:0
ThefollowingtabledescribestheIPv6routestatistics.
Table 102. IPv6RouteStatistics
Statistics
Description
ipv6RoutesCur
Totalnumberofoutstandingroutesintheroutetable.
ipv6RoutesHighWater Highestnumberofrouteseverrecordedintheroute
table.
ipv6RoutesMax
Maximumnumberofroutesthataresupported.
Maximumnumberof MaximumnumberofECMProutessupported.
ECMProutes
MaxECMPpaths
allowedforoneroute
MaximumnumberofECMPpathssupportedforeach
route.
Numberofroutes
withECMPpaths
CurrentnumberofroutesthatcontainECMPpaths.
UsethefollowingcommandtoclearallIPv6routestatistics:
clearipv6routecounters
216
ARP statistics
ThefollowingcommanddisplaysAddressResolutionProtocolstatistics.
show[ip]arpcounters
Commandmode:All
ARPstatistics:
arpEntriesCur:3arpEntriesHighWater:4
arpEntriesMax:8191
ThefollowingtabledescribestheARPstatistics.
Table 103. ARPStatistics
Statistic
Description
arpEntriesCur
ThetotalnumberofoutstandingARPentriesinthe
ARPtable.
arpEntriesHighWater
ThehighestnumberofARPentrieseverrecordedin
theARPtable.
arpEntriesMax
ThemaximumnumberofARPentriesthatare
supported.
ThefollowingcommanddisplaysDynamicARPInspectionstatistics.
showiparpinspectionstatistics[vlan<VLANID(14094)>]
Commandmode:All
VlanForwardedDropped
2100200
217
DNS Statistics
ThefollowingcommanddisplaysDomainNameSystemstatistics.
showipdnscounters
Commandmode:All
DNSstatistics:
dnsInRequests:0
dnsOutRequests:0
dnsBadRequests:0
ThefollowingtabledescribestheDNSstatistics.
Table 104. DNSStatistics
218
Statistics
Description
dnsInRequests
ThetotalnumberofDNSresponsepacketsthathavebeen
received.
dnsOutRequests
ThetotalnumberofDNSresponsepacketsthathavebeen
transmitted.
dnsBadRequests
ThetotalnumberofDNSrequestpacketsreceivedthat
weredropped.
ICMP Statistics
ThefollowingcommanddisplaysICMPstatistics:
showipicmpcounters
Commandmode:All
ICMPstatistics:
icmpInMsgs:245802icmpInErrors:1393
icmpInDestUnreachs:41icmpInTimeExcds:0
icmpInParmProbs:0icmpInSrcQuenchs:0
icmpInRedirects:0icmpInEchos:18
icmpInEchoReps:244350icmpInTimestamps:0
icmpInTimestampReps:0icmpInAddrMasks:0
icmpInAddrMaskReps:0icmpOutMsgs:253810
icmpOutErrors:0icmpOutDestUnreachs:15
icmpOutTimeExcds:0icmpOutParmProbs:0
icmpOutSrcQuenchs:0icmpOutRedirects:0
icmpOutEchos:253777icmpOutEchoReps:18
icmpOutTimestamps:0icmpOutTimestampReps:0
icmpOutAddrMasks:0icmpOutAddrMaskReps:0
ThefollowingtabledescribestheICMPstatistics.
Statistic
Description
icmpInMsgs
ThetotalnumberofICMPmessageswhichtheentity
(theswitch)received.Notethatthiscounterincludes
allthosecountedbyicmpInErrors.
icmpInErrors
ThenumberofICMPmessageswhichtheentity(the
switch)receivedbutdeterminedashaving
ICMPspecificerrors(badICMPchecksums,bad
length,andsoforth).
icmpInDestUnreachs
ThenumberofICMPDestinationUnreachable
messagesreceived.
icmpInTimeExcds
ThenumberofICMPTimeExceededmessages
received.
icmpInParmProbs
ThenumberofICMPParameterProblemmessages
received.
icmpInSrcQuenchs
ThenumberofICMPSourceQuench(bufferalmost
full,stopsendingdata)messagesreceived.
icmpInRedirects
ThenumberofICMPRedirectmessagesreceived.
icmpInEchos
ThenumberofICMPEcho(request)messages
received.
icmpInEchoReps
ThenumberofICMPEchoReplymessagesreceived.
icmpInTimestamps
ThenumberofICMPTimestamp(request)messages
received.
219

Statistic
Description
icmpInTimestampReps
ThenumberofICMPTimestampReplymessages
received.
icmpInAddrMasks
ThenumberofICMPAddressMaskRequest
messagesreceived.
icmpInAddrMaskReps
ThenumberofICMPAddressMaskReplymessages
received.
icmpOutMsgs
ThetotalnumberofICMPmessageswhichthisentity
(theswitch)attemptedtosend.Notethatthiscounter
includesallthosecountedbyicmpOutErrors.
icmpOutErrors
ThenumberofICMPmessageswhichthisentity(the
switch)didnotsendduetoproblemsdiscovered
withinICMPsuchasalackofbuffer.Thisvalue
shouldnotincludeerrorsdiscoveredoutsidethe
ICMPlayersuchastheinabilityofIPtoroutethe
resultantdatagram.Insomeimplementationsthere
maybenotypesoferrorsthatcontributetothis
countersvalue.
icmpOutDestUnreachs
ThenumberofICMPDestinationUnreachable
messagessent.
icmpOutTimeExcds
ThenumberofICMPTimeExceededmessagessent.
icmpOutParmProbs
ThenumberofICMPParameterProblemmessages
sent.
icmpOutSrcQuenchs
ThenumberofICMPSourceQuench(bufferalmost
full,stopsendingdata)messagessent.
icmpOutRedirects
ThenumberofICMPRedirectmessagessent.Fora
host,thisobjectwillalwaysbezero,sincehostsdonot
sendredirects.
icmpOutEchos
ThenumberofICMPEcho(request)messagessent.
icmpOutEchoReps
ThenumberofICMPEchoReplymessagessent.
icmpOutTimestamps
ThenumberofICMPTimestamp(request)messages
sent.
icmpOutTimestampReps ThenumberofICMPTimestampReplymessages
sent.
220
icmpOutAddrMasks
ThenumberofICMPAddressMaskRequest
messagessent.
icmpOutAddrMaskReps
ThenumberofICMPAddressMaskReplymessages
sent.
TCP Statistics
ThefollowingcommanddisplaysTCPstatistics:
showiptcpcounters
Commandmode:All
TCPstatistics:
tcpRtoAlgorithm:4tcpRtoMin:0
tcpRtoMax:240000tcpMaxConn:512
tcpActiveOpens:252214tcpPassiveOpens:7
tcpAttemptFails:528tcpEstabResets:4
tcpInSegs:756401tcpOutSegs:756655
tcpRetransSegs:0tcpInErrs:0
tcpCurrEstab:0tcpCurConn:3
tcpOutRsts:417
ThefollowingtabledescribestheTCPstatistics.
Table 106. TCPStatistics
Statistic
Description
tcpRtoAlgorithm
Thealgorithmusedtodeterminethetimeoutvalueused
forretransmittingunacknowledgedoctets.
tcpRtoMin
TheminimumvaluepermittedbyaTCPimplementation
fortheretransmissiontimeout,measuredin
milliseconds.Morerefinedsemanticsforobjectsofthis
typedependuponthealgorithmusedtodeterminethe
retransmissiontimeout.Inparticular,whenthetimeout
algorithmisrsre(3),anobjectofthistypehasthesemantics
oftheLBOUNDquantitydescribedinRFC793.
tcpRtoMax
ThemaximumvaluepermittedbyaTCPimplementation
fortheretransmissiontimeout,measuredin
milliseconds.Morerefinedsemanticsforobjectsofthis
typedependuponthealgorithmusedtodeterminethe
retransmissiontimeout.Inparticular,whenthetimeout
algorithmisrsre(3),anobjectofthistypehasthesemantics
oftheUBOUNDquantitydescribedinRFC793.
tcpMaxConn
ThelimitonthetotalnumberofTCPconnectionsthe
entity(theswitch)cansupport.Inentitieswherethe
maximumnumberofconnectionsisdynamic,thisobject
shouldcontainthevalue1.
tcpActiveOpens
ThenumberoftimesTCPconnectionshavemadeadirect
transitiontotheSYNSENTstatefromtheCLOSEDstate.
tcpPassiveOpens
transitiontotheSYNRCVDstatefromtheLISTENstate.
221
Table 106. TCPStatistics(continued)
222
Statistic
Description
tcpAttemptFails
transitiontotheCLOSEDstatefromeithertheSYNSENT
stateortheSYNRCVDstate,plusthenumberoftimes
TCPconnectionshavemadeadirecttransitiontothe
LISTENstatefromtheSYNRCVDstate.
tcpEstabResets
transitiontotheCLOSEDstatefromeitherthe
ESTABLISHEDstateortheCLOSEWAITstate.
tcpInSegs
Thetotalnumberofsegmentsreceived,includingthose
receivedinerror.Thiscountincludessegmentsreceivedon
currentlyestablishedconnections.
tcpOutSegs
Thetotalnumberofsegmentssent,includingthoseon
currentconnectionsbutexcludingthosecontainingonly
retransmittedoctets.
tcpRetransSegs
Thetotalnumberofsegmentsretransmittedthatis,the
numberofTCPsegmentstransmittedcontainingoneor
morepreviouslytransmittedoctets.
tcpInErrs
Thetotalnumberofsegmentsreceivedinerror(for
example,badTCPchecksums).
tcpCurrEstab
Thetotalnumberofoutstandingmemoryallocationsfrom
heapbyTCPprotocolstack.
tcpCurConn
ThetotalnumberofoutstandingTCPsessionsthatare
currentlyopened.
tcpOutRsts
ThenumberofTCPsegmentssentcontainingtheRSTflag.
UDP Statistics
ThefollowingcommanddisplaysUDPstatistics:
showipudpcounters
Commandmode:All
UDPstatistics:
udpInDatagrams:54udpOutDatagrams:43
udpInErrors:0udpNoPorts:1578077
ThefollowingtabledescribestheUDPstatistics.
Table 107. UDPStatistics
Statistic
Description
udpInDatagrams
ThetotalnumberofUDPdatagramsdeliveredtothe
switch.
udpOutDatagrams
ThetotalnumberofUDPdatagramssentfromthisentity
(theswitch).
udpInErrors
ThenumberofreceivedUDPdatagramsthatcouldnotbe
deliveredforreasonsotherthanthelackofanapplication
atthedestinationport.
udpNoPorts
ThetotalnumberofreceivedUDPdatagramsforwhich
therewasnoapplicationatthedestinationport.
223
IGMP Statistics
ThefollowingcommanddisplaysstatisticsabouttheuseoftheIGMPMulticast
Groups:
showipigmpcounters
Commandmode:All
IGMPvlan2statistics:
rxIgmpValidPkts:0rxIgmpInvalidPkts:0
rxIgmpGenQueries:0rxIgmpGrpSpecificQueries:0
rxIgmpGroupSrcSpecificQueries:0rxIgmpDiscardPkts:0
rxIgmpLeaves:0rxIgmpReports:0
txIgmpReports:0txIgmpGrpSpecificQueries:0
txIgmpLeaves:0rxIgmpV3CurrentStateRecords:0
rxIgmpV3SourceListChangeRecords:0rxIgmpV3FilterChangeRecords:0
txIgmpGenQueries:0rxPimHellos:0
ThefollowingcommanddisplaysstatisticsabouttheuseoftheIGMPMulticast
GroupsforaspecificVLAN:
showipigmpvlan<VLANID(14094)>counter
Commandmode:All
IGMPvlan147statistics:
rxIgmpValidPkts:0rxIgmpInvalidPkts:0
rxIgmpGenQueries:0rxIgmpGrpSpecificQueries:0
rxIgmpGroupSrcSpecificQueries:0rxIgmpDiscardPkts:0
rxIgmpLeaves:0rxIgmpReports:0
txIgmpReports:0txIgmpGrpSpecificQueries:0
txIgmpLeaves:0rxIgmpV3CurrentStateRecords:0
rxIgmpV3SourceListChangeRecords:0rxIgmpV3FilterChangeRecords:0
txIgmpGenQueries:0rxPimHellos:0
ThefollowingtabledescribestheIGMPstatistics.
Table 108. IGMPStatistics
224
Statistic
Description
rxIgmpValidPkts
TotalnumberofvalidIGMPpackets
received
rxIgmpInvalidPkts
Totalnumberofinvalidpackets
received
rxIgmpGenQueries
TotalnumberofGeneralMembership
Querypacketsreceived
rxIgmpGrpSpecificQueries
TotalnumberofMembershipQuery
packetsreceivedfromspecificgroups
rxIgmpGroupSrcSpecificQueries
TotalnumberofGroupSourceSpecific
Queries(GSSQ)received
Table 108. IGMPStatistics(continued)
Statistic
Description
rxIgmpDiscardPkts
TotalnumberofIGMPpackets
discarded
rxIgmpLeaves
TotalnumberofLeaverequests
received
rxIgmpReports
TotalnumberofMembershipReports
received
txIgmpReports
TotalnumberofMembershipreports
transmitted
txIgmpGrpSpecificQueries
TotalnumberofMembershipQuery
packetstransmittedtospecificgroups
txIgmpLeaves
TotalnumberofLeavemessages
transmitted
rxIgmpV3CurrentStateRecords
TotalnumberofCurrentStaterecords
received
rxIgmpV3SourceListChangeRecords
TotalnumberofSourceListChange
recordsreceived
rxIgmpV3FilterChangeRecords
TotalnumberofFilterChangerecords
received
txIgmpGenQueries
TotalnumberofGeneralMembership
Querypacketstransmitted
rxPimHellos
TotalnumberofPIMhellosreceived
225
MLD Statistics
ThefollowingtabledescribesthecommandsusedtoviewMLDstatistics.
Table 109. MLDStatisticsCommands
showipv6mldcounters
DisplaysMLDstatistics.Seepage 227forsampleoutput.
Commandmode:All
showipv6mldgroupscounters
DisplaystotalnumberofMLDentries.
Commandmode:All
showipv6mldinterfacecounters
DisplaystotalnumberofMLDentries.
Commandmode:All
showipv6mldinterface<interfacenumber>counters
DisplaystotalnumberofMLDentriesontheinterface.
Commandmode:All
clearipv6mldcounters
ClearsMLDcounters.
226
MLD Global Statistics

ThefollowingcommanddisplaysMLDglobalstatisticsforallMLDpackets
receivedonallinterfaces:
showipv6mldcounters
Commandmode:All
MLDglobalstatistics:
TotalL3IPv6(S,G,V)entries:2
TotalMLDgroups:2
BadLength:0
BadChecksum:0
BadReceiveIf:0
Receivenonlocal:0
InvalidPackets:4
MLDpacketstatisticsforinterfaces:
MLDinterfacepacketstatisticsforinterface1:
MLDmsgtypeReceivedSentxErrors
GeneralQuery010670
MASQuery000
MASSQQuery000
MLDv1Report000
MLDv1Done000
MLDv2Report106910840
INCCSRs(v2)100
EXCCSRs(v2)213410930
TO_INCFMCRs(v2)100
TO_EXCFMCRs(v2)0150
ALLOWSLCRs(v2)000
BLOCKSLCRs(v2)000
GeneralQuery024670
MASQuery000
MASSQQuery000
MLDv1Report000
MLDv1Done000
MLDv2Report224720
INCCSRs(v2)100
EXCCSRs(v2)024760
TO_INCFMCRs(v2)000
TO_EXCFMCRs(v2)080
ALLOWSLCRs(v2)000
BLOCKSLCRs(v2)100
227
ThefollowingtabledescribesthefieldsintheMLDglobalstatisticsoutput.
Table 110. MLDGlobalStatistics
228
Statistic
Description
BadLength
Numberofmessagesreceivedwithlengtherrors.
BadChecksum
NumberofmessagesreceivedwithaninvalidIP
checksum.
BadReceiveIf
Numberofmessagesreceivedonaninterfacenotenabled
forMLD.
Receivenonlocal
Numberofmessagesreceivedfromnonlocalsenders.
Invalidpackets
Numberofrejectedpackets.
GeneralQuery
(v1/v2)
Numberofgeneralquerypackets.
MASQuery(v1/v2)
Numberofmulticastaddressspecificquerypackets.
MASSQQuery(v2)
Numberofmulticastaddressandsourcespecificquery
packets.
ListenerReport(v1)
Numberofpacketssentbyamulticastlistenerinresponse
toMLDv1query.
Listener
Done(v1/v2)
Numberofpacketssentbyahostwhenitwantstostop
receivingmulticasttraffic.
ListenerReport(v2)
Numberofpacketssentbyamulticastlistenerinresponse
toMLDv2query.
MLDv2INCmode
CSRs
Numberofcurrentstaterecordswithincludefiltermode.
MLDv2EXCmode
CSRs
Numberofcurrentstaterecordswithexcludefiltermode.
MLDv2TO_INC
FMCRs
Numberoffiltermodechangerecordsforwhichthefilter
modehaschangedtoincludemode.
MLDv2TO_EXC
FMCRs
Numberoffiltermodechangerecordsforwhichthefilter
modehaschangedtoexcludemode.
MLDv2ALLOW
SLCRs
Numberofsourcelistchangerecordsforwhichthe
specifiedsourcesfromwherethedataistobereceivedhas
changed.
MLDv2BLOCK
SLCRs
Numberofsourcelistchangerecordsforwhichthe
specifiedsourcesfromwherethedataistobereceivedis
tobeblocked.
OSPF Statistics
ThefollowingcommandsdisplayOSPFstatistics:
Table 111. OSPFStatisticsCommands
showipospfcounters
DisplaysglobalOSPFstatistics.Seepage 230forsampleoutput.
Commandmode:All
showipospfarea[<019>]counters
DisplaysOSPFstatisticsforallareasoraspecifiedarea.
Commandmode:All
showipospfinterface[<interfacenumber>|port<portaliasornumber>]
counters
DisplaysOSPFstatisticsforallinterfacesoraspecifiedinterface.
Commandmode:All
clearipospfcounters
ClearsOSPFstatistics.
229
OSPF Global Statistics

ThefollowingcommanddisplaysstatisticsaboutOSPFpacketsreceivedonall
OSPFareasandinterfaces:
showipospfcounters
Commandmode:All
OSPFstats
Rx/TxStats:RxTx
Pkts00
hello23518
database412
lsrequests31
lsacks77
lsupdates97
Nbrchangestats:IntfchangeStats:
hello2hello4
start0down2
n2way2loop0
adjointok2unloop0
negotiationdone2waittimer2
exchangedone2backup0
badrequests0nbrchange5
badsequence0
loadingdone2
n1way0
rst_ad0
down1
Timerskickoff
hello514
retransmit1028
lsalock0
lsaack0
dbage0
summary0
aseexport0
ThefollowingtabledescribestheOSPFgeneralstatistics.
Table 112. OSPFGeneralStatistics
Statistic
Description
Rx/TxStats:
230
RxPkts
ThesumtotalofallOSPFpacketsreceivedonallOSPFareas
andinterfaces.
TxPkts
ThesumtotalofallOSPFpacketstransmittedonallOSPF
areasandinterfaces.
RxHello
ThesumtotalofallHellopacketsreceivedonallOSPFareas
andinterfaces.
Table 112. OSPFGeneralStatistics(continued)

Statistic
Description
TxHello
ThesumtotalofallHellopacketstransmittedonallOSPF
areasandinterfaces.
RxDatabase
ThesumtotalofallDatabaseDescriptionpacketsreceivedon
allOSPFareasandinterfaces.
TxDatabase
ThesumtotalofallDatabaseDescriptionpacketstransmitted
onallOSPFareasandinterfaces.
RxlsRequests
ThesumtotalofallLinkStateRequestpacketsreceivedonall
OSPFareasandinterfaces.
TxlsRequests
ThesumtotalofallLinkStateRequestpacketstransmittedon
RxlsAcks
ThesumtotalofallLinkStateAcknowledgementpackets
receivedonallOSPFareasandinterfaces.
TxlsAcks
transmittedonallOSPFareasandinterfaces.
RxlsUpdates
ThesumtotalofallLinkStateUpdatepacketsreceivedonall
TxlsUpdates
ThesumtotalofallLinkStateUpdatepacketstransmittedon
NbrChangeStats:
hello
ThesumtotalofallHellopacketsreceivedfromneighborson
Start
Thesumtotalnumberofneighborsinthisstate(thatis,an
indicationthatHellopacketsshouldnowbesenttothe
neighboratintervalsofHelloIntervalseconds.)acrossall
n2way
Thesumtotalnumberofbidirectionalcommunication
establishmentbetweenthisrouterandotherneighboring
routers.
adjointok
Thesumtotalnumberofdecisionstobemade(again)asto
whetheranadjacencyshouldbeestablished/maintainedwith
theneighboracrossallOSPFareasandinterfaces.
negotiation
done
Thesumtotalnumberofneighborsinthisstatewhereinthe
Master/slaverelationshiphasbeennegotiated,andsequence
numbershavebeenexchanged,acrossallOSPFareasand
interfaces.
exchangedone
Thesumtotalnumberofneighborsinthisstate(thatis,inan
adjacencysfinalstate)havingtransmittedafullsequenceof
DatabaseDescriptionpackets,acrossallOSPFareasand
interfaces.
231

Statistic
Description
badrequests
ThesumtotalnumberofLinkStateRequestswhichhavebeen
receivedforalinkstateadvertisementnotcontainedinthe
databaseacrossallinterfacesandOSPFareas.
badsequence
ThesumtotalnumberofDatabaseDescriptionpacketswhich
havebeenreceivedthateither:
HasanunexpectedDDsequencenumber
Unexpectedlyhastheinitbitset
HasanoptionsfielddifferingfromthelastOptionsfield
receivedinaDatabaseDescriptionpacket.
Anyoftheseconditionsindicatethatsomeerrorhasoccurred
duringadjacencyestablishmentforallOSPFareasand
interfaces.
loadingdone
Thesumtotalnumberoflinkstateupdatesreceivedforall
outofdateportionsofthedatabaseacrossallOSPFareasand
interfaces.
n1way
ThesumtotalnumberofHellopacketsreceivedfrom
neighbors,inwhichthisrouterisnotmentionedacrossall
OSPFinterfacesandareas.
rst_ad
ThesumtotalnumberoftimestheNeighboradjacencyhas
beenresetacrossallOPSFareasandinterfaces.
down
ThetotalnumberofNeighboringroutersdown(thatis,inthe
initialstateofaneighborconversation.)acrossallOSPFareas
andinterfaces.
IntfChangeStats:
232
hello
ThesumtotalnumberofHellopacketssentonallinterfaces
andareas.
down
ThesumtotalnumberofinterfacesdowninallOSPFareas.
loop
Thesumtotalofinterfacesnolongerconnectedtotheattached
networkacrossallOSPFareasandinterfaces.
unloop
Thesumtotalnumberofinterfaces,connectedtotheattached
networkinallOSPFareas.
waittimer
ThesumtotalnumberoftimestheWaitTimerhasbeenfired,
indicatingtheendofthewaitingperiodthatisrequiredbefore
electinga(Backup)DesignatedRouteracrossallOSPFareas
andinterfaces.
backup
ThesumtotalnumberofBackupDesignatedRoutersonthe
attachednetworkforallOSPFareasandinterfaces.
nbrchange
Thesumtotalnumberofchangesinthesetofbidirectional
neighborsassociatedwithanyinterfaceacrossallOSPFareas.

Statistic
Description
TimersKickoff:
hello
ThesumtotalnumberoftimestheHellotimerhasbeenfired
(whichtriggersthesendofaHellopacket)acrossallOPSF
areasandinterfaces.
retransmit
ThesumtotalnumberoftimestheRetransmittimerhasbeen
firedacrossallOPSFareasandinterfaces.
lsalock
ThesumtotalnumberoftimestheLinkStateAdvertisement
(LSA)locktimerhasbeenfiredacrossallOSPFareasand
interfaces.
lsaack
ThesumtotalnumberoftimestheLSAAcktimerhasbeen
firedacrossallOSPFareasandinterfaces.
dbage
Thetotalnumberoftimesthedatabaseage(Dbage)hasbeen
fired.
summary
ThetotalnumberoftimestheSummarytimerhasbeenfired.
aseexport
ThetotalnumberoftimestheAutonomousSystemExport
(ASE)timerhasbeenfired.
233
OSPFv3 Statistics
ThefollowingcommandsdisplayOSPFv3statistics:
Table 113. OSPFv3StatisticsCommands
DisplaysOSPFv3statistics.Seepage 235forsampleoutput.
Commandmode:All
showipv6ospfarea[<areaindex(02)>]counters
DisplaysOSPFv3statisticsforallareasoraspecifiedarea.
Commandmode:All
showipv6ospfinterface[<interfacenumber>]counters
DisplaysOSPFv3statisticsforallinterfacesoraspecifiedinterface.
Commandmode:All
clearipv6ospfcounters
ClearsOSPFv3statistics.
234
OSPFv3 Global Statistics

ThefollowingcommanddisplaysstatisticsaboutOSPFv3packetsreceivedonall
OSPFv3areasandinterfaces:
Commandmode:All
OSPFv3stats
Rx/Tx/DisdStats:RxTxDiscarded
Pkts9695959330
hello909789940
database39516
lsrequests1680
lsacks1723600
lsupdates3711800
Errors
rxonpasvintf0
rxbutospfoff0
rxonintfnotup0
rxversionmismatch0
rxrtridiszero0
rxwithourrtrid0
instanceidmismatch0
areamismatch0
destaddrmismatch0
badchecksum0
noassociatednbr0
badpackettype0
hellomismatch0
optionsmismatch0
deadmismatch0
badnbma/ptompnbr0
Nbrchangestats:IntfchangeStats:
down0down5
attempt0loop0
init1waiting6
n2way1ptop0
exstart1dr4
exchangedone1backup6
loadingdone1drother0
full1allevents33
allevents6
Timerskickoff
hello8988
wait6
poll0
nbrprobe0
235
TheOSPFv3GeneralStatisticscontainthesumtotalofallOSPFv3packetsreceived
onallOSPFv3areasandinterfaces.
ThefollowingtabledescribestheOSPFv3generalstatistics.
Table 114. OSPFv3GeneralStatistics
Statistics
Description
Rx/TxStats:
236
RxPkts
ThesumtotalofallOSPFv3packetsreceivedonallOSPFv3
interfaces.
TxPkts
ThesumtotalofallOSPFv3packetstransmittedonall
OSPFv3interfaces.
Discarded
Pkts
ThesumtotalofallOSPFv3packetsdiscarded.
Rxhello
ThesumtotalofallHellopacketsreceivedonallOSPFv3
interfaces.
Txhello
ThesumtotalofallHellopacketstransmittedonallOSPFv3
interfaces.
Discarded
hello
ThesumtotalofallHellopacketsdiscarded,including
packetsforwhichnoassociatedinterfacehasbeenfound.
Rxdatabase
ThesumtotalofallDatabaseDescriptionpacketsreceivedon
allOSPFv3interfaces.
Txdatabase
ThesumtotalofallDatabaseDescriptionpacketstransmitted
onallOSPFv3interfaces.
Discarded
database
ThesumtotalofallDatabaseDescriptionpacketsdiscarded.
Rxlsrequests
ThesumtotalofallLinkStateRequestpacketsreceivedonall
OSPFv3interfaces.
Txlsrequests
ThesumtotalofallLinkStateRequestpacketstransmittedon
Discardedls
requests
ThesumtotalofallLinkStateRequestpacketsdiscarded.
Rxlsacks
receivedonallOSPFv3interfaces.
Txlsacks
transmittedonallOSPFv3interfaces.
Discardedls
acks
discarded.
Rxlsupdates
ThesumtotalofallLinkStateUpdatepacketsreceivedonall
OSPFv3interfaces.
Table 114. OSPFv3GeneralStatistics(continued)

Statistics
Description
Txlsupdates
ThesumtotalofallLinkStateUpdatepacketstransmittedon
Discardedls
updates
ThesumtotalofallLinkStateUpdatepacketsdiscarded.
NbrChangeStats:
down
ThetotalnumberofNeighboringroutersdown(intheinitial
stateofaneighborconversation)acrossallOSPFv3interfaces.
attempt
Thetotalnumberoftransitionsintoattemptstateof
neighboringroutersacrossallOSPFv3interfaces.
init
Thetotalnumberoftransitionsintoinitstateofneighboring
routersacrossallOSPFv3interfaces.
n2way
Thetotalnumberofbidirectionalcommunication
establishmentbetweenthisrouterandotherneighboring
routers.
exstart
Thetotalnumberoftransitionsintoexstartstateof
neighboringroutersacrossallOSPFv3interfaces
exchange
done
Thetotalnumberofneighborsinthisstate(thatis,inan
adjacencysfinalstate)havingtransmittedafullsequenceof
DatabaseDescriptionpackets,acrossallOSPFv3interfaces.
loadingdone
Thetotalnumberoflinkstateupdatesreceivedforall
outofdateportionsofthedatabaseacrossallOSPFv3
interfaces.
full
Thetotalnumberoftransitionsintofullstateofneighboring
routersacrossallOSPFv3interfaces.
allevents
Thetotalnumberofstatetransitionsofneighboringrouters
acrossallOSPFv3interfaces.
IntfChangeStats:
down
ThetotalnumberoftransitionsintodownstateofallOSPFv3
interfaces.
loop
Thetotalnumberoftransitionsintoloopbackstateofall
OSPFv3interfaces.
waiting
Thetotalnumberoftransitionsintowaitingstateofall
OSPFv3interfaces.
ptop
Thetotalnumberoftransitionsintopointtopointstateofall
OSPFv3interfaces.
dr
ThetotalnumberoftransitionsintoDesignatedRouterother
stateofallOSPFv3interfaces.
237
Table 114. OSPFv3GeneralStatistics(continued)

Statistics
Description
backup
Thetotalnumberoftransitionsintobackupstateofall
OSPFv3interfaces.
allevents
ThetotalnumberofchangesassociatedwithanyOSPFv3
interface,includingchangesintointernalstates.
TimersKickoff:
hello
ThetotalnumberoftimestheHellotimerhasbeenfired
(whichtriggersthesendofaHellopacket)acrossallOSPFv3
interfaces.
wait
Thetotalnumberoftimesthewaittimerhasbeenfired(which
causesaninterfacetoexitwaitingstate),acrossallOPSFv3
interfaces.
poll
Thetotalnumberoftimesthetimerwhosefiringcauseshellos
tobesenttoinactiveNBMAandDemandCircuitneighbors
hasbeenfired,acrossallOPSFv3interfaces.
nbrprobe
Thetotalnumberoftimestheneighborprobetimerhasbeen
fired,acrossallOPSFv3interfaces.
NumberofLSAs:
238
originated
ThenumberofLSAsoriginatedbythisrouter.
rcvdnewer
originations
ThenumberofLSAsreceivedthathavebeendeterminedtobe
neweroriginations.
VRRP Statistics
VirtualRouterRedundancyProtocol(VRRP)supportontheG8052provides
Whenvirtualroutersareconfigured,youcandisplaytheprotocolstatisticsfor
VRRP.ThefollowingcommanddisplaysVRRPstatistics:
showipvrrpcounters
Commandmode:All
VRRPstatistics:
vrrpInAdvers:0vrrpBadAdvers:0
vrrpOutAdvers:0vrrpOutGratuitousARPs:0
vrrpBadVersion:0vrrpBadVrid:0
vrrpBadAddress:0vrrpBadData:0
vrrpBadPassword:0vrrpBadInterval:0
ThefollowingtabledescribestheVRRPstatistics.
Table 115. VRRPStatistics
Statistics
Description
vrrpInAdvers
ThetotalnumberofvalidVRRPadvertisementsthathave
beenreceived.
vrrpBadAdvers
ThetotalnumberofVRRPadvertisementsreceivedthat
weredropped.
vrrpOutAdvers
ThetotalnumberofVRRPadvertisementsthathavebeen
sent.
vrrpBadVersion
hadabadversionnumber.
vrrpOut
GratuitousARPs
ThetotalnumberofVRRPgratuitousARPsthathavebeen
sent.
vrrpBadVrid
hadabadvirtualrouterID.
vrrpBadAddress
hadabadaddress.
vrrpBadData
hadbaddata.
vrrpBadPassword
hadabadpassword.
vrrpBadInterval
hadabadinterval.
239
PIM Statistics
ThefollowingcommanddisplaysProtocolIndependentMulticast(PIM)statistics:
showippimcounters
Commandmode:All
HelloTx/Rx:2595/2596
Join/PruneTx/Rx:0/0
AssertTx/Rx:0/0
RegisterTx/Rx:0/0
NullRegTx/Rx:0/0
RegStopTx/Rx:0/0
CandRPAdvTx/Rx:973/0
BSRTx/Rx:0/1298
GraftTx/Rx:0/0
GraftAckTx/Rx:0/0
McastdataTx/Rx:0/0
MDPdropTx/Rx:0/0
CTLdropTx/Rx:0/0
Badpkts:0
ThefollowingtabledescribesthePIMstatistics.
Table 116. PIMStatistics
240
Statistics
Description
HelloTx/Rx
NumberofHellomessagestransmittedorreceived
Join/PruneTx/Rx
NumberofJoin/Prunemessagestransmittedorreceived
AssertTx/Rx
NumberofAssertmessagestransmittedorreceived
RegisterTx/Rx
NumberofRegistermessagestransmittedorreceived
NullRegTx/Rx
NumberofNULLregistermessagesreceived
RegStopTx/Rx
NumberofRegisterStopmessagestransmittedorreceived
CandRPAdvTx/Rx
NumberofCandidateRPAdvertisementstransmittedor
received
BSRTx/Rx
NumberofBootstrapRouter(BSR)messagestransmitted
orreceived
GraftTx/Rx
NumberofGraftmessagestransmittedorreceived
GraftAckTx/Rx
NumberofGraftAcknowledgementstransmittedor
received
McastdataTx/Rx
Numberofmulticastdatagramstransmittedorreceived
MDPdropTx/Rx
NumberofMulticastdatapacketTx/Rxdropped
CTLdropTx/Rx
NumberofPIMcontrolpacketTx/Rxdropped
Badpkts
NumberofbadPIMpacketsreceived
Routing Information Protocol Statistics

ThefollowingcommanddisplaysRIPstatistics:
showipripcounters
Commandmode:All
RIPALLSTATSINFORMATION:
RIPpacketsreceived=12
RIPpacketssent=75
RIPrequestreceived=0
RIPresponserecevied=12
RIPrequestsent=3
RIPreponsesent=72
RIProutetimeout=0
RIPbadsizepacketreceived=0
RIPbadversionreceived=0
RIPbadzerosreceived=0
RIPbadsrcportreceived=0
RIPbadsrcIPreceived=0
RIPpacketsfromselfreceived=0
241
DHCP Statistics
ThefollowingcommandsdisplayDHCPstatistics:
Table 117. DHCPStatisticsOptions
DisplaysDHCPSnoopingstatistics.
Commandmode:All
clearipdhcpsnoopingcounters
ClearsDHCPSnoopingstatistics.
DHCP Snooping Statistics

ThefollowingcommanddisplaysDHCPSnoopingstatistics:
Commandmode:All
DHCPSnoopingstatistics:
ReceivedRequestpackets2
ReceivedReplypackets2
ReceviedInvalidpackets0
Droppedpacketsoutofrate0
Droppedpacketsotherreason0
DHCPSnoopingStatisticscountallDHCPpacketsprocessedbyDHCPsnooping.
242
OpenFlow Statistics
ThefollowingcommandsdisplayOpenFlowstatistics:
Table 118. OpenFlowStatisticsCommands
showopenflowstatistics
DisplaysOpenFlowtrafficstatisticsforeachOpenFlowinstance.
Commandmode:All
showopenflow instance <12>statistics
DisplaysOpenFlowtrafficstatisticsforthespecifiedinstanceID.
Commandmode:All
clearopenflow statistics
ClearsOpenFlowdataforallinstances.
clearopenflow instance <12> statistics
ClearsOpenFlowdataforthespecifiedinstanceID.
UsethefollowingcommandtodisplayOpenFlowtrafficstatisticsforeach
OpenFlowinstance:
showopenflowstatistics
Commandmode:All
InOpenFlow1.0:
Openflowstatisticsforinstance2
FlowCount
BasicFlows:3
(ACLBased:3,UnicastFDBBased:0,MulticastFDBBased:0)
EmergencyFlows:0
(ACLBased:0,UnicastFDBBased:0,MulticastFDBBased:0)
BufferingCount:
OpenflowPacketsBuffered:0
OpenflowPacketsTimedout:0
OpenflowPacketsRetrieved:0
OpenflowPacketsRetrieveattempts:0
MessageCount
HelloSent:1HelloReceived:1
EchoRequestSent:31EchoRequestReceived:60
EchoReplySent:60EchoReplyReceived:31
Vendor:0
243
VendorFlowMod:
Add:0
Modify:0
ModifyStrict:0
Delete:0
DeleteStrict:0
FeatureRequest:1FeatureReply:1
GetConfigRequest:0GetConfigReply:0
SetConfig:1
PacketIn
NoMatch:0
Action:0
ActionMirror:0
FlowRemoved:
IdleTimeout:0
HardTimeout:0
Delete:0
VendorFlowRemoved:
IdleTimeout:0
HardTimeout:0
Delete:0
PortStatus:
Add:0
Delete:0
Modify:0
PacketOut:1088
FlowMod:
Add:3
Modify:0
ModifyStrict:0
Delete:0
DeleteStrict:1
PortMod:0
StatisticsRequest:
Desc:1
Flow:15
Aggregate:0
Table:0
Port:15
Vendor:0
stats:0
statsstrict:0
StatisticsReply:
Desc:1
Flow:15
Aggregate:0
Table:0
Port:15
Vendor:0
stats:0
statsstrict:0
BarrierRequest:2
BarrierReply:2
ErrorMessages
HelloFailedSent:
Incompatible:0
HelloFailedRecv:
Incompatible:0
244
BadRequest:
BadVersion:0
BadType:0
BadStat:0
BadVendor:0
BadSubtype:0
BadLen:0
BufferEmpty:0
BufferUnknown:0
BadAction:
BadType:0
BadLen:0
BadOutPort:0
BadArgument:0
Toomany:0
FlowModFailed:
AllTableFull:0
Overlap:0
PermissionError:0
EmergencyTimeout:0
BadCommand:0
Unsupported:0
PortModFailed:
BadPort:0
Badhwaddr:0
InOpenflow1.3:
Openflowstatisticsforinstance1
FlowCount
StaticFlows:0
ACLBased:0
DynamicFlows:2
ACLBased:2
UnicastFDBBased:0
MulticastFDBBased:0
GroupCount:0
BufferingCount:
OpenflowPacketsBuffered:0
OpenflowPacketsTimedout:0
OpenflowPacketsRetrieved:0
OpenflowPacketsRetrieveattempts:0
MessageCount
HelloSent:3HelloReceived:3
EchoRequestSent:12003EchoRequestReceived:23857
EchoReplySent:23857EchoReplyReceived:12002
FeatureRequest:3FeatureReply:3
GetConfigRequest:0GetConfigReply:0
SetConfig:3
PacketIn
NoMatch:0
Action:0
245
FlowRemoved:
IdleTimeout:0
HardTimeout:0
Delete:0
GroupDelete:0
PortStatus:
Add:1
Delete:0
Modify:3
PacketOut:33054
FlowMod:
Add:6
Modify:0
ModifyStrict:0
Delete:0
DeleteStrict:0
GroupMod:
Add:0
Modify:0
Delete:0
PortMod:0
MultipartRequest:
Switchdescription:6
Individualflowstatistics:5993
Aggregateflowstatistics:0
Flowtablestatistics:0
Portstatistics:5993
Groupcounterstatistics:0
Groupdescription:0
Groupfeatures:0
Portdescription:3
MultipartReply:
Switchdescription:6
Individualflowstatistics:5993
Aggregateflowstatistics:0
Flowtablestatistics:0
Portstatistics:5993
Groupcounterstatistics:0
Groupdescription:0
Groupfeatures:0
Portdescription:3
BarrierRequest:3
BarrierReply:3
ErrorMessages
HelloFailedSent:
Incompatible:0
HelloFailedRecv:
Incompatible:0
BadRequest:
BadVersion:0
BadType:0
BadMultipart:0
Permissionerror:0
BadLen:0
BufferEmpty:0
BufferUnknown:0
BadTableID:0
BadPort:0
BadPacket:0
MultipartBufferOverflow:0
246
BadAction:
BadType:0
BadLen:0
BadOutPort:0
BadArgument:0
PermissionError:0
Toomany:0
BadOutGroup:0
MatchInconsistent:0
UnsupportedOrder:0
BadSetType:0
BadSetLen:0
BadSetArgument:0
BadInstruction:
UnknownInstruction:0
UnsupportInstruction:0
BadLen:0
PermissionError:0
BadMatch:
BadType:0
BadLen:0
BadMACAddrMask:0
BadIPAddrMask:0
BadWildcards:0
BadField:0
BadValue:0
BadMask:0
BadPrerequisites:0
DuplicatedField:0
FlowModFailed:
Unknown:0
TableFull:0
BadTableID:0
Overlap:0
PermissionError:0
BadTimeout:0
BadCommand:0
BadFlags:0
GroupModFailed:
GroupExists:0
InvalidGroup:0
WeightUnsupported:0
OutofGroups:0
OutofBuckets:0
ChainingUnsupported:0
WatchUnsupported:0
Loop:0
UnknownGroup:0
ChainedGroup:0
BadType:0
BadCommand:0
BadBucket:0
BadWatch:0
PermissionError:0
PortModFailed:
BadPort:0
Badhwaddr:0
BadConfig:0
BadAdvertise:0
PermissionError:0
SwitchConfigFailed:
BadFlags:0
PermissionError:0
247
ThefollowingtabledescribestheOpenFlowstatistics.
Table 119. OpenFlowStatistics
Parameter
Description
FlowCount
BasicFlows
Countofflowsstoredinthebasicflowtable,sortedby
type:ACL,unicastFDBandmulticastFDB.
EmergencyFlows
Countofflowsstoredintheemergencyflowtable,sorted
bytype:ACL,unicastFDBandmulticastFDB.
StaticFlows
Countofflowsstoredinthestaticflowtable,sortedby
type:ACL,unicastFDB,multicastFDB.Availableonlyin
OpenFlow1.3.
DynamicFlows
Countofflowsstoredinthedynamicflowtable,sortedby
type:ACL,unicastFDB,multicastFDB.Availableonlyin
OpenFlow1.3.
GroupCount
Countofinstalledgroups.
BufferingCount
248
OpenflowPackets
Buffered
Countofpacketsbuffered.
OpenflowPackets
Timedout
Countofbufferedpacketsdroppedduetotimeout.
OpenflowPackets
Retrieved
Countofpacketsretrieved.
OpenflowPackets
Retrieveattempts
Countofattemptsmadetoretrievethebuffer.
MessageCount
CountofmessagesexchangedbetweentheControllerand
theswitch.
HelloSent
CountofHellomessagessentfromtheswitchtothe
Controller.
HelloReceived
CountofHellomessagesreceivedbytheswitchfromthe
Controller.
EchoRequest
Sent
CountofEchoRequestmessagessentfromtheswitchto
theController.
EchoRequest
Received
CountofEchoRequestmessagesreceivedbytheswitch
fromtheController.
EchoReplySent
CountofEchoReplymessagessentbytheswitchtothe
Controller.
EchoReply
Received
CountofEchoReplymessagesreceivedbytheswitch
fromtheController.

Parameter
Description
Vendor
CountofVendormessagesreceivedbytheswitchfrom
theController.AvailableonlyinOpenFlow1.0.
VendorFlowMod
AvailableonlyinOpenFlow1.0.
Add
Countofvendordefinedaddflow_modmessages
receivedbytheswitch.AvailableonlyinOpenFlow1.0.
Modify
Countofvendordefinedmodifyflow_modmessages
ModifyStrict
Countofvendordefinedmodify_strictflow_mod
messagesreceivedbytheswitch.Availableonlyin
OpenFlow1.0.
Delete
Countofvendordefineddeleteflow_modmessages
DeleteStrict
Countofvendordefineddeletestrictflow_mod
messagesreceivedbytheswitch.Availableonlyin
OpenFlow1.0.
FeatureRequest
CountofFeatureRequestmessagesreceivedfromthe
Controllerbytheswitch.
FeatureReply
CountofFeatureReplymessagessentfromtheswitch
totheController.
GetConfigRequest
CountofGetConfigRequestmessagesreceivedfrom
theControllerbytheswitch.
GetConfigReply
CountofGetConfigReplymessagessentfromthe
switchtotheController.
SetConfig
CountofSetConfigmessagesreceivedfromthe
PacketIn
NoMatch
CountofPacketInmessagessenttotheControllerdue
tonomatchingflows.
Action
CountofPacketInmessagessenttotheControllerdue
toactionexplicitlyaskingtoforwardtotheController.
ActionMirror
CountofNECspecificPacketInmessagessenttothe
Controllerduetoactionexplicitlyaskingtoforwardtothe
Controller.AvailableonlyinOpenFlow1.0.
249

Parameter
Description
FlowRemoved
IdleTimeout
Countofflowentriesremovedduetoidletimeout
expiration.
HardTimeout
Countofflowentriesremovedduetohardtimeout
expiration.
Delete
Countofflowentriesremovedduetoexplicitdeletion.
GroupDelete
Countofflowentriesremovedduetodeletionof
associatedgroup.AvailableonlyinOpenFlow1.3.
VendorFlow
Removed
IdleTimeout
Countofvendordefinedflowentriesremoveddueto
idletimeoutexpiration.AvailableonlyinOpenFlow1.0.
HardTimeout
hardtimeoutexpiration.AvailableonlyinOpenFlow1.0.
Delete
explicitdeletion.AvailableonlyinOpenFlow1.0.
PortStatus
Add
Countofportstatusmessagessenttriggeredby
addingaporttoOpenFlow.
Delete
Countofportstatusmessagessenttriggeredby
removingaportfromOpenFlow.
Modify
Countofportstatusmessagessenttriggeredbya
modificationofaportbelongingtoOpenFlow(for
example,up/downstatus).
PacketOut
Countofpacketoutmessagesreceivedfromthe
Controller.
FlowMod
250
Add
Countofaddflow_modmessagesreceivedbytheswitch.
Modify
Countofmodifyflow_modmessagesreceivedbythe
switch.
ModifyStrict
Countofmodify_strictflow_modmessagesreceived
bytheswitch.
Delete
Countofdeleteflow_modmessagesreceivedbythe
switch.
DeleteStrict
Countofdeletestrictflow_modmessagesreceived
bytheswitch.
Parameter
Description
GroupMod
AvailableonlyinOpenFlow1.3
Add
CountofGroupAddmessagesreceivedfromController.
Modify
CountofGroupModifymessagesreceivedfrom
Delete
CountofGroupDeletemessagesreceivedfromController.
PortMod
Countofport_modmessagesreceivedbytheswitchfrom
theController.
StatisticsRequest
Desc
CountofDescriptionstatisticsrequestsreceivedfromthe
Controllerbytheswitch.AvailableonlyinOpenFlow1.0.
Flow
CountofFlowstatisticsrequestsreceivedfromthe
Aggregate
CountofAggregatestatisticsrequestsreceivedfromthe
Table
CountofTablestatisticsrequestsreceivedfromthe
Port
CountofPortstatisticsrequestsreceivedfromthe
Vendor
stats
CountofVendorstatisticsrequestsreceivedfromthe
statsstrict
CountofVendorstrictstatisticsrequestsreceivedfromthe
StatisticsReply
Desc
CountofDescriptionstatisticsrequestssenttothe
Flow
CountofFlowstatisticsrequestssenttotheControllerby
theswitch.AvailableonlyinOpenFlow1.0.
Aggregate
CountofAggregatestatisticsrequestssenttothe
Table
CountofTablestatisticsrequestssenttotheControllerby
Port
CountofPortstatisticsrequestssenttotheControllerby
251
252
Parameter
Description
Vendor
stats
CountofVendorstatisticsrequestssenttotheController
bytheswitch.AvailableonlyinOpenFlow1.0.
statsstrict
CountofVendorstrictstatisticsrequestssenttothe
MultipartRequest
Switchdescription
CountofSwitchDescriptionrequestsreceivedfromthe
Individualflow
statistics
CountofIndividualFlowstatisticsrequestsreceivedfrom
theControllerbytheswitch.AvailableonlyinOpenFlow
1.3.
Aggregateflow
statistics
CountofAggregatestatisticsrequestsreceivedfromthe
Flowtablestatistics
CountofTablestatisticsrequestsreceivedfromthe
Portstatistics
CountofPortstatisticsrequestsreceivedfromthe
Groupcounter
statistics
CountofGroupstatisticsrequestsreceivedfromthe
Groupdescription
CountofGroupdescriptionrequestsreceivedfromthe
Groupfeatures
CountofGroupfeaturesrequestsreceivedfromthe
Portdescription
CountofPortdescriptionsrequestsreceivedfromthe
MultipartReply
Switchdescription
CountofSwitchDescriptionrepliessenttotheController
Individualflow
statistics
CountofIndividualFlowstatisticsrepliessenttothe
Aggregateflow
statistics
CountofAggregatestatisticsrepliessenttotheController
Flowtablestatistics
CountofTablestatisticsrepliessenttotheControllerby
Portstatistics
CountofPortstatisticsrepliessenttotheControllerbythe
switch.AvailableonlyinOpenFlow1.3.

Parameter
Description
Groupcounter
statistics
CountofGroupstatisticsrepliessenttotheController.
Groupdescription
CountofGroupdescriptionrepliessenttotheController.
Groupfeatures
CountofGroupfeaturesrepliessenttotheController.
Portdescription
CountofPortdescriptionrepliessenttotheControllerby
BarrierRequest
Countofbarrierrequestmessagesreceivedfromthe
BarrierReply
CountofbarrierreplymessagessenttotheController
bytheswitch.
ErrorMessages
Countoferrormessageshandledsending/receivingerror
messages.
HelloFailedSent
Incompatible
Countoferrormessagessentbytheswitchiftheversionin
theHellomessageisincompatiblewiththeversionofthe
Controller.
HelloFailedRecv
Incompatible
Countoferrormessagesreceivedbytheswitchifthe
versionintheHellomessageisincompatiblewiththe
versionoftheController.
BadRequest
BadVersion
Countoferrormessagessentduetobadversioninthe
requestheader.
BadType
Countoferrormessagessentduetobadtypeinthe
requestheader.
BadStat
Countoferrormessagessentduetoaspecificstatistics
requestthatisnotsupported.AvailableonlyinOpenFlow
1.0.
BadVendor
Countoferrormessagessentduetovendorspecific
messagethatisnotsupported.Availableonlyin
OpenFlow1.0.
BadSubtype
Countoferrormessagessentduetomessagesubtypethat
isnotsupported.AvailableonlyinOpenFlow1.0.
BadMultipart
Countoferrormessagessentduetounknownmultipart
requesttypespecifiedinthemultipartrequest
message.AvailableonlyinOpenFlow1.3.
253

Parameter
Description
Permissionerror
Countoferrormessagessentbecausetheactionreceived
intheflowmodmessagePortModFailedisnot
permitted.AvailableonlyinOpenFlow1.3.
BadLen
Countoferrormessagessentduetowrongrequestlength
fortypeofmessagereceivedintherequestheader.
BufferEmpty
Countoferrormessagessentwhenthespecifiedbufferin
therequestdoesnotexist.
BufferUnknown
therequestisunknown.
BadTableID
Countoferrormessagessentwhenthespecified
tableidintherequestisinvalidorthetableid
doesntexist.AvailableonlyinOpenFlow1.3.
BadPort
Countoferrormessagessentduetoinvalidportinthe
portmodmessage.AvailableonlyinOpenFlow1.3.
BadPacket
Countoferrormessagessentwhenthespecifiedpacketis
invalidinpacketout.AvailableonlyinOpenFlow1.3.
MultipartBuffer
Overflow
themultipartrequestisoverflowed.Availableonlyin
OpenFlow1.3.
BadAction
254
BadType
Countoferrormessagessentduetoduetounknown
actiontypespecifiedinflow_modmessage.
BadLen
Countoferrormessagessentduetowrongactionlength
fortypeofmessagereceivedintheflow_modmessage.
BadOutPort
Countoferrormessagesentduetoinvalidportinthe
actionfieldspecifiedflow_modmessage.
BadArgument
Countoferrormessagesentduetobadactionargumentin
flow_modmessagethatisnotsupported.
PermissionError
Countoferrormessagesentduetopermissionerrorwhile
processingtheflow_modmessagereceived.Availableonly
inOpenFlow1.3.
TooMany
Countoferrormessagesentduetotoomanyactions
receivedintheflow_modmessagethatcannotbe
handled.
BadOutGroup
Countoferrormessagesentduetoinexistentgroupinthe
flow_modmessagereceived.AvailableonlyinOpenFlow
1.3.

Parameter
Description
MatchInconsistent
Countoferrormessagessentbecausetheactioncannot
applyforthismatchorbecausethereisasetfield
missingprerequisite.AvailableonlyinOpenFlow1.3.
UnsupportedOrder
Countoferrormessagessentbecausetheactionorderin
anapplyactionsinstructionisunsupportedforthe
actionlist.AvailableonlyinOpenFlow1.3.
BadSetType
Countoferrormessagessentduetounsupportedtypein
thesetfieldaction.AvailableonlyinOpenFlow1.3.
BadSetLen
Countoferrormessagessentduetolengthprobleminthe
setfieldaction.AvailableonlyinOpenFlow1.3.
BadSetArgument
Countoferrormessagessentduetobadargumentinthe
setfieldaction.AvailableonlyinOpenFlow1.3.
BadInstruction
UnknownInstructio Countoferrormessagessentduetounknowninstruction
n
inthereceivedflowmodmessage.Availableonlyin
OpenFlow1.3.
Unsupport
Instruction
Countoferrormessagessentduetounsupported
instructioninthereceivedflowmodmessage.Available
onlyinOpenFlow1.3.
BadLen
Countoferrormessagessentduetowronginstruction
length.AvailableonlyinOpenFlow1.3.
PermissionError
Countoferrormessagessentduetopermissionerror
whileprocessingtheinstruction.Availableonlyin
OpenFlow1.3.
BadMatch
BadType
Countoferrormessagessentduetounsupportedmatch
typeinthematch.AvailableonlyinOpenFlow1.3.
BadLen
Countoferrormessagessentduetowrongmatchlength.
BadMACAddr
Mask
CountoferrormessagessentduetounsupportedMAC
addressmaskinthematch.AvailableonlyinOpenFlow
1.3.
BadIPAddrMask
CountoferrormessagessentduetounsupportedIP
addressmaskinthematch.AvailableonlyinOpenFlow
1.3.
BadWildcards
Countoferrormessagessentduetounsupported
combinationoffieldsmaskedoromittedinthematch.
255

Parameter
Description
BadField
Countoferrormessagessentduetounsupportedfield
typeinthematch.AvailableonlyinOpenFlow1.3.
BadValue
Countoferrormessagessentduetounsupportedvaluein
amatchfield.AvailableonlyinOpenFlow1.3.
BadMask
Countoferrormessagessentduetounsupportedmask
(neitheraMACaddressnoranIPaddressmask)inthe
match.AvailableonlyinOpenFlow1.3.
BadPrerequisites
Countoferrormessagessentduetounfulfilled
prerequisiteinthematch.AvailableonlyinOpenFlow1.3.
DuplicatedField
Countoferrormessagessentduetoduplicatedfieldsin
thematch.AvailableonlyinOpenFlow1.3.
FlowModFailed
AllTableFull
Countoferrormessagesduetotablefullwhenaddingor
updatingflow_modmessage.AvailableonlyinOpenFlow
1.0.
Unknown
Countoferrormessagessentwhentheerroris
unspecified.AvailableonlyinOpenFlow1.3.
TableFull
Countoferrormessagessentbecauseoffulltablewhen
addingorupdatingtheflowmodmessage.Available
onlyinOpenFlow1.3.
BadTableID
Countoferrormessagessentbecausethespecified
tableidintheflowmodmessageisinvalidorbecause
thetableiddoesntexist.AvailableonlyinOpenFlow
1.3.
Overlap
Countoferrormessagessentduetoanattempttoadd
overlappingflow_modmessages.
PermissionError
Countoferrormessagesduetopermissionsnotavailable
toperformactionreceivedintheflow_modmessage
Port_Mod_Failed.
Countoferrormessagessentduetoinvalid
EmergencyTimeout emergencytimeoutintheflowmodmessage.Available
onlyinOpenFlow1.0.
256
BadTimeout
Countoferrormessagessentwhenthespecifiedidle/hard
timeoutintheflow_modmessageisunsupported.
BadCommand
Countoferrormessagessentduetounknowncommand.
Unsupported
Countoferrormessagessentduetounsupportedaction
list.AvailableonlyinOpenFlow1.0.

Parameter
Description
BadFlags
Countoferrormessagessentwhenthespecifiedflagsin
theflow_modmessageareunsupported.Availableonlyin
OpenFlow1.3.
GroupModFailed
GroupExists
CountoferrormessagesenttoControllerduetoalready
existinggroup.AvailableonlyinOpenFlow1.3.
InvalidGroup
CountoferrormessagesenttoControllerduetoinvalid
group.AvailableonlyinOpenFlow1.3.
Weight
Unsupported
CountoferrormessagesenttoControllerdueto
unsupportedweightparameter.Availableonlyin
OpenFlow1.3.
OutofGroups
CountoferrormessagesenttoControllerduetofullgroup
table.AvailableonlyinOpenFlow1.3.
OutofBuckets
CountoferrormessagesenttoControllerduetofull
bucketcountpergroup.AvailableonlyinOpenFlow1.3.
Chaining
Unsupported
unsupportedgroupsthatforwardtogroups.Available
onlyinOpenFlow1.3.
WatchUnsupported CountoferrormessagesenttoControllerdueto
unsupportedwatchparameter.Availableonlyin
OpenFlow1.3.
Loop
unsupportedcheckingthatnoloopiscreatedwhile
chaininggroups.AvailableonlyinOpenFlow1.3.
UnknownGroup
unsupportedgrouptype.AvailableonlyinOpenFlow1.3.
ChainedGroup
unsupportedgroupsthatforwardtogroups.Available
onlyinOpenFlow1.3.
BadType
CountoferrormessagesenttoControllerduetowrong
grouptype.AvailableonlyinOpenFlow1.3.
BadCommand
unsupportedcommand.AvailableonlyinOpenFlow1.3.
BadBucket
CountoferrormessagesenttoControllerduetoerrorin
bucket.AvailableonlyinOpenFlow1.3.
BadWatch
CountoferrormessagesenttoControllerduetoerrorin
watchgroup.AvailableonlyinOpenFlow1.3.
PermissionError
CountoferrormessagesenttoControllerduepermission
error.AvailableonlyinOpenFlow1.3.
257

Parameter
Description
PortModFailed
258
BadPort
Countoferrormessagessentduetoinvalidportin
port_modmessage.
Badhwaddr
Countoferrormessagessentduetowronghardware
addressspecifiedinport_modmessage.
BadConfig
Countoferrormessagessentduetoinvalidconfiginthe
port_modmessage.AvailableonlyinOpenFlow1.3.
BadAdvertise
Countoferrormessagessentduetoinvalidadvertisein
theport_modmessage.AvailableonlyinOpenFlow1.3.
PermissionError
whileprocessingtheport_modmessage.Availableonly
inOpenFlow1.3.
SwitchConfig
Failed
BadFlags
Countoferrormessagessentduetoinvalidflagsinthe
switchconfigmessage.AvailableonlyinOpenFlow
1.3.
PermissionError
whileprocessingtheswitchconfigmessage.Available
onlyinOpenFlow1.3.
Management Processor Statistics

ThefollowingcommandsdisplayMPstatistics:
Table 120. ManagementProcessorStatisticsCommands
showmppacketcounters
Displayspacketstatistics,tocheckforleadsandload.Toviewasampleoutput
andadescriptionofthestats,seepage 261.
Commandmode:All
showmptcpblock
DisplaysallTCPcontrolblocksthatareinuse.Toviewasampleoutputanda
descriptionofthestats,seepage 269.
Commandmode:All
showmpudpblock
DisplaysallUDPcontrolblocksthatareinuse.Toviewasampleoutput,see
page 270.
Commandmode:All
showprocessescpu
DisplaysCPUutilizationforperiodsof1second,5seconds,1minuteand5
minutes.Toviewasampleoutputandadescriptionofthestats,seepage 271.
Commandmode:All
259
MP Packet Statistics Commands

ThefollowingcommandsdisplayMPPacketstatistics:
Table 121. PacketStatisticsCommands
Displayspacketstatistics,tocheckforleadsandload.Toviewasampleoutput
andadescriptionofthestats,seepage 261.
Commandmode:All
showmppacketdump{all|rx|tx}
alldisplaysallpacketstatisticsandlogsreceivedorsentbytheCPU.
rxdisplaysallpacketstatisticsandlogsreceivedbytheCPU.
txdisplaysallpacketstatisticsandlogssentbytheCPU.
Commandmode:All
showmppacketlast{both|rx|tx}<numberoflogs(11000)>
bothdisplaysalistofthemostrecentpacketsreceivedorsentbytheCPU.
rxdisplaysalogofthemostrecentpacketsreceivedbytheCPU.
txdisplaysalogofthemostrecentpacketssentbytheCPU.
Commandmode:All
showmppacketlogs{all|rx|tx}
alldisplaysalogofallpacketsreceivedorsentbytheCPU.
rxdisplaysalogofpacketsreceivedbytheCPU.
txdisplaysalogofpacketssentbytheCPU.
Commandmode:All
showmppacketparse{rx|tx}<parsingoption>
Displaysalistofreceivedorsentpacketsthatfittheparsingoption.Foralist
ofparsingoptions,seepage 265.
Commandmode:All
clearmppacketlogs
Clearsallpacketstatisticsandlogs.
260
MP Packet Statistics
ThefollowingcommanddisplaysMPpacketstatistics:
Commandmode:All
CPUpacketstatisticsat10:11:10WedOct22,2014
Packetrate:IncomingOutgoing
1second:20
4seconds:10
64seconds:20
Packetcounters:ReceivedSent
Totalpackets:359121289149
Sincebootup:359121289149
BPDUs:34178404
Ciscopackets:00
ARPRequests:1004191
ARPReplies:49880
LACPpackets:00
IPv4packets:10039486826
ICMPRequests:077321
ICMPReplies:773150
IGMPpackets:00
PIMpackets:00
VRRPpackets:00
TCPpackets:84174
FTP00
HTTP00
SSH00
TACACS00
TELNET84174
TCPother00
UDPpackets:176669331
DHCP135105175
NTP33
PTP00
RADIUS00
SNMP41534153
TFTP00
UDPother00
RIPpackets:00
OSPFpackets:00
BGPpackets:00
IPv6packets:66478
LLDPPDUs:516223848
FCoEFIPPDUs:00
ECPPDUs:064
MgmtSockPackets:19252986833
Other:14147762
261
PacketBufferStatistics:
allocs:973757
frees:973753
failures:0
dropped:0
smallpacketbuffers:
current:1
max:2048
threshold:512
hiwatermark:2
hiwatertime:15:11:47MonOct20,2014
mediumpacketbuffers:
current:3
max:2048
threshold:512
hiwatermark:5
hiwatertime:15:12:17MonOct20,2014
jumbopacketbuffers:
current:0
max:16
hiwatermark:0
pkt_hdrstatistics:
current:0
max:3072
hiwatermark:12
ThefollowingtabledescribesMPpacketstatistics.
Table 122. PacketStatistics
Statistics
Description
PacketsreceivedbyCPU
262
Totalpackets
Totalnumberofpacketsreceived
BPDUs
TotalnumberofspanningtreeBridgeProtocolData
Unitsreceived.
Ciscopackets
TotalnumberofUniDirectionalLinkDetection(UDLD)
packetsandCiscoDiscoveryProtocol(CDP)packets
received.
ARPpackets
TotalnumberofAddressResolutionProtocolpackets
received.
IPv4packets
TotalnumberofIPv4packetsreceived.
IPv6packets
TotalnumberofIPv6packetsreceived.
LLDPPDUs
TotalnumberofLinkLayerDiscoveryProtocoldata
unitsreceived.
Other
Totalnumberofotherpacketsreceived.
Table 122. PacketStatistics(continued)

Statistics
Description
PacketBufferStatistics
allocs
Totalnumberofpacketallocationsfromthepacket
bufferpoolbytheTCP/IPprotocolstack.
frees
Totalnumberoftimesthepacketbuffersarefreed
(released)tothepacketbufferpoolbytheTCP/IP
protocolstack.
failures
Totalnumberofpacketallocationfailuresfromthe
packetbufferpoolbytheTCP/IPprotocolstack.
smallpacketbuffers
current
Totalnumberofpacketallocationswithsizelessthan
128bytesfromthepacketbufferpoolbytheTCP/IP
protocolstack.
max
Maximumnumberofsmallpacketallocations
supported.
threshold
Thresholdvalueforsmallpacketallocations,beyond
whichonlyhighprioritysmallpacketsareallowed.
hiwatermark
Thehighestnumberofpacketallocationwithsizeless
than128bytesfromthepacketbufferpoolbytheTCP/IP
protocolstack.
hiwatertime
Timestampthatindicateswhenthehiwatermarkwas
reached.
mediumpacketbuffers
current
Totalnumberofpacketallocationswithsizebetween
128to1536bytesfromthepacketbufferpoolbythe
TCP/IPprotocolstack.
max
Maximumnumberofmediumpacketallocations
supported.
threshold
Thresholdvalueformediumpacketallocations,beyond
whichonlyhighprioritymediumpacketsareallowed.
hiwatermark
Thehighestnumberofpacketallocationwithsize
between128to1536bytesfromthepacketbufferpoolby
theTCP/IPprotocolstack.
hiwatertime
Timestampthatindicateswhenthehiwatermarkwas
reached.
263
Table 122. PacketStatistics(continued)

Statistics
Description
jumbopacketbuffers
current
Totalnumberofpacketallocationswithmorethan1536
bytesfromthepacketbufferpoolbytheTCP/IPprotocol
stack.
max
Maximumnumberofjumbopacketallocations
supported.
hiwatermark
Thehighestnumberofpacketallocationwithmorethan
protocolstack.
pkt_hdrstatistics
264
current
Totalnumberofpacketallocationswithmorethan1536
bytesfromthepacketbufferpoolbytheTCP/IPprotocol
stack.
max
Maximumnumberofpacketallocationswithmorethan
protocolstack.
hiwatermark
Thehighestnumberofpacketallocationwithmorethan
protocolstack.
Logged Packet Statistics

Thefollowingcommanddisplaysloggedpacketsthathavebeenreceivedorsent,
basedonthespecifiedfilter:
showmppacketparse{rx|tx}<parsingoption>
Thefilteroptionsaredescribedinthefollowingtable.
Table 123. PacketLogParsingOptions
showmppacketparse{rx|tx}arp
DisplaysonlyARPpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}bgp
DisplaysonlyBGPpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}bpdu
DisplaysonlyBPDUslogged
Commandmode:All
showmppacketparse{rx|tx}cisco
DisplaysonlyCiscopackets(BPDU/CDP/UDLD)logged.
Commandmode:All
showmppacketparse{rx|tx}dhcp
DisplaysonlyDHCPpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}ecp
DisplaysonlyECPpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}fcoe
DisplaysonlyFCoEFIPPDUslogged.
Commandmode:All
showmppacketparse{rx|tx}ftp
DisplaysonlyFTPpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}http
DisplaysonlyHTTPpacketslogged.
Commandmode:All
265
Table 123. PacketLogParsingOptions(continued)

showmppacketparse{rx|tx}https
DisplaysonlyHTTPSpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}icmp
DisplaysonlyICMPpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}igmp
DisplaysonlyIGMPpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}ipaddr<IPv4address>
DisplaysonlyloggedpacketswiththespecifiedIPv4address.
Commandmode:All
showmppacketparse{rx|tx}ipv4
DisplaysonlyIPv4packetslogged.
Commandmode:All
showmppacketparse{rx|tx}ipv6
DisplaysonlyIPv6packetslogged.
Commandmode:All
showmppacketparse{rx|tx}lacp
DisplaysonlyLACPPDUslogged.
Commandmode:All
showmppacketparse{rx|tx}lldp
DisplaysonlyLLDPPDUslogged.
Commandmode:All
showmppacketparse{rx|tx}mac<MACaddress>
DisplaysonlyloggedpacketswiththespecifiedMACaddress.
Commandmode:All
showmppacketparse{rx|tx}ntp
DisplaysonlyNTPpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}ospf
DisplaysonlyOSPFpacketslogged.
Commandmode:All
266

showmppacketparse{rx|tx}other
Displayslogsofallpacketsnotexplicitlyselectable.
Commandmode:All
showmppacketparse{rx|tx}pim
DisplaysonlyPIMpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}port<portaliasornumber>
Displaysonlyloggedpacketswiththespecifiedport.
Commandmode:All
showmppacketparse{rx|tx}radius
DisplaysonlyRADIUSpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}rarp
DisplaysonlyReverseARPpackets.
Commandmode:All
showmppacketparse{rx|tx}raw
Displaysrawpacketbufferinadditiontoheaders.
Commandmode:All
showmppacketparse{rx|tx}rip
DisplaysonlyRIPpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}snmp
DisplaysonlySNMPpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}ssh
DisplaysonlySSHpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}tacacs
DisplaysonlyTACACSpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}tcp
DisplaysonlyTCPpacketslogged.
Commandmode:All
267

showmppacketparse{rx|tx}tcpother
DisplaysonlyTCPotherportpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}telnet
DisplaysonlyTELNETpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}tftp
DisplaysonlyTFTPpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}udp
DisplaysonlyUDPpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}udpother
DisplaysonlyUDPotherportpacketslogged.
Commandmode:All
showmppacketparse{rx|tx}vlan<VLANID(14095)>
DisplaysonlyloggedpacketswiththespecifiedVLAN.
Commandmode:All
showmppacketparse{rx|tx}vrrp
DisplaysonlyVRRPpacketslogged.
Commandmode:All
268
TCP Statistics
ThefollowingcommanddisplaysMPTCPstatistics:
showmptcpblock
Commandmode:All
AllTCPallocatedcontrolblocks:
15d7bae8:0:0:0:0:0:0:0:00<=>
0:0:0:0:0:0:0:0830listen
15d7b978:0.0.0.00<=>
0.0.0.0830listen
15d1f700:0:0:0:0:0:0:0:00<=>
0:0:0:0:0:0:0:080listen
15d1f5b0:0.0.0.00<=>
0.0.0.080listen
15d7af58:0:0:0:0:0:0:0:00<=>
0:0:0:0:0:0:0:023listen
15d7add8:0.0.0.00<=>
0.0.0.023listen
15d82558:0:0:0:0:0:0:0:00<=>
0:0:0:0:0:0:0:022listen
15d817f0:0.0.0.00<=>
0.0.0.022listen
ThefollowingtabledescribestheMPTCPstatistics.
Table 124. MPSpecifiedTCPStatistics
Statistics
Description
14835bd8
Memory
0.0.0.0
DestinationIPaddress
Destinationport
172.31.38.107
SourceIP
80
Sourceport
listen
State
269
UDP Statistics
ThefollowingcommanddisplaysMPUDPstatistics:
showmpudpblock
Commandmode:All
DataPorts:
AllUDPallocatedcontrolblocks:
68:listen
161:listen
500:listen
270
CPU Statistics
ThefollowingcommandsdisplayCPUusestatistics:
showprocessescpu
Commandmode:All
TotalCPUUtilization:For1second:0.66%
For5second:3.02%
For1minute:3.73%
For5minute:3.69%
Highestthreadutil:100%by58(I2C)at11:31:32SatMar10,2012
ThreadThreadUtilizationStatus
IDName1sec5sec1Min5Min
1STEM0.00%0.00%0.00%0.00%idle
2STP0.00%0.00%0.00%0.00%idle
3MFDB0.00%0.00%0.00%0.00%idle
4TND0.00%0.00%0.00%0.00%idle
5CONS0.00%0.01%0.38%0.08%running
6TNET0.00%0.00%0.00%0.00%idle
...
123PBR0.00%0.00%0.00%0.00%idle
124HIST0.00%0.00%0.00%0.00%idle
126NORM0.00%0.00%0.00%0.00%idle
127DONE0.00%0.00%0.00%0.00%idle
ThefollowingtabledescribestheCPUstatistics.
Table 125. CPUStatistics
Statistics
Description
ThreadID
ThethreadIDnumber.
ThreadName
Thenameofthethread.
1sec
ThepercentofCPUuseover1second.
5sec
ThepercentofCPUuseover5seconds.
1Min
ThepercentofCPUuseover1minute.
5Min
ThepercentofCPUuseover5minutes.
Status
Thestatusoftheprocess.
271
CPU Statistics History

ThefollowingcommanddisplaysahistoryofCPUusestatistics:
showprocessescpuhistory
Commandmode:All
CPUUtilizationHistory
17(IP)98%at22:17:24MonFeb20,2012
59(LACP)9%at22:17:33MonFeb20,2012
110(ETMR)12%at22:17:34MonFeb20,2012
110(ETMR)12%at22:17:36MonFeb20,2012
110(ETMR)12%at22:17:40MonFeb20,2012
110(ETMR)12%at22:17:45MonFeb20,2012
110(ETMR)17%at22:17:47MonFeb20,2012
110(ETMR)18%at22:17:49MonFeb20,2012
110(ETMR)25%at22:20:28MonFeb20,2012
110(ETMR)26%at22:39:08MonFeb20,2012
37(SNMP)28%at22:46:20MonFeb20,2012
94(PROX)57%at23:29:36MonFeb20,2012
94(PROX)63%at23:29:37MonFeb20,2012
94(PROX)63%at23:29:39MonFeb20,2012
58(I2C)64%at16:21:54TueFeb21,2012
5(CONS)86%at18:41:54TueFeb21,2012
58(I2C)88%at18:41:55TueFeb21,2012
58(I2C)88%at21:29:41SatFeb25,2012
58(I2C)98%at12:04:59TueFeb28,2012
58(I2C)100%at11:31:32SatMar10,2012
272
QoS Statistics
ThefollowingcommandsdisplayQoSstatistics:
Table 126. QoSStatisticsCommands
showqosprotocolpacketcontrolprotocolcounters
[<packettype>]
Displaysthetotalpacketcountoftheselectedpackettypereceivedby
hardware.Thefollowingpackettypesareallowed:
802.1x(IEEE802.1xpackets)
applicationcripackets(criticalpacketsofvariousapplications)
arpbcast(ARPbroadcastpackets)
arpucast(ARPunicastreplypackets)
bpdu(SpanningTreeProtocolpackets)
ciscobpdu(CiscoSTPpackets)
destunknown(packetswithdestinationnotyetlearned)
dhcp(DHCPpackets)
ecp(ECPpackets)
icmp(ICMPpackets)
icmp6(ICMP6packets)
igmp(IGMPpackets)
ipv4miscellaneous(IPv4packetswithIPoptionsandTTLexception)
ipv6nd(IPv6NeighborDiscoverypackets)
lacp(LACPpackets)
lldp(LLDPpackets)
oflowcntrler(packetsthathittheOpenFlowsendtocontrollerfilter)
oflowdefault(packetsthathittheOpenFlowdefaultfilter)
oflowmgmt(packetsthathittheOpenFlowmanagementfilter)
ospf(OSPFpackets)
ospf3(OSPF3Packets)
pim(PIMpackets)
rip(RIPpackets)
system(systemprotocols,suchastftp,ftp,telnetorssh)
udld(UDLDpackets)
vlag(VLAGpackets)
vrrp(VRRPpackets)
Commandmode:All
273
Table 126. QoSStatisticsCommands

showqosprotocolpacketcontrolqueuecounters
[<packetqueuenumber043>|all]
Displaysthetotalnumberofpacketsreceivedbyeachqueue.Thealloption
displaysthenumberofpacketsreveivedbyallqueues,includingthereserved
packetqueues.
Commandmode:All
clearqosprotocolpacketcontrolall
Clearsallpacketqueuestatistics.
clearqosprotocolpacketcontrolprotocolcounters
[<packettype>]
Clearspacketqueuestatisticsfortheselectedpackettype.
clearqosprotocolpacketcontrolqueuecounters
[<queuenumber>]
Clearspacketqueuestatisticsfortheselectedqueue.
274
Access Control List Statistics

ThefollowingcommandsdisplayACLstatistics:
Table 127. ACLStatisticsCommands
showaccesscontrolcounters
DisplaysallACLstatistics.
Commandmode:All
showaccesscontrollist<1640>counters
DisplaystheAccessControlListstatisticsforaspecificACL.
Commandmode:All
showaccesscontrollist6<1128>counters
DisplaystheIPv6ACLstatisticsforaspecificACL.
Commandmode:All
showaccesscontrolmacl<1128>counters
DisplaystheACLstatisticsforaspecificmanagementACL(MACL).
Commandmode:All
showaccesscontrolmeter<1127>counters
DisplaysACLmeterstatistics.
Commandmode:All
showaccesscontrolvmap<1128>counters
DisplaysVLANMapstatisticsfortheselectedVMAP.Forasampledisplay,
seepage 276.
Commandmode:All
clearaccesscontrollist{<1640>|all}counters
ClearsACLstatistics.
clearaccesscontrollist6{<1128>|all}counters
ClearsIPv6ACLstatistics.
clearaccesscontrolmacl{<1128>|all}counters
ClearsManagementACL(MACL)statistics.
275
Table 127. ACLStatisticsCommands(continued)

clearaccesscontrolmeter<1127>counters
ClearsACLmeterstatistics.
clearaccesscontrolvmap{<1128>}counters
ClearsVLANMapstatistics.
ACL Statistics
ThisoptiondisplaysACLstatistics.
showaccesscontrolcounters
Commandmode:All
HitsforACL1:26057515
HitsforACL2:26057497
VMAP Statistics
ThefollowingcommanddisplaysVLANMapstatistics.
showaccesscontrolvmap<1128>counters
Commandmode:All
HitsforVMAP1:57515
276
SNMP Statistics
ThefollowingcommanddisplaysSNMPstatistics:
showsnmpservercounters
Commandmode:All
SNMPstatistics:
snmpInPkts:150097snmpInBadVersions:0
snmpInBadC'tyNames:0snmpInBadC'tyUses:0
snmpInASNParseErrs:0snmpEnableAuthTraps:0
snmpOutPkts:150097snmpInBadTypes:0
snmpInTooBigs:0snmpInNoSuchNames:0
snmpInBadValues:0snmpInReadOnlys:0
snmpInGenErrs:0snmpInTotalReqVars:798464
snmpInTotalSetVars:2731snmpInGetRequests:17593
snmpInGetNexts:131389snmpInSetRequests:615
snmpInGetResponses:0snmpInTraps:0
snmpOutTooBigs:0snmpOutNoSuchNames:1
snmpOutBadValues:0snmpOutReadOnlys:0
snmpOutGenErrs:1snmpOutGetRequests:0
snmpOutGetNexts:0snmpOutSetRequests:0
snmpOutGetResponses:150093snmpOutTraps:4
snmpSilentDrops:0snmpProxyDrops:0
ThefollowingtabldescribestheSNMPstatistics.
Table 128. SNMPStatistics
Statistic
Description
snmpInPkts
ThetotalnumberofMessagesdeliveredtothe
SNMPentityfromthetransportservice.
snmpInBadVersions
ThetotalnumberofSNMPMessages,whichwere
deliveredtotheSNMPprotocolentityandwerefor
anunsupportedSNMPversion.
snmpInBadCtyNames
ThetotalnumberofSNMPMessagesdeliveredto
theSNMPentitywhichusedanSNMPcommunity
namenotknowntothesaidentity(theswitch).
snmpInBadCtyUses
ThetotalnumberofSNMPMessagesdeliveredto
theSNMPprotocolentitywhichrepresentedan
SNMPoperationwhichwasnotallowedbythe
SNMPcommunitynamedintheMessage.
277
Table 128. SNMPStatistics(continued)

Statistic
Description
snmpInASNParseErrs
ThetotalnumberofASN.1orBERerrors
encounteredbytheSNMPprotocolentitywhen
decodingSNMPMessagesreceived.
Note: OSIsmethodofspecifyingabstractobjectsis
calledASN.1(AbstractSyntaxNotationOne,
definedinX.208),andonesetofrulesfor
representingsuchobjectsasstringsofonesand
zerosiscalledtheBER(BasicEncodingRules,
definedinX.209).ASN.1isaflexiblenotationthat
allowsonetodefineavarietyofdatatypes,from
simpletypessuchasintegersandbitstringsto
structuredtypessuchassetsandsequences.BER
describeshowtorepresentorencodevaluesofeach
ASN.1typeasastringofeightbitoctets.
278
snmpEnableAuthTraps
Anobjecttoenableordisabletheauthentication
trapsgeneratedbythisentity(theswitch).
snmpOutPkts
ThetotalnumberofSNMPMessageswhichwere
passedfromtheSNMPprotocolentitytothe
transportservice.
snmpInBadTypes
ThetotalnumberofSNMPMessageswhichfailed
ASNparsing.
snmpInTooBigs
ThetotalnumberofSNMPProtocolDataUnits
(PDUs)whichweredeliveredtotheSNMPprotocol
entityandforwhichthevalueoftheerrorstatus
fieldistoobig.
snmpInNoSuchNames
fieldisnoSuchName.
snmpInBadValues
fieldisbadValue.
snmpInReadOnlys
ThetotalnumberofvalidSNMPProtocolDataUnits
(PDUs),whichweredeliveredtotheSNMPprotocol
fieldis`readOnly.Itshouldbenotedthatitisa
protocolerrortogenerateanSNMPPDU,which
containsthevalue`readOnlyintheerrorstatus
field.Assuch,thisobjectisprovidedasameansof
detectingincorrectimplementationsoftheSNMP.
Statistic
Description
snmpInGenErrs
(PDUs),whichweredeliveredtotheSNMPprotocol
fieldisgenErr.
snmpInTotalReqVars
ThetotalnumberofMIBobjectswhichhavebeen
retrievedsuccessfullybytheSNMPprotocolentity
asaresultofreceivingvalidSNMPGetRequestand
GetNextProtocolDataUnits(PDUs).
snmpInTotalSetVars
ThetotalnumberofMIBobjects,whichhavebeen
alteredsuccessfullybytheSNMPprotocolentityas
aresultofreceivingvalidSNMPSetRequest
ProtocolDataUnits(PDUs).
snmpInGetRequests
ThetotalnumberofSNMPGetRequestProtocol
DataUnits(PDUs),whichhavebeenacceptedand
processedbytheSNMPprotocolentity.
snmpInGetNexts
ThetotalnumberofSNMPGetNextProtocolData
Units(PDUs),whichhavebeenacceptedand
snmpInSetRequests
ThetotalnumberofSNMPSetRequestProtocol
snmpInGetResponses
ThetotalnumberofSNMPGetResponseProtocol
snmpInTraps
ThetotalnumberofSNMPTrapProtocolDataUnits
(PDUs),whichhavebeenacceptedandprocessedby
theSNMPprotocolentity.
snmpOutTooBigs
(PDUs),whichweregeneratedbytheSNMP
protocolentityandforwhichthevalueofthe
errorstatusfieldistoobig.
snmpOutNoSuchNames
errorstatusisnoSuchName.
snmpOutBadValues
errorstatusfieldisbadValue.
snmpOutReadOnlys
Notinuse.
279
280
Statistic
Description
snmpOutGenErrs
errorstatusfieldisgenErr.
snmpOutGetRequests
ThetotalnumberofSNMPGetRequestProtocol
DataUnits(PDUs),whichhavebeengeneratedby
snmpOutGetNexts
ThetotalnumberofSNMPGetNextProtocolData
Units(PDUs),whichhavebeengeneratedbythe
SNMPprotocolentity.
snmpOutSetRequests
ThetotalnumberofSNMPSetRequestProtocol
snmpOutGetResponses
ThetotalnumberofSNMPGetResponseProtocol
snmpOutTraps
ThetotalnumberofSNMPTrapProtocolDataUnits
(PDUs),whichhavebeengeneratedbytheSNMP
protocolentity.
snmpSilentDrops
ThetotalnumberofGetRequestPDUs,
GetNextRequestPDUs,
GetBulkRequestPDUs,SetRequestPDUs,and
InformRequestPDUsdeliveredtothe
OSPFSNMPv2entitywhichweresilentlydropped
becausethesizeofareplycontaininganalternate
ResponsePDUwithanemptyvariablebindings
fieldwasgreaterthaneitheralocalconstraintorthe
maximummessagesizeassociatedwiththe
originatoroftherequest.
snmpProxyDrops
ThetotalnumberofGetRequestPDUs,
GetNextRequestPDUs,
GetBulkRequestPDUs,SetRequestPDUs,and
InformRequestPDUsdeliveredtotheSNMP
entitywhichweresilentlydroppedbecausethe
transmissionofthemessagetoaproxytargetfailed
inamannersuchthatnoResponsePDUcouldbe
returned.
NTP Statistics
LenovoN/OSusesNTP(NetworkTimingProtocol)version3tosynchronizethe
switchsinternalclockwithanatomictimecalibratedNTPserver.WithNTP
enabled,theswitchcanaccuratelyupdateitsinternalclocktobeconsistentwith
otherdevicesonthenetworkandgeneratesaccuratesyslogs.
ThefollowingcommanddisplaysNTPstatistics:
showntpcounters
Commandmode:All
NTPstatistics:
PrimaryServer:
RequestsSent:17
ResponsesReceived:17
Updates:1
SecondaryServer:
RequestsSent:0
ResponsesReceived:0
Updates:0
Lastupdatebasedonresponsefromprimaryserver.
Lastupdatetime:15:22:05WedNov28,2012
Currentsystemtime:8:05:21ThuNov29,2012
ThefollowingtabledescribestheNTPstatistics.
Table 129. NTPStatistics
Field
Description
PrimaryServer
RequestsSent:ThetotalnumberofNTPrequeststhe
switchsenttotheprimaryNTPservertosynchronize
time.
ResponsesReceived:ThetotalnumberofNTP
responsesreceivedfromtheprimaryNTPserver.
Updates:Thetotalnumberoftimestheswitchupdated
itstimebasedontheNTPresponsesreceivedfromthe
primaryNTPserver.
RequestsSent:ThetotalnumberofNTPrequeststhe
switchsenttothesecondaryNTPservertosynchronize
time.
ResponsesReceived:ThetotalnumberofNTP
responsesreceivedfromthesecondaryNTPserver.
Updates:Thetotalnumberoftimestheswitchupdated
itstimebasedontheNTPresponsesreceivedfromthe
secondaryNTPserver.
SecondaryServer
Lastupdatebased
onresponsefrom
primaryserver
Lastupdateoftimeontheswitchbasedoneitherprimary
orsecondaryNTPresponsereceived.
281
Table 129. NTPStatistics

Field
Description
Lastupdatetime
Thetimestampshowingthetimewhentheswitchwaslast
updated.
Currentsystem
time
Theswitchsystemtimewhenthefollowingcommandwas
issued:
showntpcounters
ThefollowingcommanddisplaysinformationaboutNTPassociatedpeers:
showntpassociations
Commandmode:All
addressrefclockstwhen(s)offset(s)
*12.200.151.18198.72.72.103353162
*synced,#unsynced
ThefollowingtabledescribestheNTPassociationsstatistics.
Table 130. NTPAssociations
282
Field
Description
address
Peeraddress
refclock
Peerreferenceclockaddress
st
Peerstratum
when(s)
TimeinsecondssincethelatestNTPpacketwasreceived
fromthepeer
offset(s)
Offsetinsecondsbetweenthepeerclockandlocalclock
Statistics Dump
Thefollowingcommanddumpsswitchstatistics:
showcounters
Usethedumpcommandtodumpallswitchstatistics(40Kormore,dependingon
yourconfiguration).Thisdatacanbeusedtotuneordebugswitchperformance.
Ifyouwanttocapturedumpdatatoafile,setyourcommunicationsoftwareon
yourworkstationtocapturesessiondatapriortoissuingthedumpcommand.
283
284
Chapter 4. Configuration Commands

ThischapterdiscusseshowtousetheCommandLineInterface(CLI)formaking,
viewingandsavingswitchconfigurationchanges.Manyofthecommands,
althoughnotnew,displaymoreordifferentinformationthanintheprevious
version.Importantdifferencesarecalledoutinthetext.
Table 131. GeneralConfigurationCommands
copyrunningconfigbackupconfig
Copythecurrent(running)configurationfromswitchmemorytothe
backupconfigpartition.Fordetails,seepage 585.
copyrunningconfigstartupconfig
startupconfigpartition.
copyrunningconfig{ftp|tftp|sftp}
BacksupcurrentconfigurationtoafileontheselectedFTP/TFTP/SFTPserver.
copy{ftp|tftp|sftp}runningconfig
RestorescurrentconfigurationfromaFTP/TFTP/SFTPserver.Fordetails,see
page 586.
copy{tftp|sftp}{cacert|hostkey|hostcert|publickey}
ImportinterfaceusedbyNISTcertifiedtestlaboratoriesforUSGv6(NISTSP
500267)certificationpurposes.RequiredforRSAdigitalsignature
authenticationverificationduringIKEv2interoperabilitytesting.UsesTFTPor
SFTPtoimport:
cacert:CertificateAuthorityrootcertificate
hostkey:hostprivatekey
hostcert:hostpublickey
publickey:hostpublickey
write[memory]
activeconfigpartition.
285
Table 131. GeneralConfigurationCommands

showrunningconfig
Dumpscurrentconfigurationtoascriptfile.Fordetails,seepage 584.
showrunningconfigdiff
Displaysrunningconfigurationchangesthathavebeenappliedbutnotsaved
toflashmemory.
286
Viewing and Saving Changes

Asyouusetheconfigurationcommandstosetswitchparameters,thechangesyou
maketakeeffectimmediately.Youdonotneedtoapplythem.Configuration
changesarelostthenexttimetheswitchboots,unlessyousavethechanges.
Youcanviewallrunningconfigurationchangesthathavebeenappliedbutnot
savedtoflashmemoryusingtheshowrunningconfigdiffcommandin
PrivilegedEXECmode.
Note: SomeoperationscanoverridethesettingsoftheConfigurationcommands.
Therefore,settingsyouviewusingtheConfigurationcommands(forexample,
portstatus)mightdifferfromruntimeinformationthatyouviewusingthe
Informationcommands.TheInformationcommandsdisplaycurrentruntime
informationofswitchparameters.
Saving the Configuration

Youmustsaveconfigurationsettingstoflashmemory,sotheG8052reloadsthe
settingsafterareboot.
Note: Ifyoudonotsavethechanges,theywillbelostthenexttimethesystemis
rebooted.
Tosavethenewconfiguration,enterthefollowingcommand:
RS G8052#copyrunningconfigstartupconfig
or:
RS G8052#write[memory]
Note: Thewritecommanddoesntprompttheuserforconfirmation.
Whenyousaveconfigurationchanges,thechangesaresavedtotheactive
configurationblock.Forinstructionsonselectingtheconfigurationtorunatthe
nextsystemreboot,seeSelectingaConfigurationBlockonpage 608.
Chapter 4: Configuration Commands
287
System Configuration
Thesecommandsprovideconfigurationofswitchmanagementparameterssuchas
userandadministratorprivilegemodepasswords,webbasedmanagement
settingsandmanagementaccesslists.
Table 132. SystemConfigurationOptions
banner<180characters>
Configuresaloginbannerofupto80characters.Whenauseroradministrator
logsintotheswitch,theloginbannerisdisplayed.Itisalsodisplayedaspartof
theoutputfromtheshowsysinfocommand.
Commandmode:Globalconfiguration
nobanner
Deletestheloginbanner.
[no]bootstrictenable
Enablesordisablesswitchoperationinsecuritystrictmode.Whenenabled,
theauthenticationandprivacyprotocolsandalgorithmsofthedeviceare
compliantwithNISTSP800131A,withnoncomplaintprotocolsand
algorithmsdisabled.
Note:Thissettingisappliedonlyafterareboot,duringwhichthedevicewill
beresettodefaultfactoryconfiguration.
Bydefault,thissettingisdisabled.
Commandmode:Globalconfiguration.
hostname<164characters>
Enablesdisplayingofthehostname(systemadministratorsname)inthe
CommandLineInterface(CLI).
nohostname
Deletesthehostnamesetbythesystemadministratoranddisplaysthedefault
systemhostnameintheCLI.
lineconsolelength<0300>
ConfiguresthenumberoflinesperscreendisplayedintheCLIbydefaultfor
consolesessions.Settingitto0disablespaging.
Thedefaultvalueis28.
nolineconsole
Setslineconsolelengthtothedefaultvalueof28.
288
Table 132. SystemConfigurationOptions(continued)

linevtylength<0300>
SetsthedefaultnumberoflinesperscreendisplayedforTelnetandSSH
sessions.Avalueof0disablespaging.
nolinevty
Setslinevtylengthtothedefaultvalueof28.
[no]prompting
EnablesordisablesCLIconfirmationprompts.
Bydefault,thissettingsisenabled.
Note:Whendisabled,theswitchwillchoosethedefaultanswer.
systemcustomdst
ConfiguresCustomDaylightSavingTimesettings.Forcommandoptions,see
page 335.
systemdate<yyyy><mm><dd>
Promptstheuserforthesystemdate.Thedateretainsitsvaluewhenthe
switchisrebooted.
[no]systemdaylight
Enablesordisablesdaylightsavingstimeinthesystemclock.Whenenabled,
theswitchwilladdanextrahourtothesystemclocksothatitisconsistent
withthelocalclock.
Bydefault,thisoptionisdisabled.
[no]systemdefaultip
EnablesordisablesdefaultIPaddressoninterface1.
Thedefaultsettingisenabled.
289

[no]systemdhcp[hostname|syslog]
EnablesordisablesDynamicHostControlProtocolforsettingtheIPaddress
oninterface1.Whenenabled,theIPaddressobtainedfromtheDHCPserver
overridesthestaticIPaddress.
hostnameenablesordisableshostnameoptionsupport
syslogenablesordisableslogserveroptionsupport
systemidle<060>
SetstheidletimeoutforCLIsessionsinminutes.Avalueof0disablesthe
systemidletimeout.
Thedefaultvalueis10minutes.
systemlinkscan{fast|normal|slow}
Configuresthelinkscanintervalusedtopollthestatusofports.Thevaluesfor
thedifferentintervalsare:
fast75miliseconds
normal150miliseconds
slow500miliseconds
systemnotice<maximum2021charactermultilineloginnotice><.toend>
[addline<noticetext>]
DisplaysaloginnoticeimmediatelybeforetheEnterpassword:prompt.
Thisnoticecancontainupto2021charactersandnewlines.Theaddline
optionaddsnewlinesoftexttotheexistingloginnoticewithoutreplacingit.
nosystemnotice
Deletestheloginnotice.
[no]systempacketlogging
EnablesordisablesloggingofpacketsthatcometotheCPU.
290

[no]systemresetcontrol
Enablesordisablestheresetcontrolflag.Whenenabled,theswitchcontinues
tofunctionafteracrashofthemainprocessor,usingthelastknownLayer2/3
information.
[no]systemserverportsport<portaliasornumber>
Addsorremovesthespecifiedporttothelistofserverports.Formoredetails,
seepage 338.
[no]systemserviceledenable
Enables(on)ordisables(off)theServiceRequiredLEDonthefrontpanelof
theswitchunit.
systemtime<hh>:<mm>:<ss>
Configuresthesystemtimeusinga24hourclockformat.Thetimeretainsits
valuewhentheswitchisrebooted.
systemtimezone[<timezoneindex(1374)>]
Configuresthetimezonewheretheswitchresides.Youarepromptedtoselect
yourlocation(continent,country,region)bythetimezonewizard.Oncea
regionisselected,theswitchupdatesthetimetoreflectlocalchangesto
DaylightSavingsTime,etc.
Thetimezonecanbedirectlyspecifiedusingitsuniquetimezoneindex.
nosystemtimezone
Deletesthetimezoneconfiguration.
systemusbeject
AllowsyoutosafelyremoveaUSBdrivefromtheUSBport,without
corruptingfilesonthedrive.
terminaldontask
DisablesCLIconfirmationpromptsforthecurrentsession.Theswitchwill
choosethedefaultanswer.
Note:Whenusingthiscommandanysettingsconfiguredthroughthe
promptingcommandwillbetemporarilydisregardedforthedurationofthe
currentsession.
Commandmode:All
291

noterminaldontask
EnablesCLIconfirmationpromptsforthecurrentsession.
Note:Whenusingthiscommandanysettingsconfiguredthroughthe
promptingcommandwillbetemporarilydisregardedforthedurationofthe
currentsession.
Commandmode:All
terminallength<0300>
ConfiguresthenumberoflinesperscreendisplayedintheCLIforthecurrent
session.Avalueof0disablespaging.
Bydefault,itissettothecorrespondinglinevtylengthorline
consolelengthvalueineffectatlogin.
Commandmode:All
sslminimumversion{tls10|tls11|tls12}
ConfigurestheminimumacceptedTransportLayerSecurity(TLS)version.
tls10TLSversion1.0
tls11TLSversion1.1
tls12TLSversion1.2
showbootstrict
Displaysthecurrentsecuritystrictmodestatus.
showsystem
Displaysthecurrentsystemparameters.
Commandmode:All
292
System Error Disable and Recovery Configuration

TheErrorDisableandRecoveryfeatureallowstheswitchtoautomaticallydisable
aportifanerrorconditionisdetectedontheport.Theportremainsinthe
errordisabledstateuntilitisreenabledmanuallyorreenabledautomaticallyby
theswitchafteratimeoutperiodhaselapsed.Theerrordisabledstateofaport
doesnotpersistacrossasystemreboot.
Table 133. ErrorDisableConfigurationOptions
[no]errdisablerecovery
Globallyenablesordisablesautomaticerrorrecoveryforerrordisabledports.
Thedefaultsettingisdisabled.
Note:Eachportmusthaveerrorrecoveryenabledtoparticipateinautomatic
errorrecovery.
errdisabletimeout<3086400>
Configurestheerrorrecoverytimeout,inseconds.Afterthetimerexpires,the
switchattemptstoreenabletheport.
Thedefaultvalueis300seconds.
Note:Whenyouchangethetimeoutvalue,allcurrenterrorrecoverytimers
arereset.
showerrdisable
DisplaysthecurrentsystemErrorDisableconfiguration.
Commandmode:All
293
Link Flap Dampening Configuration

TheLinkFlapDampeningfeatureallowstheswitchtoautomaticallydisableaport
iftoomanylinkflaps(linkup/linkdown)aredetectedontheportduringa
specifiedtimeinterval.Theportremainsintheerrordisabledstateuntilitis
reenabledmanuallyorreenabledautomaticallybytheswitchafteratimeout
periodhaselapsed.
Table 134. LinkFlapDampeningConfigurationOptions
[no]errdisablelinkflapenable
EnablesordisablesLinkFlapDampening.
errdisablelinkflapmaxflaps<1100>
Configuresthemaximumnumberoflinkflapsallowedintheconfiguredtime
period.
Thedefaultvalueis5.
errdisablelinkflaptime<5500>
Configuresthetimeperiod,inseconds.
showerrdisablelinkflap
DisplaysthecurrentLinkFlapDampeningparameters.
Commandmode:All
294
System Host Log Configuration

ThefollowingtabledescribestheSystemHostLogcommands.
Table 135. HostLogConfigurationOptions
loggingbufferseverity<07>
Setstheseveritylevelofthesyslogmessagessavedtoflashmemory.
Thedefaultis7,whichmeanslogallseveritylevels.
nologgingbufferseverity
Disablesthesavingofsyslogmessagestotheflashmemory.
[no]loggingconsole
Enablesordisablesdeliveringsyslogmessagestotheconsole.
Note:Whennecessary,disablingconsoleloggingensurestheswitchisnot
affectedbysyslogmessages.
loggingconsoleseverity<07>
Thisoptionsetstheseveritylevelofsyslogmessagesdeliveredviatheconsole,
telnet,andSSH.Thesystemdisplaysonlymessageswiththeselectedseverity
levelandabove.Forexample,ifyousettheconsoleseverityto2,only
messageswithseveritylevelof1and2aredisplayed.
Thedefaultis7,whichmeanslogallseveritylevels.
nologgingconsoleseverity
Disablesdeliveringsyslogmessagestotheconsolebasedonseverity.
logginghost<12>address<IPv4address>
SetstheIPaddressofthefirstorsecondsysloghost.
logginghost<12>address6<IPv6address>
SetstheIPv6addressofthefirstorsecondsysloghost.
logginghost<12>facility<07>
Thisoptionsetsthefacilitylevelofthefirstorsecondsysloghostdisplayed.
Thedefaultvalueis0.
295
Table 135. HostLogConfigurationOptions(continued)

logginghost<12>severity<07>
Thisoptionsetstheseveritylevelofthefirstorsecondsysloghostdisplayed.
Thedefaultvalueis7,whichmeanslogallseveritylevels.
nologginghost<12>
Deletesthespecifiedsysloghost.
[no]logginglog{all|<feature>}
Enablesordisablesfeaturesforwhichsyslogmessagescanbegenerated.You
canchoosetoenable/disablesyslogonallavailablefeaturesbyusingthe
optionallorenable/disablespecificfeatures(suchasvlans,stg,orssh).
Foracompletelistoffeatures,seepage 297.
[no]loggingpdropenable
Enablesordisablespacketdroplogging.
Bydefault,theswitchgeneratesthesemessagesonceevery30minutes.
loggingpdropinterval<030>
Configuresthepacketdroplogginginterval,inminutes.
loggingsourceinterfaceloopback<15>
Setstheloopbackinterfacenumberforsyslogs.
nologgingsourceinterfaceloopback
Removestheloopbackinterfaceforsyslogs.
296
Table 135. HostLogConfigurationOptions(continued)

[no]loggingsynchronous[level{<07>|all}]
Enablesordisablessynchronousloggingmessages.Whenenabled,logging
messagesaredisplayedsynchronously.
Thelevelparametersetsthemessageseveritylevel.Messageswithaseverity
levelequaltoorhigherthanthisvaluearedisplayedasynchronously.Low
numbersindicategreaterseverity.Thealloptiondisplaysallmessages
asynchronously,regardlesstheseveritylevel.
Thedefaultsettingis2.
[|{include|exclude|section|begin|head<12000>|
|last<12000>}]
Displaysthecurrentsyslogsettings,followedbythemostrecent2000syslog
messages.
expression
Commandmode:All
Thefollowinglistdisplaysthefeaturesavailableforthe[no]logginglog
command:
arpinspectionDynamicARPInspectionlogging
bgpBGPlogging
cfgConfigurationlogging
cfgchgConfigurationChangelogging
cliCommandLineInterfacelogging
consoleConsolelogging
difftrakConfigurationDifferenceTrackinglogging
dot1x802.1xlogging
297
298
failoverFailoverlogging
hotlinksHotLinkslogging
igmpgroupIGMPgrouplogging
igmpmrouterIGMPmrouterlogging
igmpquerierIGMPquerierlogging
ipInternetProtocolversion4logging
ipv6InternetProtocolversion6logging
lacpLinkAggregationControlProtocollogging
linkSystemPortLinklogging
lldpLLDPlogging
managementManagementlogging
mldMLDlogging
netconfNETCONFConfigurationProtocollogging
ntpNetworkTimeProtocollogging
openflowOpenflowlogging
ospfOSPFlogging
ospfv3OSPFversion3logging
privatevlanPrivateVLANlogging
rmonRemoteMonitoringlogging
serverSyslogserverlogging
slpServiceLocationProtocollogging
spanningtreegroupSpanningtreegrouplogging
sshSecureShelllogging
stackingStackinglogging(availableonlyinstacking)
systemSystemlogging
vlagVirtualLinkAggregationlogging
vlanVLANlogging
vmVirtualMachinelogging
vrrpVirtualRouterRedundancyProtocollogging
webWeblogging
SSH Server Configuration

FortheRackSwitchG8052,thesecommandsenableSecureShellaccessfromanySSH
client.
Table 136. SSHServerConfigurationOptions
[no]sshenable
EnablesordisablestheSSHserver.
sshgeneratehostkey
GeneratetheRSAhostkey.
sshmaxauthattempts<120>
SetsthemaximumnumberofSSHauthenticationattempts.
Thedefaultvalueis2.
nosshmaxauthattempts
ResetsthemaximumnumberofSSHauthenticationattemptstoitsdefault
valueof2.
sshport<TCPportnumber(165535)>
SetstheSSHserverportnumber.
Thedefaultportnumberis22.
nosshport
ResetstheSSHserverporttothedefaultportnumber22.
sshpublickeyindex<1100>{adduser|deluser}username
<username>
Assignsanotherusernameforexistingpublickeysorremovesausername.
[no]sshscpenable
EnablesordisablestheSCPapplyandsave.
sshscppassword
SettheadministrationpasswordforSCPaccess.
299
Table 136. SSHServerConfigurationOptions(continued)

showssh
DisplaysthecurrentSSHserverconfiguration.
Commandmode:All
showsshclienthostkey{address<SFTPserverIPaddress>|all}
DisplaysthecurrentSFTP/SSHhostkeyconfiguration.
address:DisplaysaspecificSFTP/SSHhostkey
all:DisplaysallSFTP/SSHhostkeys
Commandsmode:All
showsshclientpubkey{all|index<1100>|username<username>}
DisplaysthecurrentSSHpublickeyconfiguration.
all:DisplaysallSSHpublickeys
index:DisplaysaspecificSSHpublickey
username:DisplaysalltheSSHpublickeysofaparticularuser
Commandmode:All
clearsshclienthostkey{address<SFTPserverIPaddress>|all}
ClearsstoredSFTP/SSHhostkeyconfiguration.
address:ClearsaspecificSFTP/SSHhostkey
all:ClearsallSFTP/SSHhostkeys
clearsshclientpubkey{all|index<1100>|username<username>}
Clearsstoredpublickeyconfiguration.
all:ClearsallSSHpublickeys
index:ClearsaspecificSSHpublickey
username:ClearsaparticularusernamefromalltheSSHpublickeys
300
RADIUS Server Configuration

ThefollowingtabledescribestheRADIUSServercommands.
Table 137. RADIUSServerConfigurationOptions
[no]radiusserverbackdoor
EnablesordisablestheRADIUSbackdoorforTelnet/SSH/HTTP/HTTPS.The
defaultvalueisdisabled.
ToobtaintheRADIUSbackdoorpasswordforyourswitch,contactyour
ServiceandSupportline.
[no]radiusserverenable
EnablesordisablestheRADIUSserver.
radiusserverport<UDPportnumber(15003000)>
ConfigurestheRADIUSserverport.EnterthenumberoftheUDPporttobe
configured.
Thedefaultportis1645.
defaultradiusserverport
ResetstheRADIUSserverporttothedefaultUDPport1645.
radiusserverprimaryhost{<hostname>|<IPaddress>}key
<132characters>
SetstheprimaryRADIUSserveraddressandthesharedsecretbetweenthe
switchandtheRADIUSserver(s).
noradiusserverprimaryhost[key]
DeletestheprimaryRADIUSserver.Thekeyoptiononlydeletestheshared
secretbetweentheswitchandtheRADIUSserver.
radiusserverretransmit<13>
Setsthenumberoffailedauthenticationrequestsbeforeswitchingtoa
differentRADIUSserver.
Thedefaultis3requests.
301
Table 137. RADIUSServerConfigurationOptions(continued)

radiusserversecondaryhost{<hostname>|<IPaddress>}key
<132characters>
SetsthesecondaryRADIUSserveraddressandthesharedsecretbetweenthe
switchandtheRADIUSserver(s).
[no]radiusserversecondaryhost[key]
DeletesthesecondaryRADIUSserver.Thekeyoptiononlydeletestheshared
secretbetweentheswitchandtheRADIUSserver.
[no]radiusserversecurebackdoor
EnablesordisablestheRADIUSbackdoorusingsecurepasswordfor
telnet/SSH/HTTP/HTTPS.Thiscommanddoesnotapplywhenbackdooris
enabled.
radiusservertimeout<110>
Setstheamountoftime,inseconds,beforeaRADIUSserverauthentication
attemptisconsideredtohavefailed.
Thedefaultis3seconds.
ipradiussourceinterfaceloopback<15>
SetstheRADIUSsourceloopbackinterface.
noipradiussourceinterfaceloopback
RemovesallRADIUSsourceloopbackinterfaces.
showradiusserver
DisplaysthecurrentRADIUSserverparameters.
Commandmode:All
302
TACACS+ Server Configuration

TACACS(TerminalAccessControllerAccessControlsystem)isanauthentication
protocolthatallowsaremoteaccessservertoforwardauserslogonpasswordto
anauthenticationservertodeterminewhetheraccesscanbeallowedtoagiven
system.TACACSisnotanencryptionprotocolandthereforelesssecurethan
TACACS+andRemoteAuthenticationDialInUserService(RADIUS)protocols.
BothTACACSandTACACS+aredescribedinRFC1492.
TACACS+protocolismorereliablethanRADIUS,asTACACS+usesthe
TransmissionControlProtocol(TCP)whereasRADIUSusestheUserDatagram
Protocol(UDP).Also,RADIUScombinesauthenticationandauthorizationina
userprofile,whereasTACACS+separatesthetwooperations.
TACACS+offersthefollowingadvantagesoverRADIUSastheauthentication
device:
TACACS+isTCPbased,soitfacilitatesconnectionorientedtraffic.
Itsupportsfullpacketencryption,asopposedtopasswordonlyin
authenticationrequests.
Itsupportsdecoupledauthentication,authorizationandaccounting.
Table 138. TACACS+ServerConfigurationOptions

[no]tacacsserveraccountingenable
EnablesordisablesTACACS+accounting.
tacacsserverattempts<110>
Setsthenumberoffailedloginattemptsbeforedisconnectingtheuser.
Thedefaultis2attempts.
notacacsserverattempts
Resetsthenumberoffailedloginattemptstothedefaultvalueof2.
[no]tacacsserverbackdoor
EnablesordisablestheTACACS+backdoorforTelnet,SSH/SCPor
HTTP/HTTPS.
EnablingthisfeatureallowsyoutobypasstheTACACS+servers.Itis
recommendedthatyouuseSecureBackdoortoensuretheswitchissecured,
becauseSecureBackdoordisallowsaccessthroughthebackdoorwhenthe
TACACS+serversareresponding.
ToobtaintheTACACS+backdoorpasswordforyourG8052,contactyour
ServiceandSupportline.
303
Table 138. TACACS+ServerConfigurationOptions(continued)

tacacsserverchpassp<132characters>
DefinesthepasswordfortheprimaryTACACS+server.
tacacsserverchpasss<132characters>
DefinesthepasswordforthesecondaryTACACS+server.
[no]tacacsservercommandauthorization
EnablesordisablesTACACS+commandauthorization.
[no]tacacsservercommandlogging
EnablesordisablesTACACS+commandlogging.
tacacsserverdirectedrequest[notruncate|restricted]
EnablesTACACS+directedrequest,whichusesaspecifiedTACACS+server
forauthentication,authorization,accounting.Whendirectedrequestis
enabled,eachusermustaddaconfiguredTACACS+serverhostnametothe
username(forexample,username@hostname)duringlogin.
Thiscommandallowsthefollowingoptions:
restricted:OnlytheusernameissenttothespecifiedTACACS+server.
notruncate:TheentireloginstringissenttotheTACACS+server.
notacacsserverdirectedrequest
DisablesTACACS+directedrequest.
[no]tacacsserverenable
EnablesordisablestheTACACS+server.
Bydefault,theserverisdisabled.
[no]tacacsserverenablebypass
Enablesordisablestheenablebypassforadministratorprivilege.
Bydefault,enablebypassisenabled.
[no]tacacsserverencryptionenable
EnablesordisablestheencryptionofTACACS+packets.
304

[no]tacacsserverpasswordchange
EnablesordisablesTACACS+passwordchange.
Thedefaultvalueisdisabled.
tacacsserverport<TCPportnumber(165000)>
EnterthenumberoftheTCPporttobeconfigured.
Thedefaultis49.
defaulttacacsserverport
ResetstheTACACS+serverporttothedefaultportnumber49.
tacacsserverprimaryhost{<hostname>|<IPaddress>}key
<132characters>
SetstheprimaryTACACS+serveraddressandthesharedsecretbetweenthe
switchandtheTACACS+server(s).
notacacsserverprimaryhost[key]
DeletestheprimaryTACACS+server.Thekeyoptiononlyremovesthe
sharedsecretbetweentheswitchandtheTACACS+server.
[no]tacacsserverprivilegemapping
EnablesordisablesTACACS+privilegelevelmapping.
tacacsserverretransmit<13>
differentTACACS+server.
tacacsserversecondaryhost{<hostname>|<IPaddress>}key
<132characters>
SetsthesecondaryTACACS+serveraddressandthesharedsecretbetweenthe
switchandtheTACACS+server(s).
305

notacacsserversecondaryhost[key]
DeletesthesecondaryTACACS+server.Thekeyoptiononlyremovesthe
sharedsecretbetweentheswitchandtheTACACS+server.
[no]tacacsserversecurebackdoor
EnablesordisablesTACACS+securebackdooraccessthroughTelnet,
SSH/SCPorHTTP/HTTPSonlywhentheTACACS+serversarenot
responding.
Thisfeatureisrecommendedtopermitaccesstotheswitchwhenthe
TACACS+serversbecomeunresponsive.Ifnobackdoorisenabled,theonly
waytogainaccesswhenTACACS+serversareunresponsiveistousetheback
doorviatheconsoleport.
Thedefaultisdisabled.
tacacsservertimeout<415>
Setstheamountoftime,inseconds,beforeaTACACS+serverauthentication
attemptisconsideredtohavefailed.Thedefaultis5seconds.
tacacsserverusermapping<015>{user|oper|admin}
MapsaTACACS+authorizationleveltoaswitchuserlevel.EnteraTACACS+
authorizationlevel(015),followedbythecorrespondingswitchuserlevel.
notacacsserverusermapping<015>
RemovesaTACACS+authorizationlevel.
iptacacsserversourceinterfaceloopback<15>
SetstheTACACS+sourceloopbackinterface.
noiptacacsserversourceinterfaceloopback
DeletesallTACACS+sourceloopbackinterfaces.
primarypassword
ConfiguresthepasswordfortheprimaryTACACS+server.TheCLIwill
promptyouforinput.
306

secondarypassword
ConfiguresthepasswordforthesecondaryTACACS+server.TheCLIwill
promptyouforinput.
showtacacsserver
DisplayscurrentTACACS+configurationparameters.
Commandmode:All
307
LDAP Server Configuration

LDAP(LightweightDirectoryAccessProtocol)isanauthenticationprotocolthat
allowsaremoteaccessservertoforwardauserslogonpasswordtoan
authenticationservertodeterminewhetheraccesscanbeallowedtoagiven
system.
Table 139. LDAPServerConfigurationOptions
ldapserverattributeusername<1128characters>
SetsacustomizedLDAPuserattribute.Theuserattributeneedstobesettocn
ifLDAPserverisMSactivedirectory.
Thedefaultvalueisuid.
noldapserverattribute[username]
ResetstheLDAPattributestoitsdefaultvalue.Theusernameoptiononly
resetstheLDAPuserattributetoitsdefaultvalueofuid.
[no]ldapserverbackdoor
EnablesordisablestheLDAPbackdoorforTelnet,SSH/SCPorHTTP/HTTPS.
ToobtaintheLDAPbackdoorpasswordforyourG8052,contactyourService
andSupportline.
ldapserverdomain<1128characters>
SetsthedomainnamefortheLDAPserver.Enterthefullpathforyour
organization.Forexample:
ou=people,dc=mydomain,dc=com
noldapserverdomain
RemovestheLDAPserverdomainname.
[no]ldapserverenable
EnablesordisablestheLDAPserver.
ldapserverport<UDPportnumber(165000)>
EnterthenumberoftheUDPporttobeconfigured.
308
Table 139. LDAPServerConfigurationOptions(continued)

defaultldapserverport
ResetstheLDAPserverporttothedefaultportnumber389.
ldapserverprimaryhost<IPaddress>
SetstheprimaryLDAPserveraddress.
noldapserverprimaryhost
DeletestheprimaryLDAPserver.
ldapserverretransmit<13>
differentLDAPserver.
ldapserversecondaryhost<IPaddress>
SetsthesecondaryLDAPserveraddress.
noldapserversecondaryhost
DeletesthesecondaryLDAPserver.
ldapservertimeout<415>
Setstheamountoftime,inseconds,beforeaLDAPserverauthentication
attemptisconsideredtohavefailed.
showldapserver
DisplaysthecurrentLDAPserverparameters.
Commandmode:All
309
NTP Server Configuration

ThesecommandsallowyoutosynchronizetheswitchclocktoaNetworkTime
Protocol(NTP)server.Bydefault,thisoptionisdisabled.
Table 140. NTPServerConfigurationOptions
[no]ntpenable
EnablesordisablestheNTPsynchronizationservice.
ntpinterval<544640>
Specifiestheinterval,thatis,howoften,inminutes,toresynchronizethe
switchclockwiththeNTPserver.
ntpipv6primaryserver<IPv6address>
PromptsfortheIPv6addressoftheprimaryNTPservertowhichyouwantto
synchronizetheswitchclock.
nontpipv6primaryserver
DeletestheIPv6primaryNTPserver.
ntpipv6secondaryserver<IPv6address>
PromptsfortheIPv6addressofthesecondaryNTPservertowhichyouwant
tosynchronizetheswitchclock.
nontpipv6secondaryserver
DeletestheIPv6secondaryNTPserver.
ntpprimaryserver{<IPaddress>|<hostname>}
PromptsfortheIPaddressorhostnameoftheprimaryNTPservertowhich
youwanttosynchronizetheswitchclock.
nontpprimaryserver
DeletestheprimaryNTPserver.
310
Table 140. NTPServerConfigurationOptions(continued)

ntpoffset<086400>
Configurestheminimumoffsetinsecondsbetweentheswitchclockandthe
NTPserverthattriggersasystemlogmessage.
nontpoffset
ResetstheNTPoffsettothedefault300secondsvalue.
ntpsecondaryserver{<IPaddress>|<hostname>}
PromptsfortheIPaddressorhostnameofthesecondaryNTPservertowhich
youwanttosynchronizetheswitchclock.
nontpsecondaryserver
DeletesthesecondaryNTPserver.
ntpsourceloopback<15>
SetstheNTPsourceloopbackinterface.
nontpsourceloopback
DeletesallNTPsourceloopbackinterface.
[no]ntpsynclogs
EnablesordisablesinformationallogsforNTPsynchronizationfailures.
Defaultsettingisenabled.
showntp
DisplaysthecurrentNTPservicesettings.
Commandmode:All
311
System SNMP Configuration

LenovoN/OSsupportsSNMPbasednetworkmanagement.InSNMPmodelof
networkmanagement,amanagementstation(client/manager)accessesasetof
variablesknownasMIBs(ManagementInformationBase)providedbythe
manageddevice(agent).IfyouarerunninganSNMPnetworkmanagement
stationonyournetwork,youcanmanagetheswitchusingthefollowingstandard
SNMPMIBs:
MIBII(RFC1213)
EthernetMIB(RFC1643)
BridgeMIB(RFC1493)
AnSNMPagentisasoftwareprocessonthemanageddevicethatlistensonUDP
port161forSNMPmessages.EachSNMPmessagesenttotheagentcontainsalist
ofmanagementobjectstoretrieveortomodify.
SNMPparametersthatcanbemodifiedinclude:
Systemname
Systemlocation
Systemcontact
UseoftheSNMPsystemauthenticationtrapfunction
Readcommunitystring
Writecommunitystring
Trapcommunitystrings
Table 141. SystemSNMPOptions

[no]snmpserverauthenticationtrapenable
Enablesordisablestheuseofthesystemauthenticationtrapfacility.
snmpservercontact<164characters>
Configuresthenameofthesystemcontact.Thecontactcanhaveamaximum
of64characters.
nosnmpservercontact
Deletesthenameofthesystemcontact.
snmpserverhost<traphostIPaddress><traphostcommunitystring
(133characters)>
Addsatraphostserver.
312
Table 141. SystemSNMPOptions(continued)

nosnmpserverhost<traphostIPaddress>
Removesthetraphostserver.
[no]snmpserverlinktrapenable
EnablesordisablesgloballythesendingofSNMPlinkupandlinkdowntraps.
[no]snmpserverlinktrapport<portaliasornumber>enable
EnablesordisablesthesendingofSNMPlinkupandlinkdowntrapsfora
specificsystemport.
snmpserverlocation<164characters>
Configuresthenameofthesystemlocation.Thelocationcanhaveamaximum
of64characters.
nosnmpserverlocation
Deletesthenameofthesystemlocation.
snmpservername<164characters>
Configuresthenameforthesystem.Thenamecanhaveamaximumof64
characters.
nosnmpservername
Deletesthenameofthesystem.
snmpserverreadcommunity<132characters>
ConfigurestheSNMPreadcommunitystring.Thereadcommunitystring
controlsSNMPgetaccesstotheswitch.Itcanhaveamaximumof32
characters.
Thedefaultreadcommunitystringispublic.
[no]snmpserverreadcommunityadditional<132characters>
AddsorremovesanadditionalSNMPreadcommunitystring.Upto7
additionalreadcommunitystringsaresupported.
313
Table 141. SystemSNMPOptions(continued)

snmpservertimeout<130>
SetsthetimeoutvaluefortheSNMPstatemachine,inminutes.
snmpservertrapsource{<IPinterfacenumber>|loopback<15>}
ConfiguresthesourceinterfaceforSNMPtraps.
nosnmpservertrapsource[loopback]
DeletesallsourceinterfacesforSNMPtraps.Theloopbackoptiononly
removestheloopbacksourceinterfaces.
snmpserverwritecommunity<132characters>
ConfigurestheSNMPwritecommunitystring.Thewritecommunitystring
controlsSNMPsetaccesstotheswitch.Itcanhaveamaximumof32
characters.
Thedefaultwritecommunitystringisprivate.
[no]snmpserverwritecommunityadditional<132characters>
AddsorremovesanadditionalSNMPwritecommunitystring.Upto7
additionalwritecommunitystringsaresupported.
showsnmpserver
DisplaysthecurrentSNMPconfiguration.
Commandmode:All
314
SNMPv3 Configuration
SNMPversion3(SNMPv3)isanextensibleSNMPFrameworkthatsupplements
theSNMPv2Frameworkbysupportingthefollowing:
anewSNMPmessageformat
securityformessages
accesscontrol
remoteconfigurationofSNMPparameters
FormoredetailsontheSNMPv3architecturepleaserefertoRFC3411toRFC3418.
Table 142. SNMPv3ConfigurationOptions
snmpserveraccess<132>
Thiscommandallowsyoutospecifyaccessrights.TheViewbasedAccess
ControlModeldefinesasetofservicesthatanapplicationcanuseforchecking
accessrightsoftheuser.Youneedaccesscontrolwhenyouhavetoprocess
retrievalormodificationrequestfromanSNMPentity.Toviewcommand
options,seepage 319.
snmpservercommunity<116>
Thecommunitytablecontainsobjectsformappingcommunitystringsand
versionindependentSNMPmessageparameters.Toviewcommandoptions,
seepage 321.
snmpservergroup<117>
Agroupmapstheusernametotheaccessgroupnamesandtheiraccessrights
neededtoaccessSNMPmanagementobjects.Agroupdefinestheaccessrights
assignedtoallnamesthatbelongtoaparticulargroup.Toviewcommand
snmpservernotify<116>
Anotificationapplicationtypicallymonitorsasystemforparticulareventsor
conditions,andgeneratesNotificationClassmessagesbasedontheseevents
orconditions.Toviewcommandoptions,seepage 324.
snmpservertargetaddress<116>
Thiscommandallowsyoutoconfiguredestinationinformation,consistingof
atransportdomainandatransportaddress.Thisisalsotermedastransport
endpoint.TheSNMPMIBprovidesamechanismforperformingsource
addressvalidationonincomingrequests,andforselectingcommunitystrings
basedontargetaddressesforoutgoingnotifications.Toviewcommand
315
Table 142. SNMPv3ConfigurationOptions(continued)

snmpservertargetparameters<116>
ThiscommandallowsyoutoconfigureSNMPparameters,consistingof
messageprocessingmodel,securitymodel,securitylevel,andsecurityname
information.Theremaybemultipletransportendpointsassociatedwitha
particularsetofSNMPparameters,oraparticulartransportendpointmaybe
associatedwithseveralsetsofSNMPparameters.Toviewcommandoptions,
seepage 323.
snmpserveruser<117>
Thiscommandallowsyoutocreateausersecuritymodel(USM)entryforan
authorizeduser.YoucanalsoconfigurethisentrythroughSNMP.Toview
commandoptions,seepage 317.
snmpserverview<1128>
ThiscommandallowsyoutocreatedifferentMIBviews.Toviewcommand
showsnmpserverv3
DisplaysthecurrentSNMPv3configuration.
Commandmode:All
316
User Security Model Configuration

YoucanmakeuseofadefinedsetofuseridentitiesusingthisSecurityModel.An
SNMPenginemusthavetheknowledgeofapplicableattributesofauser.
Thesecommandshelpyoucreateausersecuritymodelentryforanauthorized
user.YouneedtoprovideasecuritynametocreatetheUSMentry.
Table 143. UserSecurityModelConfigurationOptions
snmpserveruser<117>authenticationprotocol
{md5|sha|none}authenticationpassword
Thiscommandallowsyoutoconfiguretheauthenticationprotocoland
password.
TheauthenticationprotocolcanbeHMACMD596orHMACSHA96for
compatibilitymode,HMACSHA96forsecuritystrictmodeornone.
Thedefaultalgorithmisnone.
MD5authenticationprotocolisnotavailableinsecuritystrictmodeifyoudo
notselectSNMPv3accountbackwardcompatibility.
Whenyouconfigureanauthenticationalgorithm,youmustprovidea
password,otherwiseyouwillgetanerrormessageduringvalidation.This
commandallowsyoutocreateorchangeyourpasswordforauthentication.
snmpserveruser<117>name<132characters>
Thiscommandallowsyoutoconfigureastringthatrepresentsthenameofthe
user.Thisistheloginnamethatyouneedinordertoaccesstheswitch.
snmpserveruser<117>privacyprotocol{des|aes|none}
privacypassword
Thiscommandallowsyoutoconfigurethetypeofprivacyprotocolandthe
privacypassword.
Theprivacyprotocolprotectsmessagesfromdisclosure.Theoptionsare:
des(CBCDESSymmetricEncryptionProtocol)
aes(AES128AdvancedEncryptionStandardProtocol)
none
Ifyouspecifydesastheprivacyprotocol,thenmakesurethatyouhave
selectedoneoftheauthenticationprotocols(MD5orHMACSHA96).In
securitystrictmode,ifyoudonotselectSNMPv3accountbackward
compatibility,onlydesprivacyprotocolissupported.
Ifyouspecifyaesastheprivacyprotocol,makesurethatyouhaveselected
HMACSHA96authenticationprotocol.
Ifyouselectnoneastheauthenticationprotocol,youwillgetanerror
message.
Youcancreateorchangetheprivacypassword.
317
Table 143. UserSecurityModelConfigurationOptions

nosnmpserveruser<117>
DeletestheUSMuserentries.
showsnmpserverv3user<117>
DisplaystheUSMuserentries.
Commandmode:All
SNMPv3 View Configuration

NotethatthefirstfivedefaultvacmViewTreeFamilyentriescannotberemoved,
andtheirnamescannotbechanged.
Table 144. SNMPv3ViewConfigurationOptions
snmpserverview<1128>mask<132characters>
Thiscommanddefinesthebitmask,whichincombinationwiththe
correspondingtreedefinesafamilyofviewsubtrees.
snmpserverview<1128>name<132characters>
Thiscommanddefinesthenameforafamilyofviewsubtrees.
snmpserverview<1128>tree<163characters>
ThiscommanddefinesMIBtree,whichwhencombinedwiththe
correspondingmaskdefinesafamilyofviewsubtrees.
snmpserverview<1128>type{included|excluded}
Thiscommandindicateswhetherthecorrespondinginstancesof
vacmViewTreeFamilySubtreeandvacmViewTreeFamilyMaskthat
defineafamilyofviewsubtreesareincludedinorexcludedfromtheMIB
view.
nosnmpserverview<1128>
DeletesthevacmViewTreeFamilygroupentry.
showsnmpserverv3view<1128>
DisplaysthecurrentvacmViewTreeFamilyconfiguration.
Commandmode:All
318
View-based Access Control Model Configuration

TheviewbasedAccessControlModeldefinesasetofservicesthatanapplication
canuseforcheckingaccessrightsoftheuser.Accesscontrolisneededwhenthe
userhastoprocessSNMPretrievalormodificationrequestfromanSNMPentity.
Table 145. ViewbasedAccessControlModelOptions
snmpserveraccess<132>level{noAuthNoPriv|authNoPriv|
|authPriv}
Definestheminimumlevelofsecurityrequiredtogainaccessrights.
noAuthNoPrivmeansthattheSNMPmessagewillbesentwithout
authenticationandwithoutusingaprivacyprotocol.
authNoPrivmeansthattheSNMPmessagewillbesentwith
authenticationbutwithoutusingaprivacyprotocol.
authPrivmeansthattheSNMPmessagewillbesentbothwith
authenticationandusingaprivacyprotocol.
snmpserveraccess<132>name<132characters>
Definesthenameofthegroup.
snmpserveraccess<132>notifyview<132characters>
DefinesanotifyviewnamethatallowsyounotifyaccesstotheMIBview.
snmpserveraccess<132>readview<132characters>
DefinesareadviewnamethatallowsyoureadaccesstoaparticularMIBview.
IfthevalueisemptyorifthereisnoactiveMIBviewhavingthisvaluethenno
accessisgranted.
snmpserveraccess<132>security{usm|snmpv1|snmpv2}
Allowsyoutoselectthesecuritymodeltobeused.
snmpserveraccess<132>writeview<132characters>
DefinesawriteviewnamethatallowsyouwriteaccesstotheMIBview.Ifthe
valueisemptyorifthereisnoactiveMIBviewhavingthisvaluethenno
accessisgranted.
319
Table 145. ViewbasedAccessControlModelOptions(continued)

nosnmpserveraccess<132>
DeletestheViewbasedAccessControlentry.
showsnmpserverv3access<132>
DisplaystheViewbasedAccessControlconfiguration.
Commandmode:All
SNMPv3 Group Configuration

ThefollowingtabledescribestheSNMPv3Groupcommands.
Table 146. SNMPv3GroupConfigurationOptions
snmpservergroup<117>groupname<132characters>
Thenamefortheaccessgroupasdefinedinthefollowingcommand:
snmpserveraccess<132>name<132characters>onpage 317.
snmpservergroup<117>security{usm|snmpv1|snmpv2}
Definesthesecuritymodel.
snmpservergroup<117>username<132characters>
Setstheusernameasdefinedinthefollowingcommand:
snmpserveruser<117>name<132characters>onpage 317.
nosnmpservergroup<117>
DeletesthevacmSecurityToGroupentry.
showsnmpserverv3group<117>
DisplaysthecurrentvacmSecurityToGroupconfiguration.
Commandmode:All
320
SNMPv3 Community Table Configuration

Thesecommandsareusedforconfiguringthecommunitytableentry.The
configuredentryisstoredinthecommunitytablelistintheSNMPengine.This
tableisusedtoconfigurecommunitystringsintheLocalConfigurationDatastore
(LCD)ofSNMPengine.
Table 147. SNMPv3CommunityTableConfigurationOptions
snmpservercommunity<116>index<132characters>
Allowsyoutoconfiguretheuniqueindexvalueofarowinthistable.
Commandstring:Globalconfiguration
snmpservercommunity<116>name<132characters>
Definestheusernameasdefinedinthefollowingcommand:
snmpserveruser<117>name<132characters>onpage 317.
Commandstring:Globalconfiguration
snmpservercommunity<116>tag<1255characters>
Allowsyoutoconfigureatag.Thistagspecifiesasetoftransportendpointsto
whichacommandresponderapplicationsendsanSNMPtrap.
snmpservercommunity<116>username<132characters>
DefinesareadablestringthatrepresentsthecorrespondingvalueofanSNMP
communitynameinasecuritymodel.
nosnmpservercommunity<116>
Deletesthecommunitytableentry.
showsnmpserverv3community<116>
Displaysthecommunitytableconfiguration.
Commandmode:All
321
SNMPv3 Target Address Table Configuration

Thesecommandsareusedtoconfigurethetargettransportentry.Theconfigured
entryisstoredinthetargetaddresstablelistintheSNMPengine.Thistableof
transportaddressesisusedinthegenerationofSNMPmessages.
Table 148. TargetAddressTableConfigurationOptions
snmpservertargetaddress<116>address<IPaddress>
name<132characters>
Allowsyoutoconfigurethelocallyarbitrary,butuniqueidentifier,target
addressnameassociatedwiththisentry.
snmpservertargetaddress<116>address6<IPv6address>
name<132characters>
Allowsyoutoconfigurethelocallyarbitrary,butuniqueidentifier,targetIPv6
addressnameassociatedwiththisentry.
snmpservertargetaddress<116>name<132characters>
address<transportIPaddress>
ConfiguresatransportIPv4addressthatcanbeusedinthegenerationof
SNMPtraps.
snmpservertargetaddress<116>name<132characters>
address6<transportIPv6address>
ConfiguresatransportIPv6addressthatcanbeusedinthegenerationof
SNMPtraps.IPv6addressesarenotdisplayedintheconfiguration,butthey
doreceivetraps.
snmpservertargetaddress<116>parametersname
<132characters>
Definesthenameasdefinedinthefollowingcommand:
snmpservertargetparameters<116>name<132characters>on
page 323.
snmpservertargetaddress<116>port<TCPportrange(165535)>
Allowsyoutoconfigureatransportaddressportthatcanbeusedinthe
generationofSNMPtraps.
snmpservertargetaddress<116>taglist<1255characters>
Allowsyoutoconfigurealistoftagsthatareusedtoselecttargetaddressesfor
aparticularoperation.
322
Table 148. TargetAddressTableConfigurationOptions(continued)

nosnmpservertargetaddress<116>
DeletestheTargetAddressTableentry.
showsnmpserverv3targetaddress<116>
DisplaysthecurrentTargetAddressTableconfiguration.
Commandmode:All
SNMPv3 Target Parameters Table Configuration

Youcanconfigurethetargetparametersentryandstoreitinthetargetparameters
tableintheSNMPengine.Thistablecontainsparametersthatareusedtogenerate
amessage.Theparametersincludethemessageprocessingmodel(forexample:
SNMPv3,SNMPv2c,SNMPv1),thesecuritymodel(forexample:USM),the
securitynameandthesecuritylevel(noAuthnoPriv,authNoPrivor
authPriv).
Table 149. TargetParametersTableConfigurationOptions
snmpservertargetparameters<116>level{noAuthNoPriv|
|authNoPriv|authPriv}
Allowsyoutoselectthelevelofsecuritytobeusedwhengeneratingthe
SNMPmessagesusingthisentry.
noAuthNoPrivmeansthattheSNMPmessagewillbesentwithout
authenticationandwithoutusingaprivacyprotocol.
authNoPrivmeansthattheSNMPmessagewillbesentwith
authenticationbutwithoutusingaprivacyprotocol.
authPrivmeansthattheSNMPmessagewillbesentbothwith
authenticationandusingaprivacyprotocol.
snmpservertargetparameters<116>message{snmpv1|snmpv2c|
|snmpv3}
Allowsyoutoconfigurethemessageprocessingmodelthatisusedtogenerate
SNMPmessages.
snmpservertargetparameters<116>name<132characters>
Allowsyoutoconfigurethelocallyarbitrary,butunique,identifierthatis
associatedwiththisentry.
323
Table 149. TargetParametersTableConfigurationOptions(continued)

snmpservertargetparameters<116>security{usm|snmpv1|
|snmpv2}
AllowsyoutoselectthesecuritymodeltobeusedwhengeneratingtheSNMP
messages.
snmpservertargetparameters<116>username<132characters>
DefinesthenamethatidentifiestheuserintheUSMtable(page 317)onwhose
behalftheSNMPmessagesaregeneratedusingthisentry.
nosnmpservertargetparameters<116>
DeletesthetargetParamsTableentry.
showsnmpserverv3targetparameters<116>
DisplaysthecurrenttargetParamsTableconfiguration.
Commandmode:All
SNMPv3 Notify Table Configuration

SNMPv3usesNotificationOriginatortosendouttraps.Anotificationtypically
monitorsasystemforparticulareventsorconditionsandgenerates
NotificationClassmessagesbasedontheseeventsorconditions.
Table 150. NotifyTableOptions
snmpservernotify<116>name<132characters>
Definesalocallyarbitrary,butunique,identifierassociatedwiththisSNMP
notifyentry.
snmpservernotify<116>tag<1255characters>
Allowsyoutoconfigureatagthatcontainsatagvaluewhichisusedtoselect
entriesintheTargetAddressTable.Anyentryinthe
snmpTargetAddrTable,thatmatchesthevalueofthistag,isselected.
nosnmpservernotify<116>
Deletesthenotifytableentry.
showsnmpserverv3notify<116>
Displaysthecurrentnotifytableconfiguration.
Commandmode:All
324
System Access Configuration

ThefollowingtabledescribestheSystemAccesscommands.
Table 151. SystemAccessConfigurationOptions
[no]accesshttpenable
EnablesordisablesHTTP(Web)accesstotheBrowserBasedInterface.
Thedefaultsettingsisenabled.
accesshttpport<TCPportnumber(165535)>
SetstheswitchportusedforservingswitchWebcontent.
ThedefaultisHTTPport80.
defaultaccesshttpport
ResetstheHTTPporttothedefaultportnumber80.
accesssnmp{readonly|readwrite}
Enablesreadonly/writereadSNMPaccess.
noaccesssnmp
DisablesSNMPaccess.
[no]accesstelnetenable
EnablesordisablesTelnetaccess.
accesstelnetport<TCPportnumber(165535)>
SetsanoptionalTelnetserverportnumberforcaseswheretheserverlistens
forTelnetsessionsonanonstandardport.
defaultaccesstelnetport
ResetstheTelnetserverporttothedefaultportnumber23.
accesstftpport<TCPportnumber(165535)>
SetstheTFTPportfortheswitch.
Thedefaultisport69.
325
Table 151. SystemAccessConfigurationOptions(continued)

defaultaccesstftpport
ResetstheTFTPporttothedefaultportnumber69.
[no]accesstsbbienable
EnablesordisablesTelnet/SSHconfigurationthroughtheBrowserBased
Interface(BBI).
[no]accessuserbbienable
EnablesordisablesuserconfigurationaccessthroughtheBrowserBased
Interface(BBI).
showaccess
Displaysthecurrentsystemaccessparameters.
Commandmode:All
Management Network Configuration

ThesecommandsareusedtodefineIPaddressrangeswhichareallowedtoaccess
theswitchformanagementpurposes.
Table 152. ManagementNetworkConfigurationOptions
[no]accessmanagementnetwork<mgmtnetworkIPv4address>
<mgmtnetworkIPv4netmask>
Addsorremovesadefinednetworkthroughwhichswitchaccessisallowed
viaTelnet,SNMPortheLenovoN/OSbrowserbasedinterface.Arangeof
IPv4addressesisproducedwhenusedwithanetworkmaskaddress.Specify
anIPv4addressandmaskaddressindotteddecimalnotation.
Note:Ifyouconfigurethemanagementnetworkwithoutincludingtheswitch
interfaces,theconfigurationcausestheFirewallLoadBalancinghealthchecks
tofailandcreatesaNetworkDownstateonthenetwork.
[no]accessmanagementnetwork<mgmtnetworkIPv4address>
<mgmtnetworkIPv4netmask>{snmpro|snmprw}
AddsorremovesadefinedIPv4networkthroughwhichSNMPreadonlyor
SNMPread/writeswitchaccessisallowed.SpecifyanIPv4addressandmask
addressindotteddecimalnotation.
326
Table 152. ManagementNetworkConfigurationOptions

[no]accessmanagementnetwork6<mgmtnetworkIPv6address>
<IPv6prefixlength>
Addsorremovesadefinednetworkthroughwhichswitchaccessisallowed
viaTelnet,SNMPortheLenovoN/OSbrowserbasedinterface.Arangeof
IPv6addressesisproducedwhenusedwithaprefixlength.SpecifyanIPv6
addressinhexadecimalformatwithcolons.
Note:Ifyouconfigurethemanagementnetworkwithoutincludingtheswitch
interfaces,theconfigurationcausestheFirewallLoadBalancinghealthchecks
tofailandcreatesaNetworkDownstateonthenetwork.
[no]accessmanagementnetwork6<mgmtnetworkIPv6address>
<IPv6prefixlength>{snmpro|snmprw}
AddsorremovesadefinedIPv6networkthroughwhichSNMPreadonlyor
SNMPread/writeswitchaccessisallowed.
noaccessmanagementnetwork{snmpro|snmprw}
ClearstheIPv4SNMPreadonlyorSNMPread/writeaccesscontrollistfor
managementpurposes.
noaccessmanagementnetwork6{snmpro|snmprw}
ClearstheIPv6SNMPreadonlyorSNMPread/writeaccesscontrollistfor
managementpurposes.
showaccessmanagementnetwork
Displaysthecurrentmanagementnetworkconfiguration.
clearaccessmanagementnetwork
Removesalldefinedmanagementnetworks.
327
NETCONF Configuration
ThismenuallowsyoutoconfiguresupportforNetworkConfigurationProtocol
(NETCONF),whichprovidesmechanismstoinstall,manipulate,anddeletethe
configurationofnetworkdevices.NETCONFisdescribedinRFC4741.
Table 153. NETCONFConfigurationOptions
[no]accessnetconfenable
EnablesordisablesNETCONFaccesstotheswitch.
accessnetconftimeout<303600>
ConfiguresthetimeoutvalueforNETCONFsessions,inseconds.
defaultaccessnetconftimeout
ResetsthetimeoutvalueforNETCONFsessionstothedefaultof300seconds.
showaccess
Displaysthecurrentconfiguration.
Commandmode:All
NETCONF over SSH Configuration

ThismenuallowsyoutoenableNETCONFaccessoverSecureShell(SSH).
NETCONFoverSSHisdescribedinRFC4742.
Table 154. NETCONFoverSSHConfigurationOptions
[no]accessnetconfsshenable
EnablesordisablesNETCONFaccessoverSSH.
accessnetconfsshport<TCPportnumber(165535)>
ConfigurestheTCPportusedforNETCONF.
Thedefaultportnumberis830.
defaultnetconfsshport
ResetstheSSHportusedforNETCONFtothedefaultportnumber830.
328
User Access Control Configuration

Thefollowingtabledescribesuseraccesscontrolcommands.
Note: Passwordscanbeamaximumof128characters.
Table 155. UserAccessControlConfigurationOptions
accessuser<120>
ConfigurestheUserID.Formorecommandoptions,seepage 330.
[no]accessuseradministratorenable
Enablesordisablesthedefaultadministratoraccount.
accessuseradministratorpassword
Setstheadministrator(admin)password.Theadministratorhascomplete
accesstoallmenus,informationandconfigurationcommandsontheG8052,
includingtheabilitytochangeboththeuserandadministratorpasswords.
Thiscommandwillpromptforrequiredinformation:currentadminpassword,
newpassword(upto128characters)andconfirmationofthenewpassword.
Accessincludesoperfunctions.
Note:Youcannotdisabletheadministratorpassword.
CommandMode:Globalconfiguration
accessusereject{<username>|sessionid<sessionID>}
EjectsthespecifieduserfromtheG8052.
accessuseroperatorpassword
Setstheoperator(oper)password.Theoperatormanagesallfunctionsofthe
switch.Theoperatorcanviewallswitchinformationandstatisticsandcan
resetports.
Note:Todisabletheoperatoraccount,setthepasswordtonull(nopassword).
Thedefaultsettingisdisabled(nopassword).
accessuseruserpassword
Setstheuser(user)password.Theuserhasnodirectresponsibilityforswitch
management.Theuserviewswitchstatusinformationandstatistics,butcannot
makeanyconfigurationchanges.
Note:Todisabletheuseraccount,setthepasswordtonull(nopassword).
329
Table 155. UserAccessControlConfigurationOptions

showaccessuser
Displaysthecurrentuserstatus.
clearline<112>
EjectstheuserwiththecorrespondingsessionIDfromtheG8052.
System User ID Configuration

ThefollowingtabledescribestheSystemUserIDcommands.
Table 156. UserIDConfigurationOptions
[no]accessuser<120>enable
EnablesordisablestheuserID.
accessuser<120>level{user|operator|administrator}
SetstheClassofServicetodefinetheusersauthoritylevel.LenovoN/OS
definestheselevelsas:User,OperatorandAdministrator,withUserbeingthe
mostrestrictedlevel.
accessuser<120>name<164characters>
Definestheusernameofmaximumeightcharacters.
accessuser<120>password
Setstheuser(user)password.Thiscommandwillpromptforrequired
information:currentadminpassword,newpassword(upto128characters)and
confirmationofthenewpassword.
noaccessuser<120>
DeletestheuserID.
showaccessuser
DisplaysthecurrentuserIDconfiguration.
330
Strong Password Configuration

ThefollowingtabledescribestheStrongPasswordcommands.
Table 157. StrongPasswordConfigurationOptions
accessuserstrongpasswordclearlocaluser
{lockout|failattempts}{<username>|all}
Enableslockedoutaccountsorresetsfailedlogincountersforallusersorfora
specificuser.
[no]accessuserstrongpasswordenable
EnablesordisablesStrongPasswordrequirement.
accessuserstrongpasswordexpiry<1365>
Configuresthenumberofdaysallowedbeforethepasswordmustbechanged.
Thedefaultvalueis60days.
accessuserstrongpasswordfaillock<110>
Configuresthenumberoffailedloginattemptsthattriggertheaccount
lockout.
Thedefaultvalueis6attempts.
accessuserstrongpasswordfaillog<1255>
Configuresthenumberoffailedloginattemptsallowedbeforeasecurity
notificationislogged.
Thedefaultvalueis3loginattempts.
[no]accessuserstrongpasswordlockout
Enablesordisablesaccountlockoutafteraspecifiednumberoffailedlogin
attempts.
331
Table 157. StrongPasswordConfigurationOptions

accessuserstrongpasswordwarning<1365>
Configuresthenumberofdaysbeforepasswordexpiration,thatawarningis
issuedtousers.
Thedefaultvalueis15days.
showaccessuserstrongpassword
DisplaysthecurrentStrongPasswordconfiguration.
HTTPS Access Configuration

ThefollowingtabledescribestheHTTPAccesscommands.
Table 158. HTTPSAccessConfigurationOptions
[no]accesshttpsenable
EnablesordisablesBBIaccess(Webaccess)usingHTTPS.
accesshttpsgeneratecertificate
AllowsyoutogenerateacertificatetoconnecttotheSSLtobeusedduringthe
keyexchange.AdefaultcertificateiscreatedwhenHTTPSisenabledforthe
firsttime.Theusercancreateanewcertificatedefiningtheinformationthat
theywanttobeusedinthevariousfields.Forexample:
CountryName(2lettercode):CA
StateorProvinceName(fullname):Ontario
LocalityName(forexample,city):Ottawa
OrganizationName(forexample,company):Lenovo
OrganizationalUnitName(forexample,section):Operations
CommonName(forexample,usersname):MrSmith
Email(forexample,emailaddress):info@lenovo.com
Youwillbeaskedtoconfirmifyouwanttogeneratethecertificate.Itwilltake
approximately30secondstogeneratethecertificate.Thentheswitchwill
restartSSLagent.
accesshttpssavecertificate
AllowstheclientortheWebbrowsertoacceptthecertificateandsavethe
certificatetoFlashtobeusedwhentheswitchisrebooted.
332
Table 158. HTTPSAccessConfigurationOptions(continued)

accesshttpsdeletecertificate
Deletesthecurrentcertificatefromtheflashmemory.
accesshttpsport<TCPportnumber(165535)>
DefinestheHTTPSWebserverportnumber.
defaultaccesshttpsport
ResetstheHTTPSporttothedefaultportnumber443.
copy{tftp|sftp}cacert
EnablesyoutoimportacertificateauthorityrootcertificateusingTFTP/SFTP.
copytftpcacertaddress<hostnameorserverIPaddress>
filename<serverfilename>
EnablesyoutoimportacertificateauthorityrootcertificateusingTFTP.
copy{tftp|sftp}hostcert
EnablesyoutoimportahostcertificateusingTFTP/SFTP.
copytftphostcertaddress<hostnameorserverIPaddress>
EnablesyoutoimportahostcertificateusingTFTP.
copy{tftp|sftp}hostkey
EnablesyoutoimportahostprivatekeyusingTFTP/SFTP.
copytftphostkeyaddress<hostnameorserverIPaddress>
EnablesyoutoimportahostprivatekeyusingTFTP.
copy{tftp|sftp}publickey
EnablesyoutoimportaclientpublickeyusingTFTP/SFTP.
333
Table 158. HTTPSAccessConfigurationOptions(continued)

copytftppublickeyaddress<hostnameorserverIPaddress>
EnablesyoutoimportaclientpublickeyusingTFTP.
showaccess
DisplaysthecurrentSSLWebAccessconfiguration.
334
Custom Daylight Saving Time Configuration

UsethesecommandstoconfigurecustomDaylightSavingTime.TheDSTis
definedbytworules,thestartruleandendrule.Therulesspecifythedateswhen
theDSTstartsandfinishes.Thesedatesarerepresentedasspecificcalendardates
orasrelativeoffsetsinamonth(forexample,thesecondSundayofSeptember).
Relativeoffsetexample:
2070901=SecondSundayofSeptember,at1:00a.m.
Calendardateexample:
0070901=September7,at1:00a.m.
Table 159. CustomDSTOptions
[no]systemcustomdstenable
EnablesordisablestheCustomDaylightSavingTimesettings.
systemcustomdststartrule<WDDMMhh>
ConfiguresthestartdateforcustomDST,asfollows:
WDMMhh
W=week(05,where0meansusethecalendardate)
D=dayoftheweek(0107,where01isMonday)
MM=month(112)
hh=hour(023)
Note:Week5isalwaysconsideredtobethelastweekofthemonth.
systemcustomdstendrule<WDDMMhh>
ConfigurestheenddateforcustomDST,asfollows:
WDMMhh
W=week(05,where0meansusethecalendardate)
D=dayoftheweek(0107,where01isMonday)
MM=month(112)
hh=hour(023)
Note:Week5isalwaysconsideredtobethelastweekofthemonth.
showcustomdst
DisplaysthecurrentCustomDSTconfiguration.
Commandmode:All
335
sFlow Configuration
LenovoN/OSsupportssFlowversion5.sFlowisasamplingmethodusedfor
monitoringhighspeedswitchednetworks.Usethesecommandstoconfigurethe
sFlowagentontheswitch.
Table 160. sFlowConfigurationOptions
[no]sflowenable
EnablesordisablesthesFlowagent.
sflowport<UDPportnumber(165000)>
ConfigurestheUDPportforthesFlowserver.
defaultsflowport
ResetsthesFlowserverporttothedefaultportnumber6343.
sflowserver<IPaddress>
DefinesthesFlowserveraddressandinterfaceport.
nosflowserver
DeletesthesFlowserveraddress.
showsflow
DisplayssFlowconfigurationparameters.
Commandmode:All
336
sFlow Port Configuration

UsethefollowingcommandstoconfigurethesFlowportontheswitch.
Table 161. sFlowPortConfigurationOptions
sflowpolling<560>
ConfiguresthesFlowpollinginterval,inseconds.
Commandmode:Interfaceport
nosflowpolling
DisablessFlowpollinginterval.
sflowsampling<25665536>
ConfiguresthesFlowsamplingrate,inpacketspersample.
nosflowsampling
DisablessFlowsamplingrate.
337
Server Port Configuration

Usethesecommandstodefinealistofserverports.Portsthatarenotconfiguredas
serverportsareconsideredtobeuplinkports.VMreadylearnsVirtualMachine
informationonlyfromserverports.
Table 162. ServerPortConfigurationOptions
[no]systemserverportsport<portaliasornumber>
Addsorremovesoneormoreportstothelistofserverports.
showsystemserverports
Displaysthecurrentserverportconfiguration.
Commandmode:All
338
Port Configuration
UsethePortConfigurationcommandstoconfiguresettingsforinterfaceports.
Table 163. PortConfigurationOptions
interfaceport<portaliasornumber>
EnterInterfaceportmode.
interfaceportchannel{<152>|<53104>|lacp<165535>}
EnterInterfaceportchannelmode.Thesecommandsallowyoutoconfigure
portparametersforallportmembersintheselectedtrunkgroup
(portchannel).
[no]openflowmgmtport<portaliasornumber>
EnablesordisablesOpenFlowmanagementstatefortheports.
Note:SupportedinOpenFlowOnlymode.
[no]bpduguard
EnablesordisablesBPDUguard,toavoidSpanningTreeloopsonports
configuredasedgeports.
Commandmode:Interfaceport/Interfaceportchannel
description<164characters>
Setsadescriptionfortheport.Theassignedportdescriptionappearsnextto
theportnumberonsomeinformationandstatisticsscreens.
Thedefaultissettotheportnumber.
nodescription
Removestheinterfacedescription.
dot1p<07>
Configurestheports802.1pprioritylevel.
dot1x
Configures802.1Xportbasedauthentication.Formorecommandoptions,see
page 391.
339
Table 163. PortConfigurationOptions(continued)

[no]dscpmarking
EnablesordisablesDSCPremarkingonaport.
[no]floodblocking
EnablesordisablesportFloodBlocking.Whenenabled,unicastandmulticast
packetswithunknowndestinationMACaddressesareblockedfromtheport.
ipdhcpsnoopinglimitrate<12048>
ConfiguresthemaximumnumberofDHCPpacketsallowedpersecond.
noipdhcpsnoopinglimitrate
UnlimitsthemaximumnumberofDHCPpacketsallowedpersecond.
[no]ipdhcpsnoopingtrust
ConfiguresthisportasatrustedportforDHCPpacketsfromtheserver.
[no]learning
EnablesordisablesFDBlearningontheport.
[no]macaddresstablemacnotification
EnablesordisablesMACAddressNotification.WithMACAddress
Notificationenabled,theswitchgeneratesasyslogmessagewhenaMAC
addressisaddedorremovedfromtheMACaddresstable.
portchanneldistributiontrunkmemberindex<18>
Enablesstatictrafficdistributionontheselectedportindexoftheoutput
trunk.
portchannelminlinks<18>
Settheminimumnumberoflinksforthisport.Ifthespecifiedminimum
numberofportsarenotavailable,thetrunkisplacedinthedownstate.
[no]rmon
EnablesordisablesRemoteMonitoring(RMON)onthecurrentport.
340

shutdown
Disablestheport.(Totemporarilydisableaportwithoutchangingits
configurationattributes,refertoTemporarilyDisablingaPortonpage 346.)
noshutdown
Enablestheport.
stormcontrol{broadcast|multicast|unicast}level
rate<02097151>
Limitsthenumberofbroadcast,multicastorunicastpacketspersecondtothe
specifiedvalue.
nostormcontrol{broadcast|multicast|unicast}
Setstheporttoforwardallbroadcast,multicastorunicastpackets.
[no]switchport
Enablesordisablesroutingonaport.
switchportaccessvlan<VLANID(14094)>
ConfigurestheassociatedVLANusedinaccessmode.Defaultvalueis1forall
ports.
noswitchportaccessvlan
ResetstheaccessVLANtoitsdefaultvalue.
switchportmode{access|trunk|privatevlan}
Configurestheportstrunkingmode:
accessallowsassociationtoasingleVLAN
trunkautomaticallyaddstheporttoallcreatedVLANs.Toconfigurea
specificallowedVLANrangefortheportusethecommand:
switchporttrunkallowedvlan
privatevlanallowsassociationtoaprivateVLAN
Defaultmodeisaccess.
Note:Whenswitchingfromaccesstotrunkmode,theportinheritstheaccess
VLANasthetrunkNativeVLAN.
Note:Whenswitchingfromtrunktoaccessmode,theportinheritsthetrunk
NativeVLANastheaccessVLAN.
341

noswitchportmodeprivatevlan
Removesprivatevlanmodefromtheport.
[no]switchportprivatevlanhostassociation
<primaryVLAN(24094)><secondaryVLAN(24094)>
EnablesordisablestheprivateVLANassociationonasecondaryport.
[no]switchportprivatevlanmapping<primaryVLAN(24094)>
EnablesordisablesprivateVLANmappingonaportinpromiscuousmode.
switchporttrunkallowedvlan<VLANID(14094)>
ConfigurestheallowedVLANsintrunkmodeforthecurrentportor
portchannel.IftheallowedrangedoesnothaveanyexistingVLANs,the
lowestnumberedVLANiscreatedandbecomestheNativeVLAN.Ifthe
allowedrangecontainsanexistingVLAN(s),buttheNativeVLANisnotin
theallowedrange,theNativeVLANischangedtothelowestnumbered
existingVLAN.IfanewVLANiscreatedanditispartoftheallowedVLAN
range,theportwillalsobeaddedtothatVLAN.
switchporttrunkallowedvlan{add|remove}<VLANID(14094)>
UpdatestheassociatedVLANsintrunkmode.
addenablestheVLANrangeinadditiontothecurrentconfiguration.Ifany
VLANintherangedoesnotexist,itwillnotbecreatedandenabled
automatically.IfanewVLANiscreatedanditispartoftheallowedVLAN
range,theportwillalsobeaddedtothatVLAN.
removeeliminatestheVLANrangefromthecurrentconfiguration.Ifthe
NativeVLANisinthespecifiedrange,thesmallestavailableVLANfrom
theremainingrangewillbecomethenewNativeVLAN.Iftheremaining
rangedoesnothaveanyexistingVLANs,thelowestnumberedVLANis
createdandbecomestheNativeVLAN.
Note:TheremainingVLANrangemustcontainatleastoneVLAN.
switchporttrunkallowedvlan{all|none}
UpdatestheassociatedVLANsintrunkmode.
allassociatestheporttoallexistingregularVLANsandtoanyother
VLANthatgetscreatedafterwards.
noneremovestheportfromallcurrentlyassociatedVLANsandassignsthe
porttothedefaultVLAN(VLAN1forallports).
342

noswitchporttrunkallowedvlan
AssignstheporttoallavailabledataVLANs.
switchporttrunknativevlan<VLANID(14094)>
ConfiguresthePortVLANID(PVID)orNativeVLANusedtocarryuntagged
trafficintrunkmode.IftheVLANdoesnotexist,itisautomaticallycreated.
TheVLANmustbepresentintheportsallowedVLANrange.Defaultvalueis
1forallports.
[no]tagpvidingress
EnablesordisablestaggingtheingressframeswiththeportsVLANID.When
enabled,theNativeVLAN(PVID)tagisinsertedintountaggedand802.1Q
singletaggedingressframesasouterVLANID.
[no]vlandot1qtagnative
DisablesorenablesVLANtagpersistence.Whendisabled,theVLANtagis
removedategressfrompacketswhoseVLANtagmatchestheport
PVID/Nativevlan.
Note:Inglobalconfigurationmode,thisisanoperationalcommandusedto
settheVLANtagpersistenceonallportscurrentlytaggedatthemomentof
execution.VLANtagpersistencewillnotbesetautomaticallyforportstagged
afterwords.Also,asanoperationalcommand,itwillnotbedumpedintothe
configurationfile.
Commandmode:Globalconfiguration/Interfaceport/Interfaceportchannel
showinterfaceport<portaliasornumber>
Displaysthespecifiedportsparameters.
Commandmode:All
343
Port Error Disable and Recovery Configuration

TheErrorDisableandRecoveryfeatureallowstheswitchtoautomaticallydisable
aportifanerrorconditionisdetectedontheport.Theportremainsinthe
errordisabledstateuntilitisreenabledmanually,orreenabledautomaticallyby
theswitchafteratimeoutperiodhaselapsed.Theerrordisabledstateofaport
doesnotpersistacrossasystemreboot.
Table 164. PortErrorDisableOptions
[no]errdisablerecovery
Enablesordisablesautomaticerrorrecoveryfortheport.Thedefaultsettingis
enabled.
Note:Errorrecoverymustbeenabledgloballybeforeportlevelcommands
becomeactive.
showinterfaceport<portaliasornumber>errdisable
DisplaysthespecifiedportsErrorDisableparameters.
Commandmode:All
Port Link Flap Dampening Configuration

ThefollowingtabledescribesthePortLinkFlapDampeningcommands.
Table 165. PortLinkFlapDampeningConfigurationOptions
[no]errdisablelinkflapenable
EnablesordisablesLinkFlapDampeningontheport.Formoreinformation,
seeLinkFlapDampeningConfigurationonpage 294.
showinterfaceport<portaliasornumber>errdisablelinkflap
DisplaysthecurrentLinkFlapDampeningparametersforthespecifiedport.
Commandmode:All
344
Port Link Configuration

Usethesecommandstoconfigurelinklevelparametersfortheport/portchannel.
Table 166. PortLinkConfigurationOptions
[no]auto
Enablesordisablesautonegotiation.
duplex{full|half|auto}
Setstheoperatingmode.Thechoicesinclude:
Autonegotiation(default)
Halfduplex
Fullduplex
Note:Dataportsarefixedatfullduplex.
flowcontrol{receive|send}{on|off}
Turnsflowcontrolreceivingortransmitingonoroff.
noflowcontrol
Disablesflowcontrolonthecurrentport.
speed{10|100|1000|auto}
Setsthelinkspeed.Someoptionsarenotvalidonallports.Thechoices
include:
10Mbps
100Mbps
1000Mbps
auto(autonegotiateportspeed)
showinterfaceport<portaliasornumber>
Displaysthespecifiedportsparameters.
Commandmode:All
345
Temporarily Disabling a Port

Totemporarilydisableaportwithoutchangingitsstoredconfigurationattributes,
enterthefollowingcommandatanyprompt:
G8052(config)#interfaceport<portaliasornumber>shutdown
Becausethisconfigurationsetsatemporarystatefortheport,youdonotneedto
useasaveoperation.Theportstatewillreverttoitsoriginalconfigurationwhen
theRackSwitchG8052isrebooted.SeetheOperationsCommandsonpage 589for
otheroperationslevelcommands.
346
UniDirectional Link Detection Configuration

UDLDcommandsaredescribedinthefollowingtable.
Table 167. PortUDLDConfigurationOptions
[no]udld
EnablesordisablesUDLDontheport.
[no]udldaggressive
ConfigurestheUDLDmodefortheselectedport,asfollows:
Normal:Detectunidirectionallinksthathavemisconnectedinterfaces.The
portisdisabledifUDLDdeterminesthattheportismisconnected.Usethe
noformtoselectnormaloperation.
Aggressive:Inadditiontothenormalmode,theaggressivemodedisables
theportiftheneighborstopssendingUDLDprobesfor7seconds.
DisplaysthespecifiedportsUDLDparameters.
Commandmode:All
347
Port OAM Configuration

Operation,Administration,andMaintenance(OAM)protocolallowstheswitchto
detectfaultsonthephysicalportlinks.OAMisdescribedintheIEEE802.3ah
standard.OAMDiscoverycommandsaredescribedinthefollowingtable.
Table 168. PortOAMConfigurationOptions
[no]oam
EnablesordisablesOAMdiscoveryonthecurrentport.
[no]oampassive
EnablesordisablesOAMdiscoverypassivemode.Inpassivemode,the
currentportallowsitspeerlinktoinitiateOAMdiscovery.IfOAMdetermines
thattheportisinananomalouscondition,theportisdisabled.
DisplaysthespecifiedportsOAMparameters.
Commandmode:All
348
Port ACL Configuration

ThefollowingtabledescribesthePortACLcommands.
Table 169. ACL/QoSConfigurationOptions
[no]accesscontrollist<1640>
AddsorremovesthespecifiedACLtotheport.YoucanaddmultipleACLsto
aport,butthetotalnumberofprecedencelevelsallowedistwo.
[no]accesscontrollist6<1128>
AddsorremovesthespecifiedIPv6ACLtotheport.Youcanaddmultiple
ACLstoaport,butthetotalnumberofprecedencelevelsallowedistwo.
[no]accesscontrolgroup<1640>
AddsorremovesthespecifiedACLgrouptotheport.Youcanaddmultiple
ACLgroupstoaport,butthetotalnumberofprecedencelevelsallowedis
two.
showinterfaceport<portaliasornumber>accesscontrol
DisplayscurrentACLQoSparameters.
Commandmode:All
349
Port WRED Configuration

ThesecommandsallowyoutoconfigureWeightedRandomEarlyDetection
(WRED)parametersforaselectedport.ForglobalWREDconfiguration,see
WeightedRandomEarlyDetectionConfigurationonpage 358.
Table 170. PortWREDOptions
[no]randomdetectenable
EnablesordisablesRandomDetectionandavoidance.
[no]randomdetectecnenable
EnablesordisablesExplicitCongestionNotification(ECN).WhenECNison,
theswitchmarkstheECNbitofthepacket(ifapplicable)insteadofdropping
thepacket.ECNawaredevicesarenotifiedofthecongestionandthose
devicescantakecorrectiveactions.
Note:ECNfunctionsonlyonTCPtraffic.
showinterfaceport<portaliasornumber>randomdetect
DisplayscurrentRandomDetectionandavoidanceparameters.
Commandmode:All
350
Port WRED Transmit Queue Configuration

UsethismenutodefineWREDthresholdsfortheportstransmitqueues.Seteach
thresholdbetween1%and100%.Whentheaveragequeuesizegrowsbeyondthe
minimumthreshold,packetsbegintobedropped.Whentheaveragequeuesize
reachesthemaximumthreshold,allpacketsaredropped.Theprobabilityof
packetdropbetweenthethresholdsisdefinedbythedroprate.
Table 171. PortWREDTransmitQueueOptions
[no]randomdetecttransmitqueue<07>enable
EnablesordisablestheWREDtransmitqueueconfiguration.
randomdetecttransmitqueue<07>tcpminthreshold<1100>
maxthreshold<1100>droprate<1100>
ConfigurestheWREDthresholdsforTCPtraffic.
norandomdetecttransmitqueue<07>tcp
ClearstheWREDconfigurationforTCPtraffic.
randomdetecttransmitqueue<07>nontcp
minthreshold<1100>maxthreshold<1100>droprate<1100>
ConfigurestheWREDthresholdsfornonTCPtraffic.
norandomdetecttransmitqueue<07>nontcp
ClearstheWREDconfigurationfornonTCPtraffic.
351
Stacking Configuration
Astackisagroupofswitchesthatworktogetherasaunifiedsystem.Thenetwork
viewsastackofswitchesasasingleentity,identifiedbyasinglenetworkIP
address.TheStackingConfigurationcommandsareusedtoconfigureastackand
todefinetheBackupinterface.
TheStackingConfigurationcommandsareavailableonlyafterStackingisenabled
andtheswitchisrebooted.Fordetails,seeStackingBootOptionsonpage 598.
Note: Thefollowingcommandsareavailableonlyonthemasterswitch.
Table 172. StackingConfigurationOptions
connect <attachedswitchnumber(116)>
Providesconsoleaccesstomemberswitchesfromthemasterswitch.
stackbackup<configuredswitchnumber(18)>
Definesthebackupswitchinthestack,basedonitsconfiguredswitchnumber.
nostackbackup
Deletesthebackupswitchconfiguration.
stackbind
Automaticallyassingsconfiguredswitchnumberstoallattachedswitches.
stackname<163characters>
Definesanameforthestack.
nostackname
Removesthestackname.
showstackswitchnumber[<configuredswitchnumber(18)>]
Displaysthecurrentstackingparameters.
Commandmode:All
352
Stacking Switch Configuration

ThefollowingtabledescribestheStackingSwitchcommands.
Note: Thefollowingcommandsareavailableonlyonthemasterswitch.
Table 173. StackingSwitchOptions
stackswitchnumber<configuredswitchnumber(18)>bind
<attachedswitchnumber(116)>
Bindstheselectedswitchtothestack,basedonitsattachedswitchnumber.
Note:Bindingtheswitchtoastackresetsportnumbering.
stackswitchnumber<configuredswitchnumber(18)>description
<163characters>
Setsadescriptionfortheconfiguredswitch.
nostackswitchnumber<configuredswitchnumber(18)>description
Deletesthedescriptionoftheconfiguredswitch.
stackswitchnumber<configuredswitchnumber(18)>mac<MACaddress>
Bindstheselectedswitchtothestack,basedonitsMACaddress.
Note:Bindingtheswitchtoastackresetsportnumbering.
nostackswitchnumber<configuredswitchnumber(18)>
Deletestheselectedswitchfromthestack.
showstackattachedswitches
Displaysthecurrentstackingswitchparameters.
Commandmode:All
353
Quality of Service Configuration

QualityofService(QoS)commandsconfigurethe802.1ppriorityvalueand
DiffServCodePointvalueofincomingpackets.Thisallowsyoutodifferentiate
betweenvarioustypesoftraffic,andprovidedifferentprioritylevels.
802.1p Configuration
ThisfeatureprovidestheG8052thecapabilitytofilterIPpacketsbasedonthe
802.1pbitsinthepacketsVLANheader.The802.1pbitsspecifytheprioritythat
youshouldgivetothepacketswhileforwardingthem.Thepacketswithahigher
(nonzero)prioritybitsaregivenforwardingpreferenceoverpacketswith
numericallylowerprioritybitsvalue.
Table 174. 802.1pConfigurationOptions
qostransmitqueuemapping<priority(07)><COSqnumber(07)>
Mapsthe802.1pprioritytotheClassofServicequeue(COSq)priority.Enter
the802.1ppriorityvalue,followedbytheClassofServicequeuethathandles
thematchingtraffic.
defaultqostransmitqueuemapping
Resetsthe802.1ppacketprioritymappingtoitsdefaultvalues.
qostransmitqueuenumbercos{2|8}
SetsthenumberofClassofServicequeues(COSq)forswitchports.
Dependingonthenumcossetting,thevalidCOSqrangeforthepriqand
qweightcommandsisasfollows:
Ifnumcosis2(thedefault),theCOSqrangeis01.
Ifnumcosis8,theCOSqrangeis07.
Youmustapply,saveandreboottheswitchtoactivatethenewconfiguration.
Note:Notavailableinstacking.
qostransmitqueueweightcos<COSqnumber(07)><weight(015)>
ConfigurestheweightoftheselectedClassofServicequeue(COSq).Enterthe
queuenumber,followedbytheschedulingweight.
354
Table 174. 802.1pConfigurationOptions

defaultqostransmitqueueweight
ResetstheweightsofClassofServicequeuestotheirdefaultvalues.
showqostransmitqueue
Displaysthecurrent802.1pparameters.
Commandmode:All
DSCP Configuration
ThesecommandsmaptheDiffServCodePoint(DSCP)valueofincomingpackets
toanewvalueortoan802.1ppriorityvalue.
Table 175. DSCPConfigurationOptions
qosdscpdot1pmapping<DSCP(063)><priority(07)>
MapstheDiffServCodepointvaluetoan802.1ppriorityvalue.Enterthe
DSCPvalue,followedbythecorresponding802.1pvalue.
qosdscpdscpmapping<DSCP(063)><newDSCP(063)>
MapstheinitialDiffServCodePoint(DSCP)valuetoanewvalue.Enterthe
DSCPvalueofincomingpackets,followedbythenewvalue.
[no]qosdscpremarking
GloballyenablesordisablesDSCPremarking.
showqosdscp
DisplaysthecurrentDSCPparameters.
Commandmode:All
355
Control Plane Protection

Thesecommandsallowyoutolimitthenumberofselectedprotocolpackets
receivedbythecontrolplane(CP)oftheswitch.TheselimitshelpprotecttheCP
fromreceivingtoomanyprotocolpacketsinagiventimeperiod.
Table 176. ControlPlaneProtectionOptions
qosprotocolpacketcontrolpacketqueuemap
<packetqueuenumber(047)><packettype>
Configuresapackettypetoassociatewitheachpacketqueuenumber.Entera
queuenumber,followedbythepackettype.Youmaymapmultiplepacket
typestoasinglequeue.Thefollowingpackettypesareallowed:
802.1x(IEEE802.1xpackets)
applicationcripackets(criticalpacketsofapplications)
arpbcast(ARPbroadcastpackets)
arpucast(ARPunicastreplypackets)
bgp(BGPpackets)
bpdu(SpanningTreeProtocolpackets)
ciscobpdu(CiscoSTPpackets)
destunknown(packetswithdestinationnotyetlearned)
dhcp(DHCPpackets)
ecp(ECPpackets)
icmp(ICMPpackets)
icmp6(ICMP6packets)
igmp(IGMPpackets)
ipv4miscellaneous(IPv4packetswithIPoptionsandTTLexception)
ipv6nd(IPv6NeighborDiscoverypackets)
lacp(LACP/LinkAggregationprotocolpackets)
lldp(LLDPpackets)
oflowcntrler(PacketshitOpenFlowsendtocontrollerfilter)
oflowdefault(PacketshitOpenFlowdefaultfilter)
oflowmgmt(PacketshitOpenFlowmanagementfilter)
ospf(OSPFpackets)
ospf3(OSPF3Packets)
pim(PIMpackets)
rip(RIPpackets)
system(systemprotocols,suchastftp,ftp,telnet,ssh)
udld(UDLDpackets)
vlag(VLAGpackets)
vrrp(VRRPpackets)
356
Table 176. ControlPlaneProtectionOptions(continued)

noqosprotocolpacketcontrolpacketqueuemap<packettype>
Clearstheselectedpackettypefromitsassociatedpacketqueue.
qosprotocolpacketcontrolratelimitpacketqueue
<packetqueuenumber(047)><110000>
Configuresthenumberofpacketspersecondallowedforeachpacketqueue.
noqosprotocolpacketcontrolratelimitpacketqueue
<packetqueuenumber(047)>
Clearsthepacketrateconfiguredfortheselectedpacketqueue.
showqosprotocolpacketcontrolinformationprotocol
Displaysofmappingofprotocolpackettypestoeachpacketqueuenumber.
Thestatusindicateswhethertheprotocolisrunningornotrunning.
Commandmode:All
showqosprotocolpacketcontrolinformationqueue
Displaysthepacketrateconfiguredforeachpacketqueue.
Commandmode:All
357
Weighted Random Early Detection Configuration

WeightedRandomEarlyDetection(WRED)providescongestionavoidanceby
preemptivelydroppingpacketsbeforeaqueuebecomesfull.TheG8052
implementationofWREDdefinesTCPandnonTCPtrafficprofilesonaperport,
perCOSqueuebasis.Foreachport,youcandefineatransmitqueueprofilewith
thresholdsthatdefinepacketdropprobability.
ThesecommandsallowyoutoconfigureglobalWREDparameters.Forport
WREDcommands,seePortWREDConfigurationonpage 350.
Table 177. WREDConfigurationOptions
[no]qosrandomdetectecnenable
EnablesordisablesExplicitCongestionNotification(ECN).WhenECNison,
theswitchmarkstheECNbitofthepacket(ifapplicable)insteadofdropping
thepacket.ECNawaredevicesarenotifiedofthecongestionandthose
devicescantakecorrectiveactions.
Note:ECNfunctionsonlyonTCPtraffic.
[no]qosrandomdetectenable
EnablesordisablesRandomDetectionandavoidance.
showqosrandomdetect
DisplayscurrentRandomDetectionandavoidanceparameters.
Commandmode:All
358
WRED Transmit Queue Configuration

ThefollowingtabledescribestheWREDTransmitQueuecommands.
Table 178. WREDTransmitQueueOptions
[no]qosrandomdetecttransmitqueue<07>enable
EnablesordisablestheWREDtransmitqueueconfiguration.
qosrandomdetecttransmitqueue<07>nontcp
minthreshold<min.threshold(1100)>maxthreshold
<max.threshold(1100)>droprate<droprate(1100)>
ConfigurestheWREDthresholdsfornonTCPtraffic.
qosrandomdetecttransmitqueue<07>tcp
minthreshold<min.threshold(1100)>maxthreshold
<max.threshold(1100)>droprate<droprate(1100)>
ConfigurestheWREDthresholdsforTCPtraffic.
noqosrandomdetecttransmitqueue<07>{nontcp|tcp}
DeletestheWREDconfigurationfornonTCPorTCPtraffic.
359
Access Control Configuration

UsethesecommandstocreateAccessControlLists.ACLsdefinematchingcriteria
usedforIPfilteringandQualityofServicefunctions.
ForinformationaboutassigningACLstoports,seePortACLConfigurationon
page 349.
Table 179. GeneralACLConfigurationOptions
accesscontrolgroup<1640>
ConfiguresanACLGroup.Toviewcommandoptions,seepage 379.
accesscontrollist<1640>
ConfiguresanAccessControlList.Toviewcommandoptions,seepage 361.
accesscontrollist6<1128>
accesscontrolmacl<1128>
accesscontrolvmap<1128>
ConfiguresanACLVLANmap.Toviewcommandoptions,seepage 384.
showaccesscontrol
Commandmode:All
360
Access Control List Configuration

ThesecommandsallowyoutodefinefilteringcriteriaforeachAccessControlList
(ACL).
Table 180. ACLConfigurationOptions
accesscontrollist<1640>action
{permit|deny|setpriority<07>}
ConfiguresafilteractionforpacketsthatmatchtheACLdefinitions.Youcan
choosetopermit(pass)ordeny(drop)packetsorsetthe802.1pprioritylevel.
accesscontrollist<1640>egressportport<portaliasornumber>
ConfigurestheACLtofunctiononegresspackets.
noaccesscontrollist<1640>egressport
DisablestheACLtofunctiononegresspackets.
[no]accesscontrollist<1640>log
EnablesordisablesloggingfortheAccessControlList.
Note:EnablingtheLOGfeatureneutralizesACLdenyfilteractionsforTelnet
andSSHtrafficthatisaddressedtotheswitchsLayer3interfaces.
[no]accesscontrollist<1640>statistics
EnablesordisablesthestatisticscollectionfortheAccessControlList.
defaultaccesscontrollist<1640>
ResetstheACLparameterstotheirdefaultvalues.
showaccesscontrollist<1640>
Commandmode:All
361
ACL Mirroring Configuration

ThesecommandsallowyoutodefineportmirroringforanACL.Packetsthat
matchtheACLaremirroredtothedestinationinterface.
Table 181. ACLPortMirroringOptions
accesscontrollist<1640>mirrorport<portaliasornumber>
ConfiguresthedestinationtowhichpacketsthatmatchthisACLaremirrored.
noaccesscontrollist<1640>mirror
Removesallmirroredpackets.
showaccesscontrollist<1640>mirror
DisplaysthecurrentportmirroringparametersfortheACL.
Commandmode:All
Ethernet Filtering Configuration

ThesecommandsallowyoutodefineEthernetmatchingcriteriaforanACL.
Table 182. EthernetFilteringConfigurationOptions
accesscontrollist<1640>ethernet
destinationmacaddress<MAC address>[<MACmask>]
DefinesthedestinationMACaddressforthisACL.
noaccesscontrollist<1640>ethernet
destinationmacaddress
RemovesthedestinationMACaddressforthisACL.
accesscontrollist<1640>ethernetethernettype
{arp|ip|ipv6|mpls|rarp|any|<other(0x6000xFFFF)>}
DefinestheEthernettypeforthisACL.
noaccesscontrollist<1640>ethernetethernettype
RemovestheEthernettypeforthisACL.
accesscontrollist<1640>ethernetpriority<07>
DefinestheEthernetpriorityvaluefortheACL.
362
Table 182. EthernetFilteringConfigurationOptions

noaccesscontrollist<1640>ethernetpriority
RemovestheEthernetpriorityvaluefortheACL.
accesscontrollist<1640>ethernet
sourcemacaddress<MAC address>[<MACmask>]
DefinesthesourceMACaddressforthisACL.
noaccesscontrollist<1640>ethernetsourcemacaddress
RemovesthesourceMACaddressforthisACL.
accesscontrollist<1640>ethernetvlan<VLANID(14094)>
[<VLANmask>]
DefinesaVLANnumberandmaskforthisACL.
noaccesscontrollist<1640>ethernetvlan
RemovesVLANnumberandmaskforthisACL.
defaultaccesscontrollist<1640>ethernet
ResetsEthernetparametersfortheACLtotheirdefaultvalues.
noaccesscontrollist<1640>ethernet
RemovesEthernetparametersfortheACL.
showaccesscontrollist<1640>ethernet
DisplaysthecurrentEthernetparametersfortheACL.
Commandmode:All
363
IPv4 Filtering Configuration

ThesecommandsallowyoutodefineIPv4matchingcriteriaforanACL.
Table 183. IPversion4FilteringConfigurationOptions
accesscontrollist<1640>ipv4destinationipaddress
<IPaddress>[<IPmask>]
DefinesadestinationIPaddressfortheACL.Ifdefined,trafficwiththis
destinationIPaddresswillmatchthisACL.
noaccesscontrollist<1640>ipv4destinationipaddress
DeletestheconfigureddestinationIPaddressforthespecifiedACL.
accesscontrollist<1640>ipv4protocol<0255>
DefinesanIPprotocolfortheACL.Ifdefined,trafficfromthespecified
protocolmatchesthisfilter.Specifytheprotocolnumber.Listedbeloware
someofthewellknownprotocols.
Number
Name
1
2
6
17
89
112
icmp
igmp
tcp
udp
ospf
vrrp
noaccesscontrollist<1640>ipv4protocol
DeletestheconfiguredIPprotocolforthespecifiedACL.
accesscontrollist<1640>ipv4sourceipaddress
DefinesasourceIPaddressfortheACL.Ifdefined,trafficwiththissourceIP
addresswillmatchthisACL.SpecifyanIPaddressindotteddecimalnotation.
noaccesscontrollist<1640>ipv4sourceipaddress
DeletestheconfiguredsourceIPaddressforthespecifiedACL.
accesscontrollist<1640>ipv4typeofservice<0255>
DefinesaTypeofService(ToS)valuefortheACL.Formoreinformationon
ToS,refertoRFC1340and1349.
364

noaccesscontrollist<1640>ipv4typeofservice
DeletestheconfiguredTypeofService(ToS)valueforthespecifiedACL.
defaultaccesscontrollist<1640>ipv4
ResetstheIPv4parametersfortheACLtotheirdefaultvalues.
showaccesscontrollist<1640>ipv4
DisplaysthecurrentIPv4parameters.
Commandmode:All
TCP/UDP Filtering Configuration

ThesecommandsallowyoutodefineTCP/UDPmatchingcriteriaforanACL.
Table 184. TCP/UDPFilteringConfigurationOptions
accesscontrollist<1640>tcpudpsourceport
<165535>[<mask(0xFFFF)>]
DefinesasourceportfortheACL.Ifdefined,trafficwiththespecifiedTCPor
UDPsourceportwillmatchthisACL.Specifytheportnumber.Listedhereare
someofthewellknownports:
Number
Name
20
21
22
23
25
37
42
43
53
69
70
79
80
ftpdata
ftp
ssh
telnet
smtp
time
name
whois
domain
tftp
gopher
finger
http
noaccesscontrollist<1640>tcpudpsourceport
DisablestheconfiguredsourceportforthespecifiedACL.
365

accesscontrollist<1640>tcpudpdestinationport
<165535>[<mask(0xFFFF)>]
DefinesadestinationportfortheACL.Ifdefined,trafficwiththespecified
TCPorUDPdestinationportwillmatchthisACL.Specifytheportnumber,
justaswithsourceport.
noaccesscontrollist<1640>tcpudpdestinationport
DisablestheconfigureddestinationportforthespecifiedACL.
accesscontrollist<1640>tcpudpflags<value(0x00x3f)>
[<mask(0x00x3f)>]
DefinesaTCP/UDPflagfortheACL.
noaccesscontrollist<1640>tcpudpflags
DisablestheconfiguredTCP/UDPflagforthespecifiedACL.
defaultaccesscontrollist<1640>tcpudp
ResetstheTCP/UDPparametersfortheACLtotheirdefaultvalues.
showaccesscontrollist<1640>tcpudp
DisplaysthecurrentTCP/UDPFilteringparameters.
Commandmode:All
366
Packet Format Filtering Configuration

ThesecommandsallowyoutodefinePacketFormatmatchingcriteriaforanACL.
Table 185. PacketFormatFilteringConfigurationOptions
accesscontrollist<1640>packetformat
ethernet{ethertype2|snap|llc}
DefinestheEthernetformatfortheACL.
accesscontrollist<1640>packetformatip{ipv4|ipv6}
DefinestheIPformatfortheACL.
accesscontrollist<1640>packetformattagging
{any|none|tagged}
DefinesthetaggingformatfortheACL.
noaccesscontrollist<1640>packetformat
{ethernet|ip|tagging}
DeletestheselectedformatforthespecifiedACL.
defaultaccesscontrollist<1640>packetformat
ResetsPacketFormatparametersfortheACLtotheirdefaultvalues.
showaccesscontrollist<1640>packetformat
DisplaysthecurrentPacketFormatparametersfortheACL.
Commandmode:All
367
ACL Metering Configuration

ThesecommandsdefinetheAccessControlprofilefortheselectedACL.
Table 186. ACLMeteringConfigurationOptions
accesscontrollist<1640>meteraction{drop|pass}
ConfigurestheACLMetertoeitherdroporpassoutofprofiletraffic.
accesscontrollist<1640>metercommittedrate<6410000000>
Configuresthecommittedrate,inkilobitspersecond.Thecommittedrate
mustbeamultipleof 64.
[no]accesscontrollist<1640>meterenable
EnablesordisablesACLMetering.
accesscontrollist<1640>metermaximumburstsize<324096>
Configuresthemaximumburstsize,inkilobits.Enteroneofthefollowing
valuesformbsize:32,64,128,256,512,1024,2048,4096.
defaultaccesscontrollist<1640>meter
SetstheACLmeterconfigurationtoitsdefaultvalues.
noaccesscontrollist<1640>meter
DisablestheselectedACLmeter.
showaccesscontrollist<1640>meter
DisplayscurrentACLMeteringparameters.
Commandmode:All
368
ACL Re-Mark Configuration

YoucanchoosetoremarkIPheaderdatafortheselectedACL.Youcanconfigure
differentremarkvalues,basedonwhetherpacketsfallwithintheACLMetering
profile,oroutoftheACLMeteringprofile.
Table 187. ACLReMarkingConfigurationOptions
defaultaccesscontrollist<1640>remark
SetstheACLremarkparameterstotheirdefaultvalues.
showaccesscontrollist<1640>remark
Displayscurrentremarkparameters.
Commandmode:All
Re-Marking In-Profile Configuration

ThefollowingtabledisplaysReMarkingInProfileconfigurationcommands:
Table 188. ACLReMarkingInProfileOptions
accesscontrollist<1640>remarkdot1p<07>
Remarksthe802.1pvalue.Thevalueistheprioritybitsinformationinthe
packetstructure.
noaccesscontrollist<1640>remarkdot1p
Disablestheuseof802.1ppriorityforinprofiletraffic.
accesscontrollist<1640>remarkinprofiledscp<063>
RemarkstheDSCPvalueforinprofiletraffic.
noaccesscontrollist<1640>remarkinprofile[dscp]
Deletestheremarkinprofileconfiguration.Thedscpoptiononlydisables
theuseofDSCPforinprofiletraffic.
[no]accesscontrollist<1640>remarkusetosprecedence
EnablesordisablesmappingofTOS(TypeofService)priorityto802.1p
priorityforinprofilepackets.Whenenabled,theTOSvalueisusedtosetthe
802.1pvalue.
369
Re-Marking Out-Profile Configuration

ThefollowingtabledisplaysReMarkingOutProfileconfigurationcommands:
Table 189. ACLReMarkingOutofProfileOptions
accesscontrollist<1640>remarkoutprofiledscp<063>
RemarkstheDSCPvalueonoutofprofilepacketsfortheACL.
noaccesscontrollist<1640>remarkoutprofile
Disablesremarkingonoutofprofiletraffic.
370
ACL IPv6 Configuration

ThesecommandsallowyoutodefinefilteringcriteriaforeachIPv6AccessControl
List(ACL).
Table 190. IPv6ACLOptions
accesscontrollist6<1128>action{permit|deny|
|setpriority<07>}
ConfiguresafilteractionforpacketsthatmatchtheACLdefinitions.Youcan
choosetopermit(pass)ordeny(drop)packetsorsetthe802.1pprioritylevel.
accesscontrollist6<1128>egressportport<portaliasornumber>
ConfigurestheACLtofunctiononegresspackets.
noaccesscontrollist6<1128>egressportport
DisablestheACLtofunctiononegresspackets.
[no]accesscontrollist6<1128>log
EnablesordisablesAccessControlListlogging.
[no]accesscontrollist6<1128>statistics
EnablesordisablesthestatisticscollectionfortheAccessControlList.
defaultaccesscontrollist6<1128>
ResetstheACLparameterstotheirdefaultvalues.
showaccesscontrollist6<1128>
Commandmode:All
371
IPv6 Filtering Configuration

ThesecommandsallowyoutodefineIPv6matchingcriteriaforanACL.
Table 191. IPversion6FilteringOptions
accesscontrollist6<1128>ipv6destinationaddress
<IPv6address>[<prefixlength(1128)>]
DefinesadestinationIPv6addressfortheACL.Ifdefined,trafficwiththis
destinationaddresswillmatchthisACL.
noaccesscontrollist6<1128>ipv6destinationaddress
DeletestheconfigureddestinationIPv6addressforthespecifiedACL.
accesscontrollist6<1128>ipv6flowlabel<01048575>
DefinestheflowlabelfortheACL.Ifdefined,trafficwiththisflowlabelwill
matchthisACL.
noaccesscontrollist6<1128>ipv6flowlabel
DeletestheconfiguredflowlabelforthespecifiedACL.
accesscontrollist6<1128>ipv6nextheader<0255>
DefinesthenextheadervaluefortheACL.Ifdefined,trafficwiththisnext
headervaluewillmatchthisACL.
noaccesscontrollist6<1128>ipv6nextheader
DeletestheconfigurednextheaderforthespecifiedACL.
accesscontrollist6<1128>ipv6sourceaddress
<IPv6address>[<prefixlength(1128)>]
DefinesasourceIPv6addressfortheACL.Ifdefined,trafficwiththissource
addresswillmatchthisACL.
noaccesscontrollist6<1128>ipv6sourceaddress
DeletestheconfiguredsourceIPv6addressforthespecifiedACL.
accesscontrollist6<1128>ipv6trafficclass<0255>
DefinesthetrafficclassfortheACL.Ifdefined,trafficwiththistrafficclasswill
matchthisACL.
372
Table 191. IPversion6FilteringOptions

noaccesscontrollist6<1128>ipv6trafficclass
DeletestheconfiguredtrafficclassforthespecifiedACL.
defaultaccesscontrollist6<1128>ipv6
ResetstheIPv6parametersfortheACLtotheirdefaultvalues.
showaccesscontrollist6<1128>ipv6
Commandmode:All
IPv6 TCP/UDP Filtering Configuration

ThesecommandsallowsyoutodefineTCP/UDPmatchingcriteriaforanACL.
Table 192. IPv6ACLTCP/UDPFilteringOptions
accesscontrollist6<1128>tcpudpsourceport
<sourceportnumber(165535)>[<mask(0xFFFF)>]
DefinesasourceportfortheACL.Ifdefined,trafficwiththespecifiedTCPor
UDPsourceportwillmatchthisACL.Specifytheportnumber.Listedhereare
someofthewellknownports:
Number
Name
20
21
22
23
25
37
42
43
53
69
70
79
80
ftpdata
ftp
ssh
telnet
smtp
time
name
whois
domain
tftp
gopher
finger
http
noaccesscontrollist6<1128>tcpudpsourceport
DeletestheconfiguredIPv6sourceportforthespecifiedACL.
373
Table 192. IPv6ACLTCP/UDPFilteringOptions

accesscontrollist6<1128>tcpudpdestinationport
<destinationportnumber(165535)>[<mask(0xFFFF)>]
DefinesadestinationportfortheACL.Ifdefined,trafficwiththespecified
TCPorUDPdestinationportwillmatchthisACL.Specifytheportnumber,
justaswithsourceportabove.
noaccesscontrollist6<1128>tcpudpdestinationport
DeletestheconfiguredIPv6destinationportforthespecifiedACL.
accesscontrollist6<1128>tcpudpflags<value(0x00x3f)>
[<mask(0x00x3f)>]
DefinesaTCP/UDPflagfortheACL.
noaccesscontrollist6<1128>tcpudpflags
DeletestheconfiguredTCP/UDPflagforthespecifiedACL.
defaultaccesscontrollist6<1128>tcpudp
ResetstheTCP/UDPparametersfortheACLtotheirdefaultvalues.
showaccesscontrollist6<1128>tcpudp
Commandmode:All
374
IPv6 Re-Mark Configuration

YoucanchoosetoremarkIPheaderdatafortheselectedACL.Youcanconfigure
differentremarkvalues,basedonwhetherpacketsfallwithintheACLmetering
profile,oroutoftheACLmeteringprofile.
Table 193. IPv6ReMarkingInProfileOptions
defaultaccesscontrollist6<1128>remark
SetstheACLremarkparameterstotheirdefaultvalues.
Commandmode:All
IPv6 Re-Marking In-Profile Configuration

ThefollowingtabledisplaysIPv6ReMarkingInProfileconfigurationcommands:
Table 194. IPv6ACLReMarkingInProfileOptions
accesscontrollist6<1128>remarkdot1p<07>
Remarksthe802.1pvalue.Thevalueistheprioritybitsinformationinthe
packetstructure.
noaccesscontrol6list6<1128>remarkdot1p
Disablestheuseof802.1ppriorityforinprofiletraffic.
accesscontrollist6<1128>remarkinprofiledscp<063>
RemarkstheDSCPvalueforinprofiletraffic.
noaccesscontrollist6<1128>remarkinprofile[dscp]
Deletestheremarkinprofileconfiguration.Thedscpoptiononlydisables
theuseofDSCPforinprofiletraffic.
[no]accesscontrollist6<1128>remarkusetosprecedence
EnablesordisablesmappingofTOS(TypeofService)priorityto802.1p
priorityforinprofilepackets.Whenenabled,theTOSvalueisusedtosetthe
802.1pvalue.
375
IPv6 Re-Marking Out-Profile Configuration

ThefollowingtabledisplaysIPv6ReMarkingOutProfileconfiguration
commands:
Table 195. IPv6ACLReMarkingOutofProfileOptions
accesscontrollist6<1128>remarkoutprofiledscp<063>
RemarkstheDSCPvalueonoutofprofilepacketsfortheACL.
noaccesscontrollist6<1128>remarkoutprofile
Disablesremarkingonoutofprofiletraffic.
Commandmode:All
376
IPv6 Metering Configuration

ThesecommandsdefinetheAccessControlprofilefortheselectedACL.
Table 196. IPv6MeteringOptions
accesscontrollist6<1128>meteraction{drop|pass}
ConfigurestheACLMetertoeitherdroporpassoutofprofiletraffic.
accesscontrollist6<1128>metercommittedrate<6410000000>
Configuresthecommittedrate,inkilobitspersecond.Thecommittedrate
mustbeamultipleof64.
[no]accesscontrollist6<1128>meterenable
EnablesordisablesACLMetering.
accesscontrollist6<1128>metermaximumburstsize<324096>
Configuresthemaximumburstsize,inkilobits.Enteroneofthefollowing
valuesformbsize:32,64,128,256,512,1024,2048,4096.
defaultaccesscontrollist6<1128>meter
SetstheACLmeterconfigurationtoitsdefaultvalues.
showaccesscontrollist6<1128>meter
DisplayscurrentACLMeteringparameters.
Commandmode:All
377
ACL Log Configuration

ThesecommandsallowyoutodefinefilteringcriteriaforeachIPv6AccessControl
List(ACL)log.
Table 197. ACLLogConfigurationOptions
[no]accesscontrollist<1640>log
EnablesordisablesAccessControlListlogging.
[no]accesscontrollist6<1128>log
EnablesordisablesIPv6AccessControlListlogging.
accesscontrolloginterval<5600>
Setsthefilterlogdisplayingintervalinseconds.
Thedefaultsettingis300seconds.
accesscontrollogratelimit<11000>
Setsthefilterlogqueueratelimitinpacketspersecond(pps).
Thedefaultsettingsis10pps.
defaultaccesscontrollog[interval|ratelimit]
Resetsthespecifiedfilterlogparameterstotheirdefaultvalues.
showaccesscontrollog
DisplaysthecurrentACLlogparameters.
Commandmode:All
378
ACL Group Configuration

ThesecommandsallowyoutocompileoneormoreACLsintoanACLgroup.
OnceyoucreateanACLgroup,youcanassigntheACLgrouptooneormore
ports.
Table 198. ACLGroupConfigurationCommands
[no]accesscontrolgroup<1640>list<1640>
AddsorremovestheselectedIPv4ACLtotheACLgroup.
[no]accesscontrolgroup<1640>list6<1128>
AddsorremovestheselectedIPv6ACLtotheACLgroup.
showaccesscontrolgroup<1640>
DisplaysthecurrentACLgroupparameters.
Commandmode:All
379
Management ACL Configuration

ThesecommandsallowyoutodefinefilteringcriteriaforeachmanagementACL
(MACL).
Note: ManagementACLs(MACLs)arenotsupportedonthemanagementport,
nolyondataports.
Table 199. MACLConfigurationOptions
accesscontrolmacl<1128>action
{permit|deny|setpriority<07>}
ConfiguresafilteractionforpacketsthatmatchtheMACLdefinitions.You
canchoosetopermit(pass),deny(drop)packetsorsetthe802.1pprioritylevel
(07).
[no]accesscontrolmacl<1128>enable
EnablesordisablesthemanagementACL.
[no]accesscontrolmacl<1128>statistics
EnablesordisablesthestatisticscollectionfortheMACL.
showaccesscontrolmacl<1128>
DisplaysthecurrentMACLparameters.
Commandmode:All
MACL IPv4 Filtering Configuration

ThesecommandsallowyoutodefineIPv4matchingcriteriaforanMACL.
accesscontrolmacl<1128>ipv4destinationipaddress
DefinesadestinationIPaddressfortheMACL.Ifdefined,trafficwiththis
destinationIPaddresswillmatchthisMACL.
noaccesscontrolmacl<1128>ipv4destinationipaddress
DeletestheconfigureddestinationIPaddressforthespecifiedMACL.
380

accesscontrolmacl<1128>ipv4protocol<0255>
DefinesanIPprotocolfortheMACL.Ifdefined,trafficfromthespecified
protocolmatchesthisfilter.Specifytheprotocolnumber.Listedbeloware
someofthewellknownprotocols.
Number
Name
1
2
6
17
89
112
icmp
igmp
tcp
udp
ospf
vrrp
noaccesscontrolmacl<1128>ipv4protocol
DeletestheconfiguredIPprotocolforthespecifiedMACL.
accesscontrolmacl<1128>ipv4sourceipaddress
DefinesasourceIPaddressfortheMACL.Ifdefined,trafficwiththissource
IPaddresswillmatchthisMACL.SpecifyanIPaddressindotteddecimal
notation.
noaccesscontrolmacl<1128>ipv4sourceipaddress
DeletestheconfiguredsourceIPaddressforthespecifiedMACL.
noaccesscontrolmacl<1128>ipv4
RemovesalltheIPv4parametersforthespecifiedMACL.
showaccesscontrolmacl<1128>ipv4
Commandmode:All
381
MACL TCP/UDP Filtering Configuration

ThesecommandsallowyoutodefineTCP/UDPmatchingcriteriaforanMACL.
accesscontrolmacl<1128>tcpudpsourceport
<165535>[<mask(0xFFFF)>]
DefinesasourceportfortheMACL.Ifdefined,trafficwiththespecifiedTCP
orUDPsourceportwillmatchthisMACL.Specifytheportnumber.Listed
belowaresomeofthewellknownports:
NumberName
20
21
22
23
25
37
42
43
53
69
70
79
80
ftpdata
ftp
ssh
telnet
smtp
time
name
whois
domain
tftp
gopher
finger
http
noaccesscontrolmacl<1128>tcpudpsourceport
DeletestheconfiguredsourceportforthespecifiedMACL.
accesscontrolmacl<1128>tcpudpdestinationport
<165535>[<mask(0xFFFF)>]
DefinesadestinationportfortheMACL.Ifdefined,trafficwiththespecified
TCPorUDPdestinationportwillmatchthisMACL.Specifytheportnumber,
justaswithsourceportabove.
noaccesscontrolmacl<1128>tcpudpdestinationport
DeletestheconfigureddestinationportforthespecifiedMACL.
accesscontrolmacl<1128>tcpudpflags<value(0x00x3f)>
[<mask(0x00x3f)>]
DefinesaTCP/UDPflagfortheMACL.
382

noaccesscontrolmacl<1128>tcpudpflags
DeletestheconfiguredTCP/UDPflagforthespecifiedMACL.
defaultaccesscontrolmacl<1128>tcpudp
ResetstheTCP/UDPparametersfortheMACLtotheirdefaultvalues.
showaccesscontrolmacl<1128>tcpudp
Commandmode:All
383
VMAP Configuration
AVLANMapisanAccessControlList(ACL)thatcanbeassignedtoaVLANora
VMgroupinsteadofaport.InavirtualizedenvironmentwhereVirtualMachines
movebetweenphysicalservers,VLANMapsallowyoutocreatetrafficfiltering
andmeteringpoliciesassociatedwithaVMsVLAN.
FormoreinformationaboutVLANMapconfigurationcommands,seeAccess
ControlListConfigurationonpage 361.
FormoreinformationaboutassigningVLANMapstoaVLAN,seeVLAN
Configurationonpage 434.
FormoreinformationaboutassigningVLANMapstoaVMgroup,seeVM
GroupConfigurationonpage 556.
ThefollowingtableliststhegeneralVMAPconfigurationcommands.
Table 202. VMAPConfigurationOptions
accesscontrolvmap<1128>action{permit|deny|
|setpriority<07>}
ConfiguresafilteractionforpacketsthatmatchtheVMAPdefinitions.You
canchoosetopermit(pass)ordeny(drop)packetsorsetthe802.1ppriority
level.
accesscontrolvmap<1128>egressport<portaliasornumber>
ConfigurestheVMAPtofunctiononegresspackets.
noaccesscontrolvmap<1128>egressport
DisablestheVMAPtofunctiononegresspackets.
accesscontrolvmap<1128>ethernet
destinationmacaddress<MACaddress>[<MACmask>]
DefinesthedestinationMACaddressfortheVMAP.
noaccesscontrolvmap<1128>ethernet
destinationmacaddress
RemovesthedestinationMACaddressforthespecifiedVMAP.
accesscontrolvmap<1128>ethernetethernettype
{<0x6000xFFFF>|any|arp|ip|ipv6|mpls|rarp}
DefinestheEthernettypefortheVMAP.
384

noaccesscontrolvmap<1128>ethernetethernettype
RemovestheEthernettypeforthespecifiedVMAP.
accesscontrolvmap<1128>ethernetpriority<07>
DefinestheEthernetpriorityvaluefortheVMAP.
noaccesscontrolvmap<1128>ethernetpriority
RemovestheEthernetpriorityforthespecifiedVMAP.
accesscontrolvmap<1128>ethernetsourcemacaddress
<MACaddress>[<MACmask>]
DefinesthesourceMACaddressfortheVMAP.
noaccesscontrolvmap<1128>ethernetsourcemacaddress
RemovesthesourceMACaddressforthespecifiedVMAP.
accesscontrolvmap<1128>ethernetvlan<VLANID(14094)>
[<VLANmask>]
DefinesaVLANnumberandmaskfortheVMAP.
noaccesscontrolvmap<1128>ethernetvlan
RemovestheVLANnumberandmaskforthespecifiedVMAP.
defaultaccesscontrolvmap<1128>ethernet
ResetsEthernetparametersfortheVMAPtotheirdefaultvalues.
noaccesscontrolvmap<1128>ethernet
ResetsEthernetheaderparametersfortheVMAPtotheirdefaultvalues.
accesscontrolvmap<1128>ipv4destinationipaddress
<IPv4address>[<IPv4mask>]
EnablesfilteringofVMAPstatisticscollectionbasedondestinationIPaddress.
385

noaccesscontrolvmap<1128>ipv4destinationipaddress
DisablesfilteringofVMAPstatisticscollectionbasedondestiantionIP
address.
accesscontrolvmap<1128>ipv4protocol<0255>
EnablesfilteringofVMAPstatisticscollectionbasedonprotocol.
noaccesscontrolvmap<1128>ipv4protocol
DisablesfilteringofVMAPstatisticscollectionbasedonprotocol.
accesscontrolvmap<1128>ipv4sourceipaddress
<IPv4address>[<IPv4mask>]
EnablesfilteringofVMAPstatisticscollectionbasedonsourceIPaddress.
noaccesscontrolvmap<1128>ipv4sourceipaddress
DisablesfilteringofVMAPstatisticscollectionbasedonsourceIPaddress.
accesscontrolvmap<1128>ipv4typeofservice<0255>
EnablesfilteringofVMAPstatisticscollectionbasedontypeofservice.
noaccesscontrolvmap<1128>ipv4typeofservice
DisablesfilteringofVMAPstatisticscollectionbasedontypeofservice.
defaultaccesscontrolvmap<1128>ipv4
ResetstheIPv4parametersfortheVMAPtotheirdefaultvalues.
accesscontrolvmap<1128>meteraction{drop|pass}
SetsVMAPportmeteringtodroporpassoutofprofiletraffic.
accesscontrolvmap<1128>metercommittedrate<6410000000>
SetstheVMAPportmeteringcontrolrateinkilobitspersecond.
[no]accesscontrolvmap<1128>meterenable
EnablesordisablesVMAPportmetering.
386

accesscontrolvmap<1128>metermaximumburstsize<324096>
SetstheVMAPportmeteringmaximumburstsizeinkilobits.Thefollowing
eightvaluesareallowed:
32
64
128
256
512
1024
2048
4096
defaultaccesscontrolvmap<1128>meter
ResetstheVMAPmeterconfigurationtoitsdefaultvalues.
accesscontrolvmap<1128>mirrorport<portaliasornumber>
Setsthespecifiedportasthemirrortarget.
noaccesscontrolvmap<1128>mirror
DisablesVMAPmirroring.
accesscontrolvmap<1128>packetformatethernet
{ethernettype2|llc|snap}
Setstofilterthespecifiedethernetpacketformattype.
accesscontrolvmap<1128>packetformatip{ipv4|ipv6}
SetstofilterthespecifiedIPpacketformattype.
accesscontrolvmap<1128>packetformattagging{any|none|
|tagged}
Setstofilterthebasedonpackettagging.Theoptionsare:
any:Filtertagged&untaggedpackets
none:Filteronlyuntaggedpackets
tagged:Filteronlytaggedpackets
387

noaccesscontrolvmap<1128>packetformat{ethernet|ip|
|tagging}
Disablesfilteringbasedonthespecifiedpacketformat.
defaultaccesscontrolvmap<1128>packetformat
ResetstheVMAPpacketformatconfigurationtoitsdefaultvalues.
accesscontrolvmap<1128>remarkdot1p<07>
SetstheVMAPremarkconfigurationuserupdatepriority.
noaccesscontrolvmap<1128>remarkdot1p
Disablestheuseofdot1pforinprofiletrafficVMAPremarkconfiguration.
accesscontrolvmap<1128>remark{inprofile|outprofile}
dscp<063>
SetstheVMAPremarkconfigurationuserupdatepriorityforinprofileor
outprofiletraffic.
noaccesscontrolvmap<1128>remark{inprofile|
|outprofile}
Removesallremarkinprofileoroutprofilesettings.
noaccesscontrolvmap<1128>remarkinprofiledscp
DisablestheuseofDSCPforinprofiletraffic.
[no]accesscontrolvmap<1128>remarkusetosprecedence
EnablesordisablestheuseoftheTOSprecedenceforinprofiletraffic.
defaultaccesscontrolvmap<1128>remark
ResetstheVMAPremarkparameterstotheirdefaultvalues.
noaccesscontrolvmap<1128>remark
DisablesremarkingforthespecifiedVMAP.
388

[no]accesscontrolvmap<1128>statistics
Enablesordisablesstatisticsforthisaccesscontrollist.
accesscontrolvmap<1128>tcpudp{sourceport|
|destinationport}<165535>[<portmask(0x00010xFFFF)>]
SetstheTCP/UDPfilteringsourceportordestinationportandportmaskfor
thisACL.
accesscontrolvmap<1128>tcpudpflags<0x00x3F>
[<flagsmask(0x00x3F)>]
SetstheTCPflagsforthisACL.
defaultaccesscontrolvmap<1128>tcpudp
ResetstheTCP/UDPparametersfortheVMAPtotheirdefaultvalues.
noaccesscontrolvmap<1128>tcpudp
RemovesTCP/UDPfilteringforthisACL.
defaultaccesscontrolvmap<1128>
ResetstheVMAPparameterstotheirdefaultvalues.
noaccesscontrolvmap<1128>
DeletesthespecifiedVMAP.
showaccesscontrolvmap[<1128>]
DisplaysthecurrentVMAPparameters.
Commandmode:All
389
Port Mirroring
PortMirroringisdisabledbydefault.Formoreinformationaboutportmirroring
ontheG8052,seeAppendixA:TroubleshootingintheLenovoN/OS8.3
ApplicationGuide.
PortMirroringcommandsareusedtoconfigure,enableanddisablethemonitor
port.Whenenabled,networkpacketsbeingsentand/orreceivedonatargetport
areduplicatedandsenttoamonitorport.Byattachinganetworkanalyzertothe
monitorport,youcancollectdetailedinformationaboutyournetwork
performanceandusage.
Table 203. PortMirroringConfigurationOptions
[no]portmirroringenable
Enablesordisablesportmirroring.
showportmirroring
Displayscurrentsettingsofthemirroredandmonitoringports.
Commandmode:All
Port-Mirroring Configuration
ThefollowingtabledescribesthePortMirroringcommands.
Table 204. PortBasedPortMirroringConfigurationOptions
portmirroringmonitorport<portaliasornumber>mirroringport
<portaliasornumber>{in|out|both}
Addstheporttobemirrored.Thiscommandalsoallowsyoutoenterthe
directionofthetraffic.Itisnecessarytospecifythedirectionbecause:
Ifthesourceportoftheframematchesthemirroredportandthemirrored
directionisingressorboth(ingressandegress),theframeissenttothe
monitoringport.
Ifthedestinationportoftheframematchesthemirroredportandthemirrored
directionisegressorboth,theframeissenttothemonitoringport.
noportmirroringmonitorport<portaliasornumber>
[mirroringport<portaliasornumber>]
Removesthemonitorport.Themirroringportoptiononlyremovesthe
mirroredport.
showportmirroring
Displaysthecurrentsettingsofthemonitoringport.
Commandmode:All
390
Layer 2 Configuration
ThefollowingtabledescribesbasicLayer2Configurationcommands.The
followingsectionsprovidemoredetailedinformationandcommands.
Table 205. Layer2ConfigurationCommands
vlan<VLANID(14094)>
EnterVLANconfigurationmode.IfthespecifiedVLAN(s)doesntexist,itwill
becreated.Toviewcommandoptions,seepage 434.
showlayer2
DisplayscurrentLayer2parameters.
Commandmode:All
802.1X Configuration
ThesecommandsallowyoutoconfiguretheG8052asanIEEE802.1X
Authenticator,toprovideportbasednetworkaccesscontrol.
Table 206. 802.1xConfigurationOptions
[no]dot1xenable
Globallyenablesordisables802.1X.
showdot1x
Displayscurrent802.1Xparameters.
Commandmode:All
Thefollowingsectionsdescribethe802.1xconfigurationoptions:
802.1XGlobalConfigurationonpage 392
802.1XGuestVLANConfigurationonpage 394
802.1XPortConfigurationonpage 395
391
802.1X Global Configuration

Theglobal802.1Xcommandsallowyoutoconfigureparametersthataffectall
portsintheswitch.
Table 207. 802.1XGlobalConfigurationOptions
dot1xmaxrequest<110>
Setsthemaximumnumberoftimestheauthenticatorretransmitsan
EAPRequestpackettothesupplicant(client).
Thedefaultvalueis2.
dot1xmode{forceunauthorized|auto|forceauthorized}
Setsthetypeofaccesscontrolforallports:
forceunauthorizedtheportisunauthorizedunconditionally.
autotheportisunauthorizeduntilitissuccessfullyauthorizedbythe
RADIUSserver.
forceauthorizedtheportisauthorizedunconditionally,allowingall
traffic.
Thedefaultvalueisforceauthorized.
dot1xquiettime<065535>
Setsthetime,inseconds,theauthenticatorwaitsbeforetransmittingan
EAPRequest/Identityframetothesupplicant(client)afteranauthentication
failureinthepreviousroundofauthentication.
[no]dot1xreauthenticate
Setsthereauthenticationstatustoonoroff.
Thedefaultvalueisoff.
dot1xreauthenticationinterval<1604800>
Setsthetime,inseconds,theauthenticatorwaitsbeforereauthenticatinga
supplicant(client)whenperiodicreauthenticationisenabled.
392
Table 207. 802.1XGlobalConfigurationOptions(continued)

dot1xservertimeout<165535>
Setsthetime,inseconds,theauthenticatorwaitsforaresponsefromthe
RADIUSserverbeforedeclaringanauthenticationtimeout.
ThetimeintervalbetweentransmissionsoftheRADIUSAccessRequest
packetcontainingthesupplicants(clients)EAPResponsepacketis
determinedbythecurrentsettingofradiusservertimeout<110>
(defaultis3seconds).
dot1xsupplicanttimeout<165535>
Setsthetime,inseconds,theauthenticatorwaitsforanEAPResponsepacket
fromthesupplicant(client)beforeretransmittingtheEAPRequestpacket
fromtheauthenticationserver.
dot1xtransmitinterval<165535>
Setsthetime,inseconds,theauthenticatorwaitsforanEAPResponse/Identity
framefromthesupplicant(client)beforeretransmittingan
EAPRequest/Identityframe.
[no]dot1xvlanassign
SetsthedynamicVLANassignmentstatustoonoroff.
defaultdot1x
Resetstheglobal802.1Xparameterstotheirdefaultvalues.
showdot1x
Displayscurrentglobal802.1Xparameters.
Commandmode:All
393
802.1X Guest VLAN Configuration

The802.1XGuestVLANcommandsallowyoutoconfigureaGuestVLANfor
unauthenticatedports.TheGuestVLANprovideslimitedaccesstoswitch
functions.
Table 208. 802.1XGuestVLANConfigurationOptions
[no]dot1xguestvlanenable
Enablesordisablesthe802.1XGuestVLAN.
dot1xguestvlanvlan<VLANID(14094)>
ConfigurestheGuestVLANnumber.
nodot1xguestvlanvlan
RemovestheGuestVLANnumber.
showdot1x
Displayscurrent802.1Xparameters.
Commandmode:All
394
802.1X Port Configuration

The802.1Xportcommandsallowsyoutoconfigureparametersthataffectthe
selectedportintheswitch.Thesesettingsoverridetheglobal802.1Xparameters.
Table 209. 802.1XPortOptions
dot1xapplyglobal
Appliescurrentglobal802.1Xconfigurationparameterstotheport.
dot1xmaxrequest<110>
Setsthemaximumnumberoftimestheauthenticatorretransmitsan
EAPRequestpackettothesupplicant(client).
Thedefaultvalueis2.
dot1xmode{forceunauthorized|auto|forceauthorized}
Setsthetypeofaccesscontrolfortheport:
forceunauthorizedtheportisunauthorizedunconditionally.
autotheportisunauthorizeduntilitissuccessfullyauthorizedbythe
RADIUSserver.
forceauthorizedtheportisauthorizedunconditionally,allowingall
traffic.
Thedefaultvalueisforceauthorized.
dot1xquiettime<065535>
Setsthetime,inseconds,theauthenticatorwaitsbeforetransmittingan
EAPRequest/Identityframetothesupplicant(client)afteranauthentication
failureinthepreviousroundofauthentication.
[no]dot1xreauthenticate
Setsthereauthenticationstatustoonoroff.
dot1xreauthenticationinterval<1604800>
Setsthetime,inseconds,theauthenticatorwaitsbeforereauthenticatinga
supplicant(client)whenperiodicreauthenticationisenabled.
395
Table 209. 802.1XPortOptions(continued)

dot1xservertimeout<165535>
Setsthetime,inseconds,theauthenticatorwaitsforaresponsefromthe
RADIUSserverbeforedeclaringanauthenticationtimeout.
ThetimeintervalbetweentransmissionsoftheRADIUSAccessRequest
packetcontainingthesupplicants(clients)EAPResponsepacketis
determinedbythecurrentsettingoftheradiusservertimeout<110>
command.
dot1xsupplicanttimeout<165535>
Setsthetime,inseconds,theauthenticatorwaitsforanEAPResponsepacket
fromthesupplicant(client)beforeretransmittingtheEAPRequestpacket
fromtheauthenticationserver.
dot1xtransmitinterval<165535>
Setsthetime,inseconds,theauthenticatorwaitsforanEAPResponse/Identity
framefromthesupplicant(client)beforeretransmittingan
EAPRequest/Identityframe.
[no]dot1xvlanassign
SetsthedynamicVLANassignmentstatustoonoroff.
defaultdot1x
Resetsthe802.1Xportparameterstotheirdefaultvalues.
Displayscurrent802.1Xportparameters.
Commandmode:All
396
Spanning Tree Configuration

LenovoN/OSsupportstheIEEE802.1D(2004)RapidSpanningTreeProtocol
(RSTP),theIEEE802.1Q(2003)MultipleSpanningTreeProtocol(MSTP),andPer
VLANRapidSpanningTreeProtocol(PVRST).STPisusedtopreventloopsinthe
networktopology.Upto128SpanningTreeGroupscanbeconfiguredonthe
switch.
Note: WhenVRRPisusedforactive/activeredundancy,STGmustbeenabled.
Table 210. SpanningTreeConfigurationOptions
spanningtreeloopguard
EnablesSTPloopguard.STPloopguardpreventsportsfromforwarding
trafficifnoBPDUsarereceived.Portsareplacedintoaloopinconsistent
blockingstateuntilaBPDUisreceived.
spanningtreemode[disable|mst|pvrst|rstp]
SelectsandenablesMultipleSpanningTreemode(mst),PerVLANRapid
SpanningTreemode(pvrst)orRapidSpanningTreemode(rstp).
ThedefaultmodeisPVRST.
Whenyouselectthedisableoption,theswitchgloballyturnsSpanningTree
off.Allportsareplacedintoforwardingstate.AnyBPDUsreceivedare
flooded.BPDUGuardisnotaffectedbythiscommand.
[no]spanningtreepvstcompatibility
EnablesordisablesVLANtaggingofSpanningTreeBPDUs.
[no]spanningtreestgauto
EnablesordisablesVLANAutomaticSTGAssignment(VASA).When
enabled,eachtimeanewVLANisconfigured,theswitchwillautomatically
assignthenewVLANitsownSTG.Conversely,whenaVLANisdeleted,ifits
STGisnotassociatedwithanyotherVLAN,theSTGisreturnedtothe
availablepool.
Note:WhenusingVASA,amaximumnumberof127automaticallyassigned
STGsissupported.
Note:VASAappliesonlytoPVRSTmode.
spanningtreeguardloop
EnablesSTPloopguard.STPloopguardpreventstheportfromforwarding
trafficifnoBPDUsarereceived.Theportisplacedintoaloopinconsistent
blockingstateuntilaBPDUisreceived.
397
Table 210. SpanningTreeConfigurationOptions(continued)

spanningtreeguardroot
EnablesSTProotguard.STProotguardenforcesthepositionoftheroot
bridge.IfthebridgereceivesasuperiorBPDU,theportisplacedintoa
rootinconsistentstate(listening).
spanningtreeguardnone
DisablesSTPloopguardandrootguard.
nospanningtreeguard
SetstheSpanningTreeguardparameterstotheirdefaultvalues.
[no]spanningtreelinktype{p2p|shared|auto}
Definesthetypeoflinkconnectedtotheport,asfollows:
auto:Configurestheporttodetectthelinktype,andautomaticallymatch
itssettings.
p2p:ConfigurestheportforPointToPointprotocol.
shared:Configurestheporttoconnecttoasharedmedium(usuallya
hub).
Thedefaultlinktypeisauto.
[no]spanningtreeportfast
Enablesordisablesthisportasportfastoredgeport.Anedgeportisnot
connectedtoabridgeandcanbeginforwardingtrafficassoonasthelinkisup.
Configuresserverportsasedgeports(enabled).
Note:Afteryouconfiguretheportasanedgeport,youmustdisabletheport
andthenreenabletheportforthechangetotakeeffect.
[no]spanningtreepvstprotection
ConfiguresPVSTProtectionontheselectedport.Iftheportreceivesany
PVST+/PVRSTBPDUsitbecomeserrordisabled.PVSTProtectionworksonly
inMSTPmode.
Note:Notavailableinstacking.
398
Table 210. SpanningTreeConfigurationOptions(continued)

showspanningtree
DisplaysSpanningTreeinformation,includingthestatus(onoroff),Spanning
Treemode(RSTP,PVRST,orMSTP)andVLANmembership.
InadditiontoseeingifSTGisenabledordisabled,youcanviewthefollowing
STGbridgeinformation:
Priority
Hellointerval
Maximumagevalue
Forwardingdelay
Agingtime
YoucanalsoseethefollowingportspecificSTGinformation:
Portaliasandpriority
Cost
State
Commandmode:All
DisplaystheSpanningTreeconfigurationontherootbridgeforeachSTP
instance.Fordetails,seepage 78.
Commandmode:All
showspanningtreeblockedports
ListstheportsblockedbyeachSTPinstance.
Commandmode:All
showspanningtree[vlan<VLANID(14094)>]bridge
DisplaysSpanningTreebridgeinformation.Fordetails,seepage 77.
Commandmode:All
399
MSTP Configuration
Note: Upto32SpanningTreeGroupscanbeconfiguredinMSTPmode.MSTPis
turnedoffbydefaultandthedefaultSTPmodeisPVRST.
Table 211. MultipleSpanningTreeConfigurationOptions
spanningtreemstconfiguration
EnablesMSTPconfigurationmode.
nospanningtreemstconfiguration
ReturnstheMSTregiontoitsdefaultvalues:noVLANismappedtoanyMST
instanceandtherevisionnumberissetto1.
[no]spanningtreemst<132>enable
EnablesordisablesthespecifiedMSTPinstance.
spanningtreemst<032>priority<065535>
ConfigurestheCISTbridgepriorityforthespecifiedMSTPinstance.Thebridge
priorityparametercontrolswhichbridgeonthenetworkistheMSTProot
bridge.Tomakethisswitchtherootbridge,configurethebridgeprioritylower
thanallotherswitchesandbridgesonyournetwork.Thelowerthevalue,the
higherthebridgepriority.Therangeis0to65535,instepsof4096(0,4096,
8192...).
nospanningtreemst<032>priority
ResetstheCISTbridgepriorityforthespecifiedMSTPinstancetothedefault
valueof32768.
spanningtreemstforwardtime<430>
Configurestheforwarddelaytimeinseconds.Theforwarddelayparameter
specifiestheamountoftimethatabridgeporthastowaitbeforeitchangesfrom
thediscardingandlearningstatestotheforwardingstate.
spanningtreemstmaxage<640>
Configuresthemaximumageintervalinseconds.Themaximumage
parameterspecifiesthemaximumtimethebridgewaitswithoutreceivinga
configurationbridgeprotocoldataunitbeforeitreconfigurestheMSTP
network.
400
Table 211. MultipleSpanningTreeConfigurationOptions(continued)

spanningtreemstmaxhops<460>
Configuresthemaximumnumberofbridgehopsapacketmaytraversebefore
itisdropped.
Thedefaultvalueis20hops.
instance<032>vlan<VLANID(14094)>
MapthespecifiedVLANstotheSpanningTreeinstance.IfaVLANdoesnot
exist,itisnotcreatedautomatically.
Note:Thiscommandbecomesvisibleonlywhenthespanningtreemodeis
MSTP.
Commandmode:MSTconfiguration
noinstance<132>vlan{<VLANID(14094)>|all}
RemovethespecifiedVLANsorallVLANsfromtheSpanningTreeinstance.
name<132characters>
ConfiguresanamefortheMSTPregion.AlldeviceswithinanMSTPregion
musthavethesameregionname.
noname
ClearsthenameoftheMSTPregion.
revision<065535>
ConfiguresarevisionnumberfortheMSTPregion.Therevisionisusedasa
numericalidentifierfortheregion.AlldeviceswithinanMSTPregionmust
havethesamerevisionnumber.
norevision
ResetstherevisionnumberfortheMSTPregion.
defaultspanningtreemst<032>
RestoresaSpanningTreeinstanceorrangeofinstancestodefault
configuration.
401
Table 211. MultipleSpanningTreeConfigurationOptions(continued)

showspanningtreemstconfiguration
DisplaysthecurrentMSTPsettings.
Commandmode:All
showspanningtreemst<032>information
DisplayscurrentMSTinformationforthespecifiedinstance.
Commandmode:All
MSTP Port Configuration

MSTPportparametersareusedtomodifyMSTPoperationonanindividualport
basis.MSTPparametersdonotaffectoperationofRSTP/PVRST.Foreachport,
RSTP/PVRST/MSTPisturnedonbydefault.
Table 212. MSTPPortConfigurationOptions
spanningtreemst<032>cost<0200000000>
ConfigurestheportpathcostforthespecifiedMSTPinstance.Theportpath
costisusedtohelpdeterminethedesignatedportforasegment.Portpathcost
isbasedontheportspeed,andiscalculatedasfollows:
100Mbps=200000
1Gbps=20000
10Gbps=2000
Thedefaultvalueof0(zero)indicatesthatthedefaultpathcostwillbe
computedforanautonegotiatedlinkspeed.
[no]spanningtreemst<032>enable
EnablesordisablesthespecifiedMSTPinstanceontheport.
spanningtreemst<032>portpriority<0240>
ConfigurestheportpriorityforthespecifiedMSTPinstance.Theportpriority
helpsdeterminewhichbridgeportbecomesthedesignatedport.Inanetwork
topologythathasmultiplebridgeportsconnectedtoasinglesegment,theport
withthelowestportprioritybecomesthedesignatedportforthesegment.
Therangeis0to240,instepsof16(0,16,32...)andthedefaultis128.
402
Table 212. MSTPPortConfigurationOptions(continued)

spanningtreemsthellotime<110>
ConfigurestheportHellotime.TheHellotimespecifieshowoftenthebridge
transmitsaconfigurationbridgeprotocoldataunit(BPDU).Anybridgethatis
nottherootbridgeusestherootbridgeHellovalue.
Therangeis1to10secondsandthedefaultis2seconds.
showinterfaceport<portaliasornumber>spanningtreemstpcist
DisplaysthecurrentCISTportconfiguration.
Commandmode:All
RSTP/PVRST Configuration
ThefollowingtabledescribesthecommandsusedtoconfiguretheRapidSpanning
Tree(RSTP)andPerVLANRapidSpanningTreeProtocol(PVRST)protocols.
Table 213. RSTP/PVRSTConfigurationOptions
[no]spanningtreestp<1128>enable
GloballyenablesordisablesSpanningTreeProtocol.
STGisturnedonbydefault.
spanningtreestp<1128>vlan<VLANID(14094)>
AssociatesaVLANwithaSpanningTreeGroupandrequiresaVLANIDasa
parameter.IftheVLANdoesnotexist,itwillbecreatedautomatically,butit
willnotbeenabledbydefault.
nospanningtreestp<1128>vlan{<VLANID(14094)>|all}
BreakstheassociationbetweenaspecifiedVLANorallVLANsanda
SpanningTreeGroupandrequiresaVLANIDasaparameter.
defaultspanningtree<1128>
RestoresaSpanningTreeinstancetoitsdefaultconfiguration.
showspanningtreestp<1128>
DisplayscurrentSpanningTreeProtocolparametersforthespecified
SpanningTreeGroup.Seepage 72fordetailsabouttheinformation
parameter.
Commandmode:All
403
Bridge RSTP/PVRST Configuration

SpanningTreebridgeparametersaffecttheglobalSTGoperationoftheswitch.
STGbridgeparametersinclude:
Bridgepriority
Bridgehellotime
Bridgemaximumage
Forwardingdelay
Table 214. BridgeSpanningTreeConfigurationOptions

spanningtreestp<1128>bridgeforwarddelay<430>
Configuresthebridgeforwarddelayparameter.Theforwarddelayparameter
specifiestheamountoftimethatabridgeporthastowaitbeforeitchanges
fromthediscardingandlearningstatestotheforwardingstate.
Note:ThiscommanddoesnotapplytoMSTP.
nospanningtreestp<1128>bridgeforwarddelay
Resetsthebridgeforwarddelayparametertoitsdefaultvalueof15seconds.
spanningtreestp<1128>bridgehellotime<110>
ConfiguresthebridgeHellotime.TheHellotimespecifieshowoftenthe
bridgetransmitsaconfigurationbridgeprotocoldataunit(BPDU).Anybridge
thatisnottherootbridgeusestherootbridgeHellovalue.
nospanningtreestp<1128>bridgehellotime
ResetsthebirdgeHellotimetoitsdefaultvalueof2seconds.
spanningtreestp<1128>bridgemaximumage<640>
Configuresthebridgemaximumage.Themaximumageparameterspecifies
themaximumtimethebridgewaitswithoutreceivingaconfigurationbridge
protocoldataunitbeforeitreconfigurestheSTGnetwork.
nospanningtreestp<1128>bridgemaximumage
Resetsthebridgemaximumagetoitsdefaultvalueof20seconds.
404
Table 214. BridgeSpanningTreeConfigurationOptions

spanningtreestp<1128>bridgepriority<065535>
Configuresthebridgepriority.Thebridgepriorityparametercontrolswhich
bridgeonthenetworkistheSTGrootbridge.Tomakethisswitchtheroot
bridge,configurethebridgeprioritylowerthanallotherswitchesandbridges
onyournetwork.Thelowerthevalue,thehigherthebridgepriority.Enterthe
valueinmultiplesof4096.Nonmultiplesareautomaticallyroundeduptothe
closestvalidpriority.
nospanningtreestp<1128>bridgepriority
Resetsthebridgeprioritytoitsdefaultvalueof32768.
showspanningtree[vlan<VLANID(14094)>]bridge
DisplaysthecurrentSpanningTreeparameterseithergloballyorforaspecific
VLAN.Seepage 77forsampleoutput.
Commandmode:All
WhenconfiguringSTGbridgeparameters,thefollowingformulasmustbeused:
2*(fwd1)>mxage
2*(hello+1)<mxage
405
RSTP/PVRST Port Configuration

Bydefault,SpanningTreeisturnedoffformanagementports,andturnedonfor
dataports.STGportparametersinclude:
Portpriority
Portpathcost
Table 215. SpanningTreePortOptions

[no]spanningtreestp<1128>enable
EnablesordisablesSTGontheport.
Commandmode:Interfaceport/Interfaceprotchannel
spanningtreestp<1128>pathcost<1200000000,0fordefault)>
Configurestheportpathcost.Theportpathcostisusedtohelpdeterminethe
designatedportforasegment.Portpathcostisbasedontheportspeed,andis
calculatedasfollows:
100Mbps=200000
1Gbps=20000
10Gbps=2000
Thedefaultvalueof0(zero)indicatesthatthedefaultpathcostwillbe
computedforanautonegotiatedlinkspeed.
spanningtreestp<1128>priority<0240>
Configurestheportpriority.Theportpriorityhelpsdeterminewhichbridge
portbecomesthedesignatedport.Inanetworktopologythathasmultiple
bridgeportsconnectedtoasinglesegment,theportwiththelowestport
prioritybecomesthedesignatedportforthesegment.
RSTP/MSTP:Therangeis0to240,instepsof16(0,16,32...).
defaultspanningtreestp<1128>
ResetstheSTGconfigurationtoitsdefaultsettings.
showinterfaceport<portaliasornumber>spanningtreestp<1128>
DisplaysthecurrentSTGportparameters.
Commandmode:All
406
Forwarding Database Configuration

UsethefollowingcommandstoconfiguretheForwardingDatabase(FDB).
Table 216. FDBConfigurationOptions
macaddresstableaging<065535>
ConfigurestheagingvalueforFDBentries,inseconds.
macaddresstablemulticast
ConfiguresmulticastFDBentries.Forcommandoptions,seepage 408.
macaddresstablestatic
ConfiguresstaticFDBentries.Forcommandoptions,seepage 409.
showmacaddresstable
DisplaycurrentFDBconfiguration.
Commandmode:All
407
Static Multicast MAC Configuration

Thefollowingoptionsareavailabletocontroltheforwardingofknownand
unknownmulticastpackets:
AllmulticastpacketsarefloodedtotheentireVLAN.Thisisthedefaultswitch
behavior.
Knownmulticastpacketsareforwardedonlytothoseportsspecified.Unknown
multicastpacketsarefloodedtotheentireVLAN.Toconfigurethisoption,
definetheMulticastMACaddressfortheVLANandspecifyportsthatareto
receivemulticastpackets(macaddresstablemulticast).
Knownmulticastpacketsareforwardedonlytothoseportsspecified.Unknown
multicastpacketsaredropped.Toconfigurethisoption:
DefinetheMulticastMACaddressfortheVLANandspecifyportsthatareto
receivemulticastpackets(macaddresstablemulticast).
EnableFloodBlockingonportsthatarenottoreceivemulticastpackets
(interfaceportx)(floodblocking).
UsethefollowingcommandstoconfigurestaticMulticastMACentriesinthe
ForwardingDatabase(FDB).
Table 217. StaticMulticastMACConfigurationOptions
[no]macaddresstablemulticast<MACaddress><VLANID(14094)>
<portaliasornumber>
Addsorremovesastaticmulticastentry.Youcanlistportsseparatedbya
comma(,)orenterarangeofportsseparatedbyahyphen().Forexample:
macaddresstablemulticast01:00:00:23:3f:0120014
[no]macaddresstablemulticast<MACaddress>port
<portnumberoralias>
AddsorremovesastaticmulticastentryforNetworkLoadBalancing(NLB).
Youcanlistportsseparatedbyacomma(,)orenterarangeofports
separatedbyahyphen().Forexample:
macaddresstablemulticast01:00:00:23:3f:01port14
macaddresstablemulticastreload
Reloadsallstaticmulticastentries.
408
Table 217. StaticMulticastMACConfigurationOptions

nomacaddresstablemulticastall[interfaceport
<portnumberoralias>|mac<MACaddress>|vlan<VLANID(14094)>]
Deletesallstaticmulticastentries.
interfaceportdeletesallstaticmulticastentriesthatusethespecified
port
macdeletesallstaticmulticastentriesthatusethespecifiedMACaddress
vlandeletesallstaticmulticastentriesthatusethespecifiedvlan
Displaythecurrentstaticmulticastentries.
Commandmode:All
Static FDB Configuration

UsethefollowingcommandstoconfigurestaticentriesintheForwarding
Database(FDB).
[no]macaddresstablestatic<MACaddress>port
<portaliasornumber>
AddsorremovesapermanentFDBentry.EntertheMACaddressusingthe
followingformat:xx:xx:xx:xx:xx:xx.
Forexample,08:00:20:12:34:56.
YoucanalsoentertheMACaddressasfollows:xxxxxxxxxxxx.
Note:Availableifroutingisenabledontheport.
macaddresstablestatic<MACaddress>vlan<VLANID(14094)>
{port<portaliasornumber>|portchannel<trunknumber>|
adminkey<165535>}
AddsapermanentFDBentry.EntertheMACaddressusingthefollowing
format:xx:xx:xx:xx:xx:xx
Forexample,08:00:20:12:34:56.
YoucanalsoentertheMACaddressasfollows:xxxxxxxxxxxx.
Note:Availableifroutingisdisabledontheport.
409

nomacaddresstablestatic<MACaddress><VLANID(14094)>
DeletespermanentFDBentries.
nomacaddresstablestaticall[mac<MACaddress>|
vlan<VLANID(14094)>]
DeletesallpermanentFBDentries.
macdeletesallpermanententriesthatusethespecifiedMACaddress
vlandeletesallpermanententriesthatusethespecifiedvlan
nomacaddresstablestaticallinterface{port
<portaliasornumber>|portchannel<trunknumber>|adminkey<165535>}
DeletesallpermanentFBDentriesthatusethespecifiedport,trunkgroupor
LACPadminkey.
showmacaddresstable
DisplaycurrentFDBconfiguration.
Commandmode:All
410
ECP Configuration
UsethefollowingcommandstoconfigureEdgeControlProtocol(ECP).
Table 219. ECPConfigurationOptions
ecpretransmitinterval<1009000>
ConfiguresECPretransmitintervalinmilliseconds.
Thedefaultvalueis1000miliseconds.
defaultecpretransmitinterval
ResetstheECPretransmitintervaltothedefault1000milliseconds.
showecp[channels|retransmitinterval|
upperlayerprotocols]
DisplayssettingsfortheECPretransmitintervalorforallECPchannelsor
registeredULPs.
Commandmode:All
411
LLDP Configuration
UsethefollowingcommandstoconfigureLinkLayerDetectionProtocol(LLDP).
Table 220. LLDPConfigurationOptions
[no]lldpenable
GloballyenablesordisablesLLDP.
lldpholdtimemultiplier<210>
Configuresthemessageholdtimemultiplier.Theholdtimeisconfiguredasa
multipleofthemessagetransmissioninterval.
Thedefaultvalueis4.
nolldpholdtimemultiplier
Resetsthemessageholdtimemultipliertoitsdefaultvalueof4.
lldprefreshinterval<532768>
Configuresthemessagetransmissioninterval,inseconds.
nolldprefreshinterval
Resetsthemessagetransmissionintervaltoitsdefaultvalueof30seconds.
lldpreinitdelay<110>
Configuresthereinitializationdelayinterval,inseconds.Thereinitialization
delayallowstheportLLDPinformationtostabilizebeforetransmittingLLDP
messages.
nolldpreinitdelay
Resetsthereinitializationdelayintervaltoitsdefaultvalueof2seconds.
lldptransmissiondelay<18192>
Configuresthetransmissiondelayinterval,inseconds.Thetransmitdelay
timerrepresentstheminimumtimepermittedbetweensuccessiveLLDP
transmissionsonaport.
412
Table 220. LLDPConfigurationOptions(continued)

nolldptransmissiondelay
Resetsthetransmissiondelayintervaltoitsdefaultvalueof2seconds.
lldptrapnotificationinterval<13600>
Configuresthetrapnotificationinterval,inseconds.
nolldptrapnotificationinterval
Resetsthetrapnotificationintervaltoitsdefaultvalueof5seconds.
showlldp[port[<port_number>]]
DisplaycurrentLLDPconfiguration.
Commandmode:All
LLDP Port Configuration

UsethefollowingcommandstoconfigureLLDPportoptions.
Table 221. LLDPPortOptions
lldpadminstatus{tx_only|rx_only|tx_rx}
ConfigurestheLLDPtransmissiontypefortheport,asfollows:
Transmitonly
Receiveonly
Transmitandreceive
Thedefaultsettingistx_rx.
nolldpadminstatus
DisablestheLLDPtransmissiontype.
[no]lldptrapnotification
EnablesordisablesSNMPtrapnotificationforLLDPmessages.
showinterfaceport<portaliasornumber>lldp
DisplaycurrentLLDPportconfiguration.
Commandmode:All
413
LLDP Optional TLV configuration

UsethefollowingcommandstoconfigureLLDPportTLV(Type,Length,Value)
optionsfortheselectedport.
Table 222. OptionalTLVOptions
[no]lldptlvall
EnablesordisablesalloptionalTLVinformationtypes.
[no]lldptlvframesz
EnablesordisablestheMaximumFrameSizeinformationtype.
[no]lldptlvlinkaggr
EnablesordisablestheLinkAggregationinformationtype.
[no]lldptlvmacphy
EnablesordisablestheMAC/PhyConfigurationinformationtype.
[no]lldptlvmgmtaddr
EnablesordisablestheManagementAddressinformationtype.
[no]lldptlvportdesc
EnablesordisablesthePortDescriptioninformationtype.
[no]lldptlvportprot
EnablesordisablesthePortandVLANProtocolIDinformationtype.
[no]lldptlvportvid
EnablesordisablesthePortVLANIDinformationtype.
[no]lldptlvpowermdi
EnablesordisablesthePowerviaMDIinformationtype.
[no]lldptlvprotid
EnablesordisablestheProtocolIDinformationtype.
414
Table 222. OptionalTLVOptions(continued)

[no]lldptlvsyscap
EnablesordisablestheSystemCapabilitiesinformationtype.
[no]lldptlvsysdescr
EnablesordisablestheSystemDescriptioninformationtype.
[no]lldptlvsysname
EnablesordisablestheSystemNameinformationtype.
[no]lldptlvvlanname
EnablesordisablestheVLANNameinformationtype.
showinterfaceport<portaliasornumber>lldp
DisplaycurrentLLDPportconfiguration.
Commandmode:All
415
Trunk Configuration
TrunkgroupscanprovidesuperbandwidthconnectionsbetweenRackSwitch
G8052sorothertrunkcapabledevices.Atrunkisagroupofportsthatacttogether,
combiningtheirbandwidthtocreateasingle,largerport.Twotrunktypesare
available:statictrunkgroups(portchannels)anddynamicLACPtrunkgroups
(portchannels).
Thetwotrunktypescanbeconfiguredusingthefollowingportchannelranges:
staticportchannels:152
LACPportchannels:53104
Upto52statictrunkgroupscanbeconfiguredontheG8052,withthefollowing
restrictions:
Anyphysicalswitchportcanbelongtonomorethanonetrunkgroup.
Upto8portscanbelongtothesametrunkgroup.
Youmustconfigureallportsinatrunkgroupwiththesameproperties(speed,
duplex,flowcontrol,STG,VLAN,andsoon).
TrunkingfromnonLenovodevicesmustcomplywithCiscoEtherChannel
technology.
Bydefault,eachtrunkgroupisemptyanddisabled.
Table 223. TrunkConfigurationOptions
[no]portchannel<152>enable
Enablesordisablesthecurrenttrunkgroup.
portchannel<152>port<portaliasornumber>[enable]
Addsaphysicalportorportstothecurrenttrunkgroup.Youcanaddseveral
ports,witheachportseparatedbyacomma(,)orarangeofports,separated
byadash().Theenableoptionalsoenablesthecurrenttrunkgroup.
noportchannel<152>port<portaliasornumber>
Removesaphysicalportorportsfromthecurrenttrunkgroup.
noportchannel<152>
Removesthecurrenttrunkgroupconfiguration.
showportchannel<152>
Displayscurrenttrunkgroupparameters.
Commandmode:All
416
Trunk Hash Configuration

UsethefollowingcommandstoconfiguretrunkhashsettingsfortheG8052.The
trunkhashsettingsaffectbothstatictrunksandLACPtrunks.
Toachievethemosteventrafficdistribution,selectoptionsthatexhibitawide
rangeofvaluesforyourparticularnetwork.Youmayusetheconfiguration
settingslistedinTable 224combinedwiththehashparameterslistedinTable 225
andTable 226.
Table 224. TrunkHashOptions
[no]portchannelhashingress
Enablesordisablestrunkhashcomputationbasedontheingressport.
[no]portchannelhashL4port
EnablesordisablesuseofLayer4serviceports(TCP,UDP,andsoon)to
computethehashvalue.
[no]portchannelthashlocalpreference
Enablesordisableslocalpreferenceforknownunicasttraffic.Whenenabled,
unicastpacketsthatneedtoexitthestackthroughacertainportchannelare
hashedusingonlytheportchannelmemberportsoftheingressswitch.
Otherwise,whendisabledoriftheingressswitchdoesnthaveanymember
ports,thepacketishashedusingallportchannelmemberportsacrossthe
wholestack.
Thisoptionreducesthetrafficbandwidthoverthestackinglinks.
Note:Thiscommandisavaibleonlyinstackingonthemasterswitch.
showportchannelhash
Displaycurrenttrunkhashconfiguration.
Commandmode:All
417
Trunk Hash Settings

TrunkhashparametersaresetgloballyfortheG8052.Youcanenableoneortwo
parameters,toconfigureanyofthefollowingvalidcombinations:
SMAC(sourceMAConly)
DMAC(destinationMAConly)
SIP(sourceIPonly)
DIP(destinationIPonly)
SIP+DIP(sourceIPanddestinationIP)
SMAC+DMAC(sourceMACanddestinationMAC)
UsethefollowingcommandstoconfiguretrunkhashparametersfortheG8052.
Table 225. TrunkHashSettings
portchannelhashsourcemacaddress
EnabletrunkhashingonthesourceMAC.
portchannelhashdestinationmacaddress
EnabletrunkhashingonthedestinationMAC.
portchannelhashsourceipaddress
EnabletrunkhashingonthesourceIP.
portchannelhashdestinationipaddress
EnabletrunkhashingonthedestinationIP.
portchannelhashsourcedestinationip
EnabletrunkhashingonthesourceanddestinationIP.
portchannelhashsourcedestinationmac
EnabletrunkhashingonthesourceanddestinationMACaddress.
showportchannelhash
Displaycurrenttrunkhashsetting.
Commandmode:All
418
Static In-Port Hash Settings

Usethefollowingcommandstoconfigurestaticinporttrunkhashparametersfor
theG8052.
Table 226. StaticInPortHashParameters
[no]portchannelhashstaticdistributioninport
{portchannel<trunkgroupnumber>|lacpkey<165535>}
Enablesordisablesstaticinporthashsettingsfortheselectedtrunkgroup.
portchanneldistributiontrunkmemberindex<18>
Enablesstatictrafficdistributionontheselectedportindexoftheoutput
trunk.
noportchanneldistribution
Disablesstatictrafficdistribution.
showportchannelhash
Displaycurrenttrunkhashsettings.
Commandmode:All
419
Virtual Link Aggregation Group Configuration

vLAGgroupsallowyoutoenhanceredundancyandpreventimplicitloops
withoutusingSTP.ThevLAGgroupactsasasinglevirtualentityforthepurpose
ofestablishingamultiporttrunk.
Table 227. vLAGConfigurationOptions
[no]vlagadminkey<165535>enable
EnablesordisablesvLAGontheselectedLACPadminkey.LACPtrunks
formedwiththisadminkeywillbeincludedinthevLAGconfiguration.
vlagautorecovery<2403600>
Setsthedurationinsecondsoftheautorecoverytimer.Thistimerconfigures
howlogafterbootupconfigurationload,theswitchcanassumethePrimary
rolefromanunresponsiveISLpeerandbringupthevLAGports.
novlagautorecovery
Setstheautorecoverytimertothedefault300secondsduration.
[no]vlagenable
EnablesordisablesvLAGglobally.
[no]vlagportchannel<152>enable
EnablesordisablesvLAGontheselectedtrunkgroup.
vlagpriority<065535>
ConfiguresthevLAGpriorityfortheswitch,usedforelectionofPrimaryand
SecondaryvLAGswitches.Theswitchwithlowerpriorityiselectedtotherole
ofPrimaryvLAGswitch.
novlagpriority
ResetsthevLAGpriorityoftheswitchtoitsdefaultvalueof0.
vlagstartupdelay<03600>
Sets,inseconds,thevLAGstartupdelayinterval.
420
Table 227. vLAGConfigurationOptions

novlagstartupdelay
SetsthevLAGstartupdelaytimertothedefault120secondsduration.
vlagtierid<1512>
SetsthevLAGpeerID.
novlagtierid
ResetsthevLAGpeerIDtoitsdefaultvalueof0.
showvlag
DisplayscurrentvLAGparameters.
Commandmode:All
421
vLAG Health Check Configuration

Thesecommandsenableyoutoconfigureawaytocheckthehealthstatusofthe
vLAGpeer.
Table 228. vLAGHealthCheckConfigurationOptions
vlaghlthchkconnectretryinterval<1300>
Sets,inseconds,thevLAGhealthcheckconnectretryinterval.
novlaghlthchkconnectretryinterval
ResetsthevLAGhealthcheckconnectretryintervaltoitsdefaultvalueof30
seconds.
vlaghlthchkkeepaliveattempts<124>
SetsthenumberofvLAGkeepaliveattempts.
Thedefaultvalueis3.
novlaghlthchkkeepaliveattempts
ResetsthenumberofvLAGkeepaliveattemptstothedefaultvalueof3.
vlaghlthchkkeepaliveinterval<2300>
Sets,inseconds,thetimebetweenvLAGkeepaliveattempts.
novlaghlthchkkeepaliveinterval
ResetsthetimebetweenvLAGkeepaliveattemptstothedefaultvalueof5
seconds.
vlaghlthchkpeerip{<IPv4address>|<IPv6address>}
ConfigurestheIPaddressofthepeerswitch,usedforhealthchecks.Usethe
managementIPaddressofthepeerswitch.Forexample:
IPv4address:100.20.0.103
IPv6address:3001:0:0:0:0:0:abcd:1234
novlaghlthchkpeerip
DeletestheIPaddressofthepeerswitch,usedforhealthchecks.
422
vLAG ISL Configuration

Thesecommandsallowyoutoconfigureadedicatedinterswitchlink(ISL)for
synchronizationbetweenvLAGpeers.
Table 229. vLAGISLConfigurationOptions
vlagisladminkey<165535>
EnablesvLAGInterSwitchLink(ISL)ontheselectedLACPadminkey.LACP
trunksformedwiththisadminkeywillbeincludedintheISL.
novlagisladminkey
DisablesvLAGInterSwitchLink(ISL)forLACPadminkeys.
vlagislportchannel<152>
EnablesvLAGInterSwitchLink(ISL)ontheselectedtrunkgroup.
novlagislportchannel
DisablesvLAGInterSwitchLink(ISL)fortrunkgroups.
showvlag
DisplayscurrentvLAGparameters.
Commandmode:All
423
Link Aggregation Control Protocol Configuration

UsethefollowingcommandstoconfigureLinkAggregationControlProtocol
(LACP)fortheG8052.
Table 230. LinkAggregationControlProtocolOptions
lacpsystempriority<165535>
DefinesthepriorityvaluefortheG8052.Lowernumbersprovidehigher
priority.
defaultlacpsystempriority
Resetsthepriorityvaluefortheswitchtoitsdefaultvalueof32768.
lacptimeout{short|long}
DefinesthetimeoutperiodbeforeinvalidatingLACPdatafromaremote
partner.Chooseshort(3seconds)orlong(90seconds).
Thedefaultvalueislong.
Note:ToreduceLACPDUprocessing,useatimeoutvalueoflong.Ifyour
G8052sCPUutilizationrateremainsat100%forperiodsof90secondsor
more,considerusingstatictrunksinsteadofLACP.
defaultlacptimeout
ResetsthetimeoutperiodbeforeinvalidatingLACPdatafromaremote
partnertoitsdefaultvalueoflong.
defaultlacp
ResetstheLACPsystemconfigurationtoitsdefaultvalues.
nolacp<165535>
DeletesaselectedLACPtrunk,basedonitsadminkey.Thiscommandis
equivalenttodisablingLACPoneachoftheportsconfiguredwiththesame
adminkey.
424
Table 230. LinkAggregationControlProtocolOptions

portchannel<53104>lacpkey<165535>
EnablesastaticLACPtrunk.Inthismode,portssharingthesameLACP
adminkeycanformasingletrunk,withthespecifiedtrunkID.Theactive
trunkispickedbasedontheportswhichoccupyfirstthetrunkID.Member
portsthatcannotjointhistrunkareprohibitedfromformingsecondaryLACP
groups.Instead,theyaresetinasuspendedstatewheretheydiscardall
nonLACPtraffic.
noportchannel<53104>
DeletesastaticLACPtrunk.
showlacp
DisplaycurrentLACPconfiguration.
Commandmode:All
LACP Port Configuration

UsethefollowingcommandstoconfigureLinkAggregationControlProtocol
(LACP)fortheselectedport.
Table 231. LACPPortOptions
lacpkey<165535>
Settheadminkeyforthisport.Onlyportswiththesameadminkeyandoperkey
(operationalstategeneratedinternally)canformaLACPtrunkgroup.
lacpmode{off|active|passive}
SettheLACPmodeforthisport,asfollows:
offturnsLACPoffforthisport.Youcanusethisporttomanually
configureastatictrunk.
activeturnsLACPonandsetthisporttoactive.Activeportsinitiate
LACPDUs.
passiveturnsLACPonandsetthisporttopassive.Passiveportsdonot
initiateLACPDUs,butrespondtoLACPDUsfromactiveports.
425
Table 231. LACPPortOptions

lacppriority<165535>
Setsthepriorityvaluefortheselectedport.Lowernumbersprovidehigher
priority.
lacpsuspendindividual
SetstheportinLACPsuspendedstateifitdoesnotreceiveLACPDUs
anymore.
Note:Thedefaultvalueissuspendindividualforallswitchports.
nolacpsuspendindividual
SetstheportinLACPindividualstateifitdoesnotreceiveLACPDUs
anymore.
defaultlacp[key|mode|priority|suspendindividual]
Restorestheselectedparameterstotheirdefaultvalues.
portchannelminlinks<18>
Settheminimumnumberoflinksforthisport.Ifthespecifiedminimum
numberofportsarenotavailable,thetrunkisplacedinthedownstate.
defaultportchannelminlinks
Restorestheminimumnumberoflinksforthisporttoitsdefaultvalue.
showinterfaceport<portaliasornumber>lacp
DisplaysthecurrentLACPconfigurationforthisport.
Commandmode:All
426
Layer 2 Failover Configuration

UsethesecommandstoconfigureLayer2Failover.Formoreinformationabout
Layer2Failover,seeHighAvailabilityintheLenovoN/OSApplicationGuide.
Table 232. Layer2FailoverConfigurationOptions
[no]failoverenable
GloballyenablesordisablesLayer2Failover.
showfailovertrigger
DisplayscurrentLayer2Failoverparameters.
Commandmode:All
Failover Trigger Configuration

ThefollowingtabledescribestheFailoverTriggercommands.
Table 233. FailoverTriggerConfigurationOptions
[no]failovertrigger<18>enable
EnablesordisablestheFailovertrigger.
failovertrigger<18>limit<01024>
Configurestheminimumnumberofoperationallinksallowedwithineach
triggerbeforethetriggerinitiatesafailoverevent.Ifyouenteravalueofzero
(0),theswitchtriggersafailovereventonlywhennolinksinthetriggerare
operational.
nofailovertrigger<18>
DeletestheFailovertrigger.
showfailovertrigger<18>
Displaysthecurrentfailovertriggersettings.
Commandmode:All
427
Failover Manual Monitor Port Configuration

Usethesecommandstodefinetheportlink(s)tomonitor.TheManualMonitor
Portconfigurationacceptsanynonmanagementport.
Table 234. FailoverManualMonitorPortOptions
[no]failovertrigger<18>mmonmonitoradminkey<165535>
AddsorremovesanLACPadminkeytotheManualMonitorPort
configuration.LACPtrunksformedwiththisadminkeywillbeincludedin
theManualMonitorPortconfiguration.
[no]failovertrigger<18>mmonmonitormember
<portaliasornumber>
AddsorremovestheselectedporttotheManualMonitorPortconfiguration.
[no]failovertrigger<18>mmonmonitorportchannel<152>
AddsorremovestheselectedtrunkgrouptotheManualMonitorPort
configuration.
DisplaysthecurrentFailoversettings.
Commandmode:All
428
Failover Manual Monitor Control Configuration

Usethesecommandstodefinetheportlink(s)tocontrol.TheManualMonitor
Controlconfigurationacceptsanynonmanagementport.
Table 235. FailoverManualMonitorControlOptions
[no]failovertrigger<18>mmoncontroladminkey<165535>
AddsorremovesanLACPadminkeytotheManualMonitorControl
configuration.LACPtrunksformedwiththisadminkeywillbeincludedin
theManualMonitorControlconfiguration.
[no]failovertrigger<18>mmoncontrolmember
<portaliasornumber>
AddsorremovestheselectedporttotheManualMonitorControl
configuration.
[no]failovertrigger<18>mmoncontrolportchannel<152>
AddsorremovestheselectedtrunkgrouptotheManualMonitorControl
configuration.
DisplaysthecurrentFailoversettings.
Commandmode:All
429
Hot Links Configuration

UsethesecommandstoconfigureHotLinks.FormoreinformationaboutHot
Links,seeHotLinksintheLenovoN/OS8.3ApplicationGuide.
Table 236. HotLinksConfigurationOptions
[no]hotlinksbpdu
EnablesordisablesfloodingofSpanningTreeBPDUsontheactiveHotLinks
interfacewhentheinterfacebelongstoaSpanningTreegroupthatisglobally
turnedoff.Thisfeaturecanpreventunintentionalloopscenarios(for
example,iftwouplinkscomeupatthesametime).
[no]hotlinksenable
GloballyenablesordisablesHotLinks.
[no]hotlinksfdbupdate
EnablesordisablesFDBUpdate,whichallowstheswitchtosendFDBand
MACupdatepacketsovertheactiveinterface.
hotlinksfdbupdaterate<10200>
ConfigurestheFDBUpdaterateinpacketspersecond.
showhotlinks
DisplayscurrentHotLinksparameters.
Commandmode:All
430
Hot Links Trigger Configuration

ThefollowingtabledescribestheHotLinksTriggercommands.
Table 237. HotLinksTriggerConfigurationOptions
[no]hotlinkstrigger<125>enable
EnablesordisablestheHotLinkstrigger.
hotlinkstrigger<125>forwarddelay<03600>
ConfigurestheForwardDelayinterval,inseconds.
Thedefaultvalueis1second.
hotlinkstrigger<125>name<132characters>
DefinesanamefortheHotLinkstrigger.
nohotlinkstrigger<125>name
RemovesthenameofthespecifiedHotLinkstrigger.
[no]hotlinkstrigger<125>preemption
Enablesordisablespreemption,whichallowstheMasterinterfaceto
transitiontotheActivestatewheneveritbecomesavailable.
nohotlinkstrigger<125>
DeletestheHotLinkstrigger.
showhotlinkstrigger<125>
DisplaysthecurrentHotLinkstriggersettings.
Commandmode:All
431
Hot Links Master Configuration

UsethefollowingcommandstoconfiguretheHotLinksMasterinterface.
Table 238. HotLinksMasterConfigurationOptions
hotlinkstrigger<125>masteradminkey<165535>
AddsanLACPadminkeytotheMasterinterface.LACPtrunksformedwith
thisadminkeywillbeincludedintheMasterinterface.
nohotlinkstrigger<125>masteradminkey
ClearsallLACPadminkeysontheMasterinterface.
hotlinkstrigger<125>masterport<portaliasornumber>
AddstheselectedporttotheHotLinksMasterinterface.
nohotlinkstrigger<125>masterport
ClearsallportsaddedtotheHotLinksMasterinterface.
hotlinkstrigger<125>masterportchannel<152>
AddstheselectedtrunkgrouptotheHotLinksMasterinterface.
nohotlinkstrigger<125>masterportchannel
ClearsalltrunkgroupsaddedtotheHotLinksMasterinterface.
Commandmode:All
432
Hot Links Backup Configuration

UsethefollowingcommandstoconfiguretheHotLinksBackupinterface.
Table 239. HotLinksBackupConfigurationOptions
hotlinkstrigger<125>backupadminkey<165535>
AddsanLACPadminkeytotheHotLinksBackupinterface.LACPtrunks
formedwiththisadminkeywillbeincludedintheHotLinksBackupinterface.
nohotlinkstrigger<125>backupadminkey
ClearsallLACPadminkeysontheHotLinksBackupinterface.
hotlinkstrigger<125>backupport<portaliasornumber>
AddstheselectedporttotheHotLinksBackupinterface.
nohotlinkstrigger<125>backupport
ClearsallportsaddedtotheHotLinksBackupinterface.
hotlinkstrigger<125>backupportchannel<152>
AddstheselectedtrunkgrouptotheHotLinksBackupinterface.
nohotlinkstrigger<125>backupportchannel
ClearsalltrunkgroupsaddedtotheHotLinksBackupinterface.
Commandmode:All
433
VLAN Configuration
ThesecommandsconfigureVLANattributes,changethestatusofeachVLAN,
changetheportmembershipofeachVLAN,anddeleteVLANs.
Bydefault,VLAN1istheonlyVLANconfiguredontheswitch.Allportsare
membersofVLAN1bydefault.Upto2048VLANscanbeconfiguredonthe
G8052.
VLANscanbeassignedanynumberbetween1and4094.
Table 240. VLANConfigurationOptions
vlan<VLANID(14094)>
EnterVLANconfigurationmode.IfthespecifiedVLAN(s)doesntexist,itwill
becreated.
name<132characters>
AssignsanametotheVLANorchangestheexistingname.
ThedefaultVLANnameisthefirstone.
Commandmode:VLAN
noname
RemovestheassignednamefromthecurrentVLAN.
Commandmode:VLAN
protocolvlan<protocolnumber(18)>
ConfigurestheProtocolbasedVLAN(PVLAN).Forcommandoptions,see
page 435.
Commandmode:VLAN
shutdown
DisableslocaltrafficonthespecifiedVLAN.
Thedefaultsettingisenabled(noshutdown).
Commandmode:VLAN
noshutdown
EnableslocaltrafficonthespecifiedVLAN.
Thisisthedefaultsetting.
Commandmode:VLAN
stg<1128>
AssignsaVLANtoaSpanningTreeGroup.
Note:ForMSTnoVLANassignationisrequired.VLANsaremappedfrom
CIST.
Commandmode:VLAN
434
Table 240. VLANConfigurationOptions

[no]vmap<1640>[serverports|nonserverports]
AddsorremovesaVLANMaptotheVLANmembership.Youcanchooseto
limitoperationoftheVLANMaptoserverportsonlyornonserverportsonly.
Ifyoudonotselectaporttype,theVMAPisappliedtotheentireVLAN.
Commandmode:VLAN
novlan<VLANID(14094)>
DeletesthisVLAN.
Commandmode:VLAN
showvlaninformation
DisplaysthecurrentVLANconfiguration.
Commandmode:All
Note: AllportsmustbelongtoatleastoneVLAN.Anyportwhichisremoved
fromaVLANandwhichisnotamemberofanyotherVLANisautomatically
addedtodefaultVLAN1.YoucannotremoveaportfromVLAN1iftheporthas
nomembershipinanyotherVLAN.Also,youcannotaddaporttomorethanone
VLANunlesstheporthasVLANtaggingturnedon.
Protocol-Based VLAN Configuration

UsethefollowingcommandstoconfigureProtocolbasedVLANfortheselected
VLAN.
Table 241. ProtocolVLANConfigurationOptions
[no]protocolvlan<protocolnumber(18)>enable
EnablesordisablestheselectedprotocolontheVLAN.
Commandmode:VLAN
protocolvlan<protocolnumber(18)>frametype{ether2|llc|snap}
<ethernettype>
ConfigurestheframetypeandtheEthernettypefortheselectedprotocol.
Ethernettypeconsistsofa4digit(16bit)hexcode,suchas0080(IPv4).
Commandmode:VLAN
[no]protocolvlan<protocolnumber(18)>member<portaliasornumber>
AddsorremovesaporttotheselectedPVLAN.
Commandmode:VLAN
protocolvlan<protocolnumber(18)>priority<07>
ConfiguresthepriorityvalueforthisPVLAN.
Commandmode:VLAN
435
Table 241. ProtocolVLANConfigurationOptions(continued)

protocolvlan<protocolnumber(18)>protocol<protocoltype>
Selectsapredefinedprotocol,asfollows:
decEther2:
DECLocalAreaTransport
ipv4Ether2:
InternetIP(IPv4)
ipv6Ether2:
IPv6
ipx802.2:
NovellIPX802.2
ipx802.3:
NovellIPX802.3
ipxEther2:
NovellIPX
ipxSnap:
NovellIPXSNAP
netbios:
NetBIOS802.2
rarpEther2:
ReverseARP
sna802.2:
SNA802.2
snaEther2:
LenovoSNAServiceonEthernet
vinesEther2:
BanyanVINES
xnsEther2:
XNSCompatibility
Commandmode:VLAN
[no]protocolvlan<protocolnumber(18)>tagpvlan
<portaliasornumber>
Addsorremovesaportthatwillbetaggedbytheselectedprotocolonthis
VLAN.
Commandmode:VLAN
noprotocolvlan<protocolnumber(18)>
DeletestheselectedprotocolconfigurationfromtheVLAN.
Commandmode:VLAN
showprotocolvlan<protocolnumber(18)>
DisplayscurrentparametersfortheselectedPVLAN.
Commandmode:All
436
Private VLAN Configuration

UsethefollowingcommandstoconfigurePrivateVLANs.
Table 242. PrivateVLANOptions
privatevlanassociation[add|remove]<secondaryVLANlist>
ConfiguresPrivateVLANmappingbetweenaprimaryVLANandsecondary
VLANs.Ifnooptionalparameterisspecified,thelistofsecondaryVLANs,
replacesthecurrentlyassociatedsecondaryVLANs.Otherwise:
addappendsthesecondaryVLANstotheonescurrentlyassociated
removeexcludesthesecondaryVLANsfromtheonescurrentlyassociated
Commandmode:VLAN
[no]privatevlancommunity
EnablesordisablestheVLANtypeasacommunityVLAN.
CommunityVLANscarryupstreamtrafficfromhostports.APrivateVLAN
mayhavemultiplecommunityVLANs.
Commandmode:VLAN
[no]privatevlanisolated
EnablesordisablestheVLANtypeasanisolatedVLAN.
TheisolatedVLANcarriesunidirectionaltrafficfromhostports.APrivate
VLANmayhaveonlyoneisolatedVLAN.
Commandmode:VLAN
[no]privatevlanprimary
EnablesordisablestheVLANtypeasaPrimaryVLAN.
APrivateVLANmusthaveonlyoneprimaryVLAN.TheprimaryVLAN
carriesunidirectionaltraffictoportsontheisolatedVLANortocommunity
VLAN.
Commandmode:VLAN
showvlanprivatevlan[type]
DisplayscurrentparametersfortheselectedPrivateVLAN(s).
typelistsonlytheVLANtypeforeachprivateVLAN:community,isolated
orprimary
Commandmode:All
437
Flooding VLAN Configuration Menu

ThefollowingtabledescribestheFloodingVLANcommands.
Table 243. FloodingVLANMenuOptions
[no]flood
EnablesordisablestheswitchtofloodunregisteredIPmulticasttraffictoall
ports.
Note:IfnoneoftheIGMPhostsresideontheVLANofthestreamingserver
foraIPMCgroup,youmustenableIGMPfloodingtoensurethatmulticast
dataisforwardedacrosstheVLANsforthatIPMCgroup.
Commandmode:VLAN
[no]cpu
EnablesordisablestheswitchtoforwardunregisteredIPmulticasttrafficto
theMP,whichaddsanentryintheIPMCtable,asfollows:
IfnoMrouterispresent,dropsubsequentpacketswithsameIPMC.
IfaMrouterispresent,forwardsubsequentpacketstotheMrouter(s)onthe
ingressVLAN.
Note:Ifbothfloodandcpuaredisabled,theswitchdropsallunregistered
IPMCtraffic.
Commandmode:VLAN
[no]optflood
Enablesordisablesoptimizedflooding.Whenenabled,optimizedflooding
avoidspacketlossduringthelearningperiod.
Commandmode:VLAN
showvlan<VLANID(14094)>information
DisplaysthecurrentfloodingparametersfortheselectedVLAN.
Commandmode:All
438
Layer 3 Configuration
ThefollowingtabledescribesbasicLayer3Configurationcommands.The
followingsectionsprovidemoredetailedinformationandcommands.
Table 244. Layer3ConfigurationCommands
interfaceip<1128>
ConfigurestheIPInterface.TheG8052supportsupto128IPinterfaces.To
viewcommandoptions,seepage 441.
ippimcomponent<12>
EntersProtocolIndependentMulticast(PIM)componentconfigurationmode.
Toviewcommandoptions,seepage 537.
iprouterid<IPaddress>
SetstherouterID.
noiprouterid
RemovestherouterID.
routemap<1255>
EntersIPRouteMapmode.Toviewcommandoptions,seepage 455.
routerbgp
EntersBorderGatewayProtocol(BGP)configurationmode.Toview
routerospf
EntersOSPFconfigurationmode.Toviewcommandoptions,seepage 466.
ipv6routerospf
EntersOSPFv3configurationmode.Toviewcommandoptions,seepage 476.
routerrip
EnterstheRoutingInterfaceProtocol(RIP)configurationmode.Toview
439
Table 244. Layer3ConfigurationCommands(continued)

routervrrp
EntersVirtualRouterRedundancy(VRRP)configurationmode.Toview
showlayer3
DisplaysthecurrentIPconfiguration.
Commandmode:All
440
IP Interface Configuration
TheG8052supportsuptoIPinterfaces.EachIPinterfacerepresentstheG8052on
anIPsubnetonyournetwork.TheInterfaceoptionisdisabledbydefault.
Table 245. IPInterfaceConfigurationOptions
interfaceip<IPinterfacenumber>
EnterIPinterfacemode.
[no]enable
EnablesordisablesthisIPinterface.
Commandmode:InterfaceIP
ipaddress<IPaddress>[<IPnetmask>][enable]
ConfigurestheIPaddressoftheswitchinterface,usingdotteddecimal
notation.TheenableoptionalsoenablestheIPinterface.
ipnetmask<IPnetmask>
ConfigurestheIPsubnetaddressmaskfortheinterface,usingdotteddecimal
notation.
ipv6address<IPv6address>[<IPv6prefixlength>[anycast]][enable]
ConfigurestheIPv6addressoftheswitchinterface,usinghexadecimalformat
withcolons.TheanycastoptionconfigurestheIPv6addressasanIPv6
anycastaddress.TheenableoptionalsoenablestheIPinterface.
ipv6prefixlen<IPv6prefixlength(1128)>
ConfiguresthesubnetIPv6prefixlength.Thedefaultvalueis0(zero).
ipv6secaddr6address<IPv6address><IPv6prefixlength>[anycast]
ConfiguresthesecondaryIPv6addressoftheswitchinterface,using
hexadecimalformatwithcolons.Theanycastoptionconfiguresthe
secondaryIPv6addressasanIPv6anycastaddress.
noipv6secaddr6address
RemovesthesecondaryIPv6address.
441
Table 245. IPInterfaceConfigurationOptions(continued)

[no]ipv6unreachables
EnablesordisablessendingofICMPUnreachablemessages.
[no]ip6host
EnablesordisablestheIPv6HostModeonthisinterface.
Thedefaultsettingisdisabledfordatainterfaces,andenabledforthe
managementinterface.
[no]relay
EnablesordisablestheBOOTPrelayonthisinterface.
vlan<VLANID(14094)>
ConfigurestheVLANnumberforthisinterface.Eachinterfacecanbelongto
oneVLAN.
IPv4:EachVLANcancontainmultipleIPv4interfaces.
IPv6:EachVLANcancontainonlyoneIPv6interface.
nointerfaceip<IPinterfacenumber>
RemovesthisIPinterface.
showinterfaceip<1128>
Displaysthecurrentinterfacesettings.
Commandmode:All
442
IPv6 Neighbor Discovery Configuration

ThefollowingtabledescribestheIPv6NeighborDiscoveryconfiguration
commands.
Table 246. IPv6NeighborDiscoveryConfigurationOptions
[no]ipv6ndadvmtu
EnablesordisablestheMTUoptioninRouterAdvertisements.
ipv6nddadattempts<110>
Configuresthemaximumnumberofduplicateaddressdetectionattempts.
Thedefaultvalueis1.
noipv6nddadattempts
Resetsthemaximumnumberofduplicateaddressdetectionattemptstothe
defaultvalueof1.
ipv6ndhopslimit<0255>
ConfigurestheRouterAdvertisementhoplimit.
Thedefaultvalueis64hops.
noipv6ndhopslimit
ResetstheIPv6RouterAdvertisementhoplimittoitsdefaultvalueof64hops.
[no]ipv6ndmanagedconfig
Enablesordisablesthemanagedaddressconfigurationflagoftheinterface.
Whenenabled,thehostIPaddresscanbesetautomaticallythroughDHCP.
[no]ipv6ndotherconfig
Enablesordisablestheotherstatefulconfigurationflag,whichallowsthe
interfacetouseDHCPforotherstatefulconfiguration.
443
Table 246. IPv6NeighborDiscoveryConfigurationOptions(continued)

ipv6ndrainterval<41800>
ConfigurestheRouterAdvertisementmaximuminterval.
Note:SetthemaximumRAintervaltoavaluegreaterthanorequalto4/3of
theminimumRAinterval.
noipv6ndrainterval
ResetstheIPv6RouterAdvertisementmaximumintervaltoitsdefaultvalueof
600seconds.
ipv6ndraintervalmin<31350>
ConfigurestheRouterAdvertisementminimuminterval.
Note:SettheminimumRAintervaltoavaluelessthanorequalto0.75ofthe
maximumRAinterval.
noipv6ndraintervalmin
ResetstheIPv6RouterAdvertisementminimumintervaltoitsdefaultvalueof
198seconds.
ipv6ndralifetime<09000>
ConfigurestheIPv6RouterAdvertisementlifetimeinterval.TheRAlifetime
intervalmustbegreaterthanorequaltotheRAmaximuminterval(advint).
noipv6ndralifetime
ResetstheIPv6RouterAdvertisementlifetimeintervaltoitsdefaultvalueof
1800seconds.
ipv6ndreachabletime<13600>
ipv6ndreachabletime<13600000>ms
Configurestheadvertisedreachabilitytime,insecondsormilliseconds(ms).
noipv6ndreachabletime
Resetstheadvertisedreachabilitytimetoitsdefaultvalueof30seconds.
444
Table 246. IPv6NeighborDiscoveryConfigurationOptions(continued)

ipv6ndretransmittime<04294967>
ipv6ndretransmittime<04294967295>ms
ConfigurestheRouterAdvertisementretransmittimer,insecondsor
milliseconds(ms).
noipv6ndretransmittime
ResetstheRouterAdvertisementretransmittimertoitsdefaultvalueof1
second.
[no]ipv6ndsuppressra
EnablesordisablesIPv6RouterAdvertisementsontheinterface.
Thedefaultsettingisdisabled(suppressRouterAdvertisements).
445
Default Gateway Configuration

TheswitchcanbeconfiguredwithuptofourIPv4gateways,asfollows:
Gateway1,2,3and4:datatraffic
Thisoptionisdisabledbydefault.
Table 247. IPv4DefaultGatewayOptions
ipgateway<14>address<IPaddress>[enable]
ConfigurestheIPaddressofthedefaultIPgatewayusingdotteddecimal
notation.TheenableoptionalsoenablestheIPgateway.
[no]ipgateway<14>arphealthcheck
EnablesordisablesAddressResolutionProtocol(ARP)healthchecks.
Note:Thearpoptiondoesnotapplytomanagementgateways.
[no]ipgateway<14>enable
Enablesordisablesthegatewayforuse.
ipgateway<14>interval<060>
Theswitchpingsthedefaultgatewaytoverifythatitsup.Thiscommandsets
thetimebetweenhealthchecks.
Therangeisfrom0to60secondsandthedefaultis2seconds.
ipgateway<14>retry<1120>
Setsthenumberoffailedhealthcheckattemptsrequiredbeforedeclaringthis
defaultgatewayinoperative.
Therangeisfrom1to120attemptsandthedefaultis8attempts.
noipgateway<14>
Deletesthegatewayfromtheconfiguration.
showipgateway<14>
Displaysthecurrentgatewaysettings.
Commandmode:All
446
IPv4 Static Route Configuration

Upto128IPv4staticroutescanbeconfigured.
Table 248. IPv4StaticRouteConfigurationOptions
iproute<IPsubnet><IPnetmask><IPnexthop>[<IPinterfacenumber>|
|port<portaliasornumber>]
Addsastaticroute.YouwillbepromptedtoenteradestinationIPaddress,
destinationsubnetmask,andgatewayaddress.Enteralladdressesusing
dotteddecimalnotation.
noiproute<IPsubnet><IPnetmask>[<IPinterfacenumber>|<IPnexthop>
[<IPinterfacenumber>]|port<portaliasornumber>]
Removesastaticroute.Thedestinationaddressoftheroutetoremovemustbe
specifiedusingdotteddecimalnotation.
iprouteecmphash[dipsip][sip]
ConfiguresECMPhashingparameters.Youmaychooseoneormoreofthe
followingparameters:
dipsip: DestinationIPandsourceIPaddress
sip:SourceIPaddress
[no]iproutehealthcheck
Enablesordisablesstaticroutehealthchecks.
iprouteinterval<160>
ConfigurestheECMPhealthcheckpinginterval,inseconds.
iprouteretries<160>
ConfiguresthenumberofECMPhealthcheckretries.
Thedefaultvalueis3retries.
noiprouteall
ClearsallIPstatisroutes.
447
Table 248. IPv4StaticRouteConfigurationOptions(continued)

noiproutedestinationaddress<IPaddress>
ClearsallIPstaticrouteswiththisdestination.
noiproutegateway<IPaddress>
ClearsallIPstaticroutesthatusethisgateway.
noiprouteinterface<IPinterfacenumber>
ClearsallIPstaticroutesthatusethespecifiedIPinterface.
noiprouteport<portaliasornumber>
ClearsallIPstaticroutesthatusethespecifiedport.
showiproutestatic
DisplaysthecurrentIPstaticroutes.
Commandmode:All
448
IP Multicast Route Configuration

ThefollowingtabledescribestheIPMulticast(IPMC)routecommands.
Note: BeforeyoucanaddanIPMCroute,IGMPmustbeturnedon,IGMP
Snooping/Relaymustbeenabled,andtherequiredVLANsmustbeaddedto
IGMPSnooping/Relay.
Table 249. IPMulticastRouteConfigurationCommands
[no]ipmroute<IPMCdestination><VLANID(14094)>
<portaliasornumber>[{primary|backup|host}[<virtualrouterID>]]
Addsorremovesastaticmulticastroute.Thedestinationaddress,VLANand
memberportoftheroutemustbespecified.
[no]ipmroute<IPaddress><VLANID(14094)>portchannel<152>
[{primary|backup|host}[<virtualrouterID>]]
Addsorremovesastaticmulticastroute.Thedestinationaddress,VLAN,and
membertrunkgroupoftheroutemustbespecified.
[no]ipmroute<IPaddress><VLANID(14094)>adminkey<165535>
[{primary|backup|host}[<virtualrouterID>]]
Addsorremovesastaticmulticastroute.Thedestinationaddress,VLAN,and
LACPadminkeyoftheroutemustbespecified.
noipmrouteall
Removesallthestaticmulticastroutesconfigured.
showipmroute
DisplaysthecurrentIPmulticastroutes.
Commandmode:All
449
ARP Configuration
AddressResolutionProtocol(ARP)istheTCP/IPprotocolthatresideswithinthe
Internetlayer.ARPresolvesaphysicaladdressfromanIPaddress.ARPqueries
machinesonthelocalnetworkfortheirphysicaladdresses.ARPalsomaintainsIP
tophysicaladdresspairsinitscachememory.InanyIPcommunication,theARP
cacheisconsultedtoseeiftheIPaddressofthecomputerortherouterispresentin
theARPcache.Thenthecorrespondingphysicaladdressisusedtosendapacket.
Table 250. ARPConfigurationOptions
iparprearp<2120>
DefinesreARPperiod,inminutes,forentriesintheswitcharptable.When
ARPentriesreachthisvaluetheswitchwillreARPfortheaddresstoattempt
torefreshtheARPcache.
show[ip]arp
DisplaysthecurrentARPconfigurations.
Commandmode:All
ARP Static Configuration

StaticARPentriesarepermanentintheARPcacheanddonotageoutliketheARP
entriesthatarelearneddynamically.StaticARPentriesenabletheswitchtoreach
thehostswithoutsendinganARPbroadcastrequesttothenetwork.StaticARPs
arealsousefultocommunicatewithdevicesthatdonotrespondtoARPrequests.
StaticARPscanalsobeconfiguredonsomegatewaysasaprotectionagainst
maliciousARPCachecorruptionandpossibleDOSattacks.
Table 251. ARPStaticConfigurationOptions
iparp<IPaddress><MACaddress>[vlan<VLANID(14094)>]
[port<portaliasornumber>]
AddsapermanentARPentry.
iparp<destinationunicastIPaddress><destinationmulticastMACaddress>
vlan<clustervlannumber>
AddsastaticmulticastARPentryforNetworkLoadBalancing(NLB).
noiparp<IPaddress>
DeletesapermanentARPentry.
450
Table 251. ARPStaticConfigurationOptions

noiparpall[ip<IPinterfacenumber>|interfaceport
<portaliasornumber>|vlan<VLANID(14094)>]
DeletesallstaticARPentriesorjusttheARPentriesthatuseaspecificIP
interface,portorvlan.
show[ip]arpstatic
DisplayscurrentstaticARPconfiguration.
Commandmode:All
451
Dynamic ARP Inspection Configuration

DynamicARPInspection(DAI)isanadditiontothefeatureDHCPSnooping.
DAIisasecurityfeaturethatenablesthedevicetointerceptandexamineallARP
requestandresponsepacketsinasubnetanddiscardthosepacketswithinvalidIP
toMACaddressbindings.
Note:DAIisavailableonlyifDHCPSnoopingisenabled.Fordetails,seeDHCP
Snoopingonpage 549.
Table 252. DynamicARPInspectionConfigurationOptions
[no]iparpinspectionvlan<VLANID(14094)>
EnablesordisablesDAIontheselectedVLANs.
[no]iparpinspectiontrust
ConfigurestheporttobeaDAItrustedport.OnaDAItrustedport,allARP
packetsskipthesecuritycheck.
Thedefaultsettingsisuntrusted.
Note:Configuringtrustedinterfacesasbeinguntrustedcanresultinalossof
connectivity.
[no]logginglogarpinspection
EnablesordisablesloggingforDAI.
showiparpinspection
DisplaysthecurrentDAIconfigurationsettings.Formodedetails,seepage 94.
Commandmode:All
452
IP Forwarding Configuration
ThefollowingtabledescribestheIPForwardingcommands.
Table 253. IPForwardingConfigurationOptions
[no]iprouting
EnablesordisablesIPforwarding(routing)ontheG8052.
Forwardingisturnedonbydefault.
[no]iproutingdirectedbroadcasts
Enablesordisablesforwardingdirectedbroadcasts.
[no]iproutingicmp6redirect
EnablesordisablesIPv6ICMPredirects.
[no]iproutingnoicmpredirect
EnablesordisablesICMPredirects.
showiprouting
DisplaysthecurrentIPforwardingsettings.
Commandmode:All
453
Network Filter Configuration

ThefollowingtabledescribestheNetworkFiltercommands.
Table 254. IPNetworkFilterConfigurationOptions
ipmatchaddress<1256><IPaddress><IPnetmask>
SetsthestartingIPaddressandIPNetmaskforthisfiltertodefinetherangeof
IPaddressesthatwillbeacceptedbythepeerwhenthefilterisenabled.
Thedefaultaddressis0.0.0.00.0.0.0.
[no]ipmatchaddress<1256>enable
EnablesordisablestheNetworkFilterconfiguration.
noipmatchaddress<1256>
DeletestheNetworkFilterconfiguration.
showipmatchaddress[<1256>]
DisplaysthecurrenttheNetworkFilterconfiguration.
Commandmode:All
454
Routing Map Configuration

Routingmapscontrolandmodifyroutinginformation.
Note: Themapnumber(1255)representstheroutingmapyouwishtoconfigure.
Table 255. RoutingMapConfigurationOptions
routemap<1255>
Enterroutemapconfigurationmode.
accesslist<132>
ConfigurestheAccessList.Formoreinformation,seepage 458.
Commandmode:Routemap
aspathlist<18>
ConfigurestheAutonomousSystem(AS)Filter.Formoreinformation,see
page 461.
aspathpreference<165535>
SetstheASpathpreferenceofthematchedroute.Youcanconfigureupto32
pathpreferences.
noaspathpreference
RemovestheASpathpreferenceofthecurrentroutemap.
[no]enable
Enablesordisablestheroutemap.
localpreference<04294967294>
Setsthelocalpreferenceofthematchedroute,whichaffectsbothinboundand
outbounddirections.Thepathwiththehigherpreferenceispreferred.
nolocalpreference
Removesthelocalpreferenceofthecurrentroutemap.
metric<14294967294>
Setsthemetricofthematchedroute.
455
Table 255. RoutingMapConfigurationOptions(continued)

nometric
Removestheconfiguredmetricofthecurrentroutemap.
metrictype{1|2}
AssignsthetypeofOSPFmetric.
Type1Externalroutesarecalculatedusingbothinternalandexternal
metrics.
Type2Externalroutesarecalculatedusingonlytheexternalmetrics.
Type1routesareprefferedoverType2.
ThedefaultisType1.
nometrictype
RemovestheOSPFmetricofthecurrentroutemap.
precedence<1255>
Setstheprecedenceoftheroutemap.Thesmallerthevalue,thehigherthe
precedence.
setcommunity[<communitystring>|none]
SetstheBGPcommunityattribute.Enterupto32communitiesstringsusing
theformat,aa:nn.Forexample,12:34.Validstringsarefrom0:0to
65535:65535.Thenoneoptionremovesthecommunityattributefrom
prefixthatpassedtheroutemap.
nosetcommunity
RemovestheBGPcommunityattributefromtheroutemapconfiguration.
weight<065534>
Setstheweightoftheroutemap.
noweight
Deletestheweightofthecurrentroutemap.
456
Table 255. RoutingMapConfigurationOptions(continued)

noroutemap<1255>
Deletestheroutemap.
showroutemap[<1255>]
Displaysthecurrentrouteconfiguration.
Commandmode:All
457
IP Access List Configuration

Note: Theroutemapnumber(164)andtheaccesslistnumber(132)representtheIP
accesslistyouwishtoconfigure.
Table 256. IPAccessListConfigurationOptions
accesslist<132>action{permit|deny}
Permitsordeniesactionfortheaccesslist.
[no]accesslist<132>enable
Enablesordisablestheaccesslist.
[no]accesslist<132>matchaccesscontrol<1640>
Setsthenetworkfilternumber.
[no]accesslist<132>matchaddress<1256>
Setsthenetworkfilternumber.SeeNetworkFilterConfigurationon
page 454fordetails.
accesslist<132>metric<14294967294>
SetsthemetricvalueintheASExternal(ASE)LSA.
noaccesslist<132>metric
Removesthecurrentmetricvalueforthespecifiedaccesslist.
noaccesslist<132>
Deletestheaccesslist.
showroutemap<1255>accesslist<132>
DisplaysthecurrentAccessListconfiguration.
Commandmode:All
458
Policy-Based Routing Configuration

Usethefollowingcommandstosetuppolicybasedrouting.
Note: Multipleaccesslistscanbeenteredseparatedbyacomma(forexample,
2,5,17);arangeofaccesslistscanbeenteredusingahyphen(suchas223).
Table 257. IPNextHopConfigurationOptions
[no]setipdscp<063>[accesslist<132>]
SetstheIPDSCPvalueintheIPheaderforpacketsthatmatchroutemap
policy.
[no]setipnexthop<IPaddresses>[accesslist<132>]
SetstheIPaddressesforthenexthoptowhichpacketsareforwardedforeach
specifiedaccesslist.Whenmultipleaddressesarespecifiedtheyare
prioritizedintheorderinwhichtheyareentered.Eachnexthopmustbean
adjacentrouter.
Usethenoformofthecommandtoremovetheentry.
[no]setipnexthopverifyavailability<IPaddress>
<sequence(1255)>[arp|icmp][interval<160>][retry<13>]
[accesslist<132>]
PerformshealthcheckingonandinsertsthenexthopIPaddressatthe
specifiedplace(sequence)inthespecifiedaccesslistusingARPorICMPasthe
trackingprotocol.Ifnotsuccessful,thecommandwillretrythehealthcheckat
regularintervalsofthespecifiednumberofsecondsforthenumberofretries
specifiedbyretry.Usethenoformofthecommandtoremovetheentry.
Defaultvaluesarearp,2seconds,and3retries.
Note:Thiscommandoverridesthesetipnexthop<IPaddress>
command.
[no]setipprecedence<precedencevalue>[accesslist<132>]
SetstheIPprecedencevalueintheIPheaderforpacketsthatmatchroutemap
policy.Youcanchooseaprecendencevaluebetween0and7oroneofthe
following:
routinesetsroutineprecedence
prioritysetspriorityprecedence(1)
immediatesetsimmediateprecedence(2)
flashsetsflashprecedence(3)
flashoverrridesetsflashoverrideprecedence(4)
criticalsetscriticalprecedence(5)
internetsetsinternetworkcontrolprecedence(6)
networksetsnetworkprecedence(7)
459
Table 257. IPNextHopConfigurationOptions

[no]ippolicyroutemap<1255>
AppliestheroutemaptoanIPinterfacethathasaVLANconfigured.
showroutemap<1255>
Displaysthecurrentroutemapconfiguration.
Commandmode:All
showroutemap<1255>accesslist<132>
DisplaysthecurrentAccessListconfiguration.
Commandmode:All
showippolicy
Displaysthecurrentroutingpolicyinformation.
Commandmode:All
showippolicystatistics
Displaysstatisticsforthecurrentroutingpolicy.
Commandmode:All
460
Autonomous System Filter Path Configuration

Note: TheroutemapnumberandthepathnumberrepresenttheASpathyouwishto
configure.
Table 258. ASFilterConfigurationOptions
aspathlist<18>action{permit|deny}
PermitsordeniesAutonomousSystemfilteraction.
aspathlist<18>aspath<165535>
SetstheAutonomousSystemfilterspathnumber.
[no]aspathlist<18>enable
EnablesordisablestheAutonomousSystemfilter.
noaspathlist<18>
DeletestheAutonomousSystemfilter.
showroutemap<1255>aspathlist<18>
DisplaysthecurrentAutonomousSystemfilterconfiguration.
Commandmode:All
461
Routing Information Protocol Configuration

RIPcommandsareusedforconfiguringRoutingInformationProtocolparameters.
Thisoptionisturnedoffbydefault.
Table 259. RoutingInformationProtocolOptions
routerrip
EnterRouterRIPconfigurationmode.
[no]enable
GloballyenablesordisablesRIP.
Commandmode:RouterRIP
[no]redistribute{fixed|static|ospf|eospf|ebgp|ibgp}
ConfiguresRIProutedistribution.Toviewcommandoptions,seepage 465.
timersupdate<1120>
ConfiguresthetimeintervalforsendingforRIPtableupdates,inseconds.
showiprip
Commandmode:All
462
RIP Interface Configuration

TheRIPInterfacecommandsareusedforconfiguringRoutingInformation
Protocolparametersfortheselectedinterface.
Note: DonotconfigureRIPversion1parametersifyourroutingequipmentuses
RIPversion2.
Table 260. RIPInterfaceOptions
ipripauthenticationkey<password>
Configurestheauthenticationkeypassword.
noipripauthenticationkey
Removestheauthenticationkeypassword.
ipripauthenticationtypepassword<password>
Configurestheauthenticationtype.
Thedefaultisnone.
noipripauthenticationtype
Removestheauthenticationtype.
ipripdefaultaction{listen|supply|both}
Whenenabled,theswitchacceptsRIPdefaultroutesfromotherrouters,but
givesthemlowerprioritythanconfigureddefaultgateways.
Thedefaultvalueisnone.
noipripdefaultaction
ConfigurestheswitchtorejectRIPdefaultroutes.
[no]ipripenable
EnablesordisablesRIPonthecurrentinterface.
[no]ipriplisten
Whenenabled,theswitchlearnsroutesfromotherrouters.
Thedefaultvalueisenabled.
463
Table 260. RIPInterfaceOptions(continued)

ipripmetric<115>
Configurestheroutemetric,whichindicatestherelativedistancetothe
destination.
Thedefaultvalueis1.
[no]ipripmulticastupdates
Enablesordisablesmulticastupdatesoftheroutingtable(usingaddress
224.0.0.9).
[no]iprippoison
Whenenabled,theswitchusessplithorizonwithpoisonedreverse.When
disabled,theswitchusesonlysplithorizon.
[no]ipripsplithorizon
Enablesordisablessplithorizon.
[no]ipripsupply
Whenenabled,theswitchsuppliesroutestootherrouters.
[no]ipriptriggered
EnablesordisablesTriggeredUpdates.TriggeredUpdatesareusedtospeed
convergence.Whenenabled,TriggeredUpdatesforcearoutertosendupdate
messagesimmediately,evenifitisnotyettimefortheupdatemessage.
ipripversion{1|2|both}
ConfigurestheRIPversionusedbythisIPinterface.
Thedefaultvalueisversion2.
showinterfaceip<IPinterfacenumber>rip
Commandmode:All
464
RIP Route Redistribution Configuration

ThefollowingtabledescribestheRIPRouteRedistributioncommands.
Table 261. RIPRedistributionOptions
[no]redistribute{fixed|static|ospf|eospf|ebgp|ibgp}
{<1255>|all}
AddsorremovesselectedroutingmapstotheRIProuteredistributionlist.To
addspecificroutemaps,enterroutingmapnumbers,separatedbyacomma(,).
Toaddorremoveall255routemaps,typeall.
Theroutesoftheredistributionprotocolmatchedbytheroutemapsinthe
routeredistributionlistwillberedistributed.
redistribute{fixed|static|ospf|eospf|ebgp|ibgp}export
<metricnumber(115)>
Exportstheroutesofthisprotocolinwhichthemetricandmetrictypeare
specified.
noredistribute{fixed|static|ospf|eospf|ebgp|ibgp}export
Stopsexportingtheroutesofthespecifiedprotocol.
showipripredistribute
DisplaysthecurrentRIProuteredistributeconfiguration.
Commandmode:All
465
Open Shortest Path First Configuration

ThefollowingtabledescribestheOSPFcommands.
Table 262. OSPFConfigurationOptions
routerospf
EnterRouterOSPFconfigurationmode.
area<019>
ConfiguresOSPFareaindex.Seepage 467toviewcommandoptions.
Commandmode:RouterOSPF
arearange<116>
Configuressummaryroutesforupto16IPaddresses.Seepage 469toview
commandoptions.
areavirtuallink<13>
ConfigurestheVirtualLinksusedtoconfigureOSPFforaVirtualLink.See
page 472toviewcommandoptions.
defaultinformation<116777214><ASexternalmetrictype(12)>
Setsonedefaultrouteamongmultiplechoicesinanarea.
nodefaultinformation
Removesthedefaultrouteinformation.
[no]enable
EnablesordisablesOSPFontheG8052.
host<1128>
ConfiguresOSPFforthehostroutes.Upto128hostroutescanbeconfigured.
HostroutesareusedforadvertisingnetworkdeviceIPaddressestoexternal
networkstoperformserverloadbalancingwithinOSPF.ItalsomakesArea
BorderRoute(ABR)loadsharingandABRfailoverpossible.
Seepage 474toviewcommandoptions.
lsdblimit<LSDBlimit(04096,0fornolimit)>
Setsthelinkstatedatabaselimit.
466
Table 262. OSPFConfigurationOptions(continued)

messagedigestkey<keyID(1255)>md5key<textstring>
AssignsastringtoMD5authenticationkey.
nomessagedigestkey<keyID(1255)>
RemovestheMD5authenticationkey.
redistribute{fixed|static|rip|ebgp|ibgp}
ConfiguresOSPFrouteredistribution.Seepage 475toviewcommandoptions.
showipospf
DisplaysthecurrentOSPFconfigurationsettings.
Commandmode:All
Area Index Configuration

ThefollowingtabledescribestheAreaIndexcommands.
Table 263. AreaIndexConfigurationOptions
area<019>areaid<IPaddress>
DefinestheIPaddressoftheOSPFareanumber.
area<019>authenticationtype{password|md5}
Setstheauthenticationtype.
passwordauthenticatessimplepasswordssothatonlytrustedrouting
devicescanparticipate.
md5isusedwhenMD5cryptographicauthenticationisrequired.
noarea<019>authenticationtype
Removestheauthentificationtype.
[no]area<019>enable
EnablesordisablestheOSPFarea.
467
Table 263. AreaIndexConfigurationOptions(continued)

area<019>spfinterval<1255>
Configurestheminimumtimeinterval,inseconds,betweentwosuccessive
SPF(shortestpathfirst)calculationsoftheshortestpathtreeusingthe
Dijkstrasalgorithm.
area<019>stubmetric<165535>
Configuresastubareatosendanumericmetricvalue.Allroutesreceivedviathat
stubareacarrytheconfiguredmetrictopotentiallyinfluencingroutingdecisions.
Metricvalueassignsthepriorityforchoosingtheswitchfordefaultroute.
area<019>type{transit|stub|nssa}
Definesthetypeofarea.Forexample,whenavirtuallinkhastobeestablished
withthebackbone,theareatypemustbedefinedastransit.
transitarea:allowsareasummaryinformationtobeexchanged
betweenroutingdevices.AnyareathatisnotastubareaorNSSAis
consideredtobetransitarea.
stubarea:isanareawhereexternalroutinginformationisnot
distributed.Typically,astubareaisconnectedtoonlyoneotherarea.
nssa:NotSoStubbyArea(NSSA)issimilartostubareawithadditional
capabilities.Forexample,routesoriginatingfromwithintheNSSAcanbe
propagatedtoadjacenttransitandbackboneareas.
noarea<019>
DeletestheOSPFarea.
showipospfarea<019>
DisplaysthecurrentOSPFconfiguration.
Commandmode:All
468
OSPF Summary Range Configuration

ThefollowingtabledescribestheOSPFSummaryRangecommands.
Table 264. OSPFSummaryRangeConfigurationOptions
arearange<116>address<IPaddress>[<IPnetmask>]
DisplaysthebaseIPaddressortheIPaddressmaskfortherange.
arearange<116>area<019>
DisplaystheareaindexusedbytheG8052.
[no]arearange<116>enable
EnablesordisablestheOSPFsummaryrange.
[no]arearange<116>hide
HidesorunhidestheOSPFsummaryrange.
noarearange<116>
DeletestheOSPFsummaryrange.
showipospfarearange<116>
DisplaysthecurrentOSPFsummaryrange.
Commandmode:All
469
OSPF Interface Configuration

ThefollowingtabledescribestheOSPFInterfacecommands.
Table 265. OSPFInterfaceConfigurationOptions
ipospfarea<019>
ConfigurestheOSPFareaindex.
ipospfcost<165535>
Configurescostsetfortheselectedpathpreferredorbackup.Usuallythe
costisinverselyproportionaltothebandwidthoftheinterface.Lowcost
indicateshighbandwidth.
ipospfdeadinterval<165535>
ipospfdeadinterval<100065535ms>
Configuresthehealthparametersofahellopacket,insecondsor
milliseconds,beforedeclaringasilentroutertobedown.
[no]ipospfenable
EnablesordisablestheOSPFinterface.
ipospfhellointerval<165535>
ipospfhellointerval<5065535ms>
Configurestheinterval,insecondsormilliseconds,betweenthehello
packetsfortheinterfaces.
ipospfkey<keystring>
Setstheauthenticationkeytoclearthepassword.
noipospfkey
Removestheauthentificationkeytoclearthepassword.
ipospfmessagedigestkey<1255>
AssignsanMD5keytotheinterface.
noipospfmessagedigestkey
RemovestheMD5keyformtheinterface.
470
Table 265. OSPFInterfaceConfigurationOptions(continued)

[no]ipospfpassiveinterface
Setstheinterfaceaspassive.Onapassiveinterface,youcandisableOSPF
protocolexchanges,buttherouteradvertisestheinterfaceinitsLSAssothatIP
connectivitytotheattachednetworksegmentwillbeestablished.
[no]ipospfpointtopoint
Setstheinterfaceaspointtopoint.
ipospfpriority<0255>
ConfiguresthepriorityvaluefortheG8052sOSPFinterfaces.
Apriorityvalueof255isthehighestand1isthelowest.Apriorityvalueof0
specifiesthattheinterfacecannotbeusedasDesignatedRouter(DR)or
BackupDesignatedRouter(BDR).
ipospfretransmitinterval<13600>
Configurestheretransmitintervalinseconds.
ipospftransitdelay<13600>
Configuresthetransitdelayinseconds.
noipospf
DeletestheOSPFinterface.
showinterfaceip<IPinterfacenumber>ospf
DisplaysthecurrentsettingsforOSPFinterface.
Commandmode:All
471
OSPF Virtual Link Configuration

ThefollowingtabledescribestheOSPFVirtualLinkcommands.
Table 266. OSPFVirtualLinkConfigurationOptions
areavirtuallink<13>area<019>
ConfigurestheOSPFareaindexforthevirtuallink.
areavirtuallink<13>deadinterval<165535>
areavirtuallink<13>deadinterval<100065535ms>
Configuresthehealthparametersofahellopacket,insecondsormilliseconds.
[no]areavirtuallink<13>enable
EnablesordisablesOSPFvirtuallink.
areavirtuallink<13>hellointerval<165535>
areavirtuallink<13>hellointerval<5065535ms>
Configurestheauthenticationparametersofahellopacket,insecondsor
milliseconds.
areavirtuallink<13>key<password>
Configuresthepassword(uptoeightcharacters)foreachvirtuallink.
Thedefaultsettingisnone.
noareavirtuallink<13>key
Removestheauthentificationkey.
areavirtuallink<13>messagedigestkey<1255>
SetsMD5keyIDforeachvirtuallink.
Thedefaultsettingisnone.
noareavirtuallink<13>messagedigestkey
RemovestheMD5keyIDforthespecifiedvirtuallink.
472
Table 266. OSPFVirtualLinkConfigurationOptions(continued)

areavirtuallink<13>neighborrouter<IPaddress>
ConfigurestherouterIDofthevirtualneighbor.
Thedefaultvalueis0.0.0.0.
areavirtuallink<13>retransmitinterval<13600>
Configurestheretransmitinterval,inseconds.
areavirtuallink<13>transitdelay<13600>
Configuresthedelayintransit,inseconds.
noareavirtuallink<13>
DeletesOSPFvirtuallink.
showipospfareavirtuallink<13>
DisplaysthecurrentOSPFvirtuallinksettings.
Commandmode:All
473
OSPF Host Entry Configuration

ThefollowingtabledescribestheOSPFHostEntrycommands.
Table 267. OSPFHostEntryConfigurationOptions
host<1128>address<IPaddress>
ConfiguresthebaseIPaddressforthehostentry.
host<1128>area<019>
Configurestheareaindexofthehost.
host<1128>cost<165535>
Configuresthecostvalueofthehost.
[no]host<1128>enable
EnablesordisablestheOSPFhostentry.
nohost<1128>
DeletesOSPFhostentry.
showipospfhost<1128>
DisplaysthecurrentOSPFhostentries.
Commandmode:All
474
OSPF Route Redistribution Configuration

ThefollowingtabledescribestheOSPFRouteRedistributioncommands.
Table 268. OSPFRouteRedistributionConfigurationOptions
[no]redistribute{fixed|static|rip|ebgp|ibgp}<1255>
Addsorremovesselectedroutingmaptothermaplist.
Thisoptionaddsaroutemaptotherouteredistributionlist.Theroutesofthe
redistributionprotocolmatchedbytheroutemapsintherouteredistribution
listwillberedistributed.
redistribute{fixed|static|rip|ebgp|ibgp}export
<metric(116777214)><ASexternalmetrictype(12)>
ExportstheroutesofthisprotocolasexternalOSPFASexternalLSAsinwhich
themetricandmetrictypearespecified.
noredistribute{fixed|static|rip|ebgp|ibgp}export
Stopsexportingtheroutesoftheprotocol.
showipospfredistribute
Displaysthecurrentroutemapsettings.
Commandmode:All
OSPF MD5 Key Configuration

ThefollowingtabledescribestheOSPFMD5Keycommands.
Table 269. OSPFMD5KeyOptions
messagedigestkey<1255>md5key<116characters>
SetstheauthenticationkeyforthisOSPFpacket.
nomessagedigestkey<1255>
DeletestheauthenticationkeyforthisOSPFpacket.
showipospfmessagedigestkey<1255>
DisplaysthecurrentMD5keyconfiguration.
Commandmode:All
475
Open Shortest Path First Version 3 Configuration

ThefollowingtabledescribestheOSPFv3commands.
Table 270. OSPFv3ConfigurationOptions
[no]ipv6routerospf
EnterOSPFv3configurationmode.
abrtype[standard|cisco|ibm]
ConfigurestheAreaBorderRouter(ABR)type,asfollows:
Standard
Cisco
IBM
Thedefaultsettingisstandard.
Commandmode:RouterOSPF3
noabrtype
ResetstheAreaBorderRouter(ABR)typetoitsdefaultvaluestandard.
asexternallsdblimit<LSDBlimit(02147483647,1fornolimit)>
Setsthelinkstatedatabaselimit.
Thedefaultvalueis1.
[no]enable
EnablesordisablesOSPFv3ontheswitch.
exitoverflowinterval<04294967295>
ConfiguresthenumberofsecondsthataroutertakestoexitOverflowState.
Thedefaultvalueis0.
476
Table 270. OSPFv3ConfigurationOptions(continued)

neighbor<1256>{address<IPv6address>|interface<1128>|
|priority<0255>}
Configuresdirectlyreachableroutersovernonbroadcastnetworks.Thisis
requiredfornonbroadcastmultipleaccess(NBMA)networksandoptionalfor
PointtoMultipointnetworks.
addressconfigurestheneighborsIPv6address.
interfaceconfigurestheOSPFv3interfaceusedfortheneighborentry.
priorityconfiguresthepriorityvalueusedfortheneighborentry.A
priorityvalueof255isthehighestand1isthelowest.Apriorityvalueof0
specifiesthattheneighborcannotbeusedasDesignatedRouterorBackup
DesignatedRouter.
Thedefaultvalueis1.
[no]neighbor<1256>enable
Enablesordisablesthespecifiedneighbor.
noneighbor<1256>
Deletestheneighborentry.
[no]nssaAsbrDfRtTrans
EnablesordisablessettingofthePbitinthedefaultType7LSAgeneratedby
anNSSAinternalASBR.
referencebandwidth<04294967295>
Configuresthereferencebandwidth,inkilobitspersecond,usedtocalculate
thedefaultinterfacemetric.
Thedefaultvalueis100,000.
routerid<IPv4address>
DefinestherouterID.
477
Table 270. OSPFv3ConfigurationOptions(continued)

timersspf<SPFdelay(065535)><SPFholdtime(065535)>
ConfiguresthenumberofsecondsthatSPFcalculationisdelayedaftera
topologychangemessageisreceived.
ConfiguresthenumberofsecondsbetweenSPFcalculations.
notimersspf
ResetstheSPFtimerstotheirdefaultvaluesSPFdelayto5secondsandSPF
holdtimeto10seconds.
showipv6ospf
DisplaysthecurrentOSPFconfigurationsettings.
Commandmode:All
OSPFv3 Area Index Configuration

ThefollowingtabledescribestheOSPFv3AreaIndexcommands.
Table 271. OSPFv3AreaIndexConfigurationOptions
area<02>areaid<IPaddress>
DefinestheIPaddressoftheOSPFv3areanumber.
area<02>defaultmetric<metricvalue(116777215)>
ConfiguresthecostforthedefaultsummaryrouteinastubareaorNSSA.
area<02>defaultmetrictype<13>
Configuresthedefaultmetrictypeappliedtotheroute.
Note:ThiscommandappliesonlytoareatypeofStub/NSSA.
noarea<02>defaultmetric
Resetsthecostforthedefaultsummaryroutetoitsdefaultvalueof1.
[no]area<02>enable
EnablesordisablestheOSPFarea.
478
Table 271. OSPFv3AreaIndexConfigurationOptions(continued)

area<02>stabilityinterval<1255>
ConfiguresthestabilityintervalforanNSSA,inseconds.Whentheinterval
expires,anelectedtranslatordeterminesthatitsservicesarenolonger
required.
noarea<02>stabilityinterval
ResetsthestabilityintervalfortheNSSAtoitsdefaultvalueof40seconds.
area<02>translationrole{always|candidate}
ConfiguresthetranslationroleforanNSSAarea,asfollows:
always:Type7LSAsarealwaystranslatedintoType5LSAs.
candidate:AnNSSAborderrouterparticipatesinthetranslatorelection
process.
Thedefaultsettingiscandidate.
noarea<02>translationrole
ResetsthetranslationrolefortheNSSAtoitsdefaultvaluecandidate.
area<02>type{transit|stub|nssa}[nosummary]
Definesthetypeofarea.Forexample,whenavirtuallinkhastobeestablished
withthebackbone,theareatypemustbedefinedastransit.
transitallowsareasummaryinformationtobeexchangedbetween
routingdevices.AnyareathatisnotastubareaorNSSAisconsideredtobe
transitarea.
stubisanareawhereexternalroutinginformationisnotdistributed.
Typically,astubareaisconnectedtoonlyoneotherarea.
nssa(NotSoStubbyArea)issimilartostubareawithadditional
capabilities.Forexample,routesoriginatingfromwithintheNSSAcanbe
propagatedtoadjacenttransitandbackboneareas.Externalroutesfrom
outsidetheAutonomousSystem(AS)canbeadvertisedwithintheNSSA
butarenotdistributedintootherareas.
nosummaryenablesthenosummaryoption.Whenenabled,theareaborder
routerneitheroriginatesnorpropagatesInterAreaPrefixLSAsinto
stub/NSSAareas.InsteaditgeneratesadefaultInterAreaPrefixLSA.
479
Table 271. OSPFv3AreaIndexConfigurationOptions(continued)

noarea<02>
DeletestheOSPFarea.
showipv6ospf{areas|area<02>}
DisplaysthecurrentOSPFv3areaconfiguration.
Commandmode:All
480
OSPFv3 Summary Range Configuration

ThefollowingtabledescribestheOSPFv3SummaryRangecommands.
Table 272. OSPFv3SummaryRangeConfigurationOptions
arearange<116>address <IPv6address> <prefixlength(1128)>

ConfiguresthebaseIPv6addressandsubnetprefixlengthfortherange.
arearange<116>area<areaindex(02)>
Configurestheareaindexusedbytheswitch.
[no]arearange<116>enable
EnablesordisablestheOSPFv3summaryrange.
[no]arearange<116>hide
HidesorunhidestheOSPFv3summaryrange.
arearange<116>lsatype{summary|Type7}
ConfigurestheLSAtype,asfollows:
SummaryLSA
Type7LSA
arearange<116>tag<04294967295>
Configurestheroutetag.
noarearange<116>
DeletestheOSPFv3summaryrange.
showipv6ospfarearange
DisplaysthecurrentOSPFv3summaryrange.
Commandmode:All
481
OSPFv3 AS-External Range Configuration

ThefollowingtabledescribestheOSPFv3ASExternalRangecommands.
Table 273. OSPFv3AS_ExternalRangeConfigurationOptions
summaryprefix<116>address<IPv6address><IPv6prefixlength(1128)>
ConfiguresthebaseIPv6addressandthesubnetprefixlengthfortherange.
summaryprefix<116>aggregationeffect
{allowAll|denyAll|advertise|notadvertise}
Configurestheaggregationeffect,asfollows:
allowAll:IftheareaIDis0.0.0.0,aggregatedType5LSAsaregenerated.
AggregatedType7LSAsaregeneratedinalltheattachedNSSAsforthe
range.
denyAll:Type5andType7LSAsarenotgenerated.
advertise:IftheareaIDis0.0.0.0,aggregatedType5LSAsaregenerated.
ForotherareaIDs,aggregatedType7LSAsaregeneratedintheNSSAarea.
notadvertise:IftheareaIDis0.0.0.0,Type5LSAsarenotgenerated,
whileallNSSALSAswithintherangeareclearedandaggregatedType7
LSAsaregeneratedforallNSSAs.ForotherareaIDs,aggregatedType7
LSAsarenotgeneratedintheNSSAarea.
summaryprefix<116>area<areaindex(02)>
Configurestheareaindexusedbytheswitch.
[no]summaryprefix<116>translation
Whenenabled,thePbitissetinthegeneratedType7LSA.Whendisabled,the
Pbitiscleared.Thedefaultsettingisdisabled.
[no]summaryprefix<116>enable
EnablesordisablestheOSPFv3ASexternalrange.
nosummaryprefix<116>
DeletestheOSPFv3ASexternalrange.
showipv6ospfsummaryprefix<116>
DisplaysthecurrentOSPFv3ASexternalrange.
Commandmode:All
482
OSPFv3 Interface Configuration

ThefollowingtabledescribestheOSPFv3Interfacecommands.
Table 274. OSPFv3InterfaceConfigurationOptions
interfaceip<IPinterfacenumber>
EnterInterfaceIPmode,fromGlobalConfigurationmode.
ipv6ospfarea<02>
ConfigurestheOSPFv3areaindex.
ipv6ospfarea<02>instance<0255>
ConfigurestheinstanceIDfortheinterface.
ipv6ospfcost<165535>
Configuresthemetricvalueforsendingapacketontheinterface.
noipv6ospfcost
Removesthemetricvalueforsendingapacketontheinterface.
ipv6ospfdeadinterval<165535>
Configuresthetimeperiod,inseconds,forwhichtherouterwaitsforhello
packetfromtheneighborbeforedeclaringthisneighbordown.
noipv6ospfdeadinterval
Resetsthedeadintervalforhellopacketstoitsdefaultvalue.
[no]ipv6ospfenable
EnablesordisablesOSPFv3ontheinterface.
ipv6ospfhellointerval<165535>
Configurestheindicatedinterval,inseconds,betweenthehellopackets,that
theroutersendsontheinterface.
noipv6ospfhellointerval
Resetsthehellointervalforhellopacketstoitsdefaultvalue.
483
Table 274. OSPFv3InterfaceConfigurationOptions(continued)

[no]ipv6ospflinklsasuppress
EnablesordisablesLinkLSAsuppression.Whensuppressed,noLinkLSAs
areoriginated.
ipv6ospfnetwork{broadcast|nonbroadcast|
|pointtomultipoint|pointtopoint}
ConfiguresthenetworktypefortheOSPFv3interface:
broadcast:networkwhereallroutersusethebroadcastcapability
nonbroadcast:nonbroadcastmultipleaccess(NBMA)network
supportingpseudobroadcast(multicastandbroadcasttrafficisconfigured
manually)
pointtomultipoint:networkwheremultiplepointtopointlinksare
setuponthesameinterface
pointtopoint:networkthatjoinsasinglepairofrouters
Thedefaultvalueisbroadcast.
[no]ipv6ospfpassiveinterface
Enablesordisablesthepassivesettingontheinterface.Onapassive
interface,OSPFv3protocolpacketsaresuppressed.
ipv6ospfpollinterval<04294967295>
ConfiguresthepollintervalinsecondsforneighborsinNBMAnetworks.
noipv6ospfpollinterval
ConfiguresthepollintervalinsecondsforneighborsinNBMAand
pointtomultipointnetworkstoitsdefault120secondsvalue.
ipv6ospfpriority<priorityvalue(0255)>
ConfiguresthepriorityvaluefortheswitchsOSPFv3interface.
Apriorityvalueof255isthehighestand1isthelowest.Apriorityvalueof0
specifiesthattheinterfacecannotbeusedasDesignatedRouter(DR)or
BackupDesignatedRouter(BDR).
noipv6ospfpriority
ResetsthepriorityvaluefortheswitchsOSPFv3interfacetoitsdefaultvalue.
484
Table 274. OSPFv3InterfaceConfigurationOptions(continued)

ipv6ospfretransmitinterval<11800>
Configurestheintervalinseconds,betweenLSAretransmissionsfor
adjacenciesbelongingtointerface.
noipv6ospfretransmitinterval
ResetstheintervalbetweenLSAretransmissionsforadjacenciesbelongingto
thecurrentinterfacetoitsdefaultvalue.
ipv6ospftransmitdelay<11800>
Configurestheestimatedtime,inseconds,takentotransmitLSupdatepacket
overthisinterface.
noipv6ospftransmitdelay
ResetstheestimatedtimetakentotransmitLSupdatepacketoverthecurrent
interfacetoitsdefaultvalue.
noipv6ospf
DeletesOSPFv3frominterface.
showipv6ospfinterface
DisplaysthecurrentsettingsforOSPFv3interface.
Commandmode:All
485
OSPFv3 over IPSec Configuration

ThefollowingtabledescribestheOSPFv3overIPsecConfigurationcommands.
Table 275. Layer3IPsecConfigurationOptions
ipv6ospfauthenticationipsecenable
EnablesIPsec.
ipv6ospfauthenticationipsecspi<2564294967295>{md5|sha1}
<authenticationkey(hexadecimal)>
ConfigurestheSecurityParametersIndex(SPI),algorithm,andauthentication
keyfortheAuthenticationHeader(AH).Thealgorithmssupportedare:
MD5(hexadecimalkeylengthis32)
SHA1(hexadecimalkeylengthis40)
noipv6ospfauthenticationipsecspi<2564294967295>
DisablesthespecifiedAuthenticationHeader(AH)SPI.
ipv6ospfauthenticationipsecdefault
ResetstheAuthenticationHeader(AH)configurationtodefaultvalues.
ipv6ospfencryptionipsecenable
EnablesOSPFv3encryptionforthisinterface.
486
Table 275. Layer3IPsecConfigurationOptions(continued)

ipv6ospfencryptionipsecspi<2564294967295>
esp{3des|aescbc|des|null}<encryptionkey(hexadecimal)>
{md5|sha1|none}<authenticationkey(hexadecimal)>
ConfigurestheSecurityParametersIndex(SPI),encryptionalgorithm,
authenticationalgorithm,andauthenticationkeyfortheEncapsulating
SecurityPayload(ESP).TheESPalgorithmssupportedare:
3des(hexadecimalkeylengthis48)
aescbc(hexadecimalkeylengthis32)
des(hexadecimalkeylengthis16)
ThenulloptionmeansESPwithnoencryption.
Theauthenticationalgorithmssupportedare:
md5(hexadecimalkeylengthis32)
sha1(hexadecimalkeylengthis40)
ThenoneoptionmeansESPwithnoauthentication.
Note:Iftheencryptionalgorithmisnull,theauthenticationalgorithmmustbe
eitherMD5orSHA1.Ifanencryptionalgorithmisspecified(3DES,AESCBC
orDES),theauthenticationalgorithmcanbenone.
noipv6ospfencryptionipsecspi<2564294967295>
DisablesthespecifiedEncapsulatingSecurityPayload(ESP)SPI.
ipv6ospfencryptionipsecdefault
ResetstheEncapsulatingSecurityPayload(ESP)configurationtodefault
values.
487
OSPFv3 Virtual Link Configuration

ThefollowingtabledescribestheOSPFv3VirtualLinkcommands.
Table 276. OSPFv3VirtualLinkConfigurationOptions
areavirtuallink<13>area<02>
ConfigurestheOSPFareaindex.
areavirtuallink<13>deadinterval<165535>
Configuresthetimeperiod,inseconds,forwhichtherouterwaitsforhello
packetfromtheneighborbeforedeclaringthisneighbordown.
[no]areavirtuallink<13>enable
EnablesordisablesOSPFvirtuallink.
areavirtuallink<13>hellointerval<165535)>
Configurestheindicatedinterval,inseconds,betweenthehellopackets,that
theroutersendsontheinterface.
areavirtuallink<13>neighborrouter<NBRrouterID(IPaddress)>
ConfigurestherouterIDofthevirtualneighbor.
Thedefaultsettingis0.0.0.0.
areavirtuallink<13>retransmitinterval<13600>
Configurestheinterval,inseconds,betweenlinkstateadvertisement(LSA)
retransmissionsforadjacenciesbelongingtotheOSPFv3virtuallinkinterface.
areavirtuallink<13>transmitdelay<13600>
Configurestheestimatedtime,inseconds,takentotransmitLSupdatepacket
overthisinterface.
noareavirtuallink<13>
DeletesOSPFvirtuallink.
showipv6ospfareavirtuallink
Commandmode:All
488
OSPFv3 over IPSec for Virtual Link Configuration

ThefollowingtabledescribestheOSPFv3overIPsecforVirtualLink
Configurationcommands.
Table 277. Layer3IPsecConfigurationOptions
areavirtuallink<13>authenticationipsecenable
EnablesOSPFv3IPsecauthentication.
areavirtuallink<13>authenticationipsecspi
<2564294967295>{md5<md5key>|sha1<sha1key>}
ConfigurestheOSPFv3securityparameterindexauthentication.
noareavirtuallink<13>authenticationipsecspi
<2564294967295>
RemovesthespecifiedOSPFv3SecurityParametersIndex(SPI).
areavirtuallink<13>authenticationipsecdefault
ResetstheIPsecAuthenticationHeader(AH)toitsdefaultvalues.
areavirtuallink<13>encryptionipsecenable
EnablesOSPFv3IPsecencryption.
areavirtuallink<13>encryptionipsecspi<2564294967295>
esp{3des|aescbc|null}<encryptionkey(hexadecimal)>
{md5|sha1|none}<authenticationkey(hexadecimal)>
ConfigurestheSecurityParametersIndex(SPI),encryptionalgorithm,
authenticationalgorithm,andauthenticationkeyfortheEncapsulating
SecurityPayload(ESP).TheESPalgorithmssupportedare:
3des(hexadecimalkeylengthis48)
aescbc(hexadecimalkeylengthis32)
ThenulloptionmeansESPwithnoencryption.
Theauthenticationalgorithmssupportedare:
md5(hexadecimalkeylengthis32)
sha1(hexadecimalkeylengthis40)
ThenoneoptionmeansESPwithnoauthentication.
Note:Iftheencryptionalgorithmisnull,theauthenticationalgorithmmustbe
eitherMD5orSHA1.Ifanencryptionalgorithmisspecified(3DESor
AESCBC),theauthenticationalgorithmcanbenone.
489
Table 277. Layer3IPsecConfigurationOptions(continued)

noareavirtuallink<13>encryptionipsecspi<2564294967295>
DisablesthespecifiedEncapsulatingSecurityPayload(ESP)SPI.
areavirtuallink<13>encryptionipsecdefault
ResetstheIPsecencryptionconfigurationtoitsdefaultvalues.
showipv6ospfareavirtuallink
Commandmode:All
OSPFv3 Host Entry Configuration

ThefollowingtabledescribestheOSPFv3HostEntrycommands.
Table 278. OSPFv3HostEntryConfigurationOptions
host<1128>address <IPv6address> <prefixlength(1128)>

ConfiguresthebaseIPv6addressandthesubnetprefixlengthforthehost
entry.
host<1128>area<02>
Configurestheareaindexofthehost.
host<1128>cost<165535>
Configuresthecostvalueofthehost.
[no]host<1128>enable
Enablesordisablesthehostentry.
nohost<1128>
Deletesthehostentry.
showipv6ospfhost[<1128>]
DisplaysthecurrentOSPFv3hostentries.
Commandmode:All
490
OSPFv3 Redistribute Entry Configuration

ThefollowingtabledescribestheOSPFv3RedistributeEntrycommands.
Table 279. OSPFv3RedistEntryConfigurationOptions
redistconfig<1128>address<IPv6address><IPv6prefixlength(1128)>
ConfiguresthebaseIPv6addressandthesubnetprefixlengthforthe
redistributionentry.
[no]redistconfig<1128>enable
EnablesordisablestheOSPFv3redistributionentry.
redistconfig<1128>metrictype{asExttype1|asExttype2}
Configuresthemetrictypeappliedtotheroutebeforeitisadvertisedintothe
OSPFv3domain.
redistconfig<1128>metricvalue<116777215>
Configurestheroutemetricvalueappliedtotheroutebeforeitisadvertised
intotheOSPFv3domain.
redistconfig<1128>tag<04294967295>
Configurestheroutetag.
noredistconfig<1128>tag
Removestheroutetag.
noredistconfig<1128>
DeletestheOSPFv3redistributionentry.
showipv6ospfredistconfig<1128>
DisplaysthecurrentOSPFv3redistributionconfigurationforthespecified
entry.
Commandmode:All
491
OSPFv3 Redistribute Configuration

ThefollowingtabledescribestheOSPFv3Redistributecommands.
Table 280. OSPFv3RedistributeConfigurationOptions
redistribute{connected|static}export<metricvalue(116777215)>
<metrictype(12)>[<tag(04294967295)>]
ExportstheroutesofthisprotocolasexternalOSPFv3ASexternalLSAsin
whichthemetric,metrictype,androutetagarespecified.
noredistribute{connected|static}export
Stopsexportingtheroutesoftheprotocol.
showipv6ospf
DisplaysthecurrentOSPFv3routeredistributionsettings.
Commandmode:All
492
Border Gateway Protocol Configuration

BorderGatewayProtocol(BGP)isanInternetprotocolthatenablesroutersona
networktoshareroutinginformationwitheachotherandadvertiseinformation
aboutthesegmentsoftheIPaddressspacetheycanaccesswithintheirnetwork
withroutersonexternalnetworks.BGPallowsyoutodecidewhatisthebest
routeforapackettotakefromyournetworktoadestinationonanothernetwork,
ratherthansimplysettingadefaultroutefromyourborderrouter(s)toyour
upstreamprovider(s).YoucanconfigureBGPeitherwithinanautonomoussystem
orbetweendifferentautonomoussystems.Whenrunwithinanautonomous
system,itscalledinternalBGP(iBGP).Whenrunbetweendifferentautonomous
systems,itscalledexternalBGP(eBGP).BGPisdefinedinRFC1771.
BGPcommandsenableyoutoconfiguretheswitchtoreceiveroutesandto
advertisestaticroutes,fixedroutesandvirtualserverIPaddresseswithother
internalandexternalrouters.InthecurrentLenovoN/OSimplementation,the
RackSwitchG8052doesnotadvertiseBGProutesthatarelearnedfromoneiBGP
speakertoanotheriBGPspeaker.
BGPisturnedoffbydefault.
Note: Fixedroutesaresubnetroutes.ThereisonefixedrouteperIPinterface.
Table 281. BorderGatewayProtocolOptions
routerbgp
EnterRouterBGPconfigurationmode.
aggregateaddress<116>
ConfiguresaggregationIPaddress.Toviewcommandoptions,seepage 498.
Commandmode:RouterBGP
as<065535>
SetAutonomousSystemnumber.
[no]asn4comp
EnablesordisablesASN4toASN2compatibility.
[no]bestpathaspathmultipathrelax
Changesthedefaultbestpathselectionconfigurationbyallowingloadsharing
acrossdifferentASpathsofequallength.
[no]clienttoclientreflection
EnablesordisablesclienttoclientIBGProutereflectionwhenoperatingasa
routereflector.
Thedefaultstateisenabled.
493
Table 281. BorderGatewayProtocolOptions(continued)

clusterid<IPaddress>
SpecifiestheroutersClusterIDusedwhenoperatingasaroutereflector.
Routereflectorsthatarepartofthesamecluster(assignedtothesamegroupof
clients)mustuseidenticalClusterIDs.
noclusterid
RemovestheroutersClusterID.
dscp<063>
SettheDSCPmarkingvalue.
[no]enable
GloballyenablesordisablesBGP.
localpreference<04294967294>
Setsthelocalpreference.Thepathwiththehighervalueispreferred.
Whenmultiplepeersadvertisethesameroute,usetheroutewiththeshortest
ASpathasthepreferredrouteifyouareusingeBGP,orusethelocal
preferenceifyouareusingiBGP.
maximumpaths[ibgp]<15>
Setmaximumpathsallowedforanexternalroute.
ibgpwillsetthemaximumpathsallowedforaninternalroute.
Bydefault,BGPwillinstallonlyonepathtotheIProutingtable.
nomaximumpaths[ibgp]
Resetsthemaximumpathsallowedforanexternalroutetoitsdefaultvalueof
1.Theibgpoptionresetsthemaximumpathsallowedforaninternalroute.
neighbor<peernumber(112)>
ConfigureseachBGPpeer.Eachborderrouter,withinanautonomoussystem,
exchangesroutinginformationwithroutersonotherexternalnetworks.To
viewcommandoptions,seepage 495.
494
Table 281. BorderGatewayProtocolOptions(continued)

[no]setipnexthoppeeraddress
Appliedonoutput,setsthenexthopoftheadvertisedmatchingroutestothe
currentpeeraddressofthelocalrouter.Appliedoninput,setsthenexthopof
thereceivedmatchingroutestotheneighboraddress,overridingother
existingnexthops.
Usethenoformofthecommandtoremovetheentry.
showipbgp
DisplaysthecurrentBGPconfiguration.
Commandmode:All
BGP Peer Configuration

UsethesecommandstoconfigureBGPpeers,whichareborderroutersthat
exchangeroutinginformationwithroutersoninternalandexternalnetworks.The
peeroptionisdisabledbydefault.
Table 282. BGPPeerConfigurationOptions
neighbor<112>advertisementinterval<165535>
Setstime,inseconds,betweenadvertisements.
[no]neighbor<112>nexthopself
EnablesordisablesenforcingtheusetheroutersownIPaddressasnexthop
attributewhensendingBGPupdatestothepeer.
Note:ApplicableonlyforEBGProutes.
[no]neighbor<112>passive
EnablesordisablesBGPpassivemode,whichpreventstheswitchfrom
initiatingBGPconnectionswithpeers.Instead,theswitchwaitsforthepeerto
sendanopenmessagefirst.
neighbor<112>password<116characters>
ConfigurestheBGPpeerpassword.
noneighbor<112>password
RemovestheBGPpeerpassword.
495
Table 282. BGPPeerConfigurationOptions(continued)

neighbor<112>redistribute
ConfiguresBGPneighborredistribution.Toviewcommandoptions,see
page 499.
neighbor<112>remoteaddress<IPaddress>
DefinestheIPaddressforthespecifiedpeer(borderrouter),usingdotted
decimalnotation.
Thedefaultaddressis0.0.0.0.
neighbor<112>remoteas<165535>
Setstheremoteautonomoussystemnumberforthespecifiedpeer.
neighbor<112>retryinterval<165535>
Setsconnectionretryinterval,inseconds.
neighbor<112>routemap{in|out}<1255>
Addsroutemapintoinrouteoroutroutemaplist.
noneighbor<112>routemap{in|out}{<1255>|all}
Removesallroutemapsoraspecificroutemapfrominrouteoroutroute
maplist.
neighbor<112>routeoriginationinterval<165535>
Setstheminimumtimebetweenrouteoriginations,inseconds.
[no]neighbor<112>routereflectorclient
Enablesordisablesthepeerasaroutereflectorclient.Configuringroute
reflectorclients,implicitlysetsupthelocalrouterasaroutereflector.
[no]neighbor<112>sendcommunity
EnablesordisablessendingacommunityattributetoaBGPneighbor.
496

neighbor<112>shutdown
Disablesthispeerconfiguration.
noneighbor<112>shutdown
Enablesthispeerconfiguration.
neighbor<112>timetolive<1255>
Timetolive(TTL)isavalueinanIPpacketthattellsanetworkrouter
whetherornotthepackethasbeeninthenetworktoolongandshouldbe
discarded.TTLspecifiesacertaintimespaninsecondsthat,whenexhausted,
wouldcausethepackettobediscarded.TheTTLisdeterminedbythenumber
ofrouterhopsthepacketisallowedbeforeitmustbediscarded.
ThiscommandspecifiesthenumberofrouterhopsthattheIPpacketcan
make.Thisvalueisusedtorestrictthenumberofhopstheadvertisement
makes.Itisalsousedtosupportmultihops,whichallowBGPpeerstotalk
acrossaroutednetwork.
Thedefaultnumberissetat1.
Note: TheTTLvalueissignificantonlytoeBGPpeers,foriBGPpeerstheTTL
valueintheIPpacketsisalways255(regardlessoftheconfiguredvalue).
noneighbor<112>timetolive
DisablestheTTLfeature.
neighbor<112>timersholdtime<0,365535>
Setstheperiodoftime,inseconds,thatwillelapsebeforethepeersessionis
torndownbecausetheswitchhasntreceivedakeepalivemessagefromthe
peer.
neighbor<112>timerskeepalive<021845>
Setsthekeepalivetimeforthespecifiedpeer,inseconds.
neighbor<112>ttlsecurityhops<1254>
Setstheminimumnumberoftimetolive(TTL)routerhopsanIPpacketmust
havetonotbediscarded.
497

noneighbor<112>ttlsecurityhops
DisablestheTTLsecurityfeature.
neighbor<112>updatesource{<interfacenumber(1126)>|
|loopback<15>}
Setsthesourceinterfacenumberforthispeer.
noneighbor<112>
Deletesthispeerconfiguration.
showipbgpneighbor[<112>]
DisplaysthecurrentBGPpeerconfiguration.
Commandmode:All
BGP Aggregation Configuration

ThesecommandsenableyoutoconfigureBGPaggregationtospecifythe
routes/rangeofIPdestinationsapeerrouteracceptsfromotherpeers.Allmatched
routesareaggregatedtooneroute,inordertoreducethesizeoftheroutingtable.
Bydefault,thefirstaggregationnumberisenabledandtherestaredisabled.
Table 283. BGPAggregationConfigurationOptions
aggregateaddress<116><IPaddress><IPnetmask>
DefinesthestartingsubnetIPaddressforthisaggregation,usingdotted
decimalnotation.
[no]aggregateaddress<116>enable
EnablesordisablesthisBGPaggregation.
noaggregateaddress<116>
DeletesthisBGPaggregation.
showipbgpaggregateaddress[<116>]
DisplaysthecurrentBGPaggregationconfiguration.
Commandmode:All
498
BGP Neighbor Redistribution Configuration

Thismenuenablesyoutoredistributerouteslearnedfromvariousrouting
informationsourcesintoBGP.
Table 284. BGPNeighborRedistributionConfigurationOptions
neighbor<112>redistributedefaultaction{import|
|originate|redistribute}
Setsdefaultrouteaction.Defaultsroutescanbeconfiguredasfollows:
import:Importtheseroutes.
originate:Theswitchsendsadefaultroutetopeersifitdoesnothave
anydefaultroutesinitsroutingtable.
redistribute:Defaultroutesareeitherconfiguredthroughdefault
gatewayorlearnedthroughotherprotocolsandredistributedtopeer.Ifthe
routesarelearnedfromdefaultgatewayconfiguration,youhavetoenable
staticroutessincetheroutesfromdefaultgatewayarestaticroutes.
Similarly,iftheroutesarelearnedfromacertainroutingprotocol,youhave
toenablethatprotocol.
noneighbor<112>redistributedefaultaction
Disablesthedefaultrouteactionconfiguration.
neighbor<112>redistributedefaultmetric<14294967294>
Setsdefaultmetricofadvertisedroutes.
noneighbor<112>redistributedefaultmetric
Disablesthedefaultmetricconfigurationofadvertisedroutes.
[no]neighbor<112>redistribute{fixed|ospf|rip|static}
Enablesordisablesadvertisingfixed,OSPF,RIPorstaticroutes.
showipbgpneighbor<112>redistribute
Displayscurrentredistributionconfiguration.
Commandmode:All
499
MLD Global Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureglobalMLD
parameters.
Table 285. MLDGlobalConfigurationCommands
ipv6mld
EnterMLDglobalconfigurationmode.
[no]enable
GloballyenablesordisablesMLD.
Commandmode:MLDConfiguration
default
ResetsMLDparameterstotheirdefaultvalues.
Commandmode:MLDConfiguration
showipv6mld
DisplaysthecurrentMLDconfigurationparameters.
Commandmode:All
500
MLD Interface Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureMLDparameters
foraninterface.
Table 286. MLDInterfaceConfigurationCommands
[no]ipv6mlddmrtrenable
EnablesordisablesdynamicMrouterlearningontheinterface.Thedefault
settingisdisabled.
[no]ipv6mldenable
EnablesordisablestheselectedMLDinterface.
ipv6mldllistnr<132>
ConfigurestheLastListenerqueryinterval,inseconds.
noipv6mldllistnr
ResetstheLastListenerqueryintervaltoitsdefaultvalueof1second.
ipv6mldqintrval<265535>
ConfigurestheintervalforMLDQueryReports,inseconds.
noipv6mldqintrval
ResetstheintervalforMLDQueryReportstoitsdefaultvalueof125seconds.
ipv6mldqri<100065535>
ConfigurestheintervalforMLDQueryResponseReports,inmiliseconds.
Thedefaultvalueis10,000milliseconds.
noipv6mldqri
ResetstheintervalforMLDQueryResponseReportstoitsdefaultvalueof
10,000milliseconds.
501
Table 286. MLDInterfaceConfigurationCommands(continued)

ipv6mldrobust<110>
ConfigurestheMLDRobustnessvariable,whichallowsyoutotunetheswitch
forexpectedpacketlossonthesubnet.Ifthesubnetisexpectedtobelossy
(highrateofpacketloss),increasethevalue.
Thedefaultvalueis2.
noipv6mldrobust
ResetstheMLDRobustnessvariabletoitsdefaultvalueof2.
ipv6mldversion<12>
DefinestheMLDprotocolversionnumber.
Thedefaultvalueis1.
noipv6mldversion
ResetstheMLDprotocolversionnumbertoitsdefaultvalueof1.
ipv6mlddefault
ResetsMLDparametersfortheselectedinterfacetotheirdefaultvalues.
502
IGMP Configuration
ThefollowingtabledescribesthecommandsusedtoconfigurebasicIGMP
parameters.
Table 287. IGMPConfigurationOptions
[no]ipigmpenable
GloballyenablesordisablesIGMP.
[no]ipigmpaggregate
EnablesordisablesIGMPMembershipReportaggregation.
showipigmp
DisplaysthecurrentIGMPconfigurationparameters.
Commandmode:All
ThefollowingsectionsdescribetheIGMPconfigurationoptions.
IGMPSnoopingConfigurationonpage 504
IGMPRelayConfigurationonpage 506
IGMPRelayMulticastRouterConfigurationonpage 507
IGMPStaticMulticastRouterConfigurationonpage 508
IGMPFilteringConfigurationonpage 509
IGMPAdvancedConfigurationonpage 511
IGMPQuerierConfigurationonpage 512
503
IGMP Snooping Configuration

IGMPSnoopingallowstheswitchtoforwardmulticasttrafficonlytothoseports
thatrequestit.IGMPSnoopingpreventsmulticasttrafficfrombeingfloodedtoall
ports.Theswitchlearnswhichserverhostsareinterestedinreceivingmulticast
traffic,andforwardsitonlytoportsconnectedtothoseservers.
ThefollowingtabledescribesthecommandsusedtoconfigureIGMPSnooping.
Table 288. IGMPSnoopingConfigurationOptions
[no]ipigmpsnoopenable
EnablesordisablesIGMPSnooping.
[no]ipigmpsnoopmroutertimeout<1600>
ConfiguresthetimeoutvalueforIGMPMembershipQueries(mrouter).Once
thetimeoutvalueisreached,theswitchremovesthemulticastrouterfromits
IGMPtable,iftheproperconditionsaremet.
Therangeisfrom1to600seconds.Thedefaultis255seconds.
[no]ipigmpsnoopport<portaliasornumber>
Addsorremovestheselectedportto/fromIGMPSnooping.
[no]ipigmpsnoopsourceip<IPaddress>
ConfiguresthesourceIPaddressusedasaproxyforIGMPGroupSpecific
Queries.
ipigmpsnoopvlan<VLANID(14094)>
AddstheselectedVLAN(s)toIGMPSnooping.
noipigmpsnoopvlan{<VLANID(14094)>|all}
RemovesallVLANsorjustthespecifiedVLAN(s)fromIGMPSnooping.
defaultipigmpsnoop
ResetsIGMPSnoopingparameterstotheirdefaultvalues.
showipigmpsnoop
DisplaysthecurrentIGMPSnoopingparameters.
Commandmode:All
504
IGMPv3 Configuration
ThefollowingtabledescribesthecommandsusedtoconfigureIGMPversion3.
Table 289. IGMPVersion3ConfigurationOptions
[no]ipigmpsnoopigmpv3enable
EnablesordisablesIGMPversion3.
[no]ipigmpsnoopigmpv3exclude
EnablesordisablessnoopingonIGMPv3ExcludeReports.Whendisabled,the
switchignoresExcludeReports.
ipigmpsnoopigmpv3sources<164>
ConfiguresthemaximumnumberofIGMPmulticastsourcestosnoopfrom
withinthegrouprecord.UsethiscommandtolimitthenumberofIGMP
sourcestoprovidemorerefinedcontrol.
Thedefaultvalueis8.
noipigmpsnoopigmpv3sources
ResetsthemaximumnumberofIGMPmulticastsourcestosnoopfromwithin
thegrouprecordtoitsdefaultvalueof8.
[no]ipigmpsnoopigmpv3v1v2
EnablesordisablessnoopingonIGMPversion1andversion2reports.When
disabled,theswitchdropsIGMPv1andIGMPv2reports.
DisplaysthecurrentIGMPv3Snoopingconfiguration.
Commandmode:All
505
IGMP Relay Configuration

WhenyouconfigureIGMPRelay,alsoconfiguretheIGMPRelaymulticastrouters.
ThefollowingtabledescribesthecommandsusedtoconfigureIGMPRelay.
Table 290. IGMPRelayConfigurationOptions
[no]ipigmprelayenable
EnablesordisablesIGMPRelay.
ipigmprelayreport<0150>
ConfigurestheintervalbetweenunsolicitedJoinreportssentbytheswitch,in
seconds.
ipigmprelayvlan<VLANID(14094)>
AddstheVLANorrangeofVLANstothelistofIGMPRelayVLANs.
noipigmprelayvlan{<VLANID(14094)>|all}
RemovesallVLANsorjustthespecifiedVLANfromthelistofIGMPRelay
VLANs.
showipigmprelay
DisplaysthecurrentIGMPRelayconfiguration.
Commandmode:All
506
IGMP Relay Multicast Router Configuration

Thefollowingtabledescribesthecommandsusedtoconfiguremulticastrouters
forIGMPRelay.
Table 291. IGMPRelayMrouterConfigurationOptions
ipigmprelaymrouter<12>address<IPaddress>
ConfigurestheIPaddressoftheIGMPmulticastrouterusedforIGMPRelay.
ipigmprelaymrouter<12>attempt<1128>
Configuresthenumberofsuccessfulpingattemptsrequiredbeforetheswitch
declaresthisMrouterisup.
Thedefaultvalueis5.
[no]ipigmprelaymrouter<12>enable
Enablesordisablesthemulticastrouter.
ipigmprelaymrouter<12>interval<160>
ConfiguresthetimeintervalbetweenpingattemptstotheupstreamMrouters,
inseconds.
Thedefaultvalueis2.
ipigmprelaymrouter<12>retry<1120>
Configuresthenumberoffailedpingattemptsrequiredbeforetheswitch
declaresthisMrouterisdown.
Thedefaultvalueis4.
ipigmprelaymrouter<12>version<12>
ConfigurestheIGMPversion(1or2)ofthemulticastrouter.
noipigmprelaymrouter<12>
DeletesthemulticastrouterfromIGMPRelay.
showipigmprelay
DisplaysthecurrentIGMPRelayconfiguration.
Commandmode:All
507
IGMP Static Multicast Router Configuration

Thefollowingtabledescribesthecommandsusedtoconfigureastaticmulticast
router.
Note: WhenstaticMroutersareused,theswitchcontinueslearningdynamic
MroutersviaIGMPsnooping.However,dynamicMroutersmaynotreplacestatic
Mrouters.IfadynamicMrouterhasthesameportandVLANcombinationasa
staticMrouter,thedynamicMrouterisnotlearned.
Table 292. IGMPStaticMulticastRouterConfigurationOptions
ipigmpmrouterport<portaliasornumber><VLANID(14094)>
<version(13)>
Selectsaport/VLANcombinationonwhichthestaticmulticastrouteris
connected,andconfigurestheIGMPversionofthemulticastrouter.
noipigmpmrouter{port<portaliasornumber><VLANID(14094)>
<version(13)>|all}
Removesallstaticmulticastroutersoraspecificstaticmulticastrouterfrom
theselectedport/VLANcombination.
clearipigmpmrouter
Clearsthedynamicmulticastrouterporttable.
showipigmpmrouter
DisplaysthecurrentIGMPMulticastRouterparameters.
Commandmode:All
508
IGMP Filtering Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureanIGMPfilter.
Table 293. IGMPFilteringConfigurationOptions
ipigmpprofile<116>
ConfigurestheIGMPfilter.Toviewcommandoptions,seepage 509.
[no]ipigmpfiltering
EnablesordisablesIGMPfilteringglobally.
showipigmpfiltering
DisplaysthecurrentIGMPFilteringparameters.
Commandmode:All
IGMP Filter Definition

ThefollowingtabledescribesthecommandsusedtodefineanIGMPfilter.
Table 294. IGMPFilterDefinitionOptions
ipigmpprofile<116>action{allow|deny}
AllowsordeniesmulticasttrafficfortheIPmulticastaddressesspecified.
Thedefaultactionisdeny.
[no]ipigmpprofile<116>enable
EnablesordisablesthisIGMPfilter.
ipigmpprofile<116>range<IPaddress1><IPaddress2>
ConfigurestherangeofIPmulticastaddressesforthisfilter.
noipigmpprofile<116>
Deletesthisfiltersparameterdefinitions.
showipigmpprofile<116>
DisplaysthecurrentIGMPfilter.
Commandmode:All
509
IGMP Filtering Port Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureaportforIGMP
filtering.
Table 295. IGMPFilterPortConfigurationOptions
[no]ipigmpfiltering
EnablesordisablesIGMPfilteringonthisport.
[no]ipigmpprofile<116>
AddsorremovesanIGMPfiltertothisport.
showinterfaceport<portaliasornumber>igmpfiltering
DisplaysthecurrentIGMPfilterparametersforthisport.
Commandmode:All
510
IGMP Advanced Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureadvancedIGMP
parameters.
Table 296. IGMPAdvancedConfigurationOptions
[no]ipigmpfastleave{<VLANID(14094)>|port
<portaliasornumber>}
EnablesordisablesFastleaveprocessing.Fastleaveallowstheswitchto
immediatelyremoveaVLANfromtheIGMPVLANlistoraportfromthe
IGMPportlist,ifthehostsendsaLeavemessage,andtheproperconditions
aremet.
Thiscommandisdisabledbydefault.
ipigmpqueryinterval<1600>
SetstheIGMProuterqueryinterval,inseconds.
noipigmpqueryinterval
ResetstheIGMProuterqueryintervaltoitsdefaultvalueof125seconds.
ipigmprobust<110>
ConfigurestheIGMPRobustnessvariable,whichallowsyoutotunethe
switchforexpectedpacketlossonthesubnet.Ifthesubnetisexpectedtobe
lossy(highrateofpacketloss),increasethevalue.
Thedefaultvalueis2.
noipigmprobust
ResetstheIGMPRobustnessvariabletoitsdefaultvalueof2.
[no]ipigmprtralert
EnablesordisablestheRouterAlertoptioninIGMPmessages.
511
Table 296. IGMPAdvancedConfigurationOptions(continued)

ipigmptimeout<1255>
ConfiguresthetimeoutvalueforIGMPMembershipReports(host).Oncethe
timeoutvalueisreached,theswitchremovesthehostfromitsIGMPtable,if
theconditionsaremet.
Therangeisfrom1to255seconds.Thedefaultis10seconds.
noipigmptimeout
ResetsthetimeoutvalueforIGMPMembershipReports(host)toitsdefault
valueof10seconds.
IGMP Querier Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureIGMPQuerier.
Table 297. IGMPQuerierConfigurationOptions
[no]ipigmpquerierenable
EnablesordisablesIGMPQuerier.
[no]ipigmpquerierport<portaliasornumber>
Addsorremovesthespecifiedportto/fromIGMPQuerier.
ipigmpqueriervlan<VLANID(14094)>electiontype
{ipv4|mac}
SetstheIGMPQuerierelectioncriteriaasIPaddressorMacaddress.
Thedefaultsettingisipv4.
noipigmpqueriervlan<VLANID(14094)>electiontype
ResetstheIGMPQuerierelectioncriteriatoitsdefaultvalueipv4.
[no]ipigmpqueriervlan<VLANID(14094)>enable
EnablesordisablesIGMPQuerierfortheselectedVLANs.
512
Table 297. IGMPQuerierConfigurationOptions(continued)

ipigmpqueriervlan<VLANID(14094)>maxresponse<1256>
Configuresthemaximumtime,intenthsofasecond,allowedbefore
respondingtoaMembershipQuerymessage.
ByvaryingtheQueryResponseInterval,anadministratormaytunethe
burstinessofIGMPmessagesonthesubnet;largervaluesmakethetrafficless
bursty,ashostresponsesarespreadoutoveralargerinterval.
noipigmpqueriervlan<VLANID(14094)>maxresponse
ResetsthemaximumtimeallowedbeforerespondingtoaMembershipQuery
messagetoitsdefaultvalueof100.
ipigmpqueriervlan<VLANID(14094)>queryinterval<1608>
ConfigurestheintervalbetweenIGMPQuerybroadcasts.
noipigmpqueriervlan<VLANID(14094)>queryinterval
ResetstheintervalbetweenIGMPQuerybroadcaststoitsdefaultvalueof125
seconds.
ipigmpqueriervlan<VLANID(14094)>robustness<110>
ConfigurestheIGMPRobustnessvariable,whichisthenumberoftimesthat
theswitchsendseachIGMPmessage.
Thedefaultvalueis2.
noipigmpqueriervlan<VLANID(14094)>robustness
ResetstheIGMPRobustnessvariabletoitsdefaultvalueof2.
ipigmpqueriervlan<VLANID(14094)>sourceip<IPaddress>
ConfigurestheIGMPsourceIPaddressfortheselectedVLAN.
noipigmpqueriervlan<VLANID(14094)>sourceip
RemovestheconfiguredIGMPsourceIPaddressforthespecifiedVLAN.
513
Table 297. IGMPQuerierConfigurationOptions(continued)

ipigmpqueriervlan<VLANID(14094)>startupcount<110>
ConfigurestheStartupQueryCount,whichisthenumberofIGMPQueries
sentoutatstartup.EachQueryisseparatedbytheStartupQueryInterval.
Thedefaultvalueis2.
noipigmpqueriervlan<VLANID(14094)>startupcount
ResetstheStartupQueryCounttoitsdefaultvalueof2.
ipigmpqueriervlan<VLANID(14094)>startupinterval<1608>
ConfigurestheStartupQueryInterval,whichistheintervalbetweenGeneral
Queriessentoutatstartup.
noipigmpqueriervlan<VLANID(14094)>startupinterval
ResetstheStartupQueryIntervaltoitsdefaultvalueof31seconds.
ipigmpqueriervlan<VLANID(14094)>version{v1|v2|v3}
ConfigurestheIGMPversion.
Thedefaultversionisv3.
noipigmpqueriervlan<VLANID(14094)>version
ResetstheIGMPversiontoitsdefaultvalueofv3.
noipigmpqueriervlan<VLANID(14094)>
DeletestheIGMPQuerierconfigurationforthespecifiedVLAN.
showipigmpquerier
DisplaysthecurrentIGMPQuerierparameters.
Commandmode:All
DisplaysIGMPQuerierinformationfortheselectedVLAN.
514
IKEv2 Configuration
ThefollowingtabledescribesthecommandsusedtoconfigureIKEv2.
Table 298. IKEv2Options
[no]ikev2cookie
Enablesordisablescookienotification.
ikev2retransmitinterval<120>
Setstheinterval,inseconds,thetimeoutvalueincaseapacketisnotreceived
bythepeerandneedstoberetransmitted.
showikev2
DisplaysthecurrentIKEv2settings.
Commandmode:All
IKEv2 Preshare Key Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureIKEv2preshare
keys.
Table 299. IKEv2PreshareKeyOptions
ikev2presharekeylocal<1256characters>
Configuresthelocalpresharekey.
Thedefaultvalueisibm123.
ikev2presharekeyremote<1256characters><IPv6address>
ConfigurestheremotepresharekeyfortheIPv6address.
showikev2presharekey
DisplaysthecurrentIKEv2Presharekeysettings.
515
IKEv2 Proposal Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureanIKEv2proposal.
IKEv2proposalincludesanencryptionalgorithm(cipher),anauthentication
algorithmtypeandaDiffieHellman(DH)group,whichdeterminesthestrength
ofthekeyusedinthekeyexchangeprocess.HigherDHgroupnumbersaremore
securebutrequireadditionaltimetocomputethekey.
Note: Thedefaultauthenticationalgorithmtypeissha1andthedefaultDHgroup
is24.
Table 300. IKEv2 Proposal Options
ikev2proposal
EnterIKEv2proposalmode.
encryption{3des|aescbc}
ConfiguresIKEv2encryptionmode.
Thedefaultvalueis3des.
Commandmode:IKEv2proposal
showikev2proposal
DisplaysthecurrentIKEv2Proposalconfiguration.
Commandmode:All
516
IKEv2 Identification Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureIKEv2
identification.
Table 301. IKEv2IdentificationOptions
ikev2identitylocaladdress
ConfigurestheswitchtousethesuppliedIPv6addressasidentification.
ikev2identitylocalfqdn<132characters>
Configurestheswitchtousethefullyqualifieddomainname(suchas
example.com)asidentification.
ikev2identitylocalemail<132characters>
Configurestheswitchtousethesuppliedemailaddress(suchas
xyz@example.com)asidentification.
showikev2identity
DisplaysthecurrentIKEv2identificationsettings.
Commandmode:All
517
IPsec Configuration
ThefollowingtabledescribesthecommandsusedtoconfigureIPsec.
Table 302. IPsecOptions
[no]ipsecenable
EnablesordisablesIPsec.
showipsec
DisplaysthecurrentIPsecsettings.
Commandmode:All
IPsec Transform Set Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureIPsectransforms.
Table 303. IPsecTransformSetOptions
ipsectransformset<110>{ahsha1|esp3des|
|espaescbc|espnull|espsha1}
SetstheAHorESPauthentication,encryption,orintegrityalgorithm.The
availablealgorithmsareasfollows:
ahsha1
esp3des
espaescbc
espnull
espsha1
ipsectransformset<110>transport{ahsha1|
|esp3des|espaescbc|espnull|espsha1}
SetstransportmodeandtheAHorESPauthentication,encryption,or
integrityalgorithm.
ipsectransformset<110>tunnel{ahsha1|esp3des|
espaescbc|espnull|espsha1}
SetstunnelmodeandtheAHorESPauthentication,encryption,orintegrity
algorithm.
518
Table 303. IPsecTransformSetOptions(continued)

noipsectransform<110>
Deletesthetransformset.
showipsectransformset<110>
DisplaysthecurrentIPsecTransformSetsettings.
Commandmode:All
IPsec Traffic Selector Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureanIPsectraffic
selector.
Table 304. IPsecTrafficSelectorOptions
ipsectrafficselector<110>{permit|deny}
{any|icmp[<ICMPv6type(0255)>]|tcp}{<IPV6address>|any}
Setsthetrafficselectortopermitordenythespecifiedtypeoftraffic.
noipsectrafficselector<110>
Resetsthespecifiedtrafficselectortoitsdefaultvalues.
showipsectrafficselector[<110>]
DisplaysIPsectrafficselectorinformation.
Commandmode:All
519
IPsec Dynamic Policy Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureanIPsecdynamic
policy.
Table 305. IPsecDynamicPolicyOptions
ipsecdynamicpolicy<110>
EnterIPsecdynamicpolicymode.
peer<IPv6address>
SetstheremotepeerIPaddress.
Commandmode:IPsecdynamicpolicy
pfs{enable|disable}
Enablesordisablesperfectforwardsecurity.
salifetime<12086400>
SetstheIPsecSAlifetimeinseconds.
trafficselector<110>
SetsthetrafficselectorfortheIPsecpolicy.
transformset<110>
SetsthetransformsetfortheIPsecpolicy.
showipsecdynamicpolicy<110>
DisplaysthecurrentIPsecdynamicpolicysettings.
Commandmode:All
520
IPsec Manual Policy Configuration

ThefollowingtabledescribesthecommandsusedtoconfigureanIPsecmanual
policy.
Table 306. IPsecManualPolicyOptions
ipsecmanualpolicy<110>
EnterIPsecmanualpolicymode.
inahauthkey<keycode(hexadecimal)>
SetsinboundAuthenticationHeader(AH)authenticatorkey.
Note:Formanualpolicies,whenpeeringwithathirdpartydevice,key
lengthsarefixedto20charactersforSHA1and16charactersforMD5
encryption.
Commandmode:IPsecmanualpolicy
inahspi<2564294967295>
SetstheinboundAuthenticationHeader(AH)SecurityParameterIndex(SPI).
encryption.
inesp{authkey|cipherkey}<keycode(hexadecimal)>
SetstheinboundEncapsulatingSecurityPayload(ESP)authenticatorkeyor
cipherkey.
lengthsarefixedto8charactersforDESandto24charactersfor3DESand
AESCBCencryption.
inespspi<2564294967295>
SetstheinboundEncapsulatingSecurityPayload(ESP)SecurityParameter
Index(SPI).
encryption.
outahauthkey<keycode(hexadecimal)>
SetstheoutboundAuthenticationHeader(AH)authenticatorkey.
encryption.
521
Table 306. IPsecManualPolicyOptions(continued)

outahspi<2564294967295>
SetstheoutboundAuthenticationHeader(AH)SecurityParameterIndex
(SPI).
encryption.
outesp{authkey|cipherkey}<keycode(hexadecimal)>
SetstheoutboundEncapsulatingSecurityPayload(ESP)authenticatorkeyor
cipherkey.
lengthsarefixedto8charactersforDESandto24charactersfor3DESand
AESCBCencryption.
outespspi<2564294967295>
SetstheoutboundEncapsulatingSecurityPayload(ESP)SecurityParameter
Index(SPI).
encryption.
peer<IPv6address>
SetstheremotepeerIPaddress.
trafficselector<110>
SetsthetrafficselectorfortheIPsecpolicy.
transformset<110>
SetsthetransformsetfortheIPsecpolicy.
showipsecmanualpolicy<110>
DisplaysthecurrentIPsecmanualpolicysettings.
Commandmode:All
522
Domain Name System Configuration

TheDomainNameSystem(DNS)commandsareusedfordefiningtheprimary
andsecondaryDNSserversonyourlocalnetwork,andforsettingthedefault
domainnameservedbytheswitchservices.DNSparametersmustbeconfigured
priortousinghostnameparameterswiththeping,traceroute,andtftp
commands.
Table 307. DomainNameServiceOptions
ipdnsdomainname<1191characters>
Setsthedefaultdomainnameusedbytheswitch.Forexample:
mycompany.com
noipdnsdomainname
Removesthedomainnameusedbytheswitch.
ipdnsprimaryserver<IPv4address>
YouarepromptedtosettheIPv4addressforyourprimaryDNSserver,using
dotteddecimalnotation.
noipdnsprimaryserver
RemovestheIPv4primaryDNSserver.
ipdnssecondaryserver<IPv4address>
YouarepromptedtosettheIPv4addressforyoursecondaryDNSserver,
usingdotteddecimalnotation.IftheprimaryDNSserverfails,theconfigured
secondarywillbeusedinstead.
noipdnssecondaryserver
RemovestheIPv4secondaryDNSserver.
ipdnsipv6primaryserver[<IPv6address>]
YouarepromptedtosettheIPv6addressforyourprimaryDNSserver,using
hexadecimalformatwithcolons.
noipdnsipv6primaryserver
RemovestheIPv6primaryDNSserver.
523
Table 307. DomainNameServiceOptions

ipdnsipv6secondaryserver[<IPv6address>]
YouarepromptedtosettheIPv6addressforyoursecondaryDNSserver,
usinghexadecimalformatwithcolons.IftheprimaryDNSserverfails,the
configuredsecondarywillbeusedinstead.
noipdnsipv6secondaryserver
RemovestheIPv6secondaryDNSserver.
ipdnsipv6requestversion{ipv4|ipv6}
SetstheprotocolusedforthefirstrequesttotheDNSserver,asfollows:
IPv4
IPv6
showipdns
DisplaysthecurrentDomainNameSystemsettings.
Commandmode:All
524
Bootstrap Protocol Relay Configuration

TheBootstrapProtocol(BOOTP)Relaycommandsareusedtoallowhoststo
obtaintheirconfigurationsfromaDynamicHostConfigurationProtocol(DHCP)
server.TheBOOTPconfigurationenablestheswitchtoforwardaclientrequestfor
anIPaddresstoDHCP/BOOTPserverswithIPaddressesthathavebeen
configuredontheG8052.
BOOTPrelayisturnedoffbydefault.
Table 308. GlobalBOOTPRelayConfigurationOptions
[no]ipbootprelayenable
GloballyenablesordisablesBOOTPrelay.
ipbootprelayserver<15>address<IPaddress>
SetstheIPaddressoftheselectedglobalBOOTPserver.
noipbootprelayserver<15>
RemovesthespecifiedBOOTPserver.
BOOTP Relay Broadcast Domain Configuration

ThismenuallowsyoutoconfigureaBOOTPserverforaspecificbroadcast
domain,basedonitsassociatedVLAN.
Table 309. BOOTPRelayBroadcastDomainConfigurationOptions
[no]ipbootprelaybcastdomain<110>enable
EnablesordisablesBOOTPRelayforthebroadcastdomain.
ipbootprelaybcastdomain<110>server<15>
address<IPv4address>
SetstheIPaddressoftheBOOTPserver.
noipbootprelaybcastdomain<110>server<15>
RemovesthebroadcastdomainBOOTPserver.
ipbootprelaybcastdomain<110>vlan<VLANID(14094)>
ConfigurestheVLANofthebroadcastdomain.Eachbroadcastdomainmust
haveauniqueVLAN.
525
Table 309. BOOTPRelayBroadcastDomainConfigurationOptions(continued)

noipbootprelaybcastdomain<110>
Deletestheselectedbroadcastdomainconfiguration.
showipbootprelay
DisplaysthecurrentparametersfortheBOOTPRelaybroadcastdomain.
Commandmode:All
Option 82 Configuration
ThesecommandsallowyoutoconfigureDHCPoption82information.Theswitch
canusethefollowingDHCPoption82suboptionstoallocateserveraddresses.
CircuitID:IdentifiesthehostnameorMACaddressesoftheswitchmakingthe
DHCPrequest.
RemoteID:IdentifiestheportthatreceivestheDHCPrequest.
DHCPRelayAgent(Option82)isdefinedinRFC3046.
Table 310. Option82ConfigurationOptions
[no]ipbootprelayinformationenable
EnablesordisablesBOOTPOption82.
ipbootprelayinformationpolicy{keep|drop|replace}
ConfigurestheDHCPreforwardingpolicy,asfollows:
keep:Retainsrequeststhatcontainrelayinformationiftheoption82
informationisalsopresent.
drop:Discardsrequeststhatcontainrelayinformationiftheoption82
informationisalsopresent.
replace:Replacestherelayinformationinrequeststhatalsocontain
option82information.
noipbootprelayinformationpolicy
RemovestheDHCPreforwardingpolicy.
showipbootprelay
DisplaysthecurrentBOOTPOption82parameters.
Commandmode:All
526
VRRP Configuration
VirtualRouterRedundancyProtocol(VRRP)supportontheG8052provides
Bydefault,VRRPisdisabled.LenovoN/OShasextendedVRRPtoincludevirtual
serversaswell,allowingforfullactive/activeredundancybetweenswitches.For
moreinformationonVRRP,seetheHighAvailabilitychapterintheLenovoN/OS
8.3ApplicationGuide.
Table 311. VirtualRouterRedundancyProtocolOptions
routervrrp
EnterRouterVRRPconfigurationmode.
[no]enable
GloballyenablesordisablesVRRPonthisswitch.
Commandmode:RouterVRRP
group
ConfiguresVRRPvirtualroutersgroups.Toviewcommandoptions,see
page 532.
holdoff<0255>
Globallysetsthetime,inseconds,thatVRRPwaitsfromwhenthemaster
switchgoesdownuntilelevatinganewswitchtobethemasterswitch.
TodisableVRRPholdoffsetthetimeto0.
Note:Settinganewtimevaluewilltakeeffectonlywhentheswitchisnotina
holdoffstate.
interface<1128>
ConfiguresVRRPauthenticationparametersfortheIPinterfacesusedwiththe
virtualrouters.Toviewcommandoptions,seepage 535.
trackingpriorityincrement
Configuresweightsforthevariouscriteriausedtomodifyprioritylevels
duringthemasterrouterelectionprocess.Toviewcommandoptions,see
page 536.
527
Table 311. VirtualRouterRedundancyProtocolOptions

virtualrouter<1128>
Configuresvirtualroutersfortheswitch.Toviewcommandoptions,see
page 528.
showipvrrp
DisplaysthecurrentVRRPparameters.
Commandmode:All
Virtual Router Configuration

Thesecommandsareusedforconfiguringvirtualroutersforthisswitch.Avirtual
routerisdefinedbyitsvirtualrouterIDandanIPaddress.OneachVRRPcapable
routingdeviceparticipatinginredundancyforthisvirtualrouter,avirtualrouter
willbeconfiguredtosharethesamevirtualrouterIDandIPaddress.
Virtualroutersaredisabledbydefault.
Table 312. VRRPVirtualRouterConfigurationOptions
virtualrouter<1128>address<IPaddress>
DefinestheIPaddressforthisvirtualrouterusingdotteddecimalnotation.
ThisisusedinconjunctionwiththeprecedingVRIDtoconfigurethesame
virtualrouteroneachparticipatingVRRPdevice.
[no]virtualrouter<1128>enable
Enablesordisablesthisvirtualrouter.
[no]virtualrouter<1128>fastadvertise
EnablesordisablesFastAdvertisements.Whenenabled,theVRRPmaster
advertisementsintervaliscalculatedinunitsofcentiseconds,insteadof
seconds.Forexample,ifadverissetto1andfadverisenabled,master
advertisementsaresentevery10miliseconds.
Whenyoudisablefastadvertisement,theadvertisementintervalissettothe
defaultvalueof1second.TosupportFastAdvertisements,settheinterval
between20100centiseconds.
528
Table 312. VRRPVirtualRouterConfigurationOptions(continued)

virtualrouter<1128>interface<IPinterfacenumber>
SelectsaswitchIPinterface.IftheIPinterfacehasthesameIPaddressasthe
addressoption,thisswitchisconsideredtheownerofthedefinedvirtual
router.Anownerhasaspecialpriorityof255(highest)andwillalwaysassume
theroleofmasterrouter,evenifitmustpreemptanothervirtualrouterwhich
hasassumedmasterroutingauthority.Thispreemptionoccursevenifthe
preemoptionbelowisdisabled.
Thedefaultvalueis1.
[no]virtualrouter<1128>preemption
Enablesordisablesmasterpreemption.Whenenabled,ifthisvirtualrouteris
inbackupmodebuthasahigherprioritythanthecurrentmaster,thisvirtual
routerwillpreemptthelowerprioritymasterandassumecontrol.Notethat
evenwhenpreemptionisdisabled,thisvirtualrouterwillalwayspreempt
anyothermasterifthisswitchistheowner(theIPinterfaceaddressand
virtualrouteraddrarethesame).
Bydefault,thisoptionisenabled.
virtualrouter<1128>priority<1254>
Definestheelectionprioritybiasforthisvirtualserver.Duringthemaster
routerelectionprocess,theroutingdevicewiththehighestvirtualrouter
prioritynumberwins.Ifthereisatie,thedevicewiththehighestIPinterface
addresswins.IfthisvirtualroutersIPaddressisthesameastheoneusedby
theIPinterface,thepriorityforthisvirtualrouterwillautomaticallybesetto
255(highest).
Whenprioritytrackingisused,thisbasepriorityvaluecanbemodified
accordingtoanumberofperformanceandoperationalcriteria.
Thepriorityvaluecanbeanyintegerbetween1and254.Thedefaultvalueis
100.
virtualrouter<1128>timersadvertise<1255>
DefinesthetimeintervalbetweenVRRPmasteradvertisements.Thiscanbe
anyintegerbetween1and255seconds.
Thedefaultvalueis1.
virtualrouter<1128>timerspreemptdelaytime<0255>
Configuresthepreemptdelayinterval(inseconds).Thistimerisconfigured
onthevirtualrouterandpreventstheswitchfromtransitioningbacktoMaster
stateuntilthepreemptdelayintervalhasexpired.Ensurethattheintervalis
longenoughforOSPForotherroutingprotocolstoconverge.
529
Table 312. VRRPVirtualRouterConfigurationOptions(continued)

virtualrouter<1128>track
Enablestheprioritysystemusedwhenelectingthemasterrouterfromapool
ofvirtualrouters.Toviewcommandoptions,seepage 531.
virtualrouter<1128>virtualrouterid<1255>
DefinesthevirtualrouterID(VRID).Thisisusedinconjunctionwiththe
[no] virtualrouter<VRID>address<IPaddress>commandbelowto
defineavirtualrouteronthisswitch.TocreateapoolofVRRPenabled
routingdeviceswhichcanprovideredundancytoeachother,each
participatingVRRPdevicemustbeconfiguredwiththesamevirtualrouter.
TheVRIDforstandardvirtualrouters(wherethevirtualrouterIPaddressis
notthesameasanyvirtualserver)canbeanyintegerbetween1and128.
Thedefaultvalueis1.
Note:AllVRIDvaluesmustbeuniquewithintheVLANtowhichthevirtual
routersIPinterfacebelongs.
novirtualrouter<1128>
Deletesthisvirtualrouterfromtheswitchconfiguration.
showipvrrpvirtualrouter<1128>
Displaysthecurrentconfigurationinformationforthisvirtualrouter.
Commandmode:All
530
Virtual Router Priority Tracking Configuration

Thesecommandsareusedformodifyingtheprioritysystemusedwhenelecting
themasterrouterfromapoolofvirtualrouters.Varioustrackingcriteriacanbe
usedtobiastheelectionresults.Eachtimeoneofthetrackingcriteriaismet,the
prioritylevelforthevirtualrouterisincreasedbyanamountdefinedthroughthe
VRRPTrackingcommands.
Criteriaaretrackeddynamically,continuouslyupdatingvirtualrouterpriority
levelswhenenabled.Ifthevirtualrouterpreemptionoptionisenabled,thisvirtual
routercanassumemasterroutingauthoritywhenitsprioritylevelrisesabovethat
ofthecurrentmaster.
Sometrackingcriteriaapplytostandardvirtualrouters,otherwisecalledvirtual
interfacerouters.AvirtualserverrouterisdefinedasanyvirtualrouterwhoseIP
addressisthesameasanyconfiguredvirtualserverIPaddress.
Table 313. VRRPPriorityTrackingConfigurationOptions
[no]virtualrouter<1128>trackinterfaces
Whenenabled,thepriorityforthisvirtualrouterwillbeincreasedforeach
otherIPinterfaceactiveonthisswitch.AnIPinterfaceisconsideredactive
whenthereisatleastoneactiveportonthesameVLAN.Thishelpselectthe
virtualrouterswiththemostavailableroutesasthemaster.
[no]virtualrouter<1128>trackports
activeportonthesameVLAN.Aportisconsideredactiveifithasalinkand
isforwardingtraffic.Thishelpselectthevirtualrouterswiththemost
availableportsasthemaster.
[no]virtualrouter<1128>trackvirtualrouters
virtualrouterinmastermodeonthisswitch.Thisisusefulformakingsure
thattrafficforanyparticularclient/serverpairingarehandledbythesame
switch,increasingroutingandloadbalancingefficiency.
showipvrrpvirtualrouter<1128>track
Commandmode:All
531
Virtual Router Group Configuration

VirtualRouterGroupcommandsareusedforassociatingallvirtualroutersintoa
singlelogicalvirtualrouter,whichforcesallvirtualroutersontheG8052toeither
bemasterorbackupasagroup.AvirtualrouterisdefinedbyitsvirtualrouterID
andanIPaddress.OneachVRRPcapableroutingdeviceparticipatingin
redundancyforthisvirtualrouter,avirtualrouterwillbeconfiguredtosharethe
samevirtualrouterIDandIPaddress.
Note: ThisoptionisrequiredtobeconfiguredonlywhenusingatleasttwoG8052s
inahotstandbyfailoverconfiguration,whereonlyoneswitchisactiveatanytime.
Table 314. VRRPVirtualRouterGroupConfigurationOptions
groupadvertisement<1255>
DefinesthetimeintervalbetweenVRRPmasteradvertisements.Thiscanbe
anyintegerbetween1and255seconds.
Thedefaultis1.
[no]groupenable
Enablesordisablesthevirtualroutergroup.
[no]groupfastadvertise
EnablesordisablesFastAdvertisements.Whenenabled,theVRRPmaster
advertisementsintervaliscalculatedinunitsofcentiseconds,insteadof
seconds.Forexample,ifadverissetto1andfadverisenabled,master
advertisementsaresentevery10miliseconds.
Whenyoudisablefastadvertisement,theadvertisementintervalissettothe
defaultvalueof1second.TosupportFastAdvertisements,settheinterval
between20100centiseconds.
groupinterface<interfacenumber(1128)>
SelectsaswitchIPinterface.
ThedefaultswitchIPinterfacenumberis1.
grouppreemptdelaytime<0255>
Configuresthepreemptdelayinterval(inseconds).Thistimerisconfigured
onthevirtualroutergroupandpreventstheswitchfromtransitioningbackto
Masterstateuntilthepreemptdelayintervalhasexpired.Ensurethatthe
intervalislongenoughforOSPForotherroutingprotocolstoconverge.
532
Table 314. VRRPVirtualRouterGroupConfigurationOptions(continued)

[no]grouppreemption
Enablesordisablesmasterpreemption.Whenenabled,ifthevirtualrouter
groupisinbackupmodebuthasahigherprioritythanthecurrentmaster,this
virtualrouterwillpreemptthelowerprioritymasterandassumecontrol.
Notethatevenwhenpreemptionisdisabled,thisvirtualrouterwillalways
preemptanyothermasterifthisswitchistheowner(theIPinterfaceaddress
andvirtualrouteraddressarethesame).Bydefault,thisoptionisenabled.
grouppriority<1254>
Definestheelectionprioritybiasforthisvirtualroutergroup.Duringthe
masterrouterelectionprocess,theroutingdevicewiththehighestvirtual
routerprioritynumberwins.Ifthereisatie,thedevicewiththehighestIP
interfaceaddresswins.IfthisvirtualroutersIPaddress(addr)isthesameas
theoneusedbytheIPinterface,thepriorityforthisvirtualrouterwill
automaticallybesetto255(highest).
Thiscanbeanyintegerbetween1and254.Thedefaultvalueis100.
Whenprioritytrackingisused,thisbasepriorityvaluecanbemodified
accordingtoanumberofperformanceandoperationalcriteria.
grouptrack
Enablestheprioritysystemusedwhenelectingthemasterrouterfromapool
ofvirtualroutergroups.Toviewcommandoptions,seepage 534.
groupvirtualrouterid<1255>
DefinesthevirtualrouterID(VRID).
TheVRIDforstandardvirtualrouters(wherethevirtualrouterIPaddressis
notthesameasanyvirtualserver)canbeanyintegerbetween1and255.All
VRIDvaluesmustbeuniquewithintheVLANtowhichthevirtualroutersIP
interface(seeinterface)belongs.
ThedefaultvirtualrouterIDis1.
nogroup
Deletesthevirtualroutergroupfromtheswitchconfiguration.
showipvrrpgroup
Displaysthecurrentconfigurationinformationforthevirtualroutergroup.
Commandmode:All
533
Virtual Router Group Priority Tracking Configuration

Note: IfVirtualRouterGroupTrackingisenabled,thenthetrackingoptionwillbe
availableonlyundergroupoption.Thetrackingsettingfortheotherindividual
virtualrouterswillbeignored.
Table 315. VirtualRouterGroupPriorityTrackingConfigurationOptions
[no]grouptrackinterfaces
otherIPinterfaceactiveonthisswitch.AnIPinterfaceisconsideredactive
whenthereisatleastoneactiveportonthesameVLAN.Thishelpselectthe
virtualrouterswiththemostavailableroutesasthemaster.
[no]grouptrackports
activeportonthesameVLAN.Aportisconsideredactiveifithasalinkand
isforwardingtraffic.Thishelpselectthevirtualrouterswiththemost
availableportsasthemaster.
showipvrrpgrouptrack
Commandmode:All
534
VRRP Interface Configuration

Note: TheinterfacerepresentstheIPinterfaceonwhichauthenticationparameters
mustbeconfigured.
ThesecommandsareusedforconfiguringVRRPauthenticationparametersforthe
IPinterfacesusedwiththevirtualrouters.
Table 316. VRRPInterfaceOptions
interface<1128>authentication{password|none}
Definesthetypeofauthenticationthatwillbeused:
none(noauthentication)
password(passwordauthentication).
interface<1128>password<password>
Definesaplaintextpassworduptoeightcharacterslong.Thispasswordwill
beaddedtoeachVRRPpackettransmittedbythisinterfacewhenpassword
authenticationischosen(seeinterfaceauthenticationabove).
nointerface<1128>password
Resetstheconfiguredpasswordtoitsdefaultvalue.
nointerface<1128>
ClearstheauthenticationconfigurationparametersforthisIPinterface.TheIP
interfaceitselfisnotdeleted.
showipvrrpinterface<1128>
DisplaysthecurrentconfigurationforthisIPinterfacesauthentication
parameters.
Commandmode:All
535
VRRP Tracking Configuration

Thesecommandsareusedforsettingweightsforthevariouscriteriausedto
modifyprioritylevelsduringthemasterrouterelectionprocess.Eachtimeoneof
thetrackingcriteriaismet(seeVRRPVirtualRouterPriorityTracking
Commandsonpage 531),theprioritylevelforthevirtualrouterisincreasedbya
definedamount.
Table 317. VRRPTrackingConfigurationOptions
trackingpriorityincrementinterfaces<0254>
DefinesthepriorityincrementvalueforactiveIPinterfacesdetectedonthis
switch.
Thedefaultvalueis2.
trackingpriorityincrementports<0254>
Definesthepriorityincrementvalueforactiveportsonthevirtualrouters
VLAN.
Thedefaultvalueis2.
trackingpriorityincrementvirtualrouters<0254>
Definesthepriorityincrementvalue(0through254)forvirtualroutersin
mastermodedetectedonthisswitch.
Thedefaultvalueis2.
showipvrrptrackingpriorityincrement
Displaysthecurrentconfigurationofprioritytrackingincrementvalues.
Commandmode:All
Note: Theseprioritytrackingoptionsonlydefineincrementvalues.Theseoptions
donotaffecttheVRRPmasterrouterelectionprocessuntiloptionsunderthe
VRRPVirtualRouterPriorityTrackingCommands(seepage 531)areenabled.
536
Protocol Independent Multicast Configuration

ThefollowingtabledescribesthePIMcommands.
Table 318. PIMConfigurationOptions
ippimcomponent<12>
EnterPIMcomponentmode.
noippimcomponent<2>
DeletesthePIMcomponent.
[no]ippimenable
GloballyenablesordisablesPIM.
[no]ippimpmbrenable
EnablesordisablesPIMborderrouter.
ippimregstopratelimitperiod<02147483647>
Configurestheregisterstopratelimit,inseconds.
defaultippimregstopratelimitperiod
Resettheregisterstopratelimittoitsdefaultvalueof5seconds.
noippimregstopratelimitperiod
Disablestheregisterstopratelimit.
[no]ippimstaticrpenable
EnablesordisablesstaticRPconfiguration.
537
Table 318. PIMConfigurationOptions

defaultippim
ResetsthePIMconfigurationtoitsdefaultvalues.
clearippimmroute
ClearsPIMmulticastrouterentries.
PIM Component Configuration

UsethesecommandstoconfigurePIMcomponents.
Table 319. PIMComponentConfigurationOptions
ippimcomponent<12>
EnterPIMcomponentmode.
mode{dense|sparse}
ConfigurestheoperationalmodeofthePIMrouter(denseorsparse).
Commandmode:PIMComponent
showippimcomponent[<12>]
DisplaysthecurrentPIMcomponentconfigurationsettings.
Commandmode:All
538
RP Candidate Configuration
UsethesecommandstoconfigureaPIMrouterRendezvousPoint(RP)candidate.
Table 320. RPCandidateConfigurationOptions
rpcandidateholdtime<0255>
ConfigurestheholdtimeoftheRPcandidate,inseconds.
norpcandidateholdtime
ResetstheholdtimeoftheRPcandidatetoitsdefaultvalueof0seconds.
[no]rpcandidaterpaddress<groupmulticastaddress>
<groupsubnetmask><IPaddress>
AddsorremovesanRPcandidate.
RP Static Configuration
UsethesecommandstoconfigureastaticPIMrouterRendezvousPoint(RP).
Table 321. RPStaticConfigurationOptions
rpstaticrpaddress<groupmulticastaddress><groupsubnetmask>
<IPaddress>
AddsastaticRP.
norpstaticrpaddress<groupmulticastaddress><groupsubnetmask>
RemovesthespecifiedstaticRP.
539
PIM Interface Configuration

ThefollowingtabledescribesthePIMInterfacecommands.
Table 322. PIMInterfaceConfigurationOptions
interfaceip<1128>
EnterInterfaceIPmode.
[no]ippimborderbit
Enablesordisablestheinterfaceasaborderrouter.
ippimcbsrpreference<0255>
Configuresthecandidatebootstraprouterpreference.
[default|no]ippimcbsrpreference
Resetsthecanditatebootstraprouterpreferencetoitsdefaultvalue.
ippimcomponentid<12>
DefinesthecomponentIDfortheinterface.
noippimcomponentid
RemovestheinterfacefromthePIMcomponent.
ippimdrpriority<04294967294>
Configuresthedesignatedrouterpriority.
Thedefaultvalueis1.
[default|no]ippimdrpriority
Resetsthedesignatedrouterprioritytoitsdefaultvalueof1.
[no]ippimenable
EnablesordisablesPIMontheinterface.
540
Table 322. PIMInterfaceConfigurationOptions(continued)

ippimhelloholdtime<165535>
Configuresthetimeperiodinsecondsforwhichaneighboristoconsiderthis
switchtobeoperative(up).
[default|no]ippimhelloholdtime
ResetsthePIMHellopacketsholdtimetoitsdefaultvalueof105seconds.
ippimhellointerval<065535>
Configuresthetimeinterval,inseconds,betweenPIMHellopackets.
[default|no]ippimhellointerval
ResetsthetimeintervalbetweenPIMHellopacketstoitsdefaultvalueof30
seconds.
ippimjoinpruneinterval<065535>
ConfigurestheintervalbetweenJoinPrunemessages,inseconds.
[default|no]ippimjoinpruneinterval
ResetstheintervalbetweenJoinPrunemessagestoitsdefaultvalueof60
seconds.
ippimlandelay<032767>
ConfigurestheLANdelayvaluefortherouterinterface,inseconds.
[default|no]ippimlandelay
ResetstheLANdelayfortherouterinterfacetoitsdefaultvalue.
[no]ippimlanprunedelay
EnablesordisablesLANdelayadvertisementsontheinterface.
541
Table 322. PIMInterfaceConfigurationOptions(continued)

ippimneighboraddr<IPaddress>{allow|deny}
AllowsordeniesPIMaccesstothespecifiedneighbor.Youcanconfigurealist
ofupto24neighborsthatbypasstheneighborfilter.Onceyouconfigurethe
interfacetoallowaneighbor,youcanconfiguretheinterfacetodenythe
neighbor.
[no]ippimneighborfilter
EnablesordisablesthePIMneighborfilterontheinterface.Whenenabled,
thisinterfacedoesnotacceptanyPIMneighbors,unlessspecificallypermitted
usingthefollowingcommand:ippimneighboraddr<IPaddress>
ippimoverrideinterval<065535>
Configurestheoverrideintervalfortherouterinterface,inseconds.
[default|no]ippimoverrideinterval
Resetstheoverrideintervalfortherouterinterfacetoitsdefaultvalue.
defaultippim
ResetsthePIMconfigurationontheinterfacetoitsdefaultvalues.
showippimneighborfilters
DisplaystheconfiguredPIMneighborfilters.
Commandmode:All
showippiminterface[<1128>|detail|loopback|port
<portaliasornumber>]
DisplaysthecurrentPIMinterfaceparameters.
Commandmode:All
542
IPv6 Default Gateway Configuration

TheswitchsupportsIPv6defaultgateways.
ThefollowingtabledescribestheIPv6DefaultGatewayConfigurationcommands.
Table 323. IPv6DefaultGatewayConfigurationOptions
ipgateway6address<IPv6address>[enable]
ConfigurestheIPv6addressofthedefaultgateway,inhexadecimalformat
withcolons(suchas3001:0:0:0:0:0:abcd:12).Theenableoptionalso
enablesthegateway.
[no]ipgateway6enable
Enablesordisablesthedefaultgateway.
noipgateway6
Deletesthedefaultgateway.
showipv6gateway6
DisplaysthecurrentIPv6defaultgatewayconfiguration.
Commandmode:All
543
IPv6 Static Route Configuration

ThefollowingtabledescribestheIPv6staticrouteconfigurationcommands.
Table 324. IPv6StaticRouteConfigurationOptions
iproute6<IPv6address><IPv6prefixlength><IPv6gatewayaddress>
[<interfacenumber(1126)>]
AddsanIPv6staticroute.
noiproute6<IPv6address><IPv6prefixlength>[<IPinterfacenumber>]
Removestheselectedroute.
noiproute6[destinationaddress<IPv6address>|gateway
<defaultIPv6gatewayaddress>|interface<IPinterfacenumber>|all]
ClearstheselectedIPv6staticroutes.
showipv6routestatic
Displaysthecurrentstaticrouteconfiguration.
Commandmode:All
IPv6 Neighbor Discovery Cache Configuration

ThefollowingtabledescribestheIPv6NeighborDiscoverycacheconfiguration
commands.
Table 325. IPv6NeighborDiscoveryCacheConfigurationOptions
ipneighbors<IPv6address><MACaddress>vlan<VLANID(14094)>
port<portnumberoralias>
AddsastaticentrytotheNeighborDiscoverycachetable.
noipneighbors<IPv6address>
DeletestheselectedentryfromthestaticNeighborDiscoverycachetable.
noipneighborsall[ip<IPinterfacenumber>|interfaceport
<portaliasornumber>|vlan<VLANID(14094)>]
ClearstheselectedstaticentriesintheNeighborDiscoverycachetable.
544
IPv6 Path MTU Configuration

ThefollowingtabledescribestheconfigurationoptionsforPathMTU(Maximum
TransmissionUnit).ThePathMTUcachecanconsumesystemmemoryandaffect
performance.ThesecommandsallowyoutomanagethePathMTUcache.
Table 326. IPv6PathMTUOptions
ippmtu6timeout{0|<10100>}
SetsthetimeoutvalueforPathMTUcacheentries,inminutes.Enter0(zero)to
setthetimeouttoinfinity(notimeout).
clearipv6pmtu
ClearsallentriesinthePathMTUcache.
showipv6pmtu
DisplaysthecurrentPathMTUconfiguration.
Commandmode:All
IPv6 Neighbor Discovery Prefix Configuration

ThefollowingtabledescribestheNeighborDiscoveryprefixconfigurationoptions.
ThesecommandsallowyoutodefinealistofprefixestobeplacedinPrefix
InformationoptionsinRouterAdvertisementmessagessentfromaninterface.
Table 327. IPv6NeighborDiscoveryPrefixOptions
interfaceip<1128>
EntersInterfaceIPmode.
ipv6ndprefix<IPv6prefix><IPv6prefixlength>[noadvertise]
AddsaNeighborDiscoveryprefixtotheinterface.
TodisabletheprefixandnotadvertiseitinthePrefixInformationoptionsin
RouterAdvertisementmessagessentfromtheinterfaceusethe
noadvertiseoption.
Additionalprefixoptionsarelistedbelow.
545
Table 327. IPv6NeighborDiscoveryPrefixOptions(continued)

noipv6ndprefix{<IPv6prefix><IPv6prefixlength>|interface
<IPinterfacenumber>|all}
RemovesaNeighborDiscoveryprefix.Ifyouspecifyaninterfacenumber,all
prefixesfortheinterfaceareremoved.
ipv6ndprefix<IPv6prefix><IPv6prefixlength>noautoconfig
Disablestheautonomousflag.Whenenabled,theautonomousflagindicates
thattheprefixcanbeusedforstatelessaddressconfiguration.
ipv6ndprefix<IPv6prefix><IPv6prefixlength>offlink
Disablestheonlinkflag.Whenenabled,theonlinkflagindicatesthatthis
prefixcanbeusedforonlinkdetermination.Whendisabled,the
advertisementmakesnostatementaboutonlinkorofflinkpropertiesofthe
prefix.
Tocleartheofflinkflag,omittheofflinkparameterwhenyouissuethis
command.
ipv6ndprefix<IPv6prefix><IPv6prefixlength>validlifetime
{<04294967295>|infinite|variable<04294967295>}
[preferedlifetime{<04294967295>|infinite|variable}]
[noautoconfig][offlink]
ConfigurestheValidLifetimeand(optionally)thePreferredLifetimeofthe
prefix,inseconds.
TheValidLifetimeisthelengthoftime(relativetothetimethepacketissent)
thattheprefixisvalidforthepurposeofonlinkdetermination.
ThePreferredLifetimeisthelengthoftime(relativetothetimethepacketis
sent)thataddressesgeneratedfromtheprefixviastatelessaddress
autoconfigurationremainpreferred.
Note:ThePreferredLifetimevaluemustnotexceedtheValidLifetimevalue.
showipv6prefix<IPinterfacenumber>
DisplayscurrentNeighborDiscoveryprefixparameters.
Commandmode:All
546
IPv6 Prefix Policy Table Configuration

ThefollowingtabledescribestheconfigurationoptionsfortheIPv6PrefixPolicy
Table.ThePrefixPolicyTableallowsyoutooverridethedefaultaddressselection
criteria.
Table 328. IPv6PrefixPolicyTableOptions
[no]ipprefixpolicy<IPv6prefix><IPv6prefixlength>
<precedence(0100)><label(0100)>
AddsorremovesaPrefixPolicyTableentry.Enterthefollowingparameters:
IPv6addressprefix
Prefixlength
Precedence:Theprecedenceisusedtosortdestinationaddresses.Prefixes
withahigherprecedencearesortedbeforethosewithalowerprecedence.
Label:Thelabelallowsyoutoselectprefixesbasedonmatchinglabels.
Sourceprefixesarecoupledwithdestinationprefixesiftheirlabelsmatch.
showipprefixpolicy
DisplaysthecurrentPrefixPolicyTableconfiguration.
Commandmode:All
547
IP Loopback Interface Configuration

AnIPloopbackinterfaceisnotconnectedtoanyphysicalport.Aloopback
interfaceisalwaysaccessibleoverthenetwork.
Table 329. IPLoopbackInterfaceConfigurationOptions
interfaceloopback<15>
EnterInterfaceloopbackmode.
nointerfaceloopback<15>
Deletestheselectedloopbackinterface.
[no]enable
Enablesordisablestheloopbackinterface.
Commandmode:Interfaceloopback
ipaddress<IPaddress>[<subnetmask>][enable]
DefinestheloopbackinterfaceIPaddress.Youcanalsospecifyitssubnet
mask.Theenableoptionalsoenablestheloopbackinterface.
ipnetmask<subnetmask>
Definestheloopbackinterfacesubnetmask.
ipospfarea<019>
ConfigurestheOSPFareaindexusedbytheloopbackinterface.
[no]ipospfenable
EnablesordisablesOSPFfortheloopbackinterface.
noipospf
DeletestheOSPFinterface.
showinterfaceloopback<15>
DisplaysthecurrentIPloopbackinterfaceparameters.
Commandmode:All
548
DHCP Snooping
DHCPSnoopingprovidessecuritybyfilteringuntrustedDHCPpacketsandby
maintainingabindingtableoftrustedinterfaces.
Table 330. DHCPSnoopingOptions
[no]ipdhcpsnooping
EnablesordisablesDHCPSnooping.
ipdhcpsnoopingbinding<MACaddress>vlan<VLANID(14094)>
<IPaddress>port<portaliasornumber>expiry<14294967295>
Addsamanualentrytothebindingtable.
noipdhcpsnoopingbinding{<MACaddress>|all
[interfaceport<portaliasornumber>|vlan<VLANID(14094)>]}
Removesanentryfromthebindingtable.
[no]ipdhcpsnoopinginformationoptioninsert
Enablesordisablesoption82supportforDHCPSnooping.
Whenenabled,DHCPSnoopingperformsthefollowingfunctions:
ifaDHCPpacketfromaclientcontainsoption82information,the
informationisretained.
whenDHCPSnoopingforwardsaDHCPpacketfromaclient,option82
informationisaddedtothepacket.
whenDHCPsnoopingforwardaDHCPpacketfromaserver,option82
informationisremovedfromthepacket.
[no]ipdhcpsnoopingvlan<VLANID(14094)>
AddsorremovestheselectedVLANtoDHCPSnooping.Memberports
participateinDHCPSnooping.
showipdhcpsnooping
DisplaysthecurrentDHCPSnoopingparameters.
Commandmode:All
549
Remote Monitoring Configuration

RemoteMonitoring(RMON)allowsyoutomonitortrafficflowingthroughthe
switch.TheRMONMIBisdescribedinRFC2819.
ThefollowingsectionsdescribetheRemoteMonitoring(RMON)configuration
options.
RMONHistoryConfigurationonpage 550
RMONEventConfigurationonpage 551
RMONAlarmConfigurationonpage 552
RMON History Configuration

ThefollowingtabledescribestheRMONHistorycommands.
Table 331. RMONHistoryConfigurationOptions
rmonhistory<165535>interfaceoid<1127characters>
ConfigurestheinterfaceMIBObjectIdentifier.TheIFOIDmustcorrespondto
thestandardinterfaceOID,asfollows:1.3.6.1.2.1.2.2.1.1.X,whereX
istheifIndex.
rmonhistory<165535>owner<1127characters>
EnteratextstringthatidentifiesthepersonorentitythatusesthisHistory
index.
normonhistory<165535>owner
DeletestheidentificationinformationforthespecifiedHistoryindex.
rmonhistory<165535>pollinginterval<13600>
Configuresthetimeintervaloverwhichthedataissampledforeachbucket.
rmonhistory<165535>requestedbuckets<165535>
Configurestherequestednumberofbuckets,whichisthenumberofdiscrete
timeintervalsoverwhichdataistobesaved.
Themaximumnumberofbucketsthatcanbegrantedis50.
550
Table 331. RMONHistoryConfigurationOptions

normonhistory<165535>
DeletestheselectedHistoryindex.
showrmonhistory
DisplaysthecurrentRMONHistoryparameters.
Commandmode:All
RMON Event Configuration

ThefollowingtabledescribestheRMONEventcommands.
Table 332. RMONEventConfigurationOptions
rmonevent<165535>description<1127characters>
Enteratextstringtodescribetheevent.
normonevent<165535>description
Deletesthedescriptionofthespecifiedeventindex.
rmonevent<165535>owner<1127characters>
EnteratextstringthatidentifiesthepersonorentitythatusesthisEventindex.
normonevent<165535>owner
DeletestheidentificationinformationforthespecifiedEventindex.
rmonevent<165535>type{log|trap|both}
Selectsthetypeofnotificationprovidedforthisevent.Forlogevents,anentry
ismadeinthelogtableandsenttotheconfiguredsysloghost.Fortrapevents,
anSNMPtrapissenttothemanagementstation.
normonevent<165535>type
Removesnotificationprovidedforthisevent.
551
Table 332. RMONEventConfigurationOptions

normonevent<165535>
DeletestheselectedRMONEventindex.
showrmonevent
DisplaysthecurrentRMONEventparameters.
Commandmode:All
RMON Alarm Configuration

ThealarmRMONgroupcantrackrisingorfallingvaluesforaMIBobject.TheMIB
objectmustbeacounter,gauge,integer,ortimeinterval.Eachalarmindexmust
correspondtoaneventindexthattriggersoncethealarmthresholdiscrossed.
ThefollowingtabledescribestheRMONalarmcommands.
Table 333. RMONAlarmConfigurationOptions
rmonalarm<165535>alarmtype{rising|falling|either}
Configuresthealarmtypeasrising,falling,oreither(risingorfalling).
rmonalarm<165535>fallingcrossingindex<065535>
Configuresthefallingalarmeventindexthatistriggeredwhenafalling
thresholdiscrossed.
rmonalarm<165535>fallinglimit<21474836472147483647>
Configuresthefallingthresholdforthesampledstatistic.Whenthecurrent
sampledvalueislessthanorequaltothisthreshold,andthevalueatthelast
samplingintervalwasgreaterthanthisthreshold,asingleeventisgenerated.
rmonalarm<165535>interval<165535>
Configuresthetimeintervaloverwhichdataissampledandcomparedwith
therisingandfallingthresholds.Thedefaultvalueis1800.
rmonalarm<165535>oid<1127characters>
ConfiguresanalarmMIBObjectIdentifier.
rmonalarm<165535>owner<1127characters>
Enteratextstringthatidentifiesthepersonorentitythatusesthisalarmindex.
552
Table 333. RMONAlarmConfigurationOptions(continued)

normonalarm<165535>owner
DeletestheidentificationinformationforthespecifiedAlarmindex.
rmonalarm<165535>risingcrossingindex<065535>
Configurestherisingalarmeventindexthatistriggeredwhenarising
thresholdiscrossed.
rmonalarm<165535>risinglimit<21474836472147483647>
Configurestherisingthresholdforthesampledstatistic.Whenthecurrent
sampledvalueisgreaterthanorequaltothisthreshold,andthevalueatthe
lastsamplingintervalwaslessthanthisthreshold,asingleeventisgenerated.
rmonalarm<165535>sample{abs|delta}
Configuresthemethodofsamplingtheselectedvariableandcalculatingthe
valuetobecomparedagainstthethresholds,asfollows:
absabsolutevalue,thevalueoftheselectedvariableiscompareddirectly
withthethresholdsattheendofthesamplinginterval.
deltadeltavalue,thevalueoftheselectedvariableatthelastsampleis
subtractedfromthecurrentvalue,andthedifferencecomparedwiththe
thresholds.
normonalarm<165535>
DeletestheselectedRMONAlarmindex.
showrmonalarm
DisplaysthecurrentRMONAlarmparameters.
Commandmode:All
553
VMReady Configuration
ThefollowingtabledescribestheVMReadyconfigurationoptions.
Table 334. VMReadyConfigurationOptions
[no]virtenable
EnablesordisablesVMReady.BeforeyouenableVMReady,youmustdefine
oneormoreserverports.SeeServerPortConfigurationonpage 338.
Note:ThenoformofthiscommanddeletesallconfiguredVMgroups.
showvirt
Displaysthecurrentvirtualizationparameters.
Commandmode:All
554
VM Policy Bandwidth Management

Thefollowingtabledescribesthebandwidthmanagementoptionsfortheselected
VM.UsethesecommandstolimitthebandwidthusedbyeachVM.
Table 335. VMBandwidthManagementOptions
[no]virtvmpolicyvmbwidth[<MACaddress>|<UUID>|<name>|
|<IPaddress>|<indexnumber>]bwctrl
EnablesordisablesbandwidthcontrolontheVMpolicy.
virtvmpolicyvmbwidth[<MACaddress>|<UUID>|<name>|
|<IPaddress>|<indexnumber>]rxrate<010000000><max.burst(04096)>
ThefirstvalueconfiguresCommittedRatetheamountofbandwidth
availabletotraffictransmittedfromtheswitchtotheVM,inkilobitsper
second.Enterthevalueinmultiplesof64.
Thesecondvaluesconfiguresthemaximumburstsize,inkilobits.Enteroneof
thefollowingvalues:0,32,64,128,256,512,1024,2048,4096.
virtvmpolicyvmbwidth[<MACaddress>|<UUID>|<name>|
|<IPaddress>|<indexnumber>]txrate<010000000>
<max.burst(04096)>[<ACLnumber>]
ThefirstvalueconfiguresCommittedRatetheamountofbandwidth
availabletotraffictransmittedfromtheVMtotheswitch,inkilobitsper
second.Enterthevalueinmultiplesof64.
Thesecondvaluesconfiguresthemaximumburstsize,inkilobits.Enteroneof
thefollowingvalues:0,32,64,128,256,512,1024,2048,4096.
ThethirdvaluerepresentstheACLassignedtothetransmissionrate.TheACL
isaddedautomatically,insequentialorder,ifnotspecifiedbytheuser.Ifthere
arenoavailableACLs,theTXratecannotbeconfigured.EachTXrate
configurationreducesthenumberofavailableACLsbyone.
novirtvmpolicyvmbwidth[<MACaddress>|<UUID>|<name>|
|<IPaddress>|<indexnumber>]
DeletesthebandwidthmanagementsettingsfromthisVMpolicy.
showvirtvmpolicyvmbandwidth[<MACaddress>|<UUID>|<name>|
|<IPaddress>|<indexnumber>]
DisplaysthecurrentVMbandwidthmanagementparameters.
Commandmode:All
555
VM Group Configuration
ThefollowingtabledescribestheVMgroupconfigurationoptions.AVMgroupis
acollectionofmembers,suchasVMs,portsortrunkgroups.MembersofaVM
groupsharecertainproperties,includingVLANmembership,ACLs(VMAP),and
VMprofiles.
Table 336. VMGroupConfigurationOptions
[no]virtvmgroup<11024>cpu
EnablesordisablessendingunregisteredIPMCtraffictotheCPU.
[no]virtvmgroup<11024>flood
EnablesordisablesthefloodingofunregisteredIPMCtraffic.
[no]virtvmgroup<11024>key<165535>
AddsorremovesanLACPadminkeyto/fromtheVMgroup.LACPtrunks
formedwiththisadminkeywillbeincludedintheVMgroup.
[no]virtvmgroup<11024>optflood
EnablesordisablesOptimizedFloodingontheVMgroup.
[no]virtvmgroup<11024>port<portaliasornumber>
Addsorremovestheselectedportto/fromtheVMgroup.
Note:AportcanbeaddedtoaVMgrouponlyifnoVMsonthatportare
membersoftheVMgroup.
[no]virtvmgroup<11024>portchannel<152>
Addsorremovestheselectedtrunkgroupto/fromtheVMgroup.
virtvmgroup<11024>profile<profilename(139characters)>
AddstheselectedVMprofiletotheVMgroup.
Note:ThiscommandcanonlybeusediftheVMgroupisempty(thatis,itonly
hasaprofileassigned).
novirtvmgroup<11024>profile
RemovestheVMprofileassignedtotheVMgroup.
Note:ThiscommandcanonlybeusediftheVMgroupisempty(onlyhasthe
profileassigned).
556
Table 336. VMGroupConfigurationOptions(continued)

virtvmgroup<11024>stg<1128>
AssignstheVMgrouptoaSpanningTreeGroup(STG).
[no]virtvmgroup<11024>tag
EnablesordisablesVLANtaggingonportsinthisVMgroup.
virtvmgroup<11024>validate[basic|advanced]
EnablesMACaddressspoofpreventionforthespecifiedVMgroup.Default
settingisdisabled.
basicvalidationensureslightweightportbasedprotectionby
crosscheckingtheVMMACaddress,switchportandswitchIDbetween
theswitchandthehypervisor.Applicablefortrustedhypervisors,which
arenotsusceptibletoduplicatingorreusingMACaddressesonvirtual
machines.
advancedvalidationensuresheavyweightVMbasedprotectionby
crosscheckingtheVMMACaddress,VMUUID,switchportandswitchID
betweentheswitchandthehypervisor.Applicableforuntrusted
hypervisors,whicharesusceptibletoduplicatingorreusingMAC
addressesonvirtualmachines.
novirtvmgroup<11024>validate
DisablesMACaddressspoofpreventionforthespecifiedVMgroup.
virtvmgroup<11024>vlan<VLANID(14094)>
AssignsaVLANtothisVMgroup.IfyoudonotassignaVLANtotheVM
group,theswitchautomaticallyassignsthefirstunusedVLANwhenaddinga
portoraVMtotheVMGroup.
Note:IfyouaddaVMprofiletothisgroup,thegroupwillusetheVLAN
assignedtotheprofile.
[no]virtvmgroup<11024>vm{<VMMACaddressindex(04095)>|
|<MACaddress>|<UUID>|<name>|<IPaddress>}
AddsorremovesaVMto/fromtheVMgroup.Enterauniqueidentifierto
selectaVM.TheUUIDandnameparametersapplyonlyifVirtualCenter
informationisconfigured(virtvmwarevcspec).TheVMindexnumberis
foundintheVMinformationdump(showvirtvm).
Note:IftheVMisconnectedtoaportthatiscontainedwithintheVMgroup,
donotaddtheVMtotheVMgroup.
557
Table 336. VMGroupConfigurationOptions(continued)

[no]virtvmgroup<11024>vmap<1128>[serverports|
|nonserverports]
AddsorremovestheselectedVLANMapto/fromthisgroup.Youcanchoose
tolimitoperationoftheVLANMaptoserverportsonlyornonserverports
only.Ifyoudonotselectaporttype,theVMAPisappliedtotheentireVM
Group.
FormoreinformationaboutconfiguringVLANMaps,seeVMAP
novirtvmgroup<11024>
DeletestheVMgroup.
showvirtvmgroup<11024>
DisplaysthecurrentVMgroupparameters.
Commandmode:All
558
VM Check Configuration
ThefollowingtabledescribestheVMCheckvalidationoptionsusedforMAC
addressspoofprevention.
Table 337. VMCheckConfigurationOptions
virtvmcheckaclsmax<1640>
ConfiguresthemaximumnumberofACLsthatcanbesetupforMACaddress
spoofingpreventioninadvancedvalidationmode.
defaultvirtvmcheckacls
SetstodefaultmaximumnumberofACLsthatcanbesetupforMACaddress
spoofingpreventioninadvancedvalidationmode.
novirtvmcheckacls
DisablesACLbasedMACaddressspoofingpreventioninadvanced
validationmode.
virtvmcheckactionadvanced{acl|link|log}
SetsupactiontakenwhendetectingMACaddressspoofinginadvanced
validationmode:
aclregistersasyslogentryandinstallsanACLtodroptrafficincomingon
thecorrespondingswitchportoriginatingfromthespoofedMACaddress
linkregistersasyslogentryanddisablesthecorrespondingswitchport
logregistersasyslogentry
Thedefaultsettingisacl.
virtvmcheckactionbasic{link|log}
SetsupactiontakenwhendetectingMACaddressspoofinginbasicvalidation
mode:
linkregistersasyslogentryanddisablesthecorrespondingswitchport
logregistersasyslogentry
Thedefaultsettingislink.
defaultvirtvmcheckaction{advanced|basic}
SetstodefaultactiontakenwhendetectingMACaddressspoofingin
advancedorbasicvalidationmode.
559
Table 337. VMCheckConfigurationOptions

[no]virtvmchecktrust<portaliasornumber>
EnablesordisablestrustedportsforVMcommunication.
Bydefault,allportsaredisabled.
showvirtvmcheck
DisplaysthecurrentVMChecksettings.Seepage 166forsampleoutput.
Commandmode:All
VM Profile Configuration
ThefollowingtabledescribestheVMProfilesconfigurationoptions.
Table 338. VMProfileConfigurationOptions
virtvmprofile<profilename(139characters)>
DefinesanamefortheVMprofile.Theswitchsupportsupto1024VM
profiles.
novirtvmprofile<profilename(139characters)>
DeletestheselectedVMprofile.
virtvmprofileedit<profilename(139characters)>eshaping
<average(11000000000)><burst(11000000000)><peak(11000000000)>
Configurestrafficegressshapingparametersimplementedinthehypervisor,
asfollows:
Averagetraffic,inkilobitspersecond.
Maximumburstsize,inkilobits.
Peaktraffic,inkilobitspersecond.
Deletetrafficshapingparameters.
novirtvmprofile<profilename(139characters)>eshaping
DeletesthetrafficegressshapingparametersforthespecifiedVMprofile.
560
Table 338. VMProfileConfigurationOptions

virtvmprofileedit<profilename(139characters)>shaping
<average(11000000000)><burst(11000000000)><peak(11000000000)>
Configurestrafficshapingparametersimplementedinthehypervisor,as
follows:
Averagetraffic,inkilobitspersecond.
Maximumburstsize,inkilobits.
Peaktraffic,inkilobitspersecond.
novirtvmprofile<profilename(139characters)>shaping
DeletesthetrafficshapingparametersforthespecifiedVMprofile.
virtvmprofileedit<profilename(139characters)>vlan
<VLANID(14094)>
AssignsaVLANtotheVMprofile.
showvirtvmprofile[<profilename>]
DisplaysthecurrentVMProfileparameters.
Commandmode:All
561
VMWare Configuration
ThefollowingtabledescribestheVMwareconfigurationoptions.Whenyou
configuretheVMwareVirtualCenter,theVMAgentmoduleintheswitchcan
performadvancedfunctionalitybycommunicatingwiththeVMwaremanagement
console.TheVirtualCenterprovidesVMandHostnames,IPaddresses,Virtual
Switchandportgroupinformation.TheVMAgentontheswitchcommunicates
withtheVirtualCentertosynchronizeVMprofilesbetweentheswitchandthe
VMwarevirtualswitch.
Table 339. VMWareConfigurationOptions
virtvmwarehbport<165535>
ConfigurestheUDPportnumberusedforheartbeatcommunicationfromthe
VMhosttotheVirtualCenter.
Thedefaultvalueisport902.
defaultvirtvmwarehbport
Setstodefaultesx/esxiservertovcenterheartbeatudpport.
virtvmwarehello[enable|haddr<IPaddress>|
|hport<portaliasornumber>|htimer<160>]
ConfiguresCDP(CiscoDiscoveryProtocol)advertisementssentperiodically
toVMwareESXhypervisors.ExchangingCDPmessagewithESXhypervisors
facilitatesMACaddressspoofprevention.Defaultsettingisdisabled.
enableenablesCDPadvertisementstransmission.
haddradvertisesaspecificIPaddressinsteadofthedefault0.0.0.0IP.
hportenablesportsonwhichCDPadvertisementsaresent.
htimersetsthenumberofsecondsbetweensuccessiveCDP
advertisements.Thedefaultvalueis30seconds.
defaultvirtvmwarehellohtimer
SetstodefaultHELLOperiodicity.
novirtvmwarehello[enable|hport<portaliasornumber>]
DisablesCDPadvertisementtransmissionscompletelyoronlyonspecific
ports.
562
Table 339. VMWareConfigurationOptions

virtvmwarevcspec<IPaddress><username>[noauth]
DefinestheVirtualCentercredentialsontheswitch.Onceyouconfigurethe
VirtualCenter,VMAgentfunctionalityisenabledacrossthesystem.
Youarepromptedforthefollowinginformation:
IPaddressoftheVirtualCenter
UsernameandpasswordfortheVirtualCenter
WhethertoauthenticatetheSSLsecuritycertificate(yesorno)
novirtvmwarevcspec
DeletestheVirtualCentercredentialsontheswitch.
showvirtvmware
DisplaysthecurrentVMwareparameters.
Commandmode:All
Miscellaneous VMready Configuration

YoucanpreconfigureMACaddressesasVMOrganizationUniqueIdentifiers
(OUIs).TheseconfigurationcommandsareonlyavailableusingtheLenovoN/OS
CLIandtheMiscellaneousVMreadyConfigurationMenu.Thefollowingtable
describestheVMreadyconfigurationoptions.
Table 340. VMreadyConfigurationOptions
[no]virtvmrmisclmac
EnablesordisablestheswitchtotreatlocallyadministeredMACaddressesas
VMs.
virtvmrmiscoui<3byteVMMACOUI><VendorName>
AddsaMACOUI.
novirtvmrmiscoui<3byteVMMACOUI>
RemovesaMACOUI.
showvirtoui
DisplaysalltheconfiguredMACOUIs.
Commandmode:All
563
Edge Virtual Bridge Configuration

YoucanconfigureyourswitchtouseEdgeVirtualBridging(EVB).Thefollowing
tabledescribesEVBconfigurationcommands.
Table 341. EdgeVirtualBridgeConfigurationOptions
EnterVirtualStationInterfaceDatabaseconfigurationmode.Formoredetails,
seepage 565.
virtevbprofile<profilenumber>
EnterVirtualStationInterfaceProfileconfigurationmode.Formoredetails,
seepage 567.
showvirtevbvsidb<VSIDBnumber>
DisplaysthecurrentVirtualStationInterfacedatabaseinformation.
Commandmode:All
showvirtevbprofile[<profilenumber>]
DisplaysthecurrentEVBprofileparameters.
Commandmode:All
564
Edge Virtual Bridge VSI Type Database Configuration

ThefollowingtabledescribestheEVBVSITypeDatabaseconfigurationoptions.
Table 342. EdgeVirtualBridgeVSITypeDatabaseConfigurationOptions
virtevbupdatevsidb<VSIDBnumber>
UpdateVSItypesfromtheVSIdatabase.
Commandmode:All
clearvirtevbvsidb[managerid<0255>|typeid<116777215>|
|version<0255>]
ClearslocalVSItypescache.
clearvirtevbvsi[macaddress<MACaddress>|port
<portaliasornumber>|typeid<116777215>|vlan<VLANID(14094)>]
ClearsVSIdatabaseassociations.
EnterVirtualStationInterfaceDatabaseconfigurationmode.
filename<filename>
SetstheVirtualStationInterfaceTypedatabasedocumentname.
Commandmode:VSIDatabase
nofilename
DeletestheVirtualStationInterfaceTypedatabasedocumentname.
filepath<filepath>
SetstheVirtualStationInterfaceTypedatabasedocumentpath.
nofilepath
DeletestheVirtualStationInterfaceTypedatabasedocumentpath.
host<IPaddress>
SetstheVirtualStationInterfaceTypedatabasemanagerIPaddress
port<165534>
SetstheVirtualStationInterfaceTypedatabasemanagerport.
565
Table 342. EdgeVirtualBridgeVSITypeDatabaseConfigurationOptions(continued)

protocol{http|https}
SetstheVirtualStationInterfaceTypedatabasetransportprotocol.
ThedefaultsettingisHTTP.
updateinterval<5300>
SetstheVirtualStationInterfaceTypedatabaseupdateintervalinseconds.
[no]updateinterval
DisablestheVirtualStationInterfaceTypedatabaseperiodicupdate.
novirtevbvsidb<VSIDBnumber>
ResetstheVirtualStationInterfaceTypedatabaseinformationtothedefault
values.
showvirtevbvsitypes[mgrid<0255>|typeid<116777215>|
|version<0255>]
DisplaysthecurrentVirtualStationInterfaceTypedatabaseparameters.
Commandmode:All
showvirtevbvsidb<VSIDBnumber>
DisplaysthecurrentVirtualStationInterfacedatabaseinformation.
Commandmode:All
566
Edge Virtual Bridge VSI Type Profile Configuration

ThefollowingtabledescribestheVirtualStationInterfaceTypeprofile
configurationoptions.
Table 343. EdgeVirtualBridgeVSITypeProfileConfigurationOptions
virtevbprofile<profilenumber>
EnterVirtualStationInterfacetypeprofileconfigurationmode.
[no]reflectiverelay
EnablesordisablesVEPAmode(ReflectiveRelaycapability).
Commandmode:EVBProfile
[no]vsidiscovery
EnablesordisablesVSIDiscovery(ECPandVDP).
Commandmode:EVBProfile
novirtevbprofile<profilenumber>
DeletesthespecifiedEVBprofile.
evbprofile<116>
AppliesthespecifiedEVBprofilefortheport.AutomaticallyenablesLLDP
EVBTLVonthecorrespondingport.
noevbprofile
ResetsEVBprofilefortheport.AutomaticallydisablesLLDPEVBTLVonthe
correspondingport.
showvirtevbprofile[<116>]
DisplaysthecurrentEVBprofileparameters.
Commandmode:All
showvirtevbprofileports
DisplaysallEVBprofileparametersincludingports.
Commandmode:All
567
OpenFlow Configuration
OpenFlowisanopeninterfaceusedtocontroltheforwardingplaneincompatible
switchesandroutersremotely,fromanexternalcontroller.TheRackSwitchG8052
canfunctionaseitheraHybridorOpenFlowonlyswitch:
InHybridmode(default),anOpenFlowpipelinecanbesetuptoruninparallel
tothenormalEthernetswitchingpipeline.Thetwopipelinesarecompletely
separate,eachwithitsowndedicatedportsandconfinedpacketflows.
InOpenFlowonlymode,thenormalEthernetswitchingcapabilitiesare
disabled,andtheRackSwitchG8052behavesasapureOpenFlowswitch.
ThefollowingtabledescribestheOpenFlowconfigurationoptions.
Table 344. OpenFlowConfigurationOptions
bootopenflow{v1|v13}
SwitchesbetweenOpenFlowversion1.0andOpenFlowversion1.3onreboot.
Thedefaultsettingisv1.
bootprofiledefault
StartstheswitchinHybridmodeonreboot.
Thisisthedefaultsetting.
bootprofileopenflow
StartstheswitchinOpenFlowonlymodeonreboot.
[no]openflowenable
EnablesordisablesOpenFlow.
Note:ThefollowingfeaturesarenotsupportedwhenOpenFlowisenabled:
ACL,VNICegress,VMreadyVMAP,FCOE,IPv6,IPMC,ECNandMACL.
openflowfdbpriority<165535>
ConfiguresapriorityvaluetomapflowswithmatchingprioritytoFDB
entries,iftheflowusesdestinationMACaddressandVLANasthematching
qualifierandsingleportastheaction.
Note:Whenyouissuethiscommand,allregisteredflowentriesarecleared.
noopenflowfdbpriority
ResetspriorityvaluerequiredforFDBflowstothedefaultvalueof1000.
568
Table 344. OpenFlowConfigurationOptions(continued)

openflowfdbtimeout<1300>
Configuresatimeintervalinsecondsforperiodicallyclearingdynamically
learnedFDBentriesonedgeports.
noopenflowfdbtimeout
DisablesperiodicalclearingofdynamicallylearnedFDBentriesonedgeports.
[no]openflowmgmtport<portaliasornumber>
EnablesordisablesOpenFlowmanagementfortheselectedport.Use
OpenFlowmanagementportstocommunicatewithanOpenFlowController.
InHybridmode,controllerscanalsoconnecttotheswitchusinglegacyports.
Note:SupportedonlyinOpenFlowOnlymode.
openflowinstance<12>
EntersOpenFlowInstancecommandmodeforthespecifiedinstanceID.
noopenflowinstance<12>
Deletestheinstanceandclearsflowtableandstatisticsforthespecified
instanceID.
[no]buffer
EnablesordisablesbufferingsupportforOpenFlowpackets.
Commandmode:OpenFlowInstance
connectretry<18>
Configuresthemaximumnumberofattemptstoestablishconnectiontoa
controller,beforeassumingthecontrollerisdown.
Thedefaultvalueis4.
noconnectretry
Resetstheconnectretryvalueto4.
controller<14>address<IPaddress>
ConfigurestheIPaddressoftheOpenFlowController.
569

controller<14>port<TCPportnumber(165535)>
ConfigurestheTCPportusedforcommunicationwiththeController.
nocontroller<14>
DeletestheselectedcontrollerfromthespecifiedinstanceID.
dpid<hexstring>
Appliesan8byteDatapathIDtotheinstance,whichuniquelyidentifiesan
OpenFlowinstanceinanOpenFlowenvironment.
ThedefaultvalueistheinstanceIDfollowedbytheswitchMAC.
Note:TheDatapathIDmustbeuniqueamongtheswitchescontrolledbya
singleOpenFlowcontroller.
nodpid
ResetstheinstancesDatapathIDtothedefaultvalue(instanceIDfollowedby
theswitchMAC).
echoreplytimeout<265535>
Configuresthedurationinsecondstheswitchwillwaittoreceiveanecho
replyfromthecontroller,beforeassumingfailure.
Note:Theechoreplytimeoutvaluemustbelowerthanthe
echorequestintervalvalue.
noechoreplytimeout
Resetstheechoreplytimeouttothedefaultvalueof15seconds.
echorequestinterval<565535>
Configuresthemaximumdurationinsecondstheswitchwillkeepsending
echorequeststoanonresponsivecontroller.
Note:Theechorequestintervalvaluemustbehigherthanthe
echoreplytimeoutvalue.
570

noechorequestinterval
Resetstheechorequestintervaltothedefaultvalueof30seconds.
[no]edgeport<portaliasornumber>
EnablesordisablestheselectedportasanOpenFlowedgeport(outsideport).
Edgeportsareusuallyconnectedtoservers.
Note:LearningandfloodblockingareturnedoninOpenFlowedgeports.
[no]edgeportportchannel<1104>
EnablesordisablestheselectedportchannelasanOpenFlowedgeportchannel
(outsideportchannel).Edgeportchannelsareusuallyconnectedtoservers.
Note:LearningandfloodblockingareturnedoninOpenFlowedge
portchannels.
Note:SupportedonlyinOpenFlow1.3.
emergency[timeout<03600>]
Forcestheinstanceinemergencymode.
Thetimeoutparameterconfiguresthedurationinsecondsafterwhichthe
emergencymodeexpires.
noemergency[timeout]
Bringstheinstanceoutofemergencymode.
Thetimeoutparameterresetstheemergencymodedurationtothedefault
valueof30seconds.
[no]enable
Enablesordisablestheinstance.
Note:Whendisablinganinstance,itsflowtablesandstatisticsarecleared.
571

maxflowacl<01500>
maxflowacl<02000>
EnablesordisablesthemaximumflowACLoption,whichensuresadedicated
maximumnumberofACLflowsareavailablefortheinstance.Themaximum
numberofentriesis1500inHybridmodeand2000inOpenFlowOnlymode.
Thetotalnumberof1500/2000entriesissharedbetweeninstances.
Bydefault,maxflowaclissetto0,allowinginstancestodynamically
accesstheavailableACLflowslotsuntildepletion.
Note:SettingmaxflowaclmanuallylimitsthenumberofACLflowslots
availableforotherinstancesbythecorrespondingvalue.
nomaxflowacl
SetstheinstancesmaximumnumberofACLbasedflowstothedefaultvalue
of0(dynamicallocation).
maxflowmcastfdb<01024>
EnablesordisablesthemaximumflowmulticastFDBoption,whichensuresa
dedicatedmaximumnumberofFDBmulticastflowsareavailableforthe
instance.Thetotalnumberofentriesissharedbetweeninstances.
Bydefault,maxflowmcastfdbissetto0,allowinginstancesto
dynamicallyaccesstheavailableFDBmulticastflowslotsuntildepletion.
Note:SettingmaxflowmcastfdbmanuallylimitsthenumberofFDB
multicastflowslotsavailableforotherinstancesbythecorrespondingvalue.
nomaxflowmcastfdb
SetstheinstancesmaximumnumberofFDBbasedmulticastflowstothe
defaultvalueof0(dynamicallocation).
maxflowucastfdb<030976>
EnablesordisablesthemaximumflowunicastFDBoption,whichensuresa
dedicatedmaximumnumberofFDBunicastflowsavailablefortheinstance.
Thetotalnumberofentriesissharedbetweeninstances.
Bydefault,maxflowucastfdbissetto0,allowinginstancesto
dynamicallyaccesstheavailableFDBunicastflowslotsuntildepletion.
Note:SettingmaxflowucastfdbmanuallylimitsthenumberofFDB
unicastflowslotsavailableforotherinstancesbythecorrespondingvalue.
572

nomaxflowucastfdb
SetstheinstancesmaximumnumberofFDBbasedunicastflowstothedefault
valueof0(dynamicallocation).
[no]member<portaliasornumber>
EnablesordisablesportusagebytheOpenFlowinstancefordatatraffic.
[no]memberportchannel<1104>
EnablesordisablesstaticportchannelorLACPusagebytheOpenFlow
instancefordatatraffic.
Note:StaticportchannelsandLACPsaresupportedonlyinOpenFlow1.3.
minflowtimeout<1300>
Setstheminimumnumberofsecondsafterwhichaflowcanbeclearedfrom
theinstancestables.
Thedefaultvalueis0,meaningcontrollerprovidedvaluesareusedinstead.
nominflowtimeout
Setsthenumberofsecondsafterwhichaflowcanbeclearedfromthe
instancestablestothedefaultvalueof0(controllerprovidedvalues).
mirrortocontrollercookie<0x00xffffffffffffffff>
Setstheflowcookieforpacketssenttocontrollerasaresultofa
mirrortocontrollersetting(flowissettooutputthepackettoacontrollerin
additiontoanotherdestination).
Thedefaultvalueis0xffffffffffffffff.
nomirrortocontrollercookie
Resetsthemirrortocontrollerflowcookietothedefaultvalueof
0xffffffffffffffff.
573

sendtocontrollercookie<0x00xffffffffffffffff>
Setstheflowcookieforpacketssenttocontrollerasaresultofa
sendtocontrollersetting(flowissettooutputthepacketonlytoacontroller).
nosendtocontrollercookie
Resetsthesendtocontrollerflowcookietothedefaultvalueof
0xffffffffffffffff.
statictable
Configuresstaticflows.Forcommandoptions,seepage 577.
tablemisscookie<0x00xffffffffffffffff>
Setstheflowcookieforpacketssenttocontrollerasaresultofatablemiss
setting(sendinputpacketsthatdontmatchanyflowentriestocontroller).
notablemisscookie
Resetsthetablemissflowcookietothedefaultvalueof
0xffffffffffffffff.
[no]tablemisscontroller
Setsordisablesthetablemissflowentrytosendpacketsunmatchedby
anyflowentriestothecontroller.
Thedefaultvalueisdisabled,meaningpacketsunmatchedbyflowentries
aredropped.
[no]openflowfdbaging
EnablesordisablesperiodicalclearingofdynamicallylearnedFDBentrieson
aspecificport.
ThedefaultvalueisdisabledonOpenFlowedgeports.
574

[no]openflowstaticstationmove
EnablesordisablesforwardingframesthathavesourceMACaddresses
conflictingwithentriesinthestaticFDBtable.Thisenablesequalcost
multipathroutingandusecaseswhereIPSandFirewalldevicesforward
packetswithoutchangingthesourceMACaddress.
clearopenflow{group|table[basic|emergency|dynamic|
|static]}
ClearsOpenFlowdataforallinstances:
ThegroupoptionclearstheOpenFlow1.3grouptable.
ThetableoptionclearsallbasicandemergencyOpenFlowtablesin
OpenFlow1.0.InOpenFlow1.3,clearsthedynamicandstaticflowtables.
ThebasicoptionclearsonlythebasicOpenFlowtables.
TheemergencyoptionclearsonlytheemergencyOpenFlowtables.
ThedynamicoptionclearsonlythedynamicOpenFlowtables.
ThestaticoptionclearsonlythestaticOpenFlowtables.
clearopenflowinstance<12>{group|table
[basic|emergency|dynamic|static]}
ClearsOpenFlowdataforthespecifiedinstanceID:
ThegroupoptionclearstheOpenFlow1.3grouptable.
ThetableoptionclearsallbasicandemergencyOpenFlowtablesin
OpenFlow1.0.InOpenFlow1.3,clearsthedynamicandstaticflowtables.
ThebasicoptionclearsonlythebasicOpenFlowtable.
TheemergencyoptionclearsonlytheemergencyOpenFlowtable.
ThedynamicoptionclearsonlytheemergencyOpenFlowtables.
ThestaticoptionclearsonlythestaticOpenFlowtables.
575

showopenflow[flowallocation|group|information|table]
DisplaysthecurrentOpenFlowconfiguration.Formoreinformation,see
page 147.
flowallocationdisplaystheconfigured,currentandmaximum
numberofflowsforallOpenFlowinstances.Formoreinformation,see
page 149.
groupdisplaysgroupinformationforallOpenFlow1.3instances.Formore
informationdisplaystheconfigurationforallOpenFlowinstances.For
moreinformation,seepage 152.
tabledisplaysthebasicandemergencyflowtablesforallOpenFlow
instancesinOpenFlow1.0.InOpenFlow1.3,displaysthedynamicand
staticflowtables.Formoreinformation,seepage 154
Commandmode:All
showopenflowinstance<12>[group|information|table]
DisplaysOpenFlowinformationforthespecifiedinstanceID:
groupdisplaysgroupinformationperinstance.
informationdisplaystheinstanceconfiguration.
tabledisplaysthebasicandemergencyflowtablesperinstancein
OpenFlow1.0.InOpenFlow1.3,displaysthedynamicandstaticflowtables
perinstance.
Commandmode:All
576
Static Flows Configuration

StaticflowsareACLOpenFlowentriessetupmanuallyfromtheCLIbythe
administrator.Staticflowscannotbedeleted/modifiedbyOpenFlowcontrollers
andwillcontinuetofunctionwhentheswitchgoesintoemergencymode.Evenif
theyqualifyasFDBentriesbasedontheirsettings,staticflowsarealwaysstoredas
ACLentries.Atotalofmaximum1000staticflowspoolissharedbetweenall
OpenFlowinstances.
Thefollowingtabledescribesthestaticflowconfigurationoptions:
Table 345. StaticFlowsConfigurationOptions
statictableaddindex<11000>match<matchingqualifier>
actions<matchingqualifier>[options<matchingqualifier>]
priority<065535>
Addsastaticflowentrytotheinstance.
statictablemodifyindex<11000>match<matchingqualifier>
actions<matchingqualifier>[options<matchingqualifier>]
priority<065535>
Overwritesastaticflowentry.
statictableremoveindex<11000>
Deletesastaticflowentry.
clearopenflowtablestatic
Deletesallstaticflowentries.
577
Thefollowingtabledescribestheavailablematchingqualifiers:
Table 346. StaticFlowMatchingQualifiersinOpenFlow1.0
Qualifier
Value
ingressport
Portofinstance
srcmac
SourceMACaddress
dstmac
DestinationMACaddress
vlanid
VLANidentifier(04095+65535(untagged))
vlanpriority
802.1pPriorityCodePoint(07)
srcip
SourceIPaddress
dstip
DestinationIPaddress
srcport
L4sourceport(065536)
dstport
L4destinationport(065535)
ethertype
arp/0806orip/0800or(hexvalue<=65535)
protocol
tcporudpor0255
tos
IPTypeofService(0255)
type
requestorreply(canbesetonlyifethertypeis
ARP)
all
Applicabletoalltraffic
OpenFlow1.3:
578
Qualifier
Value
inport
switchinputport
inportchannel
switchinputportchannel
inphyport
switchphysicalinputport,validonlywheninportis
specified
ethsrc
sourceMACaddressandmask
ethdst
destinationMACaddressandmask
vlanvid
VLANidentifier(04095+65535(untagged))
vlanpcp
802.1p(07)
ipv4src
sourceIPv4addressandmask
ipv4dst
destinationIPv4addressandmask
tcpsrc
TCPsourceport(065535)
tcpdst
TCPdestinationport(065535)
OpenFlow1.3:
Qualifier
Value
udpsrc
UDPsourceport(065535)
udpdst
UDPdestinationport(065535)
icmpv4type
ICMPv4type
icmpv4code
ICMPv4code
ethtype
arp/0806orip/0800or(hexvalue<=65535)
ipproto
tcporudpor0255
ipdscp
IPDSCP(6bitsinToSfield)
arpop
requestorreply(canbesetonlyifethtypeisARP)
all
allqualifiersoranyqualifier
Thefollowingtabledescribestheavailableactions:
Table 347. StaticFlowActionsinOpenFlow1.0
Action
Value
output
all,inport,controlleroravalidport
setsrcmac
ChangesourceMACaddress
setdstmac
ChangedestinationMACaddress
stripvlanid
RemoveVLANidentifier
setvlanpriority
Set802.1pprioritycodepointvalue(07)
setnwtos
SetIPTypeofService(0255)
drop
Droppacket
maxlen
Maximumlengthtosendtocontroller
Table 348. StaticFlowActionsinOpenFlow1.3
Action
Value
output
all,inport,controlleroravalidport
outputportchannel
outputonavalidportchannel(statictrunkgroupor
staticLACPtrunkgroup)
setethsrc
changesourceMACaddress
setethdst
changedestinationMACaddress
pushvlan
pushanewVLANtag
popvlan
poptheouterVLANtag
setvlanvid
setVLANID
579
Table 348. StaticFlowActionsinOpenFlow1.3(continued)
580
Action
Value
setvlanpcp
set802.1ppriority(07)
setipdscp
setIPDifferentiatedServicesCodePoint(063)
drop
dropthepacket
Microburst Detection
Microburstsareshortpeaksindatatrafficthatmanifestasasuddenincreaseinthe
numberofdatapacketstransmittedoveraspecificmillisecondleveltimeframe,
potentiallyoverwhelmingnetworkbuffers.Microburstdetectionallowsusersto
analyzeandmitigatemicroburstrelatedincidents,thuspreventingnetwork
congestion.
Table 349. MicroburstDetectionConfigurationOptions
[no]microburstenable
Enablesordisablesmicroburstdetection.
microburstinterval<210000>
Configuresmicroburstdetectionintervalgranularityinmilliseconds.
Thedefaultsettingis5miliseconds.
microburstportthreshold<portaliasornumber><132767>
Configuresthenumberofmemorycellsaportisallowedtoaccessfromthe
sharedservicepool.Thereisnodedicatednumberofmemorycellsforaport.
Ifthisthresholdisreached,itmeanstheportiscongestedandneedstoaccess
additionalmemoryfromthesharedservicepool.
showmicroburstmicroburststatus
Displaysmicroburststateand,ifapplicable,burstingtimeforeachport.
Commandmode:All
showmicroburstpktstats
Displaysmemorycellusageforegressunicastandmulticastpackets,broken
downbyportandQoSqueue.
Commandmode:All
showmicroburstportlog
Displaysmemorycellallocationandusageforingresspacketsoneachport.
Commandmode:All
581
Service Location Protocol Configuration

ServiceLocationProtocol(SLP)enablesnetworkeddevicestorequest/announce
servicesoveralocalareanetworkwithoutpriorconfiguration.InanSLP
environment,devicesmayhavethefollowingroles:
UserAgents(UA)aredevicesrequestingservices.
ServiceAgents(SA)aredevicesprovidingservices.
DirectoryAgents(DA)aredevicescachingservicesprovidedbySAs.When
presentinanSLAsetup,DAsmediateallcommunicationbetweenUAsand
SAs.
WhenSLPisenabled,theRackSwitchG8052behavesasaServiceAgentproviding
systemsmanagementservices.
Table 350. ServiceLocationProtocolOptions
[no]ipslpactivedadiscoveryenable
Enablesordisablesactivedirectoryagentdiscovery.
Note:Instacking,thiscommandisavailableonlyontheMasterswitch.
ipslpactivedadiscoverystartwaittime<110>
NumberofsecondstowaitafterenablingSLPbeforeattemptingactiveDA
discovery,ifactiveDAdiscoveryisenabled.
[no]ipslpenable
EnablesordisablesSLP.
clearipslpdirectoryagents
Clearsdirectoryagentsdiscovered.
showipslpdirectoryagents[ipaddress]
DisplaysDAinformation.
Commandmode:All
582
Table 350. ServiceLocationProtocolOptions(continued)

showipslpinformation
DisplaysSLPinformation.
Commandmode:All
showipslpuseragents[ipaddress]
DisplaysUAinformation.
Commandmode:All
583
Configuration Dump
Thedumpprogramwritesthecurrentswitchconfigurationtotheterminalscreen.
Tostartthedumpprogram,attheprompt,enter:
RS G8052# showrunningconfig
Theconfigurationisdisplayedwithparametersthathavebeenchangedfromthe
defaultvalues.Thescreendisplaycanbecaptured,edited,andplacedinascript
file,whichcanbeusedtoconfigureotherswitchesthroughaTelnetconnection.
WhenusingTelnettoconfigureanewswitch,pastetheconfigurationcommands
fromthescriptfileatthecommandlinepromptoftheswitch.Theactive
configurationcanalsobesavedorloadedviaSFTP/FTP/TFTP,asdescribedon
page 585.
584
Saving the Active Switch Configuration

Whenthecopyrunningconfigcommandisused,theswitchsactive
configurationcommands(asdisplayedusingshowrunningconfig)willbe
uploadedtothespecifiedscriptconfigurationfileontheFTP/TFTP/SFTPserver.To
starttheswitchconfigurationupload,attheprompt,enter:
RS G8052# copyrunningconfigftp
or:
RS G8052# copyrunningconfigsftp
or:
RS G8052# copyrunningconfigtftp
Theswitchpromptsyoufortheserveraddressandfilename.
Note: Theoutputfileisformattedwithlinebreaksbutnocarriagereturnsthe
filecannotbeviewedwitheditorsthatrequirecarriagereturns(suchasMicrosoft
Notepad).
Note: IftheFTP/TFTP/SFTPserverisrunningSunOSortheSolarisoperating
system,thespecifiedconfigurationfilemustexistpriortoexecutingthecopy
runningconfigcommandandmustbewritable(setwithproperpermission,
andnotlockedbyanyapplication).Thecontentsofthespecifiedfilewillbe
replacedwiththecurrentconfigurationdata.
585
Restoring the Active Switch Configuration

Whenthecopyrunningconfigcommandisused,theactiveconfiguration
willbereplacedwiththecommandsfoundinthespecifiedconfigurationfile.The
filecancontainafullswitchconfigurationorapartialswitchconfiguration.
Tostarttheswitchconfigurationdownload,attheprompt,enter:
RS G8052# copyftprunningconfig
or:
RS G8052# copysftprunningconfig
or:
RS G8052# copytftprunningconfig
Theswitchpromptsyoufortheserveraddressandfilename.
586
USB Copy
IfaUSBdriveisinsertedintotheUSBport,youcancopyfilesfromtheswitchto
theUSBdrive,orfromtheUSBdrivetotheswitch.Youalsocanboottheswitch
usingsoftwareorconfigurationfilesfoundontheUSBdrive(seeUSBBoot
Configurationonpage 604).
Copy to USB
UsethefollowingcommandtocopyafilefromtheswitchtotheUSBdrive:
usbcopytousb<filename>{active|boot|crashdump|image1|image2|
|syslog}
Note: Notavailableinstacking.
Inthisexample,theactiveconfigurationfileiscopiedtoadirectoryontheUSB
drive:
RS G8052# usbcopytousba_folder/myconfig.cfgactive
Copy from USB

UsethefollowingcommandtocopyafilefromtheUSBdrivetotheswitch:
usbcopyfromusb<filename>{active|boot|image1|image2}
Note: Notavailableinstacking.
Inthisexample,theactiveconfigurationfileiscopiedfromadirectoryontheUSB
drive:
RS G8052# usbcopyfromusba_folder/myconfig.cfgactive
Thenewfilereplacesthecurrentfile.
Note: Donotusetwoconsecutivedotcharacters(..).Donotuseaslashcharacter
(/)tobeginafilename.
587
588
Chapter 5. Operations Commands

Operationscommandsgenerallyaffectswitchperformanceimmediately,butdo
notalterpermanentswitchconfigurations.Forexample,youcanuseOperations
commandstoimmediatelydisableaport(withouttheneedtoapplyorsavethe
change),withtheunderstandingthatwhentheswitchisrebooted,theportreturns
toitsnormallyconfiguredoperation.
Thesecommandsenableyoutoalterswitchoperationalcharacteristicswithout
affectingswitchconfiguration.
Table 351. GeneralOperationsCommands
accesstnetsshc
ClosesallopenTelnetandSSHconnections.
consolelog
Enablesordisablessessionconsolelogging.
CommandMode:PrivilegedEXEC
ntpsend
AllowstheusertosendrequeststotheNTPserver.
password<1128characters>
Allowstheusertochangethepassword.Youmustenterthecurrentpassword
inuseforvalidation.Theswitchpromptsforanewpasswordbetween1128
characters.
clearlogging
ClearsallSyslogmessages.
clearopenflowtable[basic|dynamic|emergency|static]
ClearsOpenFlowtables.
ThebasicoptionclearsonlythebasicOpenFlowtable.
ThedynamicoptionclearsonlythedynamicOpenFlowtable.
TheemergencyoptionclearsonlytheemergencyOpenFlowtable.
ThestaticoptionclearsonlythestaticOpenflowtable.
589
Operations-Level Port Commands

Operationslevelportoptionsareusedfortemporarilydisablingorenablinga
port,andforresettingtheport.
Table 352. PortOperations
interfaceport<portaliasornumber>dot1xinit
Reinitializes802.1xaccesscontrolontheport.
interfaceport<portaliasornumber>dot1xreauthenticate
Immediatelystartsreauthenticationontheport.
[no]interfaceport<portaliasornumber>rmon
Temporarilyenablesordisablesremotemonitoringoftheport.Theportwill
bereturnedtoitsconfiguredoperationmodewhentheswitchisrebooted.
interfaceport<portaliasornumber>shutdown
Temporarilydisablestheport.Theportwillbereturnedtoitsconfigured
operationmodewhentheswitchisrebooted.
nointerfaceport<portaliasornumber>shutdown
Temporarilyenablestheport.Theportwillbereturnedtoitsconfigured
operationmodewhentheswitchisrebooted.
showinterfaceport<portaliasornumber>operation
Displaystheportinterfaceoperationalstate.
CommandMode:All
590
Operations-Level VRRP Commands

VRRPoperationcommandsarelistedinthefollowingtable.
Table 353. VirtualRouterRedundancyOperations
routervrrpbackupgroup
Forcesthespecifiedmastervirtualrouteronthisswitchintobackupmode.
Thisisgenerallyusedforpassingmastercontrolbacktoapreferredswitch
oncethepreferredswitchhasbeenreturnedtoserviceafterafailure.When
thiscommandisexecuted,thecurrentmastergivesupcontrolandinitiatesa
newelectionbytemporarilyadvertisingitsownprioritylevelas0(lowest).
Afterthenewelection,thevirtualrouterforcedintobackupmodebythis
commandwillresumemastercontrolinthefollowingcases:
Thisswitchownsthevirtualrouter(theIPaddressesofthevirtualrouter
anditsIPinterfacearethesame).
Thisswitchsvirtualrouterhasahigherpriorityandpreemptionisenabled.
Therearenoothervirtualroutersavailabletotakemastercontrol.
Chapter 5: Operations Commands
591
VMware Operations
UsethesecommandstoperformminoradjustmentstotheVMwareoperation.Use
thesecommandstoperformVirtualSwitchoperationsdirectlyfromtheswitch.
NotethatthesecommandsrequiretheconfigurationofVirtualCenteraccess
information(virtvmwarevcspec).
Table 354. VMwareOperations
virtvmwareexport<VMprofilename><VMwarehostID>
<VirtualSwitchname>
ExportsaVMProfiletoaVMwarehost.
Useoneofthefollowingidentifierstospecifyeachhost:
UUID
IPaddress
Hostname
YoumayenteraVirtualSwitchname,orenteranewnametocreateanew
VirtualSwitch.
CommandMode:All
virtvmwarepg<PortGroupname><hostID><VSwitchname>
<VLANID(14094)><shapingenabled>[<averageKbps><burstKB>
<peakKbps>]
AddsaPortGrouptoaVMwarehost.Youarepromptedforthefollowing
information:
PortGroupname
VMwarehostID(UsehostUUID,hostIPaddress,orhostname.)
VirtualSwitchname
VLANIDofthePortGroup
Whethertoenablethetrafficshapingprofile(1or0).Ifyouchoose1(yes),
youarepromptedtoenterthetrafficshapingparameters.
CommandMode:All
novirtvmwarepg<PortGroupname><hostID>
RemovesaPortGroupfromaVMwarehost.Useoneofthefollowing
identifierstospecifythehost:
UUID
IPaddress
Hostname
CommandMode:All
virtvmwarescan
PerformsascanoftheVMAgent,andupdatesVMinformation.
CommandMode:All
592
Table 354. VMwareOperations(continued)

virtvmwareupdpg<PortGroupname><hostID><VLANID(14094)>
[<shapingenabled><average(11000000000)><burst(11000000000)>
<peak(11000000000)>]
UpdatesaVMwarehostsPortGroupparameters.Useoneofthefollowing
identifiersforthehostID:
UUID
IPaddress
Hostname
Enterthetrafficshapingparametersasfollows:
Shapingenabled
Averagetraffic,inkilobitspersecond
Maximumburstsize,inkilobytes
Peaktraffic,inkilobitspersecond
CommandMode:All
virtvmwarevmacpg<VMNICMACaddress><PortGroupname>
ChangesaVMNICsconfiguredPortGroup.
CommandMode:All
[no]virtvmwarevsw<hostID><VirtualSwitchname>
AddsorremovesaVirtualSwitchtoaVMwarehost.Useoneofthefollowing
UUID
IPaddress
Hostname
CommandMode:All
593
VMware Distributed Virtual Switch Operations

UsethesecommandstoadministeraVMwareDistributedVirtualSwitch
(dvSwitch).
Table 355. VMwaredvSwitchOperations(/oper/virt/vmware/dvswitch)
virtvmwaredvswitchadd<datacentername><dvSwitchname>
[<dvSwitchversion>]
AddsthespecifieddvSwitchtothespecifiedDataCenter.
CommandMode:All
virtvmwaredvswitchaddhost<dvSwitchname>{<hostUUID|
|hostIPaddress|hostname>}
AddsthespecifiedhosttothespecifieddvSwitch.Useoneofthefollowing
UUID
IPaddress
Hostname
CommandMode:All
virtvmwaredvswitchadduplink<dvSwitchname>{<hostUUID|
|hostIPaddress|hostname>}<uplinkname>
AddsthespecifiedphysicalNICtothespecifieddvSwitchuplinkports.
CommandMode:All
virtvmwaredvswitchdel<datacentername><dvSwitchname>
RemovesthespecifieddvSwitchfromthespecifiedDataCenter.
CommandMode:All
virtvmwaredvswitchremhost<dvSwitchname>{<hostUUID|
|hostIPaddress|hostname>}
RemovesthespecifiedhostfromthespecifieddvSwitch.Useoneofthe
followingidentifierstospecifythehost:
UUID
IPaddress
Hostname
CommandMode:All
virtvmwaredvswitchremuplink<dvSwitchname>{<hostUUID|
|hostIPaddress|hostname>}<uplinkname>
RemovesthespecifiedphysicalNICfromthespecifieddvSwitchuplinkports.
CommandMode:All
594
VMware Distributed Port Group Operations

UsethesecommandstoadministeraVMwaredistributedportgroup.
Table 356. VMwareDistributedPortGroupOperations(/oper/virt/vmware/dpg)
virtvmwaredpgadd<portgroupname><dvSwitchname>
<VLANID(14094)>[ishaping<bandwidth><burstsize><peakbandwidth>]
[eshaping<bandwidth><burstsize><peakbandwidth>]
AddsthespecifiedportgrouptothespecifieddvSwitch.Youmayenterthe
ishaping:Enablesingressshaping.Supplythefollowinginformation:
averagebandwidthinkilobitspersecond
burstsizeinkilobits
peakbandwidthinkilobitspersecond
eshaping:Enablesengressshaping.Supplythefollowinginformation:
burstsizeinkilobits
CommandMode:All
virtvmwaredpgdel<portgroupname><dvSwitchname>
RemovesthespecifiedportgroupfromthespecifieddvSwitch.
CommandMode:All
virtvmwaredpgupdate<portgroupname><dvSwitchname>
<VLANID(14094)>[ishaping<bandwidth><burstsize><peakbandwidth>]
[eshaping<bandwidth><burstsize><peakbandwidth>]
UpdatesthespecifiedportgrouponthespecifieddvSwitch.Youmayenterthe
ishaping:Enablesingressshaping.Supplythefollowinginformation:
burstsizeinkilobytes
eshaping:Enablesegressshaping.Supplythefollowinginformation:
burstsizeinkilobytes
CommandMode:All
virtvmwaredpgvmac<VNICMAC><portgroupname>
AddsthespecifiedVMNICtothespecifiedportgroup.
CommandMode:All
595
Edge Virtual Bridge Operations

EdgeVirtualBridgeoperationscommandsarelistedinthefollowingtable:
Table 357. EdgeVirtualBridgeOperationsCommands
virtevbupdatevsidb<VSIDBnumber>
UpdateVSItypesfromtheVSIdatabase.
Commandmode:All
clearvirtevbvsi[macaddress|port<portaliasornumber>|
|typeid<116777215>|vlan<14094>]
ClearsVSIdatabaseassociations.
clearvirtevbvsidb[mgrid<0255>|typeid<116777215>|
|version<0255>]
ClearslocalVSItypescache.
596
Chapter 6. Boot Options

TousetheBootOptionscommands,youmustbeloggedintotheswitchasthe
administrator.TheBootOptionscommandsprovideoptionsfor:
Selectingaswitchsoftwareimagetobeusedwhentheswitchonthenextreboot
Selectingaconfigurationblocktobeusedwhentheswitchonthenextreboot
Downloadingoruploadinganewsoftwareimagetotheswitchvia
SFTP/FTP/TFTP
InadditiontotheBootcommands,youcanuseaWebbrowserorSNMPtowork
withswitchimageandconfigurationfiles.TouseSNMP,refertoWorkingwith
SwitchImagesandConfigurationFiles.
Thebootoptionsarediscussedinthefollowingsections.
597
Stacking Boot Options

TheStackingBootoptionsareusedtodefinetheroleoftheswitchinastack:either
astheMasterthatcontrolsthestackorasaparticipatingMemberswitch.Options
areavailableforloadingstacksoftwaretoindividualMemberswitchesandto
configuretheVLANthatisreservedforinterswitchstackingcommunications.
ToenableStackingontheG8052youmustloadastackingsoftwareimage.Select
thestackingimagebyusingthebootimagecommand(fordetails,seepage 607)
andreboottheswitch.WhentheswitchentersStackingmode,theStacking
configurationmenuappears.Formoreinformation,seeStackingSwitch
ThefollowingtableliststheBootStackingcommandoptions.
Table 358. BootStackingOptions
bootstackhigigtrunk<portaliasornumber>
Configurestheportsusedtoconnecttheswitchtothestack.Enteronly10Gb
externalports.
bootstackmode{master|member}[master|backup|
|<attachedswitchnumber(116)>|all]
ConfigurestheStackingmodefortheselectedswitch.
Note:Theoptionalcommandelementsareavailableonlyonthemaster
switch.
bootstackpushimage{image1|image2|bootimage}
<attachedswitchnumber(116)>
Pushestheselectedsoftwarefilefromthemastertotheselectedswitch.
bootstackvlan<VLANID(24094)>
ConfigurestheVLANusedforStackingcontrolcommunication.
defaultbootstack[master|backup|<attachedswitchnumber(116)>|
|all]
ResetstheStackingbootparameterstotheirdefaultvalues.
switch.
598
Table 358. BootStackingOptions(continued)

copy{ftp|sftp}{image1|image2}staggeredupgrade
[delay<220>]
Loadsthespecifiedstackingsoftwareimagetoallmemberswitchesusing
FTP/SFTPandthenrebootsthewholestack.Thestackisrebootedoneswitch
atatime,startingwiththebackupswitch,followedbythemasterswitchand
thentheothermembersofthestack.Thedelayoptionsconfiguresthetime,in
minutes,betweeneachswitchreboot.
copytftp{image1|image2}address<hostnameorserverIPaddress>
filename<serverfilename>staggeredupgrade[delay<220>]
Loadsthespecifiedstackingsoftwareimagetoallmemberswitchesusing
TFTPandthenrebootsthewholestack.Thestackisrebootedoneswitchata
time,startingwiththebackupswitch,followedbythemasterswitchandthen
theothermembersofthestack.Thedelayoptionsconfiguresthetime,in
minutes,betweeneachswitchreboot.
reload[master|switch<configuredswitchnumber(18)>]
Rebootstheswitch.Youcanspecifiyoneofthefollowingoptions:
masterrebootsonlythemasterswitch
switchrebootsonlythespecifiedconfiguredswitch
switch.
showbootstack[master|backup|<attachedswitchnumber(116)>|
|all]
DisplayscurrentStackingbootparameters.
switch.
Commandmode:All
Wheninstackingmode,thefollowingstandalonefeaturesarenotsupported:
sFlowportmonitoring
UniDirectionalLinkDetection(UDLD)
Portfloodblocking
Stormcontrol
RoutingInterfaceProtocol(RIP)
OpenShortestPathFirst(OSPF)
OpenShortestPathFirstversion3(OSPFv3)
Chapter 6: Boot Options
599
InternetProtocolversion6(IPv6)
VirtualRouterRedundancyProtocol(VRRP)
LoopbackInterfaces
RouterIDs
Routemaps
BorderGatewayProtocol(BGP)
StaticMACaddressadding
Staticmulticast
MultipleSpanningTreeProtocol(MSTP)settingsforCIST,Name,Revand
Maxhop
InternetGroupManagementProtocol(IGMP)Relay
InternetGroupManagementProtocolversion3(IGMPv3)
IGMPQuerier
MulticastListenerDiscovery(MLD)
MicroburstDetection
Openflow
VirtualLinkAggregation(VLAG)
StaticLinkAggregationControlProtocol(LACP)
SpanningTreeProtocol(STP)RootGuardandLoopGuard
ProtocolVLAN
EthernetOperation,AdministrationandMaintenance(OAM)
WeightedRandomEarlyDetection(WRED)
ExplicitCongestionNotification(ECN)
Note: TheG8052switchsupportsonly1024VLANsinStackingmode.
Switchmenusandcommandsforunsupportedfeaturesmaybeunavailableor
mayhavenoeffectonswitchoperation.
600
Scheduled Reboot of the Switch

Thisfeatureallowstheswitchadministratortoscheduleareboottooccurata
particulartimeinfuture.Thisfeatureisparticularlyhelpfuliftheuserneedsto
performswitchupgradesduringoffpeakhours.Youcansetthereboottime,
cancelapreviouslyscheduledreboot,andcheckthetimeofthecurrentreboot
schedule.
Table 359. ScheduledRebootOptions
bootschedule<day><time(hh:mm)>
Configurestheswitchreboottime.Thefollowingoptionsarevalidfortheday
value:
monday
tuesday
wednesday
thursday
friday
saturday
sunday
nobootschedule
Cancelstheswitchreboottime.
showboot
Displaysthecurrentswitchrebootschedule.
CommandMode:All
601
Netboot Configuration
Netbootallowstheswitchtoautomaticallydownloaditsconfigurationfileoverthe
networkduringswitchrebootandapplythenewconfiguration.Uponreboot,the
switchincludesthefollowingoptionsinitsDHCPrequests:
Option66(TFTPserveraddress)
Option67(filepath)
IftheDHCPserverreturnstheinformation,theswitchinitiatesaTFTPfiletransfer
andloadstheconfigurationfileintotheactiveconfigurationblock.Astheswitch
bootsup,itappliesthenewconfigurationfile.Notethattheoption66TFTPserver
addressmustbespecifiedinIPaddressformat(hostnameisnotsupported).
IfDHCPisnotenabled,ortheDHCPserverdoesnotreturntherequired
information,theswitchusesthemanuallyconfiguredTFTPserveraddressandfile
path.
Table 360. NetbootOptions
[no]bootnetbootcfgfile<131characters>
DefinesthefilepathfortheconfigurationfileontheTFTPserver.Forexample:
/directory/sub/config.cfg
[no]bootnetbootenable
EnablesordisablesNetboot.Whenenabled,theswitchbootsinto
factorydefaultconfigurationandattemptstodownloadanewconfiguration
file.
[no]bootnetboottftp<IPaddress>
ConfigurestheIPaddressoftheTFTPserverusedformanualconfiguration.
ThisserverisusedifDHCPisnotenabledoriftheDHCPserverdoesnot
returntherequiredinformation.
showboot
DisplaysthecurrentNetbootparameters.
CommandMode:All
602
Machine Type Model Configuration

ThisfeatureconfigurestheswitchMachineTypeModel(MTM).
Table 361. MachineTypeModelConfiguration
bootmtm<MTMcode>
Configurestheswitchsmachinetypemodel(MTM)value.MTMsareapplied
onrebootandpersistoverfirmwareupgrades:
603
USB Boot Configuration

USBBootallowsyoutoboottheswitchwithasoftwareimagefile,bootfileor
configurationfilethatresidesonaUSBdriveinsertedintotheUSBport.Usethe
followingcommandtoenableordisableUSBBoot:
[no]bootusbbootenable
Whenenabled,theswitchcheckstheUSBportwhenitisrebooted.IfaUSBdriveis
insertedintotheport,theswitchchecksthedriveforsoftwareandimagefiles.Ifa
validfileispresentontheUSBdrive,theswitchloadsthefileandbootsusingthe
file.
Thefollowinglistdescribesthevalidfilenamesanddescribestheswitchbehavior
whenitrecognizesthem.Thefilenamesmustbeexactlyasshownortheswitch
willnotrecognizethem.
RSG8052_Boot.img
Theswitchreplacesthecurrentbootimagewiththenewimageandbootswith
thenewimage.
RSG8052_OS.img
Theswitchbootswiththenewsoftwareimage.Theexistingimagesarenot
affected.
RSG8052_replace1_OS.img
Theswitchreplacesthecurrentsoftwareimage1withthenewimageandboots
withthenewimage.
RSG8052_replace2_OS.img
Theswitchreplacesthecurrentsoftwareimage2withthenewimageandboots
withthenewimage.
RSG8052.cfg
Theswitchbootswiththenewconfigurationfile.Theexistingconfigurationfiles
(activeandbackup)arenotaffected.
RSG8052_replace.cfg
Theswitchreplacestheactiveconfigurationfilewiththenewfileandbootswith
thenewfile.Thisfiletakesprecedenceoveranyotherconfigurationfilesthat
maybepresentontheUSBdrive.
Ifmorethanonevalidfileispresent,theswitchloadsallvalidfilesandbootswith
them.Forexample,youmaysimultaneouslyloadanewbootfile,imagefileand
configurationfilefromtheUSBdrive.
Theswitchignoresanyfilesthatdonotmatchthevalidfilenamesorthathavethe
wrongformat.
YoualsocancopyfilestoandfromtheUSBdrive.SeeUSBCopyonpage 587.
604
Updating the Switch Software Image

TheswitchsoftwareimageistheexecutablecoderunningontheRackSwitch
G8052.Aversionoftheimageshipswiththeswitchandcomespreinstalledonthe
device.Asnewversionsoftheimagearereleased,youcanupgradethesoftware
runningonyourswitch.
Usethefollowingcommandtodeterminethecurrentsoftwareversion:
showboot
Commandmode:All
Upgradingthesoftwareimageonyourswitchrequiresthefollowing:
LoadingthenewimageontoaSFTP,FTPorTFTPserveronyournetwork
TransferringthenewimagefromtheSFTP,FTPorTFTPservertoyourswitch
Selectingthenewsoftwareimagetobeloadedintoswitchmemorythenexttime
theswitchisrebooted
605
Loading New Software to Your Switch

Theswitchcanstoreuptotwodifferentsoftwareimages,calledimage1and
image2,aswellasbootsoftware,calledboot.Whenyouloadnewsoftware,you
mustspecifywhereitshouldbeplaced:eitherintoimage1,image2orboot.
Forexample,ifyouractiveimageiscurrentlyloadedintoimage1,youwould
probablyloadthenewimagesoftwareintoimage2.Thisletsyoutestthenew
softwareandreloadtheoriginalactiveimage(storedinimage1),ifneeded.
Toloadanewsoftwareimagetoyourswitch,youneedthefollowing:
TheimageorbootsoftwareloadedonaSFTP/FTP/TFTPserveronyournetwork
ThehostnameorIPaddressoftheSFTP/FTP/TFTPserver
Thenameofthenewsoftwareimageorbootfile
Note: TheDNSparametersmustbeconfiguredifspecifyinghostnames.
Whentheaboverequirementsaremet,usethefollowingproceduretodownload
thenewsoftwaretoyourswitch.
1. InPrivilegedEXECmode,enterthefollowingcommand:
RS G8052#copy{ftp|tftp|sftp}{image1|image2|bootimage}
2. EnterthehostnameorIPaddressoftheSFTP,FTPorTFTPserver.
Addressornameofremotehost:<IPaddressorhostname>
3. Enterthenameofthenewsoftwarefileontheserver.
Sourcefilename:<filename>
Theexactformofthenamewillvarybyserver.However,thefilelocationis
normallyrelativetotheSFTP,FTPorTFTPdirectory(usuallytftpboot).
4. Enteryourusernameandpasswordfortheserver,ifapplicable.
Username:{<username>|<Enter>}
5. Thesystempromptsyoutoconfirmyourrequest.
Next,selectasoftwareimagetorun,asdescribedinthefollowingsection.
606
Selecting a Software Image to Run

Youcanselectwhichsoftwareimage(image1orimage2)youwanttorunin
switchmemoryforthenextreboot.
1. InGlobalConfigurationmode,enter:
RS G8052(config)#bootimage{image1|image2}
2. Enterthenameoftheimageyouwanttheswitchtouseuponthenextboot.
Thesysteminformsyouofwhichimagesettobeloadedatthenextreboot:
Nextbootwilluseswitchsoftwareimage1insteadofimage2.
Uploading a Software Image from Your Switch

YoucanuploadasoftwareimagefromtheswitchtoaSFTP,FTPorTFTPserver.
1. InPrivilegedEXECmode,enter:
RS G8052#copy{image1|image2|bootimage}{ftp|tftp|sftp}
2. EnterthenameortheIPaddressoftheSFTP,FTPorTFTPserver:
Addressornameofremotehost:<IPaddressorhostname>
3. EnterthenameofthefileintowhichtheimagewillbeuploadedontheSFTP,FTP
orTFTPserver:
Destinationfilename:<filename>
4. Enteryourusernameandpasswordfortheserver,ifapplicable.
Username:{<username>|<Enter>}
5. Thesystemthenrequestsconfirmationofwhatyouhaveentered.Tohavethefile
uploaded,enterY.
image2currentlycontainsSoftwareVersion6.6.0
thatwasdownloadedat0:23:39ThuJan3,2011.
Uploadwilltransferimage2(2788535bytes)tofile"image1"
onFTP/TFTPserver1.90.90.95.
Confirmuploadoperation(y/n)?y
607
Selecting a Configuration Block

WhenyoumakeconfigurationchangestotheRackSwitchG8052,youmustsave
thechangessothattheyareretainedbeyondthenexttimetheswitchisrebooted.
Whenyouperformasaveoperation,yournewconfigurationchangesareplacedin
theactiveconfigurationblock.Thepreviousconfigurationiscopiedintothebackup
configurationblock.
Thereisalsoafactoryconfigurationblock.Thisholdsthedefaultconfigurationset
bythefactorywhenyourRackSwitchG8052wasmanufactured.Undercertain
circumstances,itmaybedesirabletoresettheswitchconfigurationtothedefault.
ThiscanbeusefulwhenacustomconfiguredRackSwitchG8052ismovedtoa
networkenvironmentwhereitwillbereconfiguredforadifferentpurpose.
InGlobalConfigurationmode,usethefollowingcommandtosetwhich
configurationblockyouwanttheswitchtoloadthenexttimeitisrebooted:
RS G8052(config)#bootconfigurationblock{active|backup|factory}
608
Setting an Entitlement Serial Number

Toimprovecustomertechnicalsupport,yourcustomersupportrepresentativecan
assignyourswitchanEntitlementSerialNumber(ESN)atthetimeyourequest
support.TheESNcanbeconvenientlystoredontheswitchusingthefollowing
command:
RS G8052(config)#bootesn<EntitlementSerialNumber>
TheESNhelpstolocateyourswitchsidentifyinginformationwhenyoucall
technicalsupportforhelpinfuture.
609
Rebooting the Switch

Youcanreboottheswitchtomakeyoursoftwareimagefileandconfiguration
blockchangesoccur.
Note: RebootingtheswitchcausestheSpanningTreeGrouptorestart.This
processcanbelengthy,dependingonthetopologyofyournetwork.
Enterthefollowingcommandtoreboot(reload)theswitch:
RS G8052#reload[nodump]
Youarepromptedtoconfirmyourrequest.
Resetwillusesoftware"image2"andtheactiveconfigblock.
>>NotethatthiswillRESTARTtheSpanningTree,
>>whichwilllikelycauseaninterruptioninnetworkservice.
Confirmreload(y/n)?
Note: Beforerebooting,theswitchwrites(saves)technicalsupportinformation
(backuptechsupport)inalocalfiletoflashmemory.Thenodumpoptionskips
thisstep,therebydecreasingthetimeneededfortheswitchtoreboot.Bydefault,
theswitchsavestechnicalsupportinformationbeforerebooting.
Technicalsupportinformation(backuptechsupport)canbeuploadedtoan
externalserverusingthefollowingcommand:
copybacktechsupport{ftp/sftp/tftp}
610
Changing the Switch Profile

TheLenovoN/OSsoftwarefortheG8052canbeconfiguredtooperateindifferent
modesfordifferentdeploymentscenarios.Thedeploymentprofilechangessome
ofthebasicswitchbehavior,shiftingswitchresourcestooptimizecapacitylevelsto
meettheneedsofdifferenttypesofnetworks.Formoreinformationabout
deploymentprofiles,seetheLenovoN/OS8.3ApplicationGuide.
Tochangethedeploymentprofile,selectthenewprofileandreboottheG8052.Use
thefollowingcommandtoselectanewprofile:
RS G8052(config)#bootprofile{default|openflow}
Thefollowinglistdescribesthebootprofileoptions:
defaultdeploymentprofilewithbalancedresources
openflowOpenFlowOnlydeploymentprofile
611
Using the Boot Management Menu

TheBootManagementmenuallowsyoutoswitchthesoftwareimage,resetthe
switchtofactorydefaultsortorecoverfromafailedsoftwaredownload.
YoucaninterruptthebootprocessandentertheBootManagementmenufromthe
serialconsoleport.WhenthesystemdisplaysMemoryTest,press<Shift + B>.
TheBootManagementmenuappears.
BootManagementMenu
IChangebootingimage
CChangeconfigurationblock
RBootinrecoverymode(xmodemdownloadofimagestorecover
switch)
QReboot
EExit
Pleasechooseyourmenuoption:
TheBootManagementmenuallowsyoutoperformthefollowingactions:
612
Tochangethebootingimage,pressIandfollowthescreenprompts.
Tochangetheconfigurationblock,pressCandfollowthescreenprompts.
TobootinrecoverymodepressR.FormoredetailsseeBootRecoveryMode
onpage 613.
Torestartthebootprocessfromthebeginning,pressQ.
ToexittheBootManagementmenu,pressE.Thebootingprocesscontinues.
Boot Recovery Mode

TheBootRecoveryModeallowsyoutorecoverfromafailedsoftwareorboot
imageupgradeusingXModemdownload.
ToenterBootRecoveryModeyoumustselectBootinrecoverymodeoption
fromtheBootManagementMenu.
EnteringRescueMode.
Pleaseselectoneofthefollowingoptions:
X)Usexmodem1Ktoserialdownloadanimage
P)Physicalpresence(lowsecuritymode)
R)Reboot
E)Exit
Option?:
TheBootRecoveryModemenuallowsyoutoperformthefollowingactions:
TorecoverfromafailedsoftwareorbootimageupgradeusingXModem
download,pressXandfollowthescreenprompts.Formoredetails,see
RecoveringfromaFailedImageUpgradeusingXModemDownloadon
page 614.
Toenabletheloadingofanunofficialimage,pressPandfollowthescreen
prompts.Formoredetails,seePhysicalPresenceonpage 616.
Torestartthebootprocessfromthebeginning,pressR.
ToexitBootRecoveryModemenu,pressE.Thebootprocesscontinues.
613
Recovering from a Failed Image Upgrade using XModem Download

Usethefollowingproceduretorecoverfromafailedimageupgrade.
1.ConnectaPCtotheserialportoftheswitch.
2.OpenaterminalemulatorprogramthatsupportsXmodemdownload(forexample,
HyperTerminal,SecureCRTorPuTTY)andselectthefollowingserialport
characteristics:
Speed:9600bps
DataBits:8
StopBits:1
Parity:None
FlowControl:None
3.BoottheswitchandaccesstheBootManagementmenubypressing<Shift + B>
whiletheMemoryTestisinprogressandthedotsarebeingdisplayed.
4. EnterBootRecoveryModebyselectingR.TheRecoveryModemenuwillappear.
5. SelectXforXmodemdownload.Youwillseethefollowingdisplay:
Runningxmodemrescue.....
6. Whenyouseethefollowingmessage,changetheSerialPortspeedto115200bps:
Changethebaudrateto115200bpsandhitthe<ENTER>keybefore
initiatingthedownload.
7. Press<Enter>tosetthesystemintodownloadacceptmode.Whenthereadiness
meterdisplays(aseriesofCcharacters),startXmodemonyourterminal
emulator.Youwillseeadisplaysimilartothefollowing:
...Waitingforthe<Enter>keytobehitbeforethedownloadcanstart...
CC
8. Selecttheimagetodownload.Xmodeminitiatesthefiletransfer.Whendownload
iscomplete,youareaskedtochangetheSerialPortspeedbackto9600bps:
Changethebaudratebackto9600bps,hitthe<ENTER>key
9. Press<Enter>tostartinstallingtheimage.Ifthefileisasoftwareimage,enterthe
imagenumber:
Installimageasimage1or2(hitreturntojustbootimage):
614
Theimageinstallwillbegin.Aftertheprocedureiscomplete,theRecoveryMode
menuwillberedisplayed.
Extractingimages...Do*NOT*powercycletheswitch.
InstallingRootFilesystem:
Imagesignatureverified.100%
InstallingKernel:
InstallingDeviceTree:
InstallingBootLoader:100%
Updatinginstalllog.Fileimageinstalledfromxmodemat18:06:02on
1332015
Pleaseselectoneofthefollowingoptions:
X)Usexmodem1Ktoserialdownloadanimage
P)Physicalpresence(lowsecuritymode)
R)Reboot
E)Exit
Option?:
Bootimagerecoveryiscomplete.
615
Physical Presence
Usethefollowingproceduretoenabletheinstallationofunofficialimagesonthe
switch:
1. ConnectaPCtotheconsoleportoftheswitch.
2. OpenaterminalemulatorprogramthatsupportsTelnetprotocol(forexample,
HyperTerminal,SecureCRTorPuTTY)andinputtheproperhostname(IP
address)andporttoconnecttotheconsoleportoftheswitch.
3. BoottheswitchandaccesstheBootManagementmenubypressing<Shift + B>
whiletheMemoryTestisinprogressandthedotsarebeingdisplayed.
4. EnterBootRecoveryModebyselectingR.TheRecoveryModemenuwillappear.
5. TobeginthePhysicalPresenceprocedure,selectP.Thefollowingwarningmessage
willappear:
WARNING:thefollowingtestisusedtodeterminephysicalpresenceandif
completedwillputtheswitchinlowsecuritymode.
6. Youwillbepromptedforconfirmation:
Doyouwishtocontinuey/n?
7. Asecuritytestwillbeperformed.Thesystemlocation(blue)LEDwillblinka
numberoftimesbetween1and12.Enterthatnumber:
Hitakeytostartthetest.ThebluelocationLEDwillblinkanumberof
times.
...........
HowmanytimesdidtheLEDblink?
8. Afterenteringthecorrectnumber,theRecoveryModemenuwillreappear.To
installanunofficialimageusethefollowingprocedure:
XModemDownload(fordetails,seepage 614)
Note: Youhavethreeattemptstosuccessfullycompletethesecuritytest.After
threeincorrectattempts,theswitchwillreboot.
Note: Afterthetestiscompleted,theswitchwillbeputinlowsecuritymode.This
modewillallowyoutoinstallunofficialimagesontheswitch.Toreverttonormal
securitymode,youmustreboottheswitchorpressPagainintheRecoveryMode
menu.
616
Chapter 7. Maintenance Commands

Themaintenancecommandsareusedtomanagedumpinformationandforward
databaseinformation.Theyincludedebuggingcommandstohelpwith
troubleshooting.
Dumpinformationcontainsinternalswitchstatedatathatiswrittentoflash
memoryontheRackSwitchG8052afteranyoneofthefollowingoccurs:
Thewatchdogtimerforcesaswitchreboot.Thepurposeofthewatchdogtimeris
toreboottheswitchiftheswitchsoftwarefreezes.
Theswitchdetectsahardwareorsoftwareproblemthatrequiresareboot.
Tousethemaintenancecommands,youmustbeloggedintotheswitchasthe
administrator.
Table 362. GeneralMaintenanceCommands
copyflashdump{tftp|ftp|sftp}
SavesthesystemdumpinformationviaTFTP,FTPorSFTP.Fordetails,see
page 633.
copy<switchfilename>tftpaddress<TFTPserverIPaddress>
filename<filenameonTFTPserver>
UploadsafileviaTFTP.
copylog{stfp|tftp}
Uploadsthesystemlogfile(SYSLOG)viaTFTP.
copytechsupport{ftp|sftp}
Uploadsthetechnicalsupportdump(tsdmp)toanexternalFTP/SFTPserver.
copytechsupporttftpaddress<hostnameorserverIPaddress>
Uploadsthetechnicalsupportdump(tsdmp)toanexternalTFTPserver.
copybackuptechsupport{ftp|sftp}
Uploadsthetechnicalsupportinformationsavedbeforeaswitchreboot
(backuptechsupport)toanexternalFTP/SFTPserver.
617
Table 362. GeneralMaintenanceCommands(continued)

copybackuptechsupporttftpaddress<hostnameorserverIPaddress>
Uploadsthetechnicalsupportinformationsavedbeforeaswitchreboot
(backuptechsupport)toanexternalTFTPserver.
clearflashdump
Clearsdumpinformationfromflashmemory.
clearlogging
Clearsthesystemlogfile(SYSLOG).
showflashdumpuuencode
Displaysdumpinformationinuuencodedformat.Fordetails,seepage 632.
Commandmode:All
showtechsupport[l2|l3|link|port]
DumpsallG8052information,statisticsandconfiguration.Youcanlogthe
output(tsdmp)intoafile.Tofiltertheinformation,usethefollowingoptions:
l2displaysonlyLayer2relatedinformation
l3displaysonlyLayer3relatedinformation
linkdisplaysonlylinkstatusrelatedinformation
portdisplaysonlyportrelatedinformation
Commandmode:AllexceptUserEXEC
618
Forwarding Database Maintenance

TheForwardingDatabasecommandscanbeusedtoviewinformationandto
deleteaMACaddressfromtheforwardingdatabaseortocleartheentire
forwardingdatabase.ThisishelpfulinidentifyingproblemsassociatedwithMAC
addresslearningandpacketforwardingdecisions.
Table 363. FDBManipulationOptions
showmacaddresstableaddress<MACaddress>
DisplaysasingledatabaseentrybyitsMACaddress.EntertheMACaddress
usingoneofthefollowingformats:
xx:xx:xx:xx:xx:xx(suchas08:00:20:12:34:56)
xxxxxxxxxxxx(suchas080020123456)
Commandmode:All
showmacaddresstableinterfaceport<portaliasornumber>
DisplaysallFDBentriesforaparticularport.
Commandmode:All
DisplaysallMulticastMACentriesintheFDB.
Commandmode:All
showmacaddresstableprivatevlan<VLANID(24094)>
DisplaysallFDBentriesonasingleprivateVLAN.
Commandmode:All
showmacaddresstablestatic
DisplaysstaticentriesintheFBD.
Commandmode:All
showmacaddresstablevlan<VLANID(14094)>
DisplaysallFDBentriesonasingleVLAN.
Commandmode:All
nomacaddresstable{multicast|static}{all|<MACaddress>
<VLANID(14094)>}
RemovesstaticFDBentries.
clearmacaddresstable
ClearstheentireForwardingDatabasefromswitchmemory.
Chapter 7: Maintenance Commands
619
Debugging Commands
TheMiscellaneousDebugCommandsdisplaytracebufferinformationabout
eventsthatcanbehelpfulinunderstandingswitchoperation.Youcanviewthe
followinginformationusingthedebugcommands:
EventstracedbytheManagementProcessor(MP)
Eventstracedtoabufferareawhenarebootoccurs
Iftheswitchrebootsforanyreason,theMPtracebufferissavedintothesnaptrace
bufferarea.TheoutputfromthesecommandscanbeinterpretedbyTechnical
Supportpersonnel.
Table 364. MiscellaneousDebugOptions
debugdebugflags
Thiscommandsetstheflagsthatareusedfordebuggingpurposes.
debugdumpbt
Displaysthebacktracelog.
[no]debuglacppacket{receive|transmit|both}port
<portaliasornumber>
Enables/disablesdebuggingforLinkAggregationControlProtocol(LACP)
packetsonallportsrunningLACP.
Thefollowingparametersareavailable:
receivefiltersonlyLACPpacketsreceived
transmitfiltersonlyLACPpacketssent
bothfiltersLACPpacketseithersentorreceived
portfiltersLACPpacketssent/receivedonspecificports
Bydefault,LACPdebuggingisdisabled.
debugmpsnap
DisplaystheManagementProcessorsnap(orpostmortem)tracebuffer.This
buffercontainsinformationtracedatthetimethatarebootoccurred.
debugmptrace
DisplaystheManagementProcessortracebuffer.Headerinformationsimilar
tothefollowingisshown:
MPtracebufferat13:28:15FriMay25,2001mask:
0x2ffdf748
Thebufferinformationisdisplayedaftertheheader.
620
Table 364. MiscellaneousDebugOptions

[no]debugspanningtreebpdu[receive|transmit]
Enables/disablesdebuggingforSpanningTreeProtocol(STP)BridgeProtocol
DataUnit(BPDU)framessentorreceived.
Thefollowingparametersareavailable:
receivefiltersonlyBPDUframesreceived
transmitfiltersonlyBPDUframessent
Bydefault,STPBPDUdebuggingisdisabled.
clearflashconfig
Deletesallflashconfigurationblocks.
621
IPsec Debugging
ThefollowingtabledescribestheIPsecdebuggingcommands.
Table 365. IPsecDebuggingOptions
[no]debugsecall
EnablesordisablesallIPsecuritydebugmessages.
[no]debugseccrypto
EnablesordisablesallIPsecuritycryptographicdebugmessages.
[no]debugsecike
EnablesordisablesallIPsecurityIKEv2debugmessages.
[no]debugsecinfo
Displaysthecurrentsecuritydebugflag.
[no]debugsecipsec
EnablesordisablesallIPsecdebugmessages.
622
vLAG Debugging
ThefollowingtabledescribesvLAGdebuggingcommands.
Table 366. vLAGDebuggingOptions
[no]debugvlagcfg
EnableordisablesvLAGconfigurationdebugmessages.
[no]debugvlagfdbdatabase
EnableordisablesvLAGForwardingDatabasedebugmessages.
[no]debugvlaghtlhchk
EnableordisablesvLAGHealthCheckdebugmessages.
[no]debugvlagisl
EnableordisablesvLAGISLdebugmessages.
[no]debugvlagmsg
EnableordisablesvLAGdebugmessages.
[no]debugvlagportmgr
EnableordisablesvLAGPortManagerdebugmessages.
[no]debugvlagsm
EnableordisablesvLAGStateMachinedebugmessages.
[no]debugvlagtrunk
EnableordisablesvLAGTrunkdebugmessages.
[no]debugvlagvrrp
EnableordisablesvLAGVRRPdebugmessages.
623
LLDP Cache Manipulation

ThefollowingtabledescribestheLLDPcachemanipulationcommands.
Table 367. LLDPCacheManipulationOptions
showlldp[information]
DisplaysallLLDPinformation.
Commandmode:All
showlldpport<portaliasornumber>
DisplaysLinkLayerDiscoveryProtocol(LLDP)portinformation.
Commandmode:All
showlldpport<portaliasornumber>tlvevb
DisplaysEdgeVirtualBridge(EVB)typelengthvalue(TLV)informationfor
thespecifiedport.
Commandmode:All
showlldpreceive
DisplaysinformationabouttheLLDPreceivestatemachine.
Commandmode:All
showlldptransmit
DisplaysinformationabouttheLLDPtransmitstatemachine.
Commandmode:All
showlldpremotedevice[<1256>|detail|port<portaliasornumber>]
DisplaysinformationreceivedfromLLDPcapabledevices.Formore
Commandmode:All
clearlldp
ClearstheLLDPcache.
624
ARP Cache Maintenance

ThefollowingtabledescribestheARPcachemaintenancecommands.
Table 368. AddressResolutionProtocolMaintenanceOptions
show[ip]arp
ShowsallARPentries.
Commandmode:All
show[ip]arpfind<IPaddress>
ShowsasingleARPentrybyIPaddress.
Commandmode:All
show[ip]arpinterfaceport<portnumberoralias>
ShowsARPentriesonselectedports.
Commandmode:All
show[ip]arpreply
ShowsthelistofIPaddresseswhichtheswitchwillrespondtoforARP
requests.
Commandmode:All
show[ip]arpvlan<VLANID(14094)>
ShowsARPentriesonasingleVLAN.
Commandmode:All
cleararp
ClearstheentireARPlistfromswitchmemory.
Note: TodisplayalloraportionofARPentriescurrentlyheldintheswitch,you
canalsorefertoARPInformationonpage 91.
625
IP Route Manipulation
ThefollowingtabledescribestheIProutemanipulationcommands.
Table 369. IPRouteManipulationOptions
debugroutemappbr
Enablespolicybasedroutingdebugging.
showiproute
Showsallroutes.
Commandmode:All
showiprouteaddress<IPaddress>
ShowsasingleroutebydestinationIPaddress.
Commandmode:All
showiproutegateway<IPaddress>
Showsroutestoadefaultgateway.
Commandmode:All
showiprouteinterface<1128>
Showsroutesonasingleinterface.
Commandmode:All
showiproutetag{address|bgp|broadcast|fixed|martian|
|multicast|ospf|rip|static}
Showsroutesofasingletag.ForadescriptionofIProutingtags,seeTable 41
onpage 89.
Commandmode:All
showiproutetype{broadcast|direct|indirect|local|
|martian|multicast}
Showsroutesofasingletype.ForadescriptionofIProutingtypes,see
Table 40onpage 89.
Commandmode:All
cleariproute
Clearstheroutetablefromswitchmemory.
Note: Todisplayallroutes,youcanalsorefertoIPRoutingInformationon
page 88.
626
IGMP Snooping Maintenance

ThefollowingtabledescribestheIGMPSnoopingmaintenancecommands.
Table 370. IGMPMulticastGroupMaintenanceOptions
showipigmpgroups
Displaysinformationforallmulticastgroups.
Commandmode:All
showipigmpgroupsaddress<IPaddress>
DisplaysasingleIGMPmulticastgroupbyitsIPaddress.
Commandmode:All
showipigmpgroupsdetail<IPaddress>
DisplaysdetailedinformationaboutasingleIGMPmulticastgroup.
Commandmode:All
showipigmpgroupsinterfaceport<portaliasornumber>
DisplaysallIGMPmulticastgroupsonselectedports.
Commandmode:All
showipigmpgroupsportchannel<1104>
DisplaysallIGMPmulticastgroupsonasingletrunkgroup.
Commandmode:All
showipigmpgroupsvlan<VLANID(14094)>
DisplaysallIGMPmulticastgroupsonasingleVLAN.
Commandmode:All
clearipigmpgroups
ClearstheIGMPgrouptable.
627
IGMP Multicast Routers Maintenance

ThefollowingtabledescribesthemaintenancecommandsforIGMPmulticast
routers(Mrouters).
Table 371. IGMPMulticastRouterMaintenanceCommands
showipigmpmrouter[dynamic|interface|portchannel|static]
DisplaysinformationforallMrouters,alldynamic/staticMrouterports
installedorMrouterportsspecifictoaspecifiedinterface/portchannel.
Commandmode:All
DisplaysIGMPsnoopinginformationforallMrouters.
Commandmode:All
showipigmpmroutervlan<VLANID(14094)>
DisplaysIGMPMrouterinformationforasingleVLAN.
Commandmode:All
DisplaysIGMPquerierinformationforasingleVLAN.
Commandmode:All
showipigmprelay
DisplaysIGMPrelayinformation.
Commandmode:All
DisplaysIGMPv3snoopinginformation.
Commandmode:All
clearipigmpmrouter
ClearsthedynamicIGMPMrouterporttable.
628
IPv6 Neighbor Cache Manipulation

ThefollowingtabledescribestheIPv6NeighborCachemanipulationcommands.
Table 372. IPv6NeighborCacheManipulationOptions
showipv6neighbors
ShowsallIPv6NeighborCacheentries.
Commandmode:All
showipv6neighborsfind<IPv6address>
ShowsasingleIPv6NeighborCacheentrybyIPaddress.
Commandmode:All
showipv6neighborsinterfaceport<portaliasornumber>
ShowsIPv6NeighborCacheentriesonasingleport.
Commandmode:All
showipv6neighborsstatic
ShowsstaticIPv6NeighborCacheentries.
Commandmode:All
showipv6neighborsvlan<VLANID(14094)>
ShowsIPv6NeighborCacheentriesonasingleVLAN.
Commandmode:All
clearipv6neighbors
ClearsallIPv6NeighborCacheentriesfromswitchmemory.
629
IPv6 Route Maintenance

ThefollowingtabledescribestheIPv6routemaintenancecommands.
Table 373. IPv6RouteMaintenanceOptions
showipv6route
ShowsallIPv6routes.
Commandmode:All
showipv6routeaddress<IPv6address>
ShowasingleroutebydestinationIPaddress.
Commandmode:All
showipv6routegateway<IPv6gatewayaddress>
Showroutestoasinglegateway.
Commandmode:All
showipv6routeinterface<1128>
ShowroutesonasingleIPinterface.
Commandmode:All
showipv6routestatic
ShowstaticIPv6routes.
Commandmode:All
showipv6routesummary
ShowsasummaryofIPv6routeinformation.
Commandmode:All
showipv6routetype{connected|static|ospf}
Showroutesofasingletype.
Commandmode:All
clearipv6route
ClearsallIPv6routes.
630
Stacking Maintenance
ThefollowingtabledescribesStackingmaintenancecommands.
Table 374. StackingMaintenanceOptions
showloggingswn<configuredswitchnumber(18)>[messages]
[severity<07>][reverse][|{include|exclude|section|
|begin|head<12000>|last<12000>}]
Displaysthecurrentsyslogsettingsforthespecifiedconfiguredswitch,
followedbythemostrecent2000syslogmessages.
expression
Commandmode:All
copylogswn<configuredswitchnumber(18)>sftp
SavesthesystemlogfilefromthespecifiedconfiguredswitchviaSFTP.
Commandmode:All
copylogswn<configuredswitchnumber(18)>tftp[address
<hostnameorserverIPaddress>][filename<serverfilename>]
SavesthesystemlogfilefromthespecifiedconfiguredswitchviaTFTP.
Commandmode:All
clearlogging[master|backup|<attachedswitchnumber(116)>|all]
Clearsthesystemlogfile(SYSLOG)onthecurrentswitch.Youcanclearthe
syslogfromthemasterswitch,thebackupswitchoranyattachedswitch.The
alloptionwillclearthesystemlogfilesfromalltheswitchesinthestack.
switch.
631
Uuencode Flash Dump

Usingthiscommand,dumpinformationispresentedinuuencodedformat.This
formatmakesiteasytocapturethedumpinformationasafileorastringof
characters.
Ifyouwanttocapturedumpinformationtoafile,setyourcommunication
softwareonyourworkstationtocapturesessiondatapriortoissuingthe
showflashdumpuuencodecommand.Thiswillensurethatyoudonotlose
anyinformation.Onceentered,theshowflashdumpuuencodecommand
willcauseapproximately23,300linesofdatatobedisplayedonyourscreenand
copiedintothefile.
Usingtheshowflashdumpuuencodecommand,dumpinformationcanbe
readmultipletimes.Thecommanddoesnotcausetheinformationtobeupdated
orclearedfromflashmemory.
Note: Dumpinformationisnotclearedautomatically.Inorderforanysubsequent
dumpinformationtobewrittentoflashmemory,youmustmanuallyclearthe
dumpregion.Formoreinformationonclearingthedumpregion,seepage 634.
Toaccessdumpinformation,enter:
RS G8052#showflashdumpuuencode
Thedumpinformationisdisplayedonyourscreenand,ifyouhaveconfigured
yourcommunicationsoftwaretodoso,capturedtoafile.Ifthedumpregionis
empty,thefollowingappears:
NoFLASHdumpavailable.
632
TFTP, SFTP or FTP System Dump Copy

Usethesecommandstocopy(save)thesystemdumptoaTFTP,SFTPorFTP
server.
Note: IftheTFTP/FTPserverisrunningSunOSortheSolarisoperatingsystem,the
specifiedfilemustexistpriortoexecutingthecopyflashdumptftpcommand
(orcopyflashdumpsftp)andmustbewritable(setwithproperpermission
andnotlockedbyanyapplication).Thecontentsofthespecifiedfilewillbe
replacedwiththecurrentdumpdata.
TosavedumpinformationviaTFTP,enter:
RS G8052#copyflashdumptftp<serverfilename>
YouarepromptedfortheTFTPserverIPaddressorhostname,andthefilenameof
thetargetdumpfile.
TosavedumpinformationviaSFTP,enter:
RS G8052#copyflashdumpsftp<serverfilename>
YouarepromptedfortheSFTPserverIPaddressorhostname,andthefilenameof
thetargetdumpfile.
TosavedumpinformationviaFTP,enter:
RS G8052#copyflashdumpftp<serverfilename>
YouarepromptedfortheFTPserverIPv4addressorhostname,yourusernameand
password,andthefilenameofthetargetdumpfile.
633
Clearing Dump Information

Tocleardumpinformationfromflashmemory,enter:
RS G8052#clearflashdump
Theswitchclearsthedumpregionofflashmemoryanddisplaysthefollowing
message:
FLASHdumpregioncleared.
Iftheflashdumpregionisalreadyclear,theswitchdisplaysthefollowing
message:
FLASHdumpregionisalreadyclear.
634
Unscheduled System Dumps

Ifthereisanunscheduledsystemdumptoflashmemory,thefollowingmessageis
displayedwhenyoulogontotheswitch:
Note: AsystemdumpexistsinFLASH.Thedumpwassaved
at13:43:22WednesdayJanuary30,2011.Useshowflashdump
uuencodeto
extractthedumpforanalysisandclearflashdumpto
cleartheFLASHregion.Theregionmustbecleared
beforeanotherdumpcanbesaved.
635
636
Appendix A. Lenovo N/OS System Log Messages

TheRackSwitchG8052(G8052)usesthefollowingsyntaxwhenoutputtingsystem
log(syslog)messages:
<Timestamp><IP/Hostname><LogLabel><ThreadID>:<Message>
Thefollowingparametersareused:
<Timestamp>
Thetimeofthemessageeventisdisplayedinthefollowingformat:
<month(3characters)><day><hour(124)>:<minute>:<second>
Forexample:Aug1914:20:30
<IP/Hostname>
Thehostnameisdisplayedwhenconfigured.
Forexample:1.1.1.1
<LogLabel>
Thefollowingtypesoflogmessagesarerecorded:LOG_CRIT,LOG_WARNING,
LOG_ALERT,LOG_ERR,LOG_NOTICEandLOG_INFO.
<ThreadID>
Thisisthesoftwarethreadthatreportsthelogmessage.
Forexample:
stg,ip,console,telnet,vrrp,system,webserver,ssh,bgp
<Message>:Thelogmessage
Followingisalistofpotentialsyslogmessages.Tokeepthislistasshortas
possible,onlythe<ThreadID>and<Message>areshown.Themessagesaresorted
by<LogLabel>.
Wherethe<ThreadID>islistedasmgmt,oneofthefollowingmaybeshown:
console,telnet,webserverorssh.
637
LOG_ALERT
Thread
LOG_ALERT Message
Possiblebufferoverrunattackdetected!
BGP
sessionwith<IP address>failed(badevent:<event>)
BGP
sessionwith<IP address>failed<reason>
Reasons:
BGP
ConnectRetryExpire
HoldtimeExpire
Invalid
KeepaliveExpire
ReceiveKEEPALIVE
ReceiveNOTIFICATION
ReceiveOPEN
ReceiveUPDATE
Start
Stop
TransportConnClosed
TransportConnFailed
TransportConnOpen
TransportFatalError
sessionwith<IP address>failed<reasontype>:<reason>
ReasonTypes:
FSMError
HoldTimerExpired
MessageHeaderError
OPENMessageError
UPDATEMessageError
Reasons:
638
ASRoutingLoop
AttrFlagsError
AttrLengthError
AuthFailure
BadBGPIdentifier
BadHoldTime
BadLength
BadPeerAS
BadType
ConnNotSynced
InvalidNetworkField
InvalidNEXTHOPAttr
InvalidORIGINAttr
MalformedAS_PATH
MalformedAttrList
MissingWellKnownAttr
None
OptionalAttrError
UnrecognizedWellKnown
Attr
UnsupportedOptParam
UnsupportedVersion
HOTLINKS
LACPtrunk<trunk ID>and<trunk ID>formedwithadminkey

<key>
IP
cannotcontactdefaultgateway<IP address>
IP
cannotcontact{MGTA|MGTB}portdefaultgateway<IPaddress>
IP
DynamicRoutingtableisfull
IP
Routetablefull
MGMT
Maximumnumberofloginfailures(<threshold>)hasbeen
exceeded.
Thread
LOG_ALERT Message (continued)
oflow
SwitchisconfiguredtofunctioninOpenflowMode
oflow
SwitchisconfiguredtofunctioninNormalMode
oflow
WARNING!WithOpenflowenabled,Switchlegacyfeaturesare
restrictedonOpenflowports
oflow
WARNING!UnderHybridMode,functionalityofthefollowing
featuresarenotsupportedACL,VNIC,VMREADY,FCOE,IPv6,
IPMCOPT,ECN
oflow
WARNING!withOpenflowenabled,Switchlegacyfeaturesare
notsupported
oflow
OpenflowInstance<x>disabled
oflow
OpenflowInstance<x>deleted
oflow
OpenflowInstance<x>:NoControllerAvailableforConnection
oflow
OpenflowInstance<x>:FailedtoreceiveHelloMessagefrom
Controller<y>A.B.C.D
oflow
OpenflowInstance<x>:ConnectionstoppedwithController<y>
A.B.C.D
oflow
OpenflowInstance<x>:VersionNegotiationFailedwith
Controller<y>A.B.C.D
oflow
OpenflowInstance<x>:ConnectionestablishedwithController
<y>A.B.C.D
oflow
OpenflowInstance<x>:port<z>administrativelydisabledby
controller
oflow
OpenflowInstance<x>:port<z>administrativelyenabledby
controller
oflow
OpenflowInstance<x>MaximumpermittedmulticastFDBflows
reached
oflow
OpenflowInstance<x>MaximumpermittedunicastFDBflows
reached
oflow
OpenflowInstance<x>MaximumpermittedACLflowsreached
oflow
FDBtablefull.CouldnotaddFDBentrytoOpenflowFlowTable
oflow
ACLtablefull.CouldnotaddACLentryforOpenflowFlow
Table
oflow
Openflowstatisticsclearedforallinstances
oflow
Openflowinstance<x>Openflowstatisticscleared
oflow
Openflowinstance<x>Memorynotavailable.Couldnotmodify
flowentryinOpenflowFlowTable
Appendix A: Lenovo N/OS System Log Messages
639
640
Thread
oflow
Openflowinstance<x>FlowLimitreached.Couldnotperform
Flowmodrequest
oflow
OpenflowInstance<x>,changeDPIDfrom<0xAAAAA>to
<0xBBBBB>
oflow
Memorynotavailable.Couldnotaddflowentry
oflow
FlowLimitreached.CouldnotaddFlowentrytoFlowTable
oflow
Openflowdynamictableclearedforallinstances
oflow
Openflowdynamictableclearedforinstance<x>
oflow
Openflowstatictableclearedforallinstances
oflow
Openflowstatictableclearedforinstance<x>
oflow
Openflowalltablesclearedforallinstances
oflow
Openflowalltablesclearedforinstance<x>
OSPF
InterfaceIP<IP address>,InterfaceState{Down|Loopback|
Waiting|P To P|DR|BackupDR|DR Other}:Interfacedown
detached
OSPF
LSDatabasefull:likelyincorrect/missingroutesorfailed
neighbors
OSPF
NeighborRouterID<router ID>,NeighborState{Down|
Attempt|Init|2 Way|ExStart|Exchange|Loading|Full|
Loopback|Waiting|P To P|DR|BackupDR|DROther}
OSPF
OSPFRoutetablefull:likelyincorrect/missingroutes
RMON
Event.<description>
STP
CISTnewrootbridge
STP
CISTtopologychangedetected
STP
CIST,interfaceport<port>[movedinto|leavefrom]
loopinconsistentstate
STP
CIST,interfaceport<port>[movedinto|leavefrom]
rootinconsistentstate
STP
STG<STG>,interfaceport<port>[movedinto|leavefrom]
loopinconsistentstate
STP
STG<STG>,interfaceport<port>[movedinto|leavefrom]
rootinconsistentstate
STP
STG<STG>,newrootbridge
STP
STG<STG>,topologychangedetected
STP
ToomanyBPDUsfloodedinVLAN<VLAN>.Someofthemwill
bediscarded!
Thread
SYSTEM
IngressPVST+BPDUsspottedfromport<port>
SYSTEM
LACPtrunk<trunk ID>and<trunk ID>formedwithadminkey

<key>
VLAG
vLAGHealthcheckisDown
VLAG
vLAGHealthcheckisUp
VLAG
vLAGISLisdown
VLAG
vLAGISLisup
VLAG
vLAGonLACPkey<key>is[up|down]
VLAG
vLAGonportchannel<trunkID>is[up|down]
VRRP
Received<x>virtualroutersinsteadof<y>
VRRP
receivederroredadvertisementfrom<IP address>
VRRP
receivedincorrectaddressesfrom<IP address>
VRRP
receivedincorrectadvertisementinterval<interval>from
<IP address>
VRRP
receivedincorrectVRRPadvertypefrom<IP address>
VRRP
receivedincorrectVRRPauthenticationtypefrom<IP address>
VRRP
receivedincorrectVRRPpasswordfrom<IP address>
VRRP
VRRP:receivedincorrectIPaddresseslistfrom<IP address>
641
LOG_CRIT
642
Thread
LOG_CRIT Message
SSH
cantallocatememoryinload_MP_INT()
SSH
currentlynotenoughresourceforloadingRSA{private|public
key}
SYSTEM
FanMod{1|2|3|4}Installed
SYSTEM
FanMod{1|2|3|4}Removed
SYSTEM
PowerMod{1|2}Installed
SYSTEM
PowerMod{1|2}Removed
SYSTEM
Systemmemoryisat<n>percent
LOG_ERR
Thread
LOG_ERR Message
CFG
CantassignaportwithsameprotocoltodifferentVLANs.
CFG
ConfigurationfileisEMPTY
CFG
Configurationistoolarge
CFG
DefaultVLANandmanagementVLANcannotbe
privateVLANs.
CFG
ErrorwritingactiveconfigtoFLASH!Anothersaveisinprogress
CFG
ErrorwritingactiveconfigtoFLASH!Configurationistoolarge
CFG
ErrorwritingactiveconfigtoFLASH!Unknownerror
CFG
ERROR:Cannotenable/disableRMONforMgmtPort<port>
CFG
ERROR:Morethan<maximum>VLAN(s)indownstream
CFG
Maximumallowednumber(30)ofAlarmgroupshavealready
beencreated.
CFG
Maximumallowednumber(30)ofEventgroupshavealready
beencreated.
CFG
Maximumallowednumber(5)ofHistorygroupshavealready
beencreated.
CFG
Needtoenableportstagfortaggingpvlan.
CFG
Overflow!Porthasmorethan16protocols.
CFG
Portisnotforthisprotocol.
CFG
Switchremportfailswhendisable{protocol|vlan}.
CFG
TFTP{Copy|cfgRcv}attemptingtoredirectapreviously
redirectedoutput
CFG
WARN:HavenotdefinedprotocoltypeforVLAN<VLAN>
Protocol<protocol>!
DCBX
DuplicateDCBXVNICSubTLVdetectedonport<port>
ETS
TheinternalCOS7isusedforstackcommunication;hencetheETS
prioritygroup7isnotavailable.
IP6
EXCEPTIONALCASETryingtocreateIP6Interfaceafterthe
Ip6Shutdown
IP6
Ip6SetAddr(failed):if=<interface>,rc=<reasoncode>
IP6
IPv6routetablefull
643
Thread
LOG_ERR Message (continued)
IP6
ipv6_add_interface_immediate:BufferNonLinearfor
ip6_cfa_params
IP6
ipv6_add_nbrcache_immediate:BufferNonLinearfor
ip6_cfa_params
IP6
ipv6_add_prefix_immediate:BufferNonLinearfor
ip6_cfa_params
IP6
ipv6_rem_prefix_immediate:BufferNonLinearfor
ip6_cfa_params
IP6
ipv6_rem_route_immediate:BufferNonLinearfor
ip6_cfa_params
IP6
ipv6_vlan_change_immediate:BufferNonLinearfor
ip6_cfa_params
LLDP
Error:Port<port>hasthePVID<PVID>thatisdifferentfromthe
PVID<PVID>configuredonthepeer
LLDP
Port<port>:Cannotaddnewentry.MSAPdatabaseisfull!
MGMT
Applyisissuedbyanotheruser.Trylater
MGMT
CriticalError.FailedtoaddInterface<interface>
MGMT
CriticalError.Failedto{add|attach}LoopbackInterface
<interface>
MGMT
CriticalErro.FailedtodetachLoopbackInterface<interface>
MGMT
CriticalErro.FailedtodetachLoopbackInterface<interface>
rc=<reasoncode>
MGMT
Diffisissuedbyanotheruser.Trylater
MGMT
Dumpisissuedbyanotheruser.Trylater
MGMT
Error:Applynotdone
MGMT
Error:Savenotdone.
MGMT
Firmwaredownloadfailed(insufficientmemory)
MGMT
RevertApplyisissuedbyanotheruser.Trylater
MGMT
Revertisissuedbyanotheruser.Trylater.
MGMT
Saveisissuedbyanotheruser.Trylater
NTP
unabletolistentoNTPport
PFC
PFCcanbeenabledon2prioritiesonlypriority3andoneother
priority.
PORT_MIRR ERROR:Managementport<port>cannotbeamirroredport
644
Thread
LOG_ERR Message (continued)
RMON
Maximum{Alarm|Event|History}groupsexceededwhentrying
toaddgroup<group>viaSNMP
STP
Cannotset{HelloTime|MaxAge|ForwardDelay|Aging}
(SwitchisinMSTPmode)
SYSTEM
Error:BOOTPOfferwasfoundincompatiblewiththeotherIP
interfaces
SYSTEM
Error:DHCPOfferwasfoundinvalidbyipconfiguration
checking;pleaseseesystemlogfordetails.
SYSTEM
I2Cdevice<ID><description>settoaccessstate<state>[fromCLI]
SYSTEM
Notenoughmemory!
SYSTEM
Port<port>disabled.Linkparams(speed/mode)mismatchwith
<trunkname><trunkID>
SYSTEM
Port<port>disabled.SameLACPadmin_keywithport
PORT_INT_<port>rentlinkparams(speed/mode)
SYSTEM
{PortChannel|Trunkgroup}creationfailedfor{IntPortChannel|
PortChannel|InternalTrunkgroup|Trunkgroup}<trunkID>.
Only<maximumtrunks>{PortChannels|Trunkgroups}supported
byhardware.
VRRP
VirtualRouterGroupisdisabledduetonoenabledvirtual
routers.
645
LOG_INFO
Thread
LOG_INFO Message
Systemlogclearedbyuser<username>.
SystemlogclearedviaSNMP.
646
HOTLINKS
Errorissetto{Active|Standby}
HOTLINKS
Learningissetto{Active|Standby}
HOTLINKS
Noneissetto{Active|Standby}
HOTLINKS
SideMaxissetto{Active|Standby}
HOTLINKS
hasno{SideMax|None|Learning|Error}interface
MGMT
/*Configchangesat<time>by<username>*/<configdiff>/*Done*/
MGMT
<username>ejectedfromBBI
MGMT
<username>(<usertype>){logout|ejected|idletimeout|connection
closed}from{Console|Telnet/SSH}
MGMT
<username>(<usertype>)login{onConsole|fromhost<IP address>}
MGMT
bootimagechanged
MGMT
bootkerneldownloadcompleted.Nowwritingtoflash.
MGMT
bootkerneldownloaded{fromhost<hostname>|viabrowser},
filenametoolongtobedisplayed,softwareversion<version>
MGMT
bootkerneldownloadedfromhost<hostname>,file<filename>,
softwareversion<version>
MGMT
bootkernelFirmwareuploaded.
MGMT
bootkernelFirmwareuploadfailed.
MGMT
Cantdowngradetoimagewithonlysingleflashsupport
MGMT
Couldnotrevertunsavedchanges
MGMT
Downloadalreadycurrentlyinprogress.Tryagainlatervia
{Browser|BBI}
MGMT
Error:StaticFDBentryoninexistentVLAN
MGMT
Errorinsettingthenewconfig
MGMT
Failedtoallocatebufferfordifftrack.
MGMT
Firmwaredownloadfailedto{invalidimage|image1|image2|
bootkernel|undefined|SPbootkernel}
MGMT
Firmwaredownloadedto{invalidimage|image1|image2|boot
kernel|undefined|SPbootkernel}.
Thread
LOG_INFO Message (continued)
MGMT
Flashdumpfailed
MGMT
Flashdumpsuccessfullytftpdto<hostname>:<filename>
MGMT
FLASHERRORinvalidaddressused
MGMT
FlashReadError.Failedtoreadflashintoholdingstructure.
Quitting
MGMT
FlashWriteError
MGMT
FlashWriteError.Failedtoallocatebuffer.Quitting
MGMT
FlashWriteError.Tryingagain
MGMT
image1|2downloadcompleted.Nowwritingtoflash.
MGMT
image1|2downloaded{fromhost<hostname>|viabrowser},
MGMT
image1|2downloadedfromhost<hostname>,file<filename>,
MGMT
image1|2Firmwareuploaded.
MGMT
image1|2Firmwareuploadfailed.
MGMT
Incorrectimagebeingloaded
MGMT
Invaliddifftrackaddress.Continuingwithapply()
MGMT
Invalidimagebeingloadedforthisswitchtype
MGMT
invalidimagedownloadcompleted.Nowwritingtoflash.
MGMT
invalidimagedownloaded{fromhost<hostname>|viabrowser},
MGMT
invalidimagedownloadedfromhost<hostname>,file<filename>,
MGMT
invalidimageFirmwareuploaded.
MGMT
invalidimageFirmwareuploadfailed.
MGMT
NETBOOT:Configsuccessfullydownloadedandappliedfrom
<hostname>:<filename>
MGMT
Newconfigset
MGMT
newconfigurationapplied[fromBBI|EM|SCP|SNMP]
MGMT
newconfigurationsavedfrom{BBI|ISCLI|SNMP}
MGMT
Revertfailed:configurationisdumpedormodifiedbyanother
user.
MGMT
scp<username>(<usertype>){logout|ejected|idletimeout|
connectionclosed}from{Console|Telnet/SSH}
647
648
Thread
MGMT
scp<username>(<usertype>)login{onConsole|fromhost
<IP address>}
MGMT
SPbootkerneldownloadcompleted.Nowwritingtoflash.
MGMT
SPbootkerneldownloaded{fromhost<hostname>|viabrowser},
MGMT
SPbootkerneldownloadedfromhost<hostname>,file<filename>,
MGMT
SPbootkernelFirmwareuploaded.
MGMT
SPbootkernelFirmwareuploadfailed.
MGMT
StartingFirmwaredownloadfor{invalidimage|image1|image2|
bootkernel|undefined|SPbootkernel}.
MGMT
StaticFDBentryondisabledVLAN
MGMT
StaticFDBentryoninvalidVLAN
MGMT
Techsupportdumpfailed
MGMT
Techsupportdumpsuccessfullytftpdto<hostname>:<filename>
MGMT
TwoPhaseApplyFailedinCreatingBackupConfigBlock.
MGMT
Unabletodorevertapply.ThecurrentconfigurationisinISCLI
format,itneedstobesavedinLenovoOSformat.
MGMT
undefineddownloadcompleted.Nowwritingtoflash.
MGMT
undefineddownloaded{fromhost<hostname>|viabrowser},
MGMT
undefineddownloadedfromhost<hostname>,file<filename>,
MGMT
undefinedFirmwareuploaded.
MGMT
undefinedFirmwareuploadfailed.
MGMT
unsavedchangesreverted[fromBBI|fromSNMP]
MGMT
UnsupportedGBIC{accepted|refused}
MGMT
user{SNMPuser|<username>}ejectedfromBBI
MGMT
Watchdoghasbeen{enabled|disabled}
MGMT
Watchdogtimeoutintervalisnow<seconds>seconds)
MGMT
Wrongconfigfiletype
NETCONF
<username>(<userlevel>)connectionclosedfromaddressvia
NETCONFover<connectiontype>
Thread
NETCONF
<username>(<userlevel>)loginfromhost<IPaddress>via
oflow
OpenFlow<OpenFlowID>:Connectionestablishedwithcontroller
<14><IPaddress>
oflow
OpenflowStatisticsCleared
oflow
OpenflowFlowtableCleared
oflow
OpenFlow<OpenFlowID>:Connectionlostwithcontroller<14>
<IPaddress>
RMON
RMON{alarm|event|history}index<ID>wasdeletedviaSNMP
RMON
SNMPconfigurationforRMON{alarm|event|history}index
<ID>applied
SSH
SSH
SSH
SSH
Newconfigset
SSH
SSH
<IP address>}
SSH
serverkeyautogen{starts|completes}
SSH
Wrongconfigfiletype
SYSTEM
bootedversion<version>fromFlashimage<image>,{active|
backup|factory}configblock
649
LOG_NOTICE
Thread
LOG_NOTICE Message
<minutes>{minute|minutes}untilscheduledreboot
ARPtableisfull.
Currentconfigsuccessfullytftpd<filename>from<hostname>
Currentconfigsuccessfullytftpdto<hostname>:<filename>
ECMProuteconfigured,Gatewayhealthcheckenabled
MorethanonetrunkfoundforLACPadminkey<adminkey>.Static
MACentry<index>wasaddedonlytotrunk<trunknumber>.
NumberofCOSqshasbeenchangedsinceboot.Saveandresetthe
switchtoactivatethenewconfiguration.
Port<port>modeischangedtofullduplexfor1000Mbps
operation.
scheduledswitchreboot
switchresetat<time>hasbeencanceled
switchresetscheduledat<time>
Warning:DHCPonIF<interface>willbedisabled
650
8021X
Authenticationsessionterminatedwith{Failure|Success}onport
<port>
8021X
Couldnotcreatefailovercheckpointrecordforport<port>
8021X
Logoffrequestonport<port>
8021X
Port<port>{assignedto|removedfrom}vlan<VLAN>
8021X
Port<port>{assignedto|removedfrom}guestvlan<VLAN>
BGP
badauthenticationreceived/noauthenticationreceived/
authenticationreceiveerrorfrom<IP address>
BGP
sessionestablishedwith<IP address>
CONSOLE
RADIUS:authenticationtimeout.Retrying...
CONSOLE
RADIUS:failedtocontactprimary|secondaryserver
CONSOLE
RADIUS:NoconfiguredRADIUSserver
CONSOLE
RADIUS:tryingalternateserver...
HOTLINKS
ErrorissettoStandby|Active
HOTLINKS
LearningissettoStandby|Active
HOTLINKS
NoneissettoStandby|Active
Thread
LOG_NOTICE Message (continued)
HOTLINKS
SideMaxissettoStandby|Active
HOTLINKS
IP
cannotcontactmulticastrouter<IP address>
IP
defaultgateway<IP address>{disabled|enabled|operational}
IP
EitherRouteorArptableisfull.PleasecheckGEAL3statistics
(/stat/l3/gea)toverify.
IP
IGMP{L3IPMC|L3IPv4Multicas|BackupUPgroups|Backup
DOWNgroups|IGMPgroups|IPMC}tableisfull!
IP
IGMPV1timerisrunningforgroup<IPaddress>,vlan<VLAN>[,
port<port>]Ignoredleave!
IP
L3tableisfull.PleasecheckGEAL3statistics(/stat/l3/gea)to
verify.
IP
{MGTA|MGTB}portdefaultgateway<IPaddress>operational
IP
mrouter<IPaddress>hasbeendisabledordeleted
IP
multicastrouter<IP address>operational
IP
OnVlan<VLAN>IGMPversionupdatedto<version>
IP
Received{IGMPv1|IGMPv2}queryfrom<IPaddress>
IP
VLAN<VLAN>isnotintheigmprelaylist.Mrouter<IPaddress>
willbedown
IP
Warning:DHCPonIF<interface>willbedisabled
IP
Warning:EnablingdhcpwilldeleteIPinterface<interface>andIP
gateway<gateway>sconfigurations.
IP
Warning:gateway(<gateway>)willbedeleted
LACP
Allsupportedtrunksalreadycreated.Port<port>willbedisabled
byLACP.
LACP
LACPis{up|down}onport<port>
LINK
link{down|up}onport<port>
LINK
Port<port>disabledbyBPDUGuard
LINK
Port<port>disabledbyPVSTProtection
MGMT
<username>automaticallyloggedoutfromBBIbecausechanging
ofauthenticationtype
MGMT
closed}from{BBI|Console|Telnet/SSH}
MGMT
<username>(<usertype>)login{onConsole|fromhost<IP address>|
fromBBI}
651
652
Thread
MGMT
ACL<oldnumber>fromoldconfigurationfilemovedtoACL
<new number>innewconfigurationfile
MGMT
Authenticationfailedforbackdoor.
MGMT
Authenticationfailedforbackdoor.Passwordincorrect!
MGMT
Authenticationfailedforbackdoor.Telnetdisabled!
MGMT
bootconfigblockchanged
MGMT
bootimagechanged
MGMT
bootmodechanged
MGMT
Bootprofilechanged
MGMT
enablepasswordchanged
MGMT
MGMT
Failedloginattemptvia{BBI|TELNET}fromhost<IP address>.
MGMT
FailedloginattemptviatheCONSOLE
MGMT
FLASHDumpclearedfromBBI
MGMT
Logmsgno.<x>
MGMT
MembershipforPort<port>invlan<VLAN>isnoteffectivewhile
theportisassignedwithPVID<PVID>by802.1x
MGMT
Newconfigset
MGMT
newconfigurationsavedfromISCLI
MGMT
packetbufferstatisticscleared
MGMT
PANICcommandfromCLI
MGMT
PASSWORDFIXUPMODEINUSE
MGMT
Passwordfor{oper|operator}changedby{SNMPuser|
<username>},notifyingadmintosave.
MGMT
Port<port>remainsuntaggedwhileitisassignedPVID<PVID>by
802.1x
MGMT
QSFP:Port<port>changedto{10G|40G},from{BBI|SNMP|CLI}.
MGMT
RADIUSservertimeouts
MGMT
RADIUS:authenticationtimeout.Retrying...
MGMT
RADIUS:failedtocontact{primary|secondary}server
MGMT
RADIUS:NoconfiguredRADIUSserver
MGMT
RADIUS:tryingalternateserver...
Thread
MGMT
MGMT
<IP address>}
MGMT
secondsysloghostchangedto{thishost|<IP address>}
MGMT
selectable[boot]modechanged
MGMT
STPBPDUstatisticscleared
MGMT
switchresetfromCLI
MGMT
sysloghostchangedto{thishost|<IP address>}
MGMT
Systemclocksetto<time>.
MGMT
Systemdatesetto<date>.
MGMT
TerminatingBBIconnectionfromhost<IP address>
MGMT
User<username>deletedby{SNMPuser|<username>}.
MGMT
User<username>is{deleted|disabled}andwillbeejectedby
{SNMPuser|<username>}
MGMT
User{oper|operator}isdisabledandwillbeejectedby{SNMP
user|<username>}.
MGMT
Wrongconfigfiletype
NETCONF
<username>(<userlevel>)connectionclosedfromaddressvia
NETCONF
<username>(<userlevel>)loginfromhost<IPaddress>via
NTP
Systemclockupdated
OSPF
NeighborRouterID<router ID>,NeighborState{Down|
Loopback|Waiting|P To P|DR|BackupDR|DROther|Attempt|
Init|2Way|ExStart|Exchange|Loading|Full}
OSPFV3
LinkstatedatabaseisFULL.IgnoringLSA.
OSPFV3
nbr<routerID>changesstatefrom{DOWN|ATTEMPT|INIT|
2WAY|EXSTART|EXCHANGE|LOADING|FULL}to{DOWN|
ATTEMPT|INIT|2WAY|EXSTART|EXCHANGE|LOADING|
FULL}[,NeighborDown:{Interfacedownordetached|Deadtimer
expired}]
OSPFV3
virtuallinknbr<routerID>changesstatefrom{DOWN|
ATTEMPT|INIT|2WAY|EXSTART|EXCHANGE|LOADING|
FULL}to{DOWN|ATTEMPT|INIT|2WAY|EXSTART|
EXCHANGE|LOADING|FULL}[,NeighborDown:{Interface
downordetached|Deadtimerexpired}]
653
654
Thread
SERVER
link{down|up}onport<port>
SSH
(remotedisconnectmsg)
SSH
SSH
SSH
SSH
FailedloginattemptviaSSH
SSH
Newconfigset
SSH
SSH
<IP address>}
SSH
Wrongconfigfiletype
SYSTEM
<SPFname>TXFault<SFPtype>isDISABLED
SYSTEM
<SPFname>UnApproved<SFPtype>isDISABLED
SYSTEM
<SFP type>insertedatport<port>isUNAPPROVED!Deviceis
DISABLED.
SYSTEM
Addressforinterface<interface>ignoredbecauseofmismatch.
SYSTEM
BOOTPOffer(continue):Domainname:<domain>
SYSTEM
BOOTPOffer(continue):Hostname:<host>
SYSTEM
BOOTPOffer(continue):PrimaryDNS:<IPaddress>,Secondary
DNS:<IP address>
SYSTEM
ChangefibreGIGport<port>modetofullduplex
SYSTEM
ChangefibreGIGport<port>speedto1000
SYSTEM
ChangedARPentryforIP<IP address>to:MAC<MACaddress>,
Port<port>,VLAN<VLAN>
SYSTEM
ECMProutegateway<IP address>is{down|up}
SYSTEM
EnableautonegotiationforcopperGIGport:<port>
SYSTEM
FanFault{Detected|Cleared}.Fan<fannumber>RPM<RPM
value>
SYSTEM
FanFailureWarningCleared
SYSTEM
SYSTEM
L2tableisfull!
SYSTEM
Maskforinterface<interface>ignoredbecauseofmismatch.
Thread
SYSTEM
****MAXTEMPERATURE(<temperature>)ABOVEFAILTHRESH
****
SYSTEM
****MAXTEMPERATURE(<temperature>)ABOVEWARN
THRESH****
SYSTEM
****PLATFORMTHERMALSHUTDOWN****
SYSTEM
Port<port>disabled
SYSTEM
Port<port>disabledbyOAM(unidirectional|TXRXLoop)
SYSTEM
Port<port>disabledbyUDLD(unknown|unidirectional|
bidirectional|TXRXloop|neighbormismatch)
SYSTEM
Port<port>disabledduetoreasoncode<reasoncode>
SYSTEM
PowerFault{Cleared|Detected}<number>
SYSTEM
PowerSupplyWarningCleared
SYSTEM
rebooted(<reason>)[,administratorloggedin]
Reason:
Bootwatchdogreset
consolePANICcommand
consoleRESETKEY
hardresetbySNMP
hardresetbyWEBUI
hardresetfromconsole
hardresetfromTelnet
lowmemory
MMCycledPowerDomain
powercycle
ResetButtonwaspushed
resetbySNMP
resetbyWEBUI
resetfromconsole
resetfromEM
resetfromTelnet/SSH
scheduledreboot
SMS64foundanovervoltage
SMS64foundanundervoltage
softwareASSERT
softwarePANIC
softwareVERIFY
TelnetPANICcommand
unknownreason
watchdogtimer
SYSTEM
ReceivedBOOTPOffer:IP:<IP address>,Mask:<netmask>,
Broadcast<IP address>,GW:<IP address>
SYSTEM
ReceivedDHCPOffer:IP:<IPaddress>,Mask:<netmask>Broadcast
<IP address>,GW:<IPaddress>
SYSTEM
serverwithMACaddress<MACaddress>was{addedto|removed
from}network
SYSTEM
Staticroutegateway<IP address>is{down|up}
SYSTEM
Watchdogthresholdchangedfrom<oldvalue>to<newvalue>
seconds
SYSTEM
Watchdogtimerhasbeenenabled
TEAMING
error,actionisundefined
655
656
Thread
TEAMING
isdown,butteardownisblocked
TEAMING
isdown,controlportsareautodisabled
TEAMING
isup,controlportsareautocontrolled
VLAN
DefaultVLANcannotbedeleted
VM
<IPaddress>movedfrom{port<port>|trunkIT<trunkID>}to{port
<port>|trunkIT<trunkID>}
VM
MACaddress<MACaddress>movedfrom{port<port>|trunkIT
<trunkID>}to{port<port>|trunkIT<trunkID>}
VM
[(Refresh)]VIserverunreachableorcertificateinvalid.
VM
VirtualMachinewith{IPaddress<IPaddress>|MACaddress
<MAC address>}cameonline
VM
<MACaddress>}changeditsVLANto<newVLAN>.Itwas
previouslyinVLAN<oldVLAN>
VM
<MAC address>}isamemberofVLAN<VLAN>
VM
<MAC address>}isnotinVLAN<VLAN>anymore
VM
[(Refresh)]VMagentcommandnotimplemented.
VM
[(Refresh)]VMagentcouldnotbestarted.
VM
[(Refresh)]VMagentcouldnotlogintoserver.
VM
[(Refresh)]VMagentcouldnotretrieve{host|VM}properties.
VM
[(Refresh)]VMagentencounteredafileerror.
VM
[(Refresh)]VMagentencounteredanIPCerror.
VM
[(Refresh)]VMagentfileerror.
VM
[(Refresh)]VMAgentnotactive.
VM
[(Refresh)]VMagentoperationfailedduetoaconflict.
VM
[(Refresh)]VMagentoperationfailed.
VM
[(Refresh)]VMagentoperationneedsnochange.
VM
[(Refresh)]VMagentoperationtimedout.
VM
[(Refresh)]VMagentprotocolerror.
VM
VMagentresumed(Refresh).
VM
VMagentresumed(Scan).
VM
[(Refresh)]VMagenttimedoutandcouldnotbestopped.
Thread
VM
[(Refresh)]VMagenttimedout.
VM
[(Refresh)]VMagentunabletologoutfromserver.
VM
[(Refresh)]VMagentunknownerror.
VM
[(Refresh)]VMagentVElimitreached.
VM
[(Refresh)]VMagent:InvalidID.
VM
VMagent:localtablefull.
VM
VMMAC<MACaddress>NOTaddedtohashtable
VM
VMmovedetectedbutfailedtomovenetworkconf
VRRP
virtualrouter<IP address>isnow{BACKUP|MASTER}
WEB
<username>ejectedfromBBI
WEB
<username>ejectedfromBBIbecauseusernamepasswordwas
changed
WEB
RSAhostkeyisbeingsavedtoFlashROM,pleasedontrebootthe
boximmediately.
657
LOG_WARNING
Thread
LOG_WARNING Message
ChangingnumcossetsupthedefaultCOSqconfiguration.Please
seediff.
StaticIPMCroutegroup<groupnumber>onvlan<VLAN>
[primary|backup]hasbeenconvertedtoahostroutegroup
becauseIGMPsnoopingisenabled.
658
8021X
RADIUSserver<IP address>authresponseforport<port>hasan
invalidTunnelTypevalue(<tunnel type>);shouldbe13forVLAN
assignment
8021X
RADIUSserver<IP address>authresponseforport<port>hasan
invalidTunnelMediumTypevalue(<tunnel type>);shouldbe6
forVLANassignment
8021X
RADIUSserver<IP address>authresponseforport<port>is
missingoneormoretunnelingattributesforVLANassignment
8021X
RADIUSserver<IP address>authresponsehasaVLANid
(<VLAN>)ofareservedVLANandcannotbeassignedtoport
<port>
8021X
RADIUSserver<IP address>authresponsehasaVLANid
(<VLAN>)ofanonexistentordisabledVLAN,andcannotbe
assignedtoport<port>
8021X
RADIUSserver<IP address>authresponsehasaninvalidVLAN
id(<VLAN>)andcannotbeassignedtoport<port>
CFG
AuthenticationshouldbedisabledtorunRIPv2inRIPv1
compatibilitymodeoninterface<interface>.
CFG
Configured{sip|dip|protocol|tcpl4|udpl4|port|dport}hashing
withouttcpl4orudpl4.{sip|dip|protocol|tcpl4|udpl4|port|
dport}hashingwillbeignored!
CFG
Configured{sip|dip|protocol|tcpl4|udpl4|port|dport}hashing
withoutsportordport.{sip|dip|protocol|tcpl4|udpl4|port|
dport}hashingwillbeignored!
CFG
MulticastshouldbedisabledtorunRIPv2inRIPv1compatibility
modeoninterface<interface>.
CFG
StaticIPMCroutegroup<IPaddress>onVLAN<VLAN>
[primary|backup]hasbeenconvertedtoahostroutegroup
becauseIGMPsnoopingisenabled.
CFG
Switchcannotsupportmorethan16protocolssimultaneously!
CFG
Trunkhashchanged,DataplaneL3hashincludesconfigured
TrunkhashandECMPhash
CFG
Unfitconfigexistswhenprotocolvlanapply.
Thread
LOG_WARNING Message (continued)
ETS
ETSprohibitsaPGcomprisingofPFCandnonPFCtraffic.
MixinginthesamePGdifferentPFCsettingsmayaffectthe
switchfunctionality.
HOTLINKS
ErrorissettoStandby|Active
HOTLINKS
LearningissettoStandby|Active
HOTLINKS
NoneissettoStandby|Active
HOTLINKS
SideMaxissettoStandby|Active
HOTLINKS
IP
<IP address>configuredasV<version>andreceivedIGMPV{1|2}
query
IP
IGMP:Querier{disabled|enabled}onVLAN<VLAN>
IP
IGMP:SwitchQuerier{disabled|enabled}onVLAN<VLAN>
IP
IGMP:Switch{became|isnolonger}aQuerierforVLAN<VLAN>
IP
IGMP:Switchis[not]electedasQuerierforVLAN<VLAN>
IP
IGMP:SwitchQuerierelectionprocessstartedforVLAN<VLAN>
IP
IGMP:SwitchQuerierelectiontypechangedforVLAN<VLAN>
IP
IGMP:WarningQuerierSourceIPisnotconfiguredonVLAN
<VLAN>QuerieswithSourceIPZeromaybeignoredinQuerier
electionprocess.
IP
IGMP:WarningSnoopingisnotenabledonVLAN<VLAN>,
Querierconfiguredonlytosendqueries.
IP
NewMulticastrouterlearnedon<IPaddress>,VLAN<VLAN>,
Version{V1|V2|V3}
IP
OnVLAN<VLAN>IGMPversionupdatedtoIGMPv3
NTP
cannotcontactanyNTPserver
NTP
cannotcontactNTPserver<IP address>{Mgmt|Extmgt}port
unavailable
NTP
cannotcontact[primary|secondary]NTPserver<IP address>
SYSTEM
SYSTEM
Interface<interface>failedtorenewDHCPLease.
TEAMING
error,actionisundefined
TEAMING
isdown,butteardownisblocked
TEAMING
isdown,controlportsareautodisabled
TEAMING
isup,controlportsareautocontrolled
659
660
Appendix B. Getting help and technical assistance

Ifyouneedhelp,serviceortechnicalassistance,orjustwantmoreinformation
aboutLenovoproducts,youwillfindawidevarietyofsourcesavailablefrom
Lenovotoassistyou.
UsethisinformationtoobtainadditionalinformationaboutLenovoandLenovo
products,anddeterminewhattodoifyouexperienceaproblemwithyourLenovo
systemoroptionaldevice.
Note: ThissectionincludesreferencestoIBMwebsitesandinformationabout
obtainingservice.IBMisLenovospreferredserviceproviderfortheSystemx,Flex
System,andNeXtScaleSystemproducts.
Beforeyoucall,makesurethatyouhavetakenthesestepstotrytosolvethe
problemyourself.
IfyoubelievethatyourequirewarrantyserviceforyourLenovoproduct,the
servicetechnicianswillbeabletoassistyoumoreefficientlyifyoupreparebefore
youcall.
Checkallcablestomakesurethattheyareconnected.
Checkthepowerswitchestomakesurethatthesystemandanyoptional
devicesareturnedon.
Checkforupdatedsoftware,firmware,andoperatingsystemdevicedriversfor
yourLenovoproduct.TheLenovoWarrantytermsandconditionsstatethat
you,theowneroftheLenovoproduct,areresponsibleformaintainingand
updatingallsoftwareandfirmwarefortheproduct(unlessitiscoveredbyan
additionalmaintenancecontract).Yourservicetechnicianwillrequestthatyou
upgradeyoursoftwareandfirmwareiftheproblemhasadocumentedsolution
withinasoftwareupgrade.
Ifyouhaveinstallednewhardwareorsoftwareinyourenvironment,checkthe
IBMServerProvenwebsitetomakesurethatthehardwareandsoftwareis
supportedbyyourproduct.
GototheIBMSupportportaltocheckforinformationtohelpyousolvethe
problem.
Gatherthefollowinginformationtoprovidetotheservicetechnician.Thisdata
willhelptheservicetechnicianquicklyprovideasolutiontoyourproblemand
ensurethatyoureceivethelevelofserviceforwhichyoumighthavecontracted.
HardwareandSoftwareMaintenanceagreementcontractnumbers,if
applicable
Machinetypenumber(Lenovo4digitmachineidentifier)
Modelnumber
Serialnumber
CurrentsystemUEFIandfirmwarelevels
Otherpertinentinformationsuchaserrormessagesandlogs
661
Starttheprocessofdeterminingasolutiontoyourproblembymakingthe
pertinentinformationavailabletotheservicetechnicians.TheIBMservice
technicianscanstartworkingonyoursolutionassoonasyouhavecompleted
andsubmittedanElectronicServiceRequest.
Youcansolvemanyproblemswithoutoutsideassistancebyfollowingthe
troubleshootingproceduresthatLenovoprovidesintheonlinehelporinthe
Lenovoproductdocumentation.TheLenovoproductdocumentationalso
describesthediagnosticteststhatyoucanperform.Thedocumentationformost
systems,operatingsystems,andprogramscontainstroubleshootingprocedures
andexplanationsoferrormessagesanderrorcodes.Ifyoususpectasoftware
problem,seethedocumentationfortheoperatingsystemorprogram.
662
Appendix C. Notices
Lenovomaynotoffertheproducts,services,orfeaturesdiscussedinthis
documentinallcountries.ConsultyourlocalLenovorepresentativefor
informationontheproductsandservicescurrentlyavailableinyourarea.
AnyreferencetoaLenovoproduct,program,orserviceisnotintendedtostateor
implythatonlythatLenovoproduct,program,orservicemaybeused.Any
functionallyequivalentproduct,program,orservicethatdoesnotinfringeany
Lenovointellectualpropertyrightmaybeusedinstead.However,itistheusers
responsibilitytoevaluateandverifytheoperationofanyotherproduct,program,
orservice.
Lenovomayhavepatentsorpendingpatentapplicationscoveringsubjectmatter
describedinthisdocument.Thefurnishingofthisdocumentdoesnotgiveyouany
licensetothesepatents.Youcansendlicenseinquiries,inwriting,to:
Lenovo(UnitedStates),Inc.
1009ThinkPlaceBuildingOne
Morrisville,NC27560
U.S.A.
Attention:LenovoDirectorofLicensing
LENOVOPROVIDESTHISPUBLICATIONASISWITHOUTWARRANTYOF
ANYKIND,EITHEREXPRESSORIMPLIED,INCLUDING,BUTNOTLIMITED
TO,THEIMPLIEDWARRANTIESOFNONINFRINGEMENT,
MERCHANTABILITYORFITNESSFORAPARTICULARPURPOSE.Some
jurisdictionsdonotallowdisclaimerofexpressorimpliedwarrantiesincertain
transactions,therefore,thisstatementmaynotapplytoyou.
Thisinformationcouldincludetechnicalinaccuraciesortypographicalerrors.
Changesareperiodicallymadetotheinformationherein;thesechangeswillbe
incorporatedinneweditionsofthepublication.Lenovomaymakeimprovements
and/orchangesintheproduct(s)and/ortheprogram(s)describedinthis
publicationatanytimewithoutnotice.
Theproductsdescribedinthisdocumentarenotintendedforuseinimplantation
orotherlifesupportapplicationswheremalfunctionmayresultininjuryordeath
topersons.Theinformationcontainedinthisdocumentdoesnotaffectorchange
Lenovoproductspecificationsorwarranties.
Nothinginthisdocumentshalloperateasanexpressorimpliedlicenseor
indemnityundertheintellectualpropertyrightsofLenovoorthirdparties.All
informationcontainedinthisdocumentwasobtainedinspecificenvironmentsand
ispresentedasanillustration.Theresultobtainedinotheroperatingenvironments
mayvary.
Lenovomayuseordistributeanyoftheinformationyousupplyinanywayit
believesappropriatewithoutincurringanyobligationtoyou.
AnyreferencesinthispublicationtononLenovoWebsitesareprovidedfor
convenienceonlyanddonotinanymannerserveasanendorsementofthoseWeb
sites.ThematerialsatthoseWebsitesarenotpartofthematerialsforthisLenovo
product,anduseofthoseWebsitesisatyourownrisk.
663
Anyperformancedatacontainedhereinwasdeterminedinacontrolled
environment.Therefore,theresultobtainedinotheroperatingenvironmentsmay
varysignificantly.Somemeasurementsmayhavebeenmadeon
developmentlevelsystemsandthereisnoguaranteethatthesemeasurementswill
bethesameongenerallyavailablesystems.Furthermore,somemeasurements
mayhavebeenestimatedthroughextrapolation.Actualresultsmayvary.Usersof
thisdocumentshouldverifytheapplicabledatafortheirspecificenvironment.
664
Trademarks
Lenovo,theLenovologo,FlexSystem,Systemx,NeXtScaleSystem,and
XArchitecturearetrademarksofLenovointheUnitedStates,othercountries,or
both.
IntelandIntelXeonaretrademarksofIntelCorporationintheUnitedStates,other
countries,orboth.
InternetExplorer,Microsoft,andWindowsaretrademarksoftheMicrosoftgroup
ofcompanies.
LinuxisaregisteredtrademarkofLinusTorvalds.
Othercompany,product,orservicenamesmaybetrademarksorservicemarksof
others.
Appendix C: Notices
665
Important Notes
Processorspeedindicatestheinternalclockspeedofthemicroprocessor;other
factorsalsoaffectapplicationperformance.
CDorDVDdrivespeedisthevariablereadrate.Actualspeedsvaryandareoften
lessthanthepossiblemaximum.
Whenreferringtoprocessorstorage,realandvirtualstorage,orchannelvolume,
KBstandsfor1024bytes,MBstandsfor1048576bytes,andGBstandsfor1073
741824bytes.
Whenreferringtoharddiskdrivecapacityorcommunicationsvolume,MBstands
for1000000bytes,andGBstandsfor1000000000bytes.Totaluseraccessible
capacitycanvarydependingonoperatingenvironments.
Maximuminternalharddiskdrivecapacitiesassumethereplacementofany
standardharddiskdrivesandpopulationofallharddiskdrivebayswiththe
largestcurrentlysupporteddrivesthatareavailablefromLenovo.
Maximummemorymightrequirereplacementofthestandardmemorywithan
optionalmemorymodule.
Eachsolidstatememorycellhasanintrinsic,finitenumberofwritecyclesthatthe
cellcanincur.Therefore,asolidstatedevicehasamaximumnumberofwrite
cyclesthatitcanbesubjectedto,expressedastotalbyteswritten(TBW).Adevice
thathasexceededthislimitmightfailtorespondtosystemgeneratedcommands
ormightbeincapableofbeingwrittento.Lenovoisnotresponsiblefor
replacementofadevicethathasexceededitsmaximumguaranteednumberof
program/erasecycles,asdocumentedintheOfficialPublishedSpecificationsfor
thedevice.
LenovomakesnorepresentationsorwarrantieswithrespecttononLenovo
products.Support(ifany)forthenonLenovoproductsisprovidedbythethird
party,notLenovo.
Somesoftwaremightdifferfromitsretailversion(ifavailable)andmightnot
includeusermanualsorallprogramfunctionality.
666
Recycling Information
Lenovoencouragesownersofinformationtechnology(IT)equipmentto
responsiblyrecycletheirequipmentwhenitisnolongerneeded.Lenovooffersa
varietyofprogramsandservicestoassistequipmentownersinrecyclingtheirIT
products.ForinformationonrecyclingLenovoproducts,goto:
http://www.lenovo.com/recycling
Appendix C: Notices
667
Particulate Contamination
Attention:Airborneparticulates(includingmetalflakesorparticles)andreactive
gasesactingaloneorincombinationwithotherenvironmentalfactorssuchas
humidityortemperaturemightposearisktothedevicethatisdescribedinthis
document.
Risksthatareposedbythepresenceofexcessiveparticulatelevelsor
concentrationsofharmfulgasesincludedamagethatmightcausethedeviceto
malfunctionorceasefunctioningaltogether.Thisspecificationsetsforthlimitsfor
particulatesandgasesthatareintendedtoavoidsuchdamage.Thelimitsmustnot
beviewedorusedasdefinitivelimits,becausenumerousotherfactors,suchas
temperatureormoisturecontentoftheair,caninfluencetheimpactofparticulates
orenvironmentalcorrosivesandgaseouscontaminanttransfer.Intheabsenceof
specificlimitsthataresetforthinthisdocument,youmustimplementpractices
thatmaintainparticulateandgaslevelsthatareconsistentwiththeprotectionof
humanhealthandsafety.IfLenovodeterminesthatthelevelsofparticulatesor
gasesinyourenvironmenthavecauseddamagetothedevice,Lenovomay
conditionprovisionofrepairorreplacementofdevicesorpartsonimplementation
ofappropriateremedialmeasurestomitigatesuchenvironmentalcontamination.
Implementationofsuchremedialmeasuresisacustomerresponsibility..
Contaminant
Limits
Particulate
Theroomairmustbecontinuouslyfilteredwith40%atmospheric
dustspotefficiency(MERV9)accordingtoASHRAEStandard52.21.
Airthatentersadatacentermustbefilteredto99.97%efficiencyor
greater,usinghighefficiencyparticulateair(HEPA)filtersthatmeet
MILSTD282.
Thedeliquescentrelativehumidityoftheparticulatecontamination
mustbemorethan60%2.
Theroommustbefreeofconductivecontaminationsuchaszincwhis
kers.
Gaseous
Copper:ClassG1asperANSI/ISA71.0419853
Silver:Corrosionrateoflessthan300in30days
ASHRAE52.22008MethodofTestingGeneralVentilationAirCleaningDevicesforRemoval
EfficiencybyParticleSize.Atlanta:AmericanSocietyofHeating,RefrigeratingandAirCon
ditioningEngineers,Inc.
2Thedeliquescentrelativehumidityofparticulatecontaminationistherelativehumidity
atwhichthedustabsorbsenoughwatertobecomewetandpromoteionicconduction.
3ANSI/ISA71.041985.Environmentalconditionsforprocessmeasurementandcontrolsystems:
Airbornecontaminants.InstrumentSocietyofAmerica,ResearchTrianglePark,NorthCar
olina,U.S.A.
668
Telecommunication Regulatory Statement

Thisproductmaynotbecertifiedinyourcountryforconnectionbyanymeans
whatsoevertointerfacesofpublictelecommunicationsnetworks.Further
certificationmayberequiredbylawpriortomakinganysuchconnection.Contact
aLenovorepresentativeorresellerforanyquestions.
Appendix C: Notices
669
Electronic Emission Notices

Whenyouattachamonitortotheequipment,youmustusethedesignated
monitorcableandanyinterferencesuppressiondevicesthataresuppliedwiththe
monitor.
Federal Communications Commission (FCC) Statement

Note:Thisequipmenthasbeentestedandfoundtocomplywiththelimitsfora
ClassAdigitaldevice,pursuanttoPart15oftheFCCRules.Theselimitsare
designedtoprovidereasonableprotectionagainstharmfulinterferencewhenthe
equipmentisoperatedinacommercialenvironment.Thisequipmentgenerates,
uses,andcanradiateradiofrequencyenergyand,ifnotinstalledandusedin
accordancewiththeinstructionmanual,maycauseharmfulinterferencetoradio
communications.Operationofthisequipmentinaresidentialareaislikelyto
causeharmfulinterference,inwhichcasetheuserwillberequiredtocorrectthe
interferenceathisownexpense.
ProperlyshieldedandgroundedcablesandconnectorsmustbeusedtomeetFCC
emissionlimits.Lenovoisnotresponsibleforanyradioortelevisioninterference
causedbyusingotherthanrecommendedcablesandconnectorsorby
unauthorizedchangesormodificationstothisequipment.Unauthorizedchanges
ormodificationscouldvoidtheusersauthoritytooperatetheequipment.
ThisdevicecomplieswithPart15oftheFCCRules.Operationissubjecttothe
followingtwoconditions:(1)thisdevicemaynotcauseharmfulinterference,and
(2)thisdevicemustacceptanyinterferencereceived,includinginterferencethat
mightcauseundesiredoperation.
Industry Canada Class A Emission Compliance Statement

ThisClassAdigitalapparatuscomplieswithCanadianICES003.
Avis de Conformit la Rglementation d'Industrie Canada

CetappareilnumriquedelaclasseAestconformelanormeNMB003du
Canada.
Australia and New Zealand Class A Statement

Attention:ThisisaClassAproduct.Inadomesticenvironmentthisproductmay
causeradiointerferenceinwhichcasetheusermayberequiredtotakeadequate
measures.
European Union EMC Directive Conformance Statement

ThisproductisinconformitywiththeprotectionrequirementsofEUCouncil
Directive2004/108/EContheapproximationofthelawsoftheMemberStates
relatingtoelectromagneticcompatibility.Lenovocannotacceptresponsibilityfor
anyfailuretosatisfytheprotectionrequirementsresultingfroma
nonrecommendedmodificationoftheproduct,includingtheinstallationof
optioncardsfromothermanufacturers.
670
ThisproducthasbeentestedandfoundtocomplywiththelimitsforClassA
InformationTechnologyEquipmentaccordingtoEuropeanStandardEN55022.
ThelimitsforClassAequipmentwerederivedforcommercialandindustrial
environmentstoprovidereasonableprotectionagainstinterferencewithlicensed
communicationequipment.
Lenovo,Einsteinova21,85101Bratislava,Slovakia
Germany Class A Statement

ZulassungsbescheinigunglautdemDeutschenGesetzberdie
elektromagnetischeVertrglichkeitvonBetriebsmitteln,EMVGvom20.Juli
2007(frherGesetzberdieelektromagnetischeVertrglichkeitvonGerten),
bzw.derEMVEGRichtlinie2004/108/EC(frher89/336/EWG),frGerteder
KlasseA.
DiesesGertistberechtigt,inbereinstimmungmitdemDeutschenEMVGdas
EGKonformittszeichenCEzufhren.Verantwortlichfrdie
KonformittserklrungnachParagraf5desEMVGistdieLenovo(Deutschland)
GmbH,Gropiusplatz10,D70563Stuttgart.
InformationeninHinsichtEMVGParagraf4Abs.(1)4:
DasGerterflltdieSchutzanforderungennachEN55024undEN55022Klasse
A.
NachderEN55022:DiesisteineEinrichtungderKlasseA.DieseEinrichtung
kannimWohnbereichFunkstrungenverursachen;indiesemFallkannvom
Betreiberverlangtwerden,angemesseneManahmendurchzufhrenunddafr
aufzukommen.
NachdemEMVG:DiesesProduktentsprichtdenSchutzanforderungender
EURichtlinie2004/108/EG(frher89/336/EWG)zurAngleichungder
RechtsvorschriftenberdieelektromagnetischeVertrglichkeitinden
EUMitgliedsstaatenundhltdieGrenzwertederEN55022KlasseAein.
Umdiesessicherzustellen,sinddieGertewieindenHandbchernbeschrieben
zuinstallierenundzubetreiben.DesWeiterendrfenauchnurvonderLenovo
empfohleneKabelangeschlossenwerden.Lenovobernimmtkeine
VerantwortungfrdieEinhaltungderSchutzanforderungen,wenndasProdukt
ohneZustimmungderLenovoverndertbzw.wennErweiterungskomponenten
vonFremdherstellernohneEmpfehlungderLenovogesteckt/eingebautwerden.
Deutschland:
EinhaltungdesGesetzesberdieelektromagnetischeVertrglichkeitvon
Betriebsmittein
DiesesProduktentsprichtdemGesetzberdieelektromagnetische
VertrglichkeitvonBetriebsmittelnEMVG(frherGesetzberdie
elektromagnetischeVertrglichkeitvonGerten).DiesistdieUmsetzungder
EURichtlinie2004/108/EG(frher89/336/EWG)inderBundesrepublik
Deutschland.
Appendix C: Notices
671
ZulassungsbescheinigunglautdemDeutschenGesetzberdie
elektromagnetischeVertrglichkeitvonBetriebsmitteln,EMVGvom20.Juli
2007(frherGesetzberdieelektromagnetischeVertrglichkeitvonGerten),
bzw.derEMVEGRichtlinie2004/108/EC(frher89/336/EWG),frGerteder
KlasseA.
DiesesGertistberechtigt,inbereinstimmungmitdemDeutschenEMVGdas
EGKonformittszeichenCEzufhren.Verantwortlichfrdie
KonformittserklrungnachParagraf5desEMVGistdieLenovo(Deutschland)
GmbH,Gropiusplatz10,D70563Stuttgart.
InformationeninHinsichtEMVGParagraf4Abs.(1)4:
DasGerterflltdieSchutzanforderungennachEN55024undEN55022Klasse
A.
NachderEN55022:DiesisteineEinrichtungderKlasseA.DieseEinrichtung
kannimWohnbereichFunkstrungenverursachen;indiesemFallkannvom
Betreiberverlangtwerden,angemesseneManahmendurchzufhrenunddafr
aufzukommen.
NachdemEMVG:GertedrfenanOrten,frdiesienichtausreichendentstrt
sind,nurmitbesondererGenehmigungdesBundesministersfrPostund
TelekommunikationoderdesBundesamtesfrPostundTelekommunikation
betriebenwerden.DieGenehmigungwirderteilt,wennkeineelektromagnetischen
Strungenzuerwartensind.(AuszugausdemEMVG,Paragraph3,Abs.4).
DiesesGenehmigungsverfahrenistnachParagraph9EMVGinVerbindungmit
derentsprechendenKostenverordnung(Amtsblatt14/93)kostenpflichtig.
Anmerkung:UmdieEinhaltungdesEMVGsicherzustellensinddieGerte,wiein
denHandbchernangegeben,zuinstallierenundzubetreiben.
Japan VCCI Class A Statement
ThisisaClassAproductbasedonthestandardoftheVoluntaryControlCouncil
forInterference(VCCI).Ifthisequipmentisusedinadomesticenvironment,radio
interferencemayoccur,inwhichcasetheusermayberequiredtotakecorrective
actions.
672
Japan Electronics and Information Technology Industries Association

(JEITA) Statement
JapanElectronicsandInformationTechnologyIndustriesAssociation(JEITA)
ConfirmedHarmonicsGuidelines(productslessthanorequalto20Aperphase)
JapanElectronicsandInformationTechnologyIndustriesAssociation(JEITA)
ConfirmedHarmonicsGuidelineswithModifications(productsgreaterthan20A
perphase).
Korea Communications Commission (KCC) Statement
Thisiselectromagneticwavecompatibilityequipmentforbusiness(TypeA).
Sellersandusersneedtopayattentiontoit.Thisisforanyareasotherthanhome.
Appendix C: Notices
673
Russia Electromagnetic Interference (EMI) Class A statement
674
Peoples Republic of China Class A electronic emission

statement
Appendix C: Notices
675
Taiwan Class A compliance statement
676
Index
Numerics
802.1p
ACLandTOSmapping 369
configuration 354
DSCPconfiguration 355
information 140
prioritylevel 339, 361
IPv6 371
MACL 380
VMAP 384
priorityvalue 354
remarkingthevalue 369
remarkingthevalue(IPv6) 375
802.1x
configuration 391
controlplaneprotection 356
guestVLANconfiguration 394
information 55
portconfiguration 395
RADIUSservertimeout 393
SpanningTreeinformation 72
A
abbreviatingcommands(CLI) 28
accesscontrol
user 329
ACL
IPv6 371
logconfiguration 378
meterconfiguration 368
portcommands 349
portmetering 368
portmirroring 362
portremarkconfiguration 369
remarking(IPv6) 375, 377
statistics 275, 276
activeconfigurationblock 287, 608
activeIPinterface 534
activeport
LACP 425
VLAN 534
activeswitchconfiguration
gtcfg 586
ptcfg 585
restoring 586
savingandloading 586
addr(IProutetag) 89
administratoraccount 29
asnum(attachedswitchnumber) 353
assistance,getting 661
AustraliaClassAstatement 670
autonomoussystemfilter
action 461
configuration 455
configuration(display) 461
delete 461
enable 461
path(aspathlist) 461
pathnumber 461
B
backupconfigurationblock 608
BGP 89
aggregationconfiguration 499
community 456
configuration 493
configurationmode 23
eBGP 493
filters,aggregationconfiguration 498
iBGP 493
inroute 496
IPaddress,borderrouter 496
keepalivetime 497
peer 494
peerconfiguration 495
remoteautonomoussystem 496
routereflectorclient 496
routerhops 497
TTLsecurityhops 497
bgp(IProutetag) 89
BootManagementmenu 612
Bootoptions 597 to ??
bootstrapprotocol 525
BorderGatewayProtocol(seeBGP) 493
bridgepriority 77, 79
BridgeProtocolDataUnit(BPDU) 77, 78, 79, 404
BridgeSpanningTreeparameters 405
broadcast(IProutetag) 90
broadcast(IProutetype) 89
C
CanadaClassAelectronicemissionstatement 670
capturedumpinformationtoafile 632
ChinaClassAelectronicemissionstatement 675
CiscoEtherChannel 416
CISTinformation 79
ClassAelectronicemissionnotice 670
Index
677
clear
countersforallinterfacesandqueues 174
CPUusestatistics 171
dumpinformation 634
FDBstatistics 195
hotlinksstatistics 195
IPv4statistics 206
IPv6statistics 206
LACPstatistics 195
MPrelatedstatistics 171
portstatistics 171, 174
statisticsforallports 173
trunkgroupstatistics 193
vLAGstatistics 201
CLIDisplay 34
command(help) 26
commands
abbreviations 28
conventionsusedinthismanual 18
modes 22
shortcuts 28
tabcompletion 28
configuration
commands 285 to ??
defaultgatewayinterval,forhealthchecks 446
defaultgatewayIPaddress 446
dumpcommand 584
failover 427
global 22
IPstaticroute 447
LACP 424
portlinkspeed 345
portmirroring 390
porttrunking 416
RIP 463
savechanges 287
switchIPaddress 441
virtualization 554
VLANdefault(PVID) 343
VLANIPinterface 442
VLANtagging 341
configurationblock
active 608
backup 608
factory 608
selection 608
contamination,particulateandgaseous 668
controlplaneprotection(CoPP) 356
COS,queueinformationClassofService(seeCOS) 140
cost(STPinformation) 73, 75, 80
CPU
statistics 271
statisticshistory 272
use 271
usehistory 272
csnum(configuredswitchnumber) 352
678
D
daylightsavingstime 289
debugging 617
defaultgateway
information 85
defaultgateway,interval(forhealthchecks) 446
defaultpassword 29
delete
countersforallinterfacesandqueues 174
CPUusestatistics 171
FDBentry 619
FDBstatistics 195
hotlinksstatistics 195
IPv4statistics 206
IPv6statistics 206
LACPstatistics 195
MPrelatedstatistics 171
portstatistics 171, 174
statisticsforallports 173
trunkgroupstatistics 193
vLAGstatistics 201
DHCP
Snooping 549
direct(IProutetype) 89
directedbroadcasts 453
DISC(portstate) 73, 75
disconnectidletimeout 30
downloadingsoftware 606
DSB(portstate) 75
dump
configurationcommand 584
maintenance 617
duplexmode,linkstatus 31, 160
dynamicroutes 626
E
ECMP
hashingconfiguration 447
routeinformation 114
ECN(ExplicitCongestionNotification) 358
EdgeVirtualBridging,configuration 565
electronicemissionClassAnotice 670
errordisableandrecovery
port 344
system 293
EtherChannel,withporttrunking 416
EuropeanUnionEMCDirectiveconformancestatement
670
EVB
ExplicitCongestionNotification(ECN) 358
factoryconfigurationblock 608
failover
configuration 427
manualmonitorcontrolconfiguration 429
manualmonitorportconfiguration 428
triggerconfiguration 427
FCCClassAnotice 670
FCC,ClassA 670
FDB
deleteentry 619
maintenance 619
managinginformation 617
statistics 196
fixed(IProutetag) 89
flagfield 93
flowcontrol 31, 160
CBPdiscards 186
IBPdiscards 186
pausepackets 184, 185
setting 345
forwarding
database(seeFDB) 196
database,deleteentry 619
FDBmaintenance 619
state(FWD) 59, 81
ForwardingDatabase(seeFDB) 57
forwardingstate
(FWD) 77, 78, 80
FWD(portstate) 73, 75
fwd(STPbridgeoption) 404
FwdDel(forwarddelay),bridgeport 77, 78, 80
ICMP
statistics 219
idletimeout,setting 30
IEEEstandards
802.1x 55, 72
IGMP
advancedparameters 511
configuration 503
information 115
multicastrouterinformation 118
querier 512
querierinformation 117
relay 506
snooping 504
statistics 224
IKEv2
configuring 515
identification,configuring 517
information 130
presharekeys 515
proposal 516
image
downloading 606
software,selecting 607
indirect(IProutetype) 89
informationcommands 31 to ??
interfacechangestatistics 232, 237
IPaddress
ARPinformation 91
invalid 187
invalid(IPv4) 208
invalid(IPv6) 211
IPforwarding
directedbroadcasts 453
information 85
IPinformation 85, 127
IPinterface 89
active 534
addressofdefaultgateway 446
configuringaddress 441
configuringVLANs 442
information 85
IProutetag 89
networkfilterconfiguration 454
priorityincrementvalue(ifs)forVRRP 536
IProuting
information 88
information(IPv6) 110
manipulation 626
tagparameters 89
tags 89
types 89
IPStaticRoutecommands 447
G
gaseouscontamination 668
gateway
clearingroutesthatuse 448
defaultgatewayconfiguration(IPv4) 446
IPv6 543
GermanyClassAstatement 671
gettinghelp 661
gtcfg(TFTPloadcommand) 586
H
healthchecks
defaultgatewayinterval,retries 446
retry,numberoffailedhealthchecks 446
hello(STPinformation) 77, 78, 79
help
online 26
sourcesof 661
help,getting 661
HotLinksconfiguration 430
hotstandbyfailover 532
HTTPS 332
Index
679
IPMC
displayallgroupsregistered 87
groupinformation 119
IPsec
configuring 518
information 131
Layer3configuration 486, 489
trafficselector,configuring 519
transformset,configuring 518
IPv4
clearstatistics 206
routestatistics 215
statistics 208
IPv6
ACLconfiguration 371
clearstatistics 206
defaultgatewayconfiguration 543
NDprefixconfiguration 545
NeighborDiscoverycacheconfiguration 544
NeighborDiscoveryconfiguration 443
PathMTUconfiguration 545
PathMTUinformation 126
remarkconfiguration 375, 377
routestatistics 216
staticroute 544
statistics 210
ISCLIcommands
basics 21 to 30
modes 22
J
JapanClassAelectronicemissionstatement 672
Japan Electronics and Information Technology Indus
triesAssociationstatement 673
JEITAstatement 673
K
KoreaClassAelectronicemissionstatement 673
L
LACP
clearstatistics 195
configuration 424
information 60
interfaceportchannelmode 339
loggedpacketstatistics 266
statistics 194, 197
vLAGinformation 70
Layer2commands 52
Layer3commands 84
LDAP
configuration 308
serveraddress 309
680
LED,ServiceRequired 291
LightweightDirectoryAccessProtocol(seeLDAP) 308
LinkAggregationControlProtocol(seeLACP) 194
LinkFlapDampening(LFD) 294
LinkLayerDetectionProtocol(seeLLDP) 194
linkspeed,configuring 345
linkstatus 31
command 160
duplexmode 31, 160
information 160
portspeed 31, 160
linkt(SNMPoption) 313
LLDP
configuration 412
information 65
statistics 194, 199
local(IProutetype) 89
logs
ACL 378
clear 260
syslogmessages 296
loopback
information 98
interfaceconfiguration 548
NTPsourceinterface 311
OSPF,information 100
PIMinterfaceinformation 134
RADIUSsourceinterface,setting 302
settinginterfacenumberforsyslogs 296
SNMPtrapssourceinterface 314
TACACS+sourceinterface 306
LRN(portstate) 73, 75, 77, 78, 80
M
MACaddress 32, 45, 57, 91, 619
multicastconfiguration 408
MACaddressspoofprevention 559
Maintenancecommands 617 to 635
manualstyleconventions 18
martian
IProutetag(filtered) 90
IProutetype(filteredout) 89
MaxAge(STPinformation) 77, 78, 79
MD5
cryptographicauthentication 467
key 470
MediaAccessControladdress(seeMAC) 57
MiscellaneousDebugcommands 620
MLD
globalconfiguration 500
globalstatistics 227
information 85, 120
Mrouterinformation 121
statisticscommands 226
monitorport 390
MP
clearstatistics 171
debugcommands 620
displayMACaddress 32, 45
packet 261
packetstatistics 260
processorstatistics 259
MST 24
multicast
MAC 408
routerinformation 118
multicast(IProutetype) 89
MulticastListenerDiscoveryProtocol(seeMLD) 24
mxage(STPbridgeoption) 404
N
nbrchangestatistics 231, 237
NeighborDiscovery
cacheconfiguration 544
cachemanipulation(IPv6) 629
IPv6 443
prefix 545
NetworkConfigurationProtocol(NETCONF) 328
NewZealandClassAstatement 670
notes,important 666
notice 290
notices 663
NTPsynchronization 310
O
OAMDiscovery
information 69
statistics 200
onlinehelp 26
OpenFlow
configuration 568
information 146
flowallocation 149, 151
flowconfiguration 151
flowtables 154
globalconfiguration 147
staticflows 577
actions 579
qualifiers 578
statistics 243
Operationscommands 589 to ??
operationslevel
portoptions 590
VRRPoptions 591
OSPF
areaindex 467
authenticationkey 470
costoftheselectedpath 470
costvalueofthehost 474
databaseinformation 101
dead,declaringasilentroutertobedown 470
dead,healthparameterofahellopacket 472
export 475
fixedroutes 493
hello,authenticationparameterofahellopacket 472
hostentryconfiguration 474
hostroutes 466
information 97, 99
linkstatedatabase 466
loopbackinformation 100
NotSoStubbyArea 468
priorityvalueoftheswitchinterface 471
rangenumber 466
routeredistributionconfiguration 475
SPF,shortestpathfirst 468
stubarea 468
summaryrangeconfiguration 469
transitarea 468
transitdelay 471
type 468
virtuallink 466
virtuallinkconfiguration 472
virtualneighbor,routerID 473
ospf(IProutetag) 89
OSPFv3
configuration 476
dead,declaringasilentroutertobedown 483
dead,healthparameterofahellopacket 488
hello,authenticationparameterofahellopacket 488
linkstatedatabase 476
NotSoStubbyArea 479
stubarea 479
transitarea 479
type 479
virtualneighbor,routerID 488
P
parameters
tag 89
type 89
particulatecontamination 668
passwords 29
administratoraccount 29
default 29
useraccesscontrol 329
useraccount 29
Index
681
PathMTU 545
pathcost(STPportoption) 406
PeoplesRepublicofChinaClassAelectronicemission
statement 675
PIM
componentconfiguration 538
componentconfigurationmode 24
componentinformation 135
configuration 537
information 134
interfaceinformation 135
Mrouteinformation 137
neighborinformation 136
operationalmode 538
statistics 240
ping 26
poisonedreverse,asusedwithsplithorizon 464
port
802.1xconfiguration 395
ACLmeter 368
configuration 339
disabling(temporarily) 346
ECNconfiguration 350
ErrorDisableandRecovery 344
information 161
linkconfiguration 345
membershipoftheVLAN 54, 83
mirroring
ACLs 362
configuration 390
number 160
operationsleveloptions 590
priority 73, 80
speed 31, 160
states 59
trunking
configuration 416
description 416
VLANID 31, 161
WREDconfiguration 350
preemption
assumingVRRPmasterroutingauthority 531
delayinterval 529
hotlinks 431
virtualrouter 529
virtualroutergroup 533
PrivateVLAN 437
ProtocolIndependentMulticast(seePIM) 24
protocolbasedVLANconfiguration 435
ptcfg(TFTPsavecommand) 585
pushstatus,Stacking 50
PVID(portVLANID) 31, 161
682
R
RADIUS
802.1xservertimeout 393
serverconfiguration 301
statistics 267
vsTACACS+ 303
readcommunitystring(SNMPoption) 313
receiveflowcontrol 345
referenceports 59
remark
ACLportremarkmenu 369
IPv6ACL 375, 377
RemonteMonitoring(seeRMON) 173
RendezvousPoint(RP) 539
retry
healthchecksfordefaultgateway 446
RADIUSserver 301
RIP 462
configuration 462, 463
information 89, 109
poisonedreverse 464
splithorizon 464
version1parameters 463
rip(IProutetag) 89
RMON
alarmconfiguration 552
alarminformation 158
configuration 550
eventconfiguration 551
eventinformation 159
history 157
historyconfiguration 550
information 156
portinformation 161
statistics 173, 188
routemap
autonomoussystemfilterpathconfiguration 461
configuration 455
configurationmode 24, 439
information 85, 127
IPaccesslistconfiguration 458
policybased,configuration 459
RIProuteredistributionlist 465
routestatistics
IPv4 215
IPv6 216
routerhops 497
RoutingInformationProtocol(seeRIP) 464
RSTP informationMSTP informationRapid Spanning
TreeinformationMultipleSpanningTreeinformation
75
RussiaClassAelectronicemissionstatement 674
Rx/Txstatistics 230, 236
S
save(globalcommand) 287
secret
RADIUSserver 301
SecureShell 299
serviceandsupport
beforeyoucall 661
ServiceRequiredLED 291
shortcuts(CLI) 28
SLP
configuration 582
snaptraces
buffer 620
SNMP
configuration 312
displaypacketslogged 267
options 312
parameters,modifying 312
statistics 171, 277
SNMPv3
communitytableconfiguration 321
communitytableinformation 40
configuration 315
groupconfiguration 320
information 36
notifytableconfiguration 324
targetaddresstableconfiguration 322
targetaddresstableinformation 41
targetparameterstableconfiguration 323
viewconfiguration 318
software
image 605
imagefileandversion 32, 45
splithorizon 464
Stacking
bootoptions 598
configuration 352
information 48
pushstatus 50
switchinformation 51
state(STPinformation) 73, 75, 80
static
IProutetag 89
multicastMACconfiguration 408
staticroute
add 447
IPv6 544
rem 447
Statisticscommands 171 to 283
STP 81
blockedportsinformation 53
bridgeparameters 405
bridgepriority 77, 79
configuration 397
information 53, 399
linktype 74
pathcostoption 406
rootbridge 77, 79, 405
rootinformation 54
RSTP/PVRST 403
switchreseteffect 610
subnet
IPinterface 441
performance 180
switch
nameandlocation 32, 45
resetting 610
system
contact(SNMPoption) 312
dateandtime 32, 45
information 45
location(SNMPoption) 313
SystemErrorDisableandRecovery 293
SystemInformation 32
SystemLogMessages 637 to 660
systemoptions
tnport 325
T
tabcompletion(CLI) 28
TACACS+ 303
TaiwanClassAelectronicemissionstatement 676
TCP
ECN 350
headerparameters 144
statistics 205, 221, 269
statistics,clearing 207
TACACS+ 303
WREDthresholds 351
technicalassistance 661
telnet
configuringswitchesusing 584
radiusserver 301, 308
textconventions 18
TFTP 606
PUTandGETcommands 585
server 585
timeout
idleconnection 30
radiusserver 302
timerskickoff 233, 238
tracebuffer 620
traceroute 27
trademarks 665
transceiverstatus 162
trunkgroupinformation 81
Index
683
trunkhashalgorithm 418
TTLsecurityhops 497
typeofarea
OSPF 468
OSPFv3 479
typeparameters 89
typographicconventions,manual 18
U
UCBstatistics 270
UDLD
configuration 347
information 67
UDP
statistics 223
UniDirectionalLinkDetection 347
UnitedStatesFCCClassAnotice 670
unknown(UNK)portstate 59
UnscheduledSystemDump 635
upgrade
switchsoftware 605
USBBoot 604
USBCopy 587
USBdrive 587, 604
useraccesscontrolconfiguration 329
useraccount 29
uuencodeflashdump 632
V
Virtual Link Aggregation Control Protocol (see vLAG)
54
virtualrouter
description 528
groupprioritytracking 534
increasingprioritylevelof 531
priorityincrementvaluesforVRRP 536
trackingcriteria 531
VirtualRouterRedundancyProtocol(seeVRRP) 24
virtualization
configurationoptions 554
information 164
vLAG
clearstatistics 201
configuration 420
information 54
684
VLAN
activeport 534
ARPentryinformation 91
configuration 434
information 83
name 54, 83
portmembership 54, 83
protocolbased,configuration 435
settingaccessVLAN 341
settingdefaultnumber(PVID) 343
tagging 31, 161
portconfiguration 341
portrestrictions 435
VLANNumber 83
VM
bandwidthmanagement 555
DistributedVirtualSwitch 594
EdgeVirtualBridgeconfiguration 565
information 165
policyconfiguration 555
profileconfiguration 560
VMreadyconfiguration 563
VMware
configuration 562
dvSwitchoperations 594, 595
information 166
operations 592
VRRP 122
authenticationparametersforIPinterfaces 535
configuration 527
information 122
masteradvertisements 529
masteradvertisements,timeinterval 532
operationsleveloptions 591
prioritytrackingoptions 495, 498, 531
statistics 239
trackingconfiguration 536
weightsforprioritylevels 536
VSI
W
watchdogtimer 617
WeightedRandomEarlyDetection(seeWRED) 358
WRED
configuration 358
transmitqueueconfiguration 351, 359
writecommunitystring(SNMPoption) 314

G8052 CR 8-3

Hochgeladen von

Dokumentinformationen

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

G8052 CR 8-3

Hochgeladen von

Copyright:

Verfügbare Formate

LenovoRackSwitchG8052

G8052 Command Reference for N/OS 8.3

Copyright Lenovo 2015

Chapter 3. Statistics Commands . . . . . . . . . . . . . . . . . 171

G8052 Command Reference for N/OS 8.3

TemporarilyDisablingaPort .................... 346

G8052 Command Reference for N/OS 8.3

OSPFv3ASExternalRangeConfiguration ............ 482

G8052 Command Reference for N/OS 8.3

Copyright Lenovo 2015

Chapter 5. Operations Commands. . . . . . . . . . . . . . . . . 589

G8052 Command Reference for N/OS 8.3

Appendix A. Lenovo N/OS System Log Messages . . . . . . . . . . 637

Copyright Lenovo 2015

G8052 Command Reference for N/OS 8.3

Copyright Lenovo 2015

Who Should Use This Book

G8052 Command Reference for N/OS 8.3

How This Book Is Organized

Copyright Lenovo 2015

G8052 Command Reference for N/OS 8.3

Copyright Lenovo 2015

G8052 Command Reference for N/OS 8.3

Chapter 1. ISCLI Basics

Copyright Lenovo 2015

ISCLI Command Modes

Command used to enter or exit

G8052 Command Reference for N/OS 8.3

Command used to enter or exit

Copyright Lenovo 2015

Chapter 1: ISCLI Basics

Command used to enter or exit

G8052 Command Reference for N/OS 8.3

Command used to enter or exit

Copyright Lenovo 2015

Chapter 1: ISCLI Basics

G8052 Command Reference for N/OS 8.3

Copyright Lenovo 2015

Chapter 1: ISCLI Basics

Command Line Interface Shortcuts

CLI List and Range Inputs

G8052 Command Reference for N/OS 8.3

User Access Levels

Description and Tasks Performed

Chapter 1: ISCLI Basics

G8052 Command Reference for N/OS 8.3

Chapter 2. Information Commands

Copyright Lenovo 2015

G8052 Command Reference for N/OS 8.3

Copyright Lenovo 2015

Chapter 2: Information Commands

CLI Display Information

G8052 Command Reference for N/OS 8.3

Error Disable and Recovery Information

Copyright Lenovo 2015

Chapter 2: Information Commands

SNMPv3 System Information

G8052 Command Reference for N/OS 8.3

SNMPv3 USM User Table Information

Table 10. USMUserTableInformationParameters

Copyright Lenovo 2015

Chapter 2: Information Commands

SNMPv3 View Table Information