Administrator Guide

ManualsBrandsDell ManualsComputer equipmentForce10 Z9000

Dell Command Line Reference Guide for the

Z9000 System

9.5(0.0)

Summary of content (1649 pages)

PAGE 1
Dell Command Line Reference Guide for the Z9000 System 9.5(0.
PAGE 2
Notes, Cautions, and Warnings NOTE: A NOTE indicates important information that helps you make better use of your computer. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. Copyright © 2014 Dell Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws.
PAGE 3
Contents 1 About this Guide......................................................................................................41 Objectives............................................................................................................................................ 41 Audience.............................................................................................................................................. 41 Conventions.............................................................
PAGE 4
banner motd....................................................................................................................................... 86 cam-acl................................................................................................................................................87 clear alarms......................................................................................................................................... 89 clear command history..................................
PAGE 5
show debugging................................................................................................................................130 show inventory.................................................................................................................................. 131 show processes ipc flow-control.....................................................................................................133 show software ifm................................................................
PAGE 6
access-class.................................................................................................................................176 clear counters ip access-group.................................................................................................. 176 ip access-group........................................................................................................................... 177 ip control-plane egress-filter.............................................................
PAGE 7
ip prefix-list..................................................................................................................................235 permit.......................................................................................................................................... 236 seq................................................................................................................................................237 show config.....................................................
PAGE 8
seq (for Standard IPv4 ACLs)............................................................................................................ 276 deny tcp (for Extended IP ACLs)....................................................................................................... 277 deny udp (for Extended IP ACLs)......................................................................................................279 deny arp (for Extended MAC ACLs)...............................................................
PAGE 9
8 Bidirectional Forwarding Detection (BFD)..................................................... 331 bfd all-neighbors............................................................................................................................... 331 bfd disable......................................................................................................................................... 333 bfd enable (Configuration)....................................................................................
PAGE 10
bgp regex-eval-optz-disable..................................................................................................... 369 bgp router-id............................................................................................................................... 371 clear ip bgp.................................................................................................................................. 371 clear ip bgp dampening.................................................................
PAGE 11
neighbor subnet.......................................................................................................................... 412 neighbor timers........................................................................................................................... 413 neighbor update-source.............................................................................................................414 neighbor weight.............................................................................
PAGE 12
set extcommunity rt....................................................................................................................467 set extcommunity soo................................................................................................................468 show ip bgp ipv4 extcommunity-list......................................................................................... 469 show ip bgp paths extcommunity...............................................................................
PAGE 13
clear hardware stack-unit........................................................................................................... 501 clear hardware system-flow.......................................................................................................502 hardware watchdog....................................................................................................................503 show hardware layer2.....................................................................................
PAGE 14
ip dhcp snooping database renew............................................................................................. 536 ip dhcp snooping trust................................................................................................................ 537 ip dhcp source-address-validation............................................................................................ 538 ip dhcp snooping vlan.............................................................................................
PAGE 15
debug gvrp........................................................................................................................................ 575 disable................................................................................................................................................576 garp timers........................................................................................................................................ 576 gvrp enable...........................................
PAGE 16
ip igmp snooping mrouter.......................................................................................................... 611 ip igmp snooping querier............................................................................................................612 show ip igmp snooping mrouter................................................................................................ 613 21 Interfaces.................................................................................................
PAGE 17
shutdown.....................................................................................................................................674 speed (for 10/100/1000 interfaces)............................................................................................675 speed (Management interface)...................................................................................................676 stack-unit portmode.......................................................................................
PAGE 18
transform-set.....................................................................................................................................714 23 IPv4 Routing.........................................................................................................715 arp...................................................................................................................................................... 715 arp backoff-time...............................................................
PAGE 19
show arp retries................................................................................................................................ 760 show hosts.........................................................................................................................................761 show ip cam linecard........................................................................................................................763 show ip cam stack-unit..............................................
PAGE 20
ipv6 unicast-routing..........................................................................................................................814 show ipv6 cam stack-unit.................................................................................................................815 show ipv6 control-plane icmp......................................................................................................... 816 show ipv6 fib stack-unit...............................................................
PAGE 21
isis csnp-interval............................................................................................................................... 855 isis hello-interval...............................................................................................................................856 isis hello-multiplier............................................................................................................................857 isis hello padding.............................................
PAGE 22
port-channel mode.......................................................................................................................... 899 port-channel-protocol lacp............................................................................................................. 901 show lacp.......................................................................................................................................... 901 hg-link-bundle-monitor......................................................
PAGE 23
fefd interval................................................................................................................................. 943 fefd mode....................................................................................................................................943 fefd reset..................................................................................................................................... 944 fefd-global interval....................................................
PAGE 24
ip vlan-flooding.................................................................................................................................981 31 Multicast Source Discovery Protocol (MSDP).............................................982 clear ip msdp peer............................................................................................................................ 982 clear ip msdp sa-cache...................................................................................................
PAGE 25
clear ip mroute.......................................................................................................................... 1017 ip mroute................................................................................................................................... 1018 ip multicast-limit....................................................................................................................... 1019 ip multicast-routing............................................................
PAGE 26
ip ospf retransmit-interval........................................................................................................ 1056 ip ospf transmit-delay............................................................................................................... 1057 log-adjacency-changes........................................................................................................... 1058 maximum-paths.........................................................................................
PAGE 27
graceful-restart mode................................................................................................................1115 ipv6 ospf area.............................................................................................................................1116 ipv6 ospf authentication............................................................................................................ 1117 ipv6 ospf bfd all-neighbors.................................................................
PAGE 28
ip pim query-interval................................................................................................................. 1157 ip pim register-filter................................................................................................................... 1157 ip pim rp-address...................................................................................................................... 1158 ip pim rp-candidate.....................................................................
PAGE 29
source (port monitoring).................................................................................................................1195 38 Private VLAN (PVLAN)..................................................................................... 1198 ip local-proxy-arp........................................................................................................................... 1199 private-vlan mode...........................................................................................
PAGE 30
match mac dot1p...................................................................................................................... 1236 match mac vlan......................................................................................................................... 1237 policy-aggregate....................................................................................................................... 1237 policy-map-input...........................................................................
PAGE 31
auto-summary.................................................................................................................................1277 clear ip rip........................................................................................................................................1278 debug ip rip..................................................................................................................................... 1278 default-information originate.................................
PAGE 32
43 Rapid Spanning Tree Protocol (RSTP).........................................................1321 bridge-priority..................................................................................................................................1321 debug spanning-tree rstp............................................................................................................... 1322 description..............................................................................................................
PAGE 33
service password-encryption....................................................................................................1361 show privilege........................................................................................................................... 1362 show users.................................................................................................................................1363 timeout login response.......................................................................
PAGE 34
ip scp topdir.............................................................................................................................. 1398 ip ssh authentication-retries.....................................................................................................1399 ip ssh connection-rate-limit.................................................................................................... 1400 ip ssh hostbased-authentication...................................................................
PAGE 35
protocol-tunnel enable.................................................................................................................. 1433 protocol-tunnel rate-limit..............................................................................................................1434 show protocol-tunnel.................................................................................................................... 1435 47 sFlow..............................................................................
PAGE 36
default logging monitor............................................................................................................ 1477 default logging trap...................................................................................................................1478 logging.......................................................................................................................................1478 logging buffered........................................................................
PAGE 37
storm-control unknown-unicast (Configuration)......................................................................... 1520 storm-control unknown-unicast (Interface)..................................................................................1521 52 Spanning Tree Protocol (STP)....................................................................... 1523 bridge-priority.................................................................................................................................
PAGE 38
tunnel source.................................................................................................................................. 1562 tunnel keepalive.............................................................................................................................. 1563 tunnel allow-remote.......................................................................................................................1564 tunnel dscp.............................................................
PAGE 39
unit-id............................................................................................................................................. 1600 vlt domain........................................................................................................................................1601 vlt-peer-lag port-channel.............................................................................................................. 1602 Specifying VLT Nodes in a PVLAN...................................
PAGE 40
clear counters vrrp ipv6............................................................................................................ 1637 debug vrrp ipv6......................................................................................................................... 1638 show vrrp ipv6...........................................................................................................................1639 vrrp-ipv6-group...........................................................................
PAGE 41
About this Guide 1 This book provides information about the Dell Networking OS command line interface (CLI). This book also includes information about the protocols and features found in Dell Z-Series platform.
PAGE 42
[X] Keywords and parameters within brackets are optional. x|y Keywords and parameters separated by a bar require you to choose one option. x||y Keywords and parameters separated by a double bar allows you to choose any or all of the options. Information Icons This book uses the following information symbols: NOTE: The Note icon signals important operational information. CAUTION: The Caution icon signals information about situations that could result in equipment damage or loss of data.
PAGE 43
CLI Basics 2 This chapter describes the command line interface (CLI) structure and command modes. The Dell Networking operating software commands are in a text-based interface that allows you to use the launch commands, change command modes, and configure interfaces and protocols. Accessing the Command Line When the system boots successfully, you are positioned on the command line in EXEC mode and not prompted to log in. You can access the commands through a serial console port or a Telnet session.
PAGE 44
When another user enters CONFIGURATION mode, Dell Networking OS sends a message similar to the following: % Warning: User "admin" on line vty2 "172.16.1.210" is in configuration In this case, the user is “admin” on vty2. Obtaining Help As soon as you are in a command mode there are several ways to access help. To obtain a list of keywords at any command mode: Type a ? at the prompt or after a keyword. There must always be a space before the ?.
PAGE 45
tacacs telnet tftp trace-group trace-list Dell(conf)#ip Interface configuration for TACACS+ Specify telnet options TFTP configuration commands Named trace-list Named trace-list When entering commands, you can take advantage of the following timesaving features: • The commands are not case-sensitive. • You can enter partial (truncated) command keywords. For example, you can enter interface teng 0/0 for the interface tengigabitethernet 0/0 command. • To complete keywords in commands, use the TAB key.
PAGE 46
Navigating the CLI Dell Networking OS displays a CLI prompt comprised of the host name and CLI mode. • Host name is the initial part of the prompt and is “Dell” by default. You can change the host name with the hostname command. • CLI mode is the second part of the prompt and reflects the current CLI mode. For a list of the Dell Networking OS command modes, refer to the command mode list in the Accessing the Command Line section.
PAGE 47
show run | grep ethernet does not return the previous search result because it only searches for instances containing a noncapitalized “ethernet” show run | grep Ethernet ignore-case returns instances containing both “Ethernet” and “ethernet” no-more does not paginate the display output save copies the output to a file for future use Displaying All Output To display the output all at once (not one screen at a time), use the no-more option after the pipe.
PAGE 48
Based on whether VRF feature is identified as supported in the Feature Configuration file, configuration command feature vrf becomes available for usage. This command will be stored in running-configuration and will precede all other VRF-related configurations. NOTE: The MXL and Z9000 platforms currently do not support VRF. These platforms support only the management and default VRFs, which are available by default. As a result, the feature vrf command is not available for these platforms.
PAGE 49
Usage Information You can activate VRF application on a device by using the feature vrf command in CONFIGURATION mode. The no feature vrf command is not supported on any of the platforms. Example Dell#show feature Feature State -----------------------------VRF enabled Command Modes To navigate and launch various CLI modes, use specific commands. Navigation to these modes is described in the following sections. BGP ADDRESS-FAMILY Mode To enable or configure IPv4 for BGP, use BGP ADDRESS-FAMILY mode.
PAGE 50
CONTROL-PLANE Mode To manage control-plane traffic, use CONTROL-PLANE mode. For more information, refer to Control Plane Policing (CoPP). To enter CONTROL-PLANE mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the control-plane-cpuqos command. The prompt changes to include (conf-controlcpuqos). You can return to CONFIGURATION mode by using the exit command. DHCP Mode To enable and configure Dynamic Host Configuration Protocol (DHCP), use DHCP mode.
PAGE 51
1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the management egress-interface-selection command. The prompt changes to include (conf-mgmt-eis). You can return to CONFIGURATION mode by using the exit command. EXEC Mode When you initially log in to the switch, by default, you are logged in to EXEC mode. This mode allows you to view settings and enter EXEC Privilege mode, which is used to configure the device.
PAGE 52
INTERFACE Mode Use INTERFACE mode to configure interfaces or IP services on those interfaces. An interface can be physical (for example, a Gigabit Ethernet port) or virtual (for example, the Null interface). To enter INTERFACE mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the interface command and then enter an interface type and interface number that is available on the switch. The prompt changes to include the designated interface and slot/port number.
PAGE 53
ISIS ADDRESS-FAMILY Mode To enable or configure IPv6 for ISIS, use ISIS ADDRESS-FAMILY mode. For more information, refer to Intermediate System to Intermediate System (IS-IS). To enter ISIS ADDRESS-FAMILY mode: 1. Verify that you are logged in to ROUTER ISIS mode. 2. Enter the command address-family ipv6 unicast. The prompt changes to include (confrouter_isis-af_ipv6). LLDP Mode To enable and configure Link Layer Discovery Protocol (LLDP), use LLDP mode.
PAGE 54
2. Use the mac access-list standard or mac access-list extended command. Include a name for the ACL. The prompt changes to include (conf-std-macl) or (conf-ext-macl). You can return to CONFIGURATION mode by using the exit command. MONITOR SESSION Mode To enable and configure a traffic monitoring session using port monitoring, use MONITOR SESSION mode. For more information, refer to Port Monitoring. To enter MONITOR SESSION mode: 1. Verify that you are logged in to CONFIGURATION mode. 2.
PAGE 55
PORT-CHANNEL FAILOVER-GROUP Mode To configure shared LAG state tracking, use PORT-CHANNEL FAILOVER-GROUP mode. For more information, refer to Port Channel Commands. To enter PORT-CHANNEL FAILOVER-GROUP mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the port-channel failover-group command. The prompt changes to include (conf-pofailover-grp). You can return to CONFIGURATION mode by using the exit command. PREFIX-LIST Mode To configure a prefix list, use PREFIX-LIST mode.
PAGE 56
2. Use the route-map map-name [permit | deny] [sequence-number] command. The prompt changes to include (config-route-map). You can return to CONFIGURATION mode by using the exit command. ROUTER BGP Mode To enable and configure Border Gateway Protocol (BGP), use ROUTER BGP mode. For more information, refer to Border Gateway Protocol IPv4 (BGPv4) To enter ROUTER BGP mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Use the router bgp command then enter the AS number.
PAGE 57
ROUTER RIP Mode To enable and configure Router Information Protocol (RIP), use ROUTER RIP mode. For more information, refer to Routing Information Protocol (RIP). To enter ROUTER RIP mode: 1. Verify that you are logged in to CONFIGURATION mode. 2. Enter the router rip command. The prompt changes to include (conf-router_rip). You can return to CONFIGURATION mode by using the exit command. SPANNING TREE Mode To enable and configure the Spanning Tree protocol, use SPANNING TREE mode.
PAGE 58
1. To enable VRRP globally, verify that you are logged in to CONFIGURATION mode. 2. Enter the vrrp-group command then enter the VRRP group ID. The prompt changes to include (conf-if-interface-type-slot/port-vrid-vrrp-group-id).
PAGE 59
File Management 3 This chapter contains command line interface (CLI) commands needed to manage the configuration files as well as other file management commands. HTTP Copy via CLI Copy one file to another location. Dell Networking OS supports IPv4 and IPv6 addressing for FTP, TFTP, and SCP (in the hostip field). This feature is supported on Z9000 platform. Syntax copy http://10.16.206.77/sample_file flash://sample_filecopy flash://sample_file http://10.16.206.
PAGE 60
boot system Tell the system where to access the Dell Networking OS image used to boot the system. Z9000 Syntax boot system {gateway ip address| stack-unit [{0-11 | 0-7]| all] [default | primary {system {A: | B:} | tftp: | | secondary]} To return to the default boot sequence, use the no boot system command. Parameters gateway Enter the IP address of the default next-hop gateway for the management subnet. ip-address Enter an IP address in dotted decimal format.
PAGE 61
format flash Erase all existing files and reformat the file system in the internal flash memory or the USB drive. After the file system is formatted, files cannot be restored. Z9000 Syntax Parameters format [flash: | slot0: | usbflash: ] flash: | slot0: | usbflash: • flash: reformat the file system in the internal flash memory. • slot0: reformat the file system in the external flash memory; for example, SSD. • usbflash: reformat the file system in the usbflash.
PAGE 62
0-5 Enter the stack member unit identifier to restore only the mentioned stack-unit. all Enter the keyword all to restore all units in the stack. clear-all Enter the keywords clear-all to reset the NvRAM and the system startup configuration. nvram Enter the keyword nvram to reset the NvRAM only. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 63
* Proceed with caution ! * ************************************************************** Proceed with factory settings? Confirm [yes/no]:yes -- Restore status -Unit Nvram Config -----------------------0 Success Success 1 Success Success 2 Success Success 3 Not present 4 Not present 5 Not present Power-cycling the unit(s).
PAGE 64
* persistent settings (stacking, fanout, etc.) * * After restoration the unit(s) will be powercycled immediately. * * Proceed with caution ! * ************************************************************** Proceed with factory settings? Confirm [yes/no]:yes -- Restore status -Unit Nvram Config -----------------------1 Success Power-cycling the unit(s). Dell# show boot system Displays information about boot images currently configured on the system.
PAGE 65
Current system image information in the system: ============================================= Type Boot Type A B --------------------------------------------------------------Stack-unit 0 FLASH BOOT 9-0(2-1) 9-0(2-0) [boot] Dell# show bootvar Display the variable settings for the boot parameters. Z9000 Syntax show bootvar Command Modes EXEC Privilege Command History This guide is platform-specific.
PAGE 66
Reload Mode = Dell# normal-reload show file Display contents of a text file in the local filesystem. Z9000 Syntax Parameters show file filesystem filesystem Enter one of the following: • For internal flash, enter flash: • For external SSD, enter Slot 0: • For USB flash and external flash, enter usbflash: Command Modes EXEC Privilege Command History This guide is platform-specific.
PAGE 67
enable password 7 94849d8482d5c3 ! username test password 7 93e1e7e2ef ! enable restricted 7 948a9d848cd5c3 ! protocol spanning-tree 0 bridge-priority 8192 rapid-root-failover enable ! interface GigabitEthernet 0/0 no ip address shutdown Related Commands show os-version Display the release and software image version information of the image file specified.
PAGE 68
Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series Original command.
PAGE 69
show running-config Display the current configuration and display changes from the default values. Z9000 Syntax Parameters show running-config [entity] [configured] [status] entity (OPTIONAL) To display that entity’s current (non-default) configuration, enter one of the following keywords: NOTE: If you did not configure anything that entity, nothing displays and the prompt returns.
PAGE 70
hypervisor for the current hypervisor configuration igmp for the current IGMP configuration interface for the current interface configuration interface tunnel for all configured tunnels. For a specific tunnel, enter the tunnel ID. The range is from 1 to 16383.
PAGE 71
File Management qos-policyinput for the current input QoS policy configuration qos-policyoutput for the current output QoS policy configuration radius for the current RADIUS configuration redirectlist for the current redirect-list configuration redundancy for the current RPM redundancy configuration resolve for the current DNS configuration rip for the current RIP configuration rmon for the current RMON configuration route-map for the current route map configuration sflow for the current
PAGE 72
compressed (Optional) Enter the keyword compressed to display the compressed group configuration. Displays the compressed configuration by grouping all similar configurations. The compression is done only for interface related configurations. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 73
redundancy disable-auto-reboot stack-unit 3 redundancy disable-auto-reboot stack-unit 4 redundancy disable-auto-reboot stack-unit 5 ! hardware watchdog stack-unit 0 hardware watchdog stack-unit 1 hardware watchdog stack-unit 2 Example Dell#show running-config status running-config bytes 10257, checksum 0xFD33339F startup-config bytes 10257, checksum 0xFD33339F Usage Information The status option allows you to display the size and checksum of the running configuration and the startup configuration.
PAGE 74
boot system stack-unit 0 secondary tftp://10.16.127.35/DellSI-9-0-2-0.bin boot system stack-unit 0 default system: A: boot system gateway 10.16.132.254 ! redundancy auto-synchronize full redundancy disable-auto-reboot stack-unit ... Related Commands show running-config – displays the current (running) configuration. show version Display the current Dell Networking Operating System (OS) version information on the system.
PAGE 75
Example (SSeries) Lines Beginning With Description Build Time... Software build’s date stamp Build Path... Location of the software build files loaded on the system Dell Networking OS uptime is... Amount of time the system has been up System image... Image file name System Type: S4810, S4820T, Z9000, S6000 Control Processor:... Control processor information and amount of memory on processor 128K bytes... Amount and type of memory on system 1 Route Processor...
PAGE 76
Dell(conf-if-te-0/5)#no shut Dell(conf-if-te-0/5)# Dell(conf-if-te-0/5)# Dell(conf-if-te-0/5)# Dell(conf-if-te-0/5)#ipv6 nd prefix FEC0::/10 Dell(conf-if-te-0/5)# Dell(conf-if-te-0/5)#show conf ! interface TenGigabitEthernet 0/5 ip address 78.21.1.3/24 ipv6 nd prefix fec0::/10 flowcontrol rx on tx on no shutdown Dell(conf-if-te-0/5)# Dell# Example (S6000) Dell#S6000#show version Dell Real Time Operating System Software Dell Operating System Version: 2.
PAGE 77
slot0: After entering the keyword slot0:, you can either follow it with the location of the source file in this form: // hostlocation/filepath or press Enter to launch a prompt sequence. tftp: After entering the keyword tftp:, you can either follow it with the location of the source file in this form: // hostlocation/filepath or press Enter to launch a prompt sequence.
PAGE 78
Usage Information Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Added support for TFTP and SCP. Version 7.6.1.0 Introduced on the S-Series. RFC 3986 specifies that IPv6 host addresses in a uniform resource identifier (URI) must be enclosed in square brackets, [X:X:X:X::X]. For maximum flexibility this command accepts IPv6 host addresses with or without the square brackets. Reload Dell Networking OS after executing this command.
PAGE 79
upgrade fpga-image Use this command only on systems with SFM3 modules (and only when required by the Upgrade Procedure in the release notes). Z9000 Syntax Parameters upgrade fpga-image {sfm} {all | id} [booted | flash:// | ftp: | slot0: | tftp] file-url sfm Enter the keyword sfm to upgrade the FPGA on the SFMs. all Enter the keyword all to upgrade the FPGA on all the SFMs. id Enter the keyword id to upgrade the FPGA on all a specific SFM. booted Enter the path to the upgrade source.
PAGE 80
!!! !!! !!! SFM1: upgrade complete SFM1 is active. Resetting it might temporarily impact traffic. Proceed with reset [confirm yes/no]: yes Dell# Usage Information Reset the card using the power-cycle option after restoring the FPGA command. verify Validate the software image on the flash drive after the image has been transferred to the system, but before the image has been installed.
PAGE 81
e6328c06faf814e6899ceead219afbf9360e986d692988023b749e6b2093e93 3 Entering the Hash Value for Verification using SHA256 Dell# verify sha256 flash://FTOS-SE-9.5.0.0.bin e6328c06faf814e6899ceead219afbf9360e986d692988023b749e6b2093e93 3 SHA256 hash VERIFIED for FTOS-SE-9.5.0.0.
PAGE 82
4 Control and Monitoring This chapter contains the commands to configure and monitor the system, including Telnet, file transfer protocol (FTP), and trivial file transfer protocol (TFTP) as they apply to the following Dell Networking Z9000 platform. NOTE: Starting in version 8.3.11.4, the enable xfp-power-updates command was deprecated for the Z9000.
PAGE 83
Usage Information You must save the configuration and reload the system to implement ASF. When you enter the command, the system sends a message stating that the new mode is enabled when the system reloads. banner exec Configure a message that is displayed when your enter EXEC mode. Z9000 Syntax banner exec c line c To delete a banner, use the no banner exec command. Parameters c Enter the keywords banner exec, then enter a character delineator, represented here by the letter c. Press ENTER.
PAGE 84
Usage Information After entering the banner login command, type one or more spaces and a delineator character. Enter the banner text then the second delineator character. When the user is connected to the router, if a message of the day banner is configured, it displays first. If no message of the day banner is configured, the login banner and prompt appear. After the user has logged in, the EXEC banner (if configured) displays.
PAGE 85
Parameters keyboardinteractive Enter the keyword keyboard-interactive to require a carriage return (CR) to get the message banner prompt. c Enter a delineator character to specify the limits of the text banner. The delineator is a percent character (%). line Enter a text string for your text banner message ending the message with your delineator. The delineator is a percent character (%).
PAGE 86
Dell(conf)#end Dell#exit 13d21h9m: %RPM0-P:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console This is the banner Dell con0 now available Press RETURN to get started. 13d21h10m: %RPM0-P:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on line console This is the banner Dell> Related Commands banner motd — sets a Message of the Day banner. exec-banner — enables the display of a text string when you enter EXEC mode. banner motd Set a message of the day (MOTD) banner.
PAGE 87
Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series Original command Usage Information After entering the banner login command, type one or more spaces and a delineator character. Enter the banner text then the second delineator character.
PAGE 88
l2acl number ipv4acl number ipv6acl number ipv4qos number l2qos number l2pt number ipmacacl number [vmanqos | vmandual-qos] number ecfmacl number {openflow {4| 8}} Allocate space to each CAM region. Enter the CAM profile name then the amount of CAM space to be allotted. The total space allocated must equal 13. The ipv6acl range must be a factor of 2. Enter 4 or 8 for the number of OpenFlow FP blocks.
PAGE 89
When configuring space for IPv6 ACLs, the total number of Blocks must equal 13. Ranges for the CAM profiles are from 1 to 10, except for the ipv6acl profile which is from 0 to 10. The ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10). If you enabled BMP 3.0, to perform a reload on the chassis to upgrade any configuration changes that have changed the NVRAM content, use the reload conditional nvram-cfg-change command. clear alarms Clear alarms on the system.
PAGE 90
clear command history Clear the command history log. Z9000 Syntax clear command history Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.
PAGE 91
Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale.
PAGE 92
Example Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series Original command. Dell#configure Dell(conf)# debug cpu-traffic-stats Enable the collection of computer processor unit (CPU) traffic statistics. Z9000 Syntax debug cpu-traffic-stats To disable the debugging, use the no debug cpu-traffic-stats command.
PAGE 93
The following message is an indication that collection of CPU traffic is automatically turned on. To view the traffic statistics, use the show cputraffic-stats command. If the CPU receives excessive traffic, traffic is rate controlled. NOTE: This command must be enabled before the show cpu-trafficstats command displays traffic statistics. Dell Networking recommends disabling debugging (no debug cpu-traffic-stats) after troubleshooting is complete.
PAGE 94
disable Return to EXEC mode. Z9000 Syntax Parameters disable [level] level (OPTIONAL) Enter a number for a privilege level of the Dell Networking OS. The range is from 0 to 15. The default is 1. Defaults 1 Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.
PAGE 95
Command Modes • CONFIGURATION • INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Example Control and Monitoring Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.
PAGE 96
enable Enter EXEC Privilege mode or any other privilege level configured. After entering this command, you may need to enter a password. Z9000 Syntax Parameters enable [level] level (OPTIONAL) Enter a number for a privilege level of Dell Networking OS. The range is from 0 to 15. Defaults 15 Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 97
Related Commands enable password — configures a password for the enable command and to access a privilege level. enable optic-info-update interval Enable polling intervals of optical information updates for simple network management protocol (SNMP). Z9000 Syntax enable optical-info-update interval seconds To disable optical power information updates, use the no enable opticalinfo-update interval command. Parameters interval seconds Enter the keyword interval then the polling interval in seconds.
PAGE 98
enable xfp-power-updates Enable 10–gigabit small form-factor pluggable (XFP) power updates for SNMP. Z9000: Deprecated Syntax Parameters enable xfp-power-updates interval seconds interval seconds Enter the keyword interval then the polling interval in seconds. The range is from 120 to 6000 seconds. Default: 300 seconds (5 minutes). Defaults Disabled Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 99
end Return to EXEC Privilege mode from other command modes (for example, CONFIGURATION or ROUTER OSPF modes). Z9000 Syntax end Command Modes • CONFIGURATION • SPANNING TREE • MULTIPLE SPANNING TREE • LINE • INTERFACE • TRACE-LIST • VRRP • ACCESS-LIST • PREFIX-LIST • AS-PATH ACL • COMMUNITY-LIST • ROUTER OSPF • ROUTER RIP • ROUTER ISIS • ROUTER BGP Command History This guide is platform-specific.
PAGE 100
exec-banner Enable the display of a text string when the user enters EXEC mode. Z9000 Syntax exec-banner To disable the banner on terminal lines, use the no exec-banner command. Defaults Enabled on all lines (if configured, the banner appears). Command Modes LINE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 101
Parameters minutes Enter the number of minutes of inactivity on the system before disconnecting the current session. The range is from 0 to 35791. The default is 10 minutes for the console line and 30 minutes for the VTY line. seconds (OPTIONAL) Enter the number of seconds. The range is from 0 to 2147483. The default is 0 seconds. Defaults 10 minutes for console line; 30 minutes for VTY lines; 0 seconds Command Modes LINE Command History This guide is platform-specific.
PAGE 102
Command History • LINE, INTERFACE • TRACE-LIST • PROTOCOL GVRP • SPANNING TREE • MULTIPLE SPANNING TREE • MAC ACCESS LIST • ACCESS-LIST • AS-PATH ACL • COMMUNITY-LIST • PREFIX-LIST • ROUTER OSPF • ROUTER RIP • ROUTER ISIS • ROUTER BGP This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 103
Defaults Disabled Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Control and Monitoring Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000.
PAGE 104
ftp-server topdir Specify the top-level directory to be accessed when an incoming FTP connection request is made. Z9000 Syntax Parameters ftp-server topdir directory directory Enter the directory path. Defaults The internal flash is the default directory. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 105
ftp-server username Create a user name and associated password for incoming FTP server sessions. Z9000 Syntax ftp-server username username password [encryption-type] password To delete a user name and its password, use the no ftp-server username username command. Parameters username Enter a text string up to 40 characters long as the user name. password password Enter the keyword password then a string up to 40 characters long as the password.
PAGE 106
hostname Set the host name of the system. Z9000 Syntax Parameters hostname name name Enter a text string, up to 32 characters long. Defaults Dell Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 107
Parameters encryptiontype password (OPTIONAL) Enter one of the following numbers: • 0 (zero) for an unecrypted (clear text) password • 7 (seven) for a hidden text password Enter a string up to 40 characters as the password. Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 108
To delete an interface, use the no ip ftp source-interface interface command. Parameters interface Enter the following keywords and slot/port or number information: • For Loopback interfaces, enter the keyword loopback then a number from zero (0) to 16383. • For a Port Channel interface, enter the keyword portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 109
ip ftp username Assign a user name for outgoing FTP connection requests. Z9000 Syntax ip ftp username username To return to anonymous FTP connections, use the no ip ftp username [username] command. Parameters username Enter a text string as the user name up to 40 characters long. Defaults No user name is configured. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 110
ip ftp vrf Configures an FTP client with a VRF that is used to connect to the FTP server. Z9000 Syntax ip ftp [vrf vrf-name] To undo the FTP client configuration, use the ip ftp [vrf vrf-name] command. Parameters vrf vrf-name Enter the keyword vrf and then the name of the VRF to specify the VRF that is used by the FTP client. Defaults Disabled Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 111
Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.1.1.0 Introduced on the E-Series. ip ssh server — enables the secure shell (SSH) server on the system. ip telnet server vrf Configures the TELNET server on either a specific VRF or a management VRF.
PAGE 112
FTOS(conf)#ip telnet server vrf management FTOS(conf)#no ip telnet server vrf ip telnet source-interface Set an interface’s IP address as the source address in outgoing packets for Telnet sessions. Z9000 Syntax ip telnet source-interface interface To return to the default setting, use the no ip telnet source-interface [interface] command.
PAGE 113
Related Commands Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.2.1.0 Increased number of VLANs on ExaScale to 4094 (was 2094). Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series Original command telnet — telnet to another device. ip telnet vrf Configures a TELNET client to use a specific VRF.
PAGE 114
ip tftp source-interface Assign an interface’s IP address in outgoing packets for TFTP traffic. Z9000 Syntax ip tftp source-interface interface To return to the default setting, use the no ip tftp source-interface interface command. Parameters interface Enter the following keywords and slot/port or number information: • For Loopback interfaces, enter the keyword loopback then a number from zero (0) to 16383. • For a Port Channel, enter the keyword port-channel then a number.
PAGE 115
Version 7.5.1.0 Introduced on the C-Series. E-Series Original command ip tftp vrf Configures an TFTP client with a VRF that is used to connect to the TFTP server. Z9000 Syntax ip tftp [vrf vrf-name] To undo the TFTP client configuration, use the no ip tftp [vrf vrf-name] command. Parameters vrf vrf-name Enter the keyword vrf and then the name of the VRF to specify the VRF that is used by the TFTP client.
PAGE 116
line Enable and configure console and virtual terminal lines to the system. This command accesses LINE mode, where you can set the access conditions for the designated line. Z9000 Syntax Parameters line {aux 0 |console 0 | vty number [end-number]} aux 0 Enter the keyword aux 0 to configure the auxiliary terminal connection. console 0 Enter the keyword console 0 to configure the console port. The console option for the S-Series is <0-0>.
PAGE 117
password — specifies a password for users on terminal lines. motd-banner Enable a message of the day (MOTD) banner to appear when you log in to the system. Z9000 Syntax motd-banner To disable the MOTD banner, use the no motd-banner command. Defaults Enabled on all lines. Command Modes LINE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 118
ping Test connectivity between the system and another device by sending echo requests and waiting for replies.
PAGE 119
tos (IPv4 only) Enter the type of service required. The range is from 0 to 255. The default is 0. df-bit (IPv4 only) Enter Y or N for the “don't fragment” bit in IPv4 header. • N: Do not set the “don't fragment” bit. • Y: Do set “don't fragment” bit Default is No. validate-reply (IPv4 only) Enter Y or N for reply validation. • N: Do not validate reply data. • Y: Do validate reply data. Default is No.
PAGE 120
Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Added support for the outgoing-interface option for link-local IPv6 addressing on the S4820T. Usage Information Version 8.3.12.0 Added support for the outgoing-interface option for link-local IPv6 addressing on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.5.1.
PAGE 121
Type Ctrl-C to abort. Sending 5, 100-byte ICMP Echos to 172.31.1.255, timeout is 2 seconds: Reply to request 1 from 172.31.1.208 0 ms Reply to request 1 from 172.31.1.216 0 ms Reply to request 1 from 172.31.1.205 16 ms :: Reply to request 5 from 172.31.1.209 0 ms Reply to request 5 from 172.31.1.66 0 ms Reply to request 5 from 172.31.1.87 0 ms Dell# Example (IPv6) Dell#ping 100::1 Type Ctrl-C to abort. Sending 5, 100-byte ICMP Echos to 100::1, timeout is 2 seconds: !!!!! Success rate is 100.
PAGE 122
Usage Information Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series Original command. If there is a change in the configuration, FTOS prompts you to save the new configuration. Or you can save your running configuration with the copy running-config command. Use the conditional parameter if any configuration changes made to the nvram, such as stack-group and fanout configurations, must be saved. send Send messages to one or all terminal line users.
PAGE 123
Usage Information Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.5.1.0 Introduced on the E-Series. Messages can contain an unlimited number of lines; however, each line is limited to 255 characters. To move to the next line, use . To send the message use CTR-Z; to abort a message, use CTR-C. service timestamps To debug and log messages, add time stamps.
PAGE 124
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.
PAGE 125
Example Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series Original command.
PAGE 126
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.1. (0.0) Introduced on S4810. Version 8.3.19.0 Introduced on the S4820T. show command-history Display a buffered log of all commands all users enter along with a time stamp.
PAGE 127
[11/20 15:47:22]: CMD-(CLI):[service password-encryption hostname Force10]by default from console - Repeated 3 times.
PAGE 128
show command-tree Display the entire CLI command tree, and optionally, display the utilization count for each command and its options. Z9000 Syntax Parameters Defaults Command Modes Command History show command-tree [count | no] count Display the command tree with a usage counter for each command. no Display all of the commands that may be preceded by the keyword no, which is the keyword used to remove a command from the running-configuration.
PAGE 129
! Global configuration mode: aaa authentication enable command usage:1 WORD option usage: 1 default option usage: 0 enable option usage: 0 line option usage: 0 none option usage: 0 radius option usage: 1 tacacs+ option usage: 0 show cpu-traffic-stats View the CPU traffic statistics. Z9000 Syntax Parameters show cpu-traffic-stats [port number | all | cp ] port number (OPTIONAL) Enter the port number to display traffic statistics on that port only. The range is from 1 to 1568.
PAGE 130
Usage Information Version 7.5.1.0 Introduced on the C-Series Version 6.2.1.1 Introduced on the E-Series. Traffic statistics are sorted on a per-interface basis; the interface receiving the most traffic is displayed first. All CPU and port information is displayed unless a specific port or CPU is specified. Traffic information is displayed for router ports only; not for management interfaces.
PAGE 131
Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series E-Series Original command.
PAGE 132
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.4 Output expanded to include Piece Part ID (PPID) and eSR4 optics.
PAGE 133
APF11200012UQQ 0 1 APF11200012UQQ 0 2 APF11200012UQQ 0 3 APF11200012UQQ 0 4 APF11200012UR1 0 5 APF11200012UR1 0 6 APF11200012UR1 0 7 APF11200012UR1 0 8 APF12300017GEY 0 9 APF12300017GEY 0 10 APF12300017GEY Related Commands QSFP QSFP QSFP QSFP QSFP QSFP QSFP QSFP QSFP QSFP Yes 40GBASE-CR4-1M Yes 40GBASE-CR4-1M Yes 40GBASE-CR4-1M Yes 40GBASE-CR4-1M Yes 40GBASE-CR4-1M Yes 40GBASE-CR4-1M Yes 40GBASE-CR4-1M Yes 40GBASE-CR4-1M Yes 40GBASE-CR4-1M Yes 40GBASE-CR4-1M Yes • show interfaces — displays the interfa
PAGE 134
Usage Information Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series and E-Series.
PAGE 135
Example (SSeries) Dell#show processes ipc flow-control ? cp Control Processor | Pipe through a command show software ifm Display interface management (IFM) data. Z9000 Syntax Parameters show software ifm {clients [summary] | ifagt number | ifcb interface | stack-unit unit-ID | trace-flags} clients Enter the keyword clients to display IFM client information. summary (OPTIONAL) Enter the keyword summary to display brief information about IFM clients.
PAGE 136
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.
PAGE 137
stack-unit unitid (OPTIONAL) Enter the keywords stack-unit then the stack member ID for information on that stack member. The unit ID range for the Z9000 is from 0 to 7. stack-ports status | topology (OPTIONAL) Enter the keywords stack-ports for information about the status or topology of the S4810 stack ports. Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific.
PAGE 138
Unit UnitType Status ReqTyp CurTyp Version Ports ----------------------------------------------------------------------------------0 Management online S6000 S6000 9-4(0-168) 128 1 Member not present 2 Member not present 3 Member not present 4 Member not present 5 Member not present -- Power Supplies -Unit Bay Status Type FanStatus FanSpeed(rpm) -------------------------------------------------------------------------0 0 down UNKNOWN down 0 0 1 up AC up 6600 -- Fan Status -Unit Bay TrayStatus Fan0 Speed Fan1
PAGE 139
0 0 0 0 1 2 up up up up up up 7072 7021 7072 up up up 7021 7123 7021 Speed in RPM Example (S4810) -- Unit 1 -Unit Type Status : Member Unit : not present -- Unit 2 -Unit Type Status : Member Unit : not present -- Unit 3 -Unit Type Status : Member Unit : not present -- Unit 4 -Unit Type Status : Member Unit : not present -- Unit 5 -Unit Type Status : Member Unit : not present Dell#show system stack-unit 0 -- Unit 0 -Unit Type : Management Unit Status : online Next Boot : online Required Ty
PAGE 140
-----------0 0 down 0 1 up UNKNOWN AC down up 0 6600 -- Fan Status -Unit Bay TrayStatus Fan0 Speed Fan1 Speed ----------------------------------------------------------------------------------0 0 up up 6971 up 7021 0 1 up up 7021 up 7021 0 2 up up 7021 up 7021 Speed in RPM Related Commands • show version – displays the Dell Networking OS version. • show hardware stack-unit – displays the data plane and management plane input and output statistics of a particular stack member.
PAGE 141
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced save to the file options. Version 7.6.1.0 Introduced on the S-Series. Without the page or stack-unit option, the command output is continuous. To interrupt the command output, use Ctrl-z. The save option works with other filtering commands.
PAGE 142
except find grep no-more save Show only text Search for the Show only text Don't paginate Save output to that does not match a pattern first occurrence of a pattern that matches a pattern output a file Dell#show tech-support stack-unit 1 | save ? flash: Save to local file system (flash://filename (max 20 chars) ) Dell#show tech-support stack-unit 1 | save flash://LauraSave Start saving show command report ....... Dell# Dell#dir Directory of flash: 1 drw- 16384 Jan 01 1980 00:00:00 +00:00 .
PAGE 143
redundancy disable-auto-reboot redundancy disable-auto-reboot redundancy disable-auto-reboot redundancy disable-auto-reboot redundancy disable-auto-reboot ! hardware watchdog stack-unit 0 hardware watchdog stack-unit 1 hardware watchdog stack-unit 2 hardware watchdog stack-unit 3 hardware watchdog stack-unit 4 hardware watchdog stack-unit 5 ! stack-unit stack-unit stack-unit stack-unit stack-unit 1 2 3 4 5 Related Commands ssh-peer-stack-unit Open an SSH connection to the peer stack-unit.
PAGE 144
telnet Connect through Telnet to a server. The Telnet client and server in Dell Networking support IPv4 and IPv6 connections. You can establish a Telnet session directly to the router or a connection can be initiated from the router. Z9000 Syntax Parameters telnet {host | ip-address | ipv6-address prefix-length} [/ source-interface] host Enter the name of a server. ip-address Enter the IPv4 address in dotted decimal format of the server.
PAGE 145
Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Added support for sourceinterface for link-local IPv6 addressing. Version 8.3.11.1 Introduced on the Z9000. Version 8.2.1.0 Introduced on the E-Series ExaScale (IPv6). Increased the number of VLANs on ExaScale to 4094 (was 2094). Version 8.1.1.0 Introduced on the E-Series ExaScale (IPv4). Version 7.6.1.
PAGE 146
Version 8.3.11.1 Introduced on the S-Series. terminal length Configure the number of lines displayed on the terminal screen. Z9000 Syntax Parameters terminal length screen-length screen-length Enter a number of lines. Entering zero causes the terminal to display without pausing. The range is from 0 to 512. Defaults 24 lines Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific.
PAGE 147
traceroute View a packet’s path to a specific device. Z9000 Syntax Parameters traceroute {host | ip-address | ipv6-address} host Enter the name of device. ip-address Enter the IP address of the device in dotted decimal format. ipv6-address Enter the IPv6 address, in the x:x:x:x::x format, to which you are testing connectivity. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 148
Usage Information Version 7.4.1.0 Added support for IPv6 address on the E-Series. E-Series Original command. When you enter the traceroute command without specifying an IP address (Extended Traceroute), you are prompted for a target and source IP address, timeout (in seconds) (default is 5), a probe count (default is 3), minimum TTL (default is 1), maximum TTL (default is 30), and port number (default is 33434). To keep the default setting for those parameters, press the ENTER key.
PAGE 149
Related Commands ping — tests the connectivity to a device. undebug all Disable all debug operations on the system. Z9000 Syntax undebug all Defaults none Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 150
Parameters ipv4-address Enter the IP address of the active management interface in a dotted decimal format (A.B.C.D.). ipv6-address Enter an IPv6 address of the active management interface, in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 151
write Copy the current configuration to either the startup-configuration file or the terminal. Z9000 Syntax Parameters write {memory | terminal} memory Enter the keyword memory to copy the current running configuration to the startup configuration file. This command is similar to the copy running-config startup-config command. terminal Enter the keyword terminal to copy the current running configuration to the terminal. This command is similar to the show running-config command.
PAGE 152
5 802.1X An authentication server must authenticate a client connected to an 802.1X switch port. Until the authentication, only extensible authentication protocol over LAN (EAPOL) traffic is allowed through the port to which a client is connected. After authentication is successful, normal traffic passes through the port. The Dell Networking operating software supports remote authentication dial-in service (RADIUS) and active directory environments using 802.1X Port Authentication.
PAGE 153
debug dot1x Display 802.1X debugging information. Z9000 Syntax Parameters debug dot1x [all | auth-pae-fsm | backend-fsm | eapol-pdu] [interface interface] all Enable all 802.1X debug messages. auth-pae-fsm Enable authentication PAE FSM debug messages. backend-fsm Enable backend FSM debug messages. eapol-pdu Enable the EAPOL frame trace and related debug messages. interface interface Restricts the debugging information to an interface.
PAGE 154
To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id [max-attempts number] command. Parameters vlan-id Enter the VLAN Identifier. The range is from 1 to 4094. max-attempts number (OPTIONAL) Enter the keywords max-attempts followed number of attempts desired before authentication fails. The range is from 1 to 5. The default is 3. Defaults 3 attempts Command Modes CONFIGURATION (conf-if-interface-slot/port) Command History This guide is platform-specific.
PAGE 155
dot1x auth-server Configure the authentication server to RADIUS. Z9000 Syntax dot1x auth-server radius Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.
PAGE 156
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.4.2.1 Introduced on the C-Series and S-Series. The prerequisites for enabling MAB-only authentication on a port are: • Enable 802.1X authentication globally on the switch and on the port (the dot1x authentication command).
PAGE 157
Related Commands Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 7.6.1.0 Introduced on the C-Series and S-Series. Version 7.4.1.0 Introduced on the E-Series TeraScale. dot1x authentication (Interface) — Enable dot1x on an interface. dot1x authentication (Interface) Enable dot1x on an interface.
PAGE 158
Related Commands dot1x authentication (Configuration) — Enable dot1x globally. dot1x guest-vlan Configure a guest VLAN for limited access users or for devices that are not 802.1X capable. Z9000 Syntax dot1x guest-vlan vlan-id To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command. Parameters vlan-id Enter the VLAN Identifier. The range is from 1 to 4094. Defaults Not configured.
PAGE 159
If the host fails authentication for the designated number of times, the authenticator places the port in authentication failed VLAN (dot1x auth-failvlan). NOTE: You can create the Layer 3 portion of a guest VLAN and authentication fail VLANs regardless if the VLAN is assigned to an interface or not. After an interface is assigned a guest VLAN (which has an IP address), routing through the guest VLAN is the same as any other traffic. However, the interface may join/leave a VLAN dynamically.
PAGE 160
Usage Information Related Commands Version 8.3.11.1 Introduced on the Z9000. Version 8.4.1.0 Added the multi-auth option on the C-Series and S-Series. Version 8.3.2.0 Added the single-host and multi-host options on the C-Series, E-Series, and S-Series. • Single-host mode authenticates only one host per authenticator port and drops all other traffic on the port. • Multi-host mode authenticates the first host to respond to an Identity Request and then permits all other traffic on the port.
PAGE 161
Version 8.4.1.0 Usage Information Introduced on the C-Series and S-Series. To disable MAC authentication bypass on a port, enter the no dot1x mac-authbypass command. dot1x max-eap-req Configure the maximum number of times an extensive authentication protocol (EAP) request is transmitted before the session times out. Z9000 Syntax dot1x max-eap-req number To return to the default, use the no dot1x max-eap-req command.
PAGE 162
dot1x max-supplicants Restrict the number of supplicants that can be authenticated and permitted to access the network through the port. This configuration is only takes effect in Multi-auth mode. Z9000 Syntax Parameters dot1x max-supplicants number number Enter the number of supplicants that can be authenticated on a single port in Multi-auth mode. The range is from 1 to 128. The default is 128. Defaults 128 hosts can be authenticated on a single authenticator port.
PAGE 163
Parameters forceauthorized Enter the keywords force-authorized to forcibly authorize a port. auto Enter the keyword auto to authorize a port based on the 802.1X operation result. forceunauthorized Enter the keywords force-unauthorized to forcibly deauthorize a port. Defaults none Command Modes Auto Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 164
Defaults 60 seconds Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 7.6.1.
PAGE 165
Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 7.6.1.0 Introduced on the C-Series and S-Series. Version 7.4.1.0 Introduced on the E-Series. dot1x reauth-max Configure the maximum number of times a port can re-authenticate before the port becomes unauthorized.
PAGE 166
Version 7.4.1.0 Introduced on the E-Series. dot1x server-timeout Configure the amount of time after which exchanges with the server time-out. Z9000 Syntax dot1x server-timeout seconds To return to the default, use the no dot1x server-timeout command. Parameters seconds Enter a time-out value in seconds. The range is from 1 to 300, where 300 is implementation dependant. The default is 30. Defaults 30 seconds Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 167
Where the default values are as follows: dot1x server-timeout (30 seconds), radius-server retransmit (3 seconds), and radius-server timeout (5 seconds). For example: Dell(conf)#radius-server host 10.11.197.105 timeout 6 Dell(conf)#radius-server host 10.11.197.105 retransmit 4 Dell(conf)#interface gigabitethernet 2/23 Dell(conf-if-gi-2/23)#dot1x server-timeout 40 dot1x supplicant-timeout Configure the amount of time after which exchanges with the supplicant time-out.
PAGE 168
dot1x tx-period Configure the intervals at which EAPOL PDUs the Authenticator PAE transmits. Z9000 Syntax dot1x tx-period seconds To return to the default, use the no dot1x tx-period command. Parameters seconds Enter the interval time, in seconds, that EAPOL PDUs are transmitted. The range is from 1 to 65535. The default is 30. Defaults 30 seconds Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 169
mac-address • For a Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information. • For a Fast Ethernet interface, enter the keyword FastEthernet then the slot/port information. • For a Ten-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. (Optional) MAC address of an 802.1X-authenticated supplicant. Defaults none Command Modes • EXEC • EXEC privilege Command History This guide is platform-specific.
PAGE 170
Dell#show dot1x cos-mapping int g 2/21 mac-address 00:00:01:00:07:00 802.1p CoS re-map table on Gi 2/21: ---------------------------------802.1p CoS re-map table for Supplicant: 00:00:01:00:07:00 Dot1 Remapped Dot1p 0 7 1 6 2 5 3 4 4 3 5 2 6 1 7 0 show dot1x interface Display the 802.1X configuration of an interface.
PAGE 171
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.4.2.1 Added the mac-address option on the C-Series and SSeries. Version 7.6.1.0 Introduced on the C-Series, E-Series, and S-Series. Usage Information If you enable 802.1X multi-supplicant authentication on a port, additional 802.
PAGE 172
Quiet Period: ReAuth Max: Supplicant Timeout: Server Timeout: Re-Auth Interval: Max-EAP-Req: Host Mode: Max-Supplicants: 60 seconds 1 30 seconds 30 seconds 60 seconds 2 MULTI_AUTH 128 Port status and State info for Supplicant: 00:00:01:00:07:00 Port Auth Status: Untagged VLAN id: Auth PAE State: Backend State: Dell# Example (Interface) AUTHORIZED(MAC-AUTH-BYPASS) 4094 Authenticated Idle Dell#show dot1x interface g 0/21 802.
PAGE 173
Access Control Lists (ACL) 6 Access control lists (ACLs) are supported by the Dell Networking operating software on the Z9000 platform.
PAGE 174
description Enter a description of up to 80 characters. Defaults Not configured. Command Modes • CONFIGURATION-STANDARD-ACCESS-LIST • CONFIGURATION-EXTENDED-ACCESS-LIST • CONFIGURATION-MAC ACCESS LIST-STANDARD • CONFIGURATION-MAC ACCESS LIST-EXTENDED Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 175
show config Display the current ACL configuration. Z9000 Syntax show config Command Modes • CONFIGURATION-STANDARD-ACCESS-LIST • CONFIGURATION-EXTENDED-ACCESS-LIST Command History • CONFIGURATION-MAC ACCESS LIST-STANDARD • CONFIGURATION-MAC ACCESS LIST-EXTENDED This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 176
NOTE: Also refer to the Commands Common to all ACL Types section. access-class Apply a standard ACL to a terminal line. Z9000 Syntax access-class access-list-name To remove an ACL, use the no access-class access-list-name command. Parameters access-listname Enter the name of a configured Standard ACL, up to 140 characters. Defaults Not configured. Command Modes LINE Command History This guide is platform-specific.
PAGE 177
Parameters access-listname (OPTIONAL) Enter the name of a configured access-list, up to 140 characters. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.
PAGE 178
implicit-permit (that is, if the traffic does not match the filters in the ACL, the traffic is permitted instead of dropped). vlan vlan-id (OPTIONAL) Enter the keyword vlan then the ID numbers of the VLANs. The range is from 1 to 4094 (you can use IDs from 1 to 4094). Defaults Not enabled. Command Modes INTERFACE/VRF MODE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 179
ip control-plane egress-filter Enable egress Layer 3 ACL lookup for IPv4 CPU traffic. Z9000 Syntax ip control-plane egress-filter Defaults Not enabled. Command Modes EXEC Privilege Command History Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. show ip accounting access-list Display the IP access-lists created on the switch and the sequence of filters.
PAGE 180
Command Modes Command History • • EXEC EXEC Privilege This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.
PAGE 181
The Z9000 supports both Ingress and Egress IP ACLs. NOTE: Also refer to the Commands Common to all ACL Types and Common IP ACL Commands sections. deny To drop packets with a certain IP address, configure a filter. Z9000 Syntax deny {source | any | host {ip-address}} To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no deny {source [mask] | any | host ip-address} command.
PAGE 182
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Add the DSCP value for ACL matching. Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.
PAGE 183
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.10.0 Introduced on the S4810. Version 8.1.1.
PAGE 184
To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit {source [mask] | any | host ip-address} command. source Enter the IP address in dotted decimal format of the network from which the packet was sent. mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
PAGE 185
Version 8.3.1.0 Add the DSCP value for ACL matching. Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Added support for the non-contiguous mask and added the monitor option. Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry.
PAGE 186
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the E-Series ExaScale (IPv6).
PAGE 187
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.0 Introduced on the E-Series ExaScale Version 7.8.1.0 Increased the name string to accept up to 140 characters. Prior to 7.8.1.
PAGE 188
host ip-address Enter the keyword host then the IP address to specify a host IP address or hostname. count (OPTIONAL) Enter the keyword count to count packets the filter processes. bytes (OPTIONAL) Enter the keyword bytes to count bytes the filter processes. dscp (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values. order (OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry.
PAGE 189
Usage Information Related Commands The order option is relevant in the context of the Policy QoS feature only. The following applies: • The seq sequence-number command is applicable only in an ACL group. • The order option works across ACL groups that have been applied on an interface via the QoS policy framework. • The order option takes precedence over seq sequence-number.
PAGE 190
Parameters ip Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list denies all IP protocols. ip-protocolnumber Enter a number from 0 to 255 to deny based on the protocol identified in the IP protocol header. source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or noncontiguous.
PAGE 191
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Add the DSCP value for ACL matching. Version 8.
PAGE 192
deny icmp To drop all or specific internet control message protocol (ICMP) messages, configure a filter. Z9000 Syntax deny icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} [dscp] [count [byte] | log] [order] [monitor] [fragments] To remove this filter, you have two choices: • • Parameters 192 Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 193
based Monitoring” in the Port Monitoring chapter of the Dell Networking OS Configuration Guide. fragments Enter the keyword fragments to use ACLs to control packet fragments. Defaults Not configured. Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 194
deny tcp Configure a filter that drops transmission control protocol (TCP) packets meeting the filter criteria. Z9000 Syntax deny tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [dscp] [bit] [operator port [port]] [count [byte] | log] [order] [monitor] [fragments] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 195
port port Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • • • • 23 = Telnet 20 and 21 = FTP 25 = SMTP 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
PAGE 196
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Added the keyword dscp. Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.
PAGE 197
5 6 7 8 0001110000000000 0001111000000000 0001111100000000 0001111101000000 1111111000000000 1111111100000000 1111111111000000 1111111111111111 7168 7680 7936 8000 7679 7935 7999 8000 512 256 64 1 Total Ports: 4001 Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM. Rule# Data Mask From To 1 0000000000000000 1111110000000000 0 #Covered 1023 1024 Total Ports: 1024 Related Commands deny — assigns a filter to deny IP traffic.
PAGE 198
• eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port command) port port Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535. destination Enter the IP address of the network or host to which the packets are sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.
PAGE 199
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Added the keyword dscp. Version 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.
PAGE 200
5 6 7 8 0001110000000000 0001111000000000 0001111100000000 0001111101000000 1111111000000000 1111111100000000 1111111111000000 1111111111111111 7168 7680 7936 8000 7679 7935 7999 8000 512 256 64 1 Total Ports: 4001 Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM. Rule# Data Mask From To 1 0000000000000000 1111110000000000 0 #Covered 1023 1024 Total Ports: 1024 Related Commands deny — assigns a filter to deny IP traffic.
PAGE 201
Usage Information Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.8.1.0 Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up to 16 characters long. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. The number of entries allowed per ACL is hardware-dependent. For detailed specification on entries allowed per ACL, refer to your line card documentation.
PAGE 202
destination Enter the IP address of the network or host to which the packets are sent. count (OPTIONAL) Enter the keyword count to count packets processed by the filter. bytes (OPTIONAL) Enter the keyword bytes to count bytes processed by the filter. dscp (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 203
Usage Information The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the “Quality of Service” chapter of the Dell Networking OS Configuration Guide. The software cannot count both packets and bytes; when you enter the count byte options, only bytes are incremented. Related Commands ip access-list extended — creates an extended ACL. permit tcp — assigns a permit filter for TCP packets. permit udp — assigns a permit filter for UDP packets.
PAGE 204
• urg: urgent field dscp Enter the keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63. operator (OPTIONAL) Enter one of the following logical operand: port port • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port parameter) Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535.
PAGE 205
NOTE: For more information, refer to the Flow-based Monitoring section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide. fragments Enter the keyword fragments to use ACLs to control packet fragments. Defaults Not configured. Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 206
The S-Series cannot count both packets and bytes; when you enter the count byte options, only bytes are incremented. The monitor option is relevant in the context of flow-based monitoring only. For more information, refer to Port Monitoring. Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (for example, gt, lt, or range) may require more than one entry.
PAGE 207
Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit udp {source mask | any | host ip-address} {destination mask | any | host ip-address command. source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
PAGE 208
in which you are creating the rule is applied to the monitored interface. NOTE: For more information, refer to the Flow-based Monitoring section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide. fragments Enter the keyword fragments to use ACLs to control packet fragments. Defaults Not configured. Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST Command History This guide is platform-specific.
PAGE 209
The S-Series cannot count both packets and bytes; when you enter the count byte options, only bytes are incremented. The monitor option is relevant in the context of flow-based monitoring only. For more information, refer to Port Monitoring. Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (for example, gt, lt, or range) may require more than one entry.
PAGE 210
access-listname Enter the name of a configured IP access list, up to 140 characters. StartingSeqNu m Enter the starting sequence number to resequence. The range is from 0 to 4294967290. Step-toIncrement Enter the step to increment the sequence number. The range is from 1 to 4294967290. Defaults none Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific.
PAGE 211
Step-toIncrement Enter the step to increment the sequence number. The range is from 1 to 65535. Defaults none Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.
PAGE 212
permit Enter the keyword permit to configure a filter to forward packets meeting this criteria. ip-protocolnumber Enter a number from 0 to 255 to filter based on the protocol identified in the IP protocol header. icmp Enter the keyword icmp to configure an ICMP access list filter. ip Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list permits all IP protocols. tcp Enter the keyword tcp to configure a TCP access list filter.
PAGE 213
byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. log (OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log. Supported on Jumbo-enabled line cards only. dscp (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values. order (OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority).
PAGE 214
Usage Information Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Added support for the non-contiguous mask and added the monitor option. Deprecated the keyword established. Version 6.5.10 Expanded to include the optional QoS order priority for the ACL entry. The monitor option is relevant in the context of flow-based monitoring only. For more information, refer to Port Monitoring. The order option is relevant in the context of the Policy QoS feature only.
PAGE 215
The MAC ACL can be applied on Physical, Port-channel and VLAN interfaces. As per the specified rules in the acl, the traffic on the interface/ VLAN members or Port-channel members will be permitted or denied. clear counters mac access-group Clear counters for all or a specific MAC ACL. Z9000 Syntax Parameters clear counters mac access-group [mac-list-name] mac-list-name (OPTIONAL) Enter the name of a configured MAC access list.
PAGE 216
Parameters access-listname Enter the name of a configured MAC access list, up to 140 characters. vlan vlan-range (OPTIONAL) Enter the keyword vlan and then enter a range of VLANs. The range is from 1 to 4094 (you can use IDs 1 to 4094). NOTE: This option is available only with the keywordin option. in Enter the keyword in to configure the ACL to filter incoming traffic. out Enter the keyword out to configure the ACL to filter outgoing traffic. NOTE: The option is not available on the S-Series.
PAGE 217
Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. Usage Information You can assign one ACL (standard or extended) to an interface. Related Commands mac access-list standard — configures a standard MAC ACL. mac access-list extended — configures an extended MAC ACL.
PAGE 218
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.4.1.0 Introduced. show mac accounting access-list Display MAC access list configurations and counters (if configured).
PAGE 219
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.8.1.0 Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series pre-Version 6.1.1.0 Introduced on the E-Series.
PAGE 220
deny To drop packets with a the MAC address specified, configure a filter. Z9000 Syntax deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no deny {any | mac-source-address mac-source-addressmask} command. any Enter the keyword any to specify that all routes are subject to the filter.
PAGE 221
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Added the monitor option. When you use the log option, the CP processor logs detail the packets that match.
PAGE 222
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.8.1.0 Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.
PAGE 223
Parameters any Enter the keyword any to forward all packets received with a MAC address. mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match). count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
PAGE 224
Usage Information When you use the log option, the CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details. NOTE: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead. Related Commands deny — configures a MAC ACL filter to drop packets.
PAGE 225
in which you are creating the rule is applied to the monitored interface. NOTE: For more information, refer to the “Flow-based Monitoring” section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide. Defaults Not configured Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 226
Extended MAC ACL Commands When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit. The following commands configure Extended MAC ACLs. The Z9000 supports both Ingress and Egress MAC ACLs. NOTE: For more information, also refer to the Commands Common to all ACL Types and Common MAC Access List Commands sections. deny To drop packets that match the filter criteria, configure a filter.
PAGE 227
ethertype operator (OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes: • ev2 - is the Ethernet II frame format • llc - is the IEEE 802.3 frame format • snap - is the IEEE 802.3 SNAP frame format count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. log (OPTIONAL, E-Series only) Enter the keyword log to log the packets.
PAGE 228
NOTE: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead. Related Commands permit — configures a MAC address filter to pass packets. seq — configures a MAC address filter with a specified sequence number. mac access-list extended Name a new or existing extended MAC access control list (extended MAC ACL).
PAGE 229
pre-Version 6.1.1.0 Usage Information Introduced on the E-Series. The number of entries allowed per ACL is hardware-dependent. For detailed specifications on entries allowed per ACL, refer to your line card documentation. Prior to 7.8.1.0, names are up to 16 characters long.
PAGE 230
• Parameters Use the no permit {any | host mac-address | mac-source-address mac-source-address-mask} {any | mac-destination-address macdestination-address-mask} command. any Enter the keyword any to forward all packets. host Enter the keyword host then a MAC address to forward packets with that host address. mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match.
PAGE 231
Defaults Not configured. Command Modes CONFIGURATION-MAC ACCESS LIST-EXTENDED Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.
PAGE 232
Parameters sequencenumber Enter a number as the filter sequence number. The range is from zero (0) to 65535. deny Enter the keyword deny to drop any traffic matching this filter. permit Enter the keyword permit to forward any traffic matching this filter. any Enter the keyword any to filter all packets. host macaddress Enter the keyword host and then enter a MAC address to filter packets with that host address. mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format.
PAGE 233
NOTE: For more information, refer to the Flow-based Monitoring section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide. Defaults Not configured. Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 234
clear ip prefix-list Reset the number of times traffic mets the conditions (“hit” counters) of the configured prefix lists. Z9000 Syntax Parameters clear ip prefix-list [prefix-name] prefix-name (OPTIONAL) Enter the name of the configured prefix list to clear only counters for that prefix list, up to 140 characters long. Defaults Clears “hit” counters for all prefix lists unless a prefix list is specified. Command Modes EXEC Privilege Command History This guide is platform-specific.
PAGE 235
Parameters ip-prefix Specify an IP prefix in the network/length format. For example, 35.0.0.0/ 8 means match the first 8 bits of address 35.0.0.0. ge min-prefixlength (OPTIONAL) Enter the keyword ge and then enter the minimum prefix length, which is a number from zero (0) to 32. le max-prefixlength (OPTIONAL) Enter the keyword le and then enter the maximum prefix length, which is a number from zero (0) to 32. Defaults Not configured.
PAGE 236
Parameters prefix-name Enter a string up to 16 characters long as the name of the prefix list, up to 140 characters long. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.
PAGE 237
ge min-prefixlength (OPTIONAL) Enter the keyword ge and then enter the minimum prefix length, which is a number from zero (0) to 32. le max-prefixlength (OPTIONAL) Enter the keyword le and then enter the maximum prefix length, which is a number from zero (0) to 32. Command Modes PREFIX-LIST Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 238
Parameters sequencenumber Enter a number. The range is from 1 to 4294967294. deny Enter the keyword deny to configure a filter to drop packets meeting this condition.. permit Enter the keyword permit to configure a filter to forward packets meeting this condition. any (OPTIONAL) Enter the keyword any to match any packets. ip-prefix /nn (OPTIONAL) Specify an IP prefix in the network/length format. For example, 35.0.0.0/8 means match the first 8 bits of address 35.0.0.0.
PAGE 239
show config Display the current PREFIX-LIST configurations. Z9000 Syntax show config Command Modes PREFIX-LIST Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000.
PAGE 240
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.8.1.
PAGE 241
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.8.1.
PAGE 242
continue To a route-map entry with a higher sequence number, configure a route-map. Z9000 Syntax Parameters continue [sequence-number] sequencenumber (OPTIONAL) Enter the route map sequence number. The range is from 1 to 65535. Defaults Not configured. Command Modes ROUTE-MAP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 243
• A successful match with a continue clause, the route map executes the set clauses and then goes to the specified route map entry upon execution of the continue clause. • If the next route map entry contains a continue clause, the route map executes the continue clause if a successful match occurs. • If the next route map entry does not contain a continue clause, the route map evaluates normally.
PAGE 244
Related Commands Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. pre-Version 7.7.1.0 Introduced. route-map — enables a route map. match as-path To match routes that have a certain AS number in their BGP path, configure a filter. Z9000 Syntax match as-path as-path-name To delete a match AS path filter, use the no match as-path as-path-name command.
PAGE 245
Related Commands set as-path — adds information to the BGP AS_PATH attribute. match community To match routes that have a certain COMMUNITY attribute in their BGP path, configure a filter. Z9000 Syntax match community community-list-name [exact] To delete a community match filter, use the no match community command. Parameters communitylist-name Enter the name of a configured community list. exact (OPTIONAL) Enter the keywords exact to process only those routes with this community list name.
PAGE 246
match interface To match routes whose next hop is on the interface specified, configure a filter. Z9000 Syntax match interface interface To remove a match, use the no match interface interface command. Parameters interface Enter the following keywords and slot/port or number information: • . • For the loopback interface, enter the keyword loopback then a number from zero (0) to 16383. • For a Port Channel interface, enter the keyword portchannel then a number. The range is from 1 to 128.
PAGE 247
pre-Version 6.1.1.0 Related Commands Introduced on the E-Series. match ip address — redistributes routes that match an IP address. match ip next-hop — redistributes routes that match the next-hop IP address. match ip route-source — redistributes routes that match routes advertised by other routers. match metric — redistributes routes that match a specific metric. match route-type — redistributes routes that match a route type. match tag — redistributes routes that match a specific tag.
PAGE 248
Related Commands Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. match interface — redistributes routes that match the next-hop interface. match ip next-hop — redistributes routes that match the next-hop IP address. match ip route-source — redistributes routes that match routes advertised by other routers. match metric — redistributes routes that match a specific metric.
PAGE 249
Related Commands Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.8.1.0 Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. match interface — redistributes routes that match the next-hop interface.
PAGE 250
Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810 Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.8.1.0 Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names were up to 16 characters long. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.
PAGE 251
Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. match interface — redistributes routes that match the next-hop interface.
PAGE 252
Command Modes ROUTE-MAP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale.
PAGE 253
The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series.
PAGE 254
Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. match interface — redistributes routes that match the next-hop interface.
PAGE 255
prompted for a sequence number if there are multiple instances of the route map. The range is from 1 to 65535. Defaults Not configured. If you do not define a keyword (permit or deny) for the route map, the permit action is the default. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 256
To remove an AS-Path setting, use the no set as-path {prepend as-number | tag} command. Parameters prepend asnumber Enter the keyword prepend and then enter up to eight AS numbers to be inserted into the BGP path information. The range is from 1 to 65535. Defaults Not configured. Command Modes ROUTE-MAP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 257
Defaults Not configured. Command Modes ROUTE-MAP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.
PAGE 258
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.
PAGE 259
Parameters communitynumber Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system. local-AS Enter the keywords local-AS to drop all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED. All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03) community attribute must not be advertised to external BGP peers.
PAGE 260
pre-Version 6.1.1.0 Related Commands Introduced on the E-Series. match community — redistributes routes that match the COMMUNITY attribute. set level To specify the IS-IS level or OSPF area to which matched routes are redistributed, configure a filter. Z9000 Syntax set level {backbone | level-1 | level-1-2 | level-2 | stubarea} To remove a set level condition, use the no set level {backbone | level-1 | level-1-2 | level-2 | stub-area} command.
PAGE 261
Related Commands Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. set automatic-tag — computes the tag value of the route. set metric — specifies the metric value assigned to redistributed routes. set metric-type — specifies the metric type assigned to redistributed routes. set tag — specifies the tag assigned to redistributed routes. set local-preference To set the BGP LOCAL_PREF attribute for routers within the local autonomous system, configure a filter.
PAGE 262
Usage Information The set local-preference command changes the LOCAL_PREF attribute for routes meeting the route map criteria. To change the LOCAL_PREF for all routes, use the bgp default local-preference command. Related Commands bgp default local-preference — changes the default LOCAL_PREF attribute for all routes. set metric To assign a new metric to redistributed routes, configure a filter. Z9000 Syntax set metric [+ | -] metric-value To delete a setting, enter no set metric.
PAGE 263
Related Commands set automatic-tag — computes the tag value of the route. set level — specifies the OSPF area for route redistribution. set metric-type — specifies the route type assigned to redistributed routes. set tag — specifies the tag assigned to redistributed routes. set metric-type To assign a new route type for routes redistributed to OSPF, configure a filter. Z9000 Syntax set metric-type {internal | external | type-1 | type-2} To delete a setting, use the no set metric-type command.
PAGE 264
pre-Version 6.1.1.0 Related Commands Introduced on the E-Series. set automatic-tag — computes the tag value of the route. set level — specifies the OSPF area for route redistribution. set metric — specifies the metric value assigned to redistributed routes. set tag — specifies the tag assigned to redistributed routes. set next-hop To specify an IP address as the next hop, configure a filter. Z9000 Syntax set next-hop ip-address To delete the setting, use the no set next-hop ip-address command.
PAGE 265
If you configure the set next-hop command with the interface’s IP address (either Loopback or physical), the software declares the route unreachable. Related Commands match ip next-hop — redistributes routes that match the next-hop IP address. set origin To manipulate the BGP ORIGIN attribute, configure a filter. Z9000 Syntax set origin {igp | egp | incomplete} To delete an ORIGIN attribute setting, use the no set origin command.
PAGE 266
set tag To specify a tag for redistributed routes, configure a filter. Z9000 Syntax set tag tag-value To delete a setting, use the no set tag command. Parameters tag-value Enter a number as the tag. The range is from zero (0) to 4294967295. Defaults Not configured. Command Modes ROUTE-MAP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 267
set weight To add a non-RFC compliant attribute to the BGP route to assist with route selection, configure a filter. Z9000 Syntax set weight weight To delete a weight specification, use the no set weight weight command. Parameters weight Enter a number as the weight used by the route meeting the route map specification. The range is from 0 to 65535. The default is router-originated = 32768 and all other routes = 0.
PAGE 268
show config Display the current route map configuration. Z-Series Syntax show config Command Modes ROUTE-MAP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000.
PAGE 269
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.8.1.
PAGE 270
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.8.1.
PAGE 271
Example Version 8.1.1.0 Introduced on the E-Series ExaScale. pre-Version 6.1.1.0 Introduced on the E-Series. Dell#show ip as-path-access-lists ip as-path access-list 1 permit ^$ permit ^$.*$$ deny .* ip as-path access-list 91 permit ^$ deny .* permit ^$.*$$ Dell# IP Community List Commands IP community list commands are supported on the platform. ip community-list Enter COMMUNITY-LIST mode and create an IP community-list for BGP.
PAGE 272
Example Version 7.8.1.0 Increased the name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long. pre-Version 6.1.1.0 Introduced on the E-Series. Dell(conf)#ip community-list TestComList Dell(config-community-list)# show ip community-lists Display configured IP community lists in alphabetic order.
PAGE 273
deny deny deny deny deny deny deny Dell# 14551:112 701:666 702:666 703:666 704:666 705:666 14551:666 deny (for Standard IP ACLs) To drop packets with a certain IP address, configure a filter. Syntax deny {source | any | host {ip-address}}[count [byte]] [dscp value] [order] [fragments] [log [interval minutes] [thresholdin-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters Defaults • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 274
Version 9.4(0.0) Usage Information Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 275
Parameters Defaults log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
PAGE 276
extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Related Commands deny tcp — Assigns a filter to deny TCP packets. deny udp — Assigns a filter to deny UDP packets. ip access-list extended — Creates an extended ACL.
PAGE 277
Version 9.3(0.0) Usage Information Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 278
Defaults threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
PAGE 279
Related Commands deny — assigns a filter to deny IP traffic. deny udp — assigns a filter to deny UDP traffic. deny udp (for Extended IP ACLs) To drop user datagram protocol (UDP) packets meeting the filter criteria, configure a filter.
PAGE 280
If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. Related Commands deny — assigns a filter to deny IP traffic. deny tcp — assigns a filter to deny TCP traffic.
PAGE 281
Command Modes Command History Usage Information CONFIGURATION-EXTENDED-ACCESS-LIST Version 9.3(0.0) Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms. Version 9.4(0.0) Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 282
Parameters Defaults • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no deny icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 283
egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists.
PAGE 284
Command Modes Command History Usage Information CONFIGURATION-EXTENDED-ACCESS-LIST Version 9.3(0.0) Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms. Version 9.4(0.0) Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 285
Parameters Defaults log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
PAGE 286
extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Related Commands permit — configures a MAC address filter to pass packets. seq — configures a MAC address filter with a specified sequence number. deny (for Extended MAC ACLs) To drop packets that match the filter criteria, configure a filter.
PAGE 287
Command Modes Command History Usage Information CONFIGURATION-MAC ACCESS LIST-EXTENDED Version 9.3(0.0) Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms. Version 9.4(0.0) Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 288
Parameters Defaults • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit {source [mask] | any | host ip-address} command. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 289
ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists.
PAGE 290
Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled. Command Modes Command History Usage Information CONFIGURATION-EXTENDED-ACCESS-LIST Version 9.4(0.0) Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Version 9.3(0.0) Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
PAGE 291
• • Parameters Defaults Use the no seq sequence-number command if you know the filter’s sequence number. Use the no permit ether-type protocol-type-number {destination-mac-address mac-address-mask | any} vlan vlanid {source-mac-address mac-address-mask | any} command. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 292
the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port.
PAGE 293
Command History Usage Information Version 9.4(0.0) Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Version 9.3(0.0) Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 294
Defaults threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
PAGE 295
Related Commands ip access-list extended — creates an extended ACL. permit — assigns a permit filter for IP packets. permit tcp — assigns a permit filter for TCP packets. permit (for Extended IP ACLs) To pass IP packets meeting the filter criteria, configure a filter.
PAGE 296
Version 9.3(0.0) Usage Information Added the support for logging of ACLs on the S4810, S4820T, and Z9000 platforms. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 297
• Parameters Defaults Use the no permit {any | mac-source-address mac-sourceaddress-mask} command. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
PAGE 298
one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Related Commands deny — configures a MAC ACL filter to drop packets. seq —configure a MAC ACL filter with a specified sequence number. seq (for Standard MAC ACLs) To a deny or permit filter in a MAC access list while creating the filter, assign a sequence number.
PAGE 299
Usage Information When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 300
Defaults threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
PAGE 301
Related Commands ip access-list extended — creates an extended ACL. permit — assigns a permit filter for IP packets. permit udp — assigns a permit filter for UDP packets. seq arp (for Extended MAC ACLs) Configure an egress filter with a sequence number that filters ARP packets meeting this criteria. This command is supported only on 12-port GE line cards with SFP optics. For specifications, refer to your line card documentation. NOTE: Only the options that have been newly introduced in Release 9.3(0.
PAGE 302
Command History Usage Information Version 9.3.0.0 Added support for logging of ACLs on the S4810, S4820T, Z9000, and MXL 10/40GbE Switch IO Module platforms. Version 9.4(0.0) Added support for flow-based monitoring on the S4810, S4820T, S6000, Z9000, and MXL 10/40GbE Switch IO Module platforms. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 303
Parameters Defaults log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. You can enter a threshold in the range of 1-100.
PAGE 304
Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). seq (for IP ACLs) Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter.
PAGE 305
new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval. If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs.
PAGE 306
monitor Defaults (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled. Command Modes Command History Usage Information ACCESS-LIST Version 9.4(0.
PAGE 307
permit udp (for IPv6 ACLs) Configure a filter to pass UDP packets meeting the filter criteria. Syntax permit udp {source address mask | any | host ipv6-address} [operator port [port]] {destination address | any | host ipv6address} [operator port [port]] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: • • Parameters Defaults Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 308
If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 309
monitor Defaults (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is 5 minutes. By default, flow-based monitoring is not enabled. Command Modes Command History Usage Information ACCESS-LIST Version 9.4(0.
PAGE 310
permit icmp (for IPv6 ACLs) To allow all or specific internet control message protocol (ICMP) messages, configure a filter. Syntax permit icmp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} [message-type] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters Defaults • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 311
If ACL logging is stopped because the configured threshold is exceeded, it is reenabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 312
Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled. Command Modes Command History Usage Information ACCESS-LIST Version 9.4(0.0) Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Version 9.3(0.0) Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms.
PAGE 313
• Parameters Defaults Use the no deny udp {source address mask | any | host ipv6address} {destination address | any | host ipv6-address} command log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands.
PAGE 314
egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists.
PAGE 315
Command Modes Command History Usage Information ACCESS-LIST Version 9.4(0.0) Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. Version 9.3(0.0) Added support for logging of ACLs on the S4810, S4820T, and Z9000 platforms. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 316
• • Parameters Defaults Use the no seq sequence-number command syntax if you know the filter’s sequence number Use the no deny icmp {source address mask | any | host ipv6address} {destination address | any | host ipv6-address} command log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 317
ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port.
PAGE 318
Version 9.4(0.0) Usage Information Added support for flow-based monitoring on the S4810, S4820T, S6000, and Z9000 platforms. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 319
7 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM) This chapter describes the access control list (ACL) VLAN group and content addressable memory (CAM) enhancements. member vlan Add VLAN members to an ACL VLAN group. Syntax Parameters member vlan {VLAN-range} VLAN-range Enter the member VLANs using comma-separated VLAN IDs, a range of VLAN IDs, a single VLAN ID, or a combination.
PAGE 320
ip access-group Apply an egress IP ACL to the ACL VLAN group. Syntax Parameters ip access-group {group name} out implicit-permit group-name Enter the name of the ACL VLAN group where you want the egress IP ACLs applied, up to 140 characters. out Enter the keyword out to apply the ACL to outgoing traffic.
PAGE 321
Command History Version 9.3. (0.0) Introduced on the S4810, S4820T, Z9000 and MXL platforms Usage Information When an ACL-VLAN-Group name or the Access List Group Name contains more than 30 characters, the name is truncated in the show acl-vlan-group command output. Examples The following sample illustrates the output of the show acl-vlan-group command. NOTE: Some group names and some access list names are truncated.
PAGE 322
Group5 Vlan Members : 1,1000 Dell# show cam-acl-vlan Display the number of flow processor (FP) blocks that is allocated for the different VLAN services. Syntax show cam-acl-vlan Command Modes EXEC Privilege Command History Usage Information Version 9.3. (0.0) Introduced on the S4810, S4820T, Z9000 and MXL platforms. After CAM configuration for ACL VLAN groups is performed, you must reboot the system to enable the settings to be stored in nonvolatile storage.
PAGE 323
Example Field Description VlanAclOpt Number of FP blocks for ACL VLAN optimzation feature. Dell#show cam-acl-vlan -- Chassis Vlan Cam ACL -Current Settings(in block sizes) VlanOpenFlow : 0 VlanIscsi : 2 VlanHp : 1 VlanFcoe : 1 VlanAclOpt : 0 -- Stack unit 0 -Current Settings(in block sizes) VlanOpenFlow : 0 VlanIscsi : 2 VlanHp : 1 VlanFcoe : 1 VlanAclOpt : 0 cam-acl-vlan Allocate the number of flow processor (FP) blocks or entries for VLAN services and processes.
PAGE 324
Command History Usage Information Version 9.3(0.0) Introduced on the S4810 and Z9000 platforms. The VLAN ContentAware Processor (VCAP) application is a pre-ingress CAP that modifies the VLAN settings before packets are forwarded. To support the ACL CAM optimization functionality, the CAM carving feature is enhanced. A total of four VACP groups are present, of which two are for fixed groups and the other two are for dynamic groups.
PAGE 325
Example 1: Output of the show camusage Command Field Description LineCard Number of the line card that contains information on ACL VLAN groups Portpipe The hardware path that packets follow through a system for ACL optimization CAM-Region Type of area in the CAM block that is used for ACL VLAN groups Total CAM space Total amount of space in the CAM block Used CAM Amount of CAM space that is currently in use Available CAM Amount of CAM space that is free and remaining to be allocated for ACLs
PAGE 326
| 12286 | | 262127 | | 2834 --More-- | IN-L3 FIB | 262141 | 14 | IN-L3-SysFlow | 2878 | 44 Example 2: Output of the show camusage acl Command Dell#show cam-usage acl Linecard|Portpipe| CAM Partition | Total CAM | |Available CAM ========|========|=================|=============| =============|============ 11 | 0 | IN-L2 ACL | 1008 | 0 | 1008 | | IN-L3 ACL | 12288 | 2 | 12286 | | OUT-L2 ACL | 1024 | 2 | 1022 | | OUT-L3 ACL | 1024 | 0 | 1024 Example 3: Output of the show camusage router Command
PAGE 327
Example 4: Output of the show camusage switch Command Dell#show cam-usage switch Linecard|Portpipe| CAM Partition | Total CAM | |Available CAM ========|========|=================|=============| =============|============== 11 | 0 | IN-L2 ACL | 7152 | | 7152 | | IN-L2 FIB | 32768 | | 31687 | | OUT-L2 ACL | 0 | | 0 11 | 1 | IN-L2 ACL | 7152 | | 7152 | | IN-L2 FIB | 32768 | | 31687 | | OUT-L2 ACL | 0 | | 0 Used CAM 0 1081 0 0 1081 0 show running config acl-vlan-group Display the running configuration of al
PAGE 328
Dell#show running-config acl-vlan-group group1 ! acl-vlan-group group1 description Acl Vlan Group1 member vlan 1-10,400-410,500 ip access-group acl1 out implicit-permit Dell# acl-vlan-group Create an ACL VLAN group. Syntax acl-vlan-group {group name} To remove an ACL VLAN group, use the no acl-vlan-group {group name} command. Parameters group-name Specify the name of the ACL VLAN group. The name can contain a maximum 140 characters.
PAGE 329
show acl-vlan-group detail Display all the ACL VLAN Groups or display a specific ACL VLAN Group by name. To display the names in their entirety, the output displays in a line-by-line format. Syntax Parameters show acl-vlan-group detail detail Display information in a line-by-line format to display the names in their entirety. Without the detail option, the output is displayed in a table style and information may be truncated.
PAGE 330
description (ACL VLAN Group) Add a description to the ACL VLAN group. Syntax Parameters description description description Enter a description to identify the ACL VLAN group (80 characters maximum). Default No default behavior or values Command Modes CONFIGURATION (conf-acl-vl-grp) Command History Usage Information 330 Version 9.3. (0.
PAGE 331
8 Bidirectional Forwarding Detection (BFD) Bidirectional forwarding detection (BFD) is a detection protocol that provides fast forwarding path failure detection. The Dell Networking operating software implementation is based on the standards specified in the IETF Draft draft-ietf-bfd-base-03 and supports BFD on all Layer 3 physical interfaces including VLAN interfaces and port-channels BFD is supported on the Z9000 platform.
PAGE 332
The default is active. Defaults Refer to Parameters. Command Modes ROUTER OSPF ROUTER OSPFv3 ROUTER BGP ROUTER ISIS Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 9.2. (0.
PAGE 333
Related Commands neighbor bfd disable — Explicitly disables a BFD session with a BGP neighbor or a BGP peer group. bfd disable Disable BFD on an interface. Z9000 Syntax bfd disable Re-enable BFD using the no bfd disable command. Defaults BFD is disabled by default. Command Modes VRRP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 334
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.10.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.
PAGE 335
Version 7.4.1.0 Introduced on the E-Series. bfd interval Specify non-default BFD session parameters beginning with the transmission interval. Z9000 Syntax Parameters bfd interval interval min_rx min_rx multiplier value role {active | passive} interval milliseconds Enter the keywords interval to specify non-default BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 100.
PAGE 336
Example Version 8.3.10.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced on the E-Series. Dell(conf-if-gi-0/3)#bfd interval 250 min_rx 300 multiplier 4 role passive Dell(conf-if-gi-0/3)# bfd neighbor Establish a BFD session with a neighbor. Z9000 Syntax bfd neighbor ip-address To remove the BFD session with the neighbor, use the no bfd neighbor ipaddress command.
PAGE 337
Version 7.4.1.0 Related Commands Introduced on the E-Series. show bfd neighbors — displays the BFD neighbor information on all interfaces or a specified interface. bfd protocol-liveness Enable the BFD protocol liveness feature. Z9000 Syntax bfd protocol-liveness Defaults Disabled Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 338
To disable BFD for all neighbors configured through static routes, use the no ip route bfd [interval interval min_rx min_rx multiplier value role {active | passive}] command. Parameters interval milliseconds (OPTIONAL) Enter the keywords interval to specify nondefault BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 100.
PAGE 339
ipv6 ospf bfd all-neighbors Establish BFD sessions with all OSPFv3 neighbors on a single interface or use non-default BFD session parameters. Z9000 Syntax ipv6 ospf bfd all-neighbors [disable | [interval interval min_rx min_rx multiplier value role {active | passive}]] To disable all BFD sessions on an OSPFv3 interface implicitly, use the no ipv6 ospf bfd all-neighbors disable command in interface mode.. Parameters disable (OPTIONAL) Enter the keyword disable to disable BFD on this interface.
PAGE 340
Usage Information This command provides the flexibility to fine-tune the timer values based on individual interface needs when you configure ipv6 ospf BFD in CONFIGURATION mode. Any timer values specified with this command overrides timers set using the bfd all-neighbors command. Using the no form of this command does not disable BFD if you configure BFD in CONFIGURATION mode. To disable BFD on a specific interface while you configure BFD in CONFIGURATION mode, use the keyword disable.
PAGE 341
Defaults See Parameters Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.0.0 Introduced on Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on S4810. Version 8.2.1.0 Introduced on the E-Series ExaScale.
PAGE 342
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.8.0 Introduced on the S4810. Version 8.4.1.3 Introduced on the E-Series ExaScale.
PAGE 343
Defaults none Command Modes ROUTER BGP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.8.0 Introduced on the S4810. Version 8.4.1.
PAGE 344
detail • For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet then the slot/port information. • For a port-channel interface, enter the keyword portchannel then a number. For the C-Series, Z-Series, and S8410, the range is from 1 to 128. • For VLAN interfaces, enter the keyword vlan then a number from 1 to 4094. For ExaScale VLAN interfaces, the range is 1 to 2730 (VLAN IDs can be from 0 to 4093).
PAGE 345
Example (Detail) Dell#show bfd neighbors detail Related Commands bfd neighbor — establishes a BFD session with a neighbor. Session Discriminator: 1 Neighbor Discriminator: 1 Local Addr: 10.1.3.2 Local MAC Addr: 00:01:e8:02:15:0e Remote Addr: 10.1.3.
PAGE 346
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands 346 Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.10.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the C-Series.
PAGE 347
Border Gateway Protocol 9 BGP is an external gateway protocol that transmits interdomain routing information within and between autonomous systems (AS). BGP version 4 (BGPv4) supports classless inter-domain routing (CIDR) and the aggregation of routes and AS paths. Basically, two routers (called neighbors or peers) exchange information including full routing tables and periodically sent messages to update those routing tables. BGP is supported in Dell Networking OS version 9.0.0.
PAGE 348
ipv6 unicast Enter the keyword ipv6 followed by the keyword unicast to enable BGPv6 mode. Defaults Not configured. Command Modes ROUTER BGP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.
PAGE 349
summary-only (OPTIONAL) Enter the keyword summary-only to advertise only the aggregate address. Specific routes are not advertised. suppress-map map-name (OPTIONAL) Enter the keywords suppress-map then the name of a configured route map to identify which morespecific routes in the aggregate are suppressed. Defaults Not configured. Command Modes • ROUTER BGP ADDRESS FAMILY • ROUTER BGP ADDRESS FAMILY IPv6 Command History This guide is platform-specific.
PAGE 350
When an aggregate address is denied using a peer's outbound route-map, individual routes suppressed by the aggregate address are advertised to that peer. The attribute-map corresponding to an aggregate address is applied during the outbound update creation time; hence the value set in that attribute-map will not be shown in the output of the show ip bgp aggregate route command.
PAGE 351
bgp always-compare-med Allows you to enable comparison of the MULTI_EXIT_DISC (MED) attributes in the paths from different external ASs. Z9000 Syntax bgp always-compare-med To disable comparison of MED, enter no bgp always-compare-med. Defaults Disabled (that is, the software only compares MEDs from neighbors within the same AS). Command Modes ROUTER BGP Command History This guide is platform-specific.
PAGE 352
Command Modes ROUTER BGP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.
PAGE 353
Related Commands bgp four-octet-as-support — enables 4-byte support for the BGP process. bgp bestpath as-path ignore Ignore the AS PATH in BGP best path calculations. Z9000 Syntax bgp bestpath as-path ignore To return to the default, enter the no bgp bestpath as-path ignore command. Defaults Disabled (that is, the software considers the AS_PATH when choosing a route as best). Command Modes ROUTER BGP Command History This guide is platform-specific.
PAGE 354
Command Modes ROUTER BGP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.4 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810.
PAGE 355
Version 7.7.1.0 Usage Information Introduced on the C-Series. The software compares the MEDs only if the path contains no external autonomous system numbers. If you enable this command, use the clear ip bgp * command to recompute the best path. bgp bestpath med missing-as-best During path selection, indicate preference to paths with missing MED (MULTI_EXIT_DISC) over paths with an advertised MED attribute.
PAGE 356
bgp bestpath router-id ignore Do not compare router-id information for external paths during best path selection. Z9000 Syntax bgp bestpath router-id ignore To return to the default selection, use the no bgp bestpath router-id ignore command. Defaults Disabled Command Modes ROUTER BGP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 357
The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Usage Information Route reflection to clients is not necessary if all client routers are fully meshed.
PAGE 358
Usage Information Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. When a BGP cluster contains only one route reflector, the cluster ID is the route reflector’s router ID. For redundancy, a BGP cluster may contain two or more route reflectors. Assign a cluster ID with the bgp cluster-id command.
PAGE 359
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Added support for the 4-byte format To accept 4-byte formats before entering a 4-byte AS number, configure your system. All the routers in the Confederation must be 4 byte or 2 byte identified routers. You cannot mix them.
PAGE 360
Parameters as-number Enter the AS number. The range is from 0 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format). ...as-number (OPTIONAL) Enter up to 16 confederation numbers. The range is from 0 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format). Defaults Not configured. Command Modes ROUTER BGP Command History This guide is platform-specific.
PAGE 361
bgp dampening Enable BGP route dampening and configure the dampening parameters. Z9000 Syntax bgp dampening [half-life reuse suppress max-suppress-time] [route-map map-name] To disable route dampening, use the no bgp dampening [half-life reuse suppress max-suppress-time] [route-map map-name] command. Parameters half-life (OPTIONAL) Enter the number of minutes after which the Penalty is decreased.
PAGE 362
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. If you enter the bgp dampening command, the default values for half-life, reuse, suppress, and max-suppress-time are applied.
PAGE 363
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Usage Information All routers apply the bgp default local-preference command setting within the AS. To set the local preference for a specific route, use the set localpreference command in ROUTE-MAP mode.
PAGE 364
peer. If not, the update is dropped and a counter is increments. Use the show ip bgp neighbors command to view the “failed enforce-first-as check” counter. If you disable the enforce-first-as command, it can be viewed using the show ip protocols command. In the event of an enfore-first-as check failure, the existing BGP session is flapped. Related Commands show ip bgp neighbors — views the information the BGP neighbors exchange. show ip protocols — views information on routing protocols.
PAGE 365
also manually execute the clear ip bgp command in order for the configuration to take effect. bgp four-octet-as-support Enable 4-byte support for the BGP process. Z9000 Syntax bgp four-octet-as-support To disable fast external failover, use the no bgp four-octet-as-support command. Defaults Disabled (supports 2–byte format) Command Modes ROUTER BGP Command History This guide is platform-specific.
PAGE 366
This command automatically restarts the BGP instance for the configuration to take effect. bgp graceful-restart To support graceful restart as a receiver only, enable graceful restart on a BGP neighbor, a BGP node, or designate a local router. Z9000 Syntax bgp graceful-restart [restart-time seconds] [stale-path-time seconds] [role receiver-only] To return to the default, use the no bgp graceful-restart command.
PAGE 367
BGP graceful restart is active only when the neighbor becomes established. Otherwise it is disabled. Graceful-restart applies to all neighbors with established adjacency. This command automatically restarts the BGP instance for the configuration to take effect. bgp log-neighbor-changes Enable logging of BGP neighbor resets. Z-SeriesS6000 Syntax bgp log-neighbor-changes To disable logging, use the no bgp log-neighbor-changes command.
PAGE 368
Defaults Disabled (that is, paths/routes for the same destination but from different ASs do not have their MEDs compared). Command Modes ROUTER BGP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 369
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.
PAGE 370
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Version 7.6.1.0 Introduced BGP uses regular expressions (regex) to filter route information. In particular, the use of regular expressions to filter routes based on AS-PATHs and communities is common.
PAGE 371
bgp router-id Assign a user-given ID to a BGP router. Z9000 Syntax bgp router-id ip-address To delete a user-assigned IP address, use the no bgp router-id command. Parameters ip-address Enter an IP address in dotted decimal format to reset only that BGP neighbor. Defaults The router ID is the highest IP address of the Loopback interface or, if no Loopback interfaces are configured, the highest IP address of a physical interface on the router.
PAGE 372
Parameters * Enter an asterisk ( * ) to reset all BGP sessions. as-number Enter the AS number to reset all neighbors belonging to that AS. The range is from 0 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format). ip-address Enter an IP address in dotted decimal format to reset all prefixes from that neighbor. flap-statistics (OPTIONAL) Enter the keyword flap-statistics to reset the flap statistics on all prefixes from that neighbor.
PAGE 373
peer-group Enter the peer-group to clear all members of the peergroup. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000.
PAGE 374
Usage Information Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. After you enter this command, the software deletes the history routes and returns the suppressed routes to the Active state. The clear ip bgp dampening command does not clear the history paths. clear ip bgp flap-statistics Clear BGP flap statistics, which includes number of flaps and the time of the last flap.
PAGE 375
Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series.
PAGE 376
Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. debug ip bgp Display all information on BGP, including BGP events, keepalives, notifications, and updates. Z9000 Syntax debug ip bgp [ip-address | peer-group peer-group-name] [in | out] To disable all BGP debugging, use the no debug ip bgp command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format.
PAGE 377
The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. To view information on both incoming and outgoing routes, do not include the in and out parameters in the debugging command.
PAGE 378
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.
PAGE 379
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. To remove all configured debug commands for BGP, enter the no debug ip bgp command. debug ip bgp keepalives Display information about BGP keepalive messages.
PAGE 380
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. To remove all configured debug commands for BGP, enter the no debug ip bgp command. debug ip bgp notifications Allows you to view information about BGP notifications received from neighbors.
PAGE 381
Usage Information Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. To remove all configured debug commands for BGP, enter the no debug ip bgp command. debug ip bgp soft-reconfiguration Enable soft-reconfiguration debug. Z9000 S6000 Syntax debug ip bgp {ip-address | peer-group-name} softreconfiguration To disable, use the no debug ip bgp {ip-address | peer-group-name} soft-reconfiguration command.
PAGE 382
Usage Information This command turns on BGP soft-reconfiguration inbound debugging. If no neighbor is specified, debug turns on for all neighbors. debug ip bgp updates Allows you to view information about BGP updates. Z9000 Syntax debug ip bgp updates [in | out | prefix-list prefix-list-name] To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] updates [in | out] command. Parameters in (OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors.
PAGE 383
Usage Information To remove all configured debug commands for BGP, enter the no debug ip bgp command. default-metric Allows you to change the metric of redistributed routes to locally originated routes. Use this command with the redistribute command. Z9000 Syntax default-metric number To return to the default setting, use the no default-metric command. Parameters number Enter a number as the metric to be assigned to routes from other protocols. The range is from 1 to 4294967295.
PAGE 384
description Enter a description of the BGP routing protocol Z9000 Syntax description {description} To remove the description, use the no description {description} command. Parameters description Enter a description to identify the BGP protocol (80 characters maximum). Defaults none Command Modes ROUTER BGP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 385
Parameters Defaults externaldistance Enter a number to assign to routes learned from a neighbor external to the AS. The range is from 1 to 255. The default is 20. internaldistance Enter a number to assign to routes learned from a router within the AS. The range is from 1 to 255. The default is 200. local-distance Enter a number to assign to routes learned from networks listed in the network command. The range is from 1 to 255. The default is 200.
PAGE 386
Parameters ebgp Enter the keyword ebgp to enable multipath support for External BGP routes. ibgp Enter the keyword ibgp to enable multipath support for Internal BGP routes. number Enter a number as the maximum number of parallel paths. Defaults none Command Modes ROUTER BGP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 387
activate Enter the keyword activate to enable the neighbor/peer group in the new AFI/SAFI. Defaults Disabled Command Modes CONFIGURATION-ROUTER-BGP-ADDRESS FAMILY Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 388
path-count Enter the number paths supported. The range is from 2 to 64. Defaults none Command Modes CONFIGURATION-ROUTER-BGP-ADDRESS FAMILY Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 389
Command Modes ROUTER BGP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.
PAGE 390
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. neighbor allowas-in Set the number of times an AS number can occur in the AS path. Z-Series Syntax neighbor {ip-address | peer-group-name} allowas-in number To return to the default value, use the no neighbor {ip-address | peergroup-name} allowas-in command.
PAGE 391
Related Commands bgp four-octet-as-support — enables 4-byte support for the BGP process. neighbor default-originate Inject the default route to a BGP peer or neighbor. Z-Series Syntax neighbor {ip-address | peer-group-name} default-originate [route-map map-name] To remove a default route, use the no neighbor {ip-address | peergroup-name} default-originate command. Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
PAGE 392
Route-map configuration on a BGP peer or peer group works only when the LOCRIB contains at least one route. When you apply a default route to a BGP peer or peer group using the neighbor default-originate command, changes to the configured default route-map are applied to the BGP peer or peer group only after a delay of 15 seconds. As a result, you must wait for a period of 15 seconds before manually resetting BGP using the clear ip bgp command.
PAGE 393
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. neighbor distribute-list Distribute BGP information via an established prefix list.
PAGE 394
Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Usage Information Other BGP filtering commands include: neighbor filter-list, ip as-path access-list, and neighbor route-map. Related Commands neighbor route-map — assigns a route map to a neighbor or peer group. neighbor ebgp-multihop Attempt and accept BGP connections to external peers on networks that are not directly connected.
PAGE 395
Usage Information To prevent loops, the neighbor ebgp-multihop command does not install the default routes of the multihop peer. Networks not directly connected are not considered valid for best-path selection. neighbor fall-over Enable or disable fast fall-over for BGP neighbors. Z-Series Syntax neighbor {ipv4-address | peer-group-name} fall-over To disable, use the no neighbor {ipv4-address | peer-group-name} fall-over command.
PAGE 396
neighbor filter-list Configure a BGP filter based on the AS-PATH attribute. Z-Series Syntax neighbor {ip-address | peer-group-name} filter-list as-pathname {in | out} To delete a BGP filter, use the no neighbor {ip-address | peer-groupname} filter-list as-path-name {in | out} command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-groupname Enter the name of the peer group to apply the filter to all routers in the peer group.
PAGE 397
Related Commands ip as-path access-list — enter AS-PATH ACL mode and configure the AS-PATH filters. neighbor local-as To accept external routes from neighbors with a local AS number in the AS number path, configure Internal BGP (IBGP) routers. Z-Series Syntax neighbor {ip-address | peer-group-name} local-as as-number [noprepend] To return to the default value, use the no neighbor {ip-address | peergroup-name} local-as command.
PAGE 398
Usage Information If a local-as is configured, BGP does not allow for the configuration of BGP confederation. Similarly, if BGP confederation is configured, then BGP does not allow the configuration of local-as. This command automatically restarts the neighbor session for the configuration to take effect. Related Commands bgp four-octet-as-support — enables 4-byte support for the BGP process. neighbor maximum-prefix Control the number of network prefixes received.
PAGE 399
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.
PAGE 400
The following is a list of the FTOS version history for this command. Usage Information Version 8.3.11.1 Introduced on the Z9000. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. If you configure the set next-hop command in ROUTE-MAP mode, its configuration takes precedence over the neighbor next-hop-self (C-, E-, and S-Series) command. neighbor password Enable message digest 5 (MD5) authentication on the TCP connection between two neighbors.
PAGE 401
Usage Information Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. This command automatically restarts the neighbor session for the configuration to take effect. Configure the same password on both BGP peers or a connection does not occur.
PAGE 402
Defaults Not configured. Command Modes ROUTER BGP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.
PAGE 403
show ip bgp neighbors — views BGP neighbors configurations. neighbor peer-group (creating group) Allows you to create a peer group and assign it a name. Z-Series Syntax neighbor peer-group-name peer-group To delete a peer group, use the no neighbor peer-group-name peer-group command. Parameters peer-groupname Enter a text string up to 16 characters long as the name of the peer group. Defaults Not configured. Command Modes ROUTER BGP Command History This guide is platform-specific.
PAGE 404
neighbor peer-group passive Enable passive peering on a BGP peer group, that is, the peer group does not send an OPEN message, but responds to one. Z-Series Syntax neighbor peer-group-name peer-group passive [sessions] To delete a passive peer-group, use the no neighbor peer-group-name peer-group passive command. Parameters peer-groupname Enter a text string up to 16 characters long as the name of the peer group. Defaults Not configured.
PAGE 405
neighbor remote-as Create and specify the remote peer to the BGP neighbor. Z-Series Syntax neighbor {ip-address | peer-group-name} remote-as number To delete a remote AS entry, use the no neighbor {ip-address | peergroup-name} remote-as number command. Parameters ip-address Enter the IP address of the neighbor to enter the remote AS in its routing table. peer-groupname Enter the name of the peer group to enter the remote AS into routing tables of all routers within the peer group.
PAGE 406
bgp four-octet-as-support — enables 4-byte support for the BGP process. neighbor remove-private-as Remove private AS numbers from the AS-PATH of outgoing updates. Z-Series Syntax neighbor {ip-address | peer-group-name} remove-private-as To return to the default, use the no neighbor {ip-address | peer-groupname} remove-private-as command. Parameters ip-address Enter the IP address of the neighbor to remove the private AS numbers.
PAGE 407
Private AS numbers are from 64512 to 65535 (2 byte). neighbor route-map Apply an established route map to either incoming or outbound routes of a BGP neighbor or peer group. Z-Series Syntax neighbor {ip-address | peer-group-name} route-map map-name {in | out} To remove the route map, use the no neighbor {ip-address | peergroup-name} route-map map-name {in | out} command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format.
PAGE 408
Version 7.7.1.0 Usage Information Introduced on the C-Series. When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted. If you identify a peer group by name, the peers in that peer group inherit the characteristics in the Route map used in this command. If you identify a peer by IP address, the Route map overwrites either the inbound or outbound policies on that peer.
PAGE 409
Version 7.7.1.0 Usage Information Introduced on the C-Series. A route reflector reflects routes to the neighbors assigned to the cluster. Neighbors in the cluster do not need not to be fully meshed. By default, when you use no route reflector, the internal BGP (IBGP) speakers in the network must be fully meshed. The first time you enter this command, the router configures as a route reflector and the specified BGP neighbors configure as clients in the route-reflector cluster.
PAGE 410
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.11.1 Introduced on the Z9000. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series.
PAGE 411
Usage Information Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Peers that are enabled within a peer group are disabled when their peer group is disabled. The neighbor shutdown command terminates all BGP sessions on the BGP neighbor or BGP peer group. Use this command with caution as it terminates the specified BGP sessions.
PAGE 412
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced. This command enables soft-reconfiguration for the BGP neighbor specified. BGP stores all the updates the neighbor receives but does not reset the peer-session.
PAGE 413
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 8.3.11.1 Introduced on the Z9000. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. neighbor timers Set keepalive and hold time timers for a BGP neighbor or a peer group.
PAGE 414
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Timer values configured with the neighbor timers command override the timer values configured with any other command.
PAGE 415
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Loopback interfaces are up constantly and the BGP session may need one interface constantly up to stabilize the session. The neighbor update-source command is not necessary for directly connected internal BGP sessions.
PAGE 416
Usage Information Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. In the Dell Networking OS best path selection process, the path with the highest weight value is preferred. NOTE: In the Dell Networking OS best-path selection process, the path with the highest weight value is preferred.
PAGE 417
• set origin • set weight If the route map is not configured, the default is deny (to drop all routes). Defaults Not configured. Command Modes ROUTER BGP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 418
network backdoor Specify this IGP route as the preferred route. Z-Series Syntax network ip-address mask backdoor To remove a network, use the no network ip-address mask backdoor command. Parameters ip-address Enter an IP address in dotted decimal format of the network. mask Enter the mask of the IP address in the slash prefix length format (for example, /24). The mask appears in command outputs in dotted decimal format (A.B.C.D). Defaults Not configured.
PAGE 419
redistribute Redistribute routes into BGP. Z-Series Syntax redistribute {connected | static} [route-map map-name] To disable redistribution, use the no redistribution {connected | static} command. Parameters connected Enter the keyword connected to redistribute routes from physically connected interfaces. static Enter the keyword static to redistribute manually configured routes. These routes are treated as incomplete routes.
PAGE 420
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Introduced the ability to substitute IGP cost for MED when a peer/peer-group outbound route-map is set as internal. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. You can use the redistribute command to advertise the IGP cost as the MED on redistributed routes.
PAGE 421
Parameters process-id Enter the number of the OSPF process. The range is from 1 to 65535. match external {1 | 2} (OPTIONAL) Enter the keywords match external to redistribute OSPF external routes. You can specify 1 or 2 to redistribute those routes only. match internal (OPTIONAL) Enter the keywords match internal to redistribute OSPF internal routes only. route-map map-name (OPTIONAL) Enter the keywords route-map then the name of a configured route map. Defaults Not configured.
PAGE 422
router bgp To configure and enable BGP, enter ROUTER BGP mode. Z-Series Syntax router bgp as-number To disable BGP, use the no router bgp as-number command. Parameters as-number Enter the AS number. The range is from 1 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format). Defaults Not enabled. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 423
show capture bgp-pdu neighbor Display BGP packet capture information for an IPv4 address on the system. Z-Series Syntax Parameters show capture bgp-pdu neighbor ipv4-address ipv4-address Enter the IPv4 address (in dotted decimal format) of the BGP address to display packet information for that address. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 424
14141401 0c020a01 04000100 01020080 00000000 PDU[2] : len 19, captured 00:34:51 ago ffffffff ffffffff ffffffff ffffffff 00130400 PDU[3] : len 19, captured 00:34:50 ago ffffffff ffffffff ffffffff ffffffff 00130400 [. . .] Dell# show config View the current ROUTER BGP configuration. Z-Series Syntax show config Command Modes ROUTER BGP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 425
Parameters ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. network (OPTIONAL) Enter the network address (in dotted decimal format) of the BGP network to view information only on that network. network-mask (OPTIONAL) Enter the network mask (in slash prefix format) of the BGP network address. longer-prefixes (OPTIONAL) Enter the keywords longer-prefixes to view all routes with a common prefix.
PAGE 426
Example Field Description LocPrf Displays the BGP LOCAL_PREF attribute for the route. Weight Displays the route’s weight. Path Lists all the ASs the route passed through to reach the destination network. Dell#show ip bgp BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.
PAGE 427
Usage Information Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. The following describes the show ip bgp cluster-list command shown in the following example. Field Description Network Displays the destination network prefix of each BGP route. Next Hop Displays the next hop address of the BGP router. If 0.0.0.
PAGE 428
Weight Path *>I 55.0.0.0/24 172.16.0.2 0 0 400 500 600 i *>I 66.0.0.0/24 172.16.0.2 0 0 500 i *>I 77.0.0.0/24 172.16.0.2 0 0 i Dell# show ip bgp community View information on all routes with Community attributes or view specific BGP community groups. Z-Series Syntax Parameters show ip bgp [ipv4 unicast] community [community-number] [localas] [no-export] [no-advertise] ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes.
PAGE 429
Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 430
aa:nn | Community number in aa:nn format Pipe through a command Dell#show ip bgp community BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.5 Status codes: s suppressed, S stale, d dampened, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r - redistributed n - network, D - denied, S - stale Origin codes: i - IGP, e - EGP, ? - incomplete Network Weight Path *> 55.0.0.0/24 172.16.0.2 *> 66.0.0.0/24 172.16.0.
PAGE 431
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.
PAGE 432
172.16.0.2 0 200 i Dell#show ip bgp 55.0.0.0/24 BGP routing table entry for 55.0.0.0/24 Paths: (1 available, table Default-IP-Routing-Table.) Not advertised to any peer Received from : 172.16.0.2 (172.16.0.2) AS_PATH : 200 Best Next-Hop : 172.16.0.2, Cost : 0 Origin IGP, Metric 4294967295 (Default), LocalPref Weight 0, external Communities : 200:1 1000:1 100, 3000:1 show ip bgp dampened-paths View BGP routes that are dampened (non-active).
PAGE 433
route-up event corresponding to the same route is not considered as a flap and is not penalized. The history paths that the show ip bgp command displays contain only the prefix and the next-hop information. The next-hop information shows the ip address of the neighbor. It does not show the actual next-hop details. The following describes the show ip bgp damp command shown in the following example. Example Field Description Network Displays the network ID to which the route is dampened.
PAGE 434
Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Version 7.5.1.0 Introduced.
PAGE 435
PeerUpdTmrP 0x41ee70cc : DfrdNHTmrP 0x41ee7174 : DfrdRtselTmrP 0x41ee713c : FastExtFallover 1 : FastIntFallover 0 : Enforce1stAS 1 PeerIdBitsP 0x41967120 : softOutSz 16 : RibUpdCtxCBP 0 UpdPeerCtxCBP 0 : UpdPeerCtxAFI 0 : TcpioCtxCB 0 : RedistBlk 1 NextCBPurg 1101119536 : NumPeerToPurge 0 : PeerIBGPCnt 0 : NonDet 0 : DfrdPathSel 0 BGPRst 0 : NumGrCfg 1 : DfrdTmestmp 0 : SnmpTrps 0 : IgnrBestPthASP 0 RstOn 1 : RstMod 1 : RstRole 2 : AFFalgs 7 : RstInt 120 : MaxeorExtInt 361 FixedPartCrt 1 : VarParCrt 1 Packe
PAGE 436
Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 437
show ip bgp filter-list View the routes that match the filter lists. Z-Series Syntax Parameters show ip bgp [ipv4 unicast] filter-list as-path-name ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. as-path-name Enter an AS-PATH access list name. The range is 140 characters. Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific.
PAGE 438
Example Field Description Next Hop Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then local routes exist in the routing table. Metric Displays the BGP route’s metric, if assigned. LocPrf Displays the BGP LOCAL_PREF attribute for the route. Weight Displays the route’s weight. Path Lists all the ASs the route passed through to reach the destination network.
PAGE 439
filter-list aspath-name (OPTIONAL) Enter the keyword filter-list then the name of a configured AS-PATH ACL. The range is 140 characters. regexp regularexpression Enter a regular expression then use one or a combination of the following characters to match. The range is 256 characters. • . = (period) any single character (including a white space). • * = (asterisk) the sequences in a pattern (zero or more sequences). • + = (plus) the sequences in a pattern (one or more sequences).
PAGE 440
Example Field Description Network Displays the network ID to which the route is flapping. From Displays the IP address of the neighbor advertising the flapping route. Flaps Displays the number of times the route flapped. Duration Displays the hours:minutes:seconds since the route first flapped. Reuse Displays the hours:minutes:seconds until the flapped route is available. Path Lists all the ASs the flapping route passed through to reach the destination network.
PAGE 441
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.
PAGE 442
* * * 6.0.0.0/20 * *> * * 9.2.0.0/16 * --More-- 63.114.8.33 63.114.8.33 63.114.8.60 63.114.8.34 63.114.8.33 63.114.8.33 63.114.8.60 63.114.8.34 0 0 0 0 0 0 0 0 0 18508 18508 18508 18508 18508 18508 18508 18508 701 209 209 209 ? 209 209 209 1 i 1 i 3549 i 3549 i 3549 i 701 i 701 i Dell>sho ip bgp vrf testinconsistent-as BGP table version is 11, local router ID is 66.66.77.
PAGE 443
detail (OPTIONAL) Enter the keyword detail to view neighborspecific internal information for the IPv4 Unicast address family. flap-statistics (OPTIONAL) Enter the keywords flap-statistics to view flap statistics on the neighbor’s routes. routes (OPTIONAL) Enter the keyword routes to view only the neighbor’s feasible routes.
PAGE 444
Usage Information After a peer reset, the contents of the notification log messages is displayed in hex values for debugging. The neighbor information that this command displays does not include counts corresponding to ignored prefixes and updates. However, the martian case is an exception where neighbor information corresponding to ignored updates is displayed. BGP shows the exact information that is exchanged between the BGP peers.
PAGE 445
Example The Lines Beginning with: Description Minimum time Displays the minimum time, in seconds, between advertisements. (list of inbound and outbound policies) Displays the policy commands configured and the names of the Route map, AS-PATH ACL, or Prefix list configured for the policy. For address family: Displays the IPv4 Unicast as the address family. BGP table version Displays which version of the primary BGP routing table the router and the neighbor are using.
PAGE 446
Capabilities advertised to neighbor for IPv4 Unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) ADD_PATH(69) CISCO_ROUTE_REFRESH(128) For address family: IPv4 Unicast BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 InQ : Added 0, Replaced 0, Withdrawn 0 OutQ : Added 0, Withdrawn 0 Allow local AS number 0 times in AS-PATH attribute Prefixes accepted 2, withdrawn 15 by peer, martian prefixes ignored 0 Prefixes advertised 0, denied 0, withdrawn 0 from peer Connections established 1; dropped 0 Last res
PAGE 447
Usage Information Example Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. The following describes the show ip bgp next-hop command shown in the following example. Field Description Next-hop Displays the next-hop IP address. Via Displays the IP address and interface used to reach the next hop. RefCount Displays the number of BGP routes using this next hop. Cost Displays the cost associated with using this next hop.
PAGE 448
• { } = (braces) minimum and the maximum match count. • ^ = (caret) the beginning of the input string. If you use the caret at the beginning of a sequence or range, it matches on everything BUT the characters specified. $ = (dollar sign) the end of the output string. • Command Modes Command History • • EXEC EXEC Privilege This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 449
Dell#show ip bgp paths Total 2 Paths Refcount Metric Path 1 0 200 i 1 0 200 i show ip bgp paths community View all unique COMMUNITY numbers in the BGP database. Z-Series Syntax show ip bgp paths community Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 450
1 1 NO-ADVERTISE 200:1 1000:1 3000:1 show ip bgp peer-group Allows you to view information on the BGP peers in a peer group. Z-Series Syntax Parameters show ip bgp [ipv4 unicast] peer-group [peer-group-name [detail | summary]] ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. peer-groupname (OPTIONAL) Enter the name of a peer group to view information about that peer group only.
PAGE 451
Example Line beginning with: Description Peer-group Displays the peer group’s name. Administratively shut Displays the peer group’s status if the peer group is not enabled. If you enable the peer group, this line is not displayed. BGP version Displays the BGP version supported. Minimum time Displays the time interval between BGP advertisements. For address family Displays IPv4 Unicast as the address family. BGP neighbor Displays the name of the BGP neighbor.
PAGE 452
• * = (asterisk) the sequences in a pattern (zero or more sequences). • + = (plus) the sequences in a pattern (one or more sequences). • ? = (question mark) sequences in a pattern (either zero or one sequences). NOTE: Enter an escape sequence (CTRL+v) prior to entering the ? regular expression. • [ ] = (brackets) a range of single-character patterns. • ( ) = (parenthesis) groups a series of pattern elements to a single element. • { } = (braces) minimum and the maximum match count.
PAGE 453
Example Field Description LocPrf Displays the BGP LOCAL_PREF attribute for the route. Weight Displays the route’s weight Path Lists all the AS paths the route passed through to reach the destination network. Dell#show ip bgp regexp ^200 BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.
PAGE 454
Usage Information Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. In BGP, route attributes are maintained at different locations. When attributes that correspond to multiple routes change, then attribute counts that the show ip bgp summary command displays are calculated as summations of attributes corresponding to all the associated routes.
PAGE 455
Field Description Dampening enabled Displayed only when you enable dampening. Displays the number of paths designated as history, dampened, or penalized. Neighbor Displays the BGP neighbor address. AS Displays the AS number of the neighbor. MsgRcvd Displays the number of BGP messages that neighbor received. MsgSent Displays the number of BGP messages that neighbor sent. TblVer Displays the version of the BGP table that was sent to that neighbor.
PAGE 456
Field Description If the neighbor is disabled, the phrase (Admin shut) appears in this column. Example (S4810) Dell#show ip bgp summary BGP router identifier 192.168.11.
PAGE 457
Example Dell#show running-config bgp ! router bgp 100 network 1.1.11.1/32 network 1.1.12.1/32 network 1.1.13.1/32 neighbor 10.1.1.2 remote-as 200 neighbor 10.1.1.2 no shutdown Dell# timers bgp Adjust the BGP Keep Alive and Hold Time timers. Z-Series Syntax timers bgp keepalive holdtime To return to the default, use the no timers bgp command. Parameters keepalive Enter a number for the time interval, in seconds, between keepalive messages sent to the neighbor routers. The range is from 1 to 65535.
PAGE 458
MBGP Commands Multiprotocol BGP (MBGP) is an enhanced BGP that enables multicast routing policy throughout the internet and connecting multicast topologies between BGP and autonomous systems (ASs). Dell Networking OS MBGP is implemented as per IETF RFC 1858. BGPv4 is supported in the following: Dell Networking OS Version Platform Support 7.8.1.0, MBGP for S-Series IPv4 Multicast Only debug ip bgp dampening View information on routes being dampened.
PAGE 459
distance bgp Configure three administrative distances for routes. Syntax distance bgp external-distance internal-distance local-distance To return to default values, use the no distance bgp command. Parameters Defaults externaldistance Enter a number to assign to routes learned from a neighbor external to the AS. The range is from 1 to 255. The default is 20. internaldistance Enter a number to assign to routes learned from a router within the AS. The range is from 1 to 255. The default is 200.
PAGE 460
Related Commands router bgp — enters ROUTER mode on the switch. show ip bgp dampened-paths View BGP routes that are dampened (non-active). Z-Series Syntax Parameters Command Modes Command History show ip bgp [ipv4 unicast] dampened-paths ipv4 unicast • EXEC • EXEC Privilege (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. This guide is platform-specific.
PAGE 461
Example Field Description From Displays the IP address of the neighbor advertising the dampened route. Reuse Displays the hour:minutes:seconds until the dampened route is available. Path Lists all the ASs the dampened route passed through to reach the destination network. Dell#show ip bgp dampened-paths BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 192.168.11.
PAGE 462
soo Enter the keyword soo to designate a Site-of-Origin community (also known as Route Origin). as4 ASN4:NN Enter the keyword as4 then the 4-octet AS specific extended community number in the format ASN4:NN (4byte AS number:2-byte community value). ASN:NNNN Enter the 2-octet AS specific extended community number in the format ASN:NNNN (2-byte AS number:4-byte community value).
PAGE 463
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Version 7.6.1.0 Introduced on the E-Series. Usage Information Duplicate commands are silently accepted.
PAGE 464
ip extcommunity-list To enter the Extended Community-list mode, use this feature. Z-Series Syntax ip extcommunity-list word To exit from this mode, use the exit command. Parameters word Enter a community list name (maximum 16 characters). Defaults none Command Modes CONFIGURATION (conf-ext-community-list) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 465
Command Modes ROUTE MAP (config-route-map) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Version 7.6.1.0 Introduced on the E-Series.
PAGE 466
Command Modes CONFIGURATION (conf-ext-community-list) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Version 7.6.1.0 Introduced on the E-Series. deny — configures to delete (deny) rules.
PAGE 467
Related Commands deny regex — denies a community using a regular expression. set extcommunity rt To set Route Origin community attributes in Route Map, use this feature. Z-Series Syntax set extcommunity rt {as4 ASN4:NN [non-trans] | ASN:NNNN [nontrans] | IPADDR:NN [non-trans]} [additive] To delete the Route Origin community, use the no set extcommunity command.
PAGE 468
Usage Information Related Commands If the set community rt and soo are in the same route-map entry, the behavior defines as: • If the rt option comes before soo, with or without the additive option, soo overrides the communities rt sets. • If the rt option comes after soo, without the additive option, rt overrides the communities soo sets. • If the rt with the additive option comes after soo, rt adds the communities soo sets.
PAGE 469
Usage Information Related Commands Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Version 7.6.1.0 Introduced on the E-Series. If the set community rt and soo are in the same route-map entry, the behavior defines as: • If the rt option comes before soo, with or without the additive option, soo overrides the communities rt sets.
PAGE 470
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Version 7.6.1.0 Introduced on the E-Series. If there is a type or sub-type that is not well-known, it is displayed as:TTSS:XX:YYYY. Where TT is type, SS is sub-type displayed in hexadecimal format, XX:YYYY is the value divided into 2–byte and 4-byte values in decimal format. This format is consistent with other vendors.
PAGE 471
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series.
PAGE 472
Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. Version 7.6.1.
PAGE 473
Example Dell#show running-config extcommunity-list test ip extcommunity-list test permit rt 65033:200 deny soo 101.11.11.2:23 permit rt as4 110212:340 deny regex ^(65001_)$ Dell# IPv6 BGP Commands IPv6 border gateway protocol (IPv6 BGP) is supported on the Z-Series platform. BGP is an external gateway protocol that transmits interdomain routing information within and between Autonomous Systems (AS).
PAGE 474
Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 8.3.19.0 Introduced on the S4820T. Version 8.4.1.0 Added support for IPv4 multicast and IPv6 unicast routes. Version 7.8.1.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the C-Series. Version 7.2.1.
PAGE 475
Usage Information Version 7.8.1.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the C-Series. Version 7.2.1.0 Introduced on the E-Series TeraScale. This command turns on BGP soft-reconfiguration inbound debugging for IPv6 unicast routes. If no neighbor is specified, debug is turned on for all neighbors. ipv6 prefix-list Configure an IPv6 prefix list. Z-Series Syntax Parameters ipv6 prefix-list prefix-list name prefix-list name Enter the name of the prefix list.
PAGE 476
Parameters ipv4-address | ipv6-address Enter the IP address of the neighbor for which you want to start storing inbound routing updates. peer-groupname Enter the name of the peer group for which you want to start storing inbound routing updates. Defaults Disabled. Command Modes ROUTER BGPv6 ADDRESS FAMILY (conf-router_bgpv6_af) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 477
Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant FTOS Command Line Reference Guide. The following is a list of the FTOS version history for this command. Related Commands Version 9.0.0.0 Introduced on the Z9000. Version 8.3.10.0 Introduced on the S4810. ipv6 prefix-list — configures an IPv6 prefix-list.
PAGE 478
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.10.0 Introduced on the S4810.
PAGE 479
Content Addressable Memory (CAM) 10 Content addressable memory (CAM) commands are supported on the Dell Networking Z9000 platform. NOTE: Not all CAM commands are supported on all platforms. Be sure to note the platform when looking for a command. WARNING: If you are using these features for the first time, contact Dell Networking Technical Assistance Center (TAC) for guidance. CAM Profile Commands The CAM profiling feature allows you to partition the CAM to best suit your application.
PAGE 480
validation for DHCP, Ethernet Connectivity Fault Management (CFM) ACLs, OpenFlow, and Policy-based Routing (PBR).
PAGE 481
Vman-qos| vman-dual-qos number Enter the keyword evman-qos and then the number of FP blocks for VMAN QoS. The range is from 0 to 6. vman-dual-qos number Enter the keyword vman-dual-qos and then the number of FP blocks for VMAN dual QoS. The range is from 0 to 4. Ipv4pbr number Enter the keyword ipv4pbr and then the number of FP blocks for ipv4pbr ACL. The range is from 0 to 8. Openflow number Enter the keyword openflow and then the number of FP blocks for open flow (multiples of 4).
PAGE 482
Usage Information Version 9.4. (0.0) Added support for PBR and VRF. Version 9.2(0.2) Added support for fcoe. Version 9.1. (0.0) Added support for OpenFlow. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.10.2 Clarified block information for the S4810. Version 8.3.10.0 Introduced on the S4810. Version 8.3.1.0 Added the keywords ecfmacl, vman-qos, and vman-dualqos. Version 8.2.1.0 Introduced on the S-Series. Version 7.8.1.
PAGE 483
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810.
PAGE 484
NOTE: An ACL itself may still require more that a single FP entry, regardless of the number of interfaces. For more information, refer to the “IP Access Control Lists”, “Prefix Lists”, and “Route-map” sections in the Dell Networking OS Configuration Guide. show cam-acl Display the details of the CAM profiles on the chassis and all line cards. Z9000 Syntax show cam-acl Defaults none Command Modes EXEC Privilege Command History This guide is platform-specific.
PAGE 485
L2Acl Ipv4Acl Ipv6Acl Ipv4Qos L2Qos L2PT IpMacAcl VmanQos VmanDualQos EcfmAcl FcoeAcl iscsiOptAcl ipv4pbr vrfv4Acl Openflow fedgovacl : : : : : : : : : : : : : : : : 1 block = 128 entries 6 4 0 2 1 0 0 0 0 0 0 0 0 0 0 0 -- Stack unit 7 -Current Settings(in block sizes) 1 block = 128 entries L2Acl : 6 Ipv4Acl : 4 Ipv6Acl : 0 Ipv4Qos : 2 L2Qos : 1 L2PT : 0 IpMacAcl : 0 VmanQos : 0 VmanDualQos : 0 EcfmAcl : 0 FcoeAcl : 0 iscsiOptAcl : 0 ipv4pbr : 0 vrfv4Acl : 0 Openflow : 0 fedgovacl : 0 Dell# Example (NonD
PAGE 486
IpMacAcl : VmanQos : VmanDualQos: Ipv4pbr : 0 0 0 0 Dell# test cam-usage Verify that enough CAM space is available for the IPv6 ACLs you have created. Z9000 Syntax Parameters test cam-usage service-policy input input policy name linecard {number | all} policy-map name Enter the name of the policy-map to verify. Maximum is 32 characters. number Enter all to get information for all the linecards/stack-units or enter the linecard/ stack-unit number to get information for a specific card.
PAGE 487
The following describes the test cam-usage command shown in the following example. Term Explanation Stack-Unit Lists the stack unit or units that are checked. Entering all shows the status for all stacks. Portpipe Lists the portpipe (port-set) or port pipes (port-sets) that are checked. Entering all shows the status for linecards and port-pipes in the chassis. CAM Partition Shows the CAM profile of the CAM. Available CAM Identifies the amount of CAM space remaining for that profile.
PAGE 488
Example (SSeries) Term Explanation Estimated CAM per Port Estimates the amount of CAM space the listed policy will require. Status Indicates whether or not the policy will be allowed in the CAM.
PAGE 489
Control Plane Policing (CoPP) 11 The CoPP commands are supported on the Dell Networking Z9000 platform. control-plane-cpuqos To manage control-plane traffic, enter control-plane mode and configure the switch. Z9000 Syntax control-plane-cpuqos Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 490
Defaults None Command Modes CONFIGURATION Command History Usage Information Version 9.4(0.0) Introduced on the S–Series and Z9000. Use this command to add the IPv4 catch-all route (0.0.0.0/0) in the LPM route forwarding table if it was deleted using the no ip unknown-unicast command previously. This will be the default configuration after reload. ipv6 unknown-unicast Disable soft forwarding of unknown IPv6 destination packets.
PAGE 491
Command Modes CONTROL-PLANE-CPUQOS Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.8.0 Introduced on the S4810.
PAGE 492
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.8.0 Introduced on the S4810. This command applies the service-policy based on the type of protocol defined in the ACL rules. Create ACL and QoS policies prior to enabling this command. For CoPP, use the keyword cpu-qos when creating qos-policy-input. Related Commands ip access-list extended — creates an extended IP ACL.
PAGE 493
Version 8.3.8.0 Usage Information Introduced on the S4810. This command applies the service-policy based on the type of protocol defined in the ACL rules. Create ACL and QoS policies prior to enabling this command. Example Dell#show cpu-queue rate cp for 8 queue platform Service-Queue Rate (PPS) -------------- ----------Q0 1300 Q1 300 Q2 300 Q3 300 Q4 2000 Q5 400 Q6 400 Q7 1100 Dell# show ip protocol-queue-mapping Display the queue mapping for each configured protocol.
PAGE 494
100 UDP (DHCP) UDP (DHCP-R) TCP (FTP) ICMP IGMP TCP (MSDP) UDP (NTP) OSPF PIM UDP (RIP) TCP (SSH) TCP (TELNET) VRRP Dell# 67/68 67 any any any any/639 any any any any any any any 68/67 67 21 any any 639/any 123 any any 520 22 23 any _ _ _ _ _ _ _ _ _ _ _ _ _ Q6/Q5 Q6 Q6 Q6 Q7 Q6 Q6 Q7 Q7 Q7 Q6 Q6 Q7 CP CP CP CP CP CP CP CP CP CP CP CP CP _ _ _ _ _ _ _ _ _ _ _ _ _ show ipv6 protocol-queue-mapping Display the queue mapping for each configured IPv6 protocol.
PAGE 495
show mac protocol-queue-mapping Display the queue mapping for the MAC protocols. Z9000 Syntax show mac protocol-queue-mapping Defaults Not configured. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 496
12 Debugging and Diagnostics The basic debugging and diagnostic commands are supported by the Dell Networking Operating System (OS) on the Z-Series platform. This chapter contains the following sections: • Offline Diagnostic Commands • Buffer Tuning Commands • Hardware Commands Offline Diagnostic Commands The offline diagnostics test suite is useful for isolating faults and debugging hardware. While tests are running, Dell Networking OS results are saved as a text file (TestReport-SU-X.
PAGE 497
and perform essential path verifications. In addition, they verify the identification registers of the components on the board. level1 Enter the keyword Level1 to run Level 1 diagnostics. Level 1 diagnostics is a smaller set of diagnostic tests with support for automatic partitioning. They perform status/self test for all the components on the board and test their registers for appropriate values.
PAGE 498
Version 7.7.1.0 Introduced on the S-Series. offline stack-unit Place a stack unit in the offline state. Z9000 Syntax Parameters offline stack-unit number number Enter the stack-unit id. Z9000 - 0 to 7. Defaults none Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 499
online stack-unit Place a stack unit in the online state. Z9000 Syntax Parameters online stack-unit number number Enter the stack-unit number. The Z9000 range is from 0 to 7. Defaults none Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.
PAGE 500
buffer-profile (Configuration) Create a buffer profile that can be applied to an interface. Z9000 Syntax Parameters buffer-profile {fp | csf] profile-name {global {1Q | | 4q} fp Enter the keyword fp to create a buffer profile for the Field Processor. csf Enter the keyword csf to create a buffer profile for the Switch Fabric Processor. profile-name Create a name for the buffer profile, global Apply one of two pre-defined buffer profiles to all of the port-pipes in the system.
PAGE 501
If the default buffer-profile is active, Dell Networking OS displays an error message instructing you to remove the default configuration using the no bufferprofile global command. Reload the system for the global buffer-profile to take effect. Hardware Commands These commands display information from a hardware sub-component or ASIC. clear hardware stack-unit Clear statistics from selected hardware components.
PAGE 502
The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.0 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. show hardware stack-unit — displays the data plane or management plane input and output statistics of the designated component of the designated stack member.
PAGE 503
Version 7.8.1.0 Related Commands Introduced on the S-Series. show hardware stack-unit — displays the data plane or management plane input and output statistics of the designated component of the designated stack member. hardware watchdog To trigger a reboot and restart the system, set the watchdog timer. Z9000 Syntax hardware watchdog stack-unit {<0-5> | all} Defaults Enabled. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 504
port-set 0–0 Enter the keywords port-set with a port-pipe number. The range is from 0 or 3 for the Z9000.. Defaults none Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 505
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.0 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. show hardware stack-unit Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
PAGE 506
cpu management statistics Enter the keywords cpu management statistics to display the counters of the management port. cpu satainterface statistics Enter the keywords cpu sata-interface statistics to display the sata interface error counter statistics. drops [unit unit-number [port portnumber | no]] Enter the keyword drops to display internal drops on the selected stack member. Enter the drops keyword to display internal drops on the selected stack member.
PAGE 507
Version 8.3.11.4 Added user port information. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series.
PAGE 508
Example (Drops Unit, Port) Dell#show hardware stack-unit 0 drops unit 1 port 27 --- Ingress Drops --Ingress Drops : 0 IBP CBP Full Drops : 0 PortSTPnotFwd Drops : 0 IPv4 L3 Discards : 0 Policy Discards : 0 Packets dropped by FP : 0 (L2+L3) Drops : 0 Port bitmap zero Drops : 0 Rx VLAN Drops : 0 --- Ingress MAC counters--Ingress FCSDrops : 0 Ingress MTUExceeds : 0 --- MMU Drops --HOL DROPS : 0 TxPurge CellErr : 0 Aged Drops : 0 --- Egress MAC counters--Egress FCS Drops : 0 --- Egress FORWARD PROCESSOR Drops
PAGE 509
hg3 down 10G FD 0 Dell# Example (Register) SW No Forward None F XGMII 16360 Dell#show hardware stack-unit 0 unit 1 register 0x0068003c AGINGCTRMEMDEBUG.mmu0 = 0x00000000 0x0068003d AGINGEXPMEMDEBUG.mmu0 = 0x00000000 0x00680017 ASFCONFIG.mmu0 = 0x0000000e 0x0060004c ASFPORTSPEED.ge0 = 0x00000000 0x0060104c ASFPORTSPEED.ge1 = 0x00000000 0x0060204c ASFPORTSPEED.ge2 = 0x00000000 0x0060304c ASFPORTSPEED.ge3 = 0x00000000 0x0060404c ASFPORTSPEED.ge4 = 0x00000000 0x0060504c ASFPORTSPEED.
PAGE 510
0x0e719102 BCAST_BLOCK_MASK.hg1 = 0x00000000 0x0e71a102 BCAST_BLOCK_MASK.hg2 = 0x00000000 0x0e71b102 BCAST_BLOCK_MASK.hg3 = 0x00000000 0x0e71c102 BCAST_BLOCK_MASK.cpu0 = 0x00000000 0x0b700001 BCAST_STORM_CONTROL.ge0 = 0x00000000 0x0b701001 BCAST_STORM_CONTROL.ge1 = 0x00000000 0x0b702001 BCAST_STORM_CONTROL.ge2 = 0x00000000 0x0b703001 BCAST_STORM_CONTROL.ge3 = 0x00000000 0x0b704001 BCAST_STORM_CONTROL.ge4 = 0x00000000 0x0b705001 BCAST_STORM_CONTROL.ge5 = 0x00000000 0x0b706001 BCAST_STORM_CONTROL.
PAGE 511
The linkStatus of Front End Port 20 is FALSE The linkStatus of Front End Port 21 is FALSE The linkStatus of Front End Port 22 is FALSE The linkStatus of Front End Port 23 is TRUE The linkStatus of Hg Port 24 is TRUE The linkStatus of Hg Port 25 is TRUE The linkStatus of Hg Port 26 is FALSE The linkStatus of Hg Port 27 is FALSE !------------------ output truncated ---------------! Example (Total-Buffer) Dell(conf)#show hardware stack-unit 0 buffer total-buffer Example (Buffer-Info) Dell(conf)#sh hardware
PAGE 512
stack-unit id Enter the keywords stack-unit to select a stack member ID. The unit ID range for Z9000 is 0. port-set number [counters] Enter the keywords port-set with a port-pipe number. The range is 0 to 1 for the Z9000. (OPTIONAL) Enter the keyword counters to display hit counters for the selected ACL or QoS option. Defaults none Command Modes EXEC Privilege Command History This guide is platform-specific.
PAGE 513
1 25 Dell# Example L2BCASTPackets 0 param1=0(0x00)}, action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)}, action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)}, action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)}, meter=NULL, counter={idx=1, mode=0x01, entries=1} ############## FP Entry for redirecting LACP traffic to CPU Port ############ EID 2045: gid=1, slice=15, slice_idx=0x02, prio=0x7fd, flags=0x82, Installed tcam: color_indep=0, higig=0, higig_mask=0, KEY=0x00000000 00000000 00000000 0
PAGE 514
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)}, !--------- output truncated -----------------! 514 Debugging and Diagnostics
PAGE 515
Dynamic Host Configuration Protocol (DHCP) 13 Dynamic host configuration protocol (DHCP) is an application layer protocol that dynamically assigns IP addresses and other configuration parameters to network end-stations (hosts) based on the configuration policies the network administrators determine. The Dell Networking operating system supports the basic DHCP commands on the Z9000 platform.
PAGE 516
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the C-Series and S-Series.
PAGE 517
default-router Assign a default gateway to clients based on the address pool. Z9000 Syntax Parameters default-router address [address2...address8] address Enter a list of routers that may be the default gateway for clients on the subnet. You may specify up to eight routers. List them in order of preference. Defaults none Command Modes DHCP Command History This guide is platform-specific.
PAGE 518
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the C-Series and S-Series. dns-server Assign a DNS server to clients based on address pool. Z9000 Syntax Parameters dns-server address [address2...address8] address Enter a list of DNS servers that may service clients on the subnet. You may list up to eight servers, in order of preference.
PAGE 519
Defaults none Command Modes DHCP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.
PAGE 520
Version 8.2.1.0 Introduced on the C-Series and S-Series. hardware-address For manual configurations, specify the client hardware address. Z9000 Syntax Parameters hardware-address address address Enter the hardware address of the client. Defaults none Command Modes DHCP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 521
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the C-Series and S-Series. ip helper-address Configures the destination broadcast address or the host address for DHCP server requests.
PAGE 522
lease Specify a lease time for the addresses in a pool. Z9000 Syntax Parameters lease {days [hours] [minutes] | infinite} days Enter the number of days of the lease. The range is from 0 to 31. hours Enter the number of hours of the lease. The range is from 0 to 23. minutes Enter the number of minutes of the lease. The range is from 0 to 59. infinite Specify that the lease never expires. Defaults 24 hours Command Modes DHCP Command History This guide is platform-specific.
PAGE 523
Command Modes DHCP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the C-Series and S-Series.
PAGE 524
Version 8.2.1.0 Introduced on the C-Series and S-Series. network Specify the range of addresses in an address pool. Z9000 Syntax Parameters network network /prefix-length network/ prefix-length Specify a range of addresses. Prefix-length range is from 17 to 31. Defaults none Command Modes DHCP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 525
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the C-Series and S-Series. show ip dhcp binding Display the DHCP binding table. Z9000 Syntax show ip dhcp binding Defaults none Command Modes EXEC Privilege Command History This guide is platform-specific.
PAGE 526
Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.
PAGE 527
show ip dhcp server Display the DHCP server statistics. Z9000 Syntax show ip dhcp server statistics Defaults none Command Modes EXEC Privilege Command History Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the C-Series and S-Series. clear host Removes one or all dynamically learned host table entries for a specific VRF.
PAGE 528
Version 9.4. (0.0) Introduced on the S-Series and Z-Series. Usage Information Use this command to delete one or all dynamically learned host table entries corresponding to a specific VRF. Example Dell#clear host vrf jay dell Dell#clear host vrf jay * ip domain-list Adds a domain name to the DNS list. This domain name is appended to incomplete host names in DNS requests corresponding to a specific VRF.
PAGE 529
ip domain-name Configures the default domain corresponding to a specific VRF. This domain is appended to the in complete DNS requests corresponding to the specified VRF. Z9000 Syntax ip domain-name [vrf vrf-name] name To undo the domain name configuration corresponding to a specific VRF, use the no ip domain-name [vrf vrf-name] name command. Parameters vrf vrf-name (Optional) Enter the key word vrf and then the name of the VRF to configure the domain corresponding to that VRF.
PAGE 530
Parameters vrf vrf-name (Optional) Enter the key word vrf and then the name of the VRF to configure the name server to IP address mapping for that VRF. name Enter the name od the host to be associated with an IP address. ip-address Enter the IP address of the name server in dotted decimal format. Defaults None Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 531
ip-address [ipaddress2] [ipaddress3] [ipaddress4] [ipaddress5] [ipaddress6] Enter the IP address of the name server in dotted decimal format. NOTE: Use the additional ip-address parameters (ipaddress2 to ip-address6) in a sequential order to specify up to a maximum of six IP addresses per VRF. Defaults None Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 532
Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Introduced on the E-Series. Version 8.2.1.0 Introduced on the C-Series and S-Series. arp inspection-trust — specifies a port as trusted so that ARP frames are not validated against the binding table.
PAGE 533
clear ip dhcp snooping Clear the DHCP binding table. Z9000 Syntax clear ip dhcp snooping binding Defaults none Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 534
The following is a list of the Dell Networking OS version history for this command. Version 9.2(0.2) Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Introduced on the E-Series. Version 7.8.1.0 Introduced on the C-Series and S-Series. ip dhcp snooping Enable DHCP snooping globally. Z9000 Syntax [no] ip dhcp snooping Defaults Disabled Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 535
ip dhcp snooping binding Create a static entry in the DHCP binding table. Z-Series Syntax Parameters [no] ip dhcp snooping binding mac address vlan-id vlan-id ip ip-address interface type slot/port lease number mac address Enter the keyword mac then the MAC address of the host to which the server is leasing the IP address. vlan-id vlan-id Enter the keywords vlan-id then the VLAN to which the host belongs. The range is from 2 to 4094.
PAGE 536
Related Commands Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Introduced on the E-Series. Version 7.8.1.0 Introduced on the C-Series and S-Series. show ip dhcp snooping — displays the contents of the DHCP binding table. ip dhcp snooping database Delay writing the binding table for a specified time. Z9000 Syntax Parameters ip dhcp snooping database write-delay minutes minutes The range is from 5 to 21600.
PAGE 537
Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.
PAGE 538
ip dhcp source-address-validation Enable the IP Source Guard. Z9000 Syntax Parameters [no] ip dhcp source-address-validation [ipmac] ipmac Enable IP+MAC Source Address Validation. Defaults Disabled Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.
PAGE 539
Defaults Disabled Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.1.0 Introduced on the E-Series. Version 7.8.1.0 Introduced on the C-Series and S-Series.
PAGE 540
Example Version 9.4. (0.0) Added support for VRF. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Introduced on the E-Series. Version 7.8.1.0 Introduced on C-Series and S-Series. Dell(conf)#ip dhcp relay information-option vpn ip dhcp relay information-agent remote-id Manually re-set the remote-id for Option 82.
PAGE 541
ip dhcp snooping verify mac-address Validate a DHCP packet’s source hardware address against the client hardware address field (CHADDR) in the payload. Z9000 Syntax [no] ip dhcp snooping verify mac-address Defaults Disabled Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 542
The following is a list of the Dell Networking OS version history for this command. 542 Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Introduced on the E-Series. Version 7.8.1.0 Introduced on the C-Series and S-Series.
PAGE 543
Equal Cost Multi-Path (ECMP) 14 Equal cost multi-path (ECMP) is supported on the Dell Networking Z9000 platform. ecmp-group Provides a mechanism to monitor traffic distribution on an ECMP link bundle. A system log is generated when the standard deviation of traffic distribution on a member link exceeds a defined threshold. Z9000 Syntax ecmp-group {ecmp-group-id interface interface | link-bundlemonitor} To remove the selected interface, use the ecmp-group no interface command.
PAGE 544
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.10.0 Introduced on the S4810. Using CONFIGURATION mode, create an ECMP group ID. You can then assign interfaces to the ECMP group using CONFIGURATION ECMP-GROUP mode. You can also enable on the port-channel configuration using the CONFIGURATION ECMP-GROUP command mode.
PAGE 545
ecmp crc16 | crc16cc | crc32MSB | crc32LSB | crcupper | dest-ip | lsb | xor1 | xor2 | xor4 | xor8 | xor16 hg {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16} stack-unit stack-unitnumber | portset port-pipe TeraScale and ExaScale Only: Enter the keyword ecmp then one of the following options: • crc16: Use CRC16_BISYNC — 16 bit CRC16-bisync polynomial (default) • crc16cc: Use CRC16_CCITT — 16 bit CRC16 using CRC16-CCITT polynomial • crc32MSB: Use CRC32_UPPER — MSB 16 bits of
PAGE 546
Enter the keywords port-set port-pipe then the port pipe number. The range is from 0 to 5. hg-seed seedvalue stackunit Z-Series only: Enter the keywords hg-seed then the hash algorithm seed value. The range is from 0 to 2147483646. Enter the keywords stack-unit then the stack unit number. The range is from 0 to 7. Enter the keywords port-set then the stack-unit port-pipe number. The range is from 0 to 5. lag hash algorithm Z-Series only: Enter the keywords hg-seed . The range is from 0 to 47.
PAGE 547
Version 7.7.1.1 Usage Information Added the nh-ecmp option. To ensure that CRC is not used for LAG, set the default hash-algorithm method on ExaScale systems. For example,hash-algorithm ecmp xor lag checksum nh-ecmp checksum. The hash value calculated with the hash-algorithm command is unique to the entire chassis. The hash algorithm command with the stack—unit option changes the hash for a particular stack—unit by applying the mask specified in the IPSA and IPDA fields.
PAGE 548
hash-algorithm ecmp Change the hash algorithm used to distribute traffic flows across an ECMP (equal-cost multipath routing) group. Z9000 Term heading Description heading Syntax hash-algorithm ecmp {crc-upper} | {dest-ip} | {lsb} To return to the default hash algorithm, use the no hash-algorithm ecmp command. Parameters Defaults crc-upper Uses the upper 32 bits of the key for the hash computation. The default is crc-lower. dest-ip Uses the destination IP for ECMP hashing. The default is enabled.
PAGE 549
Term heading Description heading various test scenarios, but if the default algorithm does not provide satisfactory distribution of traffic, use this command to designate another algorithm. When a member leaves or is added to the ECMP group, the hash algorithm is recalculated to balance traffic across the members. hash-algorithm hg To distribute traffic flows across different internal HiGig links, change the hash algorithm.
PAGE 550
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 8.3.11.4 Introduced on the Z9000. hash-algorithm hg-seed Select the seed value used in HiGig hashing.
PAGE 551
Parameters seed value Enter the keyword seed then the seed value. The range is from 0 to 4095. linecard slot Enter the keyword linecard then the linecard slot number. port-set number Enter the keyword port-set then the linecard port-pipe number. Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 552
ip ecmp-group Enable and specify the maximum number of ecmp that the L3 CAM hold for a route, By default, when maximum paths are not configured, the CAM can hold a maximum of 16 ecmp per route. Z9000 Syntax ip ecmp-group {maximum-paths | {number} {path-fallback} To negate a command, use the no ip ecmp-group maximum-paths {number} command. Parameters maximumpaths Specify the maximum number of ECMP for a route. The range is 2 to 64. path-fallback Use the keywords path-fallback to enable this feature.
PAGE 553
Parameters percent Indicate the threshold value when traffic distribution starts being monitored on an ECMP link bundle. The range is from 1 to 90%. The default is 60%. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.
PAGE 554
Version 8.3.10.0 Introduced on the S4810. show config Display the ECMP configuration. Z9000 Syntax show config Command Modes CONFIGURATION-ECMP-GROUP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.
PAGE 555
Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810.
PAGE 556
15 FIPS Cryptography To configure federal information processing standards (FIPS) cryptography, use the following commands on the Z-Series platform. fips mode enable Enable the FIPS cryptography mode on the platform. Z-Series Syntax [no] fips mode enable To disable the FIPS cryptography mode, use the no fips mode enable command.
PAGE 557
show fips status Displays the status of the FIPS mode. Z-Series Syntax show fips status Defaults None Command Modes EXEC Example Dell #show fips status FIPS Mode: Enabled Dell# Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.1(0.0) Introduced on the Z9000. Version 8.3.19.
PAGE 558
Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on S4810. Dell #show ip ssh SSH server SSH server version Password Authentication Hostbased Authentication RSA Authentication Vty Encryption 1 3des-cbc 2 3des-cbc : enabled. : v1 and v2. : enabled. : disabled. : disabled. HMAC Remote IP hmac-md5 10.1.20.48 hmac-md5 10.1.20.48 With FIPS Mode enabled: Dell #show ip ssh SSH server : enabled. SSH server version : v2. Password Authentication : enabled.
PAGE 559
-c encryption cipher Enter the following encryption cipher to use. (For v2 clients only.) Without the FIPS mode enabled: • 3des-cbc: Force ssh to use 3des-cbc encryption cipher. With the FIPS mode enabled: • aes128–cbc: Force ssh to use the aes128–cbc encryption cipher. • aes256–cbc: Force ssh to use the aes256–cbc encryption cipher. -l username (OPTIONAL) Enter the keyword —l then the user name used in this SSH session. The default is the user name of the user associated with the terminal.
PAGE 560
Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Usage Information Version 9.1(0.0) Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. ip ssh server Configure an SSH server.
PAGE 561
aes256-cbc Force ssh to use aes256-cbc encryption cipher Dell#ssh 10.11.8.
PAGE 562
16 Force10 Resilient Ring Protocol (FRRP) Force10 resilient ring protocol (FRRP) is supported on Dell Networking Z9000 platform. FRRP is a proprietary protocol for that offers fast convergence in a Layer 2 network without having to run the spanning tree protocol (STP). The resilient ring protocol is an efficient protocol that transmits a highspeed token across a ring to verify the link status.
PAGE 563
Usage Information Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the C-Series. Version 7.5.1.0 Introduced. Executing this command without the optional ring-id command clears the statistics counters on all the available rings. Dell Networking OS requires a command line confirmation before the command executes.
PAGE 564
detail Enter the keyword detail to display detailed debug information related to the entire ring protocol packets. ring-id (Optional) Enter the ring identification number. The range is from 1 to 255. count number Enter the keyword count then the number of debug outputs. The range is from 1 to 65534. Defaults Disabled. Command Modes CONFIGURATION (conf-frrp) Command History This guide is platform-specific.
PAGE 565
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced.
PAGE 566
interface Configure the primary, secondary, and control-vlan interfaces. Z9000 Syntax interface {primary interface secondary interface control-vlan vlan-id} To return to the default, use the no interface {primary interface secondary interface control-vlan vlan-id} command.
PAGE 567
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced. Usage Information This command causes the Ring Manager to take ownership of the two ports after IFM validates the configuration.
PAGE 568
Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced. mode Set the Master or Transit mode of the ring. Z9000 Syntax mode {master | transit} To reset the mode, use the no mode {master | transit} command. Parameters master Enter the keyword master to set the Ring node to Master mode. transit Enter the keywordtransit to set the Ring node to Transit mode.
PAGE 569
protocol frrp Enter the Resilient Ring Protocol and designate a ring identification. Z9000 Syntax protocol frrp {ring-id} To exit the ring protocol, use the no protocol frrp {ring-id} command. Parameters ring-id Enter the ring identification number. The range is from 1 to 255. Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 570
summary (OPTIONAL) Enter the keyword summary to view just a summarized version of the Ring configuration. Defaults none Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 571
Primary : GigabitEthernet 0/16 State: Forwarding Secondary: Port-channel 100 State: Blocking Control Vlan: 1 Ring protocol Timers: Hello-Interval 50 msec Dead-Interval 150 msec Ring Master's MAC Address is 00:01:e8:13:a3:19 Topology Change Statistics: Tx:110 Rx:45 Hello Statistics: Tx:13028 Rx:12348 Number of state Changes: 34 Member Vlans: 1000-1009 Dell# Example (2 Summary) Dell#show frrp 2 summary Related Commands protocol frrp — enters the resilient ring protocol and designate a ring identification.
PAGE 572
Command Modes CONFIGURATION (conf-frrp) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information 572 Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.
PAGE 573
GARP VLAN Registration (GVRP) 17 The Dell Networking operating system supports the basic GVRP commands on the Z9000 platform. The generic attribute registration protocol (GARP) mechanism allows the configuration of a GARP participant to propagate through a network quickly. A GARP participant registers or de-registers its attributes with other participants by making or withdrawing declarations of attributes.
PAGE 574
• VLANs created dynamically with GVRP exist only as long as a GVRP-enabled device is sending updates. If the devices no longer send updates, or GVRP is disabled, or the system is rebooted, all dynamic VLANs are removed. • GVRP manages the active topology, not non-topological data such as VLAN protocols. If a local bridge must classify and analyze packets by VLAN protocols, manually configure protocol-based VLANs, and simply rely on GVRP for VLAN updates.
PAGE 575
Related Commands show gvrp statistics — displays the GVRP statistics. debug gvrp Enable debugging on GVRP. Z9000 Syntax debug gvrp {config | events | pdu} To disable debugging, use the no debug gvrp {config | events | pdu} command. Parameters config Enter the keyword config to enable debugging on the GVRP configuration. event Enter the keyword event to enable debugging on the JOIN/ LEAVE events.
PAGE 576
disable Globally disable GVRP. Z9000 Syntax disable To re-enable GVRP, use the no disable command. Defaults Enabled. Command Modes CONFIGURATION-GVRP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 577
NOTE: Designate the milliseconds in multiples of 100. leave Enter the keyword leave then the number of milliseconds to configure the leave time. The range is from 100 to 2147483647 milliseconds. The default is 600 milliseconds. NOTE: Designate the milliseconds in multiples of 100. leave-all Enter the keywords leave-all then the number of milliseconds to configure the leave-all time. The range is from 100 to 2147483647 milliseconds. The default is 1000 milliseconds.
PAGE 578
gvrp enable Enable GVRP on physical interfaces and LAGs. Z9000 Syntax gvrp enable To disable GVRP on the interface, use the no gvrp enable command. Defaults Disabled. Command Modes CONFIGURATION-INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.
PAGE 579
Defaults normal Command Modes CONFIGURATION-INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810.
PAGE 580
The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on C-Series, E-Series, and S-Series disable — globally disables GVRP. show config Display the global GVRP configuration.
PAGE 581
show garp timers Display the GARP timer settings for sending GARP messages. Z9000 Syntax show garp timers Defaults none Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 582
interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
PAGE 583
show gvrp statistics Display the GVRP configuration statistics. Z9000 Syntax Parameters show gvrp statistics {interface interface | summary} interface interface summary (OPTIONAL) Enter the keyword interface then one of the interface keywords and slot/ port or number information: • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 584
• Example An entry for a new GVRP VLAN could not be created in the GVRP database.
PAGE 585
18 GRUB GRUB commands are supported on the Z9000 platform only. To access this mode, press the ESC key when the following line appears on the console during a system boot: Press ESC key to stop autoreboot... Select Force10 Boot on the screen and press C. You enter the GRUB mode immediately, as indicated by the grub> prompt. NOTE: This chapter describes only a few commands available in GRUB. NOTE: You cannot use the Tab key to complete commands in this mode. clear Clears the grub screen.
PAGE 586
Command Modes Command History Example grub Version 8.3.11.1 Introduced on the Z9000. grub>list_env serverip=10.11.200.241 ipaddr=10.11.196.141 netmask=255.255.0.0 gatewayip=10.11.196.
PAGE 587
save_env Saves the environment variables set using the set command. Z9000 Syntax Parameters Command Modes Command History save_env environment variable environment variable Enter the environment variable to be saved. grub Version 8.3.11.1 Introduced on the Z9000. Usage Information The environment variables are listed under the list_env command. You must save the environment variables before rebooting. The save_env command must be used for each variable set using the set command.
PAGE 588
secondary_boo t Set the secondary boot parameter. The location must be flash0, flash1 or any valid tftp location. The secondary boot parameter must be in the following syntax: set secondary_boot=’f10boot flash0 | flash1 | tftp://ip-addr/file’ default_boot Set the default boot parameter. The location must be flash0, flash1 or any valid tftp location.
PAGE 589
19 ICMP Message Types This chapter lists and describes the possible ICMP message type resulting from a ping. The first three columns list the possible symbol or type/code. For example, you would receive a ! or 03 as an echo reply from your ping. ICMP Messages and Their Definitions.\ Symbol Type Code . Query Error Timeout (no reply) ! 0 U 3 C Description 4 5 ICMP Message Types 3 echo reply . destination unreachable: 0 network unreachable . 1 host unreachable .
PAGE 590
Symbol & Type Code Description 0 redirect for network . 1 redirect for host . 2 redirect for type-of-service and network . 3 redirect for type-of-service and host . 8 0 echo request . 9 0 router advertisement . 10 0 router solicitation . 11 Error time exceeded: 0 time-to-live equals 0 during transit . 1 time-to-live equals 0 during reassembly . 12 590 Query parameter problem: 1 IP header bad (catchall error) . 2 required option missing .
PAGE 591
Internet Group Management Protocol (IGMP) 20 The IGMP commands are supported by the Dell Networking operating software on the Z9000 platform. This chapter contains the following sections: • IGMP Commands • IGMP Snooping Commands IGMP Commands Dell Networking OS supports IGMPv1/v2/v3 and is compliant with RFC-3376.
PAGE 592
• For a VLAN interface, enter the keyword vlan then the slot/port information. The range is from 1 to 4094. • For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Command Modes EXEC Command History This guide is platform-specific.
PAGE 593
interface interface Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information. • For a Port Channel interface, enter the keyword portchannel then a number. The range is from 1 to 128. • For a 10–Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 594
Parameters access-list Enter the name of the extended ACL (16 characters maximum). Defaults Not configured Command Modes INTERFACE (conf-if-interface-slot/port) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 595
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the C-Series and S-Series. Version 7.6.1.0 Introduced on the E-Series. ip igmp immediate-leave Enable IGMP immediate leave. Z9000 Syntax ip igmp immediate-leave [group-list prefix-list-name] To disable ip igmp immediate leave, use the no ip igmp immediateleave command.
PAGE 596
Usage Information Querier normally sends some group-specific queries when a leave message is received for a group prior to deleting a group from the membership database. There may be situations when you require immediate deletion of a group from the membership database. This command provides a way to achieve the immediate deletion. In addition, this command provides a way to enable immediate-leave processing for specified groups.
PAGE 597
ip igmp querier-timeout Change the interval that must pass before a multicast router decides that there is no longer another multicast router that should be the querier. Syntax ip igmp querier-timeout seconds To return to the default value, use the no ip igmp querier-timeout command. Parameters seconds Enter the number of seconds the router must wait to become the new querier. The range is from 60 to 300. The default is 125 seconds.
PAGE 598
ip igmp query-interval Change the transmission frequency of IGMP general queries the Querier sends. Z9000 Syntax ip igmp query-interval seconds To return to the default values, use the no ip igmp query-interval command. Parameters seconds Enter the number of seconds between queries sent out. The range is from 1 to 18000. The default is 60 seconds. Defaults 60 seconds Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 599
ip igmp query-max-resp-time Set the maximum query response time advertised in general queries. Z9000 Syntax ip igmp query-max-resp-time seconds To return to the default values, use the no ip igmp query-max-resp-time command. Parameters seconds Enter the number of seconds for the maximum response time. The range is from 1 to 25. The default is 10 seconds. Defaults 10 seconds Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 600
ip igmp ssm-map To translate (*,G) memberships to (S,G) memberships, use a statically configured list. Z9000 Syntax ip igmp ssm-map std-access-list source-address Undo this configuration, that is, remove SSM map (S,G) states and replace them with (*,G) state, use the ip igmp ssm-map std-access-list sourceaddress command. Parameters std-access-list Specify the standard IP access list that contains the mapping rules for multicast groups.
PAGE 601
ip igmp static-group Configure an IGMP static group. Z9000 Syntax ip igmp static-group {group address [exclude [source address]] | [include {source address}]} To delete a static address, use the no ip igmp static-group {group address [exclude [source address]] | [include {source address}]} command. Parameters group address Enter the group address in dotted decimal format (A.B.C.D). exclude source address (OPTIONAL) Enter the keyword exclude then the source address, in dotted decimal format (A.B.C.
PAGE 602
implicitly assumes all sources are included. If you do not specify either include or exclude, Dell Networking OS implicitly assumes a IGMPv2 static join. Command Limitations Related Commands • Only one mode (include or exclude) is permitted per multicast group per interface. To configure another mode, all sources belonging to the original mode must be unconfigured.
PAGE 603
Version 7.5.1.0 Introduced on the E-Series. show ip igmp groups View the IGMP groups. Z9000 Syntax Parameters show ip igmp groups [group-address [detail] | detail | interface [group-address [detail]]] group-address (OPTIONAL) Enter the group address in dotted decimal format to view information on that group only. interface (OPTIONAL) Enter the interface type and slot/port information: detail • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 604
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series and C-Series. Version 7.5.1.0 Expanded to support the detail option. E-Series legacy command. Usage Information This command displays the IGMP database, including configured entries for either all groups on all interfaces, all groups on specific interfaces, or specific groups on specific interfaces.
PAGE 605
Group Address Interface Mode 225.0.0.0 Vlan 100 IGMPv2 Member Ports: Po 2* 225.0.0.1 Vlan 100 IGMPv2 Member Ports: Po 2* 225.0.0.2 Vlan 100 IGMPv2 Member Ports: Po 2* 225.0.0.3 Vlan 100 IGMPv2 Member Ports: Po 2* 225.0.0.4 Vlan 100 IGMPv2 Member Ports: Po 2* Uptime Expires Last Reporter 00:00:05 00:02:04 3.0.0.51 00:00:05 00:02:04 3.0.0.51 00:00:05 00:02:04 3.0.0.51 00:00:05 00:02:04 3.0.0.51 00:00:05 00:02:04 3.0.0.51 show ip igmp interface View information on the interfaces participating in IGMP.
PAGE 606
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command. Usage Information IGMP commands accept only non-VLAN interfaces — specifying VLAN does not yield results.
PAGE 607
Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the C-Series and S-Series. Version 7.7.1.0 Introduced on the E-Series. ip igmp ssm-map — uses a statically configured list to translate (*,G) memberships to (S,G) memberships.
PAGE 608
If the IP SA in the incoming IGMP general query frame is lower than the IP address of the VLAN interface, the switch disables its IGMP snooping Querier functionality. If the IP SA of the incoming IGMP general query is higher than the VLAN IP address, the switch continues to work as an IGMP snooping Querier. ip igmp snooping enable Enable IGMP snooping on all or a single VLAN. This command is the master on/off switch to enable IGMP snooping.
PAGE 609
ip igmp snooping fast-leave Enable IGMP snooping fast-leave for this VLAN. Z9000 Syntax ip igmp snooping fast-leave To disable IGMP snooping fast leave, use the no igmp snooping fast-leave command. Defaults Not configured. Command Modes INTERFACE VLAN — (conf-if-vl-n) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 610
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.
PAGE 611
Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series.
PAGE 612
Command Modes INTERFACE VLAN — (conf-if-vl-n) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 613
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information This command enables the IGMP switch to send General Queries periodically. This behavior is useful when there is no multicast router present in the VLAN because the multicast traffic is not routed.
PAGE 614
Usage Information If the port channel is a VLT port channel, an asterisk (*) after the port channel number (Po 100*) indicates the port channel is locally down and that a remote VLT port is up. Example Dell#show ip igmp snooping mrouter Interface Router Ports Vlan 2 Gi 13/3, Po 1 Dell# Related Commands 614 • ip igmp snooping mrouter — configures a static connection to the multicast router. • show ip igmp groups — view groups.
PAGE 615
21 Interfaces The commands in this chapter are supported by Dell Networking operating software on the Z9000 platform. This chapter contains the following sections: • Basic Interface Commands • Port Channel Commands • Time Domain Reflectometer (TDR) • UDP Broadcast Basic Interface Commands The following commands are for Physical, Loopback, and Null interfaces.
PAGE 616
• For a tunnel interface, enter the keyword tunnel. The range is from 1 to 16383. vrrp [[ipv6] vrid] (OPTIONAL) Enter the keyword vrrp to clear the counters of all VRRP groups. To clear the counters of VRRP groups on all IPv6 interfaces, enter ipv6. To clear the counters of a specified group, enter a VRID number from 1 to 255. learning-limit (OPTIONAL) Enter the keywords learning-limit to clear unknown source address (SA) drop counters when MAC learning limit is configured on the interface.
PAGE 617
clear dampening Clear the dampening counters on all the interfaces or just the specified interface. Z9000 Syntax Parameters clear dampening [interface] interface (OPTIONAL) Enter any of the following keywords and slot/ port or number to clear counters from a specified interface: • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 618
Related Commands show interfaces dampening — displays interface dampening information. dampening — configures dampening on an interface. dampening Configure dampening on an interface. Z9000 Syntax Parameters dampening [[[[half-life] [reuse-threshold]] [suppressthreshold]] [max-suppress-time]] half-life Enter the number of seconds after which the penalty is decreased. The penalty decreases half after the half-life period expires. The range is from 1 to 30 seconds. The default is 5 seconds.
PAGE 619
Usage Information Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced on the E-Series. With each flap, Dell Networking OS penalizes the interface by assigning a penalty (1024) that decays exponentially depending on the configured half-life. After the accumulated penalty exceeds the suppress threshold value, the interface moves to the Error-Disabled state. This interface state is deemed as “down” by all static/ dynamic Layer 2 and Layer 3 protocols.
PAGE 620
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Modified for E-Series: Revised from 78 to 240 characters.
PAGE 621
Version 9.0.2.0 Introduced on the S6000. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Documentation modified—added Management to distinguish from duplex (10/100 Interfaces). Usage Information This command applies only to the Management interface on the route processor modules (RPMs).
PAGE 622
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.4.1.0 Introduced Usage Information This command applies to any physical interface with speed set to 10/100. Related Commands negotiation auto — enables or disables auto-negotiation on an interface.
PAGE 623
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale.
PAGE 624
Can’t configure speed <1G when Asymmetric flowcontrol is on, config ignored • Dell Networking OS only supports rx on tx on and rx off tx off for speeds less than 1 Gig (Symmetric). NOTE: If you use the disable rx flow control command, Dell Networking recommends rebooting the system. Example Dell(conf-if-Tegi-0/1)#show config ! interface GigabitEthernet 0/1 no ip address switchport no negotiation auto flowcontrol rx off tx on no shutdown ...
PAGE 625
off off on on Related Commands off off on on off off on on off off on on show running-config — displays the flow configuration parameters (non-default values only). show interfaces — displays the negotiated flow control parameters. interface Configure a physical interface on the switch.
PAGE 626
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.4.1.0 Introduced You cannot delete a physical interface.
PAGE 627
interface group Create or delete group of VLANs with a single command. You can also use this command to apply a set of configurations on a group of interfaces. Z9000 Syntax interface group [fortyGigE slot/port { - port }| gigabitethernet slot/port { - port }| tengigabitethernet slot/ port { - port } | vlan vlanid {- vlanid } ] To delete a range of VLANs, use the following command: no interface group vlan vlanid {- vlanid} Parameters interface, interface,...
PAGE 628
Usage Information The interface group command will create all the non-existent VLANs specified in the range. On successful command execution, the CLI switches to the interface group context. The configuration commands inside the group context will be the similar to that of the existing range command. Note: For release 9.4(0.0), the group command is supported only for VLANs and physical interfaces.
PAGE 629
Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.4.1.0 Introduced Example Dell(conf)#interface loopback 1655 Dell(conf-if-lo-1655)# Related Commands interface — configures a physical interface. interface null — configures a Null interface. interface port-channel — configures a port channel. interface vlan — configures a VLAN.
PAGE 630
Usage Information You cannot delete a Management port. The Management port is enabled by default (no shutdown). To assign an IP address to the Management port, use the ip address command. If your system has two RPMs installed, use the show redundancy command to display which RPM is the Primary RPM. Example Dell(conf)#interface managementethernet 0/0 Dell(conf-if-ma-0/0)# Related Commands management route — configures a static route that points to the Management interface or a forwarding router.
PAGE 631
Usage Information You cannot delete the Null interface. The only configuration command possible in a Null interface is ip unreachables. Example Dell(conf)#interface null 0 Dell(conf-if-nu-0)# Related Commands interface — configures a physical interface. interface loopback — configures a Loopback interface. interface port-channel — configures a port channel. interface vlan — configures a VLAN. ip unreachables — enables generation of internet control message protocol (ICMP) unreachable messages.
PAGE 632
Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.5.1.
PAGE 633
Example (Multiple Ports) Dell(conf)#interface range gi 2/0 - 23, gi 2/1 - 10 Dell(conf-if-range-gi-2/0-23# Example (Overlapping Ports) Dell(conf)#interface range gi 2/1 - 11, gi 2/1 - 23 Dell(conf-if-range-gi-2/1-23# Usage Information Only VLAN and port-channel interfaces created using the interface vlan and interface port-channel commands can be used in the interface range command. Use the show running-config command to display the VLAN and port-channel interfaces.
PAGE 634
show range — shows the bulk configuration ranges. interface range macro (define) — defines a macro for an interface-range. interface range macro (define) Defines a macro for an interface range and then saves the macro in the running configuration. Z9000 Syntax Parameters define interface range macro name interface , interface , ... name Enter up to 16 characters for the macro name. interface, interface,...
PAGE 635
Example (Single Range) Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.2.1.0 Added support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.
PAGE 636
The following is a list of the Dell Networking OS version history for this command. Example (Single Range) Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.2.1.
PAGE 637
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 9.1. (0.0) Introduced on the S4810; added support for OpenFlow. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. For more information about VLANs and the commands to configure them, refer to the Virtual LAN (VLAN) Commands section of the Layer 2 chapter. FTP, TFTP, and SNMP operations are not supported on a VLAN. MAC ACLs are not supported in VLANs. IP ACLs are supported.
PAGE 638
intf-type cr4 autoneg Set the interface type as CR4 with auto-negotiation enabled. Z9000 Syntax intf-type cr4 autoneg If you configure intf-type cr4 autoneg, use the no intf-type cr4 autoneg command to set the interface type as cr4 with autonegotiation disabled. Defaults Not configured Command Modes CONFIGURATION Command History Usage Information Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000.
PAGE 639
Defaults Enabled. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.
PAGE 640
Version 8.3.16.1 Usage Information Related Commands Introduced on the MXL 10/40GbE Switch IO Module. If you configure interface type as CR4 with auto-negotiation enabled, also configure CR4 with auto-negotiation. Many DAC cable link issues are resolved by setting the interface type as CR4. • Interfaces — configures a physical interface. • interface loopback — configures a loopback interface. • interface null — configures a null interface.
PAGE 641
The no negotiation auto command is only available if you first manually set the speed of a port to 10Mbits or 100Mbits. The negotiation auto command provides a mode option for configuring an individual port to forced-master/forced slave after you enable auto-negotiation. NOTE: The mode option is not available on non-10/100/1000 Base-T Ethernet line cards. If you do not use the mode option, the default setting is slave.
PAGE 642
User Information Both sides of the link must have auto-negotiation enabled or disabled for the link to come up. The following details the possible speed and auto-negotiation combinations for a line between two 10/100/1000 Base-T Ethernet interfaces.
PAGE 643
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a VLAN interface, enter the keyword vlan then the slot/port. The range is from 1 to 4094. Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific.
PAGE 644
Example (Single Interface) Key Description r Change the [delta] column from change in the number of packets/bytes in the last interval to rate per second. l Change the view to the next interface on the line card, or if in line card mode, the next line card in the chassis. a Change the view to the previous interface on the line card, or if in line card mode, the previous line card in the chassis. T Increase the screen refresh rate. t Decrease the screen refresh rate. q Return to the CLI prompt.
PAGE 645
Gi 0/8 Up 61427 1 59960 1 Gi 0/9 Up 62039 53 104239232 3 Gi 0/10 Up 17740044091 372 7373849244 79 Gi 0/11 Up 18182889225 44 7184747584 138 Gi 0/12 Up 18182682056 0 3682 1 Gi 0/13 Up 18182681434 43 6592378911 144 Gi 0/14 Up 61349 55 86281941 15 Gi 0/15 Up 59808 58 62060 27 Gi 0/16 Up 59889 1 61616 1 Gi 0/17 Up 0 0 14950126 81293 Gi 0/18 Up 0 0 0 0 Gi 0/19 Down 0 0 0 0 Gi 0/20 Up 62734 54 62766 18 Gi 0/21 Up 60198 9 200899 9 Gi 0/22 Up 17304741100 3157554 10102508511 1114221 Gi 0/23 Up 17304769659 3139507 713
PAGE 646
pre-Version 6.2.1.0 Usage Information Introduced on the E-Series. If the packet includes a Layer 2 header, the difference between the link MTU and IP MTU (ip mtu command) must be enough bytes to include the Layer 2 header. When you enter the no mtu command, Dell Networking OS reduces the IP MTU value to 1536 bytes. Link MTU and IP MTU considerations for port channels and VLANs are as follows. port channels: • All members must have the same link MTU value and the same IP MTU value.
PAGE 647
portmode hybrid To accept both tagged and untagged frames, set a physical port or port-channel. A port configured this way is identified as a hybrid port in report displays. Z9000 Syntax portmode hybrid To return a port to accept either tagged or untagged frames (non-hybrid), use the no portmode hybrid command. Defaults non-hybrid Command Modes INTERFACE (conf-if-interface-slot/port) Command History This guide is platform-specific.
PAGE 648
The following describes the interface vlan command shown in the following example. This example shows unconfiguration of the hybrid port using the no portmode hybrid command. NOTE: Remove all other configurations on the port before you can remove the hybrid configuration from the port.
PAGE 649
NOTE: Because polling occurs every 15 seconds, the number of seconds designated here rounds to the multiple of 15 seconds lower than the entered value. For example, if 44 seconds is designated, it rounds to 30; 45 to 59 seconds rounds to 45. Defaults 299 seconds Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 650
Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.0 Introduced on the E-Series.
PAGE 651
Example Dell(conf)#interface range gigabitethernet 1/1 - 2 Dell(conf-if-range-gi-1/1-2)#show config ! interface GigabitEthernet 1/1 no ip address switchport no shutdown ! interface GigabitEthernet 1/2 no ip address switchport no shutdown Dell(conf-if-range-gi-1/1-2)# show interfaces Display information on a specific physical interface or virtual interface.
PAGE 652
Usage Information Version 8.3.12.1 Updated command output to support multiple IPv6 addresses on S4810. Version 8.3.11.4 Output expanded to support eSR4 optics in Z9000. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.2 Included SFP and SFP+ optics power detail in the E-Series and C-Series output. Version 8.2.1.0 Added support for 4093 VLANs on the E-Series ExaScale.
PAGE 653
Line Description • Wavelength, F10 unknown—Dell Force10 ID is present, but not able to determine the optics type • Unknown, Non-qualified— if wavelength is reading error, and F10 ID is not present Dell Networking allows unsupported SFP and XFP transceivers to be used, but Dell Networking OS might not be able to retrieve some data about them.
PAGE 654
Line Description – discarded = the sum of runts, giants, CRC, and overrun packets discarded without any processing Output Statistics: Displays output statistics sent out of the interface including: • Number of packets, bytes, and underruns out of the interface • Packet size and the number of those packets outbound to the interface • Number of Multicast, Broadcast, and Unicast packets: – Multicasts = number of MAC multicast packets – Broadcasts = number of MAC broadcast packets – Unicasts = number of
PAGE 655
Output Statistics: 0 packets, 0 bytes, 0 underruns 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 0 Broadcasts, 0 Unicasts 0 throttles, 0 discarded, 0 collisions, 0 wreddrops Rate info (interval 299 seconds): Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Output 00.00 Mbits/sec, 0 packets/sec, 0.
PAGE 656
Time since last interface status change: 1w0d5h Dell# Example (ManagementE thernet) Dell#show interfaces managementethernet 0/0 Example (ManagementE thernet, two IPv6 addresses) Dell#show interfaces managementethernet 0/0 ManagementEthernet 0/0 is up, line protocol is up Hardware is Force10Eth, address is 00:01:e8:0b:a9:4c Current address is 00:01:e8:0b:a9:4c Pluggable media not present Interface index is 503595208 Internet address is 10.11.201.
PAGE 657
Last clearing of "show interface" counters 00:06:14 Queueing strategy: fifo Input 791 packets, 62913 bytes, 775 multicast Received 0 errors, 0 discarded Output 21 packets, 3300 bytes, 20 multicast Output 0 errors, 0 invalid protocol Time since last interface status change: 00:06:03 Example (OpenFlow instance) Dell#show interfaces vlan 6 Vlan 6 is down, line protocol is down Address is 00:01:e8:8a:e1:8c, Current address is 00:01:e8:8a:e1:8c Interface index is 1107525638 of-instance: 2 Internet address is no
PAGE 658
show interfaces configured Display any interface with a non-default configuration. Z9000 Syntax show interfaces configured Command Modes • EXEC • EXEC Privilege Command History Example 658 Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.
PAGE 659
Time since last interface status change: 00:04:59 Dell# Related Commands show interfaces — displays information on a specific physical interface or virtual interface. show interfaces dampening Display interface dampening information. Z9000 Syntax Parameters show interfaces dampening [[interface] [summary] [detail]] interface (Optional) Enter one of the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords portchannel then a number.
PAGE 660
Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced Example Dell#show interfaces dampening Interface Supp Flaps Penalty Half-Life Reuse Suppress Max-Sup State Gi 3/2 Up 0 0 20 800 4500 120 Gi 3/10 Up 0 0 5 750 2500 20 Dell# Related Commands dampening — configures dampening on an interface. show interfaces — displays information on a specific physical interface or virtual interface.
PAGE 661
Usage Information The following describes the show interfaces gigabitethernet command following example. Mode Control Indicates if auto negotiation is enabled. If so, indicates the selected speed and duplex. Mode Status Displays auto negotiation fault information. When the interface completes auto negotiation successfully, the autoNegComplete field and the linkstatus field read “True.” AutoNegotiatio n Advertise Displays the control words the local interface advertises during negotiation.
PAGE 662
• Auto • 1000MB • 100MB • 10MB Example Dell#show int gigabitethernet 1/0 phy Mode Control: SpeedSelection: 10b AutoNeg: ON Loopback: False PowerDown: False Isolate: False DuplexMode: Full Mode Status: AutoNegComplete: False RemoteFault: False LinkStatus: False JabberDetect: False AutoNegotation Advertise: 100MegFullDplx: True 100MegHalfDplx: True 10MegFullDplx: False 10MegHalfDplx: True Asym Pause: False Sym Pause: False AutoNegotiation Remote Partner's Ability: 100MegFullDplx: False 100MegHalfDplx
PAGE 663
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series.
PAGE 664
show interfaces status Z9000 Syntax Parameters show interfaces [interface | linecard slot-number] status interface linecard slotnumber (OPTIONAL) Enter one of the following keywords and slot/ port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
PAGE 665
Gi 0/0 Up 1000 Mbit Auto -Gi 0/1 Down Auto Auto 1 Gi 0/2 Down Auto Auto 1 Gi 0/3 Down Auto Auto -Gi 0/4 DellPort Up 1000 Mbit Auto 30-130 Gi 0/5 Down Auto Auto -Gi 0/6 Down Auto Auto -Gi 0/7 Up 1000 Mbit Auto 1502,1504,1506-1508,1602 Gi 0/8 Down Auto Auto -Gi 0/9 Down Auto Auto -Gi 0/10 Down Auto Auto -Gi 0/11 Down Auto Auto -Gi 0/12 Down Auto Auto -Gi 0/13 Down Auto Auto -Gi 0/14 Down Auto Auto -Gi 0/15 Down Auto Auto Dell# Related Commands show interfaces — displays information on a specific physical int
PAGE 666
The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.2.1.0 Added support for 4093 VLANs on E-Series ExaScale. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.
PAGE 667
Vlan 2 --More-Related Commands interface — configures a physical interface on the switch. show ip interface — displays Layer 3 information about the interfaces. show interfaces — displays information on a specific physical interface or virtual interface. show interfaces transceiver — displays the physical status and operational status of an installed transceiver. The output also displays the transceiver’s serial number.
PAGE 668
Usage Information 668 Version 7.6.1.0 Introduced on the C-Series and S-Series. Version 6.5.4.0 Introduced on the E-Series. The following describes the show interfaces transceiver command shown in the following example. Line Description Rx Power measurement type Output depends on the vendor, typically either “Average” or “OMA” (Receiver optical modulation amplitude). Temp High Alarm threshold Factory-defined setting, typically in Centigrade. Value differs between SFPs and SFP+.
PAGE 669
Interfaces Line Description Temp Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+. Voltage Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+. Bias Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+. TX Power Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+. Power Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
PAGE 670
Line Description RS state This is the reserved digital state of the pin AS(1) per SFF-8079 and RS(1) per SFF-8431. Tx Disable state If the admin status of the port is down then this flag is set to true. Temperature High Alarm Flag This can be either true or false, depending on the Current voltage value displayed above. Voltage High Alarm Flag This can be either true or false, depending on the Current Temperature value displayed above.
PAGE 671
Example Line Description Tx Bias Low Warning Flag This can be either true or false, depending on the present Tx bias current value displayed above. Tx Power Low Warning Flag This can be either true or false, depending on the Current Tx power value displayed above. Rx Power Low Warning Flag This can be either true or false, depending on the Current Rx power value displayed above. Dell#show interfaces gigabitethernet 1/0 transceiver SFP is present.
PAGE 672
SFP 1 RX Power Low Warning threshold = 0.016mW =================================== SFP 1 Temperature = 39.930C SFP 1 Voltage = 3.293V SFP 1 Tx Bias Current = 6.894mA SFP 1 Tx Power = 0.328mW SFP 1 Rx Power = 0.
PAGE 673
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Added support for 4093 VLANs on E-Series ExaScale. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.1.1.0 Introduced.
PAGE 674
Related Commands ecmp-group — configures a mechanism to monitor traffic distribution. shutdown Disable an interface. Z9000 Syntax shutdown To activate an interface, use the no shutdown command. Defaults The interface is disabled. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 675
Related Commands interface port-channel — creates a port channel interface. interface vlan — creates a VLAN. show ip interface — displays the interface routing status. Add the keyword brief to display a table of interfaces and their status. speed (for 10/100/1000 interfaces) Set the speed for 10/100/1000 Base-T Ethernet interfaces. Set both sides of a link to the same speed (10/100/1000) or to auto or the link may not come up.
PAGE 676
The following is a list of the Dell Networking OS version history for this command. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Supported on LC-EH-GE-50P or the LC-EJ-GE-50P cards. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series.
PAGE 677
1000 Enter the keyword 1000 to set the interface to autonegotiate its speed. auto Enter the keyword auto to set the interface to autonegotiate its speed. Defaults auto Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 678
number Enter the port number of the 40G port to be split. The range is from 0 to 124 in multiples of 4 (0, 4, 8, 12, ... 120 124). Defaults Disabled. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.
PAGE 679
tengigabit slot/port | fortyGigE slot/port | port-channel number} command. Parameters backup interface Use this option to configure a redundant Layer 2 link without using Spanning Tree. The keywords backup interface configures a backup port so that if the primary port fails, the backup port changes to the up state. If the primary later comes up, it becomes the backup. gigabit Enter the keyword gigabit if the backup port is a 1G port.
PAGE 680
Usage Information If an IP address or VRRP group is assigned to the interface, you cannot use the switchport command on the interface. To use the switchport command on an interface, only the no ip address and no shutdown statements must be listed in the show config output. When you enter the switchport command, the interface is automatically added to the default VLAN. To use the switchport backup interface command on a port, first enter the switchport command.
PAGE 681
all • For Telnet, enter the keyword telnet. • For TFTP, enter the keyword tftp. Configure all applications. Defaults None. Command Modes EIS Mode (conf-mgmt-eis) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2. (0.0) Introduced on the Z9000, S4810, and S4820T.
PAGE 682
Version 9.3. (0.0) Added support for the HTTP and ICMP traffic on the Z9000, S4810, and S4820T. clear management application pkt-cntr Clear management application packet counters for all management application types. Z9000 Syntax clear management application pkt-cntr Defaults None. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 683
management egress-interface-selection To make configured application traffic egress through the management port instead of the front-end (FE) port, enable and configure a management egress interface. Z9000 Syntax management egress-interface-selection To disable and remove management egress interface selection (EIS) configurations, use the no management egress-interface-selection command. Defaults None. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 684
show management application pkt-cntr Display the number of packets for each application type that have taken the management route. Z9000 Syntax show management application pkt-cntr Defaults None. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2. (0.
PAGE 685
Version 9.2. (0.0) Example Introduced on the Z9000, S4810, and S4820T. Dell#show management dns : ftp : ntp : radius : sflow-collector : snmp : ssh : syslog : tacacs : telnet : tftp : application pkt-fallback-cntr 0 0 0 0 0 0 2 0 0 0 0 Port Channel Commands A Link Aggregation Group (LAG) is a group of links that appear to a MAC client as if they were a single link according to IEEE 802.3ad. In Dell Networking OS, a LAG is referred to as a Port Channel.
PAGE 686
• • • For a Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information. For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Defaults Not configured. Command Modes INTERFACE PORTCHANNEL Command History This guide is platform-specific.
PAGE 687
On the E-Series TeraScale, you can add up to 16 interfaces to a Port Channel; ESeries ExaScale can add up to 64. You can have eight interfaces per Port Channel on the C-Series and S-Series. The interfaces can be located on different line cards but must be the same physical type and speed (for example, all 1-Gigabit Ethernet interfaces). However, you can combine 100/1000 interfaces and GE interfaces in the same Port Channel.
PAGE 688
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.
PAGE 689
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on S4810. Version 8.3.11.1 Introduced on Z9000. Version 8.1.1.0 Introduced on E-Series ExaScale. Version 7.6.1.0 Introduced on S-Series. Version 7.5.1.0 Introduced on C-Series. pre-Version 6.2.1.0 Introduced on E-Series. Port Channel interfaces are logical interfaces and can be either in Layer 2 mode (by using the switchport command) or Layer 3 mode (by configuring an IP address).
PAGE 690
shutdown — disables/enables the port channel. minimum-links Configure the minimum number of links in a LAG (Port Channel) that must be in “oper up” status for the LAG to be also in “oper up” status. Z9000 Syntax Parameters minimum-links number number Enter the number of links in a LAG that must be in “oper up” status. The range is from 1 to 16. The default is 1. Defaults 1 Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 691
port-channel failover-group To configure a LAG failover group, access PORT-CHANNEL FAILOVER-GROUP mode. Z9000 Syntax port-channel failover-group To remove all LAG failover groups, use the no port-channel failover-group command. Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 692
show config Display the current configuration of the selected LAG. Z9000 Syntax show config Command Modes INTERFACE PORTCHANNEL Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.
PAGE 693
Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.
PAGE 694
Example 694 Field Description Queueing strategy. States the packet queuing strategy. FIFO means first in first out. packets input... Displays the number of packets and bytes into the interface. Input 0 IP packets... Displays the number of packets with IP headers, VLAN tagged headers, and MPLS headers. The number of packets may not add correctly because a VLAN tagged IP packet counts as both a VLAN packet and an IP packet. 0 64-byte...
PAGE 695
Dell# User Information The following describes the show interfaces port-channel brief command shown in the following example. Field Description LAG Lists the port channel number. Mode Lists the mode: Status Example • L3 — for Layer 3 • L2 — for Layer 2 Displays the status of the port channel. • down — if the port channel is disabled (shutdown) • up — if the port channel is enabled (no shutdown) Uptime Displays the age of the port channel in hours:minutes:seconds.
PAGE 696
Parameters outgoing-portchannel number Enter the keywords outgoing-port-channel then the number of the port channel to display flow information. incominginterface interface Enter the keywords incoming-interface then the interface type and slot/port or number information: • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 697
Usage Information Because this command calculates based on a Layer 2 hash algorithm, use this command to display flows for switched Layer 2 packets, not for routed packets (use the show ip flow command to display routed packets). The show port-channel-flow command returns the egress port identification in a given port-channel if a valid flow is entered. A mismatched flow error occurs if MAC-based hashing is configured for a Layer 2 interface and you are trying to display a Layer 3 flow.
PAGE 698
tdr-cable-test Test the condition of copper cables on 100/1000 Base-T modules. Z9000 Syntax Parameters tdr-cable-test interface interface Enter the keyword GigabitEthernet then the slot/port information for the 100/1000 Ethernet interface. Defaults none Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 699
show tdr Display the TDR test results. Z9000 Syntax Parameters show tdr interface interface Enter the keyword GigabitEthernet then the slot/port information for the 100/1000 Ethernet interface. Defaults none Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 700
Status Definition Status: Impedance Mismatch There is an impedance mismatch in the cables. Example Dell#show tdr gigabitethernet 10/47 Time since last test: 00:00:02 Pair A, Length: OK Status: Terminated Pair B, Length: 92 (+/- 1) meters, Status: Short Pair C, Length: 93 (+/- 1) meters, Status: Open Pair D, Length: 0 (+/- 1) meters, Status: Impedance Mismatch Related Commands tdr-cable-test — runs the TDR test.
PAGE 701
Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Pre-version 8.3.7.0 Introduced on the E-Series ExaScale. Dell#debug ip udp-helper UDP helper debugging is on 01:20:22: Pkt rcvd on Gi 5/0 with IP DA (0xffffffff) will be sent on Gi 5/1 Gi 5/2 Vlan 3 01:44:54: Pkt rcvd on Gi 7/0 is handed over for DHCP processing. Related Commands ip udp-broadcast-address — configures a UDP IP address for broadcast.
PAGE 702
Version 8.3.7.0 Introduced on the S4810. Pre-version 8.3.7.0 Introduced on the E-Series ExaScale. Usage Information When a UDP broadcast packet is flooded out of an interface, and the outgoing interface is configured using this command, the outgoing packet’s IP destination address is replaced with the configured broadcast address. Related Commands debug ip udp-helper — enables debug and displays the debug information on a console.
PAGE 703
Usage Information If you configure the ip helper-address command and ip udp-helper udpport command, the behavior is that the UDP broadcast traffic with port numbers 67/68 is unicast relayed to the DHCP server per the ip helper-address configuration. This occurs regardless if the ip udp-helper udp-port command contains port numbers 67/68 or not.
PAGE 704
Related Commands debug ip udp-helper — enables debug and displays the debug information on a console. ip udp-broadcast-address — configures a UDP IP address for broadcast. ip udp-helper udp-port — enables the UDP broadcast feature on an interface either for all UDP ports or a specified list of UDP ports. Enhanced Validation of Interface Ranges This functionality is supported on the Z9000 platform.
PAGE 705
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information. • For a VLAN interface, enter the keyword vlan followed by a number from 1 to 4094. Defaults The IP address on the system that is closest to the Telnet address is used in the outgoing packets. Command Modes CONFIGURATION Command History Related Commands Interfaces Version 9.3(0.1) Introduced on the S4810, S4820T, S6000, and Z9000. Version 8.3.11.
PAGE 706
Internet Protocol Security (IPSec) 22 Internet protocol security (IPSec) is an end-to-end security scheme for securing IP communications by authenticating and encrypting all packets in a session. Use IPSec between hosts, gateways, or hosts and gateways. IPSec uses a series of protocol functions to achieve information security: • Authentication Headers (AH) — Connectionless integrity and origin authentication for IP packets.
PAGE 707
To delete a transform set, use the no crypto ipsec transform-set name {ah-authentication {md5|sha1|null} | esp-authentication {md5| sha1|null} | esp-encryption {3des|cbc|des|null}} command. Parameters name Enter the name for the transform set. ahauthentication Enter the keywords ah-authentication then the transform type of operation to apply to traffic. The transform type represents the encryption or authentication applied to traffic.
PAGE 708
Usage Information Example • Both sides of the link must specify the same transform set. • You can create up to 64 transform sets. Dell(conf)#int ten 0/4 Dell(conf-if-te-0/4)#ipv6 address 200:1::/64 eui64 Dell(conf)#int ten 0/6 Dell(conf-if-te-0/6)#ipv6 address 801:10::/64 eui64 crypto ipsec policy Create a crypto policy used by ipsec. Z9000 Syntax crypto ipsec policy name seq-num ipsec-manual To delete a crypto policy entry, use the no crypto ipsec policy name seqnum ipsec-manual command.
PAGE 709
management crypto-policy Apply the crypto policy to management traffic. Z9000 Syntax management crypto-policy name To remove the management traffic crypto policy, use the no management crypto-policy name command. Parameters name Enter the name for the crypto policy.. Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 710
source-port number Enter the source port number. destinationport number Enter the destination port number. Defaults none Command Modes CONFIG-CRYPTO-POLICY Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2(0.2) Usage Information Example • Introduced on the Z9000, S4810, and S4820T.
PAGE 711
outbound Specify the outbound session key for IPSec. ah Use the AH protocol when you select the AH transform set in the crypto policy. esp Use the ESP protocol when you select the ESP transform set in the crypto policy. spi Enter the security parameter index number. hex-key-string Enter the session key in hex format (a string of 8, 16, or 20 bytes). For DES algorithms, specify at least 16 bytes per key. For SHA algorithms, specify at least 20 bytes per key.
PAGE 712
Version 9.2(0.2) Example Introduced on the Z9000, S4810, and S4820T. Dell#show crypto ipsec transform-set Transform-Set Name Transform-Set refCnt AH Transform ESP Auth Transform ESP Encry Transform Dell# : dallas : 0 : : : 3des show crypto ipsec policy Display the crypto policy configuration. Z9000 Syntax show crypto ipsec policy Command Modes EXEC Command History This guide is platform-specific.
PAGE 713
Protocol type IP or IPv6 Source address Source mask Source port Destination address Destination mask Destination port source-interface name source-interface num : : : : : : : : : : tcp IPv6 a::1 /128 0 a::2 /128 23 Match sequence Num Protocol type IP or IPv6 Source address Source mask Source port Destination address Destination mask Destination port source-interface name source-interface num : : : : : : : : : : : 1 tcp IPv6 a::1 /128 23 a::2 /128 0 Match sequence Num Protocol type IP or IPv6 Source ad
PAGE 714
transform-set Specify the transform set the crypto policy uses. Z9000 Syntax transform-set transform-set-name To delete a transform set from the crypto policy, use the no transform-set transform-set-name command. Parameters transform-setname Enter the name for the crypto policy transform set. Defaults none Command Modes CONFIG-CRYPTO-POLICY Command History This guide is platform-specific.
PAGE 715
23 IPv4 Routing The basic IPv4 commands are supported by Dell Networking operating system on the Z9000 platform. arp To associate an IP address with a MAC address in the switch, use address resolution protocol (ARP). Z9000 Syntax arp ip-address mac-address interface To remove an ARP address, use the no arp ip-address command. Parameters ip-address Enter an IP address in dotted decimal format. mac-address Enter a MAC address in nnnn.nnnn.nnnn format.
PAGE 716
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.0 Introduced on the E-Series. Usage Information You cannot use Class D or Class E IP addresses or zero IP address (0.0.0.
PAGE 717
Version 8.3.8.0 Introduced on the S4810. Usage Information This timer is an exponential backoff timer. Over the specified period, the time between ARP requests increases. This behavior reduces the potential for the system to slow down while waiting for a multitude of ARP responses. Related Commands show arp retries — displays the configured number of ARP retries. arp learn-enable Enable ARP learning using gratuitous ARP.
PAGE 718
arp max-entries Enables you to configure the maximum number of ARP entries per VRF that are allowed for IPv4.. Syntax Parameters arp max-entries [vrf vrf-name] max-number vrf vrf-name Enter the name of a specific VRF for which you want to configure maximum number of ARP entries that IPv4 allows. max-number Enter the maximum number of ARP entries that a VRF RTM can hold. The range is from 0 to 65535. Defaults Not configured.
PAGE 719
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Introduced. Usage Information Retries are 20 seconds apart.
PAGE 720
Related Commands Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. show interfaces — displays the ARP timeout value for all available interfaces. clear arp-cache Clear the dynamic ARP entries from a specific interface or optionally delete (no-refresh) ARP entries from the content addressable memory (CAM).
PAGE 721
Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.
PAGE 722
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. clear ip fib stack-unit Clear all FIB entries in the specified stack unit (use this command with caution, refer to Usage Information.
PAGE 723
clear ip route Clear one or all routes in the routing table. Z9000 Syntax Parameters clear ip route {* | ip-address mask} * Enter an asterisk (*) to clear all learned IP routes. ip-address mask Enter a specific IP address and mask in dotted decimal format to clear that IP address from the routing table. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 724
clear tcp statistics Clear TCP counters. Z9000 Syntax Parameters clear tcp statistics [all | cp | rp1 | rp2] all Enter the keyword all to clear all TCP statistics maintained on all switch processors. cp (OPTIONAL) Enter the cp to clear only statistics from the Control Processor. rp1 (OPTIONAL) Enter the keyword rp1 to clear only the statistics from Route Processor 1. rp2 (OPTIONAL) Enter the keyword rp2 to clear only the statistics from Route Processor 2.
PAGE 725
To stop debugging ARP transactions, use the no debug arp command. Parameters interface count value (OPTIONAL) Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword Gigabitethernet then the slot/port information. • For the Management interface, enter the keyword ManagementEthernet then the slot/port information. The slot range is from 0 to 1 and the port range is 0.
PAGE 726
Usage Information To stop packets from flooding the user terminal when debugging is turned on, use the count option. debug ip dhcp Enable debug information for dynamic host configuration protocol (DHCP) relay transactions and display the information on the console. Z9000 Syntax debug ip dhcp To disable debug, use the no debug ip dhcp command. Defaults Debug disabled Command Modes EXEC Privilege Command History This guide is platform-specific.
PAGE 727
00:12:40 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0 00:12:40 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2 00:12:42 : %RELAY-I-PACKET: BOOTP REPLY (Unicast) received at interface 14.4.4.1 BOOTP Reply, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B: 8C, giaddr = 113.3.3.
PAGE 728
count value • For a Tunnel interface, enter the keywords tunnel then a number. The range is from 1 to 16383. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. (OPTIONAL) Enter the keyword count then the count value. The range is from 1 to 65534. The default is Infinity.
PAGE 729
debug ip packet View a log of IP packets sent and received. Z9000 Syntax debug ip packet [access-group name] [count value] [interface] To disable debugging, use the no debug ip packet [access-group name] [count value] [interface] command. Parameters access-group name Enter the keyword access-group then the access list name (maximum 16 characters) to limit the debug output based on the defined rules in the ACL. count value (OPTIONAL) Enter the keyword count then the count value.
PAGE 730
Usage Information Example 730 Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Added support for 4094 VLANs on the E-Series ExaScale (the prior limit was 2094). Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Added the access-group option. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.3.1.0 Added the count option.
PAGE 731
UDP src=0, dst=0 IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 0/0), len 1500, sending fragment IP Fragment, Ident = 4741, fragment offset = 0 ICMP type=0, code=0 IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 0/0), len 1500, sending fragment IP Fragment, Ident = 4741, fragment offset = 1480 IP: s=40.40.40.40 (local), d=224.0.0.5 (Gi 4/11), len 64, sending broad/multicast proto=89 IP: s=40.40.40.40 (local), d=224.0.0.6 (Gi 4/11), len 28, sending broad/multicast proto=2 IP: s=0.0.0.0, d=30.30.30.
PAGE 732
ip address Assign a primary and secondary IP address to the interface. Z9000 Syntax ip address ip-address mask [secondary] To delete an IP address from an interface, use the no ip address [ipaddress] command. Parameters ip-address Enter an IP address in dotted decimal format. mask Enter the mask of the IP address in slash prefix format (for example, /24). secondary (OPTIONAL) Enter the keyword secondary to designate the IP address as the secondary address. Defaults Not configured.
PAGE 733
ip directed-broadcast Enables the interface to receive directed broadcast packets. Z9000 Syntax ip directed-broadcast To disable the interface from receiving directed broadcast packets, use the no ip directed-broadcast command. Defaults Disabled (that is, the interface does not receive directed broadcast packets) Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 734
Defaults Disabled. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.
PAGE 735
Defaults Disabled. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.
PAGE 736
Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810.
PAGE 737
Defaults Not configured. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Added support for IPv6. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.
PAGE 738
To re-enable the hop-count increment, use the no ip helper-address hopcount disable command. Defaults Enabled; the hops field in the DHCP message header is incremented by default. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000.
PAGE 739
Parameters name Enter a text string to associate with one IP address. ip address Enter an IP address, in dotted decimal format, to be mapped to the name. Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000.
PAGE 740
NOTE: When you configure the capability to enable the loopback IP address to be sent for easy debugging and diagnosis (IP addresses of the devices for which the ICMP source interface is configured), the source IP address of the outgoing ICMP error message is modified, although the packets are not sent out using the configured interface.
PAGE 741
Example Dell(conf)#ip icmp source-interface tengigabitethernet 0/0 Dell(conf)# ipv6 icmp source-interface Enable the ICMP error and unreachable messages to be sent with the source interface IP address, such as the loopback address, instead of the hops of the preceding devices along the network path to be used for easy debugging and diagnosis of network disconnections and reachability problems with IPv6 packets. This functionality is supported on the , , , and Z9000 platforms.
PAGE 742
Usage Information You can enable the mechanism to configure the source or the originating interface from which the packet (the device that generates the ICMP error messages) is received by the switch to send the loopback address instead of its source IP address to be used in the ICMP unreachable messages and in the traceroute command output. The loopback address must be unique in a particular domain.
PAGE 743
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced for the E-Series. To avoid denial of service (DOS) attacks, keep the number of fragments allowed for re-assembly low.
PAGE 744
Related Commands show ip route — views the switch routing table. show ipv6 route — displays the IPv6 routes. ip mtu Set the IP MTU (frame size) of the packet the RPM transmits for the line card interface. If the packet must be fragmented, Dell Networking OS sets the size of the fragmented packets to the size specified in this command. Syntax ip mtu value To return to the default IP MTU value, use the no ip mtu command. Parameters value Enter the maximum MTU size if the IP packet is fragmented.
PAGE 745
Layer 2 header, the difference between the link MTU and IP MTU (the ip mtu command) must be enough bytes to include for the Layer 2 header. Link MTU and IP MTU considerations for Port Channels and VLANs are as follows Port Channels: • All members must have the same link MTU value and the same IP MTU value. • The Port Channel link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the channel members.
PAGE 746
ip name-server Enter up to six IPv4 addresses of name servers. The order you enter the addresses determines the order of their use. Z9000 Syntax ip name-server ipv4-address [ipv4-address2...ipv4-address6] To remove a name server, use the no ip name-server ip-address command. Parameters ipv4-address Enter the IPv4 address, in dotted decimal format, of the name server to be used. ipv4-address2...
PAGE 747
ip proxy-arp Enable proxy ARP on an interface. Z9000 Syntax ip proxy-arp To disable proxy ARP, use the no ip proxy-arp command. Defaults Enabled. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 748
To delete all routes matching a certain route, use the no ip route destination mask command. Parameters destination Enter the IP address in dotted decimal format of the destination device. mask Enter the mask in the slash prefix format (/x) of the destination IP address. ip-address Enter the IP address of the forwarding router in dotted decimal format. interface ipaddress Enter the keyword interface then the IP address.
PAGE 749
Usage Information Related Commands Version 8.2.1.0 Added support for 4094 VLANs on the E-Series ExaScale (the prior limit was 2094). Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.9.1.0 Introduced VRF on the E-Series. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. Using the following example of a static route: ip route 33.33.33.0 /24 tengigabitethernet 0/0 172.31.5.
PAGE 750
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. ip tcp initial-time Define the wait duration in seconds for the TCP connection to be established. This command is supported on the , , , and Z9000 platforms.
PAGE 751
show ip tcp initial-time Displays the interval that you configured for the device to wait before the TCP connection is attempted to be established. This command is supported on the , , , Z9000, and MXL platforms. Syntax show ip tcp initial-time Command Modes EXEC EXEC Privilege Command History Version 9.3(0.0) Introduced on the S4810, S4820T, S6000, Z9000, and MXL platforms. ip unreachables Enable the generation of internet control message protocol (ICMP) unreachable messages.
PAGE 752
pre-Version 6.1.1.0 Introduced on the E-Series. load-balance By default, for C-Series and S-Series, Dell Networking OS uses an IP 4-tuple (IP SA, IP DA, Source Port, and Destination Port) to distribute IP traffic over members of a Port Channel as well as equal-cost paths. To designate another method to balance traffic over Port Channel members, use the load-balance command.
PAGE 753
tcp-udp enable Enter the keywords to distribute traffic based on the following: • ingress-port enable enable — Takes the TCP/UDP source and destination ports into consideration when doing hash computations. This option is enabled by default. Enter the keywords to distribute traffic based on the following: • enable — Takes the source port into consideration when doing hash computations. This option is disabled by default.
PAGE 754
load-balance hg Choose the traffic flow parameters the hash calculation uses while distributing the traffic across internal higig links.
PAGE 755
mac [sourcemac | sourceport-id | sourcemodule-id | dest-mac | dest-port-id | dest-moduleid | vlan | ethertype | source-destmac ] tunnel [ipv4over-ipv4 | ipv4-over-greipv4 | mac-inmac]} To use MAC key fields in hash computation, enter the keyword mac then one of the parameters: • source-mac — Use source-mac field in hash calculation. • source-port-id — Use src-port-id field in hash calculation. • source-module-id — Use src-module-id field in hash calculation.
PAGE 756
management route Configure a static route that points to the Management interface or a forwarding router. Z9000 Syntax management route {{ip-address mask | {ipv6-address prefixlength}} {forwarding-router-address | managementethernet} To remove a static route, use the no management route{{ip-address mask | {ipv6-address prefix-length}}{forwarding-router-address | managementethernet} command.
PAGE 757
pre-Version 6.1.1.0 Introduced on the E-Series. Usage Information When a static route (or a protocol route) overlaps with Management static route, the static route (or a protocol route) is preferred over the Management Static route. Also, Management static routes and the Management Connected prefix are not reflected in the hardware routing tables. Separate routing tables are maintained for IPv4 and IPv6 management routes. This command manages both tables.
PAGE 758
• statistics — view DAI statistics macaddress mac-address mask (OPTIONAL) Enter the keyword macaddress then a MAC address in nn:nn:nn:nn:nn:nn format. Enter the optional MAC address mask in nn:nn:nn:nn:nn format also. static (OPTIONAL) Enter the keyword static to view entries entered manually. retries (OPTIONAL) Enter the keyword retries to show the number of ARP retries before a 20–second back off. dynamic (OPTIONAL) Enter the keyword dynamic to view dynamic entries.
PAGE 759
Usage Information The following example shows two VLANs that are associated with a private VLAN (PVLAN) (refer to Private VLAN (PVLAN)). If you have entered the clear arp-cache command to remove a large number of ARP entries and the command is still being processed in the background, an error message display if you attempt to enter the show arp command: Clear arp in-progress. Please try after sometime! The following describes the show arp command shown in the following example.
PAGE 760
CP Internet 10.16.134.254 20 00:01:e8:d5:9e:e2 CP Internet 133.33.33.4 1 00:01:e8:d5:9e:e2 CP Usage Information Ma 0/0 Ma 0/0 The following describes the show arp summary command shown in the following example. Description Total Entries Lists the total number of ARP entries in the ARP table. Static Entries Lists the total number of configured or static ARP entries. Dynamic Entries Lists the total number of learned or dynamic ARP entries. CPU Lists which CPU the entries are stored on.
PAGE 761
Related Commands Version 8.3.11.1 Introduced on the Z9000. Version 8.3.1.0 Introduced. arp retries — sets the number of ARP retries in case the system does not receive an ARP reply in response to an ARP request. show hosts View the host table and DNS configuration. Z9000 Syntax show hosts Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 762
Field Description • If DNS is not enabled, the Name/Address lookup is static mapping Name servers are... Lists the name servers, if configured. Host Displays the host name assigned to the IP address. Flags Classifies the entry as one of the following: • perm — the entry was manually configured and will not time out • temp — the entry was learned and will time out after 72 hours of inactivity.
PAGE 763
show ip cam linecard View CAM entries for a port pipe on a line card. Syntax Parameters show ip cam linecard number port-set pipe-number [ip-address mask [longer-prefixes] | index index-number | summary | vrf vrf instance] number Enter the number of the line card. pipe-number Enter the number of the line card’s port-pipe. The range is from 0 to 1. ip-address mask [longerprefix] (OPTIONAL) Enter the IP address and mask of a route to CAM entries for that route only.
PAGE 764
Usage Information Example 764 The following describes the show ip cam command shown in the following example. Field Description Index Displays the CAM index number of the entry. Destination Displays the destination route of the index. EC Displays the number of equal cost multipaths (ECMP) available for the default route for non-Jumbo line cards. For Jumbo line cards, displays 0,1 when ECMP is more than eight. CG Displays 0.
PAGE 765
Usage Information Example (Summary) The following describes the show ip cam summary command shown in the following example. Field Description Prefix Length Displays the prefix-length or mask for the IP address configured on the linecard 0 port pipe 0. Current Use Displays the number of routes currently configured for the corresponding prefix or mask on the linecard 0 port pipe 0. Initial Size Displays the CAM size Dell Networking OS allocates for the corresponding mask.
PAGE 766
show ip cam stack-unit Display CAM entries for an S-Series or Z-Series switch. Z9000 Syntax Parameters show ip cam stack-unit {id} [port-set {pipe-number} | hostname {ip-address mask [longer-prefixes [ecmp-group detail]]}| ecmpgroup {detail | member-info [detail [group-index indexnumber]]}| summary] id Enter the stack-unit ID. The unit ID range is from 0 to 7 for the Z9000. port-set pipenumber Enter the keyword port-set then the number of the stack unit’s port-pipe.
PAGE 767
The following is a list of the Dell Networking OS version history for this command. Usage Information Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Added support for up to seven stack members. Version 7.6.1.0 Introduced on the S-Series. The following describes the show ip cam command shown in the following example. Field Description Destination Displays the destination route of the index.
PAGE 768
Field Description Prefix Length Displays the prefix-length or mask for the IP address configured on the linecard 0 port pipe 0. Current Use Displays the number of routes currently configured for the corresponding prefix or mask on the linecard 0 port pipe 0. Initial Size Displays the CAM size Dell Networking OS allocates for the corresponding mask. Dell Networking OS adjusts the CAM size if the number of routes for the mask exceeds the initial allocation.
PAGE 769
ip-address mask (OPTIONAL) Enter the IP address of the network destination to view only information on that destination. Enter the IP address is dotted decimal format (A.B.C.D). Enter the mask in slash prefix format (/X). longer-prefixes (OPTIONAL) Enter the keywords longer-prefixes to view all routes with a common prefix. summary (OPTIONAL) Enter the keyword summary to view the total number of prefixes in the FIB.
PAGE 770
Example Dell>show ip fib linecard 12 Destination Gateway First-Hop Mac-Addr Port VId Index EC ------------------------------------------------------------------------------3.0.0.0/8 via 100.10.10.10, So 2/8 100.10.10.10 00:01:e8:00:03:ff So 2/8 0 60260 0 3.0.0.0/8 via 101.10.10.10, So 2/9 00.10.10.0/24 Direct, So 2/8 0.0.0.0 00:01:e8:00:03:ff So 2/8 0 11144 0 100.10.10.1/32 via 127.0.0.1 127.0.0.1 00:00:00:00:00:00 CP 0 3276 0 100.10.10.10/32 via 100.10.10.10, So 2/8 100.10.10.
PAGE 771
The following is a list of the Dell Networking OS version history for this command. Usage Information Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Added support for up to seven stack members. Version 7.6.1.0 Introduced on the S-Series. The following describes the show ip fib stack-unit command shown in the following example.
PAGE 772
show ip flow Show how a Layer 3 packet is forwarded when it arrives at a particular interface. Z9000 Syntax Parameters show ip flow interface interface {source-ip address destination-ip address} {protocol number [tcp | udp]} {src-port number destination-port number} interface interface Enter the keyword interface then one of the following interface keywords. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 773
Usage Information Version 7.9.1.0 Introduced VRF on the E-Series. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. This command provides egress port information for a given IP flow. This information is useful in identifying which interface the packet follows in the case of Port-channel and Equal Cost Multi Paths. Use this command for routed packed only.
PAGE 774
• For the Null interface, enter the keyword null then zero (0). • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a stack-unit interface, enter the keyword stackunit then the stack unit number. The range is from 0 to 7.
PAGE 775
Usage Information Example The following describes the show ip interface command shown in the following example. Lines Description TenGigabitEthern et 0/0... Displays the interface’s type, slot/port, and physical and line protocol status. Internet address... States whether an IP address is assigned to the interface. If an IP address is assigned, that address is displayed. IP MTU is... Displays IP MTU value. Inbound access... Displays the name of the configured incoming access list.
PAGE 776
Example (Brief) Fields Description Protocol States whether IP is enabled (up) or disabled (down) on the interface. Dell#show ip int brief Interface IP-Address Status Protocol GigabitEthernet 1/0 unassigned down down GigabitEthernet 1/1 unassigned down down GigabitEthernet 1/2 unassigned up up GigabitEthernet 1/3 unassigned up up GigabitEthernet 1/4 unassigned up up GigabitEthernet 1/5 10.10.10.
PAGE 777
Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. Dell#show ip management-route Destination ----------10.1.2.0/24 172.16.1.0/24 Dell# Gateway ------ManagementEthernet 0/0 10.1.2.
PAGE 778
Example Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.4.1.0 Introduced on the C- and E-Series. Version 8.3.7.0 Introduced on the S4810. Dell#show ipv6 management-route IPv6 Destination Gateway ---------------------2001:34::0/64 ManagementEthernet 0/0 2001:68::0/64 2001:34::16 Dell# State ----Connected Active show ip protocols View information on all routing protocols enabled and active on the switch.
PAGE 779
pre-Version 6.1.1.0 Example Introduced on the E-Series. Dell#show ip protocols Routing Protocol is "bgp 1" Cluster Id is set to 20.20.20.3 Router Id is set to 20.20.20.3 Fast-external-fallover enabled Regular expression evaluation optimization enabled Capable of ROUTE_REFRESH For Address Family IPv4 Unicast BGP table version is 0, main routing table version 0 Distance: external 20 internal 200 local 200 Neighbor(s): Address : 20.20.20.
PAGE 780
• If you enter isis, you can include the ISIS routingtag. • If you enter ospf, you can include the OSPF processid. process-id (OPTIONAL) Specify that only OSPF routes with a certain process ID must be displayed. routing-tag (OPTIONAL) Specify that only ISIS routes with a certain routing tag must be displayed. connected (OPTIONAL) Enter the keyword connected to view only the directly connected routes. all (OPTIONAL) Enter the keyword all to view both active and non-active routes.
PAGE 781
Example Field Description (undefined) Identifies the type of route: • C = connected • S = static • R = RIP • B = BGP • IN = internal BGP • EX = external BGP • LO = Locally Originated • O = OSPF • IA = OSPF inter area • N1 = OSPF NSSA external type 1 • N2 = OSPF NSSA external type 2 • E1 = OSPF external type 1 • E2 = OSPF external type 2 • i = IS-IS • L1 = IS-IS level-1 • L2 = IS-IS level-2 • IA = IS-IS inter-area • * = candidate default • > = non-active route • + =
PAGE 782
100.10.10.0/24 > R 100.10.10.0/24 C 101.10.10.0/24 > R 101.10.10.
PAGE 783
Example Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series.
PAGE 784
Usage Information Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. The following describes the show ip route summary shown in the following example.
PAGE 785
show ip traffic View IP, ICMP, UDP, TCP and ARP traffic statistics. Z9000 Syntax show ip traffic [all | cp | rp1 | rp2] NOTE: These options are supported only on the E-Series. Parameters all (OPTIONAL) Enter the keyword all to view statistics from all processors. If you do not enter a keyword, you also view all statistics from all processors. cp (OPTIONAL) Enter the keyword cp to view only statistics from the Control Processor.
PAGE 786
Keyword Definition unknown protocol... No receiver for these packets. Counts packets whose protocol type field is not recognized by Dell Networking OS. not a gateway... Packets can not be routed; the host/network is unreachable. security failures...
PAGE 787
Example • ARP Statistics: Rcvd: Replies: Object = f10ArpReplyRecv, OIDs = 1.3.6.1.4.1.6027.3.3.5.2.3 • ARP Statistics: Sent: Request: Object = f10ArpReqSent, OIDs = 1.3.6.1.4.1.6027.3.3.5.2.2 • ARP Statistics: Sent: Replies: Object = f10ArpReplySent, OIDs = 1.3.6.1.4.1.6027.3.3.5.2.4 • ARP Statistics: Sent: Proxy: Object = f10ArpProxySent, OIDs = 1.3.6.1.4.1.6027.3.3.5.2.
PAGE 788
cp Enter the keyword cp to view only TCP information from the Control Processor. rp1 Enter the keyword rp1 to view only TCP statistics from Route Processor 1. rp2 Enter the keyword rp2 to view only TCP statistics from Route Processor 2. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 789
Example Field Description 0 partially... Displays the number of partially duplicated packets and bytes received. 7 out-of-order... Displays the number of packets and bytes received out of order. 0 packets with data after window Displays the number of packets and bytes received that exceed the switch’s window size. 0 packets after close Displays the number of packet received after the TCP connection was closed. 0 window probe packets...
PAGE 790
329 packets (1263 bytes) in sequence 17 dup packets (6 bytes) 0 partially dup packets (0 bytes) 7 out-of-order packets (0 bytes) 0 packets ( 0 bytes) with data after window 0 packets after close 0 window probe packets, 41 window update packets 41 dup ack packets, 0 ack packets with unsend data 10184 ack packets (12439508 bytes) Sent: 12007 Total, 0 urgent packets 25 control packets (including 24 retransmitted) 11603 data packets (12439677 bytes) 24 data packets (7638 bytes) retransmitted 355 ack only packet
PAGE 791
IPv6 Access Control Lists (IPv6 ACLs) 24 IPv6 ACLs and IPv6 Route Map commands are supported on Dell Networking Z9000 platform. NOTE: For IPv4 ACL commands, refer to the Access Control Lists (ACL) chapter. Important Points to Remember • Certain platforms require manual CAM usage space allotment. For more information, refer to the cam-acl command. • Egress IPv6 ACL and IPv6 ACL on the Loopback interface is not supported. • Reference to an empty ACL permits any traffic.
PAGE 792
Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 8.4.2.1 Introduced on the S-Series. Version 8.4.2.0 Introduced on the E-Series TeraScale. Version 7.8.1.0 Introduced on the C-Series.
PAGE 793
Example Version 8.4.2.1 Introduced on the S-Series. Version 8.4.2.0 Introduced on the E-Series TeraScale. Version 7.8.1.0 Introduced on the C-Series.
PAGE 794
permit icmp To allow all or specific internet control message protocol (ICMP) messages, configure a filter. Syntax permit icmp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} [message-type] [count [byte]] | [log] [monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 795
permit To configure a filter that matches the filter criteria, select an IPv6 protocol number, ICMP, IPv6, TCP, or UDP. Syntax permit {ipv6-protocol-number | icmp | ipv6 | tcp | udp} To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command syntax if you know the filter’s sequence number • Use the no permit {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command ip-protocolnumber Enter an IPv6 protocol number. The range is from 0 to 255.
PAGE 796
ipv6 control-plane egress-filter Enable egress Layer 3 ACL lookup for IPv6 CPU traffic. Z9000 Syntax ipv6 control-plane egress-filter Defaults Not enabled. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.
PAGE 797
ospfv3 Specify that this ACL is for OSPFv3 control plane traffic Defaults All access lists contain an implicit “deny any”; that is, if no match occurs, the packet is dropped. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.4(0.
PAGE 798
l2acl 1-4 ipv4acl 1- 4 ipv6acl 0-4 • L3 ACL (ipv4acl: 1 • IPv6 L3 ACL (ipv6acl): 2 Allocate space to support IPv6 ACLs. Enter all of the profiles and a range. Enter the CAM profile name then the amount to be allotted. The total space allocated must equal 4. The ipv6acl range must be a factor of 2. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 799
cam-acl Allocate space for IPv6 ACLs. Z9000 Syntax Parameters cam-acl {default | l2acl 1-10 ipv4acl 1-10 ipv6acl 0-10 ipv4qos 1-10 l2qos 1-10} default Use the default CAM profile settings, and set the CAM as follows: • • • • • l2acl 1-10 ipv4acl 1-10 ipv6acl 0-10 ipv4qos 1-10 l2qos 1-10 L3 ACL (ipv4acl): 6 L2 ACL(l2acl): 5 IPv6 L3 ACL (ipv6acl): 0 L3 QoS (ipv4qos): 1 L2 QoS (l2qos): 1 Allocate space to support IPv6 ACLs. Enter all of the profiles and a range.
PAGE 800
Ranges for the CAM profiles are from 1 to 10, except for the ipv6acl profile which is from 0 to 10. The ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).
PAGE 801
25 IPv6 Basics IPv6 basic commands are supported on the Dell Networking Z-Series platform. NOTE: For information about the Dell Networking operating software version and platform that supports IPv6 in each software feature, refer to the IPv6 Addressing chapter of the Dell Networking OS Configuration Guide. clear ipv6 fib Clear (refresh) all forwarding information base (FIB) entries on a linecard or stack unit.
PAGE 802
clear ipv6 route Clear (refresh) all or a specific route from the IPv6 routing table. Z9000 Syntax Parameters clear ipv6 route {* | ipv6-address prefix-length} * Enter the * to clear (refresh) all routes from the IPv6 routing table. ipv6-address prefix-length Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 803
The following is a list of the Dell Networking OS version history for this command. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. ipv6 address autoconfig Configure IPv6 address auto-configuration for the management interface. Syntax ipv6 address autoconfig To disable the address autoconfig operation on the management interface, use the no ipv6 address autoconfig command.
PAGE 804
• Removing auto-configuration removes all auto-configured IPv6 addresses and the link-local IPv6 address from that management interface. • IPv6 addresses on a single management interface cannot be members of the same subnet. • IPv6 secondary addresses on management interfaces across a platform must be members of the same subnet. • IPv6 secondary addresses on management interfaces should not match the virtual IP address and should not be in the same subnet as the virtual IP.
PAGE 805
Usage Information Example Version 7.8.1.0 Introduced on the C-Series and S-Series. Version 7.4.1.0 Introduced on the E-Series TeraScale. • If two addresses are configured, delete an existing address before configuring a new address. • If the last manually-configured global IPv6 address is removed using the “no” form of the command, the link-local IPv6 address is removed automatically. • IPv6 addresses on a single management interface cannot be members of the same subnet.
PAGE 806
Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2(0.2) Introduced. Usage Information This command allows you to create an EUI64 address based on the specified prefix and MAC address only.
PAGE 807
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. ipv6 flowlabel-zero Configure system to set the flow label field in the packets to zero. Z9000 Syntax ipv6 flowlabel-zero To disable the 0 from being set in the field and allow the rotocol operations to fill the field, use the no ipv6 flowlabel-zero command. Default Disabled Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 808
Parameters name Enter a text string to associate with one IP address. ipv6-address Enter the IPv6 address (X:X:X:X::X) to be mapped to the name. Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.0.0 Introduced on the Z9000. Version 8.
PAGE 809
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 8.4.2.1 Introduced on the C-Series and S-Series. Version 8.4.1.
PAGE 810
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. ipv6 nd dns-server Configures Recursive DNS Server (RDNSS) addresses to be distributed via IPv6 router advertisements to an IPv6 device. Syntax ipv6 nd dns-server {ipv6-RDNSS-address} {lifetime | infinite} To remove the IPv6 RDSS configuration, use no ipv6 nd dns-server {ipv6RDNSS-address} {lifetime | infinite} Parameters ipv6-RDNSSaddress Enter the IPv6 Recursive DNS Server’s (RDNSS) address.
PAGE 811
Example Dell(conf-if-te-0/1)#ipv6 nd dns-server 1000::1 1 ipv6 nd prefix Specify which IPv6 prefixes are included in Neighbor Advertisements. Z9000 Syntax Parameters ipv6 nd prefix {ipv6-prefix | prefix-length | default} [noadvertise] | [no-autoconfig] [no-rtr-address] [off-link] [lifetime {valid | infinite} {preferred | infinite}] ipv6-prefix Enter an IPv6 prefix. prefix-length Enter the prefix then the prefix length. The length range is from 0 to 128.
PAGE 812
The following is a list of the Dell Networking OS version history for this command. Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.2.0 Introduced on the E-Series TeraScale, C-Series, and S-Series. By default, all prefixes configured as addresses on the interface are advertised.
PAGE 813
• • For a tunnel interface, enter the keyword tunnel then the tunnel interface number. The range is from 1 to 16383. For a VLAN interface, enter the keyword VLAN then the vlan number. The range is from 1 to 4094. If you configure a static IPv6 route using an egress interface and enter the ping command to reach the destination IPv6 address, the ping operation may not work. Configure the IPv6 route using a next-hop IPv6 address in order for the ping command to detect the destination address.
PAGE 814
Usage Information When the interface goes down, Dell Networking OS withdraws the route. The route is re-installed, by Dell Networking OS, when the interface comes back up. When a recursive resolution is “broken,” Dell Networking OS withdraws the route. The route is re-installed, by Dell Networking OS, when the recursive resolution is satisfied.
PAGE 815
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 8.4.2.1 Introduced on the S-Series. Version 8.2.1.0 Introduced on the E-Series ExaScale.
PAGE 816
summary (OPTIONAL) Enter the keyword summary to display a table listing network prefixes and the total number prefixes which can be entered into the IPv6 CAM. index (OPTIONAL) Enter the index in the IPv6 CAM. ipv6-address Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 817
Default 100 Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810.
PAGE 818
Usage Information Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 8.4.2.1 Introduced on the S-Series. Host tables are not stored in CAM tables on S-Series platforms. Entries for camIndex displays as zero (0) on the show ipv6 fib stack-unit output for neighbor entries, such as address resolution protocol (ARP) entries. show ipv6 flowlabel-zero Display the flow label zero setting.
PAGE 819
[managementethernet slot/port] [port-channel number] [stackunit id] [tengigabitethernet slot | slot/port] [fortyGigE slot | slot/port] [tunnel tunnel-id] [vlan vlan-id] Parameters Defaults IPv6 Basics interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a Loopback interface, enter the keyword Loopback then a number from 0 to 16383. • For the Null interface, enter the keyword null then zero (0).
PAGE 820
Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2. (0.0) Added support for tunnel interface. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 8.5.1.
PAGE 821
Example (Managementet hernet) Dell# Dell#show ipv6 int man 0/0 ManagementEthernet 0/0 is up, line protocol is up IPV6 is enabled Link Local address: fe80::201:e8ff:fe8a:e8f7 Global Unicast address(es): Actual address is 600::1, subnet is 600::/64 Virtual-IP IPv6 address is not set Global Anycast address(es): Joined Group address(es): IPv6 Basics | 785 ff02::1 ff02::1:ff00:1 ff02::1:ff8a:e8f7 ND MTU is 1500 ICMP redirects are not sent DAD is enabled, number of DAD attempts: 3 ND reachable time is 31000 mill
PAGE 822
ND router advertisements are sent every 200 seconds ND router advertisements live for 1800 seconds show ipv6 mld_host Display the IPv6 MLD host counters. Z9000 Syntax show ipv6 mld_host Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Example 822 Version 8.3.19.
PAGE 823
MLDv1 Queries 0 Errors: Malformed Packets: 4510 ---- show ipv6 route Displays the IPv6 routes. Z9000 Syntax Parameters show ipv6 route [ipv6-address prefix-length] [hostname] [all] [bgp as number] [connected] [isis tag] [list prefix-list name] [ospf process-id] [rip] [static] [summary] ipv6-address prefix-length (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
PAGE 824
Usage Information 824 Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on the E-Series ExaScale. Version 7.8.1.0 Introduced on the C-Series and S-Series. Version 7.4.1.0 Introduced on the E-Series TeraScale. The following describes the show ipv6 route command shown in the following examples.
PAGE 825
Example (ESeries) Dell#show ipv6 route Codes:C-connected, L-local, S-static, R-RIP, B-BGP, IN-internal BGP, EX-external BGP, LO-Locally Originated, O-OSPF, IA-OSPF inter area, N1-OSPF NSSA external type 1, N2-OSPF NSSA external type 2, E1-OSPF external type 1, E2-OSPF external type 2, i-IS-IS, L1-IS-IS level-1, L2-IS-IS level-2, IA-IS-IS inter area, *-candidate default, Gateway of last resort is not set Destination Dist/Metric, Gateway, Last Change ------------------------------------------------C 2001::/6
PAGE 826
trust ipv6-diffserv Allows the dynamic classification of IPv6 DSCP. Syntax trust ipv6-diffserv To remove the definition, use the no trust ipv6-diffserv command. Defaults none Command Modes CONFIGURATION-POLICY-MAP-IN Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 8.3.19.
PAGE 827
Intermediate System to Intermediate System (IS-IS) 26 The intermediate system to intermediate system (IS-IS) protocol for IPv4 and IPv6 is supported on the Z9000 platform. IS-IS is an interior gateway protocol that uses a shortest-path-first algorithm. IS-IS facilitates the communication between open systems, supporting routers passing both IP and OSI traffic. A router is considered an intermediate system. Networks are partitioned into manageable routing domains, called areas.
PAGE 828
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 7.5.1.0 Introduced on the E-Series. To perform protocol-support consistency checks on hello packets, use this command. The adjacency-check is enabled by default. advertise Leak routes between levels (distribute IP prefixes between Level 1 and Level 2 and vice versa).
PAGE 829
Usage Information Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 7.5.1.0 Added IPv6 ISIS support. Version 6.3.1.0 Version 6.3.1.0 Introduced You cannot disable leaking from one level to another; however, you can regulate the rate flow from one level to another using an IP Prefix list. If you do not configure the IP Prefix list, all routes are leaked. You can find more information in IETF RFC 2966, Domain-wide Prefix Distribution with Two-Level IS-IS.
PAGE 830
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. To prevent the link state database from receiving incorrect routing information from unauthorized routers, use the area-password command on routers within an area. The configured password injects into Level 1 LSPs, CSNPs, and PSNPs. Related Commands • domain-password — allows you to set the authentication password for a routing domain.
PAGE 831
clear isis Restart the IS-IS process. All IS-IS data is cleared. Z9000 Syntax Parameters clear isis [tag] {* | database | traffic} tag (Optional) Enter an alphanumeric string to specify the IS-IS routing tag area. * Enter the keyword * to clear all IS-IS information and restart the IS-IS process. This command removes IS-IS neighbor information and IS-IS LSP database information and the full SPF calculation is done. database Clears IS-IS LSP database information. traffic Clears IS-IS counters.
PAGE 832
nsap Enter a specific NSAP address that is associated with the name parameter. Defaults Not configured. Command Modes ROUTER ISIS Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.
PAGE 833
Usage Information Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Entering debug isis enables all debugging parameters. To display all debugging information in one output, use this command. To turn off debugging, you normally enter separate no forms of each command. To disable all debug messages for IS-IS at once, enter the no debug isis command.
PAGE 834
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. debug isis local-updates To debug IS-IS local update packets, enable debugging on a specific interface and provides diagnostic information. Z9000 Syntax debug isis local-updates [interface] To turn off debugging, use the no debug isis local-updates [interface] command.
PAGE 835
Version 8.3.12.0 Introduced on the S4810. Version 6.3.1.0 Introduced. debug isis snp-packets To debug IS-IS complete sequence number PDU (CSNP) and partial sequence number PDU (PSNP) packets, enable debugging on a specific interface and provides diagnostic information. Z9000 Syntax debug isis snp-packets [interface] To turn off debugging, use the no debug isis snp-packets [interface] command.
PAGE 836
Version 6.3.1.0 Introduced. debug isis spf-triggers Enable debugging on the events that triggered IS-IS shortest path first (SPF) events for debugging purposes. Z9000 Syntax debug isis spf-triggers To turn off debugging, use the no debug isis spf-triggers command. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 837
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a Gigabit Ethernet interface, enter the keyword GigabitEthernet the slot/port information. • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094.
PAGE 838
route-map map-name (OPTIONAL) A default route the routing process generates if the route map is satisfied. Defaults Not configured. Command Modes • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 839
description Enter a description of the IS-IS routing protocol. Z9000 Syntax description {description} To remove the description, use the no description {description} command. Parameters description Defaults none Command Modes ROUTER ISIS Command History Related Commands Enter a description to identify the IS-IS protocol (80 characters maximum). Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.
PAGE 840
ip-address mask (OPTIONAL) Enter an IP address in dotted decimal format and enter a mask in either dotted decimal or /prefix format. prefix-list (OPTIONAL) Enter the name of a prefix list name. Defaults weight = 115 Command Modes • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 841
• For a 1- Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information. • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a SONET interface, enter the keyword sonet then the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. Defaults Not configured.
PAGE 842
To return to the default values, use the no distribute-list prefix-listname out [bgp as number connected | ospf process-id | rip | static] command. Parameters prefix-listname Specify the prefix list to filter prefixes in routing updates. connected (OPTIONAL) Enter the keyword connected for directly connected routing process. ospf process-id (OPTIONAL) Enter the keyword ospf then the OSPF process-ID number. The range is from 1 to 65535. bgp as number (OPTIONAL) Enter the BGP then the AS Number.
PAGE 843
distribute-list redistributed-override Suppress flapping of routes when the same route is redistributed into IS-IS from multiple routers in the network. Z9000 Syntax distribute-list redistributed-override in To return to the default, use the no distribute-list redistributedoverride in command. Defaults none Command Modes • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Command History This guide is platform-specific.
PAGE 844
Parameters hmac-md5 (OPTIONAL) Enter the keywords hmac-md5 to encrypt the password using MD5. encryptiontype (OPTIONAL) Enter 7 to encrypt the password using DES. password Enter an alphanumeric string up to 16 characters long. If you do not specify an encryption type or hmac-md5 keywords, the password is processed as plain text which provides limited security. Defaults No default password. Command Modes ROUTER ISIS Command History This guide is platform-specific.
PAGE 845
Parameters ietf Enter ietf to enable graceful restart on the IS-IS router. Defaults Graceful restart disabled. Command Modes ROUTER ISIS Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 846
Defaults 5 minutes Command Modes ROUTER ISIS Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.1.
PAGE 847
Related Commands Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.1.0 Introduced on the E-Series. graceful-restart t3 — configures the overall wait time before graceful restart completes. graceful-restart t1 Set the graceful restart wait time before unacknowledged restart requests are generated.
PAGE 848
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.1.0 Introduced on the E-Series. graceful-restart t2 Configure the wait time for the graceful restart timer T2 that a restarting router uses as the wait time for each database to synchronize. Z9000 Syntax graceful-restart t2 {level-1 | level-2} seconds To return to the default, use the no graceful-restart t2 command.
PAGE 849
graceful-restart t3 Configure the overall wait time before graceful restart completes. Z9000 Syntax graceful-restart t3 {adjacency | manual} seconds To return to the default, use the no graceful-restart t3 command. Parameters adjacency Enter the keyword adjacency so that the restarting router receives the remaining time value from its peer and adjusts its T3 value so if you have configured this option. manual Enter the keyword manual to specify a time value that the restarting router uses.
PAGE 850
Related Commands graceful-restart restart-wait — enables the graceful restart maximum wait time before a restarting peer comes up. hello padding Use to turn ON or OFF padding for LAN and point-to-point hello PDUs or to selectively turn padding ON or OFF for LAN or point-to-point hello PDUs. Z9000 Syntax hello padding [multi-point | point-to-point] To return to the default, use the no hello padding [multi-point | pointto-point] command.
PAGE 851
hostname dynamic Enables dynamic learning of hostnames from routers in the domain and allows the routers to advertise the hostname in LSPs. Z9000 Syntax hostname dynamic To disable this command, use the no hostname dynamic command. Defaults Enabled. Command Modes ROUTER ISIS Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 852
Command Modes ROUTER ISIS Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000.
PAGE 853
Usage Information Related Commands Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 7.5.1.0 Introduced. To assign a network entity title to enable IS-IS, use the net command. • net — configures an IS-IS network entity title (NET) for the routing process. • router isis — enables the IS-IS routing protocol. ipv6 router isis Enable the IPv6 IS-IS routing protocol and specify an IPv6 IS-IS process.
PAGE 854
Usage Information Version 8.3.11.1 Introduced on the Z9000. Version 7.5.1.0 Introduced on the E-Series. Configure a network entity title (the net command) to specify the area address and the router system ID. To establish adjacencies and establish dynamic routing, enable routing on one or more interfaces. You can configure only one IS-IS routing process to perform Level 2 routing. A level-1-2 designation performs Level 1 and Level 2 routing at the same time.
PAGE 855
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Because the default establishes Level 1 and Level 2 adjacencies, you do not need to configure this command. Routers in an IS-IS system must be configured as a Level 1-only, Level 1-2, or Level 2-only system.
PAGE 856
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. The default values of this command are typically satisfactory transmission times for a specific interface on a designated intermediate system. To maintain database synchronization, the designated routers send CSNPs. You can configure Level 1 and Level 2 CSNP intervals independently.
PAGE 857
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Usage Information Hello packets are held for a length of three times the value of the hello interval. To conserve bandwidth and CPU usage, use a high hello interval seconds. Use a low hello interval seconds for faster convergence (but uses more bandwidth and CPU resources).
PAGE 858
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Usage Information The holdtime (the product of the hello-multiplier multiplied by the hello-interval) determines how long a neighbor waits for a hello packet before declaring the neighbor is down so routes can be recalculated. Related Commands isis hello-interval — specifies the length of time between hello packets.
PAGE 859
Related Commands hello padding — turns ON or OFF padding for LAN and point-to-point hello PDUs. isis ipv6 metric Assign metric to an interface for use with IPv6 information. Z9000 Syntax isis ipv6 metric default-metric [level-1 | level-2] To return to the default values, use the no ipv6 isis metric [defaultmetric] [level-1 | level-2] command. Parameters default-metric Metric assigned to the link and used to calculate the cost from each other router via the links in the network to other destinations.
PAGE 860
Usage Information Dell Networking recommends configuring metrics on all interfaces. Without configuring this command, the IS-IS metrics are similar to hop-count metrics. isis metric Assign a metric to an interface. Z9000 Syntax isis metric default-metric [level-1 | level-2] To return to the default values, use the no isis metric [default-metric] [level-1 | level-2] command.
PAGE 861
Usage Information Dell Networking recommends configuring metrics on all interfaces. Without configuring this command, the IS-IS metrics are similar to hop-count metrics. isis network point-to-point Enable the software to treat a broadcast interface as a point-to-point interface. Z9000 Syntax isis network point-to-point To disable the feature, use the no isis network point-to-point command. Defaults Not enabled. Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 862
Parameters encryptiontype (OPTIONAL) Enter 7 to encrypt the password using DES. hmac-md5 (OPTIONAL) Enter the keywords hmac-md5 to encrypt the password using MD5. password Assign the interface authentication password. level-1 (OPTIONAL) Independently configures the authentication password for Level 1. The router acts as a station router for Level 1 routing. This setting is the default. level-2 (OPTIONAL) Independently configures the authentication password for Level 2.
PAGE 863
isis priority Set the priority of the designated router you select. Z9000 Syntax isis priority value [level-1 | level-2] To return to the default values, use the no isis priority [value] [level-1 | level-2] command. Parameters value This value sets the router priority. The higher the value, the higher the priority. The range is from 0 to 127. The default is 64. level-1 (OPTIONAL) Specify the priority for Level 1. This setting is the default. level-2 (OPTIONAL) Specify the priority for Level 2.
PAGE 864
is-type Configure IS-IS operating level for a router. Z9000 Syntax is-type {level-1 | level-1-2 | level-2-only} To return to the default values, use the no is-type command. Parameters level-1 Allows a router to act as a Level 1 router. level-1-2 Allows a router to act as both a Level 1 and Level 2 router. This setting is the default. level-2-only Allows a router to act as a Level 2 router. Defaults level-1-2 Command Modes ROUTER ISIS Command History This guide is platform-specific.
PAGE 865
log-adjacency-changes Generate a log messages for adjacency state changes. Z9000 Syntax log-adjacency-changes To disable this function, use the no log-adjacency-changes command. Defaults Adjacency changes are not logged. Command Modes ROUTER ISIS Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 866
level-2 (OPTIONAL) Enter the keywords level-2 to apply the configuration to generation of Level-2 LSPs. interval seconds Enter the maximum number of seconds between LSP generations. The range is from 0 to 120 seconds. The default is 5 seconds. initial_wait_inte rval seconds (OPTIONAL) Enter the initial wait time, in seconds, before running the first LSP generation. The range is from 0 to 120 seconds. The default is 1 second.
PAGE 867
lsp-mtu Set the maximum transmission unit (MTU) of IS-IS link-state packets (LSPs). This command only limits the size of LSPs this router generates. Z9000 Syntax lsp-mtu size To return to the default values, use the no lsp-mtu command. Parameters size The maximum LSP size, in bytes. The range is from 128 to 1497 for Non-Jumbo mode and from 128 to 9195 for Jumbo mode. The default is 1497. Defaults 1497 bytes. Command Modes ROUTER ISIS Command History This guide is platform-specific.
PAGE 868
lsp-refresh-interval Set the link state PDU (LSP) refresh interval. LSPs must be refreshed before they expire. When the LSPs are not refreshed after a refresh interval, they are kept in a database until their max-lsp-lifetime reaches zero and then LSPs is purged. Z9000 Syntax lsp-refresh-interval seconds To restore the default refresh interval, use the no lsp-refresh-interval command. Parameters seconds The LSP refresh interval, in seconds.
PAGE 869
max-area-addresses Configure manual area addresses. Z9000 Syntax max-area-addresses number To return to the default values, use the no max-area-addresses command. Parameters number Set the maximum number of manual area addresses. The range is from 3 to 6. The default is 3. Defaults 3 addresses Command Modes ROUTER ISIS Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 870
Parameters seconds The maximum lifetime of LSP in seconds. This value must be greater than the lsp-refresh-interval command. The higher the value the longer the LSPs are kept. The range is from 1 to 65535. The default is 1200. Defaults 1200 seconds Command Modes ROUTER ISIS Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 871
Defaults Command Modes Command History 4 • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.
PAGE 872
Defaults narrow; if no Level is specified, Level-1 and Level-2 are configured. Command Modes ROUTER ISIS Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000.
PAGE 873
The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.12.0 Introduced on the S4810. Version 7.8.1.0 Introduced. net To configure an IS-IS network entity title (NET) for a routing process, use this mandatory command. If you did not configure a NET, the IS-IS process does not start.
PAGE 874
passive-interface Suppress routing updates on an interface. This command stops the router from sending updates on that interface. Z9000 Syntax passive-interface interface To delete a passive interface configuration, use the no passive-interface interface command. Parameters interface Enter the following keywords and slot/port or number information: • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.
PAGE 875
redistribute Redistribute routes from one routing domain to another routing domain. Z9000 Syntax redistribute {static | connected | rip} [level-1 | level-1-2 | level-2] [metric metric-value] [metric-type {external | internal}] [route-map map-name] To end redistribution or disable any of the specified keywords, use the no redistribute {static | connected | rip} [metric metric-value] [metric-type {external | internal}] [level-1 | level-1-2 | level-2] [route-map map-name] command.
PAGE 876
• Command History CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.12.0 Introduced on the S4810.
PAGE 877
redistribute bgp Redistribute routing information from a BGP process. Z9000 Syntax redistribute bgp AS number [level-1| level-1-2 | level-2] [metric metric-value] [metric-type {external| internal}] [route-map map-name] To return to the default values, use the no redistribute bgp command with the appropriate parameters. Parameters AS number Enter a number that corresponds to the autonomous system number. The range is from 1 to 65355.
PAGE 878
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.12.0 Introduced on the S4810. Version 7.5.1.0 Added support for IPv6 ISIS. Version 6.3.1.0 Introduced. Usage Information BGP to IS-IS redistribution supports “match” options using route maps. You can set the metric value, level, and metric-type of redistributed routes by the redistribution command. You can “set” more advanced options using route maps.
PAGE 879
metric-type {external | internal} (OPTIONAL) The external link type associated with the default route advertised into a routing domain. The two options are: • external • internal level-1 (OPTIONAL) Routes are independently redistributed into ISIS as Level 1 routes. level-1-2 (OPTIONAL) Routes are independently redistributed into ISIS as Level-1-2 routes. level-2 (OPTIONAL) Routes are independently redistributed into ISIS as Level 2 routes. This setting is the default.
PAGE 880
Usage Information How a metric value assigned to a redistributed route is advertised depends on how on the configuration of the metric-style command. If the metric-style command is set for Narrow mode and the metric value in the redistribute ospf command is set to a number higher than 63, the metric value advertised in LSPs is 63. If the metric-style command is set for wide mode, the metric value in the redistribute ospf command is advertised.
PAGE 881
You can configure only one IS-IS routing process to perform Level 2 routing. A level-1-2 designation performs Level 1 and Level 2 routing at the same time. Related Commands • ip router isis — configures IS-IS routing processes for IP on interfaces and attaches an area designator to the routing process. • net — configures an IS-IS network entity title (NET) for a routing process. • is-type — assigns a type for a given area.
PAGE 882
show config Display the changes you made to the IS-IS configuration. Default values are not shown. Z9000 Syntax show config Command Modes • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 883
show isis database Display the IS-IS link state database. Z9000 Syntax Parameters show isis database [level-1 | level-2] [local] [detail | summary] [lspid] level-1 (OPTIONAL) Displays the Level 1 IS-IS link-state database. level-2 (OPTIONAL) Displays the Level 2 IS-IS link-state database. local (OPTIONAL) Displays local link-state database information. detail (OPTIONAL) Detailed link-state database information of each LSP displays when specified. If not specified, a summary displays.
PAGE 884
Field Description The first six octets are the System ID of the originating router. The first six octets are the System ID of the originating router. The next octet is the pseudonode ID. If this byte is not zero, the LSP describes system links. If this byte is zero (0), the LSP describes the state of the originating router. The designated router for a LAN creates and floods a pseudonode LSP and describes the attached systems. The last octet is the LSP number.
PAGE 885
ISIS.00-00 * 0x00000006 0xCF43 580 ! FTOS#show isis database detail ISIS.00-00 0/0/0 IS-IS Level-1 Link State Database LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL ISIS.00-00 * 0x0000002B 0x853B 1075 0/0/0 Area Address: 49.0000.0001 NLPID: 0xCC 0x8E IP Address: 10.1.1.1 IPv6 Address: 1011::1 Topology: IPv4 (0x00) IPv6 (0x8002) Metric: 10 IS OSPF.00 Metric: 10 IS (MT-IPv6) OSPF.00 Metric: 10 IP 15.1.1.0 255.255.255.
PAGE 886
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.1.0 Introduced on the E-Series.
PAGE 887
The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. FTOS#show isis hostname System Id Dynamic Name Static Name *F100.E120.0013 Force10 ISIS FTOS# show isis interface Display detailed IS-IS interface status and configuration information.
PAGE 888
Example Version 9.2(0.2) Introduced on the Z9000. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. FTOSF>show isis int GigabitEthernet 0/7 is up, line protocol is up MTU 1497, Encapsulation SAP Routing Protocol: IS-IS Circuit Type: Level-1-2 Interface Index 37847070, Local circuit ID 1 Level-1 Metric: 10, Priority: 64, Circuit ID: systest-3.
PAGE 889
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific.
PAGE 890
Example Field Description Circuit Id The neighbor’s interpretation of the designated router for the interface. The bold sections below identify that Multi-Topology IS-IS is enabled. FTOS#show isis neighbors System Id Interface State Type Priority Uptime Circuit Id TEST Gi 7/1 Up L1L2(M) 127 09:28:01 TEST.02 ! FTOS#show isis neighbors detail System Id Interface State Type Priority Uptime Circuit Id TEST Gi 7/1 Up L1L2(M) 127 09:28:04 TEST.02 Area Address(es): 49.0000.0001 IP Address(es): 25.1.1.
PAGE 891
System Id: F100.E120.0013 IS-Type: level-1-2 Manual area address(es): 49.0000.0001 Routing for area address(es): 49.0000.0001 Interfaces supported by IS-IS: GigabitEthernet 1/0 - IP - IPv6 GigabitEthernet 1/1 - IP - IPv6 GigabitEthernet 1/10 - IP - IPv6 Loopback 0 - IP - IPv6 Redistributing: Distance: 115 Generate narrow metrics: level-1-2 Accept narrow metrics: level-1-2 Generate wide metrics: none Accept wide metrics: none Multi Topology Routing is enabled in transition mode.
PAGE 892
Usage Information Example 892 Version 9.2(0.2) Introduced on the Z9000. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. The following describes the show isis traffic command shown in the following example. Item Description Level-1/Level-2 Hellos (sent/rcvd) Displays the number of Hello packets sent and received. PTP Hellos (sent/ rcvd) Displays the number of point-to-point Hellos sent and received.
PAGE 893
IS-IS: IS-IS: IS-IS: IS-IS: IS-IS: IS-IS: IS-IS: IS-IS: IS-IS: FTOS# Level-2 LSPs CSNPs (sent/rcvd) : 472/238 Level-1 LSPs PSNPs (sent/rcvd) : 0/0 Level-2 LSPs PSNPs (sent/rcvd) : 10/337 Level-1 DR Elections : 4 Level-2 DR Elections : 4 Level-1 SPF Calculations : 0 Level-2 SPF Calculations : 389 LSP checksum errors received : 0 LSP authentication failures : 0 spf-interval Specify the minimum interval between shortest path first (SPF) calculations.
PAGE 894
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.12.0 Introduced on the S4810. Version 7.8.1.0 Added support for multi-topology ISIS. Version 7.5.1.0 Added support for SPF Throttling Enhancement. This command spf-interval in CONFIG-ROUTER-ISIS-AF-IPV6 mode is used for IPv6 Multi-Topology route computation only.
PAGE 895
27 Link Aggregation Control Protocol (LACP) This chapter contains commands for Dell Networks’s implementation of the link aggregation control protocol (LACP) for creating dynamic link aggregation groups (LAGs) — known as “port-channels” in the Dell Networking operating software. The LACP commands in this chapter are supported by Dell Networking OS on the Z9000 platform.
PAGE 896
Version 6.2.1.1 Related Commands Introduced on the E-Series. show lacp — displays the LACP configuration. debug lacp Debug LACP (configuration, events, and so on). Z9000 Syntax debug lacp [config | events | pdu [interface-type [in | out]]] To disable LACP debugging, use the no [config | events | pdu [interface-type [in | out]]] command. Parameters config (OPTIONAL) Enter the keyword config to debug the LACP configuration.
PAGE 897
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.2.1.1 Introduced on the E-Series. lacp long-timeout Configure a long timeout period (30 seconds) for an LACP session.
PAGE 898
Related Commands show lacp — displays the LACP configuration. lacp port-priority To influence which ports will be put in Standby mode when there is a hardware limitation that prevents all compatible ports from aggregating, configure the port priority. Z-Series Syntax lacp port-priority priority-value To return to the default setting, use the no lacp port-priority priorityvalue command. Parameters priority-value Enter the port-priority value. The higher the value number, the lower the priority.
PAGE 899
lacp system-priority Configure the LACP system priority. Z-Series Syntax Parameters lacp system-priority priority-value priority-value Enter the port-priority value. The higher the value number, the lower the priority. The range is from 1 to 65535. The default is 32768. Defaults 32768 Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 900
NOTE: LACP modes are defined in Usage Information. passive Enter the keyword passive to set the mode to the passive state. NOTE: LACP modes are defined in Usage Information. off Enter the keyword off to set the mode to the off state. NOTE: LACP modes are defined in Usage Information. Defaults off Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 901
port-channel-protocol lacp Enable LACP on any LAN port. Z9000 Syntax port-channel-protocol lacp To disable LACP on a LAN port, use the no port-channel-protocol lacp command. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.
PAGE 902
Defaults Command Modes Command History Without a Port Channel specified, the command clears all Port Channel counters. • • EXEC EXEC Privilege This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example (PortChannelNumber) Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.
PAGE 903
----------------------------------------------------Gi 10/6 200 200 0 0 0 0 Dell# Related Commands clear lacp counters — clears the LACP counters. show interfaces port-channel — displays information on configured Port Channel groups. hg-link-bundle-monitor Enable the capability to examine the utilization and traffic distribution of high-Gigabit port channels. This command is supported on the Z9000 platform.
PAGE 904
hg-link-bundle-monitor trigger-threshold Specify the threshold value for high-Gigabit Ethernet port channels or trunk groups, which is a checkpoint exceeding which the link bundle is marked as being overutilized and alarm is generated. This command is supported on the Z9000 platform. Syntax hg-link-bundle-monitor trigger-threshold <1-90> To restore the default value, use the no version of this command.. Parameters <1-90> Command Modes CONFIGURATION Command History Version 9.3(0.
PAGE 905
Usage Information This interval cannot be configured per high-Gigabit port channel and is applicable for all of the high-Gigabit port channels on the system. show hg-link-bundle-distribution Display the traffic-handling and utilization of the member interfaces of the high-Gigabit port channel or trunk group. This command is supported on the Z9000 platform.
PAGE 906
Field Description port channel occurred.
PAGE 907
show hardware stack-unit (for high-Gigabit Ethernet ports) Display the data plane or management plane input and output statistics of the high-Gigabit Ethernet or backplane port of the designated stack unit or Z9000 unit. NOTE: Only the parameters that are newly introduced with this command in Release 9.3(0.0) are explained here. For a complete description of all of the options that are available with this command, refer the relevant Command Reference Guide of the applicable platform of Release 9.2(0.0).
PAGE 908
Output Statistics: 1335309 packets, 187184751 bytes, 0 underruns 0 64-byte pkts, 665971 over 64-byte pkts, 586727 over 127byte pkts 82038 over 255-byte pkts, 58 over 511-byte pkts, 515 over 1023-byte pkts 408949 Multicasts, 0 Broadcasts, 926163 Unicasts 0 throttles, 0 discarded, 0 collisions, 0 wredDrops Rate info (interval 30 seconds): Input 00.08 Mbits/sec, 10 packets/sec, 0.00% of line-rate Output 00.00 Mbits/sec, 3 packets/sec, 0.
PAGE 909
Defaults none Command Modes EXEC Privilege Command History Related Commands Version 9.3(0.0) Added support for the hg-stats option on the Z9000 platform. show hardware stack-unit — displays the data plane or management plane input and output statistics of the designated component of the designated stack member.
PAGE 910
28 Layer 2 This chapter describes commands to configure Layer 2 features. This chapter contains the following sections: • MAC Addressing Commands • Virtual LAN (VLAN) Commands • The VLAN commands are supported on all the Z9000 platform. MAC Addressing Commands The following commands are related to configuring, managing, and viewing MAC addresses. clear mac-address-table Clear the MAC address table of all MAC address learned dynamically.
PAGE 911
vlan vlan-id Enter the keyword vlan then a VLAN ID number from 1 to 4094. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Added support for sticky MAC addresses.
PAGE 912
Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 On the E-Series, available in INTERFACE VLAN context, reduced the minimum aging time in the INTERFACE VLAN context from 10 seconds to 1 second. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series.
PAGE 913
output-range interface vlan vlan-id For a multicast MAC address, enter the keyword outputrange then one of the following interfaces to indicate a range of ports for which traffic is forwarded: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information. • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 914
mac-address-table station-move threshold Change the frequency with which the MAC address station-move trap is sent after a MAC address changes in a VLAN. A trap is sent if a station move is detected above a threshold number of times in a given interval. Syntax Parameters [no] mac-address-table station-move threshold number interval count threshold number Enter the keyword threshold then the number of times MAC addresses in VLANs can change before an SNMP trap is sent. The range is from 1 to 10.
PAGE 915
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.6.1.
PAGE 916
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.12.
PAGE 917
this occurs, un-configure the existing configuration first and then reapply the limit with a lower value. Related Commands mac learning-limit mac-address-sticky — Replaces deprecated no-station-move parameter. show mac learning-limit — displays MAC learning-limit configuration. mac learning-limit learn-limit-violation Configure an action for a MAC address learning-limit violation.
PAGE 918
Related Commands show mac learning-limit — displays details of the mac learning-limit. mac learning-limit mac-address-sticky Maintain the dynamically learned mac addresses as sticky MAC addresses on the selected port. Z-Series Syntax mac learning-limit mac-address-sticky To convert the sticky MAC addresses to dynamic MAC addresses, use the no mac learning-limit command. Parameters mac-addresssticky Configures the dynamic MAC addresses as sticky on an interface.
PAGE 919
To disable a configuration, use the no mac learning-limit station-moveviolation command, then the configured keyword. Parameters log Enter the keyword log to generate a syslog message on a station move violation. shutdown-both Enter the keyword shutdown to shut down both the original and offending interface and generate a syslog message. shutdownoffending Enter the keywords shutdown-offending to shut down the offending interface and generate a syslog message.
PAGE 920
Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.
PAGE 921
• vlan vlan-id For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. (OPTIONAL) Enter the keyword vlan then the VLAN ID to display the MAC address assigned to the VLAN. The range is from 1 to 4094. Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 922
• For a Port Channel interface, enter the keywords portchannel then a number. • For a SONET interface, enter the keyword sonet then the slot/ port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. static (OPTIONAL) Enter the keyword static to display only those MAC addresses specifically configured on the switch.
PAGE 923
112 113 114 115 116 117 Dell# 0 0 0 0 0 0 0 0 0 0 0 0 00:01:e8:0d:b7:62 00:01:e8:0d:b7:61 00:01:e8:0d:b7:60 00:01:e8:0d:b7:5f 00:01:e8:0d:b7:5e 00:01:e8:0d:b7:5d SYSTEM_STATIC SYSTEM_STATIC SYSTEM_STATIC SYSTEM_STATIC SYSTEM_STATIC SYSTEM_STATIC DROP DROP DROP DROP DROP DROP show mac-address-table Display the MAC address table.
PAGE 924
count (OPTIONAL) Enter the keyword count, then optionally, by an interface or VLAN ID, to display total or interface-specific static addresses, dynamic addresses, and MAC addresses in use. Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 925
Column Heading Description • State Example Usage Information te — 10 Gigabit Ethernet then a slot/port. Lists if the MAC address is in use (Active) or not in use (Inactive).
PAGE 926
Line Beginning With Description Static Address... Lists the number of user-defined MAC addresses. Total MAC... Lists the total number of MAC addresses the switch uses. Example (Count) Dell# show mac-address-table count MAC Entries for all vlans : Dynamic Address Count : 110 Static Address (User-defined) Count : 0 Sticky Address Count : 0 Total Synced Mac from Peer(N): 100 Total MAC Addresses in Use: 110 Dell# Related Commands show mac-address-table aging-time — displays MAC aging time.
PAGE 927
Example Dell#show mac-address-table aging-time Mac-address-table aging time : 1800 Dell# Related Commands show mac-address-table — displays the current MAC address configuration. show mac accounting destination Display destination counters for Layer 2 traffic (available on physical interfaces only).
PAGE 928
Usage Information MAC Accounting information can be accessed using SNMP via the Force10 Monitor MIB. For more information about enabling SNMP, refer to the Dell Networking OS Configuration Guide. NOTE: Currently, the Force10 MONITOR MIB does not return the MAC addresses in an increasing order using SNMP. As a workaround, you can use the -C c option in snmpwalk or snmpbulkwalk to access the Force10 MONITOR MIB. For example: % snmpwalk -C c -v 2c -c public 133.33.33.131 enterprise.6027.3.3.
PAGE 929
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on the S4810.
PAGE 930
default vlan-id Specify a VLAN as the Default VLAN. Z9000 Syntax default vlan-id vlan-id To remove the default VLAN status from a VLAN and VLAN 1 does not exist, use the no default vlan-id vlan-id syntax. Parameters vlan-id Enter the VLAN ID number of the VLAN to become the new Default VLAN. The range is from 1 to 4094. The default is 1. Defaults The Default VLAN is VLAN 1. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 931
default-vlan disable Disable the default VLAN so that all switchports are placed in the Null VLAN until they are explicitly configured as a member of another VLAN. Z9000 Defaults Enabled. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.
PAGE 932
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. Usage Information To display information about a named VLAN, enter the show vlan command with the name parameter or the show interfaces description command.
PAGE 933
no ip address no shutdown Dell(conf-if-vl-100)# show vlan Display the current VLAN configurations on the switch. Z9000 Syntax Parameters show vlan [brief | id vlan-id | name vlan-name] brief (OPTIONAL) Enter the keyword brief to display the following information: • VLAN ID • VLAN name (left blank if none is configured) • Spanning Tree Group ID • MAC address aging time • IP address id vlan-id (OPTIONAL) Enter the keyword id then a number from 1 to 4094.
PAGE 934
Usage Information Version 7.6.1.0 Introduced on the S-Series and revised the output to display Native VLAN. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. The following describes the show vlan command shown in the following example. Column Heading Description (Column 1 — no heading) • asterisk symbol (*) = Default VLAN • G = GVRP VLAN • P = primary VLAN C = community VLAN I = isolated VLAN • O = OpenFlow NUM Displays existing VLAN IDs.
PAGE 935
Q: U - Untagged, T - Tagged, O - Openflow x - Dot1x untagged, X - Dot1x tagged o - OpenFlow untagged, O - OpenFlow tagged G - GVRP tagged, M - Vlan-stack i - Internal untagged, I - Internal tagged, v - VLT untagged, V - VLT tagged NUM Status Description Q Ports * 1 Inactive 2 Active U Po1(Gi 13/0) T Po20(Gi 13/6), Gi 13/25 T Gi 13/7 3 Active T Po20(Gi 13/6) T Gi 13/7 U Gi 13/1 4 Active U Po2(Gi 13/2) T Po20(Gi 13/6) T Gi 13/7 5 Active T Po20(Gi 13/6) T Gi 13/7 U Gi 13/3 6 Active U Po3(Gi 13/4) T Po20(Gi 13/
PAGE 936
Example (Brief) Dell#show vlan br VLAN Name STG MAC Aging IP Address ---- -----------------------------------1 0 1800 unassigned 2 0 1800 2.2.2.2/24 3 0 1800 3.3.3.
PAGE 937
Defaults All interfaces in Layer 2 mode are untagged. Command Modes INTERFACE VLAN Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.
PAGE 938
• For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Defaults Not configured. Command Modes INTERFACE VLAN Command History This guide is platform-specific.
PAGE 939
untagged Add a Layer 2 interface to a VLAN as an untagged interface. Z9000 Syntax untagged interface To remove an untagged interface from a VLAN, use the no untagged interface command. Parameters interface Enter the following keywords and slot/port or number information: • • • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 940
Related Commands interface vlan — configures a VLAN. tagged — specifies which interfaces in a VLAN are tagged. Far-End Failure Detection (FEFD) The Dell Networking operating software supports far-end failure detection (FEFD) on the Ethernet interfaces of the Z9000 platform. The FEFD feature detects and reports far-end link failures. • FEFD is not supported on the Management interface. • During an RPM failover, FEFD is operationally disabled for approximately 8 to 10 seconds.
PAGE 941
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.12.0 Introduced on the S4810. Legacy ESeries command. Related Commands • fefd — enables far-end failure detection on an interface. • fefd reset — enables FEFD globally on the system. fefd Enable Far-End Failure Detection on an interface, set the FEFD interval, or select the FEFD mode.
PAGE 942
Usage Information Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.12.0 Introduced on the S4810. When you enter no fefd for an interface and fefd-global, FEFD is enabled on the interface because the no fefd command is not retained in the configuration file. To keep the interface FEFD disabled when the global configuration changes, use the fefd reset command.
PAGE 943
Related Commands • fefd reset — enables FEFD globally on the system. • fefd mode — changes FEFD mode on an interface. fefd interval Set an interval between control packets. Z9000 Syntax fefd interval seconds To return to the default value, use the no fefd interval command. Parameters seconds Enter a number as the time between FEFD control packets. The range is from 3 to 300 seconds. The default is 15 seconds.
PAGE 944
Parameters normal (OPTIONAL) Enter the keyword normal to change the link state to “unknown” when a far-end failure the software detects on that interface. When the interface is placed in “unknown” state, the software brings down the line protocol. aggressive (OPTIONAL) Enter the keyword aggressive to change the link state to “error-disabled” when a far-end failure the software detects on that interface.
PAGE 945
Defaults Not configured. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.12.0 Introduced on the S4810. Legacy ESeries command.
PAGE 946
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Legacy ESeries command. Related Commands • fefd — enables far-end failure detection. • fefd-global — enables FEFD globally on the system. fefd-global Enable FEFD globally on the system. Z9000 Syntax fefd-global [interval seconds][mode {normal | aggressive}] To disable FEFD globally, use the no fefd-global [mode {normal | aggressive}] command.
PAGE 947
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.12.0 Introduced on the S4810. Legacy ESeries command. Usage Information If you enter only the fefd-global syntax, the mode is normal and the default interval is 15 seconds. If you disable FEFD globally (no fefd-global), the system does not remove the FEFD interface configuration. Related Commands • fefd — enables far-end failure detection.
PAGE 948
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.12.0 Introduced on the S4810. Legacy ESeries command. Usage Information Example The following describes the show fefd command shown in the following example. Field Description Interface Displays the interfaces type and number. Mode Displays the mode (aggressive or normal) or NA if the interface contains fefd reset in its configuration. Interval Displays the interval between FEFD packets.
PAGE 949
Related Commands Layer 2 • fefd — enables far-end failure detection. • fefd disable — disables FEFD on an interface only. • fefd-global — enables FEFD globally on the system. • fefd reset — resets all interfaces or a single interface that was in “error-disabled” mode.
PAGE 950
Link Layer Discovery Protocol (LLDP) 29 The link layer discovery protocol (LLDP) advertises connectivity and management from the local station to the adjacent stations on an IEEE 802 LAN. This chapter contains the following sections: • LLPD Commands • LLDP-MED Commands LLDP facilitates multi-vendor interoperability by using standard management tools to discover and make available a physical topology for network management.
PAGE 951
vlan-name Enter the keywords vlan-name to advertise the vlan-name TLV. This keyword is only supported on the C-Series and SSeries. Defaults Disabled. Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 952
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.6.1.
PAGE 953
Usage Information Version 9.1. (0.0) Modified to support management-address parameter. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.6.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced on the E-Series. The command options management-address,system-capabilities, systemdescription, and system-name can be invoked individually or together, in any sequence.
PAGE 954
Version 9.1. (0.0) Introduced on the Z9000 and S4810. Version 8.3.19.0 Introduced on the S4820T. clear lldp counters Clear LLDP transmitting and receiving counters for all physical interfaces or a specific physical interface. Z9000 Syntax Parameters clear lldp counters interface interface Enter the following keywords and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet then the slot/ port information.
PAGE 955
clear lldp neighbors Clear LLDP neighbor information for all interfaces or a specific interface. Z9000 Syntax Parameters clear lldp neighbors {interface} interface Defaults none Command Modes EXEC Privilege Command History Enter the following keywords and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet then the slot/ port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/ port information.
PAGE 956
To disable debugging, use the no debug lldp interface {interface | all}{events} {packet {brief | detail} {tx | rx | both}} command. Parameters interface Enter the following keywords and slot/port or number information: • For a Fast Ethernet interface, enter the keyword FastEthernet then the slot/ port information. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/ port information.
PAGE 957
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.6.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced on the E-Series. disable Enable or disable LLDP. Z9000 Syntax disable To enable LLDP, use the no disable command.
PAGE 958
show lldp neighbors — displays the LLDP neighbors. hello Configure the rate at which the LLDP control packets are sent to its peer. Z9000 Syntax hello seconds To revert to the default, use the no hello seconds command. Parameters seconds Enter the rate, in seconds, at which the control packets are sent to its peer. The rate is from 5 to 180 seconds. The default is 30 seconds.
PAGE 959
Command Modes LLDP (conf-lldp) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2(0.2) Usage Information Introduced on the Z9000 and S4810. To enable LLDP on the management interface, use the no disable command in LLDP-MANAGEMENT-INTERFACE mode (conf-lldp-mgmtIf).
PAGE 960
Related Commands protocol lldp (Configuration) — enables LLDP globally. show lldp neighbors — displays the LLDP neighbors. multiplier Set the number of consecutive misses before LLDP declares the interface dead. Z9000 Syntax multiplier integer To return to the default, use the no multiplier integer command. Parameters integer Enter the number of consecutive misses before the LLDP declares the interface dead. The range is from 2 to 10.
PAGE 961
Command Modes CONFIGURATION (conf-lldp) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.
PAGE 962
Version 7.4.1.0 Usage Information Introduced on the E-Series. Before LLDP can be configured on an interface, it must be enabled globally from CONFIGURATION mode. This command places you in LLDP mode on the interface; it does not enable the protocol. When you enter the LLDP protocol in the Interface context, it overrides global configurations. When you execute the no protocol lldp from INTERFACE mode, interfaces begin to inherit the configuration from global LLDP CONFIGURATION mode.
PAGE 963
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.6.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced on the E-Series. Usage Information Omitting the keyword detail displays only the remote chassis ID, Port ID, and Dead Interval.
PAGE 964
Number of Table Drops : Number of Table Age Outs : Dell# 0 400 show management-interface Display LLDP management interface configuration information. Z9000 Syntax show management-interface Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2. (0.
PAGE 965
Example Dell#show running-config lldp ! protocol lldp advertise dot1-tlv port-protocol-vlan-id port-vlan-id advertise dot3-tlv max-frame-size advertise management-tlv system-capabilities systemdescription hello 15 multiplier 3 no disable Dell# LLDP-MED Commands The following are the LLDP-MED (Media Endpoint Discovery) commands. Dell Networking OS LLDP-MED commands are an extension of the set of LLDP TLV advertisement commands. The C-Series and S-Series support all commands.
PAGE 966
To return to the default, use the no advertise med guest-voice {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094. layer2_priority Enter the Layer 2 priority. The range is from 0 to 7. DSCP_value Enter the DSCP value. The range is from 0 to 63. priority-tagged number Enter the keywords priority-tagged followed the Layer 2 priority. The range is from 0 to 7. Defaults Unconfigured.
PAGE 967
Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094. layer2_priority Enter the Layer 2 priority. The range is from 0 to 7. DSCP_value Enter the DSCP value. The range is from 0 to 63. priority-tagged number Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7. Defaults unconfigured. Command Modes CONFIGURATION (conf-lldp) Command History This guide is platform-specific.
PAGE 968
civic-based value Enter the keywords civic-based then the civic based location in hexadecimal format. The range is from 6 to 255 bytes. ecs-elin value Enter the keywords ecs-elin then the Emergency Call Service (ecs) Emergency Location Identification Number (elin) numeric location string. The range is from 10 to 25 characters. Defaults unconfigured. Command Modes CONFIGURATION (conf-lldp) Command History This guide is platform-specific.
PAGE 969
Command Modes CONFIGURATION (conf-lldp) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.
PAGE 970
Command Modes CONFIGURATION (conf-lldp) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.
PAGE 971
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.6.1.
PAGE 972
The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.6.1.0 Introduced on the C-Series and E-Series. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors.
PAGE 973
Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.6.1.0 Introduced on the C-Series and E-Series. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors.
PAGE 974
Related Commands Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.6.1.0 Introduced on the C-Series and E-Series. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. advertise med voice-signaling To advertise when voice control packets use a separate network policy than voice data, configure the system.
PAGE 975
Related Commands Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.6.1.0 Introduced on the C-Series and E-Series. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors.
PAGE 976
Microsoft Network Load Balancing 30 This functionality is supported on the Z9000 platform. Network Load Balancing (NLB) is a clustering functionality that is implemented by Microsoft on Windows 2000 Server and Windows Server 2003 operating systems. NLB uses a distributed methodology or pattern to equally split and balance the network traffic load across a set of servers that are part of the cluster or group.
PAGE 977
response with MAC-s4 is received as the last one). The interface associated with server, S4, is added to the ARP table. • With NLB feature enabled, after learning the NLB ARP entry, all the subsequent traffic is flooded on all ports in VLAN1. With NLB, the data frame is forwarded to all the servers for them to perform load-balancing. NLB Multicast Mode Scenario Consider a sample topology in which four servers, namely S1 through S4, are configured as a cluster or a farm.
PAGE 978
learned, traffic is forwarded to only one server rather than the entire cluster, and failover and balancing are not preserved. To preserve failover and balancing, the switch forwards the traffic destined for the server cluster to all member ports in the VLAN connected to the cluster. To ensure that this happens, you must configure the ip vlan-flooding command on the Dell switch at the time that the Microsoft cluster is configured.
PAGE 979
Defaults Not configured. Command Modes CONFIGURATION Command History Version 9.3(0.0) • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • The interface specified here must be one of the interfaces configured using the {output-range | output} interface option with the mac-addresstable static command.
PAGE 980
NOTE: Use this option if you want multicast functionality in an L2 VLAN without IGMP protocols. output interface output-range interface vlan vlan-id For a multicast MAC address, enter the keyword output then one of the following interfaces for which traffic is forwarded: • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 981
ip vlan-flooding Enable unicast data traffic flooding on VLAN member ports. Syntax ip vlan-flooding To disable, use the no ip vlan-flooding command. Command Modes Command History CONFIGURATION Version 9.3(0.0) Introduced on the S4810, S4820T, S6000, Z9000, and MXL platforms Default Disabled Usage Information By default this command is disabled. There might be some ARP table entries which are resolved through ARP packets which had Ethernet MAC SA different from MAC information inside the ARP packet.
PAGE 982
Multicast Source Discovery Protocol (MSDP) 31 Multicast source discovery protocol (MSDP) connects multiple PIM Sparse-Mode (PIM-SM) domains together. MSDP peers connect using TCP port 639. Peers send keepalives every 60 seconds. A peer connection is reset after 75 seconds if no MSDP packets are received. MSDP connections are parallel with MBGP connections. The Dell Networking operating system supports MSDP commands on the Z9000 platform.
PAGE 983
clear ip msdp sa-cache Clears the entire source-active cache, the source-active entries of a particular multicast group, rejected, or local source-active entries. Z9000 Syntax Parameters clear ip msdp sa-cache [group-address | rejected-sa | local] group-address Enter the group IP address in dotted decimal format (A.B.C.D.).
PAGE 984
clear ip msdp statistic Clears the entire source-active cache, the source-active entries of a particular multicast group, rejected, or local source-active entries. Z9000 Syntax Parameters clear ip msdp sa-cache [group-address | rejected-sa | local] group-address Enter the group IP address in dotted decimal format (A.B.C.D.).
PAGE 985
debug ip msdp Turn on MSDP debugging. Z9000 Syntax debug ip msdp {event peer address | packet peer address | pim} To turn debugging off, use the no debug ip msdp {event peer address | packet peer address | pim} command. Parameters event peer address Enter the keyword event then the peer address in a dotted decimal format (A.B.C.D.). packet peer address Enter the keyword packet then the peer address in a dotted decimal format (A.B.C.D.). pim Enter the keyword pim to debug advertisement from PIM.
PAGE 986
Parameters number Enter the number of rejected SA entries to cache. The range is from 0 to 32766. Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 987
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 988
ip msdp mesh-group To be a member of a mesh group, configure a peer. Z9000 Syntax ip msdp mesh-group {name} {peer address} To remove the peer from a mesh group, use the no ip msdp mesh-group {name} {peer address} command. Parameters name Enter a string of up to 16 characters long for as the mesh group name. peer address Enter the peer address in a dotted decimal format (A.B.C.D.). Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 989
ip msdp originator-id Configure the MSDP Originator ID. Z9000 Syntax ip msdp originator-id {interface} To remove the originator-id, use the no ip msdp originator-id {interface} command. Parameters interface Enter the following keywords and slot/port or number information: • For a Loopback interface, enter the keyword loopback then a number from 0 to 16383. • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 990
ip msdp peer Configure an MSDP peer. Z9000 Syntax ip msdp peer peer address [connect-source] [description] [salimit number] To remove the MSDP peer, use the no ip msdp peer peer address [connect-source interface] [description name] [sa-limit number] command. Parameters peer address Enter the peer address in a dotted decimal format (A.B.C.D.).
PAGE 991
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 7.5.1.0 Added option for SA upper limit and the description option. Version 6.2.1.1 Introduced The connect-source option is used to supply a source IP address for the TCP connection.
PAGE 992
The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced Modifications to the ACL do not have an immediate effect on the sa-cache. To apply the redistribute filter to entries already present in the SA cache, use the clear ip msdp sa-cache local command.
PAGE 993
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the E-Series. ip msdp sa-limit Configure the upper limit of source-active (SA) entries in SA-cache. Z9000 Syntax ip msdp sa-limit number To return to the default, use the no ip msdp sa-limit number command. Parameters number Enter the maximum number of SA entries in SA-cache.
PAGE 994
continue to be accepted. To enforce the limit in such situation, use the clear ip msdp sa-cache command. Related Commands ip msdp peer — configures the MSDP peer. clear ip msdp peer — clears the MSDP peer. show ip msdp — displays the MSDP information ip msdp shutdown Administratively shut down a configured MSDP peer. Z9000 Syntax Parameters ip msdp shutdown {peer address} peer address Enter the peer address in a dotted decimal format (A.B.C.D.). Defaults Not configured.
PAGE 995
ip multicast-msdp Enable MSDP. Z9000 Syntax ip multicast-msdp To exit MSDP, use the no ip multicast-msdp command. Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 996
Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 6.2.1.
PAGE 997
show ip msdp sa-cache rejected-sa Display the rejected SAs in the SA cache. Z9000 Syntax show ip msdp sa-cache rejected-sa Defaults none Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 998
32 Multiple Spanning Tree Protocol (MSTP) Multiple spanning tree protocol (MSTP), as implemented by the Dell Networking operating system, conforms to IEEE 802.1s. This command supports the Dell Networking Z9000 platform. debug spanning-tree mstp Enable debugging of the multiple spanning tree protocol and view information on the protocol.
PAGE 999
Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.
PAGE 1000
Related Commands Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.5.1.0 Introduced. protocol spanning-tree mstp — enters MULTIPLE SPANNING TREE mode. forward-delay The amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State.
PAGE 1001
Related Commands Version 7.5.1.0 Introduced on the C-Series. Version 6.5.1.0 Introduced. max-age — changes the wait time before MSTP refreshes protocol configuration information. hello-time — changes the time interval between bridge protocol data units (BPDUs). hello-time Set the time interval between generation of MSTB bridge protocol data units (BPDUs). Z9000 Syntax hello-time seconds To return to the default value, use the no hello-time command.
PAGE 1002
max-age — changes the wait time before MSTP refreshes protocol configuration information. max-age To maintain configuration information before refreshing that information, set the time interval for the MSTB. Z9000 Syntax max-age seconds To return to the default values, use the no max-age command. Parameters max-age Enter a number of seconds the Dell Networking OS waits before refreshing configuration information. The range is from 6 to 40. The default is 20 seconds.
PAGE 1003
max-hops Configure the maximum hop count. Z9000 Syntax max-hops number To return to the default values, use the no max-hops command. Parameters range Enter a number for the maximum hop count. The range is from 1 to 40. The default is 20. Defaults 20 hops Command Modes MULTIPLE SPANNING TREE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1004
msti Configure multiple spanning tree instance, bridge priority, and one or multiple VLANs mapped to the MST instance. Z9000 Syntax msti instance {vlan range | bridge-priority priority} To disable mapping or bridge priority, use the no msti instance {vlan range | bridge-priority priority} command. Parameters msti instance Enter the MSTP instance. The range is from zero (0) to 63. vlan range Enter the keyword vlan then the identifier range value. The range is from 1 to 4094.
PAGE 1005
name The name you assign to the multiple spanning tree region. Z9000 Syntax name region-name To remove the region name, use the no name command. Parameters region-name Enter the MST region name. The range is 32 character limit. Defaults no default name. Command Modes MULTIPLE SPANNING TREE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1006
protocol spanning-tree mstp To enable and configure the multiple spanning tree group, enter MULTIPLE SPANNING TREE mode. Z9000 Syntax protocol spanning-tree mstp To disable the multiple spanning tree group, use the no protocol spanningtree mstp command. Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1007
revision The revision number for the multiple spanning tree configuration. Z9000 Syntax revision range To return to the default values, use the no revision command. Parameters range Enter the revision number for the MST configuration. The range is from 0 to 65535. The default is 0. Defaults 0 Command Modes MULTIPLE SPANNING TREE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1008
show config View the current configuration for the mode. Only non-default values are shown. Z9000 Syntax show config Command Modes MULTIPLE SPANNING TREE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 1009
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.
PAGE 1010
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.4.2.1 Support for the optional keyword guard was added on the C-Series, S-Series, and E-Series TeraScale. Version 8.
PAGE 1011
BPDU (Mrecords): sent 7, received 1103 The port is not in the portfast mode Example (EDS and LBK) The bold line shows the loopback BPDU inconsistency (LBK_INC). Dell#show spanning-tree msti 0 brief MSTI 0 VLANs mapped 1-4094 Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 0001.e801.6aa8 Root Bridge hello time 2, max age 20, forward delay 15, max hops 20 Bridge ID Priority 32768, Address 0001.e801.
PAGE 1012
Example (Guard) Field Description Instance MSTP instance. Sts Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS), blocking (BLK), or shut down (EDS Shut). Guard Type Type of STP guard configured (Root, Loop, or BPDU guard).
PAGE 1013
Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.0 Introduced on the E-Series. spanning-tree msti Configure multiple spanning tree instance cost and priority for an interface. Z9000 Syntax Parameters spanning-tree msti instance {cost cost | priority priority} msti instance Enter the keyword msti and the MST instance number. The range is from zero (0) to 63. cost cost (OPTIONAL) Enter the keyword cost then the port cost value.
PAGE 1014
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.5.1.0 Introduced on the E-Series. spanning-tree mstp edge-port Configures the interface as an MST edge port and optionally a Bridge Protocol Data Unit (BPDU) guard.
PAGE 1015
Usage Information Version 8.3.7.1 Introduced on the S4810. Version 8.2.1.0 Introduced the hardware shutdown-on-violation option. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.5.1.0 Introduced on the E-Series. On an MSTP switch, a port configured as an edge port immediately transitions to the Forwarding state. Only configure ports connected to end-hosts as edge ports. Consider an edge port similar to a port with spanning-tree portfast enabled.
PAGE 1016
Usage Information 1016 By default, Dell Networking OS implements an optimized flush mechanism for MSTP. This mechanism helps in flushing the MAC addresses only when necessary (and less often) allowing for faster convergence during topology changes. However, if a standards-based flush mechanism is needed, this knob command can be turned on to enable flushing MAC addresses after receiving every topology change notification.
PAGE 1017
33 Multicast The multicast commands are supported by Dell Networking operating system (OS) on all Z9000 platform. This chapter contains the following sections: • IPv4 Multicast Commands IPv4 Multicast Commands The following section contains the IPv4 multicast commands. clear ip mroute Clear learned multicast routes on the multicast forwarding table. To clear the protocol-independent multicast (PIM) tree information base, use the clear ip pim tib command.
PAGE 1018
Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the C-Series. E-Series legacy command Related Commands show ip pim tib — shows the PIM tree information base. ip mroute Assign a static mroute.
PAGE 1019
distance (OPTIONAL) Enter a number as the distance metric assigned to the mroute. The range is from 0 to 255. Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 1020
Usage Information Version 7.8.1.0 Introduced on the C-Series. Version 7.6.1.0 Introduced on the E-Series. This feature allows you to limit the number of multicast entries on the system. This number is the total of all the multicast entries on all line cards in the system. On each line card, the multicast module only installs the maximum number of entries, depending on the configured CAM profile. To store multicast routes, use the IN-L3-McastFib CAM partition.
PAGE 1021
Related Commands ip pim sparse-mode — enables IGMP and PIM on an interface. show ip mroute View the multicast routing table. Z9000 Syntax Parameters show ip mroute [static | group-address [source-address] | count | snooping [vlan vlan-id] [group-address [source-address]] | summary | vlt [group-address [source-address] | count] static (OPTIONAL) Enter the keyword static to view static multicast routes.
PAGE 1022
Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 9.2. (0.0) Added support for keyword vlt to the Z9000, S4810, and S4820T. Version 8.4.1.
PAGE 1023
Example (VLT) Dell#show ip mroute vlt IP Multicast Routing Table Flags: S – Synced (*, 225.1.1.1), uptime 00:39:33 flags: S Incoming interface: Vlan 10 Spanned outgoing interface list: Vlan 20 (S) Vlan 30 (50.1.1.2, 225.1.1.1), uptime 00:39:33 flags: S Incoming interface: Vlan 10 Spanned outgoing interface list: Vlan 20 (S) Usage Information Example The following describes the show ip mroute command shown in the following example.
PAGE 1024
show ip rpf View reverse path forwarding. Z9000 Syntax show ip rpf Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.
PAGE 1025
debug ipv6 mld_host Enable the collection of debug information for MLD host transactions. Z9000 Syntax [no] debug ipv6 mld_host [int-count | interface type] [slot/ port-range] To discontinue collection of debug information for the MLD host transactions, use the no debug ipv6 mld_host command. Parameters int-count Enter the keyword count to indicate the number of required debug messages.
PAGE 1026
ip multicast-limit To limit the number of multicast entries on the system, use this feature. Z9000 Syntax Parameters ip multicast-limit limit limit Enter the desired maximum number of multicast entries on the system. The S-Series range is from 1 to 2000. Defaults The S-Series default is 400. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1027
Open Shortest Path First (OSPFv2 and OSPFv3) 34 Open Shortest Path First version 2 for IPv4 is supported on Z9000 Dell Networking Operating System (OS) platform. Open Shortest Path First version 3 (OSPFv3) for IPv6 is supported on the Z9000 platform. OSPF is an Interior Gateway Protocol (IGP), which means that it distributes routing information between routers in a single Autonomous System (AS).
PAGE 1028
Defaults cost = 1; no areas are configured. Command Modes ROUTER OSPF Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.
PAGE 1029
no-summary (OPTIONAL) Specify that no summary LSAs should be sent into the NSSA. Defaults Not configured. Command Modes ROUTER OSPF Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.
PAGE 1030
Defaults Not configured. Command Modes ROUTER OSPF Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 1031
Command Modes ROUTER OSPF Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 1032
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Added support for the Multi-Process OSPF. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. clear ip ospf Clear all OSPF routing tables.
PAGE 1033
pre-Version 6.1.1.1 Introduced on the E-Series. clear ip ospf statistics Clear the packet statistics in interfaces and neighbors. Z9000 Syntax Parameters clear ip ospf [process-id] [vrf vrf-name] statistics [interface name {neighbor router-id}] process-id Enter the OSPF Process ID to clear a specific process. If no Process ID is entered, all OSPF processes are cleared. vrf vrf-name Enter the keyword vrf followed by the name of the VRF to clear all OSPF routing tables corresponding to that VRF.
PAGE 1034
Related Commands Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Added support for the Multi-Process OSPF. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. show ip ospf statistics — displays the OSPF statistics. debug ip ospf Display debug information on OSPF.
PAGE 1035
The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.8.0 Added the database-timer rate-limit option for the S4810. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Added support for the Multi-Process OSPF. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series.
PAGE 1036
Field Description • Example 2 - MD5 authentication configured using the ip ospf message-digest-key command auk: If the ip ospf authentication-key command is configured, this field displays the key used. keyid: If the ip ospf message-digest-key command is configured, this field displays the MD5 key to: Displays the interface to which the packet is intended. dst: Displays the destination IP address. netmask: Displays the destination IP address mask.
PAGE 1037
default-information originate To generate a default external route into an OSPF routing domain, configure Dell Networking Operating System (OS). Z9000 Syntax default-information originate [always] [metric metric-value] [metric-type type-value] [route-map map-name] To return to the default values, use the no default-information originate command. Parameters always (OPTIONAL) Enter the keyword always to specify that default route information must always be advertised.
PAGE 1038
pre-Version 6.1.1.1 Related Commands Introduced on the E-Series. redistribute — redistributes routes from other routing protocols into OSPF. default-metric Change the metrics of redistributed routes to a value useful to OSPF. Use this command with the redistribute command. Z9000 Syntax default-metric number To return to the default values, use the no default-metric [number] command. Parameters number Enter a number as the metric. The range is from 1 to 16777214. Defaults Disabled.
PAGE 1039
description Add a description about the selected OSPF configuration. Z9000 Syntax description description To remove the OSPF description, use the no description command. Parameters description Enter a text string description to identify the OSPF configuration (80 characters maximum). Defaults none Command Modes ROUTER OSPF Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1040
Parameters weight Specify an administrative distance. The range is from 1 to 255. The default is 110. ip-address (OPTIONAL) Enter a router ID in the dotted decimal format. If you enter a router ID, include the mask for that router address. mask (OPTIONAL) Enter a mask in dotted decimal format or /n format. access-listname (OPTIONAL) Enter the name of an IP standard access list, up to 140 characters. Defaults 110 Command Modes ROUTER OSPF Command History This guide is platform-specific.
PAGE 1041
Defaults inter-area dist2 (OPTIONAL) Enter the keywords inter-area then a number to specify a distance metric for routes between areas. The range is from 1 to 255. The default is 110. intra-area dist1 (OPTIONAL) Enter the keywords intra-area then a number to specify a distance metric for all routes within an area. The range is from 1 to 255. The default is 110.
PAGE 1042
Parameters prefix-listname Enter the name of a configured prefix list. interface (OPTIONAL) Enter one of the following keywords and slot/ port or number information: • For Port Channel groups, enter the keywords portchannel then a number. For the C-Series and S-Series, the range is from 1 to 128. • For a SONET interface, enter the keyword sonet then the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1043
To remove a filter, use the no distribute-list prefix-list-name out [bgp | connected | isis | rip | static] command. Parameters prefix-listname Enter the name of a configured prefix list. bgp (OPTIONAL) Enter the keyword bgp to specify that BGP routes are distributed. NOTE: BGP and ISIS routes are not available on the CSeries. BGP, ISIS, and RIP routes are not available on the S-Series. connected (OPTIONAL) Enter the keyword connected to specify that connected routes are distributed.
PAGE 1044
Usage Information Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. The distribute-list out command applies to routes autonomous system boundary routers (ASBRs) redistributes into OSPF. It can be applied to external type 2 and external type 1 routes, but not to intra-area and inter-area routes. enable inverse-mask By default, Dell Networking Operating System (OS) allows you to input the OSPF network command with a net-mask.
PAGE 1045
Parameters number Enter the convergence level desired. The higher this parameter is set, the faster OSPF converge takes place. The range is from 1 to 4. Defaults none. Command Modes ROUTER OSPF Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.
PAGE 1046
Defaults Not Configured Command Modes ROUTER OSPF Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.
PAGE 1047
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.12.0 Introduced on the S4810. Version 7.8.1.0 Restart role enabled on the S-Series (Both Helper and Restart roles now supported on S-Series). Added support for Multi-Process OSPF. Version 7.7.1.0 Added Helper-Role support on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series.
PAGE 1048
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.12.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. graceful-restart role Specify the role for your OSPF router during graceful restart. Z9000 Syntax graceful-restart role [helper-only | restart-only] To disable graceful restart role, use the no graceful-restart role command.
PAGE 1049
pre-Version 6.1.1.1 Introduced on the E-Series. ip ospf auth-change-wait-time OSPF provides a grace period while OSPF changes its interface authentication type. During the grace period, OSPF sends out packets with new and old authentication scheme until the grace period expires. Z9000 Syntax ip ospf auth-change-wait-time seconds To return to the default, use the no ip ospf auth-change-wait-time command. Parameters seconds Enter the seconds. The range is from 0 to 300. Defaults zero (0) seconds.
PAGE 1050
Parameters encryptiontype (OPTIONAL) Enter 7 to encrypt the key. key Enter an eight-character string. Strings longer than eight characters are truncated. Defaults Not configured. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.
PAGE 1051
The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. If this command is not configured, cost is based on the auto-cost command.
PAGE 1052
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. Usage Information By default, the dead interval is four times the default hello-interval. Related Commands ip ospf hello-interval — sets the time interval between the hello packets. ip ospf hello-interval Specify the time interval between the hello packets sent on the interface.
PAGE 1053
Usage Information The time interval between the hello packets must be the same for routers in a network. Related Commands ip ospf dead-interval — sets the time interval before a router is declared dead. ip ospf message-digest-key Enable OSPF MD5 authentication and send an OSPF message digest key on the interface. Z9000 Syntax ip ospf message-digest-key keyid md5 key To delete a key, use the no ip ospf message-digest-key keyid command. Parameters keyid Enter a number as the key ID.
PAGE 1054
authenticated with the old key and the second packet authenticated with the new key. This process ensures that the neighbors learn the new key and communication is not disrupted by keeping the old key enabled. After the reply is received and the new key is authenticated, delete the old key. Dell recommends keeping only one key per interface. NOTE: The MD5 secret is stored as plain text in the configuration file with service password encryption. Write down or otherwise record the key.
PAGE 1055
ip ospf network Set the network type for the interface. Z9000 Syntax ip ospf network {broadcast | point-to-point} To return to the default, use the no ip ospf network command. Parameters broadcast Enter the keyword broadcast to designate the interface as part of a broadcast network. point-to-point Enter the keywords point-to-point to designate the interface as part of a point-to-point network. Defaults Broadcast. Command Modes ROUTER OSPF Command History This guide is platform-specific.
PAGE 1056
Parameters number Enter a number as the priority. The range is from 0 to 255. The default is 1. Defaults 1 Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.
PAGE 1057
Defaults 5 seconds Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1058
The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series.
PAGE 1059
maximum-paths Enable the software to forward packets over multiple paths. Z9000 Syntax maximum-paths number To disable packet forwarding over multiple paths, use the no maximum-paths command. Parameters number Specify the number of paths. The range for OSPFv2 is from 1 to 64. The default for OSPFv2 is 4 paths. The range for OSPFv3 is from 1 to 64. The default for OSPFv3 is 8 paths. Defaults 4 Command Modes ROUTER OSPF for OSPFv2 Command History This guide is platform-specific.
PAGE 1060
To disable an OSPF area, use the no network ip-address mask area areaid command. Parameters ip-address Specify a primary or secondary address in dotted decimal format. The primary address is required before adding the secondary address. mask Enter a network mask in /prefix format. (/x) area-id Enter the OSPF area ID as either a decimal value or in a valid IP address. Decimal value range is from 0 to 65535. IP address format is dotted decimal format A.B.C.D.
PAGE 1061
passive-interface Suppress both receiving and sending routing updates on an interface. Z9000 Syntax passive-interface {default | interface} To enable both the receiving and sending routing, use the no passiveinterface interface command. To return all OSPF interfaces (current and future) to active, use the no passiveinterface default command. Parameters default Enter the keyword default to make all OSPF interfaces (current and future) passive.
PAGE 1062
Usage Information Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Modified to include the keyword default. pre-Version 6.1.1.1 Introduced on the E-Series. Although the passive interface does not send or receive routing updates, the network on that interface is still included in OSPF updates sent using other interfaces. The default keyword sets all interfaces as passive.
PAGE 1063
On configuring suppression using the passive-interface command, the state of the OSPF neighbor does not change to INIT; instead, the state of the OSPF neighbor changes to DOWN after the dead-timer expires. redistribute Redistribute information from another routing protocol throughout the OSPF process.
PAGE 1064
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Added support for Multi-Process OSPF.
PAGE 1065
• 2 = for OSPF External type 2 route-map map-name (OPTIONAL) Enter the keywords route-map then the name of the route map. tag tag-value (OPTIONAL) Enter the keyword tag to set the tag for routes redistributed into OSPF. The range is from 0 to 4294967295. Defaults none Command Modes ROUTER OSPF Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1066
level-1 (OPTIONAL) Enter the keywords level-1 to redistribute only IS-IS Level-1 routes. level-1-2 (OPTIONAL) Enter the keywords level-1-2 to redistribute both IS-IS Level-1 and Level-2 routes. level-2 (OPTIONAL) Enter the keywords level-2 to redistribute only IS-IS Level-2 routes. metric metricvalue (OPTIONAL) Enter the keyword metric then a number. The range is from 0 (zero) to 4294967295.
PAGE 1067
router-id To configure a fixed router ID, use this command. Z9000 Syntax router-id ip-address To remove the fixed router ID, use the no router-id ip-address command. Parameters ip-address Enter the router ID in the IP address format. Defaults none. Command Modes ROUTER OSPF Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1068
n]: Dell# router ospf To configure an OSPF instance, enter ROUTER OSPF mode. Z9000 Syntax router ospf process-id To clear an OSPF instance, use the no router ospf process-id command. Parameters process-id Enter a number for the OSPF instance. The range is from 1 to 65535. Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1069
show config Display the non-default values in the current OSPF configuration. Z9000 Syntax show config Command Modes ROUTER OSPF Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.
PAGE 1070
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.8.0 Added output for LSA throttling timers. Version 8.3.7.0 Introduced on the S4810.
PAGE 1071
vrf Supports only single TOS (TOS0) routes SPF schedule delay 5 secs, Hold time between two SPFs 10 secs Convergence Level 0 Min LSA origination 0 msec, Min LSA arrival 1000 msec Min LSA hold time 5000 msec, Max LSA wait time 5000 msec Number of area in this router is 1, normal 1 stub 0 nssa 0 Area BACKBONE (0) Number of interface in this area is 1 SPF algorithm executed 205 times Area ranges are Dell# Related Commands show ip ospf database — displays information about the OSPF routes configured.
PAGE 1072
Usage Information Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series and E-Series. To isolate problems with external routes, use this command. In OSPF, external routes are calculated by adding the LSA cost to the cost of reaching the ASBR router. If an external route does not have the correct cost, use this command to determine if the path to the originating router is correct. The display output is not sorted in any order.
PAGE 1073
Usage Information Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Added support of Multi-Process OSPF. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. The following describes the show ip ospf process-id database command shown in the following example. Field Description Link ID Identifies the router ID.
PAGE 1074
13.1.1.0 13.1.2.0 172.16.1.0 Dell> Related Commands 13.1.1.1 13.1.1.1 13.1.1.1 1192 0x8000006b 0x2718 1184 0x8000006b 0x1c22 148 0x8000006d 0x533b 0 0 0 show ip ospf database asbr-summary — displays only ASBR summary LSA information. show ip ospf database asbr-summary Display information about autonomous system (AS) boundary LSAs.
PAGE 1075
Usage Information Example Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. The following describes the show ip ospf database asbr-summary command shown in the following example. Field Description LS Age Displays the LSA’s age. Options Displays the optional capabilities available on router.
PAGE 1076
LS age: 473 Options: (No TOS-capability, No DC, E) LS type: Summary Asbr Link State ID: 104.1.50.1 Advertising Router: 1.1.1.10 LS Seq Number: 0x80000010 Checksum: 0x4198 Length: 28 --More-Related Commands show ip ospf database — displays OSPF database information. show ip ospf database external Display information on the AS external (type 5) LSAs.
PAGE 1077
Usage Information Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Added support for Multi-Process OSPF. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. The following describes the show ip ospf process-id database external command shown in the following example. Field Description LS Age Displays the LSA’s age.
PAGE 1078
Example Field Description External Route Tag Displays the 32-bit field attached to each external route. The OSPF protocol does not use this field, but you can use the field for external route management. Dell#show ip ospf 1 database external OSPF Router with ID (20.20.20.5) (Process ID 1) Type-5 AS External LS age: 612 Options: (No TOS-capability, No DC, E) LS type: Type-5 AS External Link State ID: 12.12.12.2 Advertising Router: 20.31.3.
PAGE 1079
link-state-id adv-router ipaddress (OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following: • the network’s IP address for Type 3 LSAs or Type 5 LSAs • the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs • the default destination (0.0.0.0) for Type 5 LSAs (OPTIONAL) Enter the keywords adv-router and the ipaddress to display only the LSA information about that router.
PAGE 1080
Field Example Description • DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits. • E or No E is displayed on whether the originating router can accept AS External LSAs. LS Type Displays the LSA’s type. Link State ID Displays the Link State ID. Advertising Router Identifies the router ID of the LSA’s originating router. Checksum Identifies the link state sequence number. This number enables you to identify old or duplicate LSAs.
PAGE 1081
show ip ospf database nssa-external Display NSSA-External (type 7) LSA information. Z9000 Syntax Parameters show ip ospf [process-id] database nssa-external [link-stateid] [adv-router ip-address] process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 1082
Related Commands show ip ospf database — displays OSPF database information. show ip ospf database opaque-area Display the opaque-area (type 10) LSA information. Z9000 Syntax Parameters show ip ospf [process-id] database opaque-area [link-state-id] [adv-router ip-address] process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 1083
pre-Version 6.1.1.1 Usage Information Example Introduced on the E-Series. The following describes the show ip ospf process-id database opaquearea command shown in the following example. Item Description LS Age Displays the LSA’s age. Options Displays the optional capabilities available on router. The following options can be found in this item: • TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
PAGE 1084
Advertising Router: 10.16.1.160 LS Seq Number: 0x80000002 Checksum: 0x19c2 --More-Related Commands show ip ospf database — displays OSPF database information. show ip ospf database opaque-as Display the opaque-as (type 11) LSA information. Syntax Parameters show ip ospf process-id database opaque-as [link-state-id] [adv-router ip-address] process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
PAGE 1085
Related Commands Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. show ip ospf database — displays OSPF database information. show ip ospf database opaque-link Display the opaque-link (type 9) LSA information. Z9000 Syntax Parameters show ip ospf [process-id] database opaque-link [link-state-id] [adv-router ip-address] process-id Enter the OSPF Process ID to show a specific process.
PAGE 1086
Related Commands Version 7.8.1.0 Added support for Multi-Process OSPF. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. show ip ospf database — displays OSPF database information. show ip ospf database router Display the router (type 1) LSA information.
PAGE 1087
Usage Information Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Added support for Multi-Process OSPF. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. The following describes the show ip ospf process-id database router command shown in the following example. Item Description LS Age Displays the LSA age. Options Displays the optional capabilities available on router.
PAGE 1088
Example Dell#show ip ospf 100 database router OSPF Router with ID (1.1.1.10) (Process ID 100) Router (Area 0) LS age: 967 Options: (No TOS-capability, No DC, E) LS type: Router Link State ID: 1.1.1.10 Advertising Router: 1.1.1.10 LS Seq Number: 0x8000012f Checksum: 0x3357 Length: 144 AS Boundary Router Area Border Router Number of Links: 10 Link connected to: a Transit Network (Link ID) Designated Router address: 192.68.129.1 (Link Data) Router Interface address: 192.68.129.
PAGE 1089
show ip ospf database summary Display the network summary (type 3) LSA routing information. Z9000 Syntax Parameters show ip ospf [process-id] database summary [link-state-id] [adv-router ip-address] process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 1090
Usage Information Example The following describes the show ip ospf process-id database summary command shown in the following example. Item Description LS Age Displays the LSA age. Options Displays the optional capabilities available on router. The following options can be found in this item: • TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
PAGE 1091
LS Seq Number: 0x80000016 Checksum: 0x987c Length: 28 Network Mask: /24 TOS: 0 Metric: 1 LS age: 7 Options: (No TOS-capability, No DC, E) LS type: Summary Network Link State ID: 192.68.33.0 Advertising Router: 1.1.1.10 LS Seq Number: 0x80000016 Checksum: 0x1241 Length: 28 Network Mask: /26 TOS: 0 Metric: 1 Dell# Related Commands show ip ospf database — displays OSPF database information. show ip ospf interface Display the OSPF interfaces configured.
PAGE 1092
• Command History EXEC Privilege This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information 1092 Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 1093
Example Item Description Neighbor Count... This line displays the number of neighbors and adjacent neighbors. Listed below this line are the details about each adjacent neighbor. Dell>show ip ospf int GigabitEthernet 13/17 is up, line protocol is up Internet Address 192.168.1.2/30, Area 0.0.0.1 Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 192.168.253.2, Interface address 192.168.1.
PAGE 1094
Parameters process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Example Version 9.0.2.0 Introduced on the S6000..
PAGE 1095
show ip ospf routes Display routes OSPF calculates and stores in OSPF RIB. Z9000 Syntax Parameters show ip ospf [process-id] routes process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. Defaults none Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1096
NOTE: Starting with Version 9.4(0.0), the loopback IP address advertised to the neighbor is not displayed in the output because they are not accounted as inactive OSPF routes, whereas the loopback IP address is displayed until Dell Networking OS Version 9.3(0.0). Starting with Version 9.4(0.0), the show ip ospf routes command displays the interface and area ID information of connected networks in addition to the other settings, whereas these details are not displayed until Dell Networking OS Version 9.3(0.
PAGE 1097
• neighbor router-id For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. (OPTIONAL) Enter the keyword neighbor then the neighbor’s router-id in dotted decimal format (A.B.C.D.). Defaults none Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1098
Row Heading Description Tx-Mark The highest number mark in the transmission queue. Rx-Mark The highest number mark in the reception queue. Hello-Q The queue, for transmission or reception, for the hello packets. LSR-Q The queue, for transmission or reception, for the link state request packets. Other-Q The queue, for transmission or reception, for the link state acknowledgement, database description, and update packets.
PAGE 1099
Example Dell#show ip ospf 1 statistics global OSPF Packet Count Total Error Hello DDiscr LSReq LSUpd LSAck RX 10 0 8 2 0 0 0 TX 10 0 10 0 0 0 0 OSPF Global Queue Length TxQ-Len RxQ-Len Hello-Q 0 0 LSR-Q 0 0 Other-Q 0 0 Tx-Mark 0 0 0 Rx-Mark 2 0 0 Error packets (Only for RX) Intf-Down Wrong-Len Auth-Err Version No-Buffer Q-OverFlow 0 0 0 0 0 0 Non-Dr Invld-Nbr MD5-Err AreaMis Seq-No Unkown-Pkt 0 0 0 0 0 0 Self-Org 0 Nbr-State 0 Chksum 0 Conf-Issues 0 Socket 0 Error packets (Only for TX) Socket Error
PAGE 1100
Dell(conf-if-te-0/6)# Related Commands clear ip ospf statistics — clears the packet statistics in all interfaces and neighbors. show ip ospf timers rate-limit Show the LSA currently in the queue waiting for timers to expire. Z9000 Syntax Parameters show ip ospf [process-id] timers rate-limit process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
PAGE 1101
show ip ospf topology Display routers in directly connected areas. Z9000 Syntax Parameters show ip ospf [process-id] topology process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. Defaults none Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1102
summary-address To advertise one external route, set the OSPF ASBR. Z9000 Syntax summary-address ip-address mask [not-advertise] [tag tag-value] To disable summary address, use the no summary-address ip-address mask command. Parameters ip-address Specify the IP address in dotted decimal format of the address to summarize. mask Specify the mask in dotted decimal format of the address to summarize.
PAGE 1103
With the not-advertise parameter configured, you can use this command to filter out some external routes. For example, if you want to redistribute static routes to OSPF, but you don't want OSPF to advertise routes with prefix 1.1.0.0, you can configure the summary-address 1.1.0.0 255.255.0.0 not-advertise to filter out all the routes fall in range 1.1.0.0/16. Related Commands area range — summarizes routes within an area.
PAGE 1104
pre-Version 6.1.1.1 Usage Information Introduced on the E-Series. Setting the delay and holdtime parameters to a low number enables the switch to an alternate path quickly but requires more CPU usage. timers throttle lsa all Configure LSA transmit intervals. Z9000 Syntax timers throttle lsa all {start-interval | hold-interval | maxinterval} To return to the default, use the no timers throttle lsa command.
PAGE 1105
Usage Information LSAs are sent after the start-interval and then after hold-interval until the maximum interval is reached. In throttling, exponential backoff is used when sending same LSA, so that the interval is multiplied until the maximum time is reached. For example, if the start-interval 5000 and hold-interval 1000 and max-interval 100,000, the LSA is sent at 5000 msec, then 1000 msec, then 2000 msec, them 4000 until 100,000 msec is reached.
PAGE 1106
area authentication Configure an IPsec authentication policy for OSPFv3 packets in an OFSPFv3 area. Z-Series Syntax Parameters area area-id authentication ipsec spi number {MD5 | SHA1} [keyencryption-type] key area area-id Area for which OSPFv3 traffic is to be authenticated. For area-id, you can enter a number. The range is from 0 to 4294967295. ipsec spi number Security Policy index (SPI) value that identifies an IPsec security policy. The range is from 256 to 4294967295.
PAGE 1107
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.4.2.0 Introduced on the E-Series TeraScale. Before you enable IPsec authentication on an OSPFv3 area, you must first enable OSPFv3 globally on the router. Configure the same authentication policy (same SPI and key) on each interface in an OSPFv3 link. An SPI number must be unique to one IPsec security policy (authentication or encryption) on the router.
PAGE 1108
esp encryptionalgorithm Encryption algorithm used with ESP. Valid values are: 3DES, DES, AES-CBC, and NULL. For AES-CBC, only the AES-128 and AES-192 ciphers are supported. keyencryptionalgorithm (OPTIONAL) Specifies if the key is encrypted. key Text string used in encryption. Valid values: 0 (key is not encrypted) or 7 (key is encrypted).
PAGE 1109
Usage Information Version 9.1. (0.0) Introduced on the S4810 and Z9000. Version 8.4.2.0 Introduced on the E-Series TeraScale. Version 8.3.19.0 Introduced on the S4820T. Before you enable IPsec encryption on an OSPFv3 interface, first enable OSPFv3 globally on the router. Configure the same encryption policy (same SPI and keys) on each interface in an OSPFv3 link. An SPI value must be unique to one IPsec security policy (authentication or encryption) on the router.
PAGE 1110
Version 9.1. (0.0) Introduced on the S4810 and Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 7.8.1.0 Added support for C-Series. Version 7.4.1.0 Introduced on the E-Series. debug ipv6 ospf bfd Display debug information and interface types for bidirectional forwarding detection (BFD) on OSPF IPv6 packets.
PAGE 1111
Example Lines Beginning With or Including Description OSPFv3... Debugging is on for all OSPFv3 packets and all interfaces. 05:21:01 Displays the time stamp. Sending Ver:3 Sending OSPF3 version..
PAGE 1112
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a Port Channel interface, enter the keyword portchannel then a number. The range is 1 to 128. • For a tunnel interface, enter the keyword tunnel then a number. The range is 1 to 16383. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. Command Modes EXEC Privilege Command History This guide is platform-specific.
PAGE 1113
Lines Beginning With or Including Description • 2 - database description • 3 - link state request • 4 - link state update • 5 - link state acknowledgement • 7 - external LSA • 8 - link-state advertisement (OSPFv3) • 9 - link local LSA (OSPFv2), Intra-Area-Prefix LSA (OSPFv3) • 11 - grace LSA (OSPFv3) Length: Displays the packet length. Router ID: Displays the OSPF3 router ID. Area ID: Displays the Area ID. Chksum: Displays the OSPF3 checksum.
PAGE 1114
Command Modes ROUTER OSPFv3 Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.1. (0.0) Introduced on the S4810 and Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 7.8.1.0 Added support for C-Series. Version 7.4.1.0 Introduced on the E-Series.
PAGE 1115
Version 8.3.19.0 Usage Information Introduced on the S4820T. By default, OSPFv3 graceful restart is disabled and functions only in a helper role to help restarting neighbor routers in their graceful restarts when it receives a Grace LSA. To enable OSPFv3 graceful restart, enter the ipv6 router ospf command to enter OSPFv3 configuration mode and then configure a grace period using the gracefulrestart grace-period command.
PAGE 1116
Version 8.3.19.0 Usage Information Introduced on the S4820T. OSPFv3 graceful restart supports planned-only and/or unplanned-only restarts. The default is support for both planned and unplanned restarts. • A planned restart occurs when you enter the redundancy force-failover rpm command to force the primary RPM to switch to the backup RPM. During a planned restart, OSPF sends out a Type-11 Grace LSA before the system switches over to the backup RPM.
PAGE 1117
ipv6 ospf authentication Configure an IPsec authentication policy for OSPFv3 packets on an IPv6 interface. Z-Series Syntax Parameters ipv6 ospf authentication {null | ipsec spi number {MD5 | SHA1} [key-encryption-type] key}} null Causes an authentication policy configured for the area to not be inherited on the interface. ipsec spi number Security Policy index (SPI) value that identifies an IPsec security policy. The range is from 256 to 4294967295.
PAGE 1118
An SPI value must be unique to one IPsec security policy (authentication or encryption) on the router. Configure the same authentication policy (same SPI and key) on each OSPFv3 interface in a link. To remove an IPsec authentication policy from an interface, enter the no ipv6 ospf authentication spi number command. To remove null authentication on an interface to allow the interface to inherit the authentication policy configured for the OSPFv3 area, enter the no ipv6 ospf authentication null command.
PAGE 1119
• Passive — The passive system does not initiate a session. It only responds to a request for session initialization from the active system. The default is Active. Defaults See Parameters Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2.0.
PAGE 1120
Usage Information Version 9.1. (0.0) Introduced on the S4810 and Z9000. Version 7.8.1.0 Added support for C-Series. Version 7.4.1.0 Introduced on the E-Series. Version 8.3.19.0 Introduced on the S4820T.
PAGE 1121
Version 7.4.1.0 Introduced on the E-Series. Version 8.3.19.0 Introduced on the S4820T. Usage Information By default, the dead interval is four times longer than the default hello-interval. Related Commands ipv6 ospf hello-interval – specifies the time interval between hello packets. ipv6 ospf encryption Configure an IPsec encryption policy for OSPFv3 packets on an IPv6 interface.
PAGE 1122
keyencryptiontype (OPTIONAL) Specifies if the authentication key is encrypted. key Text string used in authentication. Valid values: 0 (key is not encrypted) or 7 (key is encrypted). For MD5 authentication, the key must be 32 hex digits (nonencrypted) or 64 hex digits (encrypted). For SHA-1 authentication, the key must be 40 hex digits (non-encrypted) or 80 hex digits (encrypted). Defaults Not configured. Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 1123
show crypto ipsec sa ipv6 – displays the security associations set up for OSPFv3 interfaces in encryption policies. ipv6 ospf graceful-restart helper-reject Configure an OSPFv3 interface to not act upon the Grace LSAs that it receives from a restarting OSPFv3 neighbor. Z-Series Syntax ipv6 ospf graceful-restart helper-reject To disable the helper-reject role, enter no ipv6 ospf graceful-restart helper-reject. Defaults The helper-reject role is not configured.
PAGE 1124
To return to the default time interval, enter no ipv6 ospf hello—interval. Parameters seconds Enter the time interval in seconds as the time between hello packets. The range is from 1 to 65525 seconds. Defaults 10 seconds (Ethernet). Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1125
Command History Usage Information Version 9.1. (0.0) Introduced on the S4810 and Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 7.8.1.0 Added support for the C-Series. Version 7.4.1.0 Introduced on the E-Series. Setting a priority of 0 makes the router ineligible for election as a Designated Router or Backup Designated Router. Use this command for interfaces connected to multi-access networks, not pointto-point networks. ipv6 router ospf Enable OSPF for IPv6 router configuration.
PAGE 1126
maximum-paths Enable the software to forward packets over multiple paths. Z9000 Syntax maximum-paths number To disable packet forwarding over multiple paths, use the no maximum-paths command. Parameters number Defaults 8 Command Modes ROUTER OSPF Command History Specify the number of paths. The range is from 1 to 64. The default is 8 paths. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 1127
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. Defaults Enabled, that is sending of routing updates are enabled by default. Command Modes ROUTER OSPF for OSPFv2 ROUTER OSPFv3 for OSPFv3 Command History Usage Information Version 9.1. (0.
PAGE 1128
Parameters bgp as number Enter the keyword bgp then the autonomous system number. The range is from 1 to 65535. connected Enter the keyword connected to redistribute routes from physically connected interfaces. static Enter the keyword static to redistribute manually configured routes. metric metricvalue Enter the keyword metric then the metric value. The range is from 0 to 16777214. The default is 20.
PAGE 1129
Version 9.1. (0.0) Introduced support for OSPFv3 on the S4810 and Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 7.8.1.0 Added support for the C-Series. Version 7.4.1.0 Introduced on the E-Series. Usage Information To redistribute the default route (x:x:x:x::x), use the default-information originate command. Related Commands default-information originate – configures default external route into OSPFv3. router-id Designate a fixed router ID.
PAGE 1130
Usage Information You can configure an arbitrary value in the IP address for each router. However, each router ID must be unique. If this command is used on an OSPFv3 process that is already active (has neighbors), all the neighbor adjacencies are brought down immediately and new sessions are initiated with the new router ID. Related Commands clear ipv6 ospf process – resets an OSPFv3 router process. show crypto ipsec policy Display the configuration of IPsec authentication and encryption policies.
PAGE 1131
Example Dell#show crypto ipsec policy Crypto IPSec client security policy data Policy name : OSPFv3-1-502 Policy refcount : 1 Inbound ESP SPI : 502 (0x1F6) Outbound ESP SPI : 502 (0x1F6) Inbound ESP Auth Key : 123456789a123456789b123456789c12 Outbound ESP Auth Key : 123456789a123456789b123456789c12 Inbound ESP Cipher Key : 123456789a123456789b123456789c123456789d12345678 Outbound ESP Cipher Key : 123456789a123456789b123456789c123456789d12345678 Transform set : esp-3des esp-md5-hmac Crypto IPSec client secu
PAGE 1132
Transform set The set of security protocols and algorithms used in the policy. Inbound AH SPI The authentication header (AH) security policy index (SPI) for inbound and outbound links. Outbound AH SPI Inbound AH Key The AH key for inbound and outbound links. Outbound AH Key show crypto ipsec sa ipv6 Display the IPsec security associations (SAs) used on OSPFv3 interfaces.
PAGE 1133
Version 8.3.19.0 Introduced on the S4820T. Usage Information The show crypto ipsec sa ipv6 command output displays security associations set up for OSPFv3 links in IPsec authentication and encryption policies on the router. Related Commands show crypto ipsec policy – displays the configuration of IPsec authentication and encryption policies.
PAGE 1134
show crypto ipsec sa ipv6 Command Fields Field Description Interface IPv6 interface Link local address IPv6 address of interface IPSecv6 policy name Name of the IPsec security policy applied to the interface. inbound/outbound ah Authentication policy applied to inbound or outbound traffic. inbound/outbound esp Encryption policy applied to inbound or outbound traffic. spi Security policy index number used to identify the policy.
PAGE 1135
Command History Version 9.1. (0.0) Added support for OSPFv3 on the S4810 and Z9000. Version 8.4.2.2 Added support for the display of graceful restart parameters and Type-11 Grace LSAs on E-Series TeraScale routers. Version 8.3.19.0 Introduced on the S4820T. Version 7.8.1.0 Added support for C-Series. Usage Information The show crypto ipsec sa ipv6 command output displays security associations set up for OSPFv3 links in IPsec authentication and encryption policies on the router.
PAGE 1136
Inter Area Pfx LSA Count 1 Inter Area Rtr LSA Count 0 Group Mem LSA Count 0 Type-7 LSA count 0 Intra Area Pfx LSA Count 2 Intra Area TE LSA Count 2 Area 1 database summary Type Count/Status Brd Rtr Count 1 AS Bdr Rtr Count 1 LSA count 8 Rtr LSA Count 1 Net LSA Count 0 Inter Area Pfx LSA Count 5 Inter Area Rtr LSA Count 0 Group Mem LSA Count 0 Type-7 LSA count 0 Intra Area Pfx LSA Count 2 Intra Area TE LSA Count 2 E1200-T2C2#sh ipv6 ospf neighbor Neighbor ID ID Interface 63.114.8.
PAGE 1137
Command History Usage Information Version 9.2. (0.0) Added support for showing BFD status on the S4820T, S4810, and Z9000. Version 9.1. (0.0) Added support for OSPFv3 on the S4810 and Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 7.8.1.0 Added support for the C-Series. Version 7.4.1.0 Introduced on the E-Series. If you enable BFD at the global level, show ipv6 ospf interface shows the BFD provisioning.
PAGE 1138
Defaults none Command Modes EXEC • For a Port Channel interface, enter the keywords portchannel then a number. For the C-Series, Z-Series, and S4810, the range is 1 to 128. • For a VLAN, enter the keyword vlan then the VLAN ID. The range is 1 to 4094. EXEC Privilege Command History Example Version 9.1. (0.0) Introduced support for OSPFv3 on the S4810 and Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 7.8.1.0 Added support for the C-Series. Version 7.4.1.
PAGE 1139
Policy-based Routing (PBR) 35 Policy-based routing (PBR) allows you to apply routing policies to specific interfaces. To enable PBR, create a redirect list and apply it to the interface. After the redirect list is applied to the interface, all traffic passing through the interface is subject to the rules defined in the redirect list. PBR is supported by the Dell Networking Operating System (OS). The commands in this chapter are supported on the Z9000 platform.
PAGE 1140
Related Commands ip redirect-list – enables an IP Redirect List. ip redirect-group Apply a redirect list (policy-based routing) on an interface. You can apply multiple redirect lists to an interface by entering this command multiple times. Z9000 Syntax ip redirect-group redirect-list-name To remove a redirect list from an interface, use the no ip redirect-group name command. Parameters redirect-listname Enter the name of a configured redirect list.
PAGE 1141
• show ip redirect-list – displays the redirect-list configuration. ip redirect-list Configure a redirect list and enter REDIRECT-LIST mode. Z9000 Syntax ip redirect-list redirect-list-name To remove a redirect list, use the no ip redirect-list command. Parameters redirect-listname Defaults none Command Modes CONFIGURATION Command History Enter the name of a redirect list. Version 9.4.0.0 Introduced on the Z9000. Version 8.4.2.1 Introduced on the C-Series and S-Series. Version 8.4.2.
PAGE 1142
Parameters ip-protocolnumber Enter a number from 0 to 255 for the protocol identified in the IP protocol header. protocol-type Enter one of the following keywords as the protocol type: ip for any internet protocol • tcp for transmission control protocol • udp for user datagram protocol Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x). any Enter the keyword any to specify that all traffic is subject to the filter.
PAGE 1143
Version 8.4.2.1 Introduced on the C-Series and S-Series. Version 8.4.2.0 Introduced on the E-Series TeraScale. Version 7.5.1.0 Introduced on the E-Series ExaScale. redirect Configure a rule for the redirect list.
PAGE 1144
source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x). any Enter the keyword any to specify that all traffic is subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address. destination Enter the IP address of the network or host to which the packets are sent. operator (OPTIONAL) For TCP and UDP parameters only.
PAGE 1145
Parameters sequencenumber Enter a number from 1 to 65535. permit Enter the keyword permit assign the sequence to the permit list. redirect Enter the keyword redirect to assign the sequence to the redirect list. ip-address Enter the IP address of the forwarding router. ip-protocolnumber Enter the keyword ip-protocol-number then the number from 0 to 255 for the protocol identified in the IP protocol header.
PAGE 1146
• source port Enter the keywords source-port then the port number to be matched in the ACL rule in the ICAP rule destinationport Enter the keywords destination-port then the port number to be matched in the ACL rule in the ICAP rule. source-portrange Enter the keywords Source-port-range then the range of the start port to end port to be matched in the ACL rule in the ICAP rule.
PAGE 1147
Command History Version 9.4. (0.0) Added support for removing SONET interface on the S6000, S4810, S4820T and Z9000 platforms. Version 7.4.1.0 Introduced. Usage Information The show cam pbr command displays the PBR CAM content.
PAGE 1148
Command Modes Command History Example • EXEC • EXEC Privilege Version 9.4. (0.0) Added support for removing SONET interface on the S6000, S4810, S4820T and Z9000 platforms. Dell#show ip redirect-list IP redirect-list ecmp: Defined as: seq 5 redirect 100.1.1.
PAGE 1149
PIM-Sparse Mode (PIM-SM) 36 The protocol-independent multicast (PIM) commands are supported by the Dell Networking operating software on the Z-Series platform. IPv4 PIM-Sparse Mode Commands The following describes the IPv4 PIM-sparse mode (PIM-SM) commands. clear ip pim rp-mapping The bootstrap router (BSR) feature uses this command to remove all or particular rendezvous point (RP) advertisement.
PAGE 1150
clear ip pim tib Clear PIM tree information from the PIM database. Z9000 Syntax Parameters clear ip pim tib [group] group (OPTIONAL) Enter the multicast group address in dotted decimal format (A.B.C.D). Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 1151
To disable PIM debugging, use the no debug ip pim command or use the undebug all to disable all debugging command. Parameters bsr (OPTIONAL) Enter the keyword bsr to view PIM Candidate RP/BSR activities. events (OPTIONAL) Enter the keyword group to view PIM messages for a specific group. group (OPTIONAL) Enter the keyword group to view PIM messages for a specific group. packet [in | out] (OPTIONAL) Enter the keyword packet to view PIM packets.
PAGE 1152
Version 7.8.1.0 Introduced on the S-Series. ip pim bsr-border Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per interface. Z9000 Syntax ip pim bsr-border To return to the default value, use the no ip pim bsr-border command. Defaults Disabled. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1153
• For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. hash-masklength (OPTIONAL) Enter the hash mask length. The range is from zero (0) to 32. The default is 30. priority (OPTIONAL) Enter the priority used in Bootstrap election process. The range is from zero (0) to 255.
PAGE 1154
Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.
PAGE 1155
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.8.1.0 Introduced on the C-Series for the port-channels and the SSeries. Version 7.7.1.0 Introduced on the E-Series. Example Dell(conf)# ip access-list extended iptv-channels Dell(config-ext-nacl)# permit ip 10.1.2.3/24 225.1.1.
PAGE 1156
Example Dell(conf)# ip access-list standard map1 Dell(config-std-nacl)# permit 224.0.0.1/24 Dell(config-std-nacl)#exit Dell(conf)#int gig 1/1 Dell(config-if-gi-1/1)# ip pim ingress-interface-map map1 ip pim neighbor-filter To prevent a router from participating in protocol independent multicast (PIM), configure this feature. Z9000 Syntax ip pim neighbor-filter {access-list} To remove the restriction, use the no ip pim neighbor-filter {accesslist} command.
PAGE 1157
ip pim query-interval Change the frequency of PIM Router-Query messages. Z9000 Syntax ip pim query-interval seconds To return to the default value, use the no ip pim query-interval seconds command. Parameters seconds Enter a number as the number of seconds between router query messages. The range is from 0 to 65535. The default is 30 seconds. Defaults 30 seconds Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 1158
Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810.
PAGE 1159
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.
PAGE 1160
priority (OPTIONAL) Enter the priority used in Bootstrap election process. The range is zero (0) to 255. The default is 192. Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.
PAGE 1161
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.8.1.0 Introduced on the C-Series for the port-channels and the SSeries. The interface must be enabled (the no shutdown command) and not have the switchport command configured. Multicast must also be enabled globally (using the ip multicast-lag-hashing command).
PAGE 1162
Usage Information Version 7.8.1.0 Introduced on the C-Series for the port-channels and the SSeries. Version 7.7.1.1 Introduced This command configures an expiration timer for all S.G entries, unless they are assigned to an Extended ACL. ip pim spt-threshold To switch to the shortest path tree when the traffic reaches the specified threshold value, configure the PIM router. Syntax ip pim spt-threshold value | infinity To return to the default value, use the no ip pim spt-threshold command.
PAGE 1163
no ip pim snooping dr-flood Disable the flooding of multicast packets to the PIM designated router. Syntax no ip pim snooping dr-flood To re-enable the flooding of multicast packets to the PIM designated router, use the ip pim snooping dr-flood command. Defaults Enabled. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1164
show ip pim bsr-router View information on the Bootstrap router. Z9000 Syntax show ip pim bsr-router Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.
PAGE 1165
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.0 Introduced on the E-Series ExaScale.
PAGE 1166
172.21.110.1 172.21.203.1 Gi 13/6 Gi 13/7 v2/S 0 v2/S 0 30 1 30 1 172.21.110.1 172.21.203.1 show ip pim neighbor View PIM neighbors. Z9000 Syntax show ip pim neighbor Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.
PAGE 1167
Field Example Description • 1 = default Designated Router priority (use the ip pim dr-priority command) • DR = Designated Router • S = Sparse mode Dell#show ip pim neighbor Neighbor Interface Uptime/Expires Ver Address 127.87.3.4 Gi 7/16 09:44:58/00:01:24 v2 Dell# DR Prio/Mode 1 / S show ip pim rp View all multicast groups-to-RP mappings.
PAGE 1168
224.2.217.146 224.3.3.3 225.1.2.1 225.1.2.2 229.1.2.1 229.1.2.2 Dell# Example (Mapping) 165.87.20.4 165.87.20.4 165.87.20.4 165.87.20.4 165.87.20.4 165.87.20.4 Dell#sh ip pim rp mapping Group(s): 224.0.0.0/4 RP: 165.87.20.4, v2 Info source: 165.87.20.5, via bootstrap, priority 0 Uptime: 00:03:11, expires: 00:02:46 RP: 165.87.20.3, v2 Info source: 165.87.20.5, via bootstrap, priority 0 Uptime: 00:03:11, expires: 00:03:03 Dell# Example (Address) Dell#sh ip pim rp 229.1.2.1 Group RP 229.1.2.1 165.87.20.
PAGE 1169
Usage Information Example (#2) The following describes the show ip pim snooping interface commands shown in the following example. Field Description Interface Displays the VLAN interfaces with PIM-SM snooping enabled. Ver/Mode Displays the PIM version number for each VLAN interface with PIM-SM snooping enabled: • v2 = PIM version 2 • S = PIM Sparse mode Nbr Count Displays the number of neighbors learned through PIM-SM snooping on the interface.
PAGE 1170
Usage Information Version 8.3.12.0 Introduced on the S4810. Version 8.4.1.1 Introduced on the E-Series ExaScale. The following describes the show ip pim snooping neighbor commands shown in the following example. Field Description Neighbor address Displays the IP address of the neighbor learned through PIM-SM snooping. Interface Displays the VLAN ID number and slot/port on which the PIM-SM-enabled neighbor was discovered.
PAGE 1171
group-address (OPTIONAL) Enter the group address in dotted decimal format (A.B.C.D) to display TIB information PIM-SM snooping discovered for a specified multicast group. source-address (OPTIONAL) Enter the source address in dotted decimal format (A.B.C.D) to display TIB information PIM-SM snooping discovered for a specified multicast source. Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific.
PAGE 1172
Field Description • Example K=acknowledge pending state Incoming interface Displays the reverse path forwarding (RPF) interface towards the RP/ source. RPF neighbor Displays the next hop from this interface towards the RP/ source.
PAGE 1173
• Command History EXEC Privilege This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.4.1.1 Support for the display of PIM-SM snooping status was added on E-Series ExaScale.
PAGE 1174
Memory usage: TIB Nexthop cache Interface table Neighbor table RP Mapping : : : : : 3768 bytes 0 bytes 992 bytes 528 bytes 0 bytes show ip pim tib View the PIM tree information base (TIB). Z9000 Syntax Parameters show ip pim tib [group-address [source-address]] group-address (OPTIONAL) Enter the group address in dotted decimal format (A.B.C.D). source-address (OPTIONAL) Enter the source address in dotted decimal format (A.B.C.D).
PAGE 1175
Example Field Description expires Displays the amount of time until the entry expires and is removed from the database. RP Displays the IP address of the RP/source for this entry.
PAGE 1176
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2 Outgoing interface list: GigabitEthernet 8/0 (*, 226.1.1.3), uptime 00:18:08, expires 00:00:52, RP 10.211.2.1, flags: SCJ Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2 Outgoing interface list: GigabitEthernet 8/0 (*, 226.1.1.4), uptime 00:18:08, expires 00:00:52, RP 10.211.2.1, flags: SCJ Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.
PAGE 1177
ipv6 pim bsr-border Invoke IPv6 PIM debugging. Syntax debug ipv6 pim [bsr | events | group group | packet | register [group] | state | | timer [assert | hello | joinprune | register]] To disable IPv6 PIM debugging, use the no debug ipv6 pim command. Parameters bsr (OPTIONAL) Enter the keyword bsr to invoke debugging of IPv6 PIM Candidate RP/BSR activities. events (OPTIONAL) Enter the keyword events to invoke debugging of IPv6 PIM events.
PAGE 1178
Version 8.3.12.0 Introduced on the S4810. Version 7.4.1.0 Introduced ipv6 pim bsr-candidate Configure the router as a bootstrap (BSR) candidate. Syntax ipv6 pim bsr-candidate interface [hash-mask-length] [priority] To disable the bootstrap candidate, use the no ipv6 pim bsr-candidate command. Parameters interface Enter the following keywords and slot/port or number information: • For a Loopback interface, enter the keyword loopback then a number from 0 to 16383.
PAGE 1179
ipv6 pim dr-priority Change the designated router (DR) priority for the IPv6 interface. Syntax ipv6 pim dr-priority priority-value To remove the DR priority value assigned, use the no ipv6 pim dr-priority command. Parameters priority-value Enter a number. Preference is given to larger/higher number. The range is from 0 to 4294967294. The default is 1. Defaults 1 Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 1180
Defaults none Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 7.3.1.
PAGE 1181
Version 8.3.1.0 Usage Information Introduced Do not enter this command before creating the access-list. ipv6 pim query-interval Change the frequency of IPv6 PIM router-query messages. Syntax ipv6 pim query-interval seconds To return to the default value, use the no ipv6 pim query-interval seconds command. Parameters seconds Enter a number as the number of seconds between router query messages. The range is from 0 to 65535. The default is 30 seconds.
PAGE 1182
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 8.3.1.
PAGE 1183
Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 7.4.1.0 Introduced The RP addresses are stored in the order in which they are entered.
PAGE 1184
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 7.4.1.0 Introduced ipv6 pim sparse-mode Enable IPv6 PIM sparse mode on the interface.
PAGE 1185
ipv6 pim spt-threshold Specifies when a PIM leaf router should join the shortest path tree. Syntax ipv6 pim spt-threshold {kbps | infinity} To return to the default value, use the no ipv6 pim spt-threshold command. Parameters kbps Enter a traffic rate in kilobytes per second. The range is from 0 to 4294967 kbps. The default is 10 kbps. infinity Enter the keyword infinity to have all sources for the specified group use the shared tree and never join shortest path tree (SPT).
PAGE 1186
The following is a list of the Dell Networking OS version history for this command. Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 7.4.1.
PAGE 1187
DR : this router Dell# show ipv6 pim neighbor Displays IPv6 PIM neighbor information. Syntax Parameters show ipv6 pim neighbor [detail] detail (OPTIONAL) Enter the keyword detail to displayed PIM neighbor detailed information. Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1188
NOTE: The :: notation specifies successive hexadecimal fields of zero. Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 7.4.1.
PAGE 1189
NOTE: The :: notation specifies successive hexadecimal fields of zero. Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.12.0 Introduced on the S4810. Version 7.4.1.
PAGE 1190
37 Port Monitoring The port monitoring feature allows you to monitor network traffic by forwarding a copy of each incoming or outgoing packet from one port to another port. The commands in this chapter are supported on the Z9000 platform. Important Points to Remember • Port monitoring is supported on physical ports and logical interfaces, such as Port Channels and virtual local area networks (VLANs). • The monitoring (destination, “MG”) and monitored (source, “MD”) ports must be on the same switch.
PAGE 1191
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.1.1.
PAGE 1192
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.4(0.0) Added support for the rpm/erpm option on the Z9000. Version 9.0.2.0 Introduced on the S6000. Version 9.0.2.0 Introduced on the MXL. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.
PAGE 1193
Example Version 8.3.7.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.7.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced on the E-Series.
PAGE 1194
Example Related Commands Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.7.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced on the E-Series.
PAGE 1195
The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.7.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced on the E-Series.
PAGE 1196
• For a VLAN interface enter the keyword VLAN followed by a number from 1 to 4094. • For a port channel interface, enter the keyword portchannel followed by the port-channel id . range Enter the keyword range to specify the list of interfaces. destination Enter the keyword destination to specify the destination interface. interface direction {rx | tx | both} • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1197
Example Port Monitoring Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.1.1.0 Introduced on the E-Series ExaScale. Version 7.7.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced on the E-Series.
PAGE 1198
Private VLAN (PVLAN) 38 The private VLAN (PVLAN) feature of the Dell Networking operating software is supported on the Z9000 platforms. Private VLANs extend the Dell Networking OS security suite by providing Layer 2 isolation between ports within the same private VLAN. A private VLAN partitions a traditional VLAN into subdomains identified by a primary and secondary VLAN pair. The Dell Networking OS private VLAN implementation is based on RFC 3069. For more information, refer to the following commands.
PAGE 1199
Port Types: • Community port: A community port is a port that belongs to a community VLAN and is allowed to communicate with other ports in the same community VLAN and with promiscuous ports. • Isolated port: An isolated port is a port that, in Layer 2, can only communicate with promiscuous ports that are in the same PVLAN. • Promiscuous port: A promiscuous port is a port that is allowed to communicate with any other port type.
PAGE 1200
Related Commands Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the C-Series and S-Series. private-vlan mode — sets the mode of the selected VLAN to community, isolated, or primary. private-vlan mapping secondary-vlan — maps secondary VLANs to the selected primary VLAN. show arp — displays the ARP table. switchport mode private-vlan — sets PVLAN mode of the selected port.
PAGE 1201
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the C-Series and S-Series. The VLAN: • can be in only one mode, either community, isolated, or primary. • mode ode to community or isolated even before associating it to a primary VLAN. This secondary VLAN continues to work normally as a normal VLAN even though it is not associated to a primary VLAN.
PAGE 1202
Command Modes INTERFACE VLAN Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 1203
Defaults Disabled. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 1204
Per-VLAN Spanning Tree Plus (PVST+) 39 The Dell Networking operating software implementation of per-VLAN spanning tree plus (PVST+) is based on the IEEE 802.1w standard spanning tree protocol. Dell Networking OS supports PVST+ on the Z9000 platform. NOTE: For easier command line entry, the plus (+) sign is not used at the command line. description Enter a description of the PVST+. Z9000 Syntax description {description} To remove the description, use the no description {description} command.
PAGE 1205
Related Commands protocol spanning-tree pvst — enter SPANNING TREE mode on the switch. disable Disable PVST+ globally. Z9000 Syntax disable To enable PVST+, use the no disable command. Defaults Disabled. Command Modes CONFIGURATION (conf-pvst) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 1206
extend system-id To augment the Bridge ID with a VLAN ID so that PVST+ differentiate between BPDUs for each VLAN, use extend system ID. If the VLAN receives a BPDU meant for another VLAN, PVST+ does not detect a loop, and both ports can remain in Forwarding state. Z9000 Syntax extend system-id Defaults Disabled Command Modes PROTOCOL PVST Command History This guide is platform-specific.
PAGE 1207
protocol spanning-tree pvst To enable PVST+ on a device, enter the PVST+ mode. Z9000 Syntax protocol spanning-tree pvst To disable PVST+, use the disable command. Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000.
PAGE 1208
show spanning-tree pvst View the Per-VLAN spanning tree configuration. Z9000 Syntax Parameters show spanning-tree pvst [vlan vlan-id] [brief] [guard] vlan vlan-id (OPTIONAL) Enter the keyword vlan then the VLAN ID. The range is 1 to 4094. brief (OPTIONAL) Enter the keyword brief to view a synopsis of the PVST+ configuration information.
PAGE 1209
Usage Information Example (Brief) Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.4.1.0 Expanded to display port error disable state (EDS) caused by loopback BPDU inconsistency and Port VLAN ID inconsistency. Version 6.2.1.1 Introduced. The following describes the show spanning-tree pvst command shown in the following examples. Field Description Interface Name PVST interface. Instance PVST instance.
PAGE 1210
Number of topology changes 3, last change occured 00:57:00 Port 130 (GigabitEthernet 1/0) is designated Forwarding Port path cost 20000, Port priority 128, Port Identifier 128.130 Designated root has priority 4096, address 0001.e805.e3:06 Designated bridge has priority 4096, address 0001.e805.e3:06 Designated port id is 128.
PAGE 1211
Edge port:no (default) port guard :none (default) Link type: point-to-point (auto) bpdu filter:disable (default) Bpdu guard :disable (default) Bpdus sent 1, received 0 Interface Designated Name PortID Prio Cost Sts Cost Bridge ID PortID --------------------------------------------------------Gi 1/0 128.1223 128 20000 EDS 0 32768 0001.e800.a12b 128.
PAGE 1212
vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094. cost number Enter the keyword cost then the port cost value. The range is from 1 to 200000. Defaults: • 100 Mb/s Ethernet interface = 200000. • 1-Gigabit Ethernet interface = 20000. • 10-Gigabit Ethernet interface = 2000. • Port Channel interface with one 100 Mb/s Ethernet = 200000. • Port Channel interface with one 1 Gigabit Ethernet = 20000. • Port Channel interface with one 10 Gigabit Ethernet = 2000.
PAGE 1213
Usage Information Version 8.2.1.0 Introduced the hardware shutdown-on-violation option. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Added the optional Bridge Port Data Unit (BPDU) guard. Version 6.2.1.1 Introduced. The BPDU guard option prevents the port from participating in an active STP topology in case a BPDU appears on a port unintentionally, or is misconfigured, or is subject to a DOS attack.
PAGE 1214
Related Commands show spanning-tree pvst — views the PVST+ configuration. spanning-tree pvst err-disable Place ports in an Err-Disabled state if they receive a PVST+ BPDU when they are members an untagged VLAN. Z9000 Syntax spanning-tree pvst err-disable cause invalid-pvst-bpdu Defaults Enabled; ports are placed in the Err-Disabled state if they receive a PVST+ BPDU when they are members of an untagged VLAN. Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 1215
tc-flush-standard Enable the MAC address flushing after receiving every topology change notification. Z-Series Syntax tc-flush-standard To disable, use the no tc-flush-standard command. Defaults Disabled. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 1216
Parameters vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094. bridge-priority value Enter the keywords bridge-priority then the bridge priority value in increments of 4096. The range is from 0 to 61440. The default is 32768. Defaults 32768 Command Modes CONFIGURATION (conf-pvst) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1217
Parameters vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094. forward-delay seconds Enter the keywords forward-delay then the time interval, in seconds, that Dell Networking OS waits before transitioning PVST+ to the forwarding state. The range is from 4 to 30 seconds. The default is 15 seconds. Defaults 15 seconds Command Modes CONFIGURATION (conf-pvst) Command History This guide is platform-specific.
PAGE 1218
Parameters vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094. hello-time seconds Enter the keywords hello-time then the time interval, in seconds, between transmission of BPDUs. The range is from 1 to 10 seconds. The default is 2 seconds. Defaults 2 seconds Command Modes CONFIGURATION (conf-pvst) Command History This guide is platform-specific.
PAGE 1219
Parameters vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094. max-age seconds Enter the keywords max-age then the time interval, in seconds, that Dell Networking OS waits before refreshing configuration information. The range is from 6 to 40 seconds. The default is 20 seconds. Defaults 20 seconds Command Modes CONFIGURATION (conf-pvst) Command History This guide is platform-specific.
PAGE 1220
40 Quality of Service (QoS) The Dell Networking operating software commands for quality of service (QoS) include traffic conditioning and congestion control. QoS commands are not universally supported on all Dell Networking Products.Z9000 platform. This chapter contains the following sections: • Global Configuration Commands • Per-Port QoS Commands • Policy-Based QoS Commands Global Configuration Commands There is only one global configuration QoS command.
PAGE 1221
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Introduced. Per-Port QoS Commands Per-port QoS (port-based QoS) allows you to define the QoS configuration on a per-physical-port basis. dot1p-priority Assign a value to the IEEE 802.1p bits on the traffic this interface receives. Z9000 Syntax dot1p-priority priority-value To delete the IEEE 802.1p configuration on the interface, use the no dot1ppriority command.
PAGE 1222
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. The dot1p-priority command changes the priority of incoming traffic on the interface. The system places traffic marked with a priority in the correct queue and processes that traffic according to its queue.
PAGE 1223
The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Added the kbps option on the C-Series, E-Series, and SSeries. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series.
PAGE 1224
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.
PAGE 1225
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.1 Introduced on the S4810. Version 8.2.1.0 Introduced on the C-Series and S-Series. Guarantee a minimum bandwidth to different queues globally using the serviceclass bandwidth-weight command from CONFIGURATION mode. The command is applied in the same way as the bandwidth-weight command in an output QoS policy.
PAGE 1226
Related Commands show qos dot1p-queue-mapping — displays the dot1p priority to queue mapping on the switch. service-class dynamic dot1p Honor all 802.1p markings on incoming switched traffic on an interface (from INTERFACE mode) or on all interfaces (from CONFIGURATION mode). A CONFIGURATION mode entry supersedes an INTERFACE mode entry. Z9000 Syntax service-class dynamic dot1p To return to the default setting, use the no service-class dynamic dot1p command.
PAGE 1227
strict-priority queue Configure a unicast queue as a strict-priority (SP) queue. Z-Series Syntax Parameters strict-priority queue unicast number unicast number Enter the keyword unicast then the queue number. The range is from 1 to 7. Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1228
bandwidth-percentage Assign a percentage of weight to the class/queue. Z9000 Syntax bandwidth-percentage percentage To remove the bandwidth percentage, use the no bandwidth-percentage command. Parameters percentage Enter the percentage assignment of bandwidth to the class/ queue. The range is from 1 to 100% (granularity 1%). Defaults none Command Modes CONFIGURATION (conf-qos-policy-out) Command History This guide is platform-specific.
PAGE 1229
Parameters match-all Determines how packets are evaluated when multiple match criteria exist. Enter the keywords match-all to determine that the packets must meet all the match criteria in order to be a member of the class. match-any Determines how packets are evaluated when multiple match criteria exist. Enter the keywords match-any to determine that the packets must meet at least one of the match criteria in order to be a member of the class.
PAGE 1230
match ip access-group — configures the match criteria based on the access control list (ACL). match ip precedence — identifies the IP precedence values as match criteria. match ip dscp — configures the match criteria based on the DSCP value. match mac access-group — configures a match criterion for a class map based on the contents of the designated MAC ACL. match mac dot1p — configures a match criterion for a class map based on a dot1p value.
PAGE 1231
Related Commands Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.1 Introduced on the E-Series. show qos statistics — displays the QoS statistics. description Add a description to the selected policy map or QoS policy. Z9000 Syntax description {description} To remove the description, use the no description {description} command.
PAGE 1232
wred-profile — creates a WRED profile. match ip access-group Configure match criteria for a class map, based on the access control list (ACL). NOTE: IPv6 class-maps and IP-any class-maps do not match. This condition is true for IPv6 and IPany class-maps on both ACLs as well as VLANs.
PAGE 1233
Related Commands class-map — identifies the class map. match ip dscp Use a differentiated services code point (DSCP) value as a match criteria. Z9000 Syntax match {ip | ipv6 | ip-any} dscp dscp-list [set-ip-dscp value] To remove a DSCP value as a match criteria, use the no match {ip | ipv6 | ip-any} dscp dscp-list [[multicast] set-ip-dscp value] command. Parameters ip Enter the keyword ip to support IPv4 traffic. ipv6 Enter the keyword ipv6 to support IPv6 traffic.
PAGE 1234
The match ip dscp and match ip precedence commands are mutually exclusive. Up to 64 IP DSCP values can be matched in one match statement. For example, to indicate IP DCSP values 0 1 2 3 4 5 6 7, enter either the match ip dscp 0,1,2,3,4,5,6,7 or match ip dscp 0-7 command. NOTE: Only one of the IP DSCP values must be a successful match criterion, not all of the specified IP DSCP values must match. Related Commands class-map — identifies the class map.
PAGE 1235
Usage Information Version 9.2(1.0) Introduced on the Z9500. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria. The match ip precedence command and the match ip dscp command are mutually exclusive.
PAGE 1236
Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Available on the C-Series and S-Series. Version 7.5.1.0 Added support for the DSCP Marking option. pre-Version 7.4.1.0 Introduced. Usage Information To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria. Related Commands class-map — identifies the class map. match mac dot1p Configure a match criterion for a class map based on a dot1p value.
PAGE 1237
match mac vlan Configure a match criterion for a class map based on VLAN ID. Z9000 Syntax Parameters match mac vlan number number Enter the VLAN ID. The range is from 1 to 4094. Defaults none Command Modes CLASS-MAP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.
PAGE 1238
Defaults none Command Modes CONFIGURATION (policy-map-input and policy-map-output) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. This command is supported on S-Series, S6000 and S4810 under policy-mapinput mode only. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 1239
Defaults Layer 3 Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810.
PAGE 1240
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.
PAGE 1241
Defaults Layer 3 Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810.
PAGE 1242
The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Policy name character limit increased from 16 to 32. Version 7.6.1.0 Introduced on the C-Series and S-Series. pre-Version 6.1.1.1 Introduced on the E-Series.
PAGE 1243
wred-profile name (OPTIONAL) Enter the keywords wred-profile then your WRED profile name in character format (16 character maximum). Or use one of the pre-defined WRED profile names. Pre-defined Profiles: wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_g. multicastbandwidth percentage (OPTIONAL) Enter the keywords multicast-bandwidth then the bandwidth percentage. The range is from 0 to 100%. Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 1244
bandwidth configured is adjusted according to the bandwidth available after reserving for multicast bandwidth. queue ingress Assign a WRED Curve to all eight ingress Multicast queues or designate the percentage for the Multicast bandwidth queue. Syntax queue ingress multicast {linecard slot number port-set number | all} [wred-profile name] To return to the default, use the no queue ingress multicast {linecard slot number port-set number | all} [wred-profile name] command.
PAGE 1245
NOTE: The multicast-bandwidth option is not supported on queue ingress. If you attempt to use the multicast-bandwidth option, the following reject error message is generated: % Error:Bandwidth-percent is not allowed for ingress multicast. rate-police Specify the policing functionality on incoming traffic. Z9000 Syntax Parameters rate-police [kbps] committed-rate [burst-KB] [peak [kbps] peakrate [burst-KB]] kbps Enter the keyword kbps to specify the rate limit in Kilobits per second (Kbps).
PAGE 1246
Related Commands rate police — specifies traffic policing on the selected interface. qos-policy-input — creates a QoS output policy. rate-shape Shape traffic output as part of the designated policy. Z9000 Syntax Parameters rate-shape [kbps] rate [burst-KB] kbps Enter the keyword kbps to specify the rate limit in Kilobits per second (Kbps). Make the following value a multiple of 64. The range is from 0 to 40000000. The default granularity is Megabits per second (Mbps).
PAGE 1247
To remove the input policy map from the interface, use the no service-policy input policy-map-name [layer2] command. Parameters policy-mapname Enter the name for the policy map in character format (32 characters maximum). You can identify an existing policy map or name one that does not yet exist. layer2 (OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map. The default is Layer 3. Defaults Layer 3 Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 1248
Parameters policy-mapname Enter the name for the policy map in character format (32 characters maximum). You can identify an existing policy map or name one that does not yet exist. Defaults none Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.
PAGE 1249
qos-policy qos-policyname (OPTIONAL) Enter the keywords qos-policy then the QoS policy name assigned to the queue in text format (16 characters maximum). This specifies the input QoS policy assigned to the queue under policy-map-input and output QoS policy under policy-map-output context. Defaults none Command Modes CONFIGURATION (conf-policy-map-in and conf-policy-map-out) Command History This guide is platform-specific.
PAGE 1250
Command Modes CONFIGURATION (conf-qos-policy-in) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810.
PAGE 1251
Related Commands class-map — identifies the class map. show qos dot1p-queue-mapping Displays the dot1p priority to queue mapping on the switch. Syntax Defaults show qos dot1p-queue-mapping • dot1p Priority: 0 1 2 3 4 5 6 7 • Queue: 2 0 1 3 4 5 6 7 Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1252
detail interface To view a policy map interface in detail, enter the keyword detail and optionally one of the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Defaults none Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific.
PAGE 1253
5 6 7 Dell# Example (Summary IPv4) c5 c6 c7 q6 q7 Dell#sho qos policy-map summary Interface policy-map-input policy-map-output Gi 4/1 PM1 Gi 4/2 PM2 PMOut Dell# show qos policy-map-input View the input QoS policy map details. Z9000 Syntax Parameters show qos policy-map-input [policy-map-name] [class class-mapname] [qos-policy-input qos-policy-name] policy-mapname Enter the policy map name. class classmap-name Enter the keyword class then the class map name.
PAGE 1254
pre-Version 6.1.1.1 Example Introduced on the E-Series. Dell#show qos policy-map-input Policy-map-input PolicyMapInput Aggregate Qos-policy-name AggPolicyIn Queue# Class-map-name Qos-policy-name 0 ClassMap1 qosPolicyInput Dell# show qos policy-map-output View the output QoS policy map details. Z9000 Syntax Parameters Defaults Command Modes Command History show qos policy-map-output [policy-map-name] [qos-policy-output qos-policy-name] policy-mapname Enter the policy map name.
PAGE 1255
Aggregate Qos-policy-name AggPolicyOut Queue# Qos-policy-name 0 qosPolicyOutput Dell# show qos qos-policy-input View the input QoS policy details. Z9000 Syntax Parameters show qos qos-policy-input [qos-policy-name] qos-policyname Enter the QoS policy name. Defaults none Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1256
show qos qos-policy-output View the output QoS policy details. Z9000 Syntax Parameters show qos qos-policy-output [qos-policy-name] qos-policyname Enter the QoS policy name. Defaults none Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.
PAGE 1257
Parameters wred-profile interface interface Enter the keywords wred-profile and optionally one of the following keywords and slot/port or number information: • For a 40–Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a ten-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1258
• Command History EXEC Privilege This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810.
PAGE 1259
Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1260
Field Description Status (Allowed ports) Indicates if the input policy map configuration on an interface belonging to a stack-unit/port-pipe is successful — Allowed (n) — or not successful — Exception. The allowed number (n) indicates the number of ports in that port-pipe on which the Policy Map can be applied successfully. NOTE: In a Layer 2 Policy Map, IPv4/IPv6 rules are not allowed; therefore, the output contains only L2ACL CAM partition entries.
PAGE 1261
Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1262
Command Modes CONFIGURATION (config-wred) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.8.0 Introduced on the S4810. pre-Version 6.1.1.
PAGE 1263
The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Added fallback to the E-Series. Version 8.2.1.0 Added dot1p to the C-Series and S-Series. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.
PAGE 1264
DSCP/CP hex Range (XXX) DSCP Definition Traditional IP Precedenc e S6000 Internal Queue ID S-Series Internal Queue ID DSCP/CP Decimal 000XXX BE (Best Effort) Best Effort 0 0 0–15 wred Designate the WRED profile to yellow or green traffic. Z-Series Syntax wred {yellow | green} profile-name To remove the WRED drop precedence, use the no wred {yellow | green} [profilename] command. Parameters yellow | green Enter the keyword yellow for yellow traffic.
PAGE 1265
Version 8.2.1.0 Profile name character limit increased from 16 to 32. pre-Version 6.1.1.1 Introduced on the .E-Series Usage Information To assign drop precedence to green or yellow traffic, use this command. If there is no honoring enabled on the input, all the traffic defaults to green drop precedence. Related Commands wred-profile — creates a WRED profile and name that profile. trust — defines the dynamic classification to trust DSCP.
PAGE 1266
• If neither endpoint is ECN-capable, the packet may be dropped based on the WRED drop probability. This behavior is the identical treatment that a packet receives when WRED is enabled without ECN configured on the router. When you enable wred ecn, and the number of packets in the queue is above the maximum threshold, packets are dropped based on the drop probability. This behavior is the identical treatment a packet receives when WRED is enabled without ECN configured on the router.
PAGE 1267
pre-Version 6.1.1.1 Introduced on the E-Series Usage Information Use the default pre-defined profiles or configure your own profile. You cannot delete the pre-defined profiles or their default values. This command enables WRED configuration mode —(conf-wred). Related Commands threshold — specifies the minimum and maximum threshold values of the WRED profile.
PAGE 1268
Command Modes Command History Usage Information CONFIGURATION mode Version 9.3.0.0 Introduced on the S6000 and Z9000 platforms You can configure only service pools 0 and 1 because the Dell Networking OS uses only these two service pools. The pool, service0, is used for lossy queues and the pool, service1, is used for lossless (PFC) queues in all the platforms.
PAGE 1269
backplane Specify that the ECN marking configured for each queue applies to backplane ports Default By default, ECN marking is disabled on all queues. Command Modes CONFIGURATION mode Command History Usage Information Example Version 9.3.0.0 Introduced on the S6000 and Z9000 platforms You can add or remove ECN marking configuration on a list of queues on all backplane ports. All of the configured attributes apply to all the backplane ports and are for each queue.
PAGE 1270
string] || [queue3 number/string] || [queue4 number/string] || [queue5 number/string] || [queue6 number/string] || [queue7 number/string]}{backplane} Parameters service-class Define the mapping between the service class and policybased QoS or routing wred Specify WRED curve parameters for a queue green Specify green (low) drop precedence to a queue weight Specify a weight factor to a queue yellow Specify yellow (medium) drop precedence to a queue queue 0 to queue 7 Specify the queue number to wh
PAGE 1271
Dell(conf) #service-class wred weight queue0 11 queue6 4 queue7 9 backplane service-class wred ecn Create a service class and assign ECN marking for different queues on backplane ports to the service class. This functionality can be configured on the Z9000 platforms.
PAGE 1272
• Example If the network is experiencing congestion, the packet is transmitted. No further marking is required. When you enable wred-ecn, and the number of packets in the queue is above the maximum threshold, packets are dropped based on the drop probability. This behavior is the identical treatment a packet receives when WRED is enabled without ECN configured on the router.
PAGE 1273
Version 9.5.0.0 Usage Information Introduced on the Z9000, S6000, S4820T, S4810, and MXL. If the specified color-map does not exist, the Diffserv Manager (DSM) creates a color map and sets all the DSCP values to green (low drop precedence). The default setting for each DSCP value (0-63) is green (low drop precedence). This command allows setting the number of specific DSCP values to yellow or red. Important Points to Remember • All DSCP values that are not specified as yellow or red are colored green.
PAGE 1274
Usage Information A color map outlines the codepoint mappings to the appropriate color mapping (green, yellow, red) for the traffic. The system uses this information use to handle the traffic on the interface based on the traffic priority and places it into the appropriate shaping queue. You cannot delete a DSCP color map when it is configured on an interface. If you do, all the DSCP values are set to green (low drop precedence).
PAGE 1275
Related Commands dscp— sets the number of specific DSCP values for color map profile to yellow or red. qos dscp-color-map— configures the DSCP color map. show qos dscp-color-policy Display DSCP color policy configuration for one or all interfaces. Syntax Parameters show qos dscp-color-policy {summary [interface] | detail {interface}} summary Enter the summary keyword to display summary information about a color policy on one or more interfaces.
PAGE 1276
Dell# show qos dscp-color-policy detail te 0/10 Interface TenGigabitEthernet 0/10 Dscp-color-map mapONE yellow 4,7 red 20,30 Related Commands — Displays DSCP color maps show qos dscp-color-map show qos dscp-color-map Display the DSCP color map for one or all interfaces. Syntax Parameters show qos dscp-color-map map-name map-name Enter the name of the color map. Defaults None Command Modes EXEC Command History This guide is platform-specific.
PAGE 1277
Routing Information Protocol (RIP) 41 Routing information protocol (RIP) is a distance vector routing protocol. The Dell Networking operating software supports both RIP version 1 (RIPv1) and RIP version 2 (RIPv2) on the Z9000 platform. The Dell Networking OS implementation of RIP is based on IETF RFCs 2453 and RFC 1058. For more information about configuring RIP, refer to the Dell Networking OS Configuration Guide.
PAGE 1278
clear ip rip Update all the RIP routes in the Dell Networking OS routing table. Z9000 Syntax clear ip rip Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.
PAGE 1279
• For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. database (OPTIONAL) Enter the keyword database to display messages when there is a change to the RIP database.
PAGE 1280
To return to the default values, use the no default-information originate command. Parameters always (OPTIONAL) Enter the keyword always to enable the switch software to always advertise the default route. metric metricvalue (OPTIONAL) Enter the keyword metric then a number as the metric value. The range is from 1 to 16. The default is 1. route-map map-name (OPTIONAL) Enter the keywords route-map then the name of a configured route-map. Defaults Disabled. Metric: 1.
PAGE 1281
Parameters number Specify a number. The range is from 1 to 16. The default is 1. Defaults 1 Command Modes ROUTER RIP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000.
PAGE 1282
Command Modes ROUTER RIP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 1283
Defaults weight = 120 Command Modes ROUTER RIP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 1284
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. Defaults Not configured. Command Modes ROUTER RIP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.
PAGE 1285
interface (OPTIONAL) Identifies the interface type slot/port as one of the following: • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/ port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1286
ip poison-reverse Set the prefix of the RIP routing updates to the RIP infinity value. Z9000 Syntax ip poison-reverse To disable poison reverse, use the no ip poison-reverse command. Defaults Disabled. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 1287
2 (OPTIONAL) Enter the number 2 for RIP version 2. Defaults RIPv1 and RIPv2 Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.
PAGE 1288
Defaults RIPv1 Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 1289
Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.6.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. ip poison-reverse — sets the prefix for RIP routing updates. maximum-paths Set RIP to forward packets over multiple paths.
PAGE 1290
Usage Information Version 7.6.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. RIP supports a maximum of 16 ECMP paths. neighbor Define a neighbor router with which to exchange RIP information. Z9000 Syntax neighbor ip-address To delete a neighbor setting, use the no neighbor ip-address command. Parameters ip-address Enter the IP address, in dotted decimal format, of a router with which to exchange information. Defaults Not configured.
PAGE 1291
To ensure that only specific interfaces are receiving and sending data, use the passive-interface command with the neighbor command. Related Commands passive-interface — sets the interface to only listen to RIP broadcasts. network Enable RIP for a specified network. To enable RIP on all networks connected to the switch, use this command. Z9000 Syntax network ip-address To disable RIP for a network, use the no network ip-address command.
PAGE 1292
offset-list Specify a number to add to the incoming or outgoing route metrics learned using RIP. Z9000 Syntax offset-list prefix-list-name {in | out} offset [interface] To delete an offset list, use the no offset-list prefix-list-name {in | out} offset [interface] command. Parameters prefix-listname Enter the name of an established Prefix list to determine which incoming routes are modified.
PAGE 1293
Version 7.8.1.0 Introduced on the S-Series. Version 7.6.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. Usage Information When the offset metric is applied to an interface, that value takes precedence over an offset value that is not extended to an interface. Related Commands ip prefix-list — enters PREFIX-LIST mode and configure a prefix list. output-delay Set the interpacket delay of successive packets to the same neighbor.
PAGE 1294
Usage Information This command is intended for low-speed interfaces. passive-interface Suppress routing updates on a specified interface. Z9000 Syntax passive-interface interface To delete a passive interface, use the no passive-interface interface command. Parameters interface Enter the following information: • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128.
PAGE 1295
Version 7.6.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. Usage Information Although the passive interface does not send or receive routing updates, the network on that interface still includes in RIP updates sent using other interfaces. Related Commands neighbor — enables RIP for a specified network. network — defines a neighbor. redistribute Redistribute information from other routing instances.
PAGE 1296
pre-Version 6.2.1.1 Introduced on the E-Series. Usage Information To redistribute the default route (0.0.0.0/0), configure the default-information originate command. Related Commands default-information originate — generates a default route for RIP traffic. redistribute isis Redistribute routing information from an IS-IS instance.
PAGE 1297
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. pre-Version 6.2.1.1 Introduced on the E-Series. redistribute ospf Redistribute routing information from an OSPF process.
PAGE 1298
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.6.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. router rip To configure and enable RIP, enter ROUTER RIP mode. Z9000 Syntax router rip To disable RIP, use the no router rip command. Defaults Disabled. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 1299
Related Commands network — enables RIP. exit — returns to CONFIGURATION mode. show config Display the changes you made to the RIP configuration. The default values are not shown. Z9000 Syntax show config Command Modes ROUTER RIP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.
PAGE 1300
show ip rip database Display the routes that RIP learns. If the switch learned no RIP routes, no output is generated. Z9000 Syntax Parameters show ip rip database [ip-address mask] ip-address (OPTIONAL) Specify an IP address in dotted decimal format to view RIP information on that network only. If you enter an IP address, also enter a mask for that IP address. mask (OPTIONAL) Specify a mask, in /network format, for the IP address.
PAGE 1301
Example Dell#show ip rip database Total number of routes in RIP database: 1624 204.250.54.0/24 [50/1] via 192.14.1.3, 00:00:12, GigabitEthernet 9/15 204.250.54.0/24 auto-summary 203.250.49.0/24 [50/1] via 192.13.1.3, 00:00:12, GigabitEthernet 9/14 203.250.49.0/24 auto-summary 210.250.40.0/24 [50/2] via 1.1.18.2, 00:00:14, Vlan 18 [50/2] via 1.1.130.2, 00:00:12, Port-channel 30 210.250.40.0/24 auto-summary 207.250.53.0/24 [50/2] via 1.1.120.2, 00:00:55, Port-channel 20 [50/2] via 1.1.130.
PAGE 1302
Example show running-config rip ! router rip distribute-list Test1 in distribute-list Test21 out network 10.0.0.0 passive-interface GigabitEthernet 2/0 neighbor 20.20.20.20 redistribute ospf 999 version 2 timers basic Manipulate the RIP timers for routing updates, invalid, holddown times, and flush time. Z9000 Syntax timers basic update invalid holddown flush To return to the default settings, use the no timers basic command.
PAGE 1303
Command Modes ROUTER RIP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.
PAGE 1304
Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the S-Series. Version 7.6.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. ip rip receive version — sets the RIP version the interface receives. ip rip send version — sets the RIP version the interface sends.
PAGE 1305
Remote Monitoring (RMON) 42 The Dell Networking operating software remote monitoring (RMON) is implemented on the Z9000 platform. Dell Networking OS RMON is based on IEEE standards, providing both 32-bit and 64-bit monitoring and long-term statistics collection.
PAGE 1306
variable Enter the MIB object to monitor. The variable must be in the SNMP OID format; for example, 1.3.6.1.2.1.1.3. The object type must be a 32-bit integer. interval Time, in seconds, the alarm monitors the MIB variables; this is the alarmSampleType in the RMON alarm table. The range is from 5 to 3600 seconds. delta Enter the keyword delta to test the change between MIB variables. This is the alarmSampleType in the RMON alarm table.
PAGE 1307
Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.1.1.0 Introduced on the E-Series. rmon collection history Enable the RMON MIB history group of statistics collection on an interface. Z9000 Syntax rmon collection history {controlEntry integer} [owner name] [buckets number] [interval seconds] To remove a specified RMON history group of statistics collection, use the no rmon collection history {controlEntry integer} command.
PAGE 1308
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.1.1.0 Introduced on the E-Series. rmon collection statistics Enable RMON MIB statistics collection on an interface. Z9000 Syntax rmon collection statistics {controlEntry integer} [owner name] To remove RMON MIB statistics collection on an interface, use the no rmon collection statistics {controlEntry integer} command.
PAGE 1309
Version 6.1.1.0 Introduced on the E-Series. rmon event Add an event in the RMON event table. Z9000 Syntax rmon event number [log] [trap community] [description string] [owner name] To disable RMON on an interface, use the no rmon event number [log] [trap community] [description string] command. Parameters number Assign an event number in integer format from 1 to 65535. The number value must be unique in the RMON event table. log (OPTIONAL) Enter the keyword log to generate an RMON log entry.
PAGE 1310
Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.1.1.0 Introduced on the E-Series. rmon hc-alarm Set an alarm on any MIB object. Z9000 Syntax rmon hc-alarm number variable interval {delta | absolute} rising-threshold value event-number falling-threshold value event-number [owner string] To disable the alarm, use the no rmon hc-alarm number command. Parameters 1310 number Enter the alarm integer number from 1 to 65535.
PAGE 1311
If there is no corresponding falling-threshold event, the value is zero. owner string (OPTIONAL) Enter the keyword owner then the owner name to specify an owner for the alarm. This is the alarmOwner object in the alarmTable of the RMON MIB. Defaults owner Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1312
Example Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.1.1.0 Introduced on the E-Series. Dell# show rmon RMON status total memory used 218840 bytes.
PAGE 1313
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.1.1.0 Introduced on the E-Series. Example (Index) Dell#show rmon alarm 1 RMON alarm entry 1 sample Interval: 5 object: 1.3.6.1.2.1.1.3 sample type: absolute value. value: 255161 alarm type: rising or falling alarm.
PAGE 1314
show rmon events Display the contents of the RMON event table. Z9000 Syntax Parameters show rmon events [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON event table in an easy-to-read format. Defaults none Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1315
7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 Dell# 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 show rmon hc-alarm Display the contents of RMON High-Capacity alarm table. Z9000 Syntax Parameters show rmon hc-alarm [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON High-Capacity alarm table in an easy-to-read format. Defaults none Command Modes EXEC Command History This guide is platform-specific.
PAGE 1316
Version 6.1.1.0 Introduced on the E-Series. Example (Index) Dell#show rmon hc-alarm 1 RMON high-capacity alarm entry 1 object: 1.3.6.1.2.1.1.3 sample interval: 5 sample type: absolute value. value: 185638 alarm type: rising or falling alarm. alarm rising threshold value: positive. rising threshold: 1001, RMON event index: 1 alarm falling threshold value: positive. falling threshold: 999, RMON event index: 6 alarm sampling failed 0 times. alarm owner: 1 alarm storage type: non-volatile.
PAGE 1317
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.1.1.0 Introduced on the E-Series. Example (Index) Dell#show rmon history 6001 RMON history control entry 6001 interface: ifIndex.
PAGE 1318
Defaults none Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series.
PAGE 1319
Defaults none Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example (Index) Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1320
HC 1024-1518 bytes packets overflow: 0 HC 1024-1518 bytes packets: 0 Dell# Example (Brief) 1320 Dell#show rmon statistics br index ifIndex interface ---------------------------------------6001 100974631 TenGigabitEthernet 2/0 6002 100974631 TenGigabitEthernet 2/0 6003 101236775 TenGigabitEthernet 2/1 6004 101236775 TenGigabitEthernet 2/1 9001 134529054 TenGigabitEthernet 3/0 9002 134529054 TenGigabitEthernet 3/0 9003 134791198 TenGigabitEthernet 3/1 9004 134791198 TenGigabitEthernet 3/1 Dell# Remote Moni
PAGE 1321
Rapid Spanning Tree Protocol (RSTP) 43 The Dell Networking operating software implementation of rapid spanning tree protocol (RSTP) is based on the IEEE 802.1w standard spanning-tree protocol. The RSTP algorithm configures connectivity throughout a bridged local area network (LAN) that is comprised of LANs interconnected by bridges. Dell Networking OS supports RSTP on the Z9000 platform. bridge-priority Set the bridge priority for RSTP.
PAGE 1322
Related Commands protocol spanning-tree rstp — enters rapid spanning tree mode. debug spanning-tree rstp Enable debugging of RSTP and view information on the protocol. Z9000 Syntax debug spanning-tree rstp [all | bpdu interface {in | out} | events] To disable debugging, use the no debug spanning-tree rstp command. Parameters all (OPTIONAL) Enter the keyword all to debug all spanning tree operations. bpdu interface {in | out} (OPTIONAL) Enter the keyword bpdu to debug the bridge protocol data units.
PAGE 1323
Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.2.1.1 Introduced on the E-Series.
PAGE 1324
Related Commands Version 8.3.7.0 Introduced on the S4810. pre-7.7.1.0 Introduced. protocol spanning-tree rstp — enters SPANNING TREE mode on the switch. disable Disable RSTP globally on the system. Z9000 Syntax disable To enable Rapid Spanning Tree Protocol, use the no disable command. Defaults RSTP is disabled. Command Modes CONFIGURATION RSTP (conf-rstp) Command History This guide is platform-specific.
PAGE 1325
forward-delay Configure the amount of time the interface waits in the Listening State and the Learning State before transitioning to the Forwarding State. Z9000 Syntax forward-delay seconds To return to the default setting, use the no forward-delay command. Parameters seconds Enter the number of seconds that FTOS waits before transitioning RSTP to the forwarding state. The range is from 4 to 30. The default is 15 seconds.
PAGE 1326
hello-time Set the time interval between the generation of the RSTP bridge protocol data units (BPDUs). Z9000 Syntax hello-time [milli-second] seconds To return to the default value, use the no hello-time command. Parameters seconds Enter a number as the time interval between transmission of BPDUs. The range is from 1 to 10 seconds. The default is 2 seconds. milli-second Enter the keywords milli-second to configure a hello time on the order of milliseconds.
PAGE 1327
Related Commands forward-delay — changes the wait time before RSTP transitions to the Forwarding state. max-age — changes the wait time before RSTP refreshes the protocol configuration information. max-age To maintain configuration information before refreshing that information, set the time interval for the RSTP bridge. Z9000 Syntax max-age seconds To return to the default values, use the no max-age command.
PAGE 1328
hello-time — changes the time interval between BPDUs. protocol spanning-tree rstp To configure RSTP, enter RSTP mode. Z9000 Syntax protocol spanning-tree rstp To exit RSTP mode, use the exit command. Defaults Not configured Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 1329
show config View the current configuration for the mode. Only non-default values are displayed. Z9000 Syntax show config Command Modes CONFIGURATION RSTP (conf-rstp) Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 1330
Command Modes Command History Usage Information Example (Brief) • EXEC • EXEC Privilege Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.4.2.1 Added support for the optional guard keyword on the CSeries, S-Series, and E-Series TeraScale. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.4.1.
PAGE 1331
Gi 4/9 Altr 128.427 128 20000 BLK 20000 P2P Dell# Example (EDS, LBK) No NOTE: “LBK_INC” (bold) means Loopback BPDU Inconsistency. Dell#show spanning-tree rstp br Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 0001.e801.6aa8 Root Bridge hello time 2, max age 20, forward delay 15 Bridge ID Priority 32768, Address 0001.e801.
PAGE 1332
spanning-tree rstp Configure an RSTP interface with one of these settings: port cost, edge port with optional bridge port data unit (BPDU) guard, port priority, loop guard, or root guard. Z9000 Syntax Parameters spanning-tree rstp {cost port-cost | edge-port [bpduguard [shutdown-on-violation]] | priority priority | {loopguard | rootguard}} cost port-cost Enter the keyword cost then the port cost value. The range is from 1 to 200000.
PAGE 1333
Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.4.2.
PAGE 1334
• Example If no BPDU is received from a remote device, loop guard places the port in a Loop-Inconsistent Blocking state and no traffic is forwarded on the port. Dell(conf)#interface gigabitethernet 4/0 Dell(conf-if-gi-4/0)#spanning-tree rstp edge-port Dell(conf-if-gi-4/0)#show config ! interface GigabitEthernet 4/0 no ip address switchport spanning-tree rstp edge-port no shutdown Dell# tc-flush-standard Enable the MAC address flushing after receiving every topology change notification.
PAGE 1335
knob command to enable flushing MAC addresses after receiving every topology change notification.
PAGE 1336
Software-Defined Networking (SDN) 44 Dell Networking operating software supports Software-Defined Networking (SDN). For more information, refer to the SDN Deployment Guide.
PAGE 1337
45 Security Most of the commands in this chapter are available on the Z9000 platform. This chapter contains various types of security commands offered in the Dell Networking operating software. The commands are listed in the following sections: • AAA Accounting Commands • Authorization and Privilege Commands • Authentication and Password Commands • RADIUS Commands • TACACS+ Commands • Port Authentication (802.
PAGE 1338
Parameters system Enter the keyword system to send accounting information of any other AAA configuration. exec Enter the keyword exec to send accounting information when a user has logged in to EXEC mode. commands {level | role role-name Enter the keyword command then a privilege level for accounting of commands executed at that privilege level or enter the keyword role then the role name for accounting of commands executed by a user with that user role.
PAGE 1339
Usage Information Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.3.1.0 Introduced on the E-Series. In the example above, TACACS+ accounting is used to track all usage of EXEC command and commands on privilege level 15. Privilege level 15 is the default. If you want to track usage at privilege level 1 for example, use the aaa accounting command 1 command.
PAGE 1340
Usage Information Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 6.3.1.0 Introduced on the E-Series. Dell Networking OS issues accounting records for all users on the system, including users whose username string, due to protocol translation, is NULL. For example, a user who comes on line with the aaa authentication login method-list none command is applied.
PAGE 1341
Dell(conf-radius-group)#radius-server host 2.2.2.2 key secret Dell(conf-radius-group)#radius-server vrf vrf1 sourceinterface tengigabitethernet 0/36 Dell(conf)#exit Dell(conf)#aaa radius group group1 tacacs-server group Creates a group of TACACS servers to be used for Authentication, Authorization, and Accounting.. Z9000 Syntax aaa tacacsgroup group-name To delete a group of TACACS servers, use the no tacacs-server group group-name command.
PAGE 1342
accounting Apply an accounting method list to terminal lines. Z9000 Syntax Parameters accounting {exec | commands {level | role role-name} methodlist exec Enter the keyword exec to apply an EXEC level accounting method list. commands {level | role role-name} Enter the keywords commands level to apply an EXEC and CONFIGURATION level accounting method list by enter the keyword role and then the role name for accounting of commands executed by a user with that user role.
PAGE 1343
show accounting Display the active accounting sessions for each online user. Z9000 Syntax show accounting Defaults none Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.
PAGE 1344
Authorization and Privilege Commands To set command line authorization and privilege levels, use the following commands. authorization Apply an authorization method list to terminal lines. Z9000 Syntax Parameters authorization {exec | commands level} method-list exec Enter the keyword exec to apply an EXEC level accounting method list. commands level Enter the keywords commands level to apply an EXEC and CONFIGURATION level accounting method list.
PAGE 1345
aaa authorization commands Set parameters that restrict (or permit) a user’s access to EXEC and CONFIGURATION level commands. Z9000 Syntax aaa authorization commands {level | role role-name}{name| default} {local | tacacs+| none} Undo a configuration with the no aaa authorization commands {level | role role-name} {name|default} {local | tacacs+ | none} command. Parameters commands level Enter the keyword commands then the command privilege level for command level authorization.
PAGE 1346
Version 6.1.1.0 Added support for RADIUS. aaa authorization config-commands Set parameters that restrict (or permit) a user’s access to EXEC level commands. Z9000 Syntax aaa authorization config-commands Disable authorization checking for CONFIGURATION level commands using the no aaa authorization config-commands command. Defaults Enabled when you configure aaa authorization commands command. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 1347
Parameters name Define a name for the list of authorization methods. default Define the default list of authorization methods. local Use the authorization parameters on the system to perform authorization. tacacs+ Use the TACACS+ protocol to perform authorization. none Enter the keyword none to apply no authorization. Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 1348
• • level level route-map for ROUTE-MAP mode router for ROUTER OSPF, ROUTER RIP, ROUTER ISIS and ROUTER BGP modes Enter the keyword level then a number for the access level. The range is from 0 to 15. Level 1 is EXEC mode and Level 15 allows access to all CLI modes and commands. reset Enter the keyword reset to return the security level to the default setting. command Enter the command’s keywords to assign the command to a certain access level. You can enter one or all of the keywords.
PAGE 1349
Parameters level level Enter the keyword level then a number for the access level. The range is from 0 to 15. Level 1 is EXEC mode and Level 15 allows access to all CLI modes. Defaults level = 15 Command Modes LINE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.
PAGE 1350
Parameters default Enter the keyword default then the authentication methods to use as the default sequence of methods for the Enable login. The default is default enable. method-listname Enter a text string (up to 16 characters long) to name the list of enabled authentication methods activated at login. method Enter one of the following methods: ... method2 • enable: use the password the enable password command defines in CONFIGURATION mode.
PAGE 1351
method, Dell Networking OS employs the second method (or third method, if necessary) automatically. For example, if the TACACS+ server is reachable, but the server key is invalid, Dell Networking OS proceeds to the next authentication method. The TACACS+ is incorrect, but the user is still authenticated by the secondary method. Related Commands enable password — changes the password for the enable command. login authentication — enables AAA login authentication on the terminal lines.
PAGE 1352
... method4 (OPTIONAL) Enter up to four additional methods. In the event of a “no response” from the first method, the system applies the next configured method (up to four configured methods). Defaults Not configured (that is, no authentication is performed). Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1353
After configuring the aaa authentication login command, configure the login authentication command to enable the authentication scheme on terminal lines. Connections to the SSH server work with the following login mechanisms: local, radius, and tacacs. Related Commands login authentication — enables AAA login authentication on the terminal lines. password — creates a password. radius-server host — specifies a RADIUS server host. tacacs-server host — specifies a TACACS+ server host.
PAGE 1354
Related Commands line — applies an authentication method list to the designated terminal lines. ip access-list standard — names (or selects) a standard access list to filter based on the IP address. ip access-list extended — names (or selects) an extended access list based on the IP addresses or protocols. enable password Change the password for the enable command.
PAGE 1355
Usage Information Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. To control access to command modes, use this command to define a password for a level and use the privilege level (CONFIGURATION mode) command. Passwords must meet the following criteria: • • Start with a letter, not a number. Passwords can have a regular expression as the password.
PAGE 1356
Defaults Not configured. Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1357
Defaults No password is configured. level = 15. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.
PAGE 1358
Parameters method-listname Enter the keywords method-list-name to specify that method list, created in the aaa authentication login command, to be applied to the designated terminal line. default Enter the keyword default to specify that the default method list, created in the aaa authentication login command, is applied to the terminal line. Defaults No authentication is performed on the console lines. Local authentication is performed on the virtual terminal and auxiliary lines.
PAGE 1359
password • 0 is the default and means the password is not encrypted and stored as clear text. • 7 means that the password is encrypted and hidden. Enter a text string up to 32 characters long. The first character of the password must be a letter. You cannot use spaces in the password. Defaults No password is configured. Command Modes LINE Command History This guide is platform-specific.
PAGE 1360
password-attributes Configure the password attributes (strong password). Z9000 Syntax password-attributes [min-length number] [max-retry number] [lockout-period minutes][character-restriction [upper number] [lower number] [numeric number] [special-char number]] To return to the default, use the no password-attributes [min-length number] [max-retry number] [lockout-period minutes] [characterrestriction [upper number] [lower number] [numeric number] [special-char number]] command.
PAGE 1361
The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.5(0.0) Introduced lockout-period option on the Z9000, S6000, S4820T, S4810, and MXL. Version 9.2(1.0) Introduced on the Z9500. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series.
PAGE 1362
pre-Version 6.1.1.0 Usage Information Introduced on the E-Series. CAUTION: Encrypting passwords with this command does not provide a high level of security. When the passwords are encrypted, you cannot return them to plain text unless you re-configure them. To remove an encrypted password, use the no password password command. To keep unauthorized people from viewing passwords in the switch configuration file, use the service password-encryption command.
PAGE 1363
Related Commands privilege level (CONFIGURATION mode) — assigns access control to different command modes. show users Allows you to view information on all users logged in to the switch. Z9000 Syntax Parameters show users [all] all (OPTIONAL) Enter the keyword all to view all terminal lines in the switch. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1364
Example Field Description Location Displays the IP address of the user. Dell#show users Authorization Mode: Line 0 console 0 *3 vty 1 4 vty 2 Related Commands role or privilege User admin sec1 ml1 Role sysadmin secadmin netadmin Privilege 15 14 12 Host(s) Location idle idle 172.31.1.4 idle 172.31.1.5 username — enables a user. timeout login response Specify how long the software waits for the login input (for example, the user name and password) before timing out.
PAGE 1365
Usage Information Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. The software measures the period of inactivity defined in this command as the period between consecutive keystrokes. For example, if your password is “password” you can enter “p” and wait 29 seconds to enter the next letter. username Establish an authentication system based on user names.
PAGE 1366
password Enter a string up to 32 characters long. privilege level Enter the keyword privilege then a number from zero (0) to 15. role role-name Enter the keyword role followed by the role name to associate with that user ID. secret Enter the keyword secret then the encryption type. Defaults The default encryption type for the password option is 0. The default encryption type for the secret option is 0. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 1367
RADIUS Commands The following RADIUS commands are supported by Dell Networking OS. debug radius View RADIUS transactions to assist with troubleshooting. Z9000 Syntax debug radius To disable debugging of RADIUS, use the no debug radius command. Defaults Disabled. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1368
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information. • For Loopback interfaces, enter the keyword loopback then a number from zero (0) to 16838. • For the Null interface, enter the keywords null 0. • For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a ten-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1369
Parameters seconds Enter a number of seconds during which non-responsive RADIUS servers are skipped. The range is from 0 to 2147483647 seconds. The default is 0 seconds. Defaults 0 seconds Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.
PAGE 1370
Example FTOS(conf)#radius-server group group1 FTOS(conf-radius-group)#radius-server host 1.1.1.1 key secret FTOS(conf-radius-group)#radius-server host 2.2.2.2 key secret FTOS(conf-radius-group)#radius-server vrf vrf1 sourceinterface tengigabitethernet 0/36 FTOS(conf-radius-group)#show config ! radius-server group group1 radius-server vrf vrf1 source-interface TenGigabitEthernet 0/36 radius-server host 1.1.1.1 key 7 9a2f3ec0c65c6f41 radius-server host 2.2.2.
PAGE 1371
key [encryptiontype] key (OPTIONAL) Enter the keyword key then an optional encryption-type and a string up to 42 characters long as the authentication key. The RADIUS host server uses this authentication key and the RADIUS daemon operating on this switch. For the encryption-type, enter either zero (0) or 7 as the encryption type for the key entered. The options are: • 0 is the default and means the password is not encrypted and stored as clear text. • 7 means that the password is encrypted and hidden.
PAGE 1372
the timeout, retransmit, or key values, include those keywords when using the no radius-server host command syntax. You can use duplicate host names or IP addresses among RADIUS groups. However, you cannot use duplicate host names or IP addresses within the same RADIUS group. If a VRF is not configured on the RADIUS group, then servers configured in the group are considered to be on the default VRF. RADIUS servers that are configured in the CONFIGURATION mode are also considered to be on the default VRF.
PAGE 1373
key Enter a string that is the key to be exchanged between the switch and RADIUS servers. It can be up to 42 characters long. Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.
PAGE 1374
To return to the default setting, use the radius-server retransmit 3 command. Parameters retries Enter a number of attempts that FTOS tries to locate a RADIUS server. The range is from zero (0) to 100. The default is 3 retries. Defaults 3 retries Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1375
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1376
• For a ten-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For VLAN interface, enter the keyword vlan then a number from 1 to 4094. Defaults Not configured. Command Modes RADIUS SERVER GROUP Command History This guide is platform-specific.
PAGE 1377
debug tacacs+ To assist with troubleshooting, view TACACS+ transactions. Z9000 Syntax debug tacacs+ To disable debugging of TACACS+, use the no debug tacacs+ command. Defaults Disabled. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.
PAGE 1378
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.4. (0.0) Introduced on the S-Series and Z-Series. Usage Information You can associate a TACACS server group with a VRF. Example Dell(conf)#tacacs-server group group1 Dell(conf-tacacs-group)#tacacs-server host 1.1.1.
PAGE 1379
authentication key must match the key specified in the tacacs-server key for the TACACS+ daemon. Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 1380
Example Dell(conf)#tacacs-server group group1 Dell(conf-tacacs-group)#tacacs-server host 1.1.1.1 key secret Dell(conf-tacacs-group)#no tacacs-server host 1.1.1.1 Related Commands aaa authentication login — specifies the login authentication method. tacacs-server key — configures a TACACS+ key for the TACACS server. tacacs-server vrf Create an association between a TACACS server group and a VRF and source interface..
PAGE 1381
Version 9.4. (0.0) Usage Information Introduced on the S-Series and Z-Series. You can use this command to associate a group of TACACS servers with a VRF and source interface. You can configure the source interface only with the VRF attribute and source interface is optional with the VRF attributes. If VRF is not configured on the TACACS group, then the group is considered to be on the default VRF. RADIUS groups and VRFs have one-to-one mapping.
PAGE 1382
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Authentication key length increased to 42 characters. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. The key configured with this command must match the key configured on the TACACS+ daemon.
PAGE 1383
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.
PAGE 1384
• If 802.1X is disabled on the port, it is returned to the configured access VLAN. • When the port is in the Force Authorized, Force Unauthorized, or Shutdown state, it is placed in the configured access VLAN. • If an 802.1X port is authenticated and put in the RADIUS server assigned VLAN, any change to the port access VLAN configuration does not take effect. • The 802.
PAGE 1385
Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1386
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the C-Series, S-Series, and E-Series. If the host responds to 802.1X with an incorrect login/password, the login fails. The switch attempts to authenticate again until the maximum attempts configured is reached. If the authentication fails after all allowed attempts, the interface is moved to the authentication failed VLAN.
PAGE 1387
dot1x guest-vlan Configure a guest VLAN for limited access users or for devices that are not 802.1X capable. Z9000 Syntax dot1x guest-vlan vlan-id To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command. Parameters vlan-id Enter the VLAN Identifier. The range is from 1 to 4094. Defaults Not configured. Command Modes CONFIGURATION (conf-if-interface-slot/port) Command History This guide is platform-specific.
PAGE 1388
Related Commands dot1x auth-fail-vlan — configures a VLAN for authentication failures. dot1x reauthentication — enables periodic re-authentication. show dot1x interface — displays the 802.1X information on an interface. dot1x mac-auth-bypass Enable MAC authentication bypass. If 802.1X times out because the host did not respond to the Identity Request frame, Dell Networking OS attempts to authenticate the host based on its MAC address.
PAGE 1389
Defaults 2 Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1390
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the C-Series and S-Series. Version 7.4.1.0 Introduced on the E-Series. The authenticator performs authentication only when port-control is set to auto. dot1x quiet-period Set the number of seconds that the authenticator remains quiet after a failed authentication with a client.
PAGE 1391
dot1x reauthentication Enable periodic re-authentication of the client. Z9000 Syntax dot1x reauthentication [interval seconds] To disable periodic re-authentication, use the no dot1x reauthentication command. Parameters interval seconds (Optional) Enter the keyword interval then the interval time, in seconds, after which re-authentication is initiated. The range is from 1 to 31536000 (1 year). The default is3600 (1 hour).
PAGE 1392
Parameters number Enter the permitted number of re-authentications. The range is from 1 to 10. The default is 2. Defaults 2 Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.
PAGE 1393
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the C-Series and S-Series. Version 7.4.1.0 Introduced on the E-Series. dot1x supplicant-timeout Configure the amount of time after which exchanges with the supplicant time-out. Z9000 Syntax dot1x supplicant-timeout seconds To return to the default, use theno dot1x supplicant-timeout command.
PAGE 1394
dot1x tx-period Configure the intervals at which EAPOL PDUs are transmitted by the Authenticator PAE. Z9000 Syntax dot1x tx-period seconds To return to the default, use the no dot1x tx-period command. Parameters seconds Enter the interval time, in seconds, that EAPOL PDUs are transmitted. The range is from 1 to 65535 (1 year). The default is 30. Defaults 30 seconds Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 1395
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Defaults none Command Modes • EXEC • EXEC privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Security Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 1396
SSH Server and SCP Commands Dell Networking OS supports secure shell (SSH) protocol versions 1.5 and 2.0. SSH is a protocol for secure remote login over an insecure network. SSH sessions are encrypted and use authentication. crypto key generate Generate keys for the SSH server. Z9000 Syntax NOTE: Some of the parameters in this command require licensing to access. For more information, contact your Dell Networking representative.
PAGE 1397
Usage Information Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. The host keys are required for key-exchange by the SSH server. If the keys are not found when you enable the server (ip ssh server enable), the keys are automatically generated. This command requires user interaction and generates a prompt prior to overwriting any existing host keys. NOTE: Only a user with superuser permissions should generate host-keys.
PAGE 1398
debug ip ssh Enables collecting SSH debug information. Z9000 Syntax debug ip ssh {client | server} To disable debugging, use the no debug ip ssh {client | server} command. Parameters client Enter the keyword client to enable collecting debug information on the client. server Enter the keyword server to enable collecting debug information on the server. Defaults Disabled on both client and server. Command Modes EXEC Command History This guide is platform-specific.
PAGE 1399
Parameters directory Enter a directory name. Defaults The internal flash (flash:) is the default directory. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.
PAGE 1400
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. This command specifies the maximum number of attempts to authenticate a user on an SSH connection with the remote host for password authentication.
PAGE 1401
pre-Version 6.1.1.0 Introduced on the E-Series. ip ssh hostbased-authentication Enable hostbased-authentication for the SSHv2 server. Z9000 Syntax ip ssh hostbased-authentication enable To disable hostbased-authentication for SSHv2 server, use the no ip ssh hostbased-authentication enable command. Parameters enable Enter the keyword enable to enable hostbasedauthentication for SSHv2 server. Defaults Disabled. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 1402
Related Commands ip ssh pub-key-file — public keys of trusted hosts from a file. ip ssh rhostsfile — trusted hosts and users for rhost authentication. ip ssh key-size Configure the size of the server-generated RSA SSHv1 key. Z9000 Syntax Parameters ip ssh key-size 512-869 512-869 Enter the key-size number for the server-generated RSA SSHv1 key. The range is from 512 to 869. The default is 768. Defaults Key size 768 Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 1403
Parameters enable Enter the keyword enable to enable passwordauthentication for the SSH server. Defaults Enabled Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 1404
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. This command specifies the file used for the host-based authentication. The creates/ file overwrites the flash://ADMIN_DIR/ssh/knownhosts file and deletes the user-specified file.
PAGE 1405
Parameters time minutes Enter the keywords time then the amount of time in minutes. The range is from 10 to 1440 minutes. The default is 60 minutes volume rekeylimit Enter the keywords volume then the amount of volume in megabytes. The range is from 1 to 4096 to megabytes. The default is 1024 megabytes Defaults The default time is 60 minutes. The default volume is 1024 megabytes. Command Modes CONFIGURATION mode Command History This guide is platform-specific.
PAGE 1406
pre-Version 6.1.1.0 Introduced on the E-Series. Example Dell#conf Dell(conf)# ip ssh rhostsfile flash://shosts Dell(conf)# Usage Information This command specifies the rhost file used for host-based authentication. This creates/ file overwrites the flash:/ADMIN_DIR/ssh/shosts file and deletes the user-specified file. Even though this command is a global configuration command, it does not appear in the running configuration because you only need to run this command once.
PAGE 1407
Usage Information Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. Enabling RSA authentication allows the user to log in without being prompted for a password. In addition, the OpenSSH compatible SSHv2 RSA public key must be added to the list of authorized keys (ip ssh rsa-authentication myauthorized-keys device://filename command). ip ssh rsa-authentication (EXEC) Add keys for the RSA authentication.
PAGE 1408
Usage Information If you want to log in without being prompted for a password, log in through RSA authentication. To do that, first add the SSHv2 RSA public keys to the list of authorized keys. This command adds the specified RSA keys to the following file: flash://ADMIN_DIR/ssh/authorized-keys-username (where username is the user associated with this terminal). NOTE: The no form of this command deletes the file flash://ADMIN_DIR/ ssh/ authorized-keys-username file.
PAGE 1409
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. This command enables the SSH server and begins listening on a port. If a port is not specified, listening is on SSH default port 22. NOTE: Starting with Dell Networking OS Release 9.2(0.
PAGE 1410
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.4. (0.0) Usage Information Introduced on the S-Series and Z-Series. You can enable the SSH server on either a management VRF or a user defined VRF but not both. If no VRF is specified, then the SSH server is enabled on the default VRF.
PAGE 1411
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For VLAN interface, enter the keyword vlan then a number from 1 to 4094. Defaults Not configured. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.4. (0.
PAGE 1412
Version 9.4. (0.0) Introduced on the S-Series and Z-Series. Usage Information If you configure a VRF for an SSH session, then you need not explicitly mention the same VRF for the SSH client sessions intended for that VRF. The vrf attribute in the ip ssh vrf command is applicable for both the SSH client as well as the COPY (SCP) commands. Example Dell(conf)#ip ssh vrf vrf1 Dell(conf)#do ssh 10.10.10.2 -l admin Dell(conf)#no ip ssh vrf vrf1 show crypto Display the public part of the SSH host-keys.
PAGE 1413
Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. Usage Information This command is useful if the remote SSH client implements Strict Host Key Checking. You can copy the host key to your list of known hosts.
PAGE 1414
Example Related Commands Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. Dell#sh ip ssh SSH server : SSH server version : Password Authentication : Hostbased Authentication : RSA Authentication : Vty Encryption HMAC 1 3des-cbc hmac-md5 2 3des-cbc hmac-md5 enabled. v1 and v2. enabled. disabled. disabled. Remote IP 10.1.20.
PAGE 1415
pre-Version 6.1.1.0 Introduced on the E-Series. Usage Information This command displays the contents of the flash://ADMIN_DIRssh/ knownhosts file. Example Dell#show ip ssh client-pub-keys poclab4,123.12.1.
PAGE 1416
pre-Version 6.1.1.0 Introduced on the E-Series. Usage Information This command displays the contents of the flash:/ADMIN_DIR/ssh/ authorized-keys.username file.
PAGE 1417
-l username (OPTIONAL) Enter the keyword -l then the user name used in this SSH session. The default is the user name of the user associated with the terminal. -m HMAC algorithm Enter one of the following HMAC algorithms to use. (For v2 clients only.): • • • • hmac-sha1: Force ssh to use the hmac-sha1 HMAC algorithm. hmac-sha1-96: Force ssh to use the hmac-sha1-96 HMAC algorithm. hmac-md5: Force ssh to use the hmac-md5 HMAC algorithm. hmac-md5-96: Force ssh to use the hmac-md5-96 HMAC algorithm.
PAGE 1418
-l -m -p -v User name option HMAC algorithm to use (for v2 clients only) SSH server port option (default 22) SSH protocol version Dell#ssh 10.11.8.12 -c ? 3des-cbc Force ssh to use 3des-cbc encryption cipher Dell#ssh 10.11.8.
PAGE 1419
ip dhcp relay Enable Option 82. Z9000 Syntax Parameters ip dhcp relay information-option [trust-downstream trustdownstream Configure the system to trust Option 82 when it is received from the previous-hop router. Defaults Disabled. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1420
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the C-Series and S-Series. Usage Information When enabled, no learning takes place until you enable snooping on a VLAN. After disabling DHCP Snooping, the binding table is deleted and Option 82, IP Source Guard, and Dynamic ARP Inspection are disabled. Related Commands ip dhcp snooping vlan — enables DHCP Snooping on one or more VLANs.
PAGE 1421
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 8.3.7.
PAGE 1422
ip dhcp snooping database renew Renew the binding table. Z9000 Syntax ip dhcp snooping database renew Defaults none Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 1423
Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the C-Series and S-Series. ip dhcp source-address-validation Enable IP source guard. Z9000 Syntax [no] ip dhcp source-address-validation Defaults Disabled. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1424
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.8.1.0 Introduced on the C-Series and S-Series. When enabled, the system begins creating entries in the binding table for the specified VLANs. NOTE: Learning only happens if there is a trusted port in the VLAN. Related Commands ip dhcp snooping trust — configures an interface as trusted.
PAGE 1425
Role-Based Access Control Commands With Role-Based Access Control (RBAC), access and authorization is controlled based on a user’s role. Users are granted permissions based on their user roles, not on their individual user ID. User roles are created for job functions and through those roles they acquire the permissions to perform their associated job function. This section describes the syntax and usage of RBAC-specific commands.
PAGE 1426
Related Commands 1. Locally define a system administrator user role.This will give you access to login with full permissions even if network connectivity to remote authentication servers is not available. 2. Configure login authentication on the console. This ensures that all users are properly identified through authentication no matter the access point 3. Specify an authentication method (RADIUS, TACACS+, or Local). 4. Specify authorization method (RADIUS, TACACS+ or Local). 5.
PAGE 1427
reset Enter the keyword reset to reset all roles back to default for that command. command Enter the command’s keywords to assign the command to a certain access level. You can enter one or more keywords. Defaults none Command Modes CONFIGURATION Command History Related Commands Version 9.5. (0.0) Introduced on the Z9000, S6000, S4820T, S4810, MXL userrole show role Display information on permissions assigned to a command, including user role and/or permission level.
PAGE 1428
Dell#show role mode configure management crypto-policy Role access: secadmin, sysadmin Related Commands userrole, username, privilege show userroles Display information on all defined user roles.
PAGE 1429
Defaults none Command Modes CONFIGURATION Command History Usage Information Version 9.5(0.0) Introduced on the Z9000, S6000, S4820T, S4810, MXL. Instead of using the system defined user roles, you can create a new user role that best matches your organization. When you create a new user role, you first inherit permissions from one of the system defined roles. Otherwise you would have to create a user role from scratch. You then restrict commands or add commands to that role.
PAGE 1430
46 Service Provider Bridging Service provider bridging is composed of virtual local area network (VLAN) Stacking, Layer 2 Protocol Tunneling, and Provider Backbone Bridging as described in the Dell Networking OS Configuration Guide Service Provider Bridging chapter. This chapter includes command line information (CLI) for the Dell Networking operating software Layer 2 Protocol Tunneling (L2PT). L2PT enables protocols to tunnel through an 802.1q tunnel.
PAGE 1431
• For a Port Channel interface, enter the keywords portchannel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. in | out | both Enter the keyword in, out, or both to debug incoming interfaces, outgoing interfaces, or both incoming and outgoing interfaces.
PAGE 1432
Parameters rate-limit rate Enter the keyword rate-limit followed by a number for the rate-limit for tunneled packets on the VMAN. The range is from 64 to 320. stp Enter the keyword stp to enable protocol tunneling on a spanning tree, including STP, MSTP, RSTP, and PVST. Defaults none Command Modes CONF-IF-VLAN Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guid.
PAGE 1433
Defaults The default destination MAC is 01:01:e8:00:00:00. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.
PAGE 1434
Usage Information Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.4.1.0 Introduced Dell Networking OS must have the default CAM profile with the default microcode before you enable L2PT. protocol-tunnel rate-limit Enable traffic rate limiting per box. Z-Series Syntax protocol-tunnel rate-limit rate To reset the rate limit to the default, use the no protocol-tunnel rate-limit rate command. Parameters rate Enter the rate in frames per second.
PAGE 1435
Related Commands show protocol-tunnel — displays tunneling information for all VLANs. show running-config — displays the current configuration. show protocol-tunnel Display protocol tunnel information for all or a specified VLAN-Stack VLAN. Z-Series Syntax Parameters show protocol-tunnel [vlan vlan-id] vlan vlan-id (OPTIONAL) Enter the keyword vlan then the VLAN ID to display information for the one VLAN. The range is from 1 to 4094.
PAGE 1436
Gi1/2 Dell# Related Commands 1436 2 STP, PVST show running-config — displays the current configuration.
PAGE 1437
sFlow 47 The Dell Networking operating software (OS) supports sFlow commands on the Z-Series platform. Dell Networking operating software sFlow monitoring system includes an sFlow Agent and an sFlow Collector. • The sFlow Agent combines the flow samples and interface counters into sFlow datagrams and forwards them to the sFlow Collector. • The sFlow Collector analyses the sFlow Datagrams received from the different devices and produces a network-wide view of traffic flows.
PAGE 1438
sflow collector Configure a collector device to which sFlow datagrams are forwarded. Z-Series Syntax sflow collector {ip-address | ipv6-address} agent-addr {ipaddress | ipv6-address} [number [max-datagram-size number]] | [max-datagram-size number] [vrf management] To delete a configured collector, use the no sflow collector {ip-address | ipv6-address} agent-addr {ipv4-address | ipv6-address} [number [max-datagram-size number]] | [max-datagram-size number] [vrf management] command.
PAGE 1439
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.4.2.3 Added support for IPv6 sFlow collectors and agents on the E-series TeraScale, C-Series, and S-Series. Version 8.4.1.1 Added support for IPv6 sFlow collectors and agents on the E-series ExaScale. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced S-Series Stacking. Version 8.1.1.0 Introduced on the E-Series ExaScale.
PAGE 1440
sflow enable (Global) Enable sFlow globally. Z-Series Syntax sflow enable To disable sFlow, use the no sflow enable command. Defaults Disabled. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 1441
Defaults Disabled. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.
PAGE 1442
Defaults Disabled. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.
PAGE 1443
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on S-Series Stacking.
PAGE 1444
Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on S-Series Stacking.
PAGE 1445
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.0 Introduced on S-Series Stacking.
PAGE 1446
Defaults The Global default sampling. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.2.1.
PAGE 1447
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a Port-Channel Ethernet interface, enter the keyword port-channel then the slot/port information. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific.
PAGE 1448
Gi 3/40: configured rate 16384, actual rate 16384, subsampling rate 1 Dell# show sflow linecard Display the sFlow information on a line card. Z-Series Syntax Parameters show sflow linecard {slot number} slot number (OPTIONAL) Enter a slot number to view information on the line card in that slot. Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1449
48 Simple Network Management Protocol (SNMP) and Syslog This chapter contains commands to configure and monitor the simple network management protocol (SNMP) v1/v2/v3 and Syslog. Both features are supported on the Z-Series platform. The chapter contains the following sections: • SNMP Commands • Syslog Commands SNMP Commands The following SNMP commands are available in the Dell Networking operating software.
PAGE 1450
show snmp Display the status of SNMP network elements. Z-Series Syntax show snmp Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000.
PAGE 1451
show snmp engineID Display the identification of the local SNMP engine and all remote engines that are configured on the router. Z-Series Syntax show snmp engineID Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.
PAGE 1452
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.
PAGE 1453
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series.
PAGE 1454
> snmpwalk -c public 10.10.10.130 .1.3.6.1.2.1.31 | grep -i alias | more IF-MIB::ifAlias.134530304 = STRING: This is a port connected to Router2. This is a port connected to IF-MIB::ifAlias.134792448 = STRING: !------command run on Dell Networkingswitch: --------------! Dell#snmp ifmib ifalias long !------command run on server connected to switch: --------------! > snmpwalk -c public 10.10.10.130 .1.3.6.1.2.1.31 | grep -i alias | more IF-MIB::ifAlias.134530304 = STRING: This is a port connected to Router2.
PAGE 1455
Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1456
NOTE: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP; TCP and ICMP rules are not valid for SNMP. In IPv6 ACLs, port rules are not valid for SNMP. Example Dell#config Dell(conf)# snmp-server community public ro Dell(conf)# snmp-server community guest ro security-name guestuser Dell(conf)# Example Dell(conf)# ip access-list standard snmp-ro-acl Dell(config-std-nacl)#seq 5 permit host 10.10.10.
PAGE 1457
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command snmp-server enable traps Enable SNMP traps. Z-Series Syntax snmp-server enable traps [notification-type] [notificationoption] To disable traps, use the no snmp-server enable traps [notificationtype] [notification-option] command.
PAGE 1458
• supply • temperature For the snmp notification-type, enter one of the following optional parameters: • authentication • coldstart • linkdown • linkup Defaults Not enabled. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000.
PAGE 1459
snmp-server engineID Configure the name for both the local and remote SNMP engines on the router. Z-Series Syntax snmp-server engineID [local engineID] [remote ip-address udpport port-number engineID] To return to the default, use the no snmp-server engineID [local engineID] [remote ip-address udp-port port-number engineID] command. Parameters local engineID Enter the keyword local followed by the engine ID number that identifies the copy of the SNMP on the local device.
PAGE 1460
Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information Changing the value of the SNMP Engine ID has important side effects. A user’s password (entered on the command line) is converted to a message digest algorithm (MD5) or secure hash algorithm (SHA) security digest. This digest is based on both the password and the local Engine ID. The command line password is then destroyed, as required by RFC 2274.
PAGE 1461
• 3 is the most secure of the security modes. • 2c allows transmission of informs and counter 64, which allows for integers twice the width of what is normally allowed. The default is 1. auth (OPTIONAL) Enter the keyword auth to specify authentication of a packet without encryption. noauth (OPTIONAL) Enter the keyword noauth to specify no authentication of a packet. priv (OPTIONAL) Enter the keyword priv to specify both authentication and then scrambling of the packet.
PAGE 1462
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.10.2 Added support for the access parameter. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information The following Example specifies the group named harig as a version 3 user requiring both authentication and encryption and read access limited to the read named rview.
PAGE 1463
traps (OPTIONAL) Enter the keyword traps to send trap notifications to the specified host. The default is traps. informs (OPTIONAL) Enter the keyword informs to send inform notifications to the specified host. The default is traps. version 1 | 2c | 3 (OPTIONAL) Enter the keyword version to specify the security model then the security model version number 1, 2c, or 3: • Version 1 is the least secure version. • Version 3 is the most secure of the security modes.
PAGE 1464
• isis — Enable ISIS adjacency change traps • pfc — Enable pfc traps • snmp — Enable SNMP trap • stp — Enable 802.1d state change traps • vlt — Enable VLT traps • vrrp — Enable VRRP state change traps • xstp — Enable 802.1s, 802.1w, and PVST+ state change traps The default is all trap types are sent to host. Defaults As above. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 1465
When multiple snmp-server host commands are given for the same host and type of notification (trap or inform), each succeeding command overwrites the previous command. Only the last snmp-server host command will be in effect. For example, if you enter an snmp-server host inform command for a host and then enter another snmp-server host inform command for the same host, the second command replaces the first command. The snmp-server host command is used with the snmp-server enable command.
PAGE 1466
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.
PAGE 1467
Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command snmp-server trap-source Configure a specific interface as the source for SNMP traffic. Z9000 Syntax snmp-server trap-source interface To disable sending traps out a specific interface, use the no snmp trap-source command.
PAGE 1468
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information To enable this snmp-server trap-source command, configure an IP address on the interface and enable the interface configured as an SNMP trap source. Related Commands snmp-server community — sets the community string.
PAGE 1469
1 | 2c | 3 (OPTIONAL) Enter the security model version number (1, 2c, or 3): • 1 is the least secure version. • 3 is the most secure of the security modes. • 2c allows transmission of informs and counter 64, which allows for integers twice the width of what is normally allowed. The default is 1. encrypted (OPTIONAL) Enter the keyword encrypted to specify the password appear in encrypted format (a series of digits, masking the true characters of the string).
PAGE 1470
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000.
PAGE 1471
Example Dell#conf Dell(conf)# snmp-server user n3user ngroup remote 172.31.1.3 udp-port 5009 3 auth md5 authpasswd Related Commands show snmp user — displays the information configured on each SNMP user name. snmp-server user (for AES128-CFB Encryption) Specify that AES128-CFB encryption algorithm needs to be used for transmission of SNMP information. The Advanced Encryption Standard (AES) Cipher Feedback (CFB) 128-bit encryption algorithm is in compliance with RFC 3826.
PAGE 1472
Command History Usage Information Version 9.3(0.0) Added support for the AES128-CFB encryption algorithm on the S4820T, S4810, S6000 and Z-Series platforms To enable robust, effective protection and security for SNMP packets transferred between the server and the client, you can use the snmp-server user username group groupname 3 auth authentication-type authpassword priv aes128 priv-password to specify that AES128-CFB encryption algorithm needs to be used.
PAGE 1473
Usage Information Use this command to bind an SNMP agent to a VRF. The SNMP agent processes the requests from the interfaces that belong to the specified VRF. If no VRF is specified, then the default VRF is used. Related Commands show snmp user — displays the information configured on each SNMP user name. snmp-server view Configure an SNMPv3 view.
PAGE 1474
E-Series legacy command Usage Information The oid-tree variable is a full sub-tree starting from 1.3.6 and cannot specify the name of a sub-tree or a MIB. The following Example configures a view named rview that allows access to all objects under 1.3.6.1. Example Dell# conf Dell#(conf) snmp-server view rview 1.3.6.1 included Related Commands show running-config snmp — displays the SNMP running configuration.
PAGE 1475
Syslog Commands The following commands allow you to configure logging functions on all Dell Networking switches. clear logging Clear the messages in the logging buffer. Z-Series Syntax clear logging Defaults none Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.
PAGE 1476
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.5(0.0) Introduced on the S4810, S4820T, S6000, Z9000, and MXL.
PAGE 1477
Defaults level = 7 or debugging Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1478
Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Related Commands logging monitor — sets the logging monitor parameters. terminal monitor — sends system messages to the terminal/monitor. default logging trap Return to the default settings for logging messages to the Syslog servers. Z-Series Syntax default logging trap Defaults level = 6 or informational Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 1479
To disable logging, use the no logging command. Parameters ip-address Enter the IPv4 address in dotted decimal format. ipv6-address Enter the IPv6 address in the x:x:x:x::X format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. hostname Enter the name of a host already configured and recognized by the switch. udp Enter the keyword udp to enable transmission of log message over UDP followed by port number.
PAGE 1480
Related Commands logging on — enables the logging asynchronously to logging buffer, console, Syslog server, and terminal lines. logging trap — enables logging to the Syslog server based on severity. logging buffered Enable logging and specify which messages are logged to an internal buffer. By default, all messages are logged to the internal buffer. Z-Series Syntax logging buffered [level] [size] To return to the default values, use the default logging buffered command.
PAGE 1481
Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information When you decrease the buffer size, all messages stored in the buffer are lost. Increasing the buffer size does not affect messages stored in the buffer. Related Commands clear logging — clears the logging buffer. default logging buffered — returns the logging buffered parameters to the default setting. show logging — displays the logging setting and system messages in the internal buffer.
PAGE 1482
Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Related Commands clear logging — clears the logging buffer. default logging console — returns the logging console parameters to the default setting. show logging — displays the logging setting and system messages in the internal buffer. logging extended Logs security and audit events to a system log server.
PAGE 1483
Related Commands show logging auditlog — displays audit log, clear logging auditlog— clears audit log logging facility Configure the Syslog facility used for error messages sent to Syslog servers. Z-Series Syntax logging facility [facility-type] To return to the default values, use the no logging facility command.
PAGE 1484
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.
PAGE 1485
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information When you configure the snmp-server trap-source command, the system messages logged to the history table are also sent to the SNMP network management station. Related Commands show logging — displays information logged to the history buffer.
PAGE 1486
E-Series legacy command Usage Information When the number of messages reach the limit you set with the logging history size command, older messages are deleted as newer ones are added to the table. Related Commands show logging — displays information logged to the history buffer. logging monitor Specify which messages are logged to Telnet applications. Z-Series Syntax logging monitor [level] To disable logging to terminal connections, use the no logging monitor command.
PAGE 1487
Related Commands default logging monitor — returns the logging monitor parameters to the default setting. logging on Specify that debug or error messages are asynchronously logged to multiple destinations, such as the logging buffer, Syslog server, or terminal lines. Z-Series Syntax logging on To disable logging to logging buffer, Syslog server and terminal lines, use the no logging on command. Defaults Enabled. Command Modes CONFIGURATION Command History This guide is platform-specific.
PAGE 1488
logging source-interface Specify that the IP address of an interface is the source IP address of Syslog packets sent to the Syslog server. Z9000 Syntax logging source-interface interface To disable this command and return to the default setting, use the no logging source-interface command. Parameters interface Enter the following keywords and slot/port or number information: • For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet then the slot/port information.
PAGE 1489
Version 8.3.7.0 Introduced on the S4810. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information Syslog messages contain the IP address of the interface used to egress the router. By configuring the logging source-interface command, the Syslog packets contain the IP address of the interface configured.
PAGE 1490
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information When you enable logging synchronous, unsolicited messages appear between software prompts and outputs. Only the messages with a severity at or below the set level are sent to the console.
PAGE 1491
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series, S55. Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Usage Information To block a type of message parameter, set the logging trap level to a lower number. For example, to block severity messages at level 6, set the level to 5.
PAGE 1492
Example Dell(conf)#logging version ? <0-1> Select syslog version (default = 0) Dell(conf)#logging version 1 show logging Display the logging settings and system messages logged to the internal buffer of the switch. Z-Series Syntax Parameters show logging [number | history [reverse][number] | reverse [number] | summary] number (OPTIONAL) Enter the number of messages displayed in the output. The range is from 1 to 65535.
PAGE 1493
Example (Partial) Dell#show logging Syslog logging: enabled Console logging: level debugging Monitor logging: level debugging Buffer logging: level debugging, 5604 Messages Logged, Size (524288 bytes) Trap logging: level informational Oct 8 09:25:37: %RPM1:RP1 %BGP-5-ADJCHANGE: Connection with neighbor 223.80.255.254 closed. Hold time expired Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.200.13.2 Up Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.
PAGE 1494
show logging auditlog Displays an audit log. Syntax show logging auditlog Defaults none Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.5(0.0) Introduced on the S4810, S4820T, S6000, Z9000, and MXL.
PAGE 1495
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. This command displays internal software driver information, which may be useful during troubleshooting switch initialization errors, such as a downed Port-Pipe. terminal monitor Configure the Dell Networking OS to display messages on the monitor/terminal.
PAGE 1496
49 SNMP Traps This chapter lists the traps sent by the Dell Networking operating software. Each trap is listed by the fields Message ID, Trap Type, and Trap Option. Message ID Trap Type Trap Option COLD_START SNMP COLDSTART WARM_START SNMP WARMSTART COPY_CONFIG_COMPLETE SNMP NONE SNMP LINKDOWN SNMP LINKUP SNMP AUTH EGP_NEIGHBOR_LOSS SNMP NONE OSTATE_DOWN SNMP LINKDOWN SNMP LINKUP SNMP NONE SNMP NONE %SNMP-5-SNMP_COLD_START: SNMP COLD_START trap sent.
PAGE 1497
Message ID Trap Type Trap Option SNMP NONE SNMP NONE NONE NONE ENVMON NONE ENVMON NONE ENVMON NONE CHM_CARD_PROBLEM ENVMON NONE CHM_ALARM_CUTOFF ENVMON NONE CHM_SFM_UP ENVMON NONE CHM_SFM_DOWN ENVMON NONE CHM_RPM_UP ENVMON NONE ENVMON NONE ENVMON NONE %RPM0-P:CP %SNMP-4-RMON_FALLING_THRESHOLD: RMON falling threshold alarm from SNMP OID RMON_HC_RISHING_THRESHOLD %RPM0-P:CP %SNMP-4-RMON_HC_RISING_THRESHOLD: RMON high-capacity rising threshold alarm from SNMP OID R
PAGE 1498
Message ID Trap Type Trap Option ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON SUPPLY ENVMON SUPPLY ENVMON SUPPLY ENVMON SUPPLY ENVMON SUPPLY ENVMON SUPPLY ENVMON TEMP ENVMON TEMP %RAM-5-FAST_FAILOVER: RPM Failover Completed CHM_SFM_ADD %TSM-5-SFM_DISCOVERY: Found SFM 1 CHM_SFM_REMOVE %TSM-5-SFM_REMOVE: Removed SFM 1 CHM_MAJ_SFM_DOWN %CHMGR-0-MAJOR_SFM: Major alarm: Switch fabric down CHM_MAJ_SFM_DOWN_CLR %CHMGR-5-MAJOR_SFM_CLR: Major alarm cle
PAGE 1499
Message ID Trap Type Trap Option ENVMON TEMP ENVMON TEMP ENVMON FAN ENVMON FAN ENVMON FAN ENVMON FAN ENVMON NONE ENVMON NONE %CHMRG-5-MINOR_TEMP_CLR: Minor alarm cleared: chassis temperature normal (%s %d temperature is within threshold of %dC) CHM_MAJ_ALRM_TEMP %CHMGR-2-MAJOR_TEMP: Major alarm: chassis temperature high (%s temperature reaches or exceeds threshold of %dC) CHM_MAJ_ALRM_TEMP_CLR %CHMGR-2-MAJOR_TEMP_CLR: Major alarm cleared: chassis temperature lower (%s %d temperature is wi
PAGE 1500
Message ID Trap Type Trap Option ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE PROTO NONE PROTO NONE PROTO NONE PROTO NONE PROTO NONE %TME-2-ABNORMAL_TASK_TERMINATION: CRASH - task:%s %s CHM_CPU_THRESHOLD %CHMGR-5-CPU_THRESHOLD: Cpu %s usage above threshold. Cpu5SecUsage (%d) CHM_CPU_THRESHOLD_CLR %CHMGR-5-CPU_THRESHOLD_CLR: Cpu %s usage drops below threshold. Cpu5SecUsage (%d) CHM_MEM_THRESHOLD %CHMGR-5-MEM_THRESHOLD: Memory %s usage above threshold.
PAGE 1501
50 Stacking All commands in this chapter are specific to the Dell Networking operating software on the Z9000 platform. The commands are always available and operational, whether the S-Series has a stacking module inserted. You can use the commands to pre-configure a switch, so that the configuration settings are invoked when the switch is attached to other S-Series units.
PAGE 1502
Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.1.0 Added the members option. Version 7.7.1.0 Introduced on the S-Series. Usage Information The range is 0 to 11. Enabling this command keeps the failed switch in the Failed state. The switch does not reboot until it is manually rebooted. When enabled, it is not displayed in the running-config. When disabled, it is displayed in the runningconfig.
PAGE 1503
redundancy protocol Enable hitless failover for a protocol. Z9000 Syntax Protocols redundancy protocol lacp Enter the LACP protocol xstp Enter one of the following protocols: STP, RSTP, MSTP, PVST. Defaults Not enabled. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 1504
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.1.0 Added the hard reset option. Version 7.8.1.
PAGE 1505
show redundancy Display the current redundancy configuration (status of automatic reboot configuration on stack management unit). Z9000 Syntax show redundancy Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Example Version 8.3.19.
PAGE 1506
Stack-unit SW Version: 7.7.1.
PAGE 1507
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.7.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 7.7.1.0 Introduced on the S-Series. The following describes the show interfaces command shown in the following example. Field Description Topology Lists the topology of stack ports connected: Ring, Daisy chain, or Standalone. Interface The unit/port ID of the connected stack port on this unit.
PAGE 1508
---------------------0/49 1/49 0/50 0/51 2/49 1/49 0/49 1/50 2/51 2/49 0/51 2/51 1/50 2/52 Dell# Related Commands • reset stack-unit – resets the designated stack member. • show hardware stack-unit – displays the data plane or management plane input and output statistics of the designated component of the designated stack member. • show system (S-Series and Z-Series) – displays the current status of all stack members or a specific member.
PAGE 1509
Related Commands Version 8.3.7.0 Introduced on the S4810. Version 8.3.11.1 Introduced on the Z9000. Version 7.7.1.0 Introduced on the S-Series. • reload – reboots Dell Networking OS. stack-unit provision Preconfigure a logical stacking ID of a switch that joins the stack. This is an optional command that is executed on the management unit.
PAGE 1510
• show system (S-Series and Z-Series) – displays the status of all stack members or a specific member. stack-unit stack-group Configure the stacking unit and stacking group by specifying an ID when adding units to a stack to ensure the unit is assigned to the correct group. Syntax stack-unit unit-id stack-group stack-group-id To remove the current stack group configuration, use the no stack-unit unitid stack-group stack-id command. Parameters unit-id Enter the stack unit ID.
PAGE 1511
upgrade system stack-unit Copy the boot image or Dell Networking OS from the management unit to one or more stack members. Z9000 Syntax Parameters upgrade {boot | system} stack-unit {all | 0-11 | A | B} boot Enter the keyword boot to copy the boot image from the management unit to the designated stack members. system Enter the keyword system to copy the Dell Networking OS image from the management unit to the designated stack members. stack-unit Enter the stack-unit number.
PAGE 1512
• 1512 show version — displays the current Dell Networking OS version information on the system.
PAGE 1513
Storm Control 51 The Dell Networking operating software storm control feature allows you to limit or suppress traffic during a traffic storm (Broadcast/Unknown Unicast Rate Limiting or Multicast on the C-Series and SSeries). Storm control is supported on the Dell Networking Z-Series platforms. Important Points to Remember • Interface commands can only be applied on physical interfaces (virtual local area networks [VLANs] and link aggregation group [LAG] interfaces are not supported).
PAGE 1514
show storm-control broadcast Display the storm control broadcast configuration. Z9000 Syntax Parameters show storm-control broadcast [interface] interface Defaults none Command Modes • EXEC • EXEC Privilege Command History (OPTIONAL) Enter one of the following interfaces to display the interface-specific storm control configuration: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/ port information.
PAGE 1515
show storm-control multicast Display the storm control multicast configuration. Z9000 Syntax Parameters show storm-control multicast [interface] interface Defaults none Command Modes • EXEC • EXEC Privilege Command History (OPTIONAL) Enter one of the following interfaces to display the interface specific storm control configuration: • For Fast Ethernet, enter the keyword Fastethernet then the slot/port information.
PAGE 1516
show storm-control unknown-unicast Display the storm control unknown-unicast configuration. Z-Series Syntax Parameters show storm-control unknown-unicast [interface] interface Defaults none Command Modes • EXEC • EXEC Privilege Command History (OPTIONAL) Enter one of the following interfaces to display the interface specific storm control configuration: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet then y the slot/port information.
PAGE 1517
storm-control broadcast (Configuration) Configure the percentage of broadcast traffic allowed in the network. Z-Series Syntax storm-control broadcast [packets_per_second in] To disable broadcast rate-limiting, use the no storm-control broadcast [packets_per_second in] command. Parameters percentagedeci mal_value in | out Enter the percentage of broadcast traffic allowed in or out of the network. Optionally, you can designate a decimal value percentage, for example, 55.5%. The decimal range is from .
PAGE 1518
storm-control broadcast (Interface) Configure the percentage of broadcast traffic allowed on an interface (ingress only). Z-Series Syntax storm-control broadcast [packets_per_second in] To disable broadcast storm control on the interface, use the no storm-control broadcast [packets_per_second in] command. Parameters packets_per_se cond in Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554368.
PAGE 1519
storm-control multicast (Configuration) Configure the packets per second (pps) of multicast traffic allowed into the C-Series and S-Series networks only. Z-Series Syntax storm-control multicast packets_per_second in To disable storm-control for multicast traffic into the network, use the no stormcontrol multicast packets_per_second in command. Parameters packets_per_se cond in Enter the packets per second of multicast traffic allowed into the network. The range is from 0 to 33554368.
PAGE 1520
storm-control multicast (Interface) Configure the percentage of multicast traffic allowed on an C-Series or S-Series interface (ingress only) network only. Z-Series Syntax storm-control multicast packets_per_second in To disable multicast storm control on the interface, use the no storm-control multicast packets_per_second in command. Parameters packets_per_se cond in Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554368.
PAGE 1521
Defaults none Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1522
• 100% allows all traffic into the interface. The decimal range is from 0.1 to 0.9. wred-profile name E-Series Only: (Optionally) Enter the keywords wredprofile followed by the profile name to designate a wredprofile. packets_per_se cond in C-Series and S-Series Only: Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554431. Defaults none Command Modes INTERFACE (conf-if-interface-slot/port) Command History This guide is platform-specific.
PAGE 1523
Spanning Tree Protocol (STP) 52 The commands in this chapter configure and monitor the IEEE 802.1d spanning tree protocol (STP) and are supported on the Z-Series Dell Networking switch/routing platform. bridge-priority Set the bridge priority of the switch in an IEEE 802.1D spanning tree. Z-Series Syntax bridge-priority {priority-value | primary | secondary} To return to the default value, use the no bridge-priority command. Parameters priority-value Enter a number as the bridge priority value.
PAGE 1524
pre-Version 6.2.1.1 Introduced on the E-Series. bpdu-destination-mac-address Use the Provider Bridge Group address in Spanning Tree or GVRP PDUs. Syntax Parameters bpdu-destination-mac-address [stp | gvrp] provider-bridge-group xstp Force STP, RSTP, and MSTP to use the Provider Bridge Group address as the destination MAC address in its BPDUs. gvrp Forces GVRP to use the Provider Bridge GVRP Address as the destination MAC address in its PDUs.
PAGE 1525
Parameters stp-id Enter zero (0). The switch supports one spanning tree group with a group ID of 0. protocol Enter the keyword for the type of STP to debug, either mstp, pvst, or rstp. all (OPTIONAL) Enter the keyword all to debug all spanning tree operations. bpdu (OPTIONAL) Enter the keyword bpdu to debug bridge protocol data units. config (OPTIONAL) Enter the keyword config to debug configuration information. events (OPTIONAL) Enter the keyword events to debug STP events.
PAGE 1526
description Enter a description of the spanning tree. Z-Series Syntax description {description} To remove the description from the spanning tree, use the no description {description} command. Parameters description Enter a description to identify the spanning tree (80 characters maximum). Defaults none Command Modes SPANNING TREE (The prompt is “config-stp”.) Command History This guide is platform-specific.
PAGE 1527
Command Modes SPANNING TREE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.
PAGE 1528
Related Commands Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. max-age — changes the wait time before STP refreshes protocol configuration information. hello-time — changes the time interval between BPDUs.
PAGE 1529
Related Commands Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. forward-delay — changes the wait time before STP transitions to the Forwarding state. max-age — changes the wait time before STP refreshes protocol configuration information. max-age To maintain configuration information before refreshing that information, set the time interval for the spanning tree bridge.
PAGE 1530
Related Commands Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. forward-delay — changes the wait time before STP transitions to the Forwarding state. hello-time — changes the time interval between BPDUs. protocol spanning-tree To enable and configure the spanning tree group, enter SPANNING TREE mode. Z-Series Syntax protocol spanning-tree stp-id To disable the Spanning Tree group, use the no protocol spanning-tree stp-id command.
PAGE 1531
Usage Information STP is not enabled when you enter SPANNING TREE mode. To enable STP globally on the switch, use the no disable command from SPANNING TREE mode. Example Dell(conf)#protocol spanning-tree 0 Dell(config-stp)# Related Commands disable — disables spanning tree group 0. To enable spanning tree group 0, use the no disable command. show config Display the current configuration for the mode. Only non-default values display.
PAGE 1532
show spanning-tree 0 Display the spanning tree group configuration and status of interfaces in the spanning tree group. Z9000 Syntax Parameters show spanning-tree 0 [active | brief | guard | interface interface | root | summary] 0 Enter 0 (zero) to display information about that specific spanning tree group. active (OPTIONAL) Enter the keyword active to display only active interfaces in spanning tree group 0.
PAGE 1533
Usage Information Version 8.4.2.1 Added support for the optional guard keyword on the CSeries, S-Series, and E-Series TeraScale. Version 8.3.7.0 Introduced on the S4810. Version 7.7.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. Enable spanning tree group 0 prior to using this command. The following describes the show spanning-tree 0 command shown in the example. Field Description “Bridge Identifier...
PAGE 1534
Example Dell#show spann 0 Executing IEEE compatible Spanning Tree Protocol Bridge Identifier has priority 32768, Address 0001.e800.0a56 Configured hello time 2, max age 20, forward delay 15 We are the root of the spanning tree Current root has priority 32768 address 0001.e800.
PAGE 1535
Usage Information Example (Guard) The following describes the show spanning-tree 0 guard command shown in the example. Field Description Interface Name STP interface. Instance STP 0 instance. Sts Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS), blocking (BLK), or shut down (EDS Shut). Guard Type Type of STP guard configured (Root, Loop, or BPDU guard).
PAGE 1536
portfast [bpduguard [shutdown-onviol ation]] Enter the keyword portfast to enable Portfast to move the interface into Forwarding mode immediately after the root fails. Enter the optional keyword bpduguard to disable the port when it receives a BPDU. Enter the optional keyword shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled. priority priority Enter keyword priority then a number as the priority. The range is from zero (0) to 15. The default is 8.
PAGE 1537
Protocol (RSTP), Multiple Spanning Tree Protocol (MSTP), and Per-VLAN Spanning Tree Plus (PVST+). Root guard is supported on any STP-enabled port or port-channel except when used as a stacking port. When enabled on a port, root guard applies to all VLANs configured on the port. STP root guard and loop guard cannot be enabled at the same time on a port.
PAGE 1538
System Time and Date 53 The commands in this chapter configure time values on the system, either using the Dell Networking operating software, or the hardware, or using the network time protocol (NTP). With NTP, the switch can act only as a client to an NTP clock host. For more information, refer to the “Network Time Protocol” section of the Management chapter in the Dell Networking OS Configuration Guide.
PAGE 1539
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. You can change the order of the month and day parameters to enter the time and date as time day month year. In the switch, the hardware clock is separate from the software and is called the calendar.
PAGE 1540
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. In the switch, the hardware clock is separate from the software and is called the calendar. This hardware clock runs continuously.
PAGE 1541
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.11.1 Introduced on the Z9000. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series.
PAGE 1542
start-day Enter the number of the day. The range is from 1 to 31. You can enter the name of a month to change the order of the display to time day month year. start-year Enter a four-digit number as the year. The range is from 1993 to 2035. start-time Enter the time in hours:minutes. For the hour variable, use the 24-hour format; example, 17:15 is 5:15 pm. end-day Enter the number of the day. The range is from 1 to 31.
PAGE 1543
clock summer-time recurring — sets a date (and time zone) on which to convert the switch to daylight saving time each year. show clock — displays the current clock settings. clock summer-time recurring Set the software clock to convert to daylight saving time on a specific day each year.
PAGE 1544
• last: enter the keyword last to end daylight saving time in the last week of the month. end-day Enter the weekday name that you want daylight saving time to end. Enter the weekdays using the three letter abbreviations; for example Sun, Sat, Mon, and so on. The range is from Sun to Sat. end-month Enter the name of one of the 12 months in English. end-time Enter the time in hours:minutes:seconds. For the hour variable, use the 24-hour format; example, 17:15:00 is 5:15 pm.
PAGE 1545
clock timezone Configure a timezone for the switch. Z-Series Syntax clock timezone timezone-name offset To delete a timezone configuration, use the no clock timezone command. Parameters timezonename Enter the name of the timezone. You cannot use spaces. offset Enter one of the following: • a number from 1 to 23 as the number of hours in addition to universal time coordinated (UTC) for the timezone. • a minus sign (-) then a number from 1 to 23 as the number of hours. Defaults Not configured.
PAGE 1546
clock update-calendar Set the switch hardware clock based on the software clock. Z-Series Syntax clock update-calendar Defaults Not configured. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.11.
PAGE 1547
all Enter the keyword all to display information on all NTP transactions. authentication Enter the keyword authentication to display information on NTP authentication transactions. events Enter the keyword events to display information on NTP events. loopfilter Enter the keyword loopfilter to display information on NTP local clock frequency. packets Enter the keyword packets to display information on NTP packets. select Enter the keyword select to display information on the NTP clock selection.
PAGE 1548
Defaults Not enabled. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.
PAGE 1549
Defaults NTP authentication is not configured by default. If you do not specify the option [0 | 7], 0 is selected by default. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.11.
PAGE 1550
Defaults Disabled. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1551
Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. ntp multicast client To receive NTP information from the network via multicast, configure the switch. Z-Series Syntax ntp multicast client [multicast-address] To disable multicast reception, use the no ntp multicast client [multicast-address] command. Parameters multicastaddress (OPTIONAL) Enter a multicast address.
PAGE 1552
pre-Version 6.1.1.0 Introduced on the E-Series. ntp server Configure an NTP time-serving host. Z-Series Syntax Parameters ntp server {hostname | ipv4-address | ipv6-address} [key keyid] [prefer] [version number] ipv4-address | ipv6-address Enter an IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X). hostname Enter the hostname of the server. key keyid (OPTIONAL) Enter the keyword key and a number as the NTP peer key. The range is from 1 to 4294967295.
PAGE 1553
Usage Information You can configure multiple time-serving hosts (up to 250). From these timeserving hosts, the Dell Networking OS chooses one NTP host with which to synchronize. To determine which server was selected, use the show ntp associations command. Because many polls to NTP hosts can impact network performance, Dell Networking recommends limiting the number of hosts configured. Related Commands show ntp associations — displays the NTP servers configured and their status.
PAGE 1554
Version 9.0.2.0 Introduced on the S6000. Version 8.3.11.1 Introduced on the Z9000. Version 8.5.1.0 Added support for 4-port 40G line cards on ExaScale. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.1.1.0 Introduced on the E-Series. ntp trusted-key Set a key to authenticate the system to which NTP synchronizes. Z-Series Syntax ntp trusted-key number To delete the key, use the no ntp trusted-key number command.
PAGE 1555
Related Commands ntp authentication-key — sets an authentication key for NTP. ntp authenticate — enables the NTP authentication parameters you set. ntp update-calendar Configure the Dell Networking OS to update the calendar (the hardware clock) with the NTP-derived time. Z-Series Syntax ntp update-calendar [minutes] To return to default setting, use the no ntp update-calendar command. Parameters minutes (OPTIONAL) Enter the number of minutes between updates from NTP to the hardware clock.
PAGE 1556
show calendar Display the current date and time based on the switch hardware clock. Z-Series Syntax show calendar Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.
PAGE 1557
Command Modes • EXEC • EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1558
• Command History EXEC Privilege This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information 1558 Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1559
Field Description disp Displays the dispersion. Example Dell#show ntp associations remote ref clock st when poll reach delay offset disp ============================================================= 10.10.120.5 0.0.0.0 16 - 256 0 0.00 0.000 16000.0 *172.16.1.33 127.127.1.0 11 6 16 377 -0.08 -1499.9 104.16 172.31.1.33 0.0.0.0 16 - 256 0 0.00 0.000 16000.0 192.200.0.2 0.0.0.0 16 - 256 0 0.00 0.000 16000.
PAGE 1560
Usage Information The following describes the show ntp status command shown in the Example below. Field Description “Clock is...” States whether or not the switch clock is synchronized, which NTP stratum the system is assigned and the IP address of the NTP peer. “frequency is...” Displays the frequency (in ppm), stability (in ppm) and precision (in Hertz) of the clock in this system. “reference time is...” Displays the reference time stamp. “clock offset is...
PAGE 1561
54 Tunneling Tunneling is supported on the Z9000 platform. tunnel-mode Enable a tunnel interface. This feature is supported on Z9000 platforms. Syntax tunnel mode {ipip | ipv6 | ipv6ip}[decapsulate-any] To disable an active tunnel interface, use the no tunnel mode command. Parameters ipip Enable tunnel in RFC 2003 mode and encapsulate IPv4 and/or IPv6 datagrams inside an IPv4 tunnel. ipv6 Enable tunnel in RFC 2473 mode and encapsulate IPv4 and/or IPv6 datagrams inside an IPv6 tunnel.
PAGE 1562
Configuration of IPv6 commands over decapsulate-any tunnel causes an error. tunnel source Set a source address for the tunnel. Z9000 Syntax tunnel source {ip-address | ipv6–address | interface-typenumber | anylocal} To delete the current tunnel source address, use the no tunnel source command. Parameters ip-address Enter the source IPv4 address in A.B.C.D format. ipv6–address Enter the source IPv6 address in X:X:X:X::X format.
PAGE 1563
to any IPv4 or IPv6 (depending on the tunnel mode) address configured on the switch that is operationally Up. tunnel keepalive Configure the tunnel keepalive target, interval and attempts. Z9000 Syntax tunnel keepalive {ip-address | ipv6-address}[interval {seconds}] [attempts {count | unlimited}] To disable the tunnel keepalive probes use the no tunnel keepalive command. Parameters ip-address ipv6 address Enter the IPv4 or IPv6 address of the peer to which the keepalive probes will be sent.
PAGE 1564
of the far end tunnel peer, rather than to the tunnel destination. This reduces the chance of both ends of the tunnel staying in keepalive down state. If both ends get into a keepalive down state that does not clear in a few seconds, then performing shutdown - no shutdown sequence on one end should bring both ends back to up. tunnel allow-remote Configure an IPv4 or IPv6 address or prefix whose tunneled packets are accepted for decapsulation.
PAGE 1565
If you configure any allow-remote , the tunnel source or tunnel mode commands fail if the outer header address family does not match that of the configured allowremote. Usage Information Allow-remote entries can be configured only on multipoint receive-only tunnels, that is tunnel mode includes decapsulate-any option. This command will fail if any bidirectional tunnel options are configured. Likewise, attempts to configure bidirectional tunnel options will fail if any allow-remote entries are configured.
PAGE 1566
tunnel flow-label Configure the method to set the IPv6 flow label value in the outer tunnel header. Z9000 Syntax tunnel flow-label value To return to the default value of 0, use the no tunnel flow-label value command. Parameters value Enter a value to set the IPv6 flow label value in the tunnel header. The range is from 0 to 1048575. The default value is 0.
PAGE 1567
Usage Information A value of 0 copies the inner packet hop limit (ipv6) or time-to-live (ipv4) in the encapsulated packet to the tunnel header hop limit (ipv6) or time-to-live (ipv4) value. tunnel destination Set a destination endpoint for the tunnel. Z9000 Syntax tunnel destination {ip-address | ipv6–address} To delete a tunnel destination address, use the no tunnel destination {ipaddress | ipv6–address} command. Parameters ip-address Enter the destination IPv4 address for the tunnel.
PAGE 1568
To set the tunnel back to default logical address use the no ip unnumbered command. If the tunnel was previously operational, the tunnel interface is operationally down unless you also configure the tunnel IPv6 address. Parameters interface-type interfacenumber Enter the interface type, followed by a slot number.
PAGE 1569
Parameters interface-type interfacenumber Enter the interface type, followed by the type, slot and port information. interface-type interfacenumber (OPTIONAL) Instead of entering the keyword interface followed by the interface type, slot and port information, as above, you can enter the interface type, followed by just a slot number. Defaults None. Command Modes INTERFACE TUNNEL Command History Usage Information Version 9.3(0.1) Introduced on the S6000 and Z9000. Version 9.4(0.
PAGE 1570
VLAN Stacking 55 With the virtual local area network (VLAN)-stacking feature (also called stackable VLANs and QinQ), you can “stack” VLANs into one tunnel and switch them through the network transparently. The Dell Networking operating software supports this feature on the Z9000 platform. For more information about basic VLAN commands, refer to the Virtual LAN (VLAN) Commands section in the Layer 2 chapter.
PAGE 1571
dei enable Make packets eligible for dropping based on their DEI value. Z9000 Syntax dei enable Defaults Packets are colored green; no packets are dropped. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.
PAGE 1572
Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Introduced on the C-Series and S-Series.
PAGE 1573
Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Instroduces on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 8.3.1.0 Introduced on the C-Series and S-Series. Usage Information You must first enable DEI for this configuration to take effect. Related Commands dei enable – Make packets eligible for dropping based on their DEI value. member Assign a stackable VLAN access or trunk port to a VLAN.
PAGE 1574
Version 9.0.2.0 Introduced on the S6000. Version 8.3.11.1 Introduced on the Z9000. Version 8.2.1.0 Introduced on the E-Series ExaScale. Version 7.6.1.0 Introduced on the C-Series and S-Series. E-Series original Command Usage Information You must enable the stackable VLAN (using the vlan-stack compatible command) on the VLAN prior to adding a member to the VLAN. Related Commands vlan-stack compatible — enables stackable VLAN on a VLAN.
PAGE 1575
Usage Information WARNING: The following message displays to confirm the command: All non-default configurations on the related member ports ports () will be removed. Do you want to continue (y/n)? If you enter “y”, all non-default configurations on any member ports of the current stack group is removed when the unit is rebooted. vlan-stack access Specify a Layer 2 port or port channel as an access port to the stackable VLAN network.
PAGE 1576
vlan-stack compatible Enable the stackable VLAN feature on a VLAN. Z9000 Syntax vlan-stack compatible To disable the Stackable VLAN feature on a VLAN, use the no vlan-stack compatible command. Defaults Not configured. Command Modes CONF-IF-VLAN Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 1577
5 Active Dell# M M M M Gi 13/4 Po1(Gi 13/14-15) Gi 13/18 Gi 13/5 vlan-stack dot1p-mapping Map C-Tag dot1p values to a S-Tag dot1p value. You can separate the C-Tag values by commas and dashed ranges are permitted. Dynamic mode CoS overrides any Layer 2 QoS configuration in case of conflicts.
PAGE 1578
vlan-stack protocol-type Define the stackable VLAN tag protocol identifier (TPID) for the outer VLAN tag (also called the VMAN tag). If you do not configure this command, Dell Networking OS assigns the value 0x9100. Z9000 Syntax Parameters vlan-stack protocol-type number number Enter the hexadecimal number as the stackable VLAN tag. You may specify both bytes of the 2-byte S-Tag TPID. The range is from 0 to FFFF. The default is 9100.
PAGE 1579
Related Commands Number Resulting TPID 81 0x0081 8100 0x8100 portmode hybrid — sets a port (physical ports only) to accept both tagged and untagged frames. A port configured this way is identified as a hybrid port in report displays. vlan-stack trunk — specifies a Layer 2 port or port channel as a trunk port to the Stackable VLAN network. vlan-stack trunk Specify a Layer 2 port or port channel as a trunk port to the Stackable VLAN network.
PAGE 1580
Version 7.6.1.0 Introduced on the C-Series and S-Series. E-Series original Command Usage Information Prior to using this command, to place the interface in Layer 2 mode, execute the switchport command. To remove the trunk port designation, first remove the port (using the no member interface command) from all stackable VLAN-enabled VLANs. Starting with Dell Networking OS version 7.8.1.
PAGE 1581
x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack NUM Status Description * 1 Inactive 20 Active 100 Active Dell(conf-if-vl-20)# Example 2 Q Ports T Gi 0/42 M Gi 0/42 Dell(config)#vlan-stack protocol-type 88A8 Dell(config)#interface gigabitethernet 3/10 Dell(conf-if-gi-3/10)#no shutdown Dell(conf-if-gi-3/10)#switchport Dell(conf-if-gi-3/10)#vlan-stack access Dell(conf-if-gi-3/10)#exit Dell(config)#interface tenGigabitethernet 8/0 Dell(conf-if-te-10/0)#no shutdown Dell(conf-if-te-10/0)#po
PAGE 1582
56 Virtual Link Trunking (VLT) Virtual link trunking (VLT) is supported on the Z-Series platform. VLT allows physical links between two chassis to appear as a single virtual link to the network core. VLT eliminates the requirement for Spanning Tree protocols by allowing link aggregation group (LAG) terminations on two separate distribution or core switches, and by supporting a loop-free topology.
PAGE 1583
ipv6 Enter the keyword ipv6 then an IPv6 address in the X:X:X:X::X format. interval seconds Enter the keyword interval to specify the time interval to send hello messages. The range is from 1 to 5 seconds. The default is 1 second. Defaults 1 second Command Modes VLT DOMAIN Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1584
Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.2(0.2) Added multicast and ndp parameters. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.
PAGE 1585
Command Modes VLT DOMAIN Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Related Commands Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.
PAGE 1586
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.
PAGE 1587
multicast peer-routing timeout Configure the time for a VLT node to retain synced multicast routes or synced multicast outgoing interface (OIF) after a VLT peer node failure. Z9000 Syntax multicast peer-routing timeout value To restore the default value, use the no multicast peer-routing timeout command. Parameters value Enter the timeout value in seconds. The range is from 1 to 1200. The default is 150. Command Modes VLT DOMAIN (conf-vlt-domain) Command History This guide is platform-specific.
PAGE 1588
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.
PAGE 1589
Version 9.2(0.2) Introduced on the Z9000, S4810, and S4820T. peer-routing-timeout Configure the delay after which peer routing is disabled when the peer is unavailable. This command is applicable for both IPV6/ IPV4. Z9000 Syntax peer-routing-timeout value To restore the default value, use the no peer-routing-timeout command. Parameters value Enter the timeout value in seconds. The range is from 1 to 65535. The default value is 0 (no timeout).
PAGE 1590
Default 32768 Command Modes VLT DOMAIN Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.19.
PAGE 1591
Usage Information The version shown in the show vlt brief output command displays the VLT version number which is different from the Dell Networking OS version number. VLT version numbers are begin with odd numbers such as 3 or 5.
PAGE 1592
HeartBeat Timeout: UDP Port: HeartBeat Messages Sent: HeartBeat Messages Received: 3 34998 1026 1025 show vlt counters Displays the counter information. Z9000 Syntax Parameters show vlt counters [arp| igmp-snoop | interface | mac | ndp] arp Enter the keyword arp to display the ARP counter information for the VLT. igmp-snoop Enter the keywords igmp-snoop to display the igmpsnooping counter information for the VLT.
PAGE 1593
------------------------L2 Total MAC-Address Count : IGMP MRouter Vlans count : IGMP Mcast Groups count : ARP entries count : Example (igmp-snoop) Dell# show vlt counter igmp-snoop Total IGMP VLT counters ---------------------IGMP MRouter Vlans count : 1 IGMP Mcast Groups count : 5 Example (igmp-snoop interface portchannel) Dell#show vlt counter igmp-snoop interface port-channel 2 VLT Port-ID: 2 IGMP Counter ----------------------IGMP MRouter Vlans count : 0 IGMP Mcast Groups count : 5 Dell# show vlt cou
PAGE 1594
The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.8.0 Introduced on the S4810.
PAGE 1595
show vlt mismatch Display mismatches in VLT parameters. Z9000 Syntax show vlt mismatch Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.0 Introduced on the S6000. Version 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 1596
show vlt role Displays the VLT peer status, role of the local VLT switch, VLT system MAC address and system priority, and the MAC address and priority of the local VLT device. Z-Series Syntax show vlt role Default Not configured. Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 1597
show vlt statistics Displays statistics on VLT operations. Z9000 Syntax Parameters show vlt statistics [arp | domain | igmp-snoop | mac | multicast | ndp] domain Display the VLT statistics for the domain. multicast Display the VLT statistics for multicast. mac Display the VLT statistics for the MAC address. arp Display the VLT statistics for ARP. igmp-snoop Display the VLT statistics for IGMP snooping. ndp Display the VLT statistics for NDP. Default Not configured.
PAGE 1598
ICL Hello's Received: Domain Mismatch Errors: Version Mismatch Errors: Config Mismatch Errors: 910 0 0 0 VLT MAC Statistics ---------------L2 Info Pkts sent:6, L2 Mac-sync Pkts Sent:0 L2 Info Pkts Rcvd:3, L2 Mac-sync Pkts Rcvd:2 L2 Reg Request sent:1 L2 Reg Request rcvd:2 L2 Reg Response sent:1 L2 Reg Response rcvd:1 VLT Igmp-Snooping Statistics ------------------------------IGMP Info Pkts sent: 4 IGMP Info Pkts Rcvd: 1 IGMP Reg Request sent: 1 IGMP Reg Request rcvd: 2 IGMP Reg Response sent: 1 IGMP Reg R
PAGE 1599
show vlt statistics igmp-snoop Displays the informational packets and IGMP control PDUs that are exchanged between VLT peer nodes. Syntax show vlt statistics igmp-snoop Default Not configured. Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Example Version 9.0.2.
PAGE 1600
Command Modes VLT DOMAIN Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T.
PAGE 1601
Usage Information Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.8.0 Introduced on the S4810. When you create a VLT domain on a switch, Dell Networking OS automatically assigns a unique unit ID (0 or 1) to each peer switch. The unit IDs are used for internal system operations.
PAGE 1602
Version 8.3.8.0 Introduced on the S4810. Usage Information The VLT domain ID must be the same between the two VLT devices. If the domain ID is not the same, a syslog message is generated and VLT does not launch. Related Commands show vlt — uses the show vlt brief command to display the delay-restore value. vlt-peer-lag port-channel Associate the port channel to the corresponding port channel in the VLT peer for the VLT connection to an attached device.
PAGE 1603
Because the VLT LAG interfaces are terminated on two different nodes, PVLAN configuration of VLT VLANs and VLT LAGs are symmetrical and identical on both the VLT peers. PVLANs provide Layer 2 isolation between ports within the same VLAN. A PVLAN partitions a traditional VLAN into sub-domains identified by a primary and secondary VLAN pair. With VLT being a Layer 2 redundancy mechanism, support for configuration of VLT nodes in a PVLAN enables Layer 2 security functionalities.
PAGE 1604
configured as a VLT VLAN on one peer and a non-VLT VLAN on another peer, the VLTi is added as a member of that VLAN by verifying the PVLAN parity on both the peers. In such a case, if a PVLAN is present as a VLT PVLAN on at least one of the peers, then symmetric configuration of the PVLAN is validated to cause the VLTi to be a member of that VLAN.
PAGE 1605
During the booting phase or when the ICL link attempts to come up, a system logging message is recorded if VLT PVLAN mismatches, PVLAN mode mismatches, PVLAN association mismatches, or PVLAN port mode mismatches occur. Also, you can view these discrepancies if any occur by using the show vlt mismatch command. Interoperation of VLT Nodes in a PVLAN with ARP Requests When an ARP request is received, and the following conditions are applicable, the IP stack performs certain operations.
PAGE 1606
VLT LAG Mode PVLAN Mode of VLT VLAN Peer1 Peer2 Peer1 Peer2 Promiscuo us Promiscuo us Primary Access Promiscuo us Access Promiscuo us ICL VLAN Membership Mac Synchronization Primary Yes Yes - Secondary (Community) - Secondary (Isolated) No No Secondary (Community) Secondary (Isolated) No No • • Yes Yes Primary X Primary X Primary Primary Yes Yes - Secondary (Community) - Secondary (Community) Yes Yes - Secondary (Isolated) - Secondary (Isolated) Yes Yes Promiscuo
PAGE 1607
show vlt private-vlan Display the association of private VLAN (PVLAN) with the VLT LAG. You can configure VLT peer nodes in a PVLAN on the Z9000 platforms. Syntax show vlt private-vlan Command Modes EXEC Command History Version 9.4(0.0) Introduced on the S6000 platform. Version 9.3(0.0) Introduced on the Z9000, S4810, and S4820T platforms.
PAGE 1608
57 VLT Proxy Gateway This chapter describes the VLT Proxy Gateway feature. proxy-gateway lldp Configure the LLDP proxy gateway Z9000 Syntax proxy-gateway lldp Command Modes VLT DOMAIN Command History Usage Information Version 9.4(0.0) Introduced on the S4810, S4820T, S6000, Z9000, and MXL Switch.
PAGE 1609
proxy-gateway static Configure the VLT static proxy gateway Z9000 Syntax [no] proxy-gateway static Command Modes VLT DOMAIN Command History Version 9.4(0.0) Introduced on the S4810, S4820T, S6000, Z9000, and MXL Switch. Usage Information When proxy-gateway static configuration is made, the setting is saved in the Layer 2 application.
PAGE 1610
Command Modes Command History VLT DOMAIN PROXY GW STATIC Version 9.4(0.0) Introduced on the S4810, S4820T, S6000, Z9000, and MXL Switch. Usage Information You can configure the remote MAC address of the VLT peer to be associated with the static VLT proxy gateway and exclude a VLAN or a range of VLANs from proxy routing. This parameter is for a static VLT proxy gateway configuration.
PAGE 1611
Example Dell(conf)#vlt-domain 1 Dell(conf-vlt-domain)#proxy-gateway lldp Dell(conf-vlt-domain-proxy-gw-lldp)#peer-domain-link portchannel 20 exclude-vlan 3 proxy-gateway peer-timeout Configure the proxy-gateway VLT peer timeout value. Z9000 Syntax Parameters Command Modes Command History [no] peer-timeout value value Enter the timeout value in seconds. The range is from 1 to 65535. The default is infinity. VLT DOMAIN PROXY GW LLDP Version 9.4(0.
PAGE 1612
Usage Information In a square VLT topology with only one link connecting remote peers, if you configure this command, any node has to send its VLT peer’s MAC address along with its own MAC address to the remote VLT domain. By default, a node will send only its own MAC address to the remote VLT domain. This parameter is applicable for an LLDP proxy gateway configuration. Example Dell(conf-vlt-domain-proxy-gw-lldp)# vlt-peer-mac transmit show vlt-proxy-gateway Display the VLT proxy gateway configuration.
PAGE 1613
Example Dell(conf)#do sh vlt proxy-gateway info static Mac Address Exclude Vlan ---------------------00:01:e8:8b:1c:c0 Dell#show vlt proxy-gateway info LagId Mac Address --------------Po 55 00:01:e8:8a:e8:f7 learnt via port-channel 55 Po 55 00:01:e8:8b:1c:c0 VLT Proxy Gateway lldp Exclude Vlan -----------3,7-8 << Macs 3,7-8 1613
PAGE 1614
Virtual Routing and Forwarding (VRF) 58 Virtual Routing and Forwarding (VRF) allows multiple instances of a routing table to co-exist on the same router at the same time. Virtual Routing and Forwarding (VRF) is supported on the S-Series platforms. ip vrf Creates a customer VRF. Z-Series Syntax ip vrf {vrf-name | management} [vrf_id] To delete a customer VRF, use the no ip vrf {vrf-name | management} [vrf_id] command. Parameters vrf-name Enter the name of the VRF that you want to create.
PAGE 1615
description Enables you to specify a descriptive name for a customer VRF. Z-Series Syntax description string To delete the descriptive name for a customer VRF, use the no description string command. Parameters string Enter a descriptive name for the VRF. Defaults None. Command Modes VRF MODE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1616
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.4. (0.0) Introduced on the S-Series and Z-Series. Version 8.2.1.0 Introduced on the E-Series. Version Introduced on the S4810. Version Introduced on the S-Series. Version Introduced on the C-Series.
PAGE 1617
interface management Associates a management port with a management VRF. Z-Series Syntax interface management To delete the association between a management port and a management VRF, use the no interface management command. Defaults None. Command Modes VRF MODE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1618
Example Version 9.4. (0.0) Introduced on the S-Series and Z-Series. Version 8.2.1.0 Introduced on the E-Series.
PAGE 1619
Version 9.4. (0.0) Introduced on the S-Series Z-Series. Version 8.2.1.0 Introduced on the E-Series. Usage Information Use this command to display configuration information corresponding to either a specific VRF or all the VRFs in the system.
PAGE 1620
Virtual Router Redundancy Protocol (VRRP) 59 Virtual router redundancy protocol (VRRP) is supported by the Dell Networking operating system on the Z-Series platform. IPv4 VRRP Commands The following are IPv4 VRRP commands. advertise-interval Set the time interval between VRRP advertisements. Z-Series Syntax advertise-interval {seconds | centisecs centisecs } To return to the default settings, use the no advertise-interval command. Parameters seconds Enter a number of seconds.
PAGE 1621
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. Dell Networking recommends keeping the default setting for this command. If you do change the time interval between VRRP advertisements on one router, change it on all routers.
PAGE 1622
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. The given password is encrypted by the system and the show config displays an encrypted text string for any of the encrypted typed used. clear counters vrrp Clear the counters maintained on VRRP operations.
PAGE 1623
debug vrrp Allows you to enable debugging of VRRP. Z-Series Syntax debug vrrp interface [vrrp-id] {all | bfd | database | interface | ipv6 | packets | state | timer} To disable debugging, use the no debug vrrp interface [vrrp-id] {all | bfd | database | interface | ipv6 | packets | state | timer} command. Parameters interface Enter the following keywords and slot/port or number information • For Port Channel interface types, enter the keywords port-channel then the number. The range is from 1 to 128.
PAGE 1624
Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.5.1.
PAGE 1625
Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. disable Disable a VRRP group. Z-Series Syntax disable To re-enable a disabled VRRP group, use the no disable command. Command Modes VRRP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1626
To return to the default value, use the no hold-time command. Parameters seconds Enter the number of seconds. The range is from 0 to 65535. The default is zero (0) seconds. centisecs centisecs Enter the keyword centisecs then the number of centisecs in units of 25 centisecs . The range is from 0 to 65525 in units of 25 centisecs. Defaults zero (0) seconds or or (0) centiseconds Command Modes VRRP Command History This guide is platform-specific.
PAGE 1627
Defaults Enabled (that is, a BACKUP router can preempt the MASTER router). Command Modes VRRP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.
PAGE 1628
Usage Information Version 8.3.16.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. To guarantee that a VRRP group becomes MASTER, configure the VRRP group’s virtual address with same IP address as the interface’s primary IP address and change the priority of the VRRP group to 255.
PAGE 1629
Example Dell(conf-if-vrid-4)#show con vrrp-group 4 virtual-address 119.192.182.124 ! show vrrp View the VRRP groups that are active. If no VRRP groups are active, the FTOS returns No Active VRRP group. Z9000 Syntax Parameters show vrrp [vrrp-id] [interface] [brief][ipv6] vrrp-id (OPTIONAL) Enter the Virtual Router Identifier for the VRRP group to view only that group. The range is from 1 to 255.
PAGE 1630
Usage Information Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. The following describes the show vrrp brief command shown in the following example. Item Description Interface Lists the interface type, slot and port on which the VRRP group is configured. Grp Displays the VRRP group ID. Pri Displays the priority value assigned to the interface.
PAGE 1631
Usage Information The following describes the show vrrp command shown in the following example. Item Description GigabitEthernet 12/3... Displays the Interface, the VRRP group ID, and the network address. If the interface is not sending VRRP packets, 0.0.0.0 appears as the network address. State: master... Displays the interface’s state: • Na/If (not available) • master (MASTER virtual router) • backup (BACKUP virtual router) the interface’s priority and the IP address of the MASTER. Hold Down:.
PAGE 1632
State: Master, Priority: 105, Master: 10.1.1.253 (local) Hold Down: 0 sec, Preempt: TRUE, AdvInt: 1 sec Adv rcvd: 0, Adv sent: 1862, Gratuitous ARP sent: 0 Virtual MAC address: 00:00:5e:00:01:01 Virtual IP address: 10.1.1.252 Authentication: (none) Tracking states for 1 interfaces: Up GigabitEthernet 12/17 priority-cost 10 -----------------GigabitEthernet 12/4, VRID: 2, Net: 10.1.2.253 State: Master, Priority: 110, Master: 10.1.2.
PAGE 1633
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced support for telnetting to the VRRP group IP address assigned using this command. pre-Version 6.2.1.1 Introduced on the E-Series.
PAGE 1634
Usage Information Related Command Version 9.0.2.0 Introduced on the S6000. Version 9.0.0.0 Introduced on the Z9000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.8.0 Introduced on the S4810. This command applies to a single interface. When used with the vrrp delay reload CLI, the later timer rules the VRRP enabling.
PAGE 1635
For example, if vrrp delay reload is 600 and the vrrp delay minimum is 300: • When the system reloads, VRRP waits 600 seconds (10 minutes) to bring up VRRP on all interfaces that are up and configured for VRRP. • When an interface comes up, whether as part of a system reload or an interface reload, the system waits 300 seconds (5 minutes) to bring up VRRP on that interface. Save the configuration and reload the system for the delay timers to take effect.
PAGE 1636
Related Command virtual-address — assigns up to 12 virtual IP addresses per VRRP group. version Set VRRP protocol version for IPv4 group. Syntax version {2 | 3 | both} To return to the default setting, use the no version command. Parameters 2 Enter the 2 parameter to specify VRRP version 2 as defined by RFC 3768, Virtual Router Redundancy Protocol. 3 Enter the 2 parameter to specify VRRP version 3 as defined in RFC 5798, Virtual Router Redundancy.
PAGE 1637
Dell(conf-if-te-0/0-vrid-100)#version 3 IPv6 VRRP Commands The following are IPv6 VRRP commands. • clear counters vrrp ipv6 • debug vrrp ipv6 • show vrrp ipv6 • vrrp-ipv6-group The following commands apply to IPv4 and IPv6: • advertise-interval • description • disable • hold-time • preempt • priority • show config • virtual-address clear counters vrrp ipv6 Clear the counters recorded for IPv6 VRRP groups.
PAGE 1638
Version 8.3.10.0 Introduced on the S4810. Version 8.4.1.0 Introduced on E-Series ExaScale, C-Series, and S-Series. Support was added for IPv6 VRRP groups in non-default VRF instances. Version 8.3.2.0 Introduced on the E-Series TeraScale. debug vrrp ipv6 Allows you to enable debugging of VRRP.
PAGE 1639
The following is a list of the Dell Networking OS version history for this command. Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.10.0 Introduced on the S4810. Version 8.4.1.0 Introduced on E-Series ExaScale, C-Series, and S-Series. Support was added for IPv6 VRRP groups in non-default VRF instances. Version 8.3.2.0 Introduced on the E-Series TeraScale. If no options are specified, debug is active on all interfaces and all VRRP groups.
PAGE 1640
Usage Information Version 8.3.19.0 Introduced on the S4820T. Version 8.3.10.0 Introduced on the S4810. Version 8.3.2.0 Introduced on the E-Series TeraScale. The following describes the show vrrp ipv6 command shown in the following example. Line Beginning with Description GigabitEthernet... Displays the Interface, the VRRP group ID, and the network address. If the interface is no sending VRRP packets, 0.0.0.0 appears as the network address.
PAGE 1641
Line Beginning with Example Description • UP or DOWN state of the tracked interface or object (Up or Dn). • Interface type and slot/port or object number, description, and time since the last change in the state of the tracked object. • Cost to be subtracted from the VRRP group priority if the state of the tracked interface/object goes DOWN.
PAGE 1642
Usage Information Version 8.3.7.0 Introduced on the S4810. Version 8.3.2.0 Introduced on the E-Series TeraScale. The VRRP group only becomes active and sends VRRP packets when a link-local virtual IP address is configured. When you delete the virtual address, the VRRP group stops sending VRRP packets. • When VRF microcode is not loaded in CAM, the VRID for a VRRP group is the same as the VRID number configured with the vrrp-group or vrrp-ipv6group command.
PAGE 1643
Usage Information Version 9.5(0.0) Added support for centisecs on the Z9000, S6000, S4820T, S4810, and MXL. Version 9.2(1.0) Introduced on the Z9500. Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series.
PAGE 1644
Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. disable Disable a VRRP group. Z-Series Syntax disable To re-enable a disabled VRRP group, use the no disable command. Command Modes VRRP Command History This guide is platform-specific.
PAGE 1645
hold-time Specify a delay (in seconds) before a switch becomes the MASTER virtual router. By delaying the initialization of the VRRP MASTER, the new switch can stabilize its routing tables. Z-Series Syntax hold-time {seconds | centisecs centisecs} To return to the default value, use the no hold-time command. Parameters seconds Enter the number of seconds. The range is from 0 to 65535. The default is zero (0) seconds.
PAGE 1646
preempt To preempt or become the MASTER router, permit a BACKUP router with a higher priority value. Z-Series Syntax preempt To prohibit preemption, use the no preempt command. Defaults Enabled (that is, a BACKUP router can preempt the MASTER router). Command Modes VRRP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1647
Defaults 100 Command Modes VRRP Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.16.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.
PAGE 1648
Example Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. pre-Version 6.2.1.1 Introduced on the E-Series. Dell(conf-if-vrid-4)#show con vrrp-group 4 virtual-address 119.192.182.124 ! virtual-address Configure up to 12 IP addresses of virtual routers in the VRRP group.
PAGE 1649
Usage Information Version 9.0.2.0 Introduced on the S6000. Version 8.3.19.0 Introduced on the S4820T. Version 8.3.11.1 Introduced on the Z9000. Version 8.3.7.0 Introduced on the S4810. Version 7.6.1.0 Introduced on the S-Series. Version 7.5.1.0 Introduced on the C-Series. Version 7.4.1.0 Introduced support for telnetting to the VRRP group IP address assigned using this command. pre-Version 6.2.1.1 Introduced on the E-Series.