Users Guide

ManualsBrandsDell ManualsAccess PlatformsFN IO Module

Dell PowerEdge FN I/O Module

Command Line Reference Guide

9.14.0.0

Summary of content (1433 pages)

PAGE 1
Dell PowerEdge FN I/O Module Command Line Reference Guide 9.14.0.
PAGE 2
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. Copyright © 2018 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
PAGE 3
Contents 1 About this Guide...........................................................................................................................................46 Objectives......................................................................................................................................................................... 46 Audience........................................................................................................................................................
PAGE 4
dir....................................................................................................................................................................................... 67 format flash.......................................................................................................................................................................67 HTTP Copy via CLI...........................................................................................................................
PAGE 5
http-server........................................................................................................................................................................96 ip ftp password.................................................................................................................................................................96 ip ftp source-interface................................................................................................................................
PAGE 6
802.1X........................................................................................................................................................ 136 debug dot1x..................................................................................................................................................................... 137 dot1x authentication (Configuration)............................................................................................................................
PAGE 7
permit (for Extended IP ACLs)...................................................................................................................................... 171 permit icmp......................................................................................................................................................................173 permit tcp.........................................................................................................................................................
PAGE 8
show route-map.............................................................................................................................................................208 deny (for Standard IP ACLs)........................................................................................................................................ 209 deny.....................................................................................................................................................................
PAGE 9
bfd all-neighbors.............................................................................................................................................................276 bfd disable....................................................................................................................................................................... 278 bfd enable (Configuration).............................................................................................................................
PAGE 10
clear ip bgp dampening................................................................................................................................................. 308 clear ip bgp flap-statistics............................................................................................................................................ 308 clear ip bgp peer-group................................................................................................................................................
PAGE 11
shutdown address-family-ipv4–multicast................................................................................................................... 337 shutdown address-family-ipv4–unicast...................................................................................................................... 337 shutdown address-family-ipv6–unicast...................................................................................................................... 338 show capture bgp-pdu neighbor.......
PAGE 12
clone-config check........................................................................................................................................................ 376 clone-config create........................................................................................................................................................ 377 12 Content Addressable Memory (CAM).......................................................................................................
PAGE 13
bandwidth-percentage..................................................................................................................................................403 dcb-enable......................................................................................................................................................................403 dcb-policy buffer-threshold (Global Configuration)...................................................................................................
PAGE 14
Commands to Configure the System to be a DHCP Server.................................................................................... 443 clear ip dhcp............................................................................................................................................................. 443 debug ip dhcp server...............................................................................................................................................444 debug ipv6 dhcp .............
PAGE 15
ip dhcp relay............................................................................................................................................................. 462 show ip dhcp snooping........................................................................................................................................... 463 show ipv6 DHCP snooping.....................................................................................................................................
PAGE 16
fip-snooping port-mode fcf.................................................................................................................................... 493 show fip-snooping statistics.........................................................................................................................................493 debug fip-snooping........................................................................................................................................................
PAGE 17
ip igmp query-max-resp-time....................................................................................................................................... 525 ip igmp snooping enable................................................................................................................................................525 ip igmp snooping fast-leave..........................................................................................................................................
PAGE 18
show interfaces description................................................................................................................................... 564 show interfaces stack-unit..................................................................................................................................... 565 show interfaces status............................................................................................................................................
PAGE 19
arp learn-enable............................................................................................................................................................. 602 arp retries........................................................................................................................................................................602 arp timeout............................................................................................................................................
PAGE 20
26 Internet Protocol Security (IPSec).......................................................................................................... 639 crypto ipsec transform-set...........................................................................................................................................639 crypto ipsec policy..........................................................................................................................................................
PAGE 21
show ipv6 route..............................................................................................................................................................670 trust ipv6-diffserv.......................................................................................................................................................... 672 29 IPv6 Border Gateway Protocol (IPv6 BGP)..............................................................................................
PAGE 22
maximum-paths....................................................................................................................................................... 698 neighbor activate..................................................................................................................................................... 698 neighbor advertisement-interval............................................................................................................................
PAGE 23
show ip bgp ipv6 unicast neighbors...................................................................................................................... 725 show ip bgp ipv6 unicast peer-group.................................................................................................................... 728 show ip bgp ipv6 unicast summary....................................................................................................................... 729 show ip bgp next-hop.......................
PAGE 24
30 iSCSI Optimization...................................................................................................................................757 advertise dcbx-app-tlv.................................................................................................................................................. 757 iscsi aging time...............................................................................................................................................................
PAGE 25
isis csnp-interval.............................................................................................................................................................784 isis csnp-interval.............................................................................................................................................................784 isis hello-multiplier.....................................................................................................................................
PAGE 26
lacp long-timeout............................................................................................................................................................816 lacp port-priority.............................................................................................................................................................816 port-channel mode...........................................................................................................................................
PAGE 27
multiplier..........................................................................................................................................................................849 protocol lldp (Configuration)........................................................................................................................................ 850 protocol lldp (Interface).....................................................................................................................................
PAGE 28
forward-delay..................................................................................................................................................................877 hello-time........................................................................................................................................................................ 878 max-age...............................................................................................................................................
PAGE 29
show interfaces status..................................................................................................................................................909 show npiv devices.......................................................................................................................................................... 910 show qos dcb-map....................................................................................................................................................
PAGE 30
redistribute isis............................................................................................................................................................... 940 router-id........................................................................................................................................................................... 941 router ospf.......................................................................................................................................
PAGE 31
ipv6 ospf encryption......................................................................................................................................................984 ipv6 ospf graceful-restart helper-reject......................................................................................................................986 ipv6 ospf hello-interval..................................................................................................................................................
PAGE 32
show ip pim interface................................................................................................................................................... 1016 show ip pim neighbor....................................................................................................................................................1017 show ip pim rp.......................................................................................................................................................
PAGE 33
47 Per-VLAN Spanning Tree Plus (PVST+)...................................................................................................1051 description..................................................................................................................................................................... 1051 disable............................................................................................................................................................................
PAGE 34
qos-policy-output...................................................................................................................................................1080 rate police.................................................................................................................................................................1081 rate shape............................................................................................................................................................
PAGE 35
offset-list..........................................................................................................................................................................1111 output-delay................................................................................................................................................................... 1112 passive-interface................................................................................................................................
PAGE 36
aaa authorization config-commands..................................................................................................................... 1141 aaa authorization exec............................................................................................................................................ 1141 accounting...............................................................................................................................................................
PAGE 37
dynamic-auth-enable..............................................................................................................................................1170 ip radius source-interface........................................................................................................................................1171 port............................................................................................................................................................................
PAGE 38
ssh.............................................................................................................................................................................1199 ip ssh pub-key-file.................................................................................................................................................. 1200 Secure DHCP Commands...........................................................................................................................................
PAGE 39
SNMP Commands........................................................................................................................................................1227 clear logging auditlog................................................................................................................................................... 1227 show snmp..............................................................................................................................................................
PAGE 40
terminal monitor........................................................................................................................................................... 1258 56 Stacking Commands.............................................................................................................................. 1260 power-cycle stack-unit................................................................................................................................................
PAGE 41
action-manifest show............................................................................................................................................ 1289 enable.......................................................................................................................................................................1289 SupportAssist Company Commands.........................................................................................................................1290 address.....
PAGE 42
ntp trusted-key.............................................................................................................................................................1320 show clock.................................................................................................................................................................... 1320 show ntp associations......................................................................................................................................
PAGE 43
description.....................................................................................................................................................................1344 downstream.................................................................................................................................................................. 1344 downstream auto-recover..................................................................................................................................
PAGE 44
vlt domain...................................................................................................................................................................... 1374 vlt-peer-lag port-channel.............................................................................................................................................1374 show vlt private-vlan..........................................................................................................................................
PAGE 45
69 Debugging and Diagnostics.................................................................................................................... 1409 Offline Diagnostic Commands.................................................................................................................................... 1409 Hardware Commands...................................................................................................................................................1410 clear hardware stack-unit...
PAGE 46
1 About this Guide This book provides information about the Dell Networking OS command line interface (CLI) on the Dell PowerEdge FN I/O Module. This book also includes information about the protocols and features found in the Dell Networking OS and on the Dell Networking systems supported by the Dell Networking OS.
PAGE 47
[X] Keywords and parameters within brackets are optional. x|y Keywords and parameters separated by a bar require you to choose one option. x||y Keywords and parameters separated by a double bar allow you to choose any or all of the options. Information Icons This book uses the following information symbols: NOTE: The Note icon signals important operational information. CAUTION: The Caution icon signals information about situations that could result in equipment damage or loss of data.
PAGE 48
2 Before You Start By following the instructions in the Dell PowerEdge FN I/O Module Getting Started Guide that is shipped with the product, you install the FN I/O Module in a Dell PowerEdge FX2 server chassis. The Aggregator installs with zero-touch configuration. After you power it on, an Aggregator boots up with default settings and autoconfigures with software features enabled. This chapter describes the default settings and software features that are automatically configured at startup.
PAGE 49
Default Settings The I/O Aggregator provides zero-touch configuration with the following default configuration settings: • Default user name (root) • Password (calvin) • VLAN (vlan1) and IP address for in-band management (DHCP-assigned) • IP address for out-of-band (OOB) management (DHCP-assigned) • Read-only SNMP community name (public) • Broadcast storm control (enabled) • Unregistered Multicast Packets flooding (enabled) • IGMP snooping in all VLANs except the default VLAN (enabled) • VL
PAGE 50
FCoE Connectivity Many data centers use Fibre Channel (FC) in storage area networks (SANs). Fibre Channel over Ethernet (FCoE) encapsulates Fibre Channel frames over Ethernet networks. On an Aggregator, the internal ports support FCoE connectivity and connect to the converged network adapter (CNA) in blade servers. FCoE allows Fibre Channel to use 10-Gigabit Ethernet networks while preserving the Fibre Channel protocol. The Aggregator also provides zero-touch configuration for FCoE configuration.
PAGE 51
When you configure VLANs on server-facing interfaces (ports 1 to 8), you can assign VLANs to a port or a range of ports by entering the vlan tagged or vlan untagged commands in interface configuration mode; for example: Dell(conf)# interface tengigabitethernet 0/2 - 4 Dell(conf-if-range-te-0/2-4)# vlan tagged 5,7,10-12 Dell(conf-if-range-te-0/2-4)# vlan untagged 3 NOTE: You can also use the CMC interface to configure VLANs.
PAGE 52
Where to Go From Here You can customize the Aggregator for use in your data center network as necessary. To perform additional switch configuration, do one of the following: • For remote out-of-band management, enter the OOB management interface IP address into a Telnet or SSH client and log in to the switch using the user ID and password to access the CLI. • For local management using the CLI, use the attached console connection.
PAGE 53
3 CLI Basics This chapter describes the command line interface (CLI) structure and command modes. The Dell operating system commands are in a text-based interface that allows you to use the launch commands, change command modes, and configure interfaces and protocols.
PAGE 54
% Warning: The following users are currently configuring the system: User "" on line User "admin" on User "admin" on User "Irene" on Dell#conf console0 line vty0 ( 123.12.1.123 ) line vty1 ( 123.12.1.123 ) line vty3 ( 123.12.1.321 ) When another user enters CONFIGURATION mode, the Dell Networking OS sends a message similar to the following: % Warning: User "admin" on line vty2 "172.16.1.210" is in configuration In this case, the user is “admin” on vty2.
PAGE 55
brief functional description: To obtain a list of available options: Type a keyword and then type a space and a ?. To obtain a list of partial keywords using a partial keyword: Type a partial keyword and then type a ?.
PAGE 56
Using the Keyword no Command To disable, delete or return to default values, use the no form of the commands. For most commands, if you type the keyword no in front of the command, you disable that command or delete it from the running configuration. In this guide, the no form of the command is described in the Syntax portion of the command description.
PAGE 57
Dell#show running-config|no-more Filtering the Command Output Multiple Times You can filter a single command output multiple times. To filter a command output multiple times, place the save option as the last filter. For example: Dell# command | grep regular-expression | except regular-expression | grep other-regularexpression | find regular-expression | no-more | save Command Modes To navigate and launch various CLI modes, use specific commands.
PAGE 58
To enter INTERFACE mode: 1 Verify that you are logged in to CONFIGURATION mode. 2 Enter the interface command and then enter an interface type and interface number that is available on the switch. The prompt changes to include the designated interface and slot/port number.
PAGE 59
Track Login Activity Dell Networking OS enables you to track the login activity of users and view the successful and unsuccessful login events. When you log in using the console or VTY line, the system displays the last successful login details of the current user and the number of unsuccessful login attempts since your last successful login to the system. The system stores the number of unsuccessful login attempts that have occurred in the last 30 days by default.
PAGE 60
-----------------------------------------------------------------User: admin Last login time: Mon Feb 16 04:40:00 2015 Last login location: Line vty0 ( 10.14.1.
PAGE 61
Configuring Concurrent Session Limit To configure concurrent session limit, follow this procedure: • Limit the number of concurrent sessions for all users. CONFIGURATION mode login concurrent-session limit number-of-sessions Example of Configuring Concurrent Session Limit The following example limits the permitted number of concurrent login sessions to 4.
PAGE 62
3 vty 1 10.14.1.97 4 vty 2 10.14.1.97 5 vty 3 10.14.1.
PAGE 63
4 File Management This chapter contains commands needed to manage the configuration files and includes other file management commands. boot system gateway Specify the IP address of the default next-hop gateway for the management subnet. Syntax Parameters boot system gateway ip-address ip-address Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information Enter an IP address in dotted decimal format. Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.
PAGE 64
Usage Information Version Description 8.3.17.0 Supported on the M I/O Aggregator. 9.4(0.0) Supported on the FN I/O aggregator. The system first attempts to load the image from the primary path. If it fails to boot, the system tries to load the image from the secondary path and if that also fails, the system loads the default image. cd Change to a different working directory.
PAGE 65
Usage Information Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. The Dell Networking OS supports a maximum of 100 files, at the root directory level, on both the internal and external Flash. The usbflash commands are supported. For a list of approved USB vendors, refer to the Dell Networking OS Release Notes.
PAGE 66
Password to login remote host: Destination file name [test.cfg]: test1.cfg Related Commands cd — Changes the working directory. copy running-config startup-config Copy running configuration to the startup configuration. Syntax copy running-config startup-config {duplicate} Command Modes EXEC Privilege Supported Modes All Modes Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.
PAGE 67
dir Displays the files in a file system. The default is the current directory. Syntax Parameters dir [filename | directory name:] filename | directory name: Command Modes EXEC Privilege Supported Modes All Modes Command History Example (OPTIONAL) Enter one of the following: • For a file or directory on the internal Flash, enter flash:// then the filename or directory name. • For a file or directory on an external USB drive, enter usbflash:// then the filename or directory name.
PAGE 68
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. You must include the colon (:) when entering this command. CAUTION: This command deletes all files, including the startup configuration file. So, after executing this command, consider saving the running config as the startup config (use the write memory command or copy run start command).
PAGE 69
Example copy http://admin:admin123@10.16.206.77/sample_file flash://sample_file Related Commands copy ftp:flash Copy files from FTP server to switch logging coredump stack-unit Enable the coredump. Syntax logging coredump stack-unit all Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 70
Usage Information Because flash space may be limited, using this command ensures your entire crash kernel files are uploaded successfully and completely. Only a single coredump server can be configured. Configuration of a new coredump server over-writes any previously configured server. NOTE: You must disable logging coredump before you designate a new server destination for your core dumps. Related Commands logging coredump – disables the kernel coredump pwd Display the current working directory.
PAGE 71
restore factory-defaults Restore factory defaults. Syntax Parameters restore factory-defaults stack-unit id {clear-all | nvram} factory-defaults Return the system to its factory default mode. id Enter the stack member unit identifier to restore the mentioned stack-unit. The range is from 0 to 6. Enter the keyword all to restore all units in the stack. clear-all Enter the keywords clear-all to reset the NvRAM and the system startup configuration. nvram Enter the keyword nvram to reset the NvRAM only.
PAGE 72
Example (NvRAM, all) Dell#restore factory-defaults stack-unit all nvram ************************************************* *Warning - Restoring factory defaults will delete the existing* *persistent settings (stacking, fanout, etc.)* *All the units in the stack will be split into standalone units.* *After restoration the unit(s) will be powercycled immediately.
PAGE 73
Example Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Dell#show boot system stack-unit all Current system image information in the system: ============================================= Type Boot Type A B --------------------------------------------Stack-unit 0 is not present. Stack-unit 1 DOWNLOAD BOOT 9-1-0-218 9-1-0-202 Stack-unit 2 is not present. Stack-unit 3 is not present. Stack-unit 4 is not present. Stack-unit 5 is not present.
PAGE 74
show file-systems Displays information about the file systems on the system. Syntax show file-systems Command Modes EXEC Privilege Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 75
Parameters file-url Defaults none Command Modes EXEC Privilege Supported Modes All Modes Command History Usage Information Example (OPTIONAL) Enter the following location keywords and information: • For a file on the internal Flash, enter flash:// then the filename. • For a file on an FTP server, enter ftp://user:password@hostip/filepath. • For a file on a TFTP server, enter tftp://hostip/filepath. • For a file on the external Flash, enter usbflash://filepath then the filename.
PAGE 76
for the current IGMP configuration interface for the current interface configuration line for the current line configuration lldp for the current lldp configuration logging for the current logging configuration managementroute for the current Management port forwarding configuration monitor for the current Monitor configuration snmp for the current SNMP configuration uplink-stategroup for the uplink state group configuration users for the current users configuration configured (OPTIONAL)
PAGE 77
no shutdown Dell# Usage Information The status option allows you to display the size and checksum of the running configuration and the startup configuration. show startup-config Display the startup configuration. Syntax show startup-config Command Modes EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 78
Example Dell#show version Dell Force10 Real Time Operating System Software Dell Force10 Operating System Version: 1.0 Dell Force10 Application Software Version: E8-3-17-38 Copyright (c) 1999-2012 by Dell Inc. All Rights Reserved.
PAGE 79
0–5 Enter the keyword 0–5 to upgrade only the mentioned stack-unit. all Enter the keyword all to upgrade all the member stack-units. booted Enter the keyword booted to upgradefrom the current image in the M I/O Aggregator. ftp: After entering the keyword ftp:, you can either follow it with the location of the source file in this form: //userid:password@hostip/filepath or press Enter to launch a prompt sequence.
PAGE 80
ftp After entering the keyword ftp you can either follow it with the location of the source file in this form://userid:password@hostip/filepath, or press Enter to launch a prompt sequence. scp After entering the keyword scp you can either follow it with the location of the source file in this form://userid:password@hostip/filepath, or press Enter to launch a prompt sequence.
PAGE 81
sha256 Enter the sha256 keyword to use the SHA256 Secure Hash Algorithm flash:// (Optional). Enter the flash:// keyword. The default is to use the flash drive. You can just enter the image file name. img-file Enter the name the Dell Networking software image file to validate. hash-value (Optional). Enter the relevant hash published on i-Support. Defaults flash drive Command Modes EXEC mode Command History Usage Information Example Version Description 9.5(0.
PAGE 82
5 Control and Monitoring This chapter describes control and monitoring for the I/O Aggregator. asf-mode Enable alternate store and forward (ASF) mode and forward packets as soon as a threshold is reached. Syntax asf-mode stack-unit {unit-id | all} queue size To return to standard Store and Forward mode, use the no asf-mode stack unit command. Parameters unit-id Enter the stack member unit identifier of the stack member to reset. The range is from 0 to 5 or all.
PAGE 83
Command Modes EXEC Privilege Supported Modes All Modes Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. show system— Displays the current status of all stack members or a specific member. banner exec Configure a message that is displayed when your enter EXEC mode.
PAGE 84
This is the banner Related Commands banner login — sets a banner for login connections to the system. banner motd — sets a Message of the Day banner. exec-banner — Enables the display of a text string when you enter EXEC mode. line — enables and configures the console and virtual terminal lines to the system. banner login Set a banner to display when logging on to the system. Syntax banner login {acknowledgement | keyboard-interactive | c line c} Enter no banner login to delete the banner text.
PAGE 85
prompt keyboard-interactive Prompt will be displayed by default If you configure the acknowledgement keyword, the system requires a positive acknowledgement from the user while logging in to the system. $ telnet 10.11.178.16 Trying 10.11.178.16... Connected to 10.11.178.16. Escape character is '^]'. THIS IS A LOGIN BANNER. PRESS ‘Y’ TO ACKNOWLEDGE. ACKNOWLEDGE? [y/n]: y Login: admin Password: Related Commands banner motd — sets a Message of the Day banner.
PAGE 86
Command Modes EXEC Privilege Supported Modes All Modes Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. This command clears alarms that are no longer active. If an alarm situation is still active, it is seen in the system output. clear command history Clear the command history log.
PAGE 87
configure Enter CONFIGURATION mode from EXEC Privilege mode. Syntax Parameters configure [terminal] terminal Command Modes EXEC Privilege Supported Modes All Modes Command History Example (OPTIONAL) Enter the keyword terminal to specify that you are configuring from the terminal. Version Description 9.9(0.0) Introduced on the IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 88
Related Commands show cpu-traffic-stats— displays the cpu traffic statistics. debug ifm trace-flags Turn on the IFM internal trace-flags. Syntax debug ifm trace-flags trace-flags To disable this command, use the no debug ifm trace-flags command. Parameters trace-flags Defaults None Command Modes EXEC Privilege Supported Modes All Modes Command History Enter a hexadecimal number representing the trace-flag. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 89
Parameters level Defaults 1 Command Modes EXEC Privilege Supported Modes All Modes Command History (OPTIONAL) Enter a number for a privilege level of the Dell Networking OS. The range is from 0 to 15. The default is 1. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. do Allows the execution of most EXEC-level commands from all CONFIGURATION levels without returning to the EXEC level.
PAGE 90
enable Enter EXEC Privilege mode or any other privilege level configured. After entering this command, you may need to enter a password. Syntax enable [level] Parameters level Defaults 15 Command Modes EXEC Supported Modes All Modes Command History (OPTIONAL) Enter a number for a privilege level of the Dell Networking OS. The range is from 0 to 15. The default is 15. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.
PAGE 91
enable optic-info-update interval Enable polling intervals of optical information updates for simple network management protocol (SNMP). Syntax enable optic-info-update interval seconds To disable optical power information updates, use the no enable optic-info-update interval command. Parameters interval seconds Defaults Disabled Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Enter the keyword interval then the polling interval in seconds.
PAGE 92
Supported Modes Command History Related Commands • INTERFACE • MONITOR SESSION • PROTOCOL LLDP All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. exit— returns to the lower command mode. exec-timeout Set a time interval that the system waits for input on a line before disconnecting the session.
PAGE 93
Command Modes Supported Modes Command History Related Commands • EXEC Privilege • CONFIGURATION • LINE • INTERFACE • PROTOCOL LLDP All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. end — returns to EXEC Privilege mode. feature unique-name Set a unique host name for the system.
PAGE 94
ftp-server enable Enable FTP server functions on the system. Syntax ftp-server enable Defaults Disabled Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Example morpheus% ftp 10.31.1.111 Connected to 10.31.1.111. 220 FTOS (1.0) FTP server ready Name (10.31.1.
PAGE 95
Supported Modes Command History All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information After you enable FTP server functions with the ftp-server enable command, Dell Networking recommends specifying a top-level directory path. Without a top-level directory path specified, the Dell Networking OS directs users to the flash directory when logging in to the FTP server.
PAGE 96
Parameters name Enter a text string, up to 32 characters long. Defaults Dell Networking Operating System (OS) Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information The host name is used in the prompt. Related Commands feature unique-name http-server Disable / Enable the Blade I/O Manager Software.
PAGE 97
password Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information • 0 (zero) for an unecrypted (clear text) password • 7 (seven) for a hidden text password Enter a string up to 40 characters as the password. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 98
ip telnet server enable Enable the Telnet server on the switch. Syntax ip telnet server enable To disable the Telnet server, use the no ip telnet server enable command. Defaults Enabled Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 99
ip ftp username Assign a user name for outgoing FTP connection requests. Syntax Parameters ip ftp username username username Enter a text string as the user name up to 40 characters long. Defaults No user name is configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Configure a password with the ip ftp password command.
PAGE 100
Version Description 8.3.17.0 Supported on the M I/O Aggregator. Usage Information You cannot delete a terminal connection. Related Commands show memory— View current memory usage on the M I/O Aggregator. login concurrent-session Configures the limit of concurrent sessions for all users on console and virtual terminal lines.
PAGE 101
When you try to login, the following message appears with all your existing concurrent sessions, providing an option to close any one of the existing sessions: $ telnet 10.11.178.14 Trying 10.11.178.14... Connected to 10.11.178.14. Escape character is '^]'. Login: admin Password: Current sessions for user admin: Line Location 2 vty 0 10.14.1.97 3 vty 1 10.14.1.
PAGE 102
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Only the system and security administrators can configure login activity tracking and view the login activity details of other users. If you enable user login statistics, the system displays the last successful login details of the current user and the details of any failed login attempts by others.
PAGE 103
motd-banner Enable a message of the day (MOTD) banner to appear when you log in to the system. Syntax motd-banner Defaults Enabled on all lines. Command Modes LINE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show login statistics Displays login statistics of users who have used the console or virtual terminal lines to log in to the system.
PAGE 104
Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To view the successful and failed login details of the current user in the last 30 days or the custom defined period, use the show login statistics command. To view the successful and failed login details of all users in the last 30 days or the custom defined period, use the show login statistics all command.
PAGE 105
----------------------------------------------------------------------------------------------------------------------------------User: admin3 Last login time: 13:18:42 UTC Tue Mar 22 2016 Last login location: Line vty0 ( 10.16.127.145 ) Unsuccessful login attempt(s) since the last successful login: 0 Unsuccessful login attempt(s) in last 30 day(s): 3 Successful login attempt(s) in last 30 day(s): 2 The following is sample output of the show login statistics user user-id command.
PAGE 106
Defaults Supported Modes Command History 106 Enter the keyword ifagt then the number of an interface agent to display software pipe and IPC statistics. ifcb interface Enter the keyword ifcb then one of the following interface IDs then the slot/port information to display interface control block information for that interface: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10G Ethernet interface, enter the keyword TenGigabitEthernet.
PAGE 107
ping Test connectivity between the system and another device by sending echo requests and waiting for replies. Syntax Parameters Command Modes Supported Modes Command History ping host host • EXEC • EXEC Privilege Enter the host name or the destination IP address of the device to which you are testing connectivity. All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 108
Version Description 8.3.17.0 Supported on the M I/O Aggregator. Usage Information If there is a change in the configuration, the Dell Networking OS prompts you to save the new configuration. Or you can save your running configuration with the copy running-config command. Related Commands reset stack-unit — resets any designated stack member except the management unit. service timestamps Add time stamps to debug and log messages. This command adds either the uptime or the current time and date.
PAGE 109
show alarms Display the active major and minor alarms on the system. Syntax Command Modes Supported Modes Command History Example show alarms [threshold] • EXEC • EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 110
Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information One trace log message is generated for each command. No password information is saved to this file. Example Dell#show command-history [4/20 10:27:23]: CMD-(CLI):[enable]by default from console [4/20 10:27:23]: CMD-(CLI):[configure terminal]by default from console - Repeated 1 time.
PAGE 111
Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information The type may be auto, manual, or rollback. When set to auto, Dell Networking OS automatically denies access to CONFIGURATION mode to all other users every time the user on the listed VTY line enters CONFIGURATION mode. When set to manual, the user on the listed VTY line must explicitly set the lock each time before entering CONFIGURATION mode.
PAGE 112
Received 100% traffic on TenGigabitEthernet 8/2 Total packets:100 LLC:0, SNAP:0, IP:100, ARP:0, other:0 Unicast:100, Multicast:0, Broadcast:0 Dell# Related Commands debug cpu-traffic-stats — enables CPU traffic statistics for debugging. show debugging View a list of all enabled debugging processes. Syntax show debugging Command Modes EXEC Privilege Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 113
Supported Modes Command History All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. show environment Displays the system component status (for example, temperature or voltage). Syntax Parameters Command Modes Supported Modes Command History Example (all) show environment [all | stack-unit unit-id] all Enter the keyword all to view all components.
PAGE 114
* Management Unit Dell# Example (thermalsensor) Dell#show environment thermal-sensor -- Thermal Sensor Readings (deg C) -Unit Sensor0 Sensor1 Sensor2 Sensor3 Sensor4 Sensor5 Sensor6 Sensor7 Sensor8 Sensor9 ----------------------------------------------------------------1 51 51 64 61 61 61 67 61 64 66 Dell# show inventory Display the switch type, components (including media), and Dell Networking OS version including hardware identification numbers and configured protocols.
PAGE 115
Dell# Related Commands show config (from INTERFACE VLAN mode) — displays information on a specific physical interface or virtual interface. show memory Display current memory usage on the M I/O Aggregator. Syntax Parameters Command Modes Supported Modes Command History show memory [stack-unit 0–5] stack-unit 0–5 • EXEC • EXEC Privilege (OPTIONAL) Enter the keywords stack-unit then the stack unit ID of the stack member to display memory information on the designated stack member.
PAGE 116
output of memory statistics to the designated stack member. Refer to Example (stackunit). summary Command Modes Supported Modes Command History Example (summary) • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword summary to view a summary view CPU utilization of processes related to line card processing. Refer to Example (summary). All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 117
show processes memory — displays CPU usage information based on running processes. show processes ipc flow-control Displays the single window protocol queue (SWPQ) statistics. Syntax Parameters Defaults Command Modes Supported Modes Command History Usage Information show processes ipc flow-control [cp] cp (OPTIONAL) Enter the keyword cp to view the control processor’s SWPQ statistics. none • EXEC • EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 118
Example • If no response is received within a defined period of time, the SWP timeout mechanism resubmits the message at the head of the FIFO queue. • After retrying a defined number of times, the SWP-2-NOMORETIMEOUT timeout message is generated. • In the example, a retry (Retries) value of zero indicates that the SWP mechanism reached the maximum number of retransmissions without an acknowledgement.
PAGE 119
Usage Information show processes memory output Field Description Total: Total system memory available MaxUsed: Total maximum memory used ever (history indicated with time stamp) CurrentUsed: Total memory currently in use CurrentFree: Total system memory available SharedUsed: Total used shared memory SharedFree: Total free shared memory PID Process ID Process Process Name ResSize Actual resident size of the process in memory Size Process test, stack, and data size Allocs Total dynami
PAGE 120
--More-Example (management-unit) Dell#show processes memory management-unit Total:2147483648, MaxUsed:499093504 [07/23/2012 17:42:16] CurrentUsed:499093504, CurrentFree:1648390144 SharedUsed:18470440, SharedFree:2501104 PID Process 633 fcoecntrl 289 iscsiOpt 476 dhclient 521 ndpm 160 vrrp 318 frrp 218 xstp 277 pim --More-- ResSize 9277440 7380992 1626112 7389184 7712768 7192576 9445376 7585792 Size 270336 114688 552960 618496 335872 180224 2740224 1007616 Allocs 1380528 23262 0 4848 880 71086 21858 6216
PAGE 121
Example — System reboot for unknown reasons DellEMC# show reset-reason Cause: N/A Reload Time: N/A Example — System reboot due to power loss or pressing the power button off and on. The example shows the reason for the last reboot as N/A for warm reset. Example — System reboot due to watchdog timeout DellEMC#show reset-reason Cause: N/A. Reset Time: N/A Example — System reboot due to thermal shutdown The example shows the reason for the last reboot as N/A for thermal shutdown.
PAGE 122
Command History Example (Command) Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Dell#show revision -- Stack unit 1 -IOM SYSTEM CPLD : 1 Dell# show server-interfaces Displays server port information. Syntax show server-interfaces{brief|detail} Command Modes Supported Modes Command History • EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 123
Interface index is 34149121 Internet address is not set Mode of IP Address Assignment : NONE DHCP Client-ID :tenG130001ec9f10099 MTU 12000 bytes, IP MTU 11982 bytes LineSpeed auto Flowcontrol rx on tx off ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 00:59:19 Queueing strategy: fifo Input Statistics: 0 packets, 0 bytes 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 0 Broadcasts 0 runt
PAGE 124
Example (show system brief command) Version Description 8.3.17.0 Supported on the M I/O Aggregator. Dell#show system brief Stack MAC Reload-Type : f4:8e:38:0e:e5:fc : normal-reload [Next boot : normal-reload] -- Stack Info -Unit UnitType Status ReqTyp CurTyp Version Ports -----------------------------------------------------------------------------0 Management online PE-FN-410S-IOM PE-FN-410S-IOM 9.11(0.
PAGE 125
No Of MACs : 3 Dell# Related Commands asset-tag —Assign and store unique asset-tag to the stack member. show version — Displays the Dell version. show processes memory —Displays the memory usage based on the running processes. show diag — Displays the data plane and management plane input and output statistics of a particular stack member. show tech-support Displays a collection of data from other show commands, necessary for Dell Networking technical support to perform troubleshooting on Aggregators.
PAGE 126
For example: Dell#show tech-support |grep regular-expression |except regularexpression | find regular-expression | save flash://result This display output is an accumulation of the same information that is displayed when you execute one of the following showcommands: Example (save) 126 • show cam • show clock • show environment • show file • show interfaces • show inventory • show processes cpu • show processes memory • show running-conf • show version • show os-version • show revi
PAGE 127
Example (show tech-support) Dell#show tech-support page ----------------------------------- show version ------------------------------Dell Real Time Operating System Software Dell Operating System Version: 2.0 Dell Application Software Version: 9.14(0.0RC2) Copyright (c) 1999-2018 by Dell Inc. All Rights Reserved.
PAGE 128
Copyright (c) 1999-2012 by Dell Inc. All Rights Reserved. Build Time: Thu Jul 19 05:59:59 PDT 2012 Build Path: /sites/sjc/work/swsystems01-2/ravisubramani/ravis-8317/SW/SRC/ Cp_src/ Tacacs FTOS uptime is 4 day(s), 7 hour(s), 14 minute(s) System image file is "dv-m1000e-2-b2" System Type: I/O-Aggregator Control Processor: MIPS RMI XLP with 2147483648 bytes of memory. 256M bytes of boot flash memory. 1 34-port GE/TE (XL) 56 Ten GigabitEthernet/IEEE 802.
PAGE 129
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 130
Command Modes Supported Modes Command History Usage Information • EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. This command displays all CPU utilization thresholds of the management, standby, and stack-units. show util-threshold memory Displays the set memory utilization threshold values.
PAGE 131
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. telnet Connect through Telnet to a server. The Telnet client and server in Dell Networking OS support IPv4 connections. You can establish a Telnet session directly to the router or a connection can be initiated from the router.
PAGE 132
Supported Modes Command History All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. terminal length Configure the number of lines displayed on the terminal screen. Syntax terminal length screen-length To return to the default values, use the no terminal length command. Parameters screen-length Enter a number of lines. Entering zero will cause the terminal to display without pausing.
PAGE 133
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. terminal xml Enable XML mode in Telnet and SSH client sessions. Syntax terminal xml To exit the XML mode, use the no terminal monitor command. Defaults Command Modes Supported Modes Command History Usage Information Disabled • EXEC • EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 134
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information When you enter the traceroute command without specifying an IP address (Extended Traceroute), you are prompted for a target and source IP address, timeout in seconds (default is 5), a probe count (default is 3), minimum TTL (default is 1), maximum TTL (default is 30), and port number (default is 33434).
PAGE 135
Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Each time you issue this command, it replaces the previously configured address of the same family. The no virtual-ip command takes an address/prefix-length argument, so that the desired address only is removed.
PAGE 136
6 802.1X An authentication server must authenticate a client connected to an 802.1X switch port. Until the authentication, only extensible authentication protocol over LAN (EAPOL) traffic is allowed through the port to which a client is connected. After authentication is successful, normal traffic passes through the port. The Dell Networking operating software supports remote authentication dial-in service (RADIUS) and active directory environments using 802.1X Port Authentication.
PAGE 137
• dot1x reauth-max • dot1x server-timeout • dot1x supplicant-timeout • dot1x tx-period • show dot1x cos-mapping interface • show dot1x interface debug dot1x Display 802.1X debugging information. Syntax Parameters debug dot1x [all | auth-pae-fsm | backend-fsm | eapol-pdu] [interface interface] all Enable all 802.1X debug messages. auth-pae-fsm Enable authentication PAE FSM debug messages. backend-fsm Enable backend FSM debug messages.
PAGE 138
dot1x authentication (Interface) Enable dot1x on an interface. Enable dot1x both globally and at the interface level. Syntax dot1x authentication To disable dot1x on an interface, use the no dot1x authentication command. Defaults Disabled Command Modes INTERFACE Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 139
Related Commands • dot1x port-control — Enables port control on an interface. • dot1x guest-vlan — Configures a guest VLAN for limited access users or for devices that are not 802.1X capable. • show dot1x interface — Displays the 802.1X configuration of an interface. dot1x auth-server Configure the authentication server to RADIUS. Syntax dot1x auth-server radius Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.
PAGE 140
dot1x guest-vlan Configure a guest VLAN for limited access users or for devices that are not 802.1X capable. Syntax dot1x guest-vlan vlan-id To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command. Parameters vlan-id Enter the VLAN Identifier. The range is from 1 to 4094. Defaults Not configured. Command Modes CONFIGURATION (conf-if-interface-slot/port) Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 141
multi-auth Defaults single-host Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Enable multi-supplicant authentication. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. • Single-host mode authenticates only one host per authenticator port and drops all other traffic on the port.
PAGE 142
Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. dot1x max-supplicants Restrict the number of supplicants that can be authenticated and permitted to access the network through the port. This configuration is only takes effect in Multi-Auth mode.
PAGE 143
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The authenticator completes authentication only when port-control is set to auto. dot1x quiet-period Set the number of seconds that the authenticator remains quiet after a failed authentication with a client. Syntax dot1x quiet-period seconds To disable quiet time, use the no dot1x quiet-time command.
PAGE 144
dot1x reauth-max Configure the maximum number of times a port can reauthenticate before the port becomes unauthorized. Syntax dot1x reauth-max number To return to the default, use the no dot1x reauth-max command. Parameters number Defaults 2 Command Modes INTERFACE Supported Modes Full–Switch Command History Enter the permitted number of reauthentications. The range is from 1 to 10. The default is 2. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 145
Where the default values are as follows: dot1x server-timeout (30 seconds), radius-server retransmit (3 seconds), and radius-server timeout (5 seconds). For example: Dell(conf)#radius-server host 10.11.197.105 timeout 6 Dell(conf)#radius-server host 10.11.197.105 retransmit 4 Dell(conf)#interface tengigabitethernet 2/1 Dell(conf-if-te-2/1)#dot1x server-timeout 40 dot1x supplicant-timeout Configure the amount of time after which exchanges with the supplicant time-out.
PAGE 146
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show dot1x cos-mapping interface Display the CoS priority-mapping table the RADIUS server provides and applies to authenticated supplicants on an 802.1X-enabled system.
PAGE 147
802.1p CoS re-map table for Supplicant: 00:00:00:00:00:10 Dot1p 0 1 2 3 4 5 6 7 Dell# Remapped Dot1p 7 6 5 4 3 2 1 0 show dot1x interface Display the 802.1X configuration of an interface.
PAGE 148
Mac-Auth-Bypass: Mac-Auth-Bypass Only: Tx Period: Quiet Period: ReAuth Max: Supplicant Timeout: Server Timeout: Re-Auth Interval: Max-EAP-Req: Host Mode: Auth PAE State: Backend State: Dell# Enable Enable 3 seconds 60 seconds 2 30 seconds 30 seconds 3600 seconds 2 SINGLE_HOST Authenticated Idle Dell#show dot1x interface tengigabitethernet 0/1 mac-address 00:00:00:00:00:10 Supplicant Mac: 0 0 0 0 0 10 Lookup for Mac: 802.
PAGE 149
7 Access Control Lists (ACL) Access control lists (ACLs) are supported by the Dell Networking Operating System (OS).
PAGE 150
• permit tcp • permit udp • seq • Common MAC Access List Commands • clear counters mac access-group • mac access-group • show mac access-lists • show mac accounting access-list • Standard MAC ACL Commands • deny • deny • mac access-list extended • permit • seq • Extended MAC ACL Commands • mac access-list standard • permit • seq • IP Prefix List Commands • clear ip prefix-list • deny • ip prefix-list • permit • seq • show config • show ip prefix-list detail
PAGE 151
• deny tcp • deny udp • deny arp (for Extended MAC ACLs) • deny icmp • deny ether-type (for Extended MAC ACLs) • deny • deny • permit (for Standard IP ACLs) • permit • permit ether-type (for Extended MAC ACLs) • permit icmp • permit udp • permit (for Extended IP ACLs) • permit • seq • permit tcp • seq arp • seq ether-type • seq • seq • permit udp • permit tcp • permit icmp • permit • deny udp (for IPv6 ACLs) • deny tcp (for IPv6 ACLs) • deny icmp (for Ext
PAGE 152
• Supported Modes Command History CONFIGURATION-MAC ACCESS LIST-EXTENDED Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. remark Enter a description for an ACL entry. Syntax remark [remark-number] [description] Parameters remark-number Enter the remark number. The range is from 0 to 4294967290. NOTE: You can use the same sequence number for the remark and an ACL rule.
PAGE 153
To remove a remark, use the no remark command with or without the sequence number. If there is a matching string, the system deletes the remark. Example DellEMC(config-std-nacl)# remark 10 Deny rest of the traffic DellEMC(config-std-nacl)# remark 5 Permit traffic from XYZ Inc. DellEMC(config-std-nacl)# show config ! ip access-list standard test remark 5 Permit traffic from XYZ Inc. seq 5 permit 1.1.1.
PAGE 154
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you have exhausted all the sequence numbers, this feature permits re-assigning a new sequence number to entries of an existing access-list. Related Commands resequence prefix-list ipv4 — resequences a prefix list. resequence prefix-list ipv4 Re-assign sequence numbers to entries of an existing prefix list.
PAGE 155
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(config-std-nacl)#show conf ! ip access-list standard test remark 5 Permit traffic from XYZ Inc. seq 5 permit 1.1.1.0/24 count remark 10 Deny traffic from ABC seq 10 deny 2.1.1.0/24 count Dell(config-std-nacl)# Common IP ACL Commands The following commands are available within both IP ACL modes (Standard and Extended) and do not have mode-specific options.
PAGE 156
specify (ipv4 or ipv6), the ACL processes either IPv4 or IPv6 rules, but not both. Using this configuration, you can set up two different types of access classes with each class processing either IPv4 or IPv6 rules separately. However, if you already have configured generic IP ACL on a terminal line, then you cannot further apply IPv4 or IPv6 specific filtering on top of this configuration. Because, both IPv4 and IPv6 access classes are already configured on this terminal line.
PAGE 157
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module platform. You can assign one ACL (standard or extended ACL) to an interface.. NOTE: This command is not supported on the FN IOMSwitch Loopback interfaces. NOTE: If outbound(egress) IP ACL is applied on switch port, filter will be applied only for routed traffic egressing out of that port.
PAGE 158
show ip accounting access-list Display the IP access-lists created on the switch and the sequence of filters. Syntax show ip accounting {access-list access-list-name | cam_count} interface interface Parameters Command Modes Supported Modes Command History Usage Information access-list-name Enter the name of the ACL to be displayed. cam_count List the count of the CAM rules for this ACL.
PAGE 159
The switch supports both Ingress and Egress IP ACLs. NOTE: Also refer to the Commands Common to all ACL Types and Common IP ACL Commands sections. ip access-list standard Create a standard IP access list (IP ACL) to filter based on IP address. Syntax Parameters ip access-list standard access-list-name access-list-name Enter a string up to 140 characters long as the ACL name. Defaults All IP access lists contain an implicit deny any, that is, if no match occurs, the packet is dropped.
PAGE 160
mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address or hostname. no-drop Enter the keywords no-drop to match only the forwarded packets. count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
PAGE 161
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 162
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only.
PAGE 163
The following commands configure extended IP ACLs, which in addition to the IP address, also examine the packet’s protocol type. The switch supports both Ingress and Egress IP ACLs. NOTE: Also refer to theCommands Common to all ACL Types and Common IP ACL Commands sections. deny (for Extended IP ACLs) Configure a filter that drops IP packets meeting the filter criteria.
PAGE 164
monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
PAGE 165
Parameters • Use the no seq sequence-number command, if you know the filter’s sequence number. • Use the no deny icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
PAGE 166
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 167
port port • lt = less than • range = inclusive range of ports (you must specify two ports for the port command) Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: Defaults • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent.
PAGE 168
Usage Information The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. You can configure either count (packets) or count (bytes). However, for an ACL with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) at any given time. Most ACL rules require one entry in the CAM.
PAGE 169
deny udp To drop user datagram protocol (UDP) packets meeting the filter criteria, configure a filter. Syntax deny udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte]] [order] [fragments] [threshold-in-msgs [count]] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 170
ACL logs are terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. Defaults By default 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which the ACL logs are generated is five minutes. Command Modes CONFIGURATION-IP ACCESS-LIST-EXTENDED Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.
PAGE 171
Total Ports: 1024 Related Commands deny — assigns a filter to deny IP traffic. deny tcp — assigns a filter to deny TCP traffic. ip access-list extended Name (or select) an extended IP access list (IP ACL) based on IP addresses or protocols. Syntax ip access-list extended access-list-name To delete an access list, use the no ip access-list extended access-list-name command. Parameters access-list-name Enter a string up to 140 characters long as the access list name.
PAGE 172
Parameters source Enter the IP address in dotted decimal format of the network from which the packet was sent. mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address or hostname.
PAGE 173
can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction.
PAGE 174
numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
PAGE 175
permit tcp To pass TCP packets meeting the filter criteria, configure a filter. Syntax permit tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [bit] [dscp] [operator port [port]] [count [byte]] [order] [fragments][log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 176
destination Enter the IP address of the network or host to which the packets are sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 177
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 178
To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit udp {source mask | any | host ip-address} {destination mask | any | host ip-address command. source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
PAGE 179
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the “Quality of Service” chapter of the Dell Operating System Configuration Guide. You can configure either count (packets) or count (bytes). However, for an ACL with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) at any given time.
PAGE 180
permit — assigns a permit filter for IP packets. permit tcp — assigns a permit filter for TCP packets. seq Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter.
PAGE 181
• 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. dscp (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values. order (OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry.
PAGE 182
If you configure the sequence-number, the sequence-number is used as a tie breaker for rules with the same order. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 183
mac access-group Apply a MAC ACL to traffic entering or exiting an interface. Enter into the Interface mode and apply the MAC ACL in the following manner. Syntax mac access-group access-list-name {in [vlan vlan-range] | out} To delete a MAC access-group, use the no mac access-group mac-list-name command. Parameters access-list-name Enter the name of a configured MAC access list, up to 140 characters. vlan vlan-range (OPTIONAL) Enter the keyword vlan and then enter a range of VLANs.
PAGE 184
show mac access-lists Display all of the Layer 2 ACLs configured in the system, whether or not they are applied to an interface, and the count of matches/ mismatches against each ACL entry displayed. Syntax show mac access-lists [access-list-name] [interface interface] [in | out] Parameters access-list-name Enter the name of a configured MAC ACL, up to 140 characters.
PAGE 185
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The ACL hit counters in this command increment the counters for each matching rule, not just the first matching rule.
PAGE 186
The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. mac-destinationaddress Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format. mac-destinationaddress-mask Specify which bits in the MAC address must match.
PAGE 187
mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match). count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
PAGE 188
This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Related Commands permit — configures a MAC address filter to pass packets. seq — configures a MAC address filter with a specified sequence number. mac access-list extended Name a new or existing extended MAC access control list (extended MAC ACL).
PAGE 189
permit To forward packets from a specific source MAC address, configure a filter. Syntax permit {any | mac-source-address [mac-source-address-mask]} [count [byte]] | log [interval minutes] [threshold-in-msgs[count] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit {any | mac-source-address mac-source-address-mask} command.
PAGE 190
When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval. If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses.
PAGE 191
of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
PAGE 192
Extended MAC ACL Commands When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit. The following commands configure Extended MAC ACLs. The Switch supports both Ingress and Egress MAC ACLs. mac access-list standard To configure a standard MAC ACL, name a new or existing MAC access control list (MAC ACL) and enter MAC ACCESS LIST mode. Syntax mac access-list standard mac-list-name Parameters mac-list-name Defaults Not configured.
PAGE 193
• Parameters Use the no permit {any | host mac-address | mac-source-address mac-sourceaddress-mask} {any | mac-destination-address mac-destination-address-mask} command. any Enter the keyword any to forward all packets. host Enter the keyword host then a MAC address to forward packets with that host address. mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match.
PAGE 194
seq Configure a filter with a specific sequence number. Syntax seq sequence-number {deny | permit} {any | host mac-address | mac-sourceaddress mac-source-address-mask} {any | host mac-address | mac-destinationaddress mac-destination-address-mask} [ethertype operator] [count [byte]] Parameters sequence-number Enter a number as the filter sequence number. The range is from zero (0) to 65535. deny Enter the keyword deny to drop any traffic matching this filter.
PAGE 195
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. deny — configures a filter to drop packets. permit — configures a filter to forward packets. IP Prefix List Commands When you create an access-list without any rule and then apply it to an interface, the ACL behavior reflects implicit permit. To configure or enable IP prefix lists, use these commands.
PAGE 196
Command Modes PREFIX-LIST Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Sequence numbers for this filter are automatically assigned starting at sequence number 5. If you do not use the ge or le options, only packets with an exact match to the prefix are filtered. Related Commands permit — configures a filter to pass packets.
PAGE 197
ge min-prefixlength (OPTIONAL) Enter the keyword ge and then enter the minimum prefix length, which is a number from zero (0) to 32. le max-prefix-length (OPTIONAL) Enter the keyword le and then enter the maximum prefix length, which is a number from zero (0) to 32. Command Modes PREFIX-LIST Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 198
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information If you do not use the ge or le options, only packets with an exact match to the prefix are filtered. Related Commands deny — configures a filter to drop packets. permit — configures a filter to pass packets. show config Display the current PREFIX-LIST configurations.
PAGE 199
Example Dell#show ip prefix-list detail Ip Prefix-list with the last deletion/insertion: PL_OSPF_to_RIP ip prefix-list PL_OSPF_to_RIP: count: 3, range entries: 1, sequences: 5 - 25 seq 5 permit 1.1.1.0/24 (hit count: 0) seq 10 deny 2.1.0.0/16 ge 23 (hit count: 0) seq 25 permit 192.0.0.0 bitmask 192.0.0.0 (hit count: 800) show ip prefix-list summary Display a summary of the configured prefix lists.
PAGE 200
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The continue feature allows movement from one route-map entry to a specific route-map entry (the sequence number). If you do not specify the sequence number, the continue feature simply moves to the next sequence number (also known as an implied continue). If a match clause exists, the continue feature executes only after a successful match occurs.
PAGE 201
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. route-map — Enables a route map. match interface To match routes whose next hop is on the interface specified, configure a filter. Syntax match interface interface To remove a match, use the no match interface interface command. Parameters interface Defaults Not configured.
PAGE 202
match ip address To match routes based on IP addresses specified in an access list, configure a filter. Syntax match ip address prefix-list-name Parameters prefix-list-name Defaults Not configured. Command Modes ROUTE-MAP Supported Modes Full–Switch Command History Related Commands Enter the name of configured prefix list, up to 140 characters. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 203
Related Commands match interface — redistributes routes that match the next-hop interface. match ip address — redistributes routes that match an IP address. match ip route-source — redistributes routes that match routes advertised by other routers. match metric — redistributes routes that match a specific metric. match route-type — redistributes routes that match a route type. match tag — redistributes routes that match a specific tag.
PAGE 204
Parameters metric-value Defaults Not configured. Command Modes ROUTE-MAP Supported Modes Full–Switch Command History Related Commands Enter a value to match. The range is from zero (0) to 4294967295. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. match interface — redistributes routes that match the next-hop interface. match ip address — redistributes routes that match an IP address.
PAGE 205
match ip route-source — redistributes routes that match routes advertised by other routers. match metric — redistributes routes that match a specific metric. match tag — redistributes routes that match a specific tag. match tag To redistribute only routes that match a specified tag value, configure a filter. Syntax Parameters match tag tag-value tag-value Defaults Not configured.
PAGE 206
Defaults Not configured. If you do not define a keyword (permit or deny) for the route map, the permit action is the default. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 207
Parameters + (OPTIONAL) Enter + to add a metric-value to the redistributed routes. - (OPTIONAL) Enter - to subtract a metric-value from the redistributed routes. metric-value Enter a number as the new metric value. The range is from zero (0) to 4294967295. Defaults Not configured. Command Modes ROUTE-MAP Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 208
set tag To specify a tag for redistributed routes, configure a filter. Syntax set tag tag-value Parameters tag-value Defaults Not configured. Command Modes ROUTE-MAP Supported Modes Full–Switch Command History Related Commands Enter a number as the tag. The range is from zero (0) to 4294967295. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. set automatic-tag — computes the tag value of the route.
PAGE 209
Parameters Command Modes Supported Modes Command History map-name • EXEC • EXEC Privilege (OPTIONAL) Enter the name of a configured route map, up to 140 characters. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show route-map route-map firpo, permit, sequence 10 Match clauses: Set clauses: tag 34 Dell# Related Commands route-map — configures a route map.
PAGE 210
threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
PAGE 211
deny To drop packets with a certain IP address, configure a filter. Syntax deny {any | host mac-address | mac-source-address mac-source-address-mask}{any | host mac-address | mac-destination-address mac-destination-address-mask} [ethertype-operator] [count [byte]][log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters Defaults • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 212
Usage Information Version Description 9.4(0.0) Added the support for flow-based monitoring on the MXL 10/40GbE Switch IO Module. 9.3(0.0) Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide.
PAGE 213
mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. dscp (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
PAGE 214
can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction.
PAGE 215
port port • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port command) Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535.
PAGE 216
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. You can configure either count (packets) or count (bytes). However, for an ACL with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) at any given time.
PAGE 217
deny udp — assigns a filter to deny UDP traffic. deny udp To drop user datagram protocol (UDP) packets meeting the filter criteria, configure a filter. Syntax deny udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte]] [order] [fragments] [threshold-in-msgs [count]] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 218
threshold-in-msgs count (OPTIONAL) Enter the threshold-in-msgs keyword then a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs are terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. Defaults By default 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which the ACL logs are generated is five minutes.
PAGE 219
Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM. Dell# Data Mask From To 1 0000000000000000 1111110000000000 0 #Covered 1023 1024 Total Ports: 1024 Related Commands deny — assigns a filter to deny IP traffic. deny tcp — assigns a filter to deny TCP traffic. deny arp (for Extended MAC ACLs) Configure an egress filter that drops ARP packets on egress ACL supported line cards. (For more information, refer to your line card documentation).
PAGE 220
count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 221
the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port.
PAGE 222
fragments Enter the keyword fragments to use ACLs to control packet fragments. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
PAGE 223
To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no deny ether-type protocol-type-number {destination-mac-address macaddress-mask | any} vlan vlan-id {source-mac-address mac-address-mask | any} command. protocol-typenumber Enter a number from 600 to FFFF as the specific Ethernet type traffic to drop. destination-macaddress macaddress-mask Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
PAGE 224
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platforms. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platforms. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 225
log (OPTIONAL) Enter the keywordlog to enable the triggering of ACL log messages. threshold-in-msgs count (OPTIONAL) Enter thethreshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated.
PAGE 226
deny To drop packets with a certain IP address, configure a filter. Syntax deny {any | host mac-address | mac-source-address mac-source-address-mask}{any | host mac-address | mac-destination-address mac-destination-address-mask} [ethertype-operator] [count [byte]][log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters Defaults • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 227
Usage Information Version Description 9.4(0.0) Added the support for flow-based monitoring on the MXL 10/40GbE Switch IO Module. 9.3(0.0) Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide.
PAGE 228
mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address or hostname. no-drop Enter the keywords no-drop to match only the forwarded packets. count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
PAGE 229
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 230
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When the configured maximum threshold is exceeded, generation of logs are stopped.
PAGE 231
destination-macaddress macaddress-mask Enter a MAC address and mask in the nn:nn:nn:nn:nn format. For the MAC address mask, specify which bits in the MAC address must match. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. any Enter the keyword any to match and drop specific Ethernet traffic on the interface.
PAGE 232
Usage Information Version Description 9.4(0.0) Added the support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. 8.1.1.0 Introduced on the E-Series ExaScale. 7.4.1.0 Added the monitor option. 6.5.10 Expanded to include the optional QoS order priority for the ACL entry.
PAGE 233
To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or noncontiguous.
PAGE 234
Usage Information The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 235
• range = inclusive range of ports (you must specify two ports for the port parameter) port port Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is 0 to 65535. destination Enter the IP address of the network or host to which the packets are sent. count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
PAGE 236
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 237
mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address or hostname. count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
PAGE 238
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 239
Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When the configured maximum threshold is exceeded, generation of logs are stopped.
PAGE 240
mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match). count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes.
PAGE 241
for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Related Commands deny — configures a filter to drop packets. permit — configures a filter to forward packets.
PAGE 242
port port Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
PAGE 243
Usage Information The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the “Quality of Service” chapter of the Dell Networking OS Configuration Guide. The switch cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented. Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (for example, gt, lt, or range) may require more than one entry.
PAGE 244
seq arp Configure an egress filter with a sequence number that filters ARP packets meeting this criteria. This command is supported only on 12port GE line cards with SFP optics. For specifications, refer to your line card documentation.
PAGE 245
monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. NOTE: For more information, refer to the Flow-based Monitoring section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
PAGE 246
can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction.
PAGE 247
The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 248
• The order option works across ACL groups that have been applied on an interface via the QoS policy framework. • The order option takes precedence over seq sequence-number. • If sequence-number is not configured, the rules with the same order value are ordered according to their configuration order. • If sequence-number is configured, the sequence-number is used as a tie breaker for rules with the same order. When you use the log option, the CP processor logs details about the packets that match.
PAGE 249
any Enter the keyword any to specify that all routes are subject to the filter. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. dscp (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values. order (OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry.
PAGE 250
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 251
port port • lt = less than • range = inclusive range of ports (you must specify two ports for the port parameter.) (OPTIONAL) Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent.
PAGE 252
Usage Information The order option is relevant in the context of the Policy QoS feature only. The following applies: • The seq sequence-number command is applicable only in an ACL group. • The order option works across ACL groups that have been applied on an interface via the QoS policy framework. • The order option takes precedence over seq sequence-number. • If sequence-number is not configured, the rules with the same order value are ordered according to their configuration order.
PAGE 253
mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host and then enter the IP address to specify a host IP address. dscp Enter the keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63.
PAGE 254
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (for example, gt, lt, or range) may require more than one entry. The range of ports is configured in the CAM based on bit mask boundaries; the space required depends on exactly what ports are included in the range. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 255
permit tcp To pass TCP packets meeting the filter criteria, configure a filter. Syntax permit tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [bit] [dscp] [operator port [port]] [count [byte]] [order] [fragments][log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 256
destination Enter the IP address of the network or host to which the packets are sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 257
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 258
To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or noncontiguous.
PAGE 259
Usage Information The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 260
log OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in-msgs (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated.
PAGE 261
port Defaults • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port command) Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP count (OPTIONAL) Enter the keyword count to count the packets that filter the processes.
PAGE 262
You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode.
PAGE 263
Defaults • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent. bit (OPTIONAL) Enter the keyword bit to count the bits that filter the processes. count (OPTIONAL) Enter the keyword count to count the packets that filter the processes. byte (OPTIONAL) Enter the keyword byte to count the bytes that filter the processes. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 264
mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Related Commands deny – assigns a filter to deny IP traffic. deny udp – assigns a filter to deny UDP traffic. deny icmp (for Extended IPv6 ACLs) Configure a filter to drop all or specific ICMP messages.
PAGE 265
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added the support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 266
fragments Enter the keyword fragments to use ACLs to control packet fragments. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
PAGE 267
8 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM) This section describes the access control list (ACL) virtual local area network (VLAN) group, and content addressable memory (CAM) enhancements. member vlan Add VLAN members to an ACL VLAN group. Syntax Parameters member vlan {VLAN-range} VLAN-range Enter the member VLANs using comma-separated VLAN IDs, a range of VLAN IDs, a single VLAN ID, or a combination.
PAGE 268
ip access-group Apply an egress IP ACL to the ACL VLAN group. Syntax ip access-group {group name} out implicit-permit Parameters group-name Enter the name of the ACL VLAN group where you want the egress IP ACLs applied, up to 140 characters. out Enter the keyword out to apply the ACL to outgoing traffic.
PAGE 269
Version Description 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform. Usage Information When an ACL-VLAN-Group name or the Access List Group Name contains more than 30 characters, the name is truncated in the show acl-vlan-group command output. Examples The following sample illustrates the output of the show acl-vlan-group command. NOTE: Some group names and some access list names are truncated.
PAGE 270
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform. After CAM configuration for ACL VLAN groups is performed, you must reboot the system to enable the settings to be stored in nonvolatile storage. During the initialization of CAM, the chassis manager reads the NVRAM and allocates the dynamic VCAP regions.
PAGE 271
vlanaclopt <0-2> Allocate the number of FP blocks for the ACL VLAN optimization feature. Default If you use the default keyword with the cam-acl-vlan command, the FP blocks allocated for VLAN processes are restored to their default values. No FP blocks or dynamic VLAN Content Aware Processor (VCAP) groups are allocated for VLAN operations by default. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM.
PAGE 272
• L2AclCam • V6AclCam The following describes the output fields of this show command: Field Description LineCard Number of the line card that contains information on ACL VLAN groups Portpipe The hardware path that packets follow through a system for ACL optimization CAM-Region Type of area in the CAM block that is used for ACL VLAN groups Total CAM space Total amount of space in the CAM block Used CAM Amount of CAM space that is currently in use Available CAM Amount of CAM space that is fr
PAGE 273
Command Modes EXEC EXEC Privilege Supported Modes Command History Examples Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform. The following sample output shows the line-by-line style display when using the show running-config aclvlan-group option.
PAGE 274
You can create an ACL VLAN group and attach the ACL with the VLAN members. Optimization is applicable only when you create an ACL VLAN group. If you apply an ACL separately on the VLAN interface, each ACL maps with the VLAN and increased CAM space utilization occurs. Attaching an ACL individually to VLAN interfaces is similar to the behavior of ACL-VLAN mapping storage in CAM prior to the implementation of the ACL VLAN group functionality.
PAGE 275
description (ACL VLAN Group) Add a description to the ACL VLAN group. Syntax Parameters description description description Enter a description to identify the ACL VLAN group (80 characters maximum). Default No default behavior or values Command Modes CONFIGURATION (conf-acl-vl-grp) Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform.
PAGE 276
9 Bidirectional Forwarding Detection (BFD) Bidirectional forwarding detection (BFD) is a detection protocol that provides fast forwarding path failure detection. The Dell Networking Operating System (OS) implementation is based on the standards specified in the IETF Draft draft-ietf-bfd-base-03 and supports BFD on all Layer 3 physical interfaces including virtual local area network (VLAN) interfaces and port-channels.
PAGE 277
• Active — The active system initiates the BFD session. Both systems can be active for the same session. • Passive — The passive system does not initiate a session. It only responds to a request for session initialization from the active system. The default is active. Defaults See Parameters. Command Modes ROUTER OSPF ROUTER OSPFv3 ROUTER BGP ROUTER ISIS Command History This guide is platform-specific.
PAGE 278
Usage Information Version Description 8.4.1.3 Introduced BFD for BGP on the E-Series. 8.2.1.0 Introduced BFD for OSPF and ISIS on the E-Series. 7.6.1.0 Introduced BFD for OSPF on the C-Series. 7.5.1.0 Introduced BFD for ISIS on the E-Series. 7.4.1.0 Introduced BFD for OSPF on the E-Series.
PAGE 279
Disable BFD using the no bfd enable command. Defaults BFD is disabled by default. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. bfd enable (Interface) Enable BFD on an interface. Syntax bfd enable Defaults BFD is enabled on all interfaces when you enable BFD from CONFIGURATION mode.
PAGE 280
The default is Active. Defaults Refer to Parameters. Command Modes INTERFACE Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-if-gi-0/3)#bfd interval 250 min_rx 300 multiplier 4 role passive Dell(conf-if-gi-0/3)# bfd protocol-liveness Enable the BFD protocol liveness feature.
PAGE 281
interval milliseconds (OPTIONAL) Enter the keywords interval to specify non-default BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 200. min_rx milliseconds Enter the keywords min_rx to specify the minimum rate at which the local system receives control packets from the remote system. The range is from 50 to 1000. The default is 200.
PAGE 282
role [active | passive] Enter the role that the local system assumes: • Active — active system initiates the BFD session. Both systems can be active for the same session. • Passive — passive system does not initiate a session. It only responds to a request for session initialization from the active system. The default is Active. Defaults See Parameters. Command Modes INTERFACE Command History This guide is platform-specific.
PAGE 283
min_rx milliseconds Enter the keywords min_rx to specify the minimum rate at which the local system receives control packets from the remote system. The range is from 50 to 1000. The default is 200. multiplier value Enter the keyword multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3. role [active | passive] Enter the role that the local system assumes: • Active — The active system initiates the BFD session.
PAGE 284
• Passive — The passive system does not initiate a session. It only responds to a request for session initialization from the active system. The default is Active. Defaults See Parameters Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 285
• Related Commands The neighbor only inherits the global timer values configured with the bfd neighbor command: interval, min_rx, and multiplier. neighbor bfd disable — explicitly disables a BFD session with a BGP neighbor or a BGP peer group. show bfd neighbors — displays the BFD neighbor information on all interfaces or a specified interface. neighbor bfd disable Explicitly disable a BFD session with a BGP neighbor or a BGP peer group.
PAGE 286
Parameters vrf vrf name (Optional) Enter the keyword vrf and then the name of the VRF to display the BFD sessions with all neighbors within the VRF. interface (OPTIONAL) Enter one of the following keywords and slot/port or number information: detail Defaults • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a port channel interface, enter the keywords port-channel then a number.
PAGE 287
Related Commands • bfd all-neighbors — establish BFD sessions with all neighbors discovered by the IS-IS protocol or OSPF protocol out of all interfaces. vrrp bfd neighbor Establish a BFD for VRRP session with a neighbor. Syntax Parameters vrrp bfd neighbor ip-address neighbor ip-address Defaults none Command Modes INTERFACE Supported Modes Full–Switch Command History Enter the IP address of the BFD neighbor. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 288
10 Border Gateway Protocol IPv4 (BGPv4) For detailed information about configuring BGP, refer to the BGP chapter in the Dell Networking OS Configuration Guide.
PAGE 289
• capture bgp-pdu neighbor • capture bgp-pdu max-buffer-size • clear ip bgp • clear ip bgp dampening • clear ip bgp flap-statistics • clear ip bgp peer-group • debug ip bgp • debug ip bgp dampening • debug ip bgp events • debug ip bgp keepalives • debug ip bgp notifications • debug ip bgp soft-reconfiguration • debug ip bgp updates • default-metric • description • max-paths • neighbor activate • neighbor add-path • neighbor advertisement-interval • neighbor advertiseme
PAGE 290
• shutdown all • shutdown address-family-ipv4–multicast • shutdown address-family-ipv4–unicast • shutdown address-family-ipv6–unicast • show capture bgp-pdu neighbor • show config • show ip bgp • show ip bgp cluster-list • show ip bgp community • show ip bgp community-list • show ip bgp dampened-paths • show ip bgp detail • show ip bgp extcommunity-list • show ip bgp filter-list • show ip bgp flap-statistics • show ip bgp inconsistent-as • show ip bgp neighbors • show ip b
PAGE 291
BGPv4 Commands Border gateway protocol (BGP) is an external gateway protocol that transmits interdomain routing information within and between autonomous systems (AS). BGP version 4 (BGPv4) supports classless interdomain routing (CIDR) and the aggregation of routes and AS paths. Basically, two routers (called neighbors or peers) exchange information including full routing tables and periodically send messages to update those routing tables. NOTE: Dell Networking OS Version 7.7.
PAGE 292
AS_SET includes AS_PATH and community information from the routes included in the aggregated route. Defaults attribute-map mapname (OPTIONAL) Enter the keywords attribute-map then the name of a configured route map to modify attributes of the aggregate, excluding AS_PATH and NEXT_HOP attributes. summary-only (OPTIONAL) Enter the keyword summary-only to advertise only the aggregate address. Specific routes are not advertised.
PAGE 293
Defaults Command Modes Supported Modes Command History Related Commands both Enter the keyword both to indicate that the system sends and accepts multiple paths from peers. path-count Enter the number paths supported. The range is from 2 to 64. Disabled • ROUTER BGP • ROUTER BGP-address-family Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 294
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Before enabling this feature, enable the enable bgp four-octet-as-supportcommand. If you disable the four-octect-support command after using dot or dot+ format, the AS numbers revert to asplain text. When you apply an asnotation, it is reflected in the running-configuration.
PAGE 295
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you enable this command, use the clear ip bgp * command to recompute the best path. bgp bestpath as-path multipath-relax Include prefixes received from different AS paths during multipath calculation. Syntax bgp bestpath as-path multipath-relax To return to the default BGP routing process, use the no bgp bestpath as-path multipath-relax command.
PAGE 296
bgp bestpath med missing-as-best During path selection, indicate preference to paths with missing MED (MULTI_EXIT_DISC) over paths with an advertised MED attribute. Syntax bgp bestpath med missing-as-best To return to the default selection, use the no bgp bestpath med missing-as-best command. Defaults Disabled Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 297
Defaults Enabled when a route reflector is configured. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Route reflection to clients is not necessary if all client routers are fully meshed. Related Commands bgp cluster-id — assigns an ID to a BGP cluster with two or more route reflectors.
PAGE 298
bgp confederation identifier Configure an identifier for a BGP confederation. Syntax bgp confederation identifier as-number To delete a BGP confederation identifier, use the no bgp confederation identifier as-number command. Parameters as-number Defaults Not configured. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Enter the AS number. The range is from 0 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format).
PAGE 299
Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. All the routers in the Confederation must be 4 byte or 2 byte identified routers. You cannot mix them. The autonomous systems configured in this command are visible to the EBGP neighbors. Each autonomous system is fully meshed and contains a few connections to other autonomous systems.
PAGE 300
Command Modes Supported Modes Command History • ROUTER BGP • ROUTER BGP-address-family Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information If you enter the bgp dampening command, the default values for half-life, reuse, suppress, and maxsuppress-time are applied. The parameters are position-dependent; therefore, if you configure one parameter, configure the parameters in the order they appear in the CLI.
PAGE 301
To turn off the default, use the no bgp enforce-first-as command. Defaults Enabled Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command is enabled by default, that is for all updates received from EBGP peers, BGP ensures that the first AS of the first AS segment is always the AS of the peer.
PAGE 302
Defaults Disabled (supports 2–byte format) Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Routers supporting 4-byte ASNs advertise that function in the OPEN message. The behavior of a 4-byte router is slightly different depending on whether it is speaking to a 2-byte router or a 4-byte router.
PAGE 303
BGP graceful restart is active only when the neighbor becomes established. Otherwise it is disabled. Gracefulrestart applies to all neighbors with established adjacency. bgp non-deterministic-med Compare MEDs of paths from different autonomous systems. Syntax bgp non-deterministic-med To return to the default, use the no bgp non-deterministic-med command. Defaults Disabled (that is, paths/routes for the same destination but from different ASs do not have their MEDs compared).
PAGE 304
Usage Information The updates are sent to all the neighbors in the peer-group and all the neighbors have the same attributes including next-hop. Enabling or disabling outbound optimization dynamically resets all neighbor sessions. When you enable outbound optimization, all peers receive the same update packets. Also, the next-hop address, which is chosen as one of the addresses of the neighbor's reachable interface, is the same for all peers.
PAGE 305
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. BGP uses regular expressions (regex) to filter route information. In particular, the use of regular expressions to filter routes based on AS-PATHs and communities is common. In a large-scale configuration, filtering millions of routes based on regular expressions can be quite CPU intensive, as a regular expression evaluation involves generation and evaluation of complex finite state machines.
PAGE 306
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Peering sessions are reset when you change the router ID of a BGP router. bgp soft-reconfig-backup To avoid the peer from resending messages, use this command only when route-refresh is not negotiated. Syntax bgp soft-reconfig-backup To return to the default setting, use the no bgp soft-reconfig-backup command.
PAGE 307
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. capture bgp-pdu max-buffer-size — specifies a size for the capture buffer. show capture bgp-pdu neighbor — displays BGP packet capture information. capture bgp-pdu max-buffer-size Set the size of the BGP packet capture buffer. This buffer size pertains to both IPv4 and IPv6 addresses.
PAGE 308
NOTE: If you enter the clear ip bgp ip-address soft command, both inbound and outbound policies are reset. in (OPTIONAL) Enter the keyword in to activate only inbound policies. out (OPTIONAL) Enter the keyword out to activate only outbound policies. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 309
filter-list as-pathname (OPTIONAL) Enter the keywords filter-list then the name of a configured ASPATH list. regexp regularexpression (OPTIONAL) Enter the keyword regexp then regular expressions. Use one or a combination of the following: • . = (period) any single character (including a white space). • * = (asterisk) the sequences in a pattern (0 or more sequences). • + = (plus) the sequences in a pattern (1 or more sequences).
PAGE 310
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug ip bgp Display all information on BGP, including BGP events, keepalives, notifications, and updates. Syntax debug ip bgp [ip-address | peer-group peer-group-name] [in | out] To disable all BGP debugging, use the no debug ip bgp command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format.
PAGE 311
To disable debugging, use the no debug ip bgp dampening command. Parameters in (OPTIONAL) Enter the keyword in to view only inbound dampened routes. out (OPTIONAL) Enter the keyword out to view only outbound dampened routes. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show debugging — view enabled debugging operations.
PAGE 312
debug ip bgp keepalives Display information about BGP keepalive messages. Syntax debug ip bgp [ip-address | peer-group peer-group-name] keepalives [in | out] To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] keepalives [in | out] command. Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group peergroup-name (OPTIONAL) Enter the keyword peer-group then the name of the peer group.
PAGE 313
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To remove all configured debug commands for BGP, enter the no debug ip bgp command. debug ip bgp soft-reconfiguration Enable soft-reconfiguration debug. Syntax debug ip bgp {ip-address | peer-group-name} soft-reconfiguration To disable, use the no debug ip bgp {ip-address | peer-group-name} softreconfiguration command.
PAGE 314
ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group-name (OPTIONAL) Enter the name of the peer group to disable or enable all routers within the peer group. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To remove all configured debug commands for BGP, enter the no debug ip bgp command.
PAGE 315
description Enter a description of the BGP routing protocol Syntax description {description} To remove the description, use the no description {description} command. Parameters description Defaults none Command Modes ROUTER BGP Supported Modes Full–Switch Command History Related Commands Enter a description to identify the BGP protocol (80 characters maximum). Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 316
neighbor activate This command allows the specified neighbor/peer group to be enabled for the current AFI/SAFI (Address Family Identifier/Subsequent Address Family Identifier). Syntax neighbor [ip-address | peer-group-name] activate To disable, use the no neighbor [ip-address | peer-group-name] activate command. Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group-name (OPTIONAL) Enter the name of the peer group.
PAGE 317
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. bgp add-path — allows the advertisement of multiple paths for the same address prefix without the new paths implicitly replacing any previous ones. neighbor advertisement-interval Set the advertisement interval between BGP neighbors or within a BGP peer group.
PAGE 318
Defaults none Command Modes ROUTER BGP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor allowas-in Set the number of times an AS number can occur in the AS path. Syntax neighbor {ip-address | peer-group-name} allowas-in number To return to the default value, use the no neighbor {ip-address | peer-group-name} allowas-in command.
PAGE 319
route-map mapname Defaults Not configured. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information (OPTIONAL) Enter the keyword route-map then the name of a configured route map. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 320
Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group to apply the distribute list filter to all routers in the peer group. prefix-list-name Enter the name of an established prefix list. If the prefix list is not configured, the default is permit (to allow all routes). in Enter the keyword in to distribute only inbound traffic. out Enter the keyword out to distribute only outbound traffic. Defaults Not configured.
PAGE 321
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To prevent loops, the neighbor ebgp-multihop command does not install the default routes of the multihop peer. Networks not directly connected are not considered valid for best-path selection. neighbor fall-over Enable or disable fast fall-over for BGP neighbors. Syntax neighbor {ipv4-address | peer-group-name} fall-over To disable, use the no neighbor {ipv4-address | peer-group-name} fall-over command.
PAGE 322
no prepend Defaults Not configured. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Related Commands Specifies that local AS values do not prepend to announcements from the neighbor. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. bgp four-octet-as-support — enables 4-byte support for the BGP process. neighbor maximum-prefix Control the number of network prefixes received.
PAGE 323
Related Commands show ip bgp summary — displays the current BGP configuration. neighbor password Enable message digest 5 (MD5) authentication on the TCP connection between two neighbors. Syntax neighbor {ip-address | peer-group-name} password [encryption-type] password To delete a password, use the no neighbor {ip-address | peer-group-name} password command. Parameters ip-address Enter the IP address of the router to be included in the peer group.
PAGE 324
neighbor peer-group (assigning peers) Allows you to assign one peer to an existing peer group. Syntax neighbor ip-address peer-group peer-group-name To delete a peer from a peer group, use the no neighbor ip-address peer-group peer-group-name command. Parameters ip-address Enter the IP address of the router to be included in the peer group. peer-group-name Enter the name of a configured peer group. Defaults Not configured.
PAGE 325
neighbor peer-group (creating group) Allows you to create a peer group and assign it a name. Syntax neighbor peer-group-name peer-group To delete a peer group, use the no neighbor peer-group-name peer-group command. Parameters peer-group-name Defaults Not configured. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Enter a text string up to 16 characters long as the name of the peer group. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 326
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. After you configure a peer group as passive, assign it a subnet using the neighbor soft-reconfiguration inbound command. For passive eBGP limits, the Remote AS must be different from the AS for this neighbor. Related Commands neighbor soft-reconfiguration inbound — assigns a subnet to a dynamically configured BGP neighbor. neighbor remote-as — assigns an indirectly connected AS to a neighbor or peer group.
PAGE 327
neighbor remove-private-as Remove private AS numbers from the AS-PATH of outgoing updates. Syntax neighbor {ip-address | peer-group-name} remove-private-as To return to the default, use the no neighbor {ip-address | peer-group-name} removeprivate-as command. Parameters ip-address Enter the IP address of the neighbor to remove the private AS numbers. peer-group-name Enter the name of the peer group to remove the private AS numbers. Defaults Disabled (that is, private AS number are not removed).
PAGE 328
in Enter the keyword in to filter inbound routes. out Enter the keyword out to filter outbound routes. Defaults Not configured. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted.
PAGE 329
The first time you enter this command, the router configures as a route reflector and the specified BGP neighbors configure as clients in the route-reflector cluster. When you remove all clients of a route reflector using the no neighbor route-reflector-client command, the router no longer functions as a route reflector.
PAGE 330
To disable, use the no neighbor {ip-address | peer-group-name} soft-reconfiguration inbound command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group to disable or enable all routers within the peer group. Defaults Disabled Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 331
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Timer values configured with the neighbor timers command override the timer values configured with any other command.
PAGE 332
For the new idle holdtime to take effect, you need to shutdown the respective peer manually using neighbor shutdown command and enable the peer again. neighbor update-source Enable the software to use Loopback interfaces for TCP connections for BGP sessions. Syntax neighbor {ip-address | peer-group-name} update-source interface To use the closest interface, use the no neighbor {ip-address | peer-group-name} updatesource interface command.
PAGE 333
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. In the system best path selection process, the path with the highest weight value is preferred. NOTE: In the system best-path selection process, the path with the highest weight value is preferred.
PAGE 334
network backdoor Specify this IGP route as the preferred route. Syntax network ip-address mask backdoor To remove a network, use the no network ip-address mask backdoor command. Parameters ip-address Enter an IP address in dotted decimal format of the network. mask Enter the mask of the IP address in the slash prefix length format (for example, /24). The mask appears in command outputs in dotted decimal format (A.B.C.D). Defaults Not configured.
PAGE 335
If the route map is not configured, the default is deny (to drop all routes). Defaults Not configured. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. With the Dell Networking OS version 8.3.1.0 and later, you can use the redistribute command to advertise the IGP cost as the MED on redistributed routes.
PAGE 336
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. With the Dell Networking OS version 8.3.1.0 and later, you can use the redistribute command to advertise the IGP cost as the MED on redistributed routes. When you set the route-map with metric-type internal and apply outbound to an EBGP peer/peer-group, the advertised routes corresponding to those peer/peer-groups have the IGP cost set as MED.
PAGE 337
Command History Usage Information Version Description 9.11.0.0 Introduced on the S-Series, Z-Series, MXL, and IOM. You can use this command to disable all the configured BGP neighbors. This command is global for all VRFs. shutdown address-family-ipv4–multicast Disables all the BGP neighbors corresponding to the multicast IPv4 address families.
PAGE 338
This command is global for all VRFs. shutdown address-family-ipv6–unicast Disables all the BGP neighbors corresponding to the unicast IPv6 address families. Syntax shutdown address-family-ipv6–unicast Use the no shutdown address-family-ipv6–unicast command to enable all the configured BGP neighbors corresponding to the unicast IPv6 address families. Command Modes ROUTER BGP CONFIGURATION Command History Usage Information Version Description 9.11.0.
PAGE 339
PDU[2] : len 19, captured 00:34:51 ago ffffffff ffffffff ffffffff ffffffff 00130400 PDU[3] : len 19, captured 00:34:51 ago ffffffff ffffffff ffffffff ffffffff 00130400 [. . .] Outgoing packet capture enabled for BGP neighbor 20.20.20.
PAGE 340
[neighbors [all {received-routes}]] [next-hop] [paths] [peer-group peer-groupname] [regexp regular-expression] [summary] Parameters 340 ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. ipv4 multicast (OPTIONAL) Enter the keywords ipv4 multicast to view information only related to ipv4 multicast routes. ipv6 unicast (OPTIONAL) Enter the keywords ipv6 unicast to view information only related to ipv6 unicast routes.
PAGE 341
summary Command Modes Supported Modes Command History Usage Information • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword summary to display the summary of BGP neighbor status. Full–Switch Version Description 9.14(0.0) Introduced the [all {received-routes}] option for IPv4 and IPv6 neighbors. 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 342
*> 5.0.0.0/11 --More-- 63.114.8.33 0 0 18508 ? Following is the example for displaying all the received routes from all IPv4 neighbors: DellEMC# show ip bgp vrf test ipv4 unicast neighbors all received-routes BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 1.1.1.
PAGE 343
show ip bgp cluster-list View BGP neighbors in a specific cluster. Syntax Parameters Command Modes Supported Modes Command History Usage Information Example show ip bgp [ipv4 unicast] cluster-list [cluster-id] ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. cluster-id (OPTIONAL) Enter the cluster id in dotted decimal format. The range is 1 — 4294967295. • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.
PAGE 344
* I * I * I 10.30.1.0/24 * I *>I * I * I * I 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 192.68.16.1 0 0 0 0 0 0 0 0 100 100 100 100 100 100 100 100 0 0 0 0 0 0 0 0 ? ? ? ? ? ? ? ? show ip bgp community View information on all routes with Community attributes or view specific BGP community groups.
PAGE 345
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To view the total number of COMMUNITY attributes found, use the show ip bgp summary command. The text line above the route table states the number of COMMUNITY attributes found. The show ip bgp community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp command output.
PAGE 346
Parameters Command Modes Supported Modes Command History Usage Information ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. community-listname Enter the name of a configured IP community list (maximum 140 characters). exact-match Enter the keyword for an exact match of the communities. • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 347
Command Modes Supported Modes Command History Usage Information Example • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp damp command shown in the following example. Field Description Network Displays the network ID to which the route is dampened. From Displays the IP address of the neighbor advertising the dampened route.
PAGE 348
NdIgnrIllId 0 : NdRRC2C 1 : NdClstId 33686273 : NdPaTblP 0x41a19088 NdASPTblP 0x41a19090 : NdCommTblP 0x41a19098 : NhOptTransTblP 0x41a190a0 : NdRRClsTblP 0x41a190a8 NdPktPA 0 : NdLocCBP 0x41a6f000 : NdTmpPAP 0x419efc80 : NdTmpASPAP 0x41a25000 : NdTmpCommP 0x41a25800 NdTmpRRClP 0x41a4b000 : NdTmpOptP 0x41a4b800 : NdTmpNHP : NdOrigPAP 0 NdOrgNHP 0 : NdModPathP 0x419efcc0 : NdModASPAP 0x41a4c000 : NdModCommP 0x41a4c800 NdModOptP 0x41a4d000 : NdModNHP : NdComSortBufP 0x41a19110 : NdComSortHdP 0x41a19d04 : NdUp
PAGE 349
show ip bgp extcommunity-list View information on all routes with Extended Community attributes. Syntax Parameters Command Modes Supported Modes Command History Usage Information show ip bgp [ipv4 unicast] extcommunity-list [list name] ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. list name Enter the extended community list name you wish to view. The range is 140 characters.
PAGE 350
Usage Information Example The following describes the show ip bgp filter-list hello command shown in the following example. Field Description Path source codes Lists the path sources shown to the right of the last AS number in the Path column: • i = internal route entry • a = aggregate route entry • c = external confederation route entry • n = network route entry • r = redistributed route entry Next Hop Displays the next hop address of the BGP router. If 0.0.0.
PAGE 351
Parameters ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. ip-address (OPTIONAL) Enter the IP address (in dotted decimal format) of the BGP network to view information only on that network. mask (OPTIONAL) Enter the network mask (in slash prefix (/x) format) of the BGP network address. filter-list as-pathname (OPTIONAL) Enter the keyword filter-list then the name of a configured AS-PATH ACL. The range is 140 characters.
PAGE 352
Example Dell>show ip bgp flap-statistics BGP table version is 210851, local router ID is 63.114.8.
PAGE 353
*> 4.0.0.0/8 * * * * 6.0.0.0/20 * *> * * 9.2.0.0/16 * --More-- 63.114.8.60 63.114.8.34 63.114.8.33 63.114.8.33 63.114.8.60 63.114.8.34 63.114.8.33 63.114.8.33 63.114.8.60 63.114.8.34 0 0 0 0 0 0 0 0 0 0 0 18508 18508 18508 18508 18508 18508 18508 18508 18508 18508 209 209 701 209 209 209 ? 209 209 209 1 i 1 i 1 i 1 i 3549 i 3549 i 3549 i 701 i 701 i show ip bgp neighbors Allows you to view the information BGP neighbors exchange.
PAGE 354
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. After a peer reset, the contents of the notification log messages is displayed in hex values for debugging. The following describes the show ip bgp neighbors command shown in the following examples. 354 The Lines Beginning with: Description BGP neighbor Displays the BGP neighbor address and its AS number.
PAGE 355
The Lines Beginning with: Description Local host: Displays the peering address of the local router and the TCP port number. Foreign host: Displays the peering address of the neighbor and the TCP port number. Example ( ) Dell#show ip bgp neighbors BGP neighbor is 10.10.10.1, remote AS 23456, external link BGP version 4, remote router ID 10.10.10.1 BGP state ESTABLISHED, in this state for 00:00:35 . . .
PAGE 356
redistributed, n - network Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf *>r 1.10.1.0/24 0.0.0.0 5000 *>r 1.11.0.0/16 0.0.0.0 5000 ..... ... *>I 223.94.249.0/24 223.100.4.249 0 100 *>I 223.94.250.0/24 223.100.4.250 0 100 *>I 223.100.0.0/16 223.100.255.254 0 100 Total number of prefixes: 74102 Example (ReceivedRoutes) Next Hop 100.10.10.2 100.10.10.2 100.10.10.2 100.10.10.2 100.10.10.2 100.10.10.2 100.10.10.2 100.10.10.2 100.10.10.
PAGE 357
Command History Usage Information Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp next-hop command shown in the following example. Field Description Next-hop Displays the next-hop IP address. Via Displays the IP address and interface used to reach the next hop. RefCount Displays the number of BGP routes using this next hop.
PAGE 358
Command Modes Supported Modes Command History Usage Information Example • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp path command shown in the following example. Field Description Total Displays the total number of BGP path attributes. Address Displays the internal address where the path attribute is stored.
PAGE 359
Supported Modes Command History Usage Information Example Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp paths as-path command shown in the following example. Field Description Address Displays the internal address where the path attribute is stored. Hash Displays the hash bucket where the path attribute is stored.
PAGE 360
Example Field Description Address Displays the internal address where the path attribute is stored. Hash Displays the hash bucket where the path attribute is stored. Refcount Displays the number of BGP routes using these communities. Community Displays the community attributes in this BGP path.
PAGE 361
Command History Usage Information Example ( ) Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp peer-group command shown in the following example. Line beginning with: Description Peer-group Displays the peer group’s name. Administratively shut Displays the peer group’s status if the peer group is not enabled. If you enable the peer group, this line is not displayed.
PAGE 362
12.2.1.5* 12.2.1.6* 12.3.1.2* 12.3.1.3* 12.3.1.4* 12.3.1.5* 12.3.1.6* 12.4.1.2* 12.4.1.3* 12.4.1.4* 12.4.1.5* 12.4.1.6* Related Commands neighbor peer-group (assigning peers) — assigns a peer to a peer-group. neighbor peer-group (creating group) — creates a peer group. show ip bgp regexp Display the subset of the BGP routing table matching the regular expressions specified.
PAGE 363
Example (S4810) Field Description Network Displays the destination network prefix of each BGP route. Next Hop Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then non-BGP routes exist in the router’s routing table. Metric Displays the BGP router’s metric, if assigned. LocPrf Displays the BGP LOCAL_PREF attribute for the route. Weight Displays the route’s weight Path Lists all the AS paths the route passed through to reach the destination network.
PAGE 364
Usage Information The following describes the show ip bgp summary command shown in the following example. Field Description BGP router identifier Displays the local router ID and the AS number. BGP table version Displays the BGP table version and the main routing table version. network entries Displays the number of network entries, route paths, and the amount of memory used to process those entries. paths Displays the number of paths and the amount of memory used.
PAGE 365
Field Description If the neighbor is not in Established stage, the current stage is displayed (Idle, Connect, Active, OpenSent, OpenConfirm). When the peer is transitioning between states and clearing the routes received, the phrase (Purging) may appear in this column. If the neighbor is disabled, the phrase (Admin shut) appears in this column. Example (S4810) Dell#show ip bgp summary BGP router identifier 120.10.10.
PAGE 366
Defaults none Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. timers bgp extended Adjust the BGP idle holdtime for all the BGP neighbors. Syntax timers bgp extended idle-holdtime To return to the default, use the no timers bgp extended command.
PAGE 367
MBGP Commands Multiprotocol BGP (MBGP) is an enhanced BGP that enables multicast routing policy throughout the internet and connecting multicast topologies between BGP and autonomous systems (ASs). MBGP is implemented as per IETF RFC 1858. debug ip bgp dampening View information on routes being dampened. Syntax debug ip bgp ipv4 multicast dampening To disable debugging, use the no debug ip bgp ipv4 multicast dampening command.
PAGE 368
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information CAUTION: Dell Networking OS recommends that you do not change the administrative distance of internal routes. Changing the administrative distances may cause routing table inconsistencies. The higher the administrative distance assigned to a route means that your confidence in that route is low.
PAGE 369
BGP Extended Communities (RFC 4360) BGP Extended Communities, as defined in RFC 4360, is an optional transitive BGP attribute. BGP Extended Communities provides two major advantages over Standard Communities: • The range is extended from 4-octet (AA:NN) to 8-octet (Type:Value) to provide enough number communities. • Communities are structured using a new “Type” field (1 or 2-octets), allowing you to provide granular control/filter routing information based on the type of extended communities.
PAGE 370
set extcommunity soo To set extended community site-of-origin in Route Map, use this feature. Syntax set extcommunity soo {as4 ASN4:NN | ASN:NNNN | IPADDR:NN [non-trans]} To delete the site-of-origin community, use the no set extcommunity command. Parameters as4 ASN4:NN Enter the keyword as4 then the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value).
PAGE 371
Command History Usage Information Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp paths extcommunity command shown in the following example. Field Description Address Displays the internal address where the path attribute is stored. Hash Displays the hash bucket where the path attribute is stored. Refcount Displays the number of BGP routes using these extended communities.
PAGE 372
IPv6 BGP Commands IPv6 Border Gateway Protocol (IPv6 BGP) is supported on the switch. Border gateway protocol (BGP) is an external gateway protocol that transmits interdomain routing information within and between autonomous systems (AS). BGP version 4 (BGPv4) supports classless interdomain routing and the aggregation of routes and AS paths. Basically, two routers (called neighbors or peers) exchange information including full routing tables and periodically send messages to update those routing tables.
PAGE 373
peer-group name Clear and reapply policies for all BGP routers in the specified peer group. ipv6 unicast soft Clear and reapply policies for all IPv6 unicast routes. in Reapply only inbound policies. NOTE: If you enter soft, without an in or out option, both inbound and outbound policies are reset. out Reapply only outbound policies. NOTE: If you enter soft, without an in or out option, both inbound and outbound policies are reset.
PAGE 374
ipv6 prefix-list Configure an IPv6 prefix list. Syntax ipv6 prefix-list prefix-list name Parameters prefix-list name Enter the name of the prefix list. NOTE: There is a 140-character limit for prefix list names. Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ipv6 prefix-list — View the selected IPv6 prefix-list.
PAGE 375
IPv6 MBGP Commands Multiprotocol BGP (MBGP) is an enhanced BGP that enables multicast routing policy throughout the Internet and connecting multicast topologies between BGP and autonomous systems (AS). MBGP is implemented as per IETF RFC 1858. show ipv6 mbgproutes Display the selected IPv6 MBGP route or a summary of all MBGP routes in the table.
PAGE 376
11 Configuration Cloning Configuration Cloning enables you to clone the configuration from one aggregator to the other. It identifies a source aggregator where running configuration is check-pointed, extracted and downloaded to the target aggregator for further use. The target aggregator checks the compatibility of the cloning file regarding the mode, port types and optional modules.
PAGE 377
Command History Version Description 9.10(0.0) Introduced on the FN IOM and M I/O Aggregator. clone-config create Create the cloning configuration. Syntax Parameters clone-config create [file-name filename][output xml] create Enter the keyword create to create the cloning configuration file. file-name filename Enter the keywords file-name to save the cloning configuration in user-defined filename. By default, it gets stored in flash under the filename cloning-config.
PAGE 378
12 Content Addressable Memory (CAM) Content addressable memory (CAM) commands are supported on the Dell Networking operating software on the platform. WARNING: If you are using these features for the first time, contact Dell Networking Technical Assistance Center (TAC) for guidance.
PAGE 379
cam-acl (Configuration) Select the default CAM allocation settings or reconfigure a new CAM allocation for Layer 2, IPv4, and IPv6 ACLs, Layer 2 and Layer 3 (IPv4) QoS, Layer 2 Protocol Tunneling (L2PT), IP and MAC source address validation for DHCP, Ethernet Connectivity Fault Management (CFM) ACLs, and Policy-based Routing (PBR).
PAGE 380
NOTE: When you reconfigure CAM allocation, use the nlbclusteracl number command to change the number of NLB ARP entries. The range is from 0 to 2. The default value is 0. At the default value of 0, eight NLB ARP entries are available for use. This platform supports upto 256 CAM entries. Select 1 to configure 128 entries. Select 2 to configure 256 entries.
PAGE 381
The total amount of space allowed is 16 FP Blocks. System flow requires three blocks; these blocks cannot be reallocated. The ipv4acl profile range is from 1 to 4. When configuring space for IPv6 ACLs, the total number of Blocks must equal 13. On the switch, there can be only one odd number of Blocks in the CLI configuration; the other Blocks must be in factors of two. For example, a CLI configuration of 5+4+2+1+1 Blocks is not supported; a configuration of 6+4+2+1 Blocks is supported.
PAGE 382
Defaults Enabled Parameters threshold default Enter the keyword default for CAM usage threshold for notification of the CAM usage through syslog message. The default threshold value is 90 percent. threshold threshold-percent Enter the threshold percent for notification of the CAM usage through syslog message. The range is from 1 to 100 percent. silence-period default Enter the keyword default to set the silence period for receiving syslog message regarding CAM usage for CAM region, slot/portpipe.
PAGE 383
Usage Information The display reflects the settings implemented with the cam-acl command.
PAGE 384
show cam-acl-egress Display the details of the FP groups allocated for the egress ACL. Syntax show cam-acl-egress Defaults none Command Modes Configuration Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The display reflects the settings implemented with the cam-acl-egress command.
PAGE 385
13 Control Plane Policing (CoPP) The Dell Networking OS supports the following CoPP commands. control-plane-cpuqos To manage control-plane traffic, enter control-plane mode and configure the switch. Syntax control-plane-cpuqos Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 386
Related Commands qos-policy-input — creates a QoS input policy map. policy-map-input — creates an input policy map. service-policy rate-limit-protocols Apply a policy for the system to rate limit control protocols on a per-protocol basis. Syntax service-policy rate-limit-protocols policy-name Parameters policy-name Enter the service-policy name, using a string up to 32 characters. Defaults Not configured.
PAGE 387
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command applies the service-policy based on the type of protocol defined in the ACL rules. Create ACL and QoS policies prior to enabling this command.
PAGE 388
VRRP Dell# any any _ Q10 _ show ipv6 protocol-queue-mapping Display the queue mapping for each configured IPv6 protocol. Syntax show ipv6 protocol-queue-mapping Defaults Not configured. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 389
LLDP GVRP STP ISIS Dell# any 01:80:c2:00:00:21 01:80:c2:00:00:00 01:80:c2:00:00:14/15 09:00:2b:00:00:04/05 0x88cc any any any any Q8 Q8 Q7 Q9 Q9 CP CP CP CP CP _ _ _ _ Control Plane Policing (CoPP) 389
PAGE 390
14 u-Boot All commands in this chapter are in u-Boot mode. These commands are supported on the Dell Networking Aggregator only. To access this mode, hit any key when the following line appears on the console during a system boot: Hit any key to stop autoboot: You enter u-Boot immediately, as indicated by the BOOT_USER# prompt. NOTE: Only the most frequently used commands available in uBoot mode are described in this chapter. In uBoot mode, you cannot use the Tab key for command completion.
PAGE 391
Supported Modes Command History All Modes Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. boot show net config retries Show the number of retries for network boot configuration failure. Syntax boot show net config retries Command Modes uBoot Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.
PAGE 392
boot zero Clears the primary, secondary, or default boot parameters. Syntax boot zero [primary| secondary| default] Command Modes uBoot Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. default gateway Set the default gateway IP address.
PAGE 393
help Displays the help menu. Syntax help Command Modes uBoot Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. BOOT_USER # help ***** Dell Force10 Boot Interface Help Information ***** Current access level: USER LEVEL Use "syntax help" for more information on syntax.
PAGE 394
ignore startup-config Ignore the system startup configuration. Syntax ignore startup-config Command Modes uBoot Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. interface management ethernet ip address Set the management port IP address and mask.
PAGE 395
no interface management ethernet ip address Clear the management port IP address and mask. Syntax no interface management ethernet ip address Command Modes uBoot Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. reload Reload the switch. Syntax reload Command Modes uBoot Supported Modes All Modes Command History Version Description 9.9(0.
PAGE 396
show boot show BOOT_USER Boot Loop blc the boot loop counter value # show boot blc Counter : 10 BOOT_USER # show boot selection Displays the ROM bootstrap bootflash partition. Syntax show boot selection Command Modes uBoot Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. BOOT_USER # show boot blc ? Total 1 possible command found.
PAGE 397
Created Tue May 1 10:56:16 2012 by build on login-sjc-01 Bootflash Partition B: Dell Force10 Networks System Boot Official IOM_LP_IMG_BOOT_LOADER, BSP Release 4.0.1.0bt1 Created Tue May 1 10:56:16 2012 by build on login-sjc-01 Boot Selector Partition: Dell Force10 Networks System Boot Official IOM_XLOAD_LP_IMG_BOOT_SELECTOR, BSP Release 4.0.0.0bt1 Created Tue May 1 10:56:34 2012 by build on login-sjc-01 BOOT_USER # show bootvar Show the summary of operating system boot parameters.
PAGE 398
show default gateway Displays the default gateway IP address. Syntax show default-gateway Command Modes uBoot Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. BOOT_USER # show default-gateway Gateway IP address: 15.0.0.1 BOOT_USER # show interface management ethernet Show the management port IP address and mask.
PAGE 399
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. BOOT_USER # show interface management port config Management ethernet Port Configuration: no Auto Negotiate Management ethernet Port Configuration: 100M Management ethernet Port Configuration: full duplex BOOT_USER # syntax help Show the syntax information.
PAGE 400
15 Data Center Bridging (DCB) Data center bridging (DCB) refers to a set of IEEE Ethernet enhancements that provide data centers with a single, robust, converged network to support multiple traffic types, including local area network (LAN), server, and storage traffic. DCB features are auto-configured in standalone mode. The Dell Networking OS commands for DCB features include 802.1Qbb priority-based flow control (PFC), 802.
PAGE 401
• dcbx-port role • dcbx version • debug dcbx • description • fc-map • fcoe-map • fcoe priority-bits • iscsi priority-bits • keepalive • interface vlan (NPIV proxy gateway) • pfc mode on • pfc no-drop queues • priority • priority-group bandwidth pfc • priority-pgid • qos-policy-output ets • qos-policy-buffer • priority-list • scheduler • show dcb • show interface dcbx detail • show interface ets • show interface pfc • show interface pfc statistics • show qos p
PAGE 402
• iscsi: enables the advertisement of iSCSI in application priority TLVs. Defaults Application priority TLVs are enabled to advertise FCoE and iSCSI. Command Modes PROTOCOL LLDP Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 403
Usage Information You can configure the transmission of more than one TLV type at a time; for example: advertise dcbx-tlv ets-conf ets-reco. You can enable ETS recommend TLVs (ets-reco) only if you enable ETS configuration TLVs (ets-conf). To disable TLV transmission, use the no form of the command; for example, no advertise dcbx-tlv pfc ets-reco. DCBX requires that you enable LLDP to advertise DCBX TLVs to peers. Configure DCBX operation at the INTERFACE level on a switch or globally on the switch.
PAGE 404
To disable DCB, use the no dcb enable command. Defaults none Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. DCB is not supported if you enable link-level flow control on one or more interfaces.
PAGE 405
Example for Interface Mode Dell(conf-if-te-1/1)#dcb-policy buffer-threshold test dcb-policy buffer-threshold (Interface Configuration) Assign the DCB policy to the DCB buffer threshold profile on interfaces. This setting takes precedence over the global buffer-threshold setting.
PAGE 406
clear ets counters Clear ETS TLV counters. Syntax clear ets counters [tengigabitethernet slot/port] Parameters Command Modes Supported Modes Command History slot/port • Enter the slot/port number. EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. clear pfc counters Clear the PFC TLV counters and PFC statistics on an interface or stack unit.
PAGE 407
dcb enable pfc-queues Configure the number of PFC queues. Syntax Parameters dcb enable pfc-queues value value Enter the number of PFC queues. The range is from 1 to 4. The number of ports supported based on lossless queues configured will depend on the buffer. Default 2 Command Modes CONFIGURATION mode Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN 2210S Aggregator. 9.3(0.
PAGE 408
Command Modes Supported Modes Command History Example (Disable) • CONFIGURATION All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.3 Added auto-detect parameter on the M I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 409
stack-unit 0 port-set 0 DCB Status: Enabled, PFC Queue Count: 4 stack-unit Total Buffer PFC Total Buffer PFC Shared Buffer PFC Available Buffer PP (KB) (KB) (KB) (KB) -----------------------------------------------------------------0 0 3822 1912 832 450 Dell(conf)# Example (Enable DCB with AutoDetect) Dell#show dcb stack-unit 0 port-set 0 DCB Status : Disabled PFC Queue Count : 2 Total Buffer[lossy + lossless] (in KB) : 3822 PFC Total Buffer (in KB) : 1912 PFC Shared Buffer (in KB) : 832 PFC Available Buf
PAGE 410
Usage Information The dcb-map stack-unit all stack-ports all command overwrites any previous DCB maps applied to stack ports. dcbx-port role Configure the DCBX port role the interface uses to exchange DCB information. Syntax dcbx port-role {config-source | auto-downstream | auto-upstream | manual} To remove DCBX port role, use the no dcbx port-role {config-source | auto-downstream | auto-upstream | manual} command.
PAGE 411
Parameters auto | cee | cin | ieee-v2.5 Enter the DCBX version type used on the interface, where: • auto: configures the port to operate using the DCBX version received from a peer. • cee: configures the port to use CEE (Intel 1.01). • cin: configures the port to use Cisco-Intel-Nuova (DCBX 1.0). • ieee-v2.5: configures the port to use IEEE 802.1az (Draft 2.5).
PAGE 412
Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Introduced on the FC Flex IO module installed in the M I/O Aggregator. description Enter a text description of the DCB policy (PFC input or ETS output). Syntax description text To remove the text description, use the no description command. Parameters Defaults text Enter the description of the output policy. The maximum is 32 characters.
PAGE 413
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN 2210S Aggregator. 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. The FC-MAP value you enter must match the FC-MAP value used by an FC switch or FCoE forwarder (FCF) in the fabric. An FCF switch accepts only FCoE traffic that uses the correct FC-MAP value. The FC-MAP value is used to generate the fabric-provided MAC address (FP-MAC).
PAGE 414
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN2210S Aggregator. 9.3(0.0) Introduced on the M I/O Aggregator. An FCoE map is a template used to map FCoE and FC parameters in a converged fabric. An FCoE map is used to virtualize upstream FC ports on an FN2210S Aggregator with the PMUX module NPIV proxy gateway so that they appear to downstream server CNA ports as FCoE forwarder (FCF) ports on an FCoE network.
PAGE 415
iscsi priority-bits Configure the iSCSI priority advertised for the iSCSI protocol in application priority TLVs. Syntax iscsi priority-bits priority-bitmap To remove the configured iSCSI priority, use the no iscsi priority-bits command. Parameters priority-bitmap Enter the priority-bitmap range. The range is from 1 to FF. Defaults 0x10 Command Modes PROTOCOL LLDP Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.
PAGE 416
Usage Information When you configure keepalive, the system sends a self-addressed packet out of the configured interface to verify that the far end of a WAN link is up. When you configure no keepalive, the system does not send keepalive packets and so the local end of a WAN link remains up even if the remote end is down.
PAGE 417
To disable the PFC configuration, use the no pfc mode on command. Defaults PFC mode is on. Command Modes DCB MAP Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Introduced on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. By applying a DCB input policy with PFC enabled, you enable PFC operation on ingress port traffic.
PAGE 418
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The maximum number of lossless queues globally supported on the switch is two. The following lists the dot1p priority-queue assignments. dot1p Value in the Incoming Frame Description heading 0 0 1 0 2 0 3 1 4 2 5 3 6 3 7 3 priority Configure the priority for the PFC threshold to be allocated to the buffer space parameters.
PAGE 419
Default The default size of the ingress buffer is 45 KB. The default buffer limit at which the port sends the pause to peer and recommences the sending of packets to the peer is 10 KB. The default threshold weight of the shared buffer space is 10. Command Modes DCB-BUFFER-THRESHOLD mode Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL platform.
PAGE 420
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Introduced on the FC Flex IO module installed in the M I/O Aggregator. Use the dcb-map command to configure priority groups with PFC and/or ETS settings and apply them to Ethernet interfaces. Use the priority-pgid command to map 802.1p priorities to a priority group. You can assign each 802.1p priority to only one priority group.
PAGE 421
dot1p6_group-num dot1p7_group-num Defaults None Command Modes DCB MAP Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Introduced on the FC Flex IO module installed in the M I/O Aggregator. PFC and ETS settings are not pre-configured on Ethernet ports. You must use the dcb-map command to configure different groups of 802.
PAGE 422
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 423
resume-offset Buffer offset limit for resuming in KB threshold-value Buffer offset limit at which the port resumes the peer in KB. Enter a number in the range of 1 to 7787. The default is 10 KB. shared-thresholdweight Buffer shared threshold weight size Weightage of the priorities on the shared buffer size in the system. Enter a number in the range from 0 to 9. The default shared threshold weight is 10. Default The default size of the ingress buffer is 45 KB.
PAGE 424
Parameters value Enter the priority list value. Separate priority values with a comma; specify a priority range with a dash; for example, priority-list 3,5-7. The range is from 0 to 7. Defaults none Command Modes PRIORITY-GROUP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default: • All 802.
PAGE 425
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. dot1p priority traffic on the switch is scheduled to the current queue mapping. dot1p priorities within the same queue must have the same traffic properties and scheduling method. ETS-assigned scheduling applies only to data queues, not to control queues. The configuration of bandwidth allocation and strict-queue scheduling is not supported at the same time for a priority group.
PAGE 426
Parameters port-type Enter the port type. slot/port Enter the slot/port number. NOTE: This command also enables you to view information corresponding to a range of ports. • You can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1 - 4. Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information Version Description 9.9(0.
PAGE 427
Example Field Description Local DCBX Status: DCBX Max Version Supported Highest DCBX version supported in Control TLVs. Local DCBX Status: Sequence Number Sequence number transmitted in Control TLVs. Local DCBX Status: Acknowledgment Number Acknowledgement number transmitted in Control TLVs. Local DCBX Status: Protocol State Current operational state of the DCBX protocol: ACK or IN-SYNC.
PAGE 428
Local DCBX Configured mode is CEE Peer Operating version is CEE Local DCBX TLVs Transmitted: ErPfi Local DCBX Status ----------------DCBX Operational Version is 0 DCBX Max Version Supported is 0 Sequence Number: 2 Acknowledgment Number: 2 Protocol State: In-Sync Peer DCBX Status: ---------------DCBX Operational Version is 0 DCBX Max Version Supported is 255 Sequence Number: 2 Acknowledgment Number: 2 Total DCBX Frames transmitted 27 Total DCBX Frames received 6 Total DCBX Frame errors 0 Total DCBX Frames un
PAGE 429
Field Description Interface Interface type with stack-unit and port number. Max Supported TC Group Maximum number of priority groups supported. Number of Traffic Classes Number of 802.1p priorities currently configured. Admin mode ETS mode: on or off. When on, the scheduling and bandwidth allocation configured in an ETS output policy or received in a DCBX TLV from a peer can take effect on an interface.
PAGE 430
4 0% ETS 5 0% ETS 6 0% ETS 7 0% ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Remote Parameters: ------------------Remote is disabled Local Parameters: -----------------Local is enabled TC-grp Priority# Bandwidth TSA 0 0,1,2,3,4,5,6,7 100% ETS 1 0% ETS 2 0% ETS 3 0% ETS 4 0% ETS 5 0% ETS 6 0% ETS 7 0% ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Oper status is init Conf TLV Tx Status
PAGE 431
Remote Parameters: ------------------Remote is disabled Local Parameters : -----------------Local is enabled TC-grp Priority# 0 0,1,2,3,4,5,6,7 1 2 3 4 5 6 7 Bandwidth 100% 0% 0% 0% 0% 0% 0% 0% TSA ETS ETS ETS ETS ETS ETS ETS ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Oper status is init ETS DCBX Oper status is Down Reason: Port Shutdown State Machine Type is Asymmetric Conf TLV Tx Status is enabled Reco TLV Tx Status is enabled 0 Input Con
PAGE 432
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM and added support to display the interface configurations corresponding to a range of ports. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To clear the PFC TLV counters, use the clear pfc counters interface port-type slot/port command.
PAGE 433
Field Description Application Priority TLV: Local FCOE Priority Map Priority bitmap the local DCBX port uses in FCoE advertisements in application priority TLVs. Application Priority TLV: Local ISCSI Priority Map Priority bitmap the local DCBX port uses in ISCSI advertisements in application priority TLVs. Application Priority TLV: Remote FCOE Priority Map Status of FCoE advertisements in application priority TLVs from the remote peer port: enabled or disabled.
PAGE 434
PFC Link Delay 45556 pause quanta Application Priority TLV Parameters : -------------------------------------FCOE TLV Tx Status is disabled ISCSI TLV Tx Status is disabled Local FCOE PriorityMap is 0x8 Local ISCSI PriorityMap is 0x10 Remote FCOE PriorityMap is 0x8 Remote ISCSI PriorityMap is 0x8 0 Input TLV pkts, 1 Output TLV pkts, 0 Error pkts, 0 Pause Tx pkts, 0 Pause Rx pkts show interface pfc statistics Displays counters for the PFC frames received and transmitted (by dot1p priority class) on an interf
PAGE 435
show qos priority-groups Displays the ETS priority groups configured on the switch, including the 802.1p priority classes and ID of each group. Syntax show qos priority-groups Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 436
Example Field Description State Complete: All mandatory DCB parameters are correctly configured. In progress: The DCB map configuration is not complete. Some mandatory parameters are not configured. PFC Mode PFC configuration in DCB map: On (enabled) or Off. PG Priority group configured in the DCB map. TSA Transmission scheduling algorithm used by the priority group: Enhanced Transmission Selection (ETS). BW Percentage of bandwidth allocated to the priority group.
PAGE 437
Admin Parameters: -------------------Admin is enabled TC-grp Priority# Bandwidth TSA -----------------------------------------------0 0,1,2,3,4,5,6,7 100% ETS 1 - 2 - 3 - 4 - 5 - 6 - 7 - 8 - Stack unit 1 stack port all Max Supported TC Groups is 4 Number of Traffic Classes is 1 Admin mode is on Admin Parameters: -------------------Admin is enabled TC-grp Priority# Bandwidth TSA -----------------------------------------------0 0,1,2,3,4,5,6,7 100% ETS 1 2 3 4 5 6 7 8 - dcb pfc-shared-buffer-size Configure t
PAGE 438
Dell(conf)#dcb pfc-shared-buffer-size 2000 %ERROR: pfc shared buffer size configured cannot accommodate existing buffer requirement in the system. Enter a smaller value for the shared buffer size or increase the total buffer size appropriately by using the dcb pfc-total- buffer-size command. Example Dell(conf)#dcb pfc-shared-buffer-size 5000 dcb pfc-total-buffer-size Configure the total buffer size for PFC in kilobytes.
PAGE 439
Parameters profile-name Enter the name of the profile, which can be a string of up to 32 characters in length. Default None Command Modes CONFIGURATION mode Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL platform. Usage Information When you enter the profile name, you enter the DCB buffer threshold configuration mode.
PAGE 440
services, such as file transfers. You can configure the amount of buffer space to be allocated for each priority and the pause or resume thresholds for the buffer. This method of configuration enables you to effectively manage and administer the behavior of lossless queues. Example Dell(conf)#dcb pfc-queues 4 dcb {ets | pfc} enable Enable priority flow control or enhanced transmission selection on interface. Syntax dcb {ets | pfc} enable • To disable ETS on interface, use “no dcb ets enable” command.
PAGE 441
number Enter a weight for the queue on the shared buffer as a number in the range of 1 to 11. Default The default threshold weight on the shared buffer for each queue is 9. Therefore, each queue can consume up to 66.67 percent of available shared buffer by default. Command Modes INTERFACE mode Supported Modes Full–Switch Usage Information You can configure all the data queues. You can configure queues 0-7.
PAGE 442
Command Modes CONFIGURATION Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 443
16 Dynamic Host Configuration Protocol Dynamic host configuration protocol (DHCP) is an application layer protocol that dynamically assigns IP addresses and other configuration parameters to network end-stations (hosts) based on configuration policies determined by network administrators. An Aggregator can operate as a DHCP client. As a DHCP client, the Aggregator requests an IP address from a DHCP server.
PAGE 444
Parameters binding Enter the keyword binding to delete all entries in the binding table. address Enter the IP address to clear the binding entry for a single IP address. conflicts Enter the keyword conflicts to delete all of the log entries created for IP address conflicts. server statistics Enter the keywords server statistics to clear all the server counter information.
PAGE 445
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. default-router Assign a default gateway to clients based on the address pool. Syntax Parameters default-router address [address2...address8] address Defaults none Command Modes DHCP Supported Modes Full–Switch Command History Enter a list of routers that may be the default gateway for clients on the subnet.
PAGE 446
dns-server Assign a DNS server to clients based on address pool. Syntax dns-server address [address2...address8] Parameters address Defaults none Command Modes DHCP Supported Modes Full–Switch Command History Enter a list of DNS servers that may service clients on the subnet. You may list up to eight servers, in order of preference. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 447
Defaults none Command Modes DHCP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. hardware-address For manual configurations, specify the client hardware address. Syntax Parameters hardware-address address address Defaults none Command Modes DHCP Supported Modes Full–Switch Command History Enter the hardware address of the client. Version Description 9.9(0.
PAGE 448
lease Specify a lease time for the addresses in a pool. Syntax lease {days [hours] [minutes] | infinite} Parameters days Enter the number of days of the lease. The range is from 0 to 31. hours Enter the number of hours of the lease. The range is from 0 to 23. minutes Enter the number of minutes of the lease. The range is from 0 to 59. infinite Specify that the lease never expires.
PAGE 449
netbios-node-type Specify the NetBIOS node type for a Microsoft DHCP client. Dell Networking Operating System (OS) recommends specifying clients as hybrid. Syntax Parameters netbios-node-type type type Defaults Hybrid Command Modes DHCP Supported Modes Full–Switch Command History Enter the NETBIOS node type: • Broadcast: Enter the keyword b-node. • Hybrid: Enter the keyword h-node. • Mixed: Enter the keyword m-node. • Peer-to-peer: Enter the keyword p-node. Version Description 9.
PAGE 450
show ip dhcp binding Display the DHCP binding table. Syntax show ip dhcp binding Defaults none Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp configuration Display the DHCP configuration. Syntax show ip dhcp configuration [global | pool name] Parameters pool name Display the configuration for a DHCP pool.
PAGE 451
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp server Display the DHCP server statistics. Syntax show ip dhcp server statistics Defaults none Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 452
Other Commands Supported by the DHCP Client The following commands are supported by the DHCP client. clear ip dhcp client statistics Displays DHCP client statistics, including the number of DHCP messages sent and received on an interface. Syntax clear ip dhcp client statistics interface type slot/port Parameters interface type slot/ port Command Modes EXEC Privilege Supported Modes All Modes Default None Command History Clear DHCP client statistics on the specified interface.
PAGE 453
Command Modes EXEC Privilege Supported Modes All Modes Default None Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. debug ip dhcp client packets Enable the display of log messages for all DHCP packets sent and received on DHCP client interfaces.
PAGE 454
Supported Modes All Modes Default None Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. When you enter the release dhcp command, although the IP address that was dynamically-acquired from a DHCP server is released from an interface, the ability to acquire a new DHCP server-assigned address remains in the running configuration for the interface.
PAGE 455
show ip dhcp client statistics Displays DHCP client statistics, including the number of DHCP messages sent and received on an interface. Syntax Parameters show ip dhcp client statistics interface type slot/port interface type slot/ port Command Modes EXEC Privilege Supported Modes All Modes Default None. Command History Display DHCP client statistics on the specified interface. • For the management interface on the stack-unit, enter the keyword managementethernet followed by slot/port information.
PAGE 456
Commands to Configure Secure DHCP DHCP, as defined by RFC 2131, provides no authentication or security mechanisms. Secure DHCP is a suite of features that protects networks that use dynamic address allocation from spoofing and attacks. arp inspection Enable dynamic arp inspection (DAI) on a VLAN. Syntax arp inspection Defaults Disabled Command Modes INTERFACE VLAN Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 457
Defaults none Command Modes EXEC Privilege Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp snooping — displays the contents of the DHCP binding table. clear ipv6 dhcp snooping binding Clear all the DHCPv6 snooping binding database entries.
PAGE 458
Introduced in the Dell Networking OS version 7.8.1.0, DHCP snooping was available for Layer 3 only and dependent on DHCP Relay Agent (ip helper-address). The Dell Networking OS version 8.2.1.0 extends DHCP Snooping to Layer 2, and you do not have to enable relay agent to snoop on Layer 2 interfaces. Related Commands ip dhcp snooping vlan — enables DHCP snooping on one or more VLANs. ipv6 dhcp snooping Enable DHCPv6 snooping globally for ipv6.
PAGE 459
To disable the storing of snooping binding entries in a file, use the no ipv6 dhcp snooping write-delay command. Parameters value Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Command History The range is from 5 to 21600. The value of the minutes range is from 5 min. to 15 days. Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL. ip dhcp snooping binding Create a static entry in the DHCP binding table.
PAGE 460
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Instructions You can map multiple IP addresses to the same MAC address. Related Commands show ip dhcp snooping — displays the contents of the DHCP binding table. ip dhcp snooping database renew Renew the binding table. Syntax ip dhcp snooping database renew Defaults none Command Modes Supported Modes Command History • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.
PAGE 461
To disable dhcp snooping trusted capability on this interface, use the no ipv6 dhcp snooping trust command. Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL. ip dhcp source-address-validation Enable the IP Source Guard.
PAGE 462
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When enabled, the system begins creating entries in the binding table for the specified VLANs. NOTE: Learning only happens if there is a trusted port in the VLAN. Related Commands ip dhcp snooping trust — configures an interface as trusted. ipv6 dhcp snooping vlan Enable ipv6 DHCP Snooping on VLAN or range of VLANs.
PAGE 463
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp snooping Display the contents of the DHCP binding table or display the interfaces configured with IP Source Guard. Syntax Parameters Defaults Command Modes Supported Modes Command History Related Commands show ip dhcp snooping [binding | source-address-validation] binding Display the interfaces configured with IP Source Guard. source-addressvalidation Display the interfaces configured with IP Source Guard.
PAGE 464
Snooping packets processed on L2 vlans : 0 DHCP Binding File Details Invalid File Invalid Binding Entry Binding Entry lease expired : 0 : 0 : 0 Dell# ip dhcp snooping verify mac-address Validate a DHCP packet’s source hardware address against the client hardware address field (CHADDR) in the payload. Syntax [no] ip dhcp snooping verify mac-address Defaults Disabled Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM.
PAGE 465
17 Equal Cost Multi-Path (ECMP) Equal cost multi-path (ECMP) is supported on the Dell Networking OS. ecmp-group Provides a mechanism to monitor traffic distribution on an ECMP link bundle. A system log is generated when the standard deviation of traffic distribution on a member link exceeds a defined threshold. Syntax ecmp-group {ecmp-group-id interface interface | link-bundle-monitor} To remove the selected interface, use the ecmp-group no interface command.
PAGE 466
xor1 | xor2 | xor4 | xor8 | xor16}[[hg {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16}]| [lag {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16 }][stack-unit|linecard number | port-set number] | [hg—seed value] | [seedvalue] To return to the default hash algorithm, use the no hash-algorithm command. To return to the default ECMP hash algorithm, use the no hash-algorithm ecmp algorithm-value command.
PAGE 467
xor2 | xor4 | xor8 | xor16}|lsb | xor1 | xor2 | xor4 | xor8 | xor16 hg {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16} lag {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16} crc16 |crc16cc |crc32MSB |crc32LSB |xor1 |xor2 |xor4 |xor8 | xor16 • lsb: Returns the LSB of the key as the hash • xor1: Use CRC16_BISYNC_AND_XOR1 — Upper 8 bits of CRC16-BISYNC and lower 8 bits of xor1 • xor2: Use CRC16_BISYNC_AND_XOR2 — Upper 8 bits of CRC16-BISYNC and lower
PAGE 468
linecard number (OPTIONAL) : Enter the keyword linecard then the linecard slot number. port-set number (OPTIONAL) Enter the keyword port-set then the port-set slot number. Defaults 0 for hash-algorithm value on TeraScale and ExaScale IPSA and IPDA mask value is FF for a line card. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. Added flow-based-hashing support for hashing on ECMP. 9.2(0.
PAGE 469
hash-algorithm ecmp Change the hash algorithm used to distribute traffic flows across an ECMP (equal-cost multipath routing) group. Syntax hash-algorithm ecmp {crc-upper} | {dest-ip} | {lsb} To return to the default hash algorithm, use the no hash-algorithm ecmp command. Parameters Defaults crc-upper Uses the upper 32 bits of the key for the hash computation. The default is crc-lower. dest-ip Uses the destination IP for ECMP hashing. The default is enabled.
PAGE 470
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Deterministic ECMP sorts ECMPs in order even though RTM provides them in a random order. However, the hash algorithm uses as a seed the lower 12 bits of the chassis MAC, which yields a different hash result for every chassis.
PAGE 471
link-bundle-distribution trigger-threshold Provides a mechanism to set the threshold to trigger when traffic distribution begins being monitored on an ECMP link bundle. Syntax Parameters link-bundle-distribution trigger-threshold [percent] percent Command Modes EXEC Privilege Supported Modes Full–Switch Command History Indicate the threshold value when traffic distribution starts being monitored on an ECMP link bundle. The range is from 1 to 90%. The default is 60%. Version Description 9.9(0.
PAGE 472
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show link-bundle distribution Display the link-bundle distribution for the interfaces in the bundle, type of bundle (LAG or ECMP), and the most recently calculated interface utilization (either bytes per second rate or maximum rate) for each interface. Syntax show link-bundle-distribution Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example 472 Version Description 9.9(0.
PAGE 473
18 FC FLEXIO FPORT The switch is a blade switch which is plugged into the Dell M1000 Blade server chassis.The blade module contains two slots for pluggable flexible module. With single FC Flex IO module, 4 ports are supported, whereas 8 ports are supported with both FC Flex IO modules. Each port can operate in 2G, 4G or 8G Fiber Channel speed. The topology-wise, FC Flex IOM is directly connected to a FC Storage.
PAGE 474
• fcoe-map • fabric • active-zoneset • stack-unit port-group port portmode • show fc ns • show fc switch • show fc zoneset • show fc zone • show fc alias • show fcoe-map • show system stack-unit port-group portmode feature fc Enable feature fc with FPort functionality. Syntax feature fc fport domain-id range Parameters Range Command Modes CONFIGURATION Supported Modes Full–Switch Command History Enter the range from 1 to 239. Version Description 9.9(0.
PAGE 475
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.0) Introduced on the S5000. Example without member Dell(conf)# fc zone z1 Dell(conf-fc-zone-z1)# Example with member Dell(conf)#fc zone test Dell(conf-fc-zone-test)#member ? WORD WWN(00:00:00:00:00:00:00:00), portID(000000), or Alias name(word) Dell(conf-fc-zone-test)#member Related Commands show fc zone — displays the configured zone.
PAGE 476
Related Commands show fc alias — displays the configured alias. fc zoneset Create a zoneset. Syntax fc zoneset zoneset_name [member] To delete a zoneset, use the no fc zoneset zoneset_name [member] command. Parameters zoneset_namemem ber Command Modes CONFIGURATION Supported Modes Full–Switch Command History Enter the zoneset name. Enter the WWPN, FC-ID, or Alias name. Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.
PAGE 477
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.0(1.3) Introduced on the S5000. An FCoE map is a template to map FCoE and FC parameters in a converged fabric. An FCoE map virtualizes upstream FC ports on an NPIV proxy gateway to appear to downstream server CNA ports as FCoE forwarder (FCF) ports on an FCoE network.
PAGE 478
map allows the switch to operate as an FCoE-FC bridge between an FC SAN and an FCoE network. It provides necessary parameters to FCoE-enabled servers and switches to log in to a SAN fabric. Use the fcoe-map command to create an FCoE map. On an FN IOM NPIV proxy gateway, an FCoE map is applied on fabric-facing FC ports and server-facing Ethernet ports. Use the fabric command to apply an FCoE map on an FC port. Use the fcoe-map command to apply an FCoE map on an Ethernet port.
PAGE 479
stack-unit port-group port portmode Convert the external ports to Fibre Channel or Ethernet mode. Syntax Parameters Defaults stack-unit unit number port-group 0-1 port 9-12 portmode {ethernet | fc} stack-unit Enter the keywords stack-unit then the stack member number to select the stack unit. The range is from 0 to 5. port-group Enter the keywords port-group then the port group number. The range is from 0 to 1. port Enter the keyword port then the port number. The range is from 9 to 12.
PAGE 480
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.0) Introduced on the S5000. Dell#show fc ns switch Total number of devices = 1 Switch Name 10:00:5c:f9:dd:ef:0a:00 Domain Id 1 Switch Port 53 Port Id 01:35:00 Port Name 10:00:8c:7c:ff:17:f8:01 Node Name 20:00:8c:7c:ff:17:f8:01 Class of Service 8 IP Address Symbolic Port Name Brocade-1860 | 3.0.3.
PAGE 481
Node Name Class of Service IP Address Symbolic Port Name Symbolic Node Name Port Type Registered with NameServer Registered for SCN Dell# Dell#show fc ns Total number of Intf# Domain 9 2 11 2 Dell# fabric brief devices = 2 FC-ID 02:09:00 02:0b:00 20:00:8c:7c:ff:17:f8:01 8 Brocade-1860 | 3.0.3.
PAGE 482
show fc zoneset Display the configured and active zoneset. Syntax show fc zoneset [ zoneset_name | active ] Parameters Command Modes Supported Modes Command History Example zoneset_name Enter the zoneset name to display the zoneset name active Enter the keyword active to display the active zonesets. merged Enter the keyword merged to display the merge active zones. • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.
PAGE 483
Related Commands fc zone — creates a zone. fc zoneset — creates a zoneset. active-zoneset — activates the zoneset. show fc zone Display the configured zone. Syntax Parameters Command Modes Supported Modes Command History Example show fc zone [zonename ] zonename • EXEC • EXEC Privilege Enter the zone name to display the details. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.0) Introduced on the S5000.
PAGE 484
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.0) Introduced on the S5000. Dell#show fc alias Zone Alias Name 0x030303 al1 Dell# Related Commands fc alias — creates a zone alias name. show fcoe-map Display the Fibre Channel and FCoE configuration parameters in FCoE maps.
PAGE 485
Vlan Id 1002 Vlan priority 3 FC-MAP 0efc00 FKA-ADV-Period 8 Fcf Priority 128 Config-State ACTIVE Oper-State DOWN ======================================================= Members Fc 0/9 Fc 0/10 ======================================================= ======================================================= Dell# Related Commands fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric.
PAGE 486
19 FIPS Cryptography To configure federal information processing standards (FIPS) cryptography, use the following commands on the switch. Topics: • fips mode enable • show fips status • show ip ssh • ssh fips mode enable Enable the FIPS cryptography mode on the platform. Syntax fips mode enable To disable the FIPS cryptography mode, use the no fips mode enable command. Default Disabled Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.
PAGE 487
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show fips status FIPS Mode : Disabled Dell# Dell#show fips status FIPS Mode : Enabled Dell# show ip ssh Display information about established SSH sessions Syntax show ip ssh Defaults none Command Modes EXEC EXEC Privilege Supported Modes Command History Example Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 488
ssh Open an SSH connection specifying the hostname, username, port number, and version of the SSH client. Syntax ssh {hostname | ipv4 address | ipv6 address} [-c encryption cipher | -l username | -m HMAC alogorithm | -p port-number | -v {1|2}] Parameters hostname (OPTIONAL) Enter the IP address or the hostname of the remote device. ipv4 address (OPTIONAL) Enter the IP address in dotted decimal format A.B.C.D.
PAGE 489
Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If FIPS mode is not enabled: Dell#ssh 10.11.8.12 ? -c Encryption cipher to use (for v2 client -l User name option -m HMAC algorithm to use (for v2 clients only) -p SSH server port option (default 22) -v SSH protocol version Dell#ssh 10.11.8.
PAGE 490
20 FIP Snooping In a converged Ethernet network, an Aggregator can operate as an intermediate Ethernet bridge to snoop on Fibre Channel over Ethernet Initialization Protocol (FIP) packets during the login process on Fibre Channel over Ethernet (FCoE) forwarders (FCFs). Acting as a transit FIP snooping bridge, the switch uses dynamically-created ACLs to permit only authorized FCoE traffic to be transmitted between an FCoE end-device and an FCF. This chapter describes the FIP snooping commands.
PAGE 491
Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. clear fip-snooping statistics Clear the statistics on the FIP packets snooped on all VLANs, a specified VLAN, or a specified port interface.
PAGE 492
Version Description 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. fip-snooping enable Enable FIP snooping on all VLANs or on a specified VLAN. Syntax fip-snooping enable To disable the FIP snooping feature on all or a specified VLAN, use the no fip-snooping enable command. Defaults FIP snooping is disabled on all VLANs.
PAGE 493
Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. fip-snooping port-mode fcf Configure the port for bridge-to-FCF links. Syntax fip-snooping port-mode fcf To disable the bridge-to-FCF link on a port, use the no fip-snooping port-mode fcf command.
PAGE 494
Supported Modes Command History Usage Information 494 FIP Snooping All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. The following table describes the show fip-snooping statistics command. Field Description Number of Vlan Requests Number of FIP-snooped VLAN request frames received on the interface.
PAGE 495
Example Field Description Number of FLOGO Accepts Number of FIP FLOGO accept frames received on the interface Number of FLOGO Rejects Number of FIP FLOGO reject frames received on the interface Number of CVLs Number of FIP clear virtual link frames received on the interface Number of FCF Discovery Number of FCF discovery timeouts that occurred on the interface Number of VN Port Session Number of VN port session timeouts that occurred on the interface Number of Session failures due to Hardware C
PAGE 496
Number of Session failures due to Hardware Config Example (port channel) :0 Dell# show fip-snooping statistics interface port-channel 22 Number of Vlan Requests :0 Number of Vlan Notifications :2 Number of Multicast Discovery Solicits :0 Number of Unicast Discovery Solicits :0 Number of FLOGI :0 Number of FDISC :0 Number of FLOGO :0 Number of Enode Keep Alive :0 Number of VN Port Keep Alive :0 Number of Multicast Discovery Advertisement :4451 Number of Unicast Discovery Advertisement :2 Number of FLOGI A
PAGE 497
virtual-linkinstantiation Enable for flogi, fdisc and flogo packets. virtual-linkmaintenance Enable for clear virtual link and keepalive packets. vlan-discovery Enable for FIP VLAN requests and notifications. port-channel Port-channel interface. tengigabitethernet TenGigabit Ethernet interface. tx Enable for packet transmit specific debugs. Command Modes EXEC Privilege Supported Modes All Modes Command History Version Description 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 498
• Supported Modes Command History Usage Information Example EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. The following table describes the show fip-snooping enode command. Field Description ENode MAC MAC address of the ENode ENode Interface Slot/ port number of the interface connected to the ENode.
PAGE 499
Example Field Description FCF MAC MAC address of the FCF FCF Interface Slot/ port number of the interface to which the FCF is connected. VLAN VLAN ID number used by the session FC-MAP FC-MAP value advertised by the FCF. FKA_ADV_PERIOD Period of time (in milliseconds) during which FIP keep-alive advertisements are transmitted.
PAGE 500
Example Field Description FCoE MAC MAC address of the FCoE session assigned by the FCF. FC-ID Fibre Channel ID assigned by the FCF. Port WWPN Worldwide port name of the CNA port. Port WWNN Worldwide node name of the CNA port.
PAGE 501
Field Description Number of Multicast Discovery Solicits Number of FIP-snooped multicast discovery solicit frames received on the interface. Number of Unicast Discovery Number of FIP-snooped unicast discovery solicit frames received on the interface. Number of FLOGI Number of FIP-snooped FLOGI request frames received on the interface.
PAGE 502
Example Dell# show fip-snooping statistics interface vlan 100 Number of Vlan Requests Number of Vlan Notifications Number of Multicast Discovery Solicits Number of Unicast Discovery Solicits Number of FLOGI Number of FDISC Number of FLOGO Number of Enode Keep Alive Number of VN Port Keep Alive Number of Multicast Discovery Advertisement Number of Unicast Discovery Advertisement Number of FLOGI Accepts Number of FLOGI Rejects Number of FDISC Accepts Number of FDISC Rejects Number of FLOGO Accepts Number of
PAGE 503
Number of VN Port Session Timeouts Number of Session failures due to Hardware Config :0 :0 show fip-snooping system Displays information on the status of FIP snooping on the switch (enabled or disabled), including the number of FCoE VLANs, FCFs, ENodes, and currently active sessions. Syntax Command Modes Supported Modes Command History Example show fip-snooping system • EXEC • EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 504
*1 1002 504 FIP Snooping 0X0EFC00 1 1 1
PAGE 505
21 Force10 Resilient Ring Protocol (FRRP) FRRP is a proprietary protocol for that offers fast convergence in a Layer 2 network without having to run the spanning tree protocol (STP). The resilient ring protocol is an efficient protocol that transmits a high-speed token across a ring to verify the link status. All the intelligence is contained in the master node with practically no intelligence required of the transit mode. Important Points to Remember • FRRP is media- and speed-independent.
PAGE 506
Command History Usage Information Example Version Description 9.9(0.0) Introduced on the FN MXL. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Executing this command without the optional ring-id command clears the statistics counters on all the available rings. The system requires a command line confirmation before the command executes.
PAGE 507
9.2(0.0) Usage Information Introduced on the MXL 10/40GbE Switch IO Module. Because the resilient ring protocol can potentially transmit 20 packets per interface, restrict debug information. description Enter an identifying description of the ring. Syntax description Word To remove the ring description, use the no description [Word] command. Parameters Word Enter a description of the ring. Maximum: 255 characters.
PAGE 508
To return to the default, use the no interface {primary interface secondary interface control-vlan vlan-id} command. Parameters primary interface secondary interface control-vlan vlan-id Enter the keyword primary to configure the primary interface then one of the following interfaces and slot/port information: • Fast Ethernet interface: enter the keyword FastEthernet then the slot/ port information. • Port Channel interface: enter the keyword port-channel then a number. The range is from 1 to 128.
PAGE 509
Defaults none Command Modes CONFIGURATION (conf-frrp) Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. mode Set the Master or Transit mode of the ring. Syntax mode {master | transit} To reset the mode, use the no mode {master | transit} command. Parameters master Enter the keyword master to set the Ring node to Master mode.
PAGE 510
9.2(0.0) Usage Information Introduced on the MXL 10/40GbE Switch IO Module. This command places you into the resilient ring protocol. After executing this command, the command line prompt changes to conf-frrp. show frrp Display the resilient ring protocol configuration. Syntax show frrp [ring-id [summary]] | [summary] Parameters ring-id Enter the ring identification number.
PAGE 511
Example (2 Summary) Dell#show frrp 2 summary Ring-ID State Mode Ctrl_Vlan Member_Vlans ----------------------------------------------2 Up Master 2 11-20, 25, 27-30 Dell# Related Commands protocol frrp — enters the resilient ring protocol and designate a ring identification. timer Set the hello interval or dead interval for the Ring control packets.
PAGE 512
22 GARP VLAN Registration (GVRP) The Dell Networking Operating System (OS) supports the basic GVRP commands. The generic attribute registration protocol (GARP) mechanism allows the configuration of a GARP participant to propagate through a network quickly. A GARP participant registers or de-registers its attributes with other participants by making or withdrawing declarations of attributes. At the same time, based on received declarations or withdrawals, GARP handles attributes of other participants.
PAGE 513
Topics: • clear gvrp statistics • debug gvrp • disable • garp timers • gvrp enable • gvrp registration • protocol gvrp • show config • show garp timers • show gvrp • clear gvrp statistics • show vlan clear gvrp statistics Clear GVRP statistics on an interface.
PAGE 514
event Enter the keyword event to enable debugging on the JOIN/LEAVE events. pdu Enter the keyword pdu then one of the following Interface keywords and slot/port or number information: Defaults Disabled. Command Modes EXEC Supported Modes Full–Switch Command History • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 515
Parameters join Enter the keyword join then the number of milliseconds to configure the join time. The range is from 100 to 147483647 milliseconds. The default is 200 milliseconds. NOTE: Designate the milliseconds in multiples of 100. leave Enter the keyword leave then the number of milliseconds to configure the leave time. The range is from 100 to 2147483647 milliseconds. The default is 600 milliseconds. NOTE: Designate the milliseconds in multiples of 100.
PAGE 516
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. disable — globally disables GVRP. gvrp registration Configure the GVRP register type. Syntax gvrp registration {fixed | normal | forbidden} To return to the default, use the gvrp register normal command. Parameters fixed Enter the keyword fixed then the VLAN range in a comma-separated VLAN ID set.
PAGE 517
Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. disable — globally disables GVRP. show config Display the global GVRP configuration. Syntax show config Command Modes CONFIGURATION-GVRP Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 518
Join Timer Leave Timer LeaveAll Timer Dell# Related Commands 200 600 10000 garp timers — sets the intervals (in milliseconds) for sending GARP messages. show gvrp Display the GVRP configuration. Syntax show gvrp [brief | interface] Parameters Defaults brief (OPTIONAL) Enter the keyword brief to display a brief summary of the GVRP configuration.
PAGE 519
clear gvrp statistics Clear GVRP statistics on an interface. Syntax Parameters clear gvrp statistics {interface interface | summary} interface interface summary Defaults Command Modes Supported Modes Command History Usage Information Enter the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
PAGE 520
Leave All Transmitted: 41 Invalid Messages/Attributes skipped: 0 Failed Registrations: 0 Dell# Related Commands show gvrp — displays the GVRP configuration. show vlan Display the global VLAN configuration. Syntax show vlan Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 521
23 Internet Group Management Protocol (IGMP) The Dell Networking OS supports IGMP snooping version 2 and 3 on all Dell Networking systems.
PAGE 522
IGMP Snooping Commands Dell Networking OS supports IGMP Snooping version 2 and 3 on all Dell Networking systems. Important Points to Remember for IGMP Snooping • Dell Networking OS supports version 1, version 2, and version 3 hosts. • Dell Networking OS IGMP snooping implementation is based on IP multicast address (not based on Layer 2 multicast mac address) and the IGMP snooping entries are in Layer 3 flow table not in Layer 2 forwarding information base (FIB).
PAGE 523
Parameters group-address (OPTIONAL) Enter the IP multicast group address in dotted decimal format. interface (OPTIONAL) Enter the interface type and slot/port information: For a VLAN interface enter the keyword vlan followed by a number from 1 to 4094. Command Modes EXEC Privilege Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 524
Command Modes CONFIGURATION (conf-if-interface-slot/port) Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. ip igmp querier-timeout Change the interval that must pass before a multicast router decides that there is no longer another multicast router that should be the querier.
PAGE 525
Command Modes INTERFACE Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. ip igmp query-max-resp-time Set the maximum query response time advertised in general queries. Syntax ip igmp query-max-resp-time seconds To return to the default values, use the no ip igmp query-max-resp-time command.
PAGE 526
Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. To enable IGMP snooping, enter this command. When you enable this command from CONFIGURATION mode, IGMP snooping enables on all VLAN interfaces (except the default VLAN). NOTE: Execute the no shutdown command on the VLAN interface for IGMP Snooping to function.
PAGE 527
Parameters Enabled Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. ip igmp snooping last-member-query-interval The last member query interval is the maximum response time inserted into Group-Specific queries sent in response to Group-Leave messages.
PAGE 528
Parameters interface interface Enter the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. Defaults Not configured. Command Modes INTERFACE VLAN — (conf-if-vl-n) Supported Modes Programmable-Mux (PMUX) Command History Usage Information Version Description 9.4(0.
PAGE 529
ip igmp version Manually set the version of the router to IGMPv2 or IGMPv3. Syntax Parameters ip igmp version {2 | 3} 2 Enter the number 2 to set the IGMP version number to IGMPv2. 3 Enter the number 3 to set the IGMP version number to IGMPv3. Defaults 2 (that is, IGMPv2) Command Modes INTERFACE Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.
PAGE 530
Example Version Description 8.3.17.0 Supported on the M I/O Aggregator. Dell#show ip igmp groups Total Number of Groups: 5 IGMP Connected Group Membership Group Address Interface Mode Uptime Expires Last Reporter 225.0.0.0 Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.51 Member Ports: Po 2 225.0.0.2 Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.51 Member Ports: Po 2 225.0.0.3 Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.51 Member Ports: Po 2 225.0.0.4 Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.
PAGE 531
• Supported Modes Command History Example EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 532
Vlan 2 Po 128 Dell# Related Commands 532 show ip igmp groups — Use this IGMP command to view groups.
PAGE 533
24 Interfaces This chapter defines the interface commands on the Aggregator switch. Basic Interface Commands The following commands are for Physical, Loopback, and Null interfaces. clear counters Clear the counters used in the show interfaces commands for VLANs, and physical interfaces, or selected ones. Syntax clear counters interface Defaults Without a specific interface specified, the command clears all interface counters.
PAGE 534
Example Dell#clear counters Clear counters on all interfaces [confirm] clear dampening Clear the dampening counters on all the interfaces or just the specified interface. Syntax clear dampening [interface] Parameters interface (OPTIONAL) Enter any of the following keywords and slot/port or number to clear counters from a specified interface: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
PAGE 535
• Defaults medium Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information long = For 10-meter and 15-meter cable lengths. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command only works on ports that the system recognizes as CX4 ports.
PAGE 536
Parameters half-life Enter the number of seconds after which the penalty is decreased. The penalty decreases half after the half-life period expires. The range is from 1 to 30 seconds. The default is 5 seconds. reuse-threshold Enter a number as the reuse threshold, the penalty value below which the interface state is changed to “up”. The range is from 1 to 20000. The default is 750.
PAGE 537
Defaults No description is defined. Command Modes INTERFACE Supported Modes All Modes Command History Usage Information Related commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. • Spaces between characters are not preserved after entering this command unless you enclose the entire description in quotation marks (“desc_text”).
PAGE 538
Usage Information This command has to be configured before the interface moves to Err-disabled state. If not, the recovery action is not performed. Related Commands errdisable recovery interval— Configure recovery timer interval for an interface. errdisable recovery interval Configure recovery time interval to move an interface from the Err-disabled state.
PAGE 539
Defaults tx off Enter the keywords tx off so that flow control frames are not sent from this port to the connected device when a higher rate of traffic is received. pause-threshold Enter the buffer threshold limit for generating PAUSE frames. monitor Enter the keyword monitor then the session-ID to enable mirror flow control frames on the interface. The range is from 0 to 65535.
PAGE 540
Example (partial) Dell(conf-if-tengig-0/1)#show config ! interface TenGigabitEthernet 0/1 no ip address switchport no negotiation auto flowcontrol monitor session 5 rx off tx on no shutdown ... Example (Values) This Example shows how the Dell Networking OS negotiates the flow control values between two Dell Networking chassis connected back-to-back using 1G copper ports.
PAGE 541
Parameters interface Enter one of the following keywords and slot/port or number information: • Defaults Not configured. Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 542
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell(conf)#interface loopback 1655 Dell(conf-if-lo-1655)# Related Commands interface — configures a physical interface. interface null — configures a Null interface. interface port-channel — configures a port channel. interface vlan — configures a VLAN.
PAGE 543
interface null Configure a Null interface on the switch. Syntax Parameters interface null number number Enter zero (0) as the Null interface number. Defaults Not configured; number = 0 Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information You cannot delete the Null interface.
PAGE 544
Slot/Port information must contain a space before and after the dash. For example, interface range tengigabitethernet 0/1 - 5 is valid; interface range tengigabitethernet 0/1-5 is not valid. Defaults none Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information. • For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
PAGE 545
Use the show running-config command to display the VLAN and port-channel interfaces. VLAN or portchannel interfaces that are not displayed in the show running-config command cannot be used with the bulk configuration feature of the interface range command. You cannot create virtual interfaces (VLAN, Port-channel) using the interface range command. NOTE: If a range has VLAN, physical, and port-channel interfaces, only commands related to physical interfaces can be bulk configured.
PAGE 546
Command History Example (Single Range) Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This example shows how to define an interface range macro named test. Execute the show running-config command to display the macro definition.
PAGE 547
interface vlan Configure a VLAN. Configure the default VLAN to enable Static or DCHP IP configuration. You can configure up to 4094 VLANs. Syntax interface vlan vlan-id To delete a VLAN, use the no interface vlan vlan-id command. Parameters vlan-id Enter 1 for the default VLAN. Enter a number as the VLAN identifier. The range is from 1 to 4096. Defaults Not configured, except for the default VLAN, which is configured as VLAN 1.
PAGE 548
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information If you configure interface type as CR4 with auto-negotiation enabled, also configure CR4 with autonegotiation. Many DAC cable link issues are resolved by setting the interface type as CR4. Related Commands interface — configures a physical interface. interface port-channel — configures a port channel group.
PAGE 549
load-balance By default, Dell Networking OS uses an IP 4-tuple (IP SA, IP DA, Source Port, and Destination Port) to distribute IP traffic over members of a Port Channel as well as equal-cost paths. To designate another method to balance traffic over Port Channel members, use the loadbalance command.
PAGE 550
Usage Information By default, Dell Networking OS distributes incoming traffic based on a hash algorithm using the following criteria: • IP source address • IP destination address • TCP/UDP source port • TCP/UDP destination port load-balance hg Choose the traffic flow parameters the hash calculation uses while distributing the traffic across internal higig links.
PAGE 551
tunnel [ipv4-overipv4 | ipv4-overgre-ipv4 | mac-inmac] To use tunnel key fields in hash computation, enter the keyword tunnel then one of the parameters: • ipv4-over-ipv4 — Use ipv4-over-ipv4 field in hash calculation. • ipv4-over-gre-ipv4 — Use ipv4-over-gre-ipv4 field in hash calculation. • mac-in-mac — Use mac-in-mac field in hash calculation. Defaults IP selection 5-tuples (source-ip dest-ip vlan protocol L4-source-port L4-dest-port).
PAGE 552
Example (Single Interface) Key Description monitor time Displays the amount of time since the monitor interface command was entered. time Displays the amount of time the chassis is up (since last reboot). m Change the view from a single interface to all interfaces on the line card or visa-versa. c Refresh the view. b Change the counters displayed from Packets on the interface to Bytes.
PAGE 553
To return to the default MTU value, use the no mtu command. Parameters value Enter a maximum frame size in bytes. The range is from 594 to 9252. The default is 1554. Defaults 1554 Command Modes INTERFACE Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 554
Layer 2 Overhead Link MTU and IP MTU Delta Untagged Packet with VLAN-Stack Header 22 bytes Tagged Packet with VLAN-Stack Header 26 bytes negotiation auto Enable auto-negotiation on an interface. Syntax negotiation auto To disable auto-negotiation, enter no negotiation auto command. Defaults Enabled. Command Modes INTERFACE Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 555
Port 0 • auto-negotiation enabled* speed 1000 or auto • auto-negotiation enabled speed 100 • auto-negotiation disabled speed 100 • auto-negotiation disabled speed 100 • auto-negotiation enabled* speed 1000 or auto Port 1 • auto-negotiation enabled* speed 1000 or auto • auto-negotiation enabled speed 100 • auto-negotiation disabled speed 100 • auto-negotiation enabled speed 100 • auto-negotiation disabled speed 100 Link Status Between Port 1 and Port 2 • Up at 1000 Mb/s • Up at 100 Mb/
PAGE 556
• untagged frames and classify them as VLAN 10 frames • VLAN 20 tagged frames The following describes the do show interfaces command shown in the following example. This example shows output with “Hybrid” as the newly added value for 802.1QTagged. The options for this field are: • True — port is tagged • False — port is untagged • Hybrid — port accepts both tagged and untagged frames The following describes the interface vlan command shown in the following example.
PAGE 557
Related Commands show interfaces switchport — displays the configuration of switchport (Layer 2) interfaces on the switch. vlan-stack trunk— specifies an interface as a trunk port to the Stackable VLAN network. rate-interval Configure the traffic sampling interval on the selected interface. Syntax Parameters rate-interval seconds seconds Enter the number of seconds for which to collect traffic data. The range is from 5 to 299 seconds. NOTE: For 0 to 5 seconds, polling occurs every 5 seconds.
PAGE 558
Defaults 299 seconds Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. Usage Information Version Description 9.11.0.0 Introduced on all Dell Networking OS platforms. The output of the show interfaces command displays the configured rate interval, along with the collected traffic data.
PAGE 559
show config Display the interface configuration. Syntax show config Command Modes INTERFACE Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-if)#show conf ! interface TenGigabitEthernet 1/7 no ip address switchport no shutdown Dell(conf-if)# show config (from INTERFACE RANGE mode) Display the bulk configured interfaces (group).
PAGE 560
Command Modes Supported Modes Command History Usage Information • EXEC • EXEC Privilege • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN interface, enter the keyword vlan followed by a number from 1 to 4094. • For a Port Channel interface, enter the keyword port-channel followed by a number. The range is from 1 to 128. All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 561
Line Description • Number of packets with IP headers and VLAN tagged headers. NOTE: The sum of the number of packets may not be as expected since a VLAN tagged IP packet counts as both a VLAN packet and an IP packet. • Packet size and the number of those packets inbound to the interface • Number of symbol errors, runts, giants, and throttles packets: – symbol errors = number packets containing bad data. That is, the port MAC detected a physical coding error in the packet.
PAGE 562
Virtual-IP is not set Virtual-IP IPv6 address is not set MTU 1554 bytes, IP MTU 1500 bytes LineSpeed 100 Mbit, Mode full duplex ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 5d4h57m Queueing strategy: fifo Input 3448753 packets, 950008323 bytes, 3442163 multicast Received 0 errors, 0 discarded Output 4627 packets, 814226 bytes, 0 multicast Output 0 errors, 0 invalid protocol Related Commands show interfaces configured — Displays any interface with a non-default configurati
PAGE 563
Parameters interface (Optional) Enter one of the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. NOTE: This command also enables you to view information corresponding to a range of ports.
PAGE 564
show interfaces description Display the descriptions configured on the interface. Syntax show interfaces [interface] description Parameters interface Enter one of the following keywords and slot/port or number information: • For the management interface on the stack unit enter the keyword ManagementEthernet followed by the slot/port information. The slot range is 0-0 and the port range is 0.
PAGE 565
TenGigabitEthernet 0/6 NO admin up TenGigabitEthernet 0/7 NO up down TenGigabitEthernet 0/8 YES up up down show interfaces stack-unit Display information on all interfaces on a specific Aggregator stack member. Syntax Parameters Command Modes Supported Modes Command History Example show interfaces stack-unit unit-number unit-number • EXEC • EXEC Privilege Enter the stack member number (0 to 5). All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 566
Related Commands show diag — Displays data plane and management plane input/output statistics. show interfaces status Displays a summary of interface information or specify a stack unit and interface to display status information for that specific interface only.
PAGE 567
show interfaces switchport Display only virtual and physical interfaces in Layer 2 mode. This command displays the Layer 2 mode interfaces’ IEEE 802.1Q tag status and VLAN membership. Syntax Parameters show interfaces switchport [interface | stack-unit unit-id ] interface (OPTIONAL) Enter one of the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
PAGE 568
Codes: tagged U x G i - Untagged, T - Tagged Dot1x untagged, X - Dot1x tagged GVRP tagged, M - Trunk, H - VSN tagged Internal untagged, I - Internal tagged, v - VLT untagged, V - VLT Name: TenGigabitEthernet 2/9 802.1QTagged: True Vlan membership: Q Vlans T 1001 Name: TenGigabitEthernet 2/11 802.1QTagged: True Vlan membership: Q Vlans T 1001 Dell# Related Commands show ip interface — displays Layer 3 information about the interfaces.
PAGE 569
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show interfaces transceiver command shown in the following example. Line Description Rx Power measurement type Output depends on the vendor, typically either “Average” or “OMA” (Receiver optical modulation amplitude). Temp High Alarm threshold Factory-defined setting, typically in Centigrade. Value differs between SFPs and SFP+.
PAGE 570
Interfaces Line Description TX Power Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+. Power Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+. Temperature Current temperature of the SFPs. If this temperature crosses Temp High alarm/warning thresholds, the temperature high alarm/warning flag is set to true. Voltage Current voltage of the SFPs.
PAGE 571
Example Line Description Tx Power Low Alarm Flag This can be either true or false, depending on the Current Tx power value displayed above. Rx Power Low Alarm Flag This can be either true or false, depending on the Current Rx power value displayed above. Temperature High Warning Flag This can be either true or false, depending on the Current Temperature value displayed above. Voltage High Warning Flag This can be either true or false, depending on the Current Voltage value displayed above.
PAGE 572
SFP 1 Rx Power measurement type = Average =================================== SFP 1 Temp High Alarm threshold = 95.000C SFP 1 Voltage High Alarm threshold = 3.900V SFP 1 Bias High Alarm threshold = 17.000mA SFP 1 TX Power High Alarm threshold = 0.631mW SFP 1 RX Power High Alarm threshold = 1.259mW SFP 1 Temp Low Alarm threshold = -25.000C SFP 1 Voltage Low Alarm threshold = 2.700V SFP 1 Bias Low Alarm threshold = 1.000mA SFP 1 TX Power Low Alarm threshold = 0.067mW SFP 1 RX Power Low Alarm threshold = 0.
PAGE 573
show range Display all interfaces configured using the interface range command. Syntax show range Command Modes INTERFACE RANGE (config-if-range) Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell(conf-if-range-te-0/6)#show range interface tengigabitethernet 0/6 Dell(conf-if-range-te-0/6)# Related Commands interface — configures a physical interface on the switch.
PAGE 574
port channel, you must enter no shutdown on the port channel interface and at least one interface within that port channel. The shutdown and description commands are the only commands that you can configure on an interface that is a member of a port channel. Related Commands vlan tagged —Test the condition of copper cables on 100/1000/10G Base-T modules. interface vlan — Creates a VLAN. show ip interface — Displays the interface routing status.
PAGE 575
If you use an active optical cable (AOC), you can convert the QSFP+ port to a 10 Gigabit SFP+ port or 1 Gigabit SFP port. You can use the speed command to enable the required speed. Related Commands • negotiation auto — enables or disables auto-negotiation on an interface. stack-unit portmode Split a single 40G port into 4-10G ports on the switch. Syntax Parameters stack-unit stack-unit-number port number portmode quad stack-unit Enter the stack member unit identifier of the stack member to reset.
PAGE 576
To retain the existing wavelength, use the no wavelength command. Defaults none Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. Usage Information Version Description 9.10(0.0) Introduced on the S6000, S6000–ON, S5000, S4810, S4820T, S3048–ON, S4048–ON, M I/O Aggregator, FN I/O Module, MXL, C9010, S3100 series, and Z9100-ON.
PAGE 577
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. Defaults Not configured. Command Modes INTERFACE PORTCHANNEL Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. Use the interface port-channel command to access this command.
PAGE 578
To remove an existing LAG supergroup, use the no group group_number command. Parameters group_number Enter an integer from 1 to 32 that uniquely identifies this LAG fate-sharing group. port-channel number Enter the keywords port-channel then an existing LAG number. Enter this keyword/ variable combination twice, identifying the two paired LAGs. Defaults none Command Modes PORT-CHANNEL FAILOVER-GROUP (conf-po-failover-grp) Supported Modes Full–Switch Command History Version Description 9.9(0.
PAGE 579
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Port Channel interfaces are logical interfaces and can be either in Layer 2 mode (by using the switchport command) or Layer 3 mode (by configuring an IP address). You can add a Port Channel in Layer 2 mode to a VLAN. A Port Channel can contain both 100/1000 interfaces and GE interfaces.
PAGE 580
Usage Information If you use this command to configure the minimum number of links in a LAG that must be in “oper up” status, the LAG must have at least that number of “oper up” links before it can be declared as up. For example, if the required minimum is four, and only three are up, the LAG is considered down. port-channel failover-group To configure a LAG failover group, access PORT-CHANNEL FAILOVER-GROUP mode.
PAGE 581
no ip address shutdown Dell(conf-if-po-1)# show interfaces port-channel Display information on configured Port Channel groups. Syntax Parameters show interfaces port-channel [channel-number] [brief| description] channel-number For a Port Channel interface, enter the keyword port-channel followed by a number. The range is from 1 to 128. brief (OPTIONAL) Enter the keyword brief to display only the port channel number, the state of the port channel, and the number of interfaces in the port channel.
PAGE 582
Field Description Members in this... Displays the interfaces belonging to this port channel. ARP type:... Displays the ARP type and the ARP timeout value for the interface. Last clearing... Displays the time when the show interfaces counters were cleared. Queueing strategy. States the packet queuing strategy. FIFO means first in first out. packets input... Displays the number of packets and bytes into the interface. Input 0 IP packets...
PAGE 583
Field Status Example Description • L3 — for Layer 3 • L2 — for Layer 2 Displays the status of the port channel. • down — if the port channel is disabled (shutdown) • up — if the port channel is enabled (no shutdown) Uptime Displays the age of the port channel in hours:minutes:seconds. Ports Lists the interfaces assigned to this port channel. (untitled) Displays the status of the physical interfaces (up or down).
PAGE 584
tdr-cable-test Test the condition of copper cables on 100/1000/10GBase-T modules. Syntax tdr-cable-test interface Parameters interface Defaults none Command Modes EXEC Supported Modes All Modes Command History Enter the keyword TenGigabitEthernet followed by the slot/port information for the 100/1000/10GBase-T Ethernet interface. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 585
Status Definition OK Status: Terminated TDR test is complete, no fault is detected on the cable, and the test is terminated. Length: 92 (+/- 1) meters, Status: Shorted A short is detected on the cable. The location, in this Example is 92 meters. The short is accurate to plus or minus one meter. Length: 93 (+/- 1) meters, Status: Open An opening is detected on the cable. The location, in this Example is 93 meters. The open is accurate to plus or minus one meter.
PAGE 586
• Supported Modes Command History Example EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#debug ip udp-helper UDP helper debugging is on 01:20:22: Pkt rcvd on Te 4/1 with IP DA (0xffffffff) will be sent on Te 4/2 Te 4/3 Vlan 3 01:44:54: Pkt rcvd on Te 5/1 is handed over for DHCP processing. Related Commands ip udp-broadcast-address — configures a UDP IP address for broadcast.
PAGE 587
ip udp-helper udp-port Enable the UDP broadcast feature on an interface either for all UDP ports or a specified list of UDP ports. Syntax ip udp-helper udp-port [udp-port-list] To disable the UDP broadcast on a port, use the no ip udp-helper udp-port [udp-port-list] command. Parameters udp-port-list (OPTIONAL) Enter up to 16 comma-separated UDP port numbers. NOTE: If you do not use this option, all UDP ports are considered by default.
PAGE 588
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show ip udp-helper -------------------------------------------------Port UDP port list -------------------------------------------------Te 1/1 656, 658 Te 1/2 All Related Commands debug ip udp-helper — enables debug and displays the debug information on a console. ip udp-broadcast-address — configures a UDP IP address for broadcast.
PAGE 589
Occasionally, while sending broadcast traffic over multiple VLANs, state of a VLAN interface may continually switch between Master and Backup. • auto vlan • default vlan-id • name • show config (from INTERFACE VLAN mode) • show vlan • vlan tagged • vlan untagged auto vlan Change the port to auto or admin vlan mode (enable or disable all auto VLANs). Syntax auto vlan To remove membership from 4K VLAN, use the no auto vlan command.
PAGE 590
Command Modes EXEC Privilege Supported Modes All Modes Command History Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. default vlan-id Set the default VLAN ID. Syntax default vlan-id To reset the default VLAN ID, use the no default vlan-id command. Defaults none Command Modes CONFIGURATION Supported Modes All Modes Command History Related commands Version Description 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 591
To disable monitoring and return to the CLI prompt, press the q key. Parameters Command Modes Supported Modes Command History Usage Information interface • EXEC • EXEC Privilege (OPTIONAL) Enter the following keywords and slot/port or number information: • For the management port, enter the keyword managementethernet followed by the slot (0) and the port (0). • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
PAGE 592
Input packets: Output packets: 64B packets: Over 64B packets: Over 127B packets: Over 255B packets: Over 511B packets: Over 1023B packets: Error statistics: Input underruns: Input giants: Input throttles: Input CRC: Input IP checksum: Input overrun: Output underruns: Output throttles: m l T q Example (All Interfaces) - 1 1 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 pps pps pps pps pps pps pps pps 0 0 0 0 0 0 0 0 c - Clear screen a - Page down t - Decrease refresh interval Interface Link In Packets
PAGE 593
To remove the name from the VLAN, use the no name command. Parameters vlan-name Defaults Not configured. Command Modes INTERFACE VLAN Supported Modes All Modes Command History Usage Information Enter up to 32 characters as the name of the VLAN. Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. This CLI applies only to the Default VLAN.
PAGE 594
Command History Example Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Dell(conf-if-vl-1)#show config ! interface Vlan 1 description a no ip address mtu 2500 shutdown Dell(conf-if-vl-1)# show config (from PROTOCOL LLDP mode) Displays the LLDP configuration. Syntax show config Command Modes PROTOCOL LLDP Supported Modes All Modes Command History Example Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.
PAGE 595
name vlan-name Command Modes Supported Modes Command History Usage Information • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword name followed by the name configured for the VLAN. Only information on the VLAN named is displayed. All Modes Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 596
Codes: * - Default VLAN, G - GVRP VLANs Q: U - Untagged, T - Tagged x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack NUM Status Description Q Ports 222 Inactive U TenGig 1/22 Dell(conf-if-vl-222)# Dell# Related Commands interface vlan — Configures a VLAN. speed (for 1000/10000 interfaces) Set the speed for 1000/10000 interfaces. Both sides of a link must be set to the same speed (1000/10000) or to auto or the link may not come up.
PAGE 597
stack-unit port-group port mode ethernet Converts the interfaces 9 and 10 from Fibre Channel mode to Ethernet. Syntax stack-unit unit number port-group 0 portmode ethernet To convert the interfaces 9 and 10 from Ethernet to Fibre Channel mode, use the no stack-unit unit number port-group 0 portmode ethernet. Parameters stack-unit Enter the keyword stack-unit followed by a stack member number to select the stack unit. The range is 0 to 5. port-group Enter the keyword port-group followed by 0.
PAGE 598
When two or more ports configured for VLANs form a LAG, the resulting LAG is a tagged member of all the configured VLANs and an untagged member of the VLAN to which the port with the lowest port ID belongs. For example, if port 0/1-32 is an untagged member of VLAN 2 and port 0/41 is an untagged member of VLAN 3, the resulting LAG consisting of the two ports is an untagged member of VLAN 2 and a tagged member of VLAN3.
PAGE 599
Tagged interfaces can belong to multiple VLANs, while untagged interfaces can only belong to one VLAN at a time. When two or more ports configured for VLANs form a LAG, the resulting LAG is a tagged member of all the configured VLANs and an untagged member of the VLAN to which the port with the lowest port ID belongs.
PAGE 600
25 IPv4 Routing The aggregator supports both IPv4 and IPv6 routing and these are used only for the management purpose. This chapter describes the IPv4 related commands.
PAGE 601
• ip route • ip source-route • ip tcp initial-time • show ip tcp initial-time • ip unreachables • management route • show arp • show arp retries • show hosts • show ip cam stack-unit • show ip fib stack-unit • show ip interface • show ip management-route • show ip multicast-cam stack-unit • show ip protocols • show ip route • show ip route list • show ip route summary • show ip traffic • show tcp statistics arp To associate an IP address with a multicast MAC address i
PAGE 602
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Added the support for association of an IP address with multicast MAC address on the MXL platform. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. For multicast mode of NLB, to associate an IP address with a multicast MAC address in the switch, use address resolution protocol (ARP) by entering the arp ip-address multicast-mac-address command in Global configuration mode.
PAGE 603
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Retries are 20 seconds apart. Related Commands show arp retries — displays the configured number of ARP retries. arp timeout Set the time interval for an ARP entry to remain in the ARP cache.
PAGE 604
no-refresh (OPTIONAL) Enter the keywords no-refresh to delete the ARP entry from CAM. Or use this option with interface or ip ip-address to specify which dynamic ARP entries you want to delete. NOTE: Transit traffic may not be forwarded during the period when deleted ARP entries are resolved again and re-installed in CAM. Use this option with extreme caution. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 605
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To clear Layer 3 CAM inconsistencies, use this command. CAUTION: Executing this command causes traffic disruption. Related Commands show ip fib stack-unit — shows FIB entries. clear ip route Clear one or all routes in the routing table. Syntax clear ip route {* | ip-address mask} Parameters * Enter an asterisk (*) to clear all learned IP routes.
PAGE 606
Version Description 8.3.17.0 Supported on the M I/O Aggregator. debug arp View information on ARP transactions. Syntax debug arp [interface] [count value] To stop debugging ARP transactions, use the no debug arp command.
PAGE 607
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. FTOS#debug ip dhcp 00:12:21 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xbf05140f, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0 00:12:21 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.
PAGE 608
• count value Command Modes EXEC Privilege Supported Modes All Modes Command History For VLAN, enter the keyword vlan then by a number from 1 to 4094. (OPTIONAL) Enter the keywords count then the count value. The ranges from 1 to 65534. The default is Infinity. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 609
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the debug ip packet command in the following example. Field Description s= Lists the source address of the packet and the name of the interface (in parentheses) that received the packet.
PAGE 610
following example). ARP packets (arp) and Ether-type (ether-type) are also not supported in the accessgroup option. The entire rule is skipped to compose the filter.
PAGE 611
ip directed-broadcast Enables the interface to receive directed broadcast packets. Syntax ip directed-broadcast To disable the interface from receiving directed broadcast packets, use the no ip directed-broadcast command. Defaults Disabled (that is, the interface does not receive directed broadcast packets) Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 612
To view current bindings, use the show hosts command. To view a DNS-related configuration, use the show running-config resolve command. Related Commands ip domain-name — specifies a DNS server. ip domain-lookup To address resolution (that is, DNS), enable dynamic host-name. Syntax ip domain-lookup To disable DNS lookup, use the no ip domain-lookup command. Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.
PAGE 613
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. You can only configure one domain name with the ip domain-name command. To configure more than one domain name, configure the ip domain-list command up to six times.
PAGE 614
ip helper-address hop-count disable Disable the hop-count increment for the DHCP relay agent. Syntax ip helper-address hop-count disable To re-enable the hop-count increment, use the no ip helper-address hop-count disable command. Defaults Enabled; the hops field in the DHCP message header is incremented by default. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 615
ip icmp source-interface Enable the ICMP error and unreachable messages to be sent with the source interface IP address, such as the loopback address, instead of the hops of the preceding devices along the network path to be used for easy debugging and diagnosis of network disconnections and reachability problems with IPv4 packets.
PAGE 616
Example Dell(conf)#ip icmp source-interface tengigabitethernet 0/1 Dell(conf)# ipv6 icmp source-interface Enable the ICMP error and unreachable messages to be sent with the source interface IP address, such as the loopback address, instead of the hops of the preceding devices along the network path to be used for easy debugging and diagnosis of network disconnections and reachability problems with IPv6 packets.
PAGE 617
along the path because the DNS server maps the loopback IP address to the hostname and does not translate the IP address of every interface of the switch to the hostname. Example Dell(conf)#ipv6 icmp source-interface tengigabitethernet 0/1 Dell(conf)# ip max-frag-count Set the maximum number of fragments allowed in one packet for packet re-assembly. Syntax ip max-frag-count count To place no limit on the number of fragments allowed, use the no ip max-frag-count command.
PAGE 618
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The system does not support sending DNS queries over a VLAN. DNS queries are sent out on all other interfaces, including the Management port. ip proxy-arp Enable proxy ARP on an interface. Syntax ip proxy-arp To disable proxy ARP, use the no ip proxy-arp command. Defaults Enabled. Command Modes INTERFACE Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.
PAGE 619
Command History Usage Information Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. Using the following example of a static route: ip route 33.33.33.0 /24 tengigabitethernet 0/0 172.31.5.43 • The software installs a next hop that is not on the directly connected subnet but which recursively resolves to a next hop on the interface’s configured subnet. In the example, if gig 0/0 has an ip address on subnet 2.2.2.0 and if 172.31.5.
PAGE 620
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL platform. You can configure the amount of time for which the device must wait before it attempts to establish a TCP connection. Using this capability, you can limit the wait times for TCP connection requests.
PAGE 621
management route Configure a static route that points to the Management interface or a forwarding router. Syntax Parameters management route {ipv4-address | ipv6–address}/mask{forwarding-router-address | managementethernet} {ipv4-address | ipv6–address}/ mask Enter an IPv4 address (A.B.C.D) or the IPv6 address followed by the prefix-length for the IP address of the management interface. forwarding-routeraddress Enter an IPv4 address of a forwarding router.
PAGE 622
Command History Usage Information Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. The following describes the show arp command shown in the following example. Row Heading Description Protocol Displays the protocol type. Address Displays the IP address of the ARP entry. Age(min) Displays the age (in minutes) of the ARP entry. Hardware Address Displays the MAC address associated with the ARP entry.
PAGE 623
show arp retries Display the configured number of ARP retries. Syntax Command Modes Supported Modes Command History Related Commands show arp retries • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Module arp retries — sets the number of ARP retries in case the system does not receive an ARP reply in response to an ARP request. show hosts View the host table and DNS configuration.
PAGE 624
Field Description • perm — the entry was manually configured and will not time out • temp — the entry was learned and will time out after 72 hours of inactivity. Also included in the flag is an indication of the validity of the route: Example • ok — the entry is valid. • ex — the entry expired. • ?? — the entry is suspect. TTL Displays the amount of time until the entry ages out of the cache. For dynamically learned entries only. Type Displays IP as the type of entry.
PAGE 625
summary Command Modes Supported Modes Command History Usage Information Example • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword summary to view a table listing route prefixes and the total number routes which can be entered in to CAM. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip cam command shown in the following example.
PAGE 626
Field Description Initial Size Displays the CAM size the system allocates for the corresponding mask. The system adjusts the CAM size if the number of routes for the mask exceeds the initial allocation. Example (ECMPGroup) Dell#show ip cam stack-unit 0 po 0 ecmp-group detail Example (MemberInfo) Dell#show ip cam stack-unit 0 po 0 ecmp-group member-info detail Destination EC CG ----------------1.1.1.2 0 0 2.1.1.2 0 0 1.1.1.1 0 0 2.1.1.1 0 0 1.1.1.0 0 0 2.1.1.0 0 0 100.1.1. 0 1 100.1.1. 0 1 0.0.0.
PAGE 627
Example Field Description Destination Lists the destination IP address. Gateway Displays either the word “direct” and an interface for a directly connected route or the remote IP address used to forward the traffic. First-Hop Displays the first hop IP address. Mac-Addr Displays the MAC address. Port Displays the egress-port information. VId Displays the VLAN ID. If no VLAN is assigned, zero (0) is listed. EC Displays the number of ECMP paths.
PAGE 628
Command History Usage Information Version Description 9.11(0.0) Updated the command output to include the unicast reverse path forwarding (uRPF) status. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. The following describes the show ip interface command shown in the following example. Lines Description TenGigabitEthernet 0/0... Displays the interface’s type, slot/port and physical and line protocol Internet address...
PAGE 629
Example (Brief) Dell#show ip interface brief Interface IP-Address TenGigabitEthernet 0/1 unassigned TenGigabitEthernet 0/2 unassigned TenGigabitEthernet 0/3 unassigned TenGigabitEthernet 0/4 unassigned TenGigabitEthernet 0/5 unassigned TenGigabitEthernet 0/6 unassigned TenGigabitEthernet 0/7 unassigned TenGigabitEthernet 0/8 unassigned TenGigabitEthernet 0/9 unassigned OK? NO YES YES NO NO NO NO NO NO Method None None None None None None None None None Status up up up up up up up up up Protocol down up
PAGE 630
Parameters 0-5 Enter the stack-unit ID, from 0 to 5. pipe-number Enter the number of the Port-Pipe number. The range is from 0 to 0. ip-address mask [longer-prefix] (OPTIONAL) Enter the IP address and mask of a route to CAM entries for that route only. Enter the keyword longer-prefixes to view routes with a common prefix. Command Modes Supported Modes Command History Usage Information detail Enter the keyword detail to display the group index ID used by the ecmp routes int he CAM.
PAGE 631
Field Description • Example Te = 10 Gigabit Ethernet interface Dell#show ip multicast-cam stack-unit 0 port-set 0 10.10.10.10/32 longer-prefixes Destination EC CG V C VId Mac-Addr Port ----------------- -- -- - - ----- ----------------------------10.10.10.10 0 0 1 1 0 00:00:00:00:00:00 3f01 CP Dell# show ip protocols View information on all routing protocols enabled and active on the switch.
PAGE 632
Parameters Command Modes Supported Modes Command History Usage Information 632 IPv4 Routing ip-address (OPTIONAL) Specify a name of a device or the IP address of the device to view more detailed information about the route. mask (OPTIONAL) Specify the network mask of the route. Use this parameter with the IP address parameter. longer-prefixes (OPTIONAL) Enter the keywords longer-prefixes to view all routes with a common prefix.
PAGE 633
Field Description • IA = IS-IS inter-area • * = candidate default • > = non-active route • + = summary routes Destination Identifies the route’s destination IP address. Gateway Identifies whether the route is directly connected and on which interface the route is configured. Dist/Metric Identifies if the route has a specified distance or metric. Last Change Identifies when the route was last changed or configured.
PAGE 634
E2- OSPF external type 2, i - IS-IS, L1 - IS-IS level-1, L2- IS-IS level-2, IA - IS-IS inter area, * - candidate default, >- non-active route, + - summary route Gateway of last resort is not set R R R R C Related Commands Destination ----------2.1.0.0/24 2.1.1.0/24 2.1.2.0/24 2.1.3.0/24 2.1.4.0/24 Gateway ------via 2.1.4.1, Te via 2.1.4.1, Te via 2.1.4.1, Te via 2.1.4.
PAGE 635
Total 1388 active route(s) using 222440 bytes Total 2 non-active route(s) using 128 bytes Dell> Related Commands show ip route — displays information about the routes found in the switch. show ip traffic View IP, ICMP, UDP, TCP and ARP traffic statistics. Syntax show ip traffic Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 636
Keyword Definition ...no port broadcasts The incoming broadcast/multicast packet did not have any listener. ...socket full The applications buffer is full and the incoming packet are dropped. The F10 Monitoring MIB provides access to the following statistics. Example • IP Statistics: Bcast: Received: Object = f10BcastPktRecv, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.1 • IP Statistics: Bcast: Sent: Object = f10BcastPktSent, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.
PAGE 637
Usage Information Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. The following describes the show tcp statistics cp command shown in the following example. Field Description Rcvd: Displays the number and types of TCP packets received by the switch. 0 checksum error...
PAGE 638
Example Field Description 20 Total rxmt... Displays the number of times the switch tried to re-send data and the number of connections dropped during the TCP retransmit timeout period. 0 Keepalive.... Lists the number of keepalive packets in timeout, the number keepalive probes and the number of TCP connections dropped during keepalive.
PAGE 639
26 Internet Protocol Security (IPSec) Internet protocol security (IPSec) is an end-to-end security scheme for securing IP communications by authenticating and encrypting all packets in a session. Use IPSec between hosts, gateways, or hosts and gateways. IPSec uses a series of protocol functions to achieve information security: • Authentication Headers (AH) — Connectionless integrity and origin authentication for IP packets.
PAGE 640
To delete a transform set, use the no crypto ipsec transform-set name {ah-authentication {md5|sha1|null} | esp-authentication {md5|sha1|null} | esp-encryption {3des| cbc|des|null}} command. Parameters name Enter the name for the transform set. ah-authentication Enter the keywords ah-authentication then the transform type of operation to apply to traffic. The transform type represents the encryption or authentication applied to traffic.
PAGE 641
crypto ipsec policy Create a crypto policy used by ipsec. Syntax crypto ipsec policy name seq-num ipsec-manual To delete a crypto policy entry, use the no crypto ipsec policy name seq-num ipsec-manual command. Parameters name Enter the name for the crypto policy set. seq-num Enter the sequence number assigned to the crypto policy entry. Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 642
match Match a sequence number to the transmission control protocol (TCP)/user datagram protocol (UDP) packets. Syntax match seq-num {tcp | udp} {ipv6 | ip} port-num dest-ip dest-port-num To remove the match filter for the crypto map, use the no match seq-num command. Parameters seq-num Enter the match command sequence number. The range is from 0 to 255. tcp Enter the keyword tcp to configure a TCP access list filter. udp Enter the keyword udp to configure a UDP access list filter.
PAGE 643
Parameters name Enter the name of the host to delete. Enter * to delete all host table entries. inbound Specify the inbound session key for IPSec. outbound Specify the outbound session key for IPSec. ah Use the AH protocol when you select the AH transform set in the crypto policy. esp Use the ESP protocol when you select the ESP transform set in the crypto policy. spi Enter the security parameter index number. hex-key-string Enter the session key in hex format (a string of 8, 16, or 20 bytes).
PAGE 644
ESP Encry Transform Dell(conf)# : show crypto ipsec policy Display the crypto policy configuration. Syntax show crypto ipsec policy name Parameters name Command Modes EXEC Supported Modes Full–Switch Command History Example Enter the name for the crypto policy set. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 645
transform-set Specify the transform set the crypto policy uses. Syntax transform-set transform-set-name To delete a transform set from the crypto policy, use the no transform-set transform-set-name command. Parameters transform-setname Enter the name for the crypto policy transform set. Defaults none Command Modes CONFIG-CRYPTO-POLICY Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 646
27 IPv6 Access Control Lists (IPv6 ACLs) IPv6 ACLs and IPv6 Route Map commands are supported on Dell Networking switch. NOTE: For IPv4 ACL commands, refer to the Access Control Lists (ACL) chapter. Important Points to Remember • Certain platforms require manual CAM usage space allotment. For more information, refer to the cam-acl (Configuration) command. • Egress IPv6 ACL and IPv6 ACL on the Loopback interface is not supported. • Reference to an empty ACL permits any traffic.
PAGE 647
ipv4qos 1-10 l2qos 1-10 Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. For the new settings to take effect, save the new CAM settings to the startup-config (write-mem or copy run start), then reload the system. The total amount of space allowed is 16 FP blocks. System flow requires three blocks and these blocks cannot be reallocated.
PAGE 648
The total amount of space allowed is 16 FP Blocks. System flow requires three blocks and these blocks cannot be reallocated. When configuring space for IPv6 ACLs, the total number of Blocks must equal 13. Ranges for the CAM profiles are from 1 to 10, except for the ipv6acl profile which is from 0 to 10. The ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).
PAGE 649
OSPFv3, in addition to the CoPP support for VRRP, BGP, and ICMP that existed in Dell Networking OS releases 9.3(0.0) and earlier Related Commands show config — views the current configuration. ipv6 control-plane egress-filter Enable egress Layer 3 ACL lookup for IPv6 CPU traffic. Syntax ipv6 control-plane egress-filter Defaults Not enabled. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 650
log OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in-msgs (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated.
PAGE 651
message-type (OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type. The range is from 0 to 255 for ICMP type and from 0 to 255 for ICMP code. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 652
show cam-acl Show space allocated for IPv6 ACLs. Syntax show cam-acl Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 653
Dell# Related Commands cam-acl — configures CAM profiles to support IPv6 ACLs. show cam-acl-egress Show information on FP groups allocated for egress ACLs. Syntax Command Modes Supported Modes Command History Example show cam-acl-egress • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 654
28 IPv6 Basics This chapter describes IPv6 basic commands.
PAGE 655
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. clear ipv6 route Clear (refresh) all or a specific route from the IPv6 routing table. Syntax Parameters clear ipv6 route {* | ipv6-address prefix-length} * Enter the * to clear (refresh) all routes from the IPv6 routing table. ipv6-address prefixlength Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format.
PAGE 656
To disable the address autoconfig operation on the management interface, use the no ipv6 address autoconfig command. Default Disabled Command Modes INTERFACE (management interface only) Supported Modes Full–Switch Command History Usage Infomation Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. • SAA can configure up to two addresses.
PAGE 657
Usage Information • If two addresses are configured, delete an existing address before configuring a new address. • If the last manually-configured global IPv6 address is removed using the “no” form of the command, the linklocal IPv6 address is removed automatically. • IPv6 addresses on a single management interface cannot be members of the same subnet. • IPv6 secondary addresses on management interfaces across platform must be members of the same subnet.
PAGE 658
ipv6 control-plane icmp error-rate-limit Configure the maximum number of ICMP error packets per second that can be sent per second. Syntax ipv6 control-plane icmp error-rate-limit {1-200} To restore the default value, use the no ipv6 control-plane icmp error-rate-limit command. Parameters pps Default 100 pps Command Modes CONFIGURATION Supported Modes Full–Switch Command History Enter the maximum number of error packets generated per second.
PAGE 659
To remove an IP host, use the no ipv6 host name {ipv6–address}. Parameters name Enter a text string to associate with one IP address. ipv6-address Enter the IPv6 address (X:X:X:X::X) to be mapped to the name. Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 name-server Enter up to six IPv6 addresses of name servers.
PAGE 660
To restore the default value, use the no ipv6 nd dad attempts command. Parameters number of attempts Enter the number of attempts to be made to detect a duplicate address. The range is from 0 to 15. Setting the value to 0 disables DAD on the interface. Default 3 attempts Command Modes INTERFACE (management interface only) Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 661
A value of 0 indicates to the host that the RDNSS address should not be used. You must specify a lifetime using the lifetime or infinite parameter. infinite Defaults Not Configured Command Modes INTERFACE CONFIG Supported Modes Full–Switch Command History Usage Information Enter the keyword infinite to specify that the RDNSS lifetime does not expire. Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.0) Introduced on the MXL.
PAGE 662
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. By default, all prefixes configured as addresses on the interface are advertised. This command allows control over the individual parameters per prefix; you can use the default keyword to use the default parameters for all prefixes.
PAGE 663
• For a loopback interface, enter the keyword loopback then a number from zero (0) to 16383. • For the null interface, enter the keyword null then zero (0). • For a port channel interface, enter the keyword port-channel then the port channel number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a tunnel interface, enter the keyword tunnel then the tunnel interface number. The range is from 1 to 16383.
PAGE 664
gigabitethernet Gigabit Ethernet interface loopback Loopback interface null Null interface port-channel Port-Channel interface tenGigabitethernet TenGigabit Ethernet interface fortyGigE FortyGigabit Ethernet interface tunnel Tunnel interface vlan Vlan interface Dell(conf)#ipv6 route 44::0 /64 33::1 ? <1-255> Distance metric for this route permanent Permanent route tag Set tag for this route Dell(conf)#ipv6 route 44::0 /64 33::1 Dell(conf)#ipv6 route 44::0 /64 tengigabitethernet 0/1 ? X:X:X:X::X Forwarding r
PAGE 665
show ipv6 cam stack-unit Displays the IPv6 CAM entries for the specified stack-unit. Syntax Parameters show ipv6 cam stack-unit unit-number port-set {0-0} [summary | index | ipv6 address] unit-number Enter the stack unit’s ID number. The range is from 0 to 5. port-set Enter the keyword Port Set. summary (OPTIONAL) Enter the keyword summary to display a table listing network prefixes and the total number prefixes which can be entered into the IPv6 CAM.
PAGE 666
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 flowlabel-zero — Configure IPv6 address auto-configuration for the management interface. show ipv6 fib stack-unit View all FIB entries. Syntax show ipv6 fib stack-unit unit-number [summary | ipv6-address] Parameters slot-number Enter the number of the stack unit. The range is from 0 to 5.
PAGE 667
Related Commands ipv6 nd dad attempts — Configure system to set the flow label field in the packets to zero. show ipv6 interface Display the status of interfaces configured for IPv6.
PAGE 668
Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The Management port is enabled by default (no shutdown). If necessary, use the ipv6 address command to assign an IPv6 address to the Management port.
PAGE 669
fe80::201:e8ff:fea7:497e 300::1/64 Dell# Example (tunnel) Dell#show ipv6 interface tun 1 Tunnel 1 is up, line protocol is up IPV6 is enabled Link Local address: fe80::201:e8ff:fea7:497e Global Unicast address(es): 400::1, subnet is 400::/64 (MANUAL) Remaining lifetime: infinite Global Anycast address(es): Joined Group address(es): ff02::1 ff02::2 ff02::1:ff00:1 ff02::1:ffa7:497e ND MTU is 0 ICMP redirects are not sent DAD is enabled, number of DAD attempts: 3 ND reachable time is 20410 milliseconds ND base
PAGE 670
Example Field Description Malformed Packets The number of MLDv1 and MLDv2 packets that do not match the requirement for a valid MLD packet. MLD Host Traffic Counters Elapsed time since counters cleared: 0028:33:52 Received Sent Valid MLD Packets 97962 18036 Reports 79962 18034 Leaves ---0 MLDv2 Queries 18000 ---MLDv1 Queries 0 ---Errors: Malformed Packets: 4510 show ipv6 route Displays the IPv6 routes.
PAGE 671
Usage Information Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ipv6 route command shown in the following examples.
PAGE 672
L Dell# via 100::1, Te 0/8, 00:00:50 fe80::/10 [0/0] Direct, Nu 0, 20:00:18 Example (Summary) Dell#show ipv6 route summary Route Source Active Routes connected 3 static 1 Total 4 Total 4 active route(s) using 928 bytes Dell# Non-active Routes 0 0 0 trust ipv6-diffserv Allows the dynamic classification of IPv6 DSCP. Syntax trust ipv6-diffserv To remove the definition, use the no trust ipv6-diffserv command.
PAGE 673
29 IPv6 Border Gateway Protocol (IPv6 BGP) IPv6 Border Gateway Protocol (IPv6 BGP) is supported on Dell Networking platforms. This chapter includes the following sections: • IPv6 BGP Commands • IPv6 MBGP Commands Topics: • IPv6 BGP Commands • IPv6 MBGP Commands IPv6 BGP Commands BGP is an external gateway protocol that transmits interdomain routing information within and between autonomous systems (AS).
PAGE 674
Usage Information After this command is executed, all subsequent commands apply to this address family. You can exit from this AFI/ SAFI to the IPv6 Unicast (the default) family by entering the exit command and returning to the Router BGP context. aggregate-address Summarize a range of prefixes to minimize the number of entries in the routing table.
PAGE 675
In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed. The opposite is true: routes meeting the permit clause are suppressed. If the route is injected using the network command, that route still appears in the routing table if you configure the summary-only parameter in the aggregate-address command. The summary-only parameter suppresses all advertisements.
PAGE 676
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you enable this command, use the capture bgp-pdu max-buffer-size * command to recompute the best path. bgp bestpath med confed Enable MULTI_EXIT_DISC (MED) attribute comparison on paths learned from BGP confederations. Syntax bgp bestpath med confed To disable MED comparison on BGP confederation paths, use the no bgp bestpath med confed command. Defaults Disabled.
PAGE 677
Usage Information The MED is a 4-byte unsigned integer value and the default behavior is to assume a missing MED as 4294967295. This command causes a missing MED to be treated as 0. During path selection, paths with a lower MED are preferred over those with a higher MED. bgp client-to-client reflection Allows you to enable route reflection between clients in a cluster. Syntax bgp client-to-client reflection To disable client-to-client reflection, use the no bgp client-to-client reflection command.
PAGE 678
Usage Information When a BGP cluster contains only one route reflector, the cluster ID is the route reflector’s router ID. For redundancy, a BGP cluster may contain two or more route reflectors and you assign a cluster ID with the bgp cluster-id command. Without a cluster ID, the route reflector cannot recognize route updates from the other route reflectors within the cluster.
PAGE 679
Parameters as-number Enter the AS number. The range is 1 to 65535. ...as-number (OPTIONAL) Enter up to 16 confederation numbers. The range is from 1 to 65535. Defaults Not configured. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The Autonomous Systems configured in this command are visible to the EBGP neighbors.
PAGE 680
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information If you enter bgp dampening, the default values for half-life, reuse, suppress, and max-suppresstime are applied. The parameters are position-dependent; therefore, if you configure one parameter, you must configure the parameters in the order they appear in the command. Related Commands show ip bgp ipv6 unicast dampened-paths — views the BGP paths.
PAGE 681
Usage Information This is enabled by default; that is, for all updates received from EBGP peers, BGP ensures that the first AS of the first AS segment is always the AS of the peer. If not, the update is dropped and a counter is incremented. To view the failed enforce-first-as check counter, use the show ip bgp ipv6 unicast neighbors command. If you disable enforce-first-as, view it using the show ip protocols command.
PAGE 682
When creating Confederations, all the routers in the Confederation must be 4- or 2-byte identified routers. You cannot mix them. Where the 2-Byte format is from 1 to 65535, the 4-Byte format is from 1 to 4294967295. Both formats are accepted, and the advertisements reflect the entered format. For more information about using the 2- or 4-Byte format, refer to the Dell Networking OS Configuration Guide.
PAGE 683
To disable logging, use the no bgp log-neighbor-changes command. Defaults Enabled. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The bgp log-neighbor-changes command appears in the show config command output. Related Commands show config — views the current configuration.
PAGE 684
To disable next-hop resolution, use the no bgp recursive-bgp-next-hop command. Defaults Enabled. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command is a knob to disable BGP next-hop resolution using BGP learned routes.
PAGE 685
bgp router-id Assign a user-given ID to a BGP router. Syntax bgp router-id ip-address To delete a user-assigned IP address, use the no bgp router-id command. Parameters ip-address Enter an IP address in dotted decimal format to reset only that BGP neighbor. Defaults The router ID is the highest IP address of the Loopback interface or, if no Loopback interfaces are configured, the highest IP address of a physical interface on the router.
PAGE 686
capture bgp-pdu neighbor (ipv6) Enable capture of an IPv6 BGP neighbor packet. Syntax capture bgp-pdu neighbor ipv6-address direction {both | rx | tx} To disable capture of the IPv6 BGP neighbor packet, use the no capture bgp-pdu neighbor ipv6address command. Parameters Defaults ipv6-address Enter the IPv6 address of the target BGP neighbor. direction {both | rx | tx} Enter the keyword direction and a direction — either rx for inbound, tx for outbound, or both. Not configured.
PAGE 687
Related Commands Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. capture bgp-pdu neighbor (ipv6) — enables route reflection between the route reflector and the clients. show capture bgp-pdu neighbor — configures a route reflector and clients. clear ip bgp * (asterisk) Reset all BGP sessions in the specified category. The soft parameter (BGP Soft Reconfiguration) clears the policies without resetting the TCP connection.
PAGE 688
Parameters as-number Enter an autonomous system (AS) number to reset neighbors belonging to that AS. If used without a qualifier, the keyword resets all neighbors belonging to that AS. The range is from 1 to 65535. flap-statistics (OPTIONAL) Enter the keywords flap-statistics to clear all flap statistics belonging to that AS or a specified address family within that AS. ipv4 (OPTIONAL) Enter the keyword ipv4 to select options for that address family.
PAGE 689
multicast (OPTIONAL) Enter the keyword multicast to select the multicast option within the selected address family. Multicast is supported on IPv4 only. soft (OPTIONAL) Enter the keyword soft to configure and activate policies without resetting the BGP TCP session; that is, BGP Soft Reconfiguration. NOTE: If you enter clear ip bgp ip6-address soft, both inbound and outbound policies are reset. in (OPTIONAL) Enter the keyword in to activate only inbound policies.
PAGE 690
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. After you enter this command, the software deletes the history routes and returns the suppressed routes to the active state. clear ip bgp ipv6 flap-statistics Clear BGP flap statistics, which includes number of flaps and the time of the last flap.
PAGE 691
clear ip bgp ipv6 unicast soft Clear and reapply policies for IPv6 unicast routes without resetting the TCP connection; that is, perform BGP soft reconfiguration. Syntax Parameters clear ip bgp {* | as-number | ipv4-neighbor-addr | ipv6-neighbor-addr | peergroup name} ipv6 unicast soft [in | out] * Clear and reapply policies for all BGP sessions. as-number Clear and reapply policies for all neighbors belonging to the AS. The range is from 0 to 65535 (2 Byte), from 1 to 4294967295 (4 Byte), or from 0.
PAGE 692
peer-group peergroup-name Enter the keywords peer-group then the name of the peer group. in (OPTIONAL) Enter the keyword in to view only information on inbound BGP routes. out (OPTIONAL) Enter the keyword out to view only information on outbound BGP routes. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 693
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Entering a no debug ip bgp command removes all configured debug commands for BGP. debug ip bgp ipv6 dampening View information on dampened (non-active) IPv6 routes. Syntax debug ip bgp ipv6 unicast dampening [in | out] To disable debugging, use the no debug ip bgp ipv6 unicast dampening command.
PAGE 694
Defaults Disabled. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command turns on BGP soft-reconfiguration inbound debugging for IPv6 unicast routes. If no neighbor is specified, debug is turned on for all neighbors. Related Commands show ip bgp ipv6 unicast dampened-paths — views BGP dampened routes.
PAGE 695
debug ip bgp notifications Allows you to view information about BGP notifications received from neighbors. Syntax debug ip bgp [ipv6-address | peer-group peer-group-name] notifications [in | out] To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] notifications [in | out] command. Parameters ipv6-address (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
PAGE 696
ipv6 unicast [ipv6address] (OPTIONAL) Enter the keywords ipv6 unicast, and, optionally, an ipv6 address. in (OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors. out (OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 697
description Enter a description of the BGP routing protocol. Syntax description {description} To remove the description, use the no description {description} command. Parameters description Defaults none Command Modes ROUTER BGP Supported Modes Full–Switch Command History Related Commands Enter a description to identify the BGP protocol (80 characters maximum). Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 698
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information CAUTION: Dell Networking recommends that you do not change the administrative distance of internal routes. Changing the administrative distances may cause routing table inconsistencies. The higher the administrative distance assigned to a route means that your confidence in that route is low. Routes assigned an administrative distance of 255 are not installed in the routing table.
PAGE 699
peer-group-name Identify a peer group by name. activate Enter the keyword activate to enable the identified neighbor or peer group in the new AFI/SAFI. Defaults Disabled. Command Modes ROUTER BGPV6-ADDRESS FAMILY Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 700
neighbor allowas-in Set the number of times an AS number can occur in the AS path. Syntax neighbor {ip-address | peer-group-name} allowas-in number To return to the default value, use the no neighbor {ip-address | peer-group-name} allowas-in command. Parameters ip-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 701
Command Modes ROUTER BGPV6-ADDRESS FAMILY Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you apply a route map to a BGP peer or neighbor with the neighbor default-originate command configured, the software does not apply the set filters in the route map to that BGP peer or neighbor.
PAGE 702
NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group. prefix-list-name Enter the name of an established prefix list. If the prefix list is not configured, the default is permit (to allow all routes). in Enter the keyword in to distribute only inbound traffic. out Enter the keyword out to distribute only outbound traffic. Defaults Not configured.
PAGE 703
Usage Information To prevent loops, the neighbor ebgp-multihop command does not install default routes of the multihop peer. Networks not directly connected are not considered valid for best path selection. neighbor fall-over Enable or disable fast fall-over for BGP neighbors. Syntax neighbor {ipv6-address | peer-group-name} fall-over To disable, use the no neighbor {ipv6-address | peer-group-name} fall-over command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format.
PAGE 704
Defaults Not configured. Command Modes ROUTER BGPV6-ADDRESS FAMILY Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor maximum-prefix Control the number of network prefixes received.
PAGE 705
Related Commands show ip bgp ipv6 unicast summary — displays the current BGP configuration. neighbor X:X:X::X password Enable TCP MD5 Authentication for an IPv6 BGP peer session. Syntax neighbor x:x:x::x password {7 |
PAGE 706
Usage Information If you configure the set ipv6 next-hop command in ROUTE-MAP mode, its configuration takes precedence over the neighbor next-hop-self command. neighbor peer-group (assigning peers) Allows you to assign one peer to a existing peer group. Syntax neighbor ipv6-address peer-group peer-group-name To delete a peer from a peer group, use the no neighbor ipv6-address peer-group peer-groupname command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format.
PAGE 707
show ip bgp ipv6 unicast peer-group — views BGP peers. show ip bgp ipv6 unicast neighbors — views BGP neighbors configurations. neighbor peer-group (creating group) Allows you to create a peer group and assign it a name. Syntax neighbor peer-group-name peer-group To delete a peer group, use the no neighbor peer-group-name peer-group command. Parameters peer-group-name Defaults Not configured.
PAGE 708
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information After you configure a peer group as passive, you must assign it a subnet using the neighbor subnet command. Related Commands neighbor subnet — assigns a subnet to a dynamically configured BGP neighbor. neighbor remote-as Create and specify the remote peer to the BGP neighbor.
PAGE 709
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group to remove the private AS numbers. Defaults Disabled (that is, the private AS number are not removed). Command Modes ROUTER BGPV6-ADDRESS FAMILY Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 710
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted. If you identify a peer group by name, the peers in that peer group inherit the characteristics in the Route map used in this command.
PAGE 711
To disable sending a COMMUNITY attribute, use the no neighbor {ipv6-address | peer-groupname} send-community command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group. All routers in the peer group receive routes from a route reflector. Defaults Not configured and COMMUNITY attributes are not sent to neighbors.
PAGE 712
Related Commands show ip bgp ipv6 unicast summary — displays the current BGP configuration. show ip bgp ipv6 unicast neighbors — displays IPv6 routing information exchanged by BGP neighbors. neighbor soft-reconfiguration inbound Enable a BGP soft-reconfiguration and start storing updates for inbound IPv6 unicast routes.
PAGE 713
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor timers Set keepalive and hold time timers for a BGP neighbor or a peer group. Syntax neighbor {ipv6-address | peer-group-name} timers keepalive holdtime To return to the default values, use the no neighbor {ipv6-address | peer-group-name} timers command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format.
PAGE 714
neighbor update-source Enable the software to use Loopback interfaces for TCP connections for BGP sessions. Syntax neighbor {ipv6-address | peer-group-name} update-source loopback interface To use the closest interface, use the no neighbor {ipv6-address | peer-group-name} updatesource loopback interface command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 715
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. In the system best path selection process, the path with the highest weight value is preferred. NOTE: To apply the weight to the connection and recompute the best path, reset the neighbor connection (the capture bgp-pdu max-buffer-size * command).
PAGE 716
network backdoor Specify this IGP route as the preferred route. Syntax network ipv6-address prefix-length backdoor To remove a network, use the no network ipv6-address prefix-length backdoor command. Parameters ipv6-address prefixlength Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros. Defaults Not configured.
PAGE 717
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you do not configure the default-metric command, in addition to the redistribute command, or there is no route map to set the metric, the metric for redistributed static and connected is “0”. To redistribute the default route (0::0/0), configure the neighbor default-originate command.
PAGE 718
redistribute ospf Redistribute OSPFv3 routes into BGP. Syntax redistribute ospf process-id [[match external {1 | 2}] [match internal]] [route-map map-name] To stop redistribution of OSPF routes, use the no redistribute ospf process-id command. Parameters process-id Enter the number of the OSPFv3 process. The range is from 1 to 65535. match external {1 | 2} (OPTIONAL) Enter the keywords match external to redistribute OSPF external routes. You can specify 1 or 2 to redistribute those routes only.
PAGE 719
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show capture bgp-pdu neighbor Display BGP packet capture information for an IPv6 address. Syntax Parameters Defaults show capture bgp-pdu neighbor ipv6-address ipv6-address • EXEC • EXEC Privilege Command Modes CONFIGURATION Supported Modes Full–Switch Command History Related Command Enter the IPv6 address (X:X:X:X::X) of a BGP neighbor.
PAGE 720
neighbor RR-CLIENT-PASSIV peer-group passive neighbor RR-CLIENT-PASSIV remote-as 18508 neighbor RR-CLIENT-PASSIV subnet 9000::9:0/120 neighbor RR-CLIENT-PASSIV no shutdown neighbor 1109::33 remote-as 18508 neighbor 1109::33 update-source Loopback 101 neighbor 1109::33 no shutdown neighbor 2222::220 remote-as 18508 neighbor 2222::220 route-reflector-client neighbor 2222::220 update-source Loopback 100 neighbor 2222::220 no shutdown neighbor 4000::33 remote-as 18508 neighbor 4000::33 no shutdown neighbor 4000
PAGE 721
Parameters Command Modes Supported Modes Command History cluster-id • EXEC • EXEC Privilege (OPTIONAL) Enter the cluster id in dotted decimal format. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast community View information on all routes with community attributes or view specific BGP community groups.
PAGE 722
show ip bgp ipv6 unicast community-list View routes that are affected by a specific community list. Syntax show ip bgp ipv6 unicast community-list community-list-name [exact-match] Paramters Command Modes Supported Modes Command History community-listname Enter the name of a configured IP community list. exact-match (OPTIONAL) Enter the keywords exact-match to display only for an exact match of the communities. • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.
PAGE 723
• Supported Modes Command History EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast extcommunity-list View information on all routes with Extended Community attributes.
PAGE 724
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast flap-statistics View flap statistics on BGP routes. Syntax show ip bgp ipv6 unicast flap-statistics [ipv6-address prefix-length] [filterlist as-path-name] [regexp regular-expression] Parameters ipv6-address prefixlength Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
PAGE 725
show ip bgp ipv6 unicast inconsistent-as View routes with inconsistent originating autonomous system (AS) numbers; that is, prefixes that are announced from the same neighbor AS but with a different AS-Path. Syntax Command Modes Supported Modes Command History show ip bgp ipv6 unicast inconsistent-as • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 726
NOTE: You must configure the neighbor soft-reconfiguration inbound command prior to viewing all the information received from the neighbors. denied-routes [network [networkmask] Command Modes Supported Modes Command History Usage Information 726 • EXEC • EXEC Privilege (OPTIONAL) Enter the keywords denied-routes then either the network address (in dotted decimal format) or the network mask (in slash prefix format) to view all information on routes denied using neighbor inbound filters.
PAGE 727
Example Lines Beginning With Description BGP table version Displays which version of the primary BGP routing table the router and the neighbor are using. Prefixes accepted Displays the number of network prefixes accepted by the router and the amount of memory used to process those prefixes. Prefixes advertised Displays the number of network prefixes advertised, the number rejected, and the number withdrawn from the BGP routing table.
PAGE 728
BGP neighbor is 5ffe:11::3, remote AS 1, external link BGP version 4, remote router ID 5.5.5.
PAGE 729
Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 730
9000::8:2 9000::9:2 9000::a:2 9000::b:14 Dell# 18508 18508 18508 18508 35 44 35 29 32 19 32 29 0 0 0 0 0 0 0 0 0 0 0 0 00:16:42 00:16:41 00:16:43 00:13:01 0 0 0 0 show ip bgp next-hop View all next hops (using learned routes only) with current reachability and flap status. This command only displays one path, even if the next hop is reachable by multiple paths.
PAGE 731
Command Modes Supported Modes Command History • EXEC • EXEC Privilege • ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified. • $ = (dollar sign) the end of the output string. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp paths as-path View all unique AS-PATHs in the BGP database.
PAGE 732
show ip bgp paths extcommunity View all unique extended community information in the BGP database. Syntax show ip bgp paths extcommunity Command Modes Supported Modes Command History • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp regexp Allows you to view the subset of BGP routing table matching the regular expressions specified.
PAGE 733
timers bgp Allows you to adjust the BGP network timers for all neighbors. Syntax timers bgp keepalive holdtimer To return to the default values, use the no timers bgp command. Parameters Defaults keepalive Enter the time interval (in seconds) between which the system sends keepalive messages. The range is from 1 to 65535. The default is 60 seconds. holdtimer Enter the time interval (in seconds) that the the system waits since the last keepalive message before declaring a BGP peer dead.
PAGE 734
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. After this command is executed, all subsequent commands apply to this address family. You can exit from this AFI/ SAFI to the IPv6 Unicast (the default) family by entering the exit command and returning to the Router BGP context.
PAGE 735
Do not add the as-set parameter to the aggregate. If routes within the aggregate are constantly changing, the aggregate flaps to keep track of the changes in the AS_PATH. In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed. The opposite is true: routes meeting the permit clause are suppressed.
PAGE 736
NOTE: The :: notation specifies successive hexadecimal fields of zeros. dampening (OPTIONAL) Enter the keyword dampening to clear route flap dampening information. flap-statistics (OPTIONAL) Enter the keywords flap-statistics to reset the flap statistics on all prefixes from that neighbor. peer-group (OPTIONAL) Enter the keywords peer-group to clear all members of a peer-group. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.
PAGE 737
Command Modes EXEC Privilege Supported Modes Full–Switch Command History • * (asterisk) matches on sequences in a pattern (zero or more sequences). • + (plus sign) matches on sequences in a pattern (one or more sequences). • ? (question mark) matches sequences in a pattern (0 or 1 sequences). • [ ] (brackets) matches a range of single-character patterns. • ^ (caret) matches the beginning of the input string.
PAGE 738
updates Enter the keyword updates to view BGP update information. in (OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors. out (OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug ip bgp ipv6 unicast updates View information about BGP updates.
PAGE 739
Defaults internal-distance Enter a number to assign to routes learned from a router within the AS. The range is from 1 to 255. The default is 200. local-distance Enter a number to assign to routes learned from networks listed in the network command. The range is from 1 to 255. The default is 200.
PAGE 740
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information By default, when a neighbor/peer group configuration is created in the Router BGP context, it is enabled for the IPv6/Unicast AFI/SAFI. By using activate in the new context, the neighbor/peer group is enabled for AFI/SAFI. Related Command address family — changes the context to SAFI. neighbor advertisement-interval Set the advertisement interval between BGP neighbors or within a BGP peer group.
PAGE 741
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group to set the default route of all routers in that peer group. route-map mapname (OPTIONAL) Enter the keywords route-map then the name of a configured route map. Defaults Not configured. Command Modes ROUTER BGPV6-ADDRESS FAMILY Supported Modes Full–Switch Command History Version Description 9.9(0.
PAGE 742
Related Commands neighbor filter-list — assigns a AS-PATH list to a neighbor or peer group. neighbor route-map — assigns a route map to a neighbor or peer group. neighbor filter-list Configure a BGP filter based on the AS-PATH attribute. Syntax neighbor [ipv6-address | peer-group-name] filter-list aspath access-list-name [in | out] To delete a BGP filter, use the no neighbor [ipv6-address | peer-group-name] filter-list aspath access-list-name [in | out] command.
PAGE 743
peer-group-name Enter the name of the peer group. maximum Enter a number as the maximum number of prefixes allowed for this BGP router. The range is from 1 to 4294967295. threshold (OPTIONAL) Enter a number to be used as a percentage of the maximum value. When the number of prefixes reaches this percentage of the maximum value, the software sends a message. The range is from 1 to 100 percent. The default is 75.
PAGE 744
neighbor remove-private-as Remove private AS numbers from the AS-PATH of outgoing updates. Syntax neighbor {ipv6-address | peer-group-name} remove-private-as To return to the default, use the no neighbor {ipv6-address | peer-group-name} removeprivate-as command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group to remove the private AS numbers.
PAGE 745
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted. If you identify a peer group by name, the peers in that peer group inherit the characteristics in the Route map used in this command.
PAGE 746
To remove a network, use the no network ipv6-address [route-map map-name] command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. route-map mapname (OPTIONAL) Enter the keywords route-map then the name of an established route map. If the route map is not configured, the default is deny (to drop all routes). Defaults Not configured.
PAGE 747
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you do not configure the default-metric command, in addition to the redistribute command, or there is no route map to set the metric, the metric for redistributed static and connected is “0”. To redistribute the default route (0::0/0), configure the neighbor default-originate command. Related Commands neighbor default-originate — injects the default route.
PAGE 748
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast community View information on all routes with community attributes or view specific BGP community groups.
PAGE 749
Paramters Command Modes Supported Modes Command History community-listname • EXEC • EXEC Privilege Enter the name of a configured IP community list. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast dampened-paths View BGP routes that are dampened (non-active).
PAGE 750
Detail information for BGP Node bgpNdP 0x41a17000 : NdTmrP 0x41a17000 : NdKATmrP 0x41a17014 : NdTics 327741 : NhLocAS 1 : NdState 2 : NdRPMPrim 1 : NdListSoc 13 NdAuto 1 : NdEqCost 1 : NdSync 0 : NdDefOrg 0 NdV6ListSoc 14 NdDefDid 0 : NdConfedId 0 : NdMedConfed 0 : NdMedMissVal -1 : NdIgnrIllId 0 : NdRRC2C 1 : NdClstId 33686273 : NdPaTblP 0x41a19088 NdASPTblP 0x41a19090 : NdCommTblP 0x41a19098 : NhOptTransTblP 0x41a190a0 : NdRRClsTblP 0x41a190a8 NdPktPA 0 : NdLocCBP 0x41a6f000 : NdTmpPAP 0x419efc80 : NdTmpA
PAGE 751
• . = (period) any single character (including a white space). • * = (asterisk) the sequences in a pattern (0 or more sequences). • + = (plus) the sequences in a pattern (1 or more sequences). • ? = (question mark) sequences in a pattern (either 0 or 1 sequences). NOTE: You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression. Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege • [ ] = (brackets) a range of single-character patterns.
PAGE 752
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast neighbors Allows you to view the information exchanged by BGP neighbors. Syntax show ip bgp ipv6 unicast neighbors [ipv6-address prefix-length [advertisedroutes | dampened-routes | detail | flap-statistics | routes]] Parameters ipv6-address prefixlength (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
PAGE 753
Lines Beginning With Example Description • last read is the time (hours:minutes:seconds) the router reads a message from its neighbor • hold time is the number of seconds configured between messages from its neighbor • keepalive interval is the number of seconds between keepalive messages to help ensure that the TCP session is still alive Received messages This line displays the number of BGP messages received, the number of notifications (error messages), and the number of messages waiting in a qu
PAGE 754
Capabilities advertised to neighbor for IPv6 Unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) CISCO_ROUTE_REFRESH(128) For address family: IPv6 Unicast BGP table version 12, neighbor version 12 2 accepted prefixes consume 32 bytes Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer Prefixes advertised 0, rejected 0, withdrawn 0 from peer Connections established 3; dropped 2 Last reset 00:00:39, due to Closed by neighbor Notification History 'OPEN error/Bad AS' Sent : 0 Recv: 1 Local host: 5ffe:10::4, Loc
PAGE 755
Parameters Command Modes Supported Modes Command History Related Commands peer-group-name (OPTIONAL) Enter the name of a peer group to view information about that peer group only. summary (OPTIONAL) Enter the keyword summary to view status information of the peers in that peer group. The output is the same as that found in the show ip bgp ipv6 unicast summary command. • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 756
Field Description BGP AS-PATH entries Displays the number of BGP AS_PATH attributes processed and the amount of memory used to process them. BGP community entries Displays the number of BGP COMMUNITY attributes processed and the amount of memory used to process them. The show ip bgp ipv6 unicast community command provides more details on the COMMUNITY attributes. Dampening enabled Displayed only when dampening is enabled. Displays the number of paths designated as history, dampened, or penalized.
PAGE 757
30 iSCSI Optimization Internet small computer system interface (iSCSI) optimization enables quality-of-service (QoS) treatment for iSCSI storage traffic on an Aggregator. NOTE: When iSCSI storage devices are detected on the server-ports, storm-control is disabled on those ports. When the iSCSI devices are off the ports, storm-control is enabled again.
PAGE 758
Usage Information You can configure iSCSI TLVs to send either globally or on a specified interface. The interface configuration takes priority over global configuration. iscsi aging time Set the aging time for iSCSI sessions. Syntax iscsi aging time time To remove the iSCSI session aging time, use the no iscsi aging time command. Parameters time Enter the aging time for the iSCSI session. The range is from 5 to 43,200 minutes.
PAGE 759
dscp dscp-value Enter the DSCP value assigned to the incoming packets in an iSCSI session. The valid range is from 0 to 63. The default is: the DSCP value in ingress packets is not changed. remark Marks the incoming iSCSI packets with the configured dot1p or DSCP value when they egress to the switch. The default is: the dot1and DSCP values in egress packets are not changed. Defaults The default dot1p VLAN priority value is 4 without the remark option.
PAGE 760
iscsi priority-bits Configure the iSCSI priority advertised for the iSCSI protocol in application priority TLVs. Syntax iscsi priority-bits priority-bitmap To remove the configured iSCSI priority, use the no iscsi priority-bits command. Parameters priority-bitmap Enter the priority-bitmap range. The range is from 1 to FF. Defaults 0x10 Command Modes PROTOCOL LLDP Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.
PAGE 761
iscsi target port Configure the iSCSI target ports and optionally, the IP addresses on which iSCSI communication is monitored. Syntax iscsi target port [tcp-port-2...tcp-port-16]ip-address [ip-address] To remove the configured iSCSI target ports or IP addresses, use the no iscsi target port command. Parameters tcpport-2...tcpport- 16 Enter the tcp-port number of the iSCSI target ports. The tcp-port-n is the TCP port number or a list of TCP port numbers on which the iSCSI target listens to requests.
PAGE 762
Example Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 763
• show iscsi sessions detailed — displays detailed information on active iSCSI sessions on the switch. show iscsi sessions detailed Displays detailed information on active iSCSI sessions on the switch. Syntax Parameters Command Modes Supported Modes Command History Example Related Commands show iscsi sessions detailed [session isid] isid • EXEC • EXEC Privilege Enter the session’s iSCSi ID to display detailed information on specified iSCSi session. All Modes Version Description 9.9(0.
PAGE 764
Command Modes EXEC Privilege Supported Modes Full–Switch Command History Related Commands 764 Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. • show iscsi — displays the currently configured iSCSI settings. • show iscsi sessions — show iscsi session — displays detailed information about active iSCSI sessions on the switch. • show iscsi sessions detailed — displays detailed information on active iSCSI sessions on the switch.
PAGE 765
31 Intermediate System to Intermediate System (ISIS) The Dell Networking OS supports the intermediate system to intermediate system (IS-IS) protocol for IPv4 and IPv6. IS-IS is an interior gateway protocol that uses a shortest-path-first algorithm. IS-IS facilitates the communication between open systems, supporting routers passing both IP and OSI traffic. A router is considered an intermediate system. Networks are partitioned into manageable routing domains, called areas.
PAGE 766
• graceful-restart restart-wait • hello padding • hostname dynamic • ignore-lsp-errors • ip router isis • ipv6 router isis • isis circuit-type • isis csnp-interval • isis csnp-interval • isis hello-multiplier • isis hello padding • isis ipv6 metric • isis metric • isis network point-to-point • isis password • isis priority • is-type • log-adjacency-changes • lsp-gen-interval • lsp-mtu • lsp-refresh-interval • max-area-addresses • max-lsp-lifetime • maximum-path
PAGE 767
adjacency-check Verify that the “protocols supported” field of the IS-IS neighbor contains matching values to this router. Syntax adjacency-check To disable adjacency check, use the no adjacency-check command. Defaults Command Modes Supported Modes Enabled. • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 768
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. You cannot disable leaking from one level to another; however, you can regulate the rate flow from one level to another using an IP Prefix list. If you do not configure the IP Prefix list, all routes are leaked. You can find more information in IETF RFC 2966, Domain-wide Prefix Distribution with Two-Level IS-IS. area-password Configure a hash message authentication code (HMAC) password for an area.
PAGE 769
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information CAUTION: Use caution when you enter this command. Back up your configuration prior to using this command or your IS-IS configuration will be erased. clear isis Restart the IS-IS process. All IS-IS data is cleared.
PAGE 770
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To configure a shortcut name that you can use instead of entering a long string of numbers associated with an NSAP address, use this command. Related Commands hostname dynamic — enables dynamic learning of host names from routers in the domain and allows the routers to advertise the host names in LSPs.
PAGE 771
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug isis local-updates To debug IS-IS local update packets, enable debugging on a specific interface and provides diagnostic information. Syntax debug isis local-updates [interface] To turn off debugging, use the no debug isis local-updates [interface] command.
PAGE 772
Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug isis spf-triggers Enable debugging on the events that triggered IS-IS shortest path first (SPF) events for debugging purposes. Syntax debug isis spf-triggers To turn off debugging, use the no debug isis spf-triggers command. Command Modes Command History EXEC Privilege Version Description 9.9(0.
PAGE 773
default-information originate Generates a default route into an IS-IS routing domain and controls the distribution of default information. Syntax default-information originate [always] [metric metric] [route-map map-name] To disable the generation of a default route into the specified IS-IS routing domain, use the no defaultinformation originate [always] [metric metric] [route-map map-name] command.
PAGE 774
To remove the description, use the no description {description} command. Parameters description Defaults none Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Related Commands Enter a description to identify the IS-IS protocol (80 characters maximum). Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. router isis — Enter ROUTER mode on the switch.
PAGE 775
distribute-list in Filter network prefixes received in updates. Syntax distribute-list prefix-list-name in [interface] To return to the default values, use the no distribute-list prefix-list-name in [interface] command. Parameters Defaults Command Modes Supported Modes Command History Related Commands prefix-list-name Specify the prefix list to filter prefixes in routing updates.
PAGE 776
Defaults bgp as number (OPTIONAL) Enter the BGP then the AS Number. The range is from 1 to 65535. rip (OPTIONAL) Enter the keyword rip for RIP routes. static (OPTIONAL) Enter the keyword static for user-configured routing process. Not configured. Command Modes Supported Modes Command History Usage Information Related Commands • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 777
domain-password Set the authentication password for a routing domain. Syntax domain-password [hmac-md5 | encryption-type] password To disable the password, use the no domain-password command. Parameters hmac-md5 (OPTIONAL) Enter the keywords hmac-md5 to encrypt the password using MD5. encryption-type (OPTIONAL) Enter 7 to encrypt the password using DES. password Enter an alphanumeric string up to 16 characters long.
PAGE 778
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Every graceful restart enabled router’s HELLO PDUs includes a restart TLV. This restart enables (re)starting as well as the existing ISIS peers to detect the GR capability of the routers on the connected network. A flag in the Restart TLV contains restart request (RR), restart acknowledge (RA) and suppress adjacency advertisement (SA) bit flags.
PAGE 779
Defaults Refer to Parameters. Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. graceful-restart t2 Configure the wait time for the graceful restart timer T2 that a restarting router uses as the wait time for each database to synchronize. Syntax graceful-restart t2 {level-1 | level-2} seconds To return to the default, use the no graceful-restart t2 command.
PAGE 780
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The running router sets the remaining time value to the current adjacency hold time. You can override this setting by implementing this command. Override the default restart-wait time by entering the no graceful-restart restart-wait command. When you disable restart-wait, the current adjacency hold time is used.
PAGE 781
To return to the default, use the no hello padding [multi-point | point-to-point] command. Parameters multi-point (OPTIONAL) Enter the keywords multi-point to pad only LAN hello PDUs. point-to-point (OPTIONAL) Enter the keywords point-to-point to pad only point-to-point PDUs. Defaults Both LAN and point-to-point hello PDUs are padded. Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 782
Defaults In IS-IS, the default deletes LSPs with internal checksum errors (no ignore-lsp-errors). Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. IS-IS normally purges LSPs with an incorrect data link checksum causing the LSP source to regenerate the message.
PAGE 783
Parameters tag Defaults Not configured. Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Usage Information (OPTIONAL) This parameter is a unique name for a routing process. A null tag is assumed if the tag option is not specified. The tag name must be unique for all IP router processes for a given router. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 784
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Because the default establishes Level 1 and Level 2 adjacencies, you do not need to configure this command. Routers in an IS-IS system must be configured as a Level 1-only, Level 1-2, or Level 2-only system. Only configure interfaces as Level 1 or Level 2 on routers that are between areas (for example, a Level 1-2 router) to prevent the software from sending unused hello packets and wasting bandwidth.
PAGE 785
Parameters seconds Interval of transmission time between CSNPs on multi-access networks for the designated intermediate system. The range is from 0 to 65535. The default is 10. level-1 (OPTIONAL) Independently configures the interval of time between transmission of CSNPs for Level 1. level-2 (OPTIONAL) Independently configures the interval of time between transmission of CSNPs for Level 2.
PAGE 786
Usage Information The holdtime (the product of the hello-multiplier multiplied by the hello-interval) determines how long a neighbor waits for a hello packet before declaring the neighbor is down so routes can be recalculated. isis hello padding Turn ON or OFF padding of hello PDUs from INTERFACE mode. Syntax isis hello padding To return to the default, use the no isis hello padding command. Defaults Padding of hello PDUs is enabled (ON).
PAGE 787
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell Networking recommends configuring metrics on all interfaces. Without configuring this command, the IS-IS metrics are similar to hop-count metrics. isis metric Assign a metric to an interface. Syntax isis metric default-metric [level-1 | level-2] To return to the default values, use the no isis metric [default-metric] [level-1 | level-2] command.
PAGE 788
Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. isis password Configure an authentication password for an interface. Syntax isis password [hmac-md5] password [level-1 | level-2] To delete a password, use the no isis password [password] [level-1 | level-2] command. Parameters encryption-type (OPTIONAL) Enter 7 to encrypt the password using DES.
PAGE 789
isis priority Set the priority of the designated router you select. Syntax isis priority value [level-1 | level-2] To return to the default values, use the no isis priority [value] [level-1 | level-2] command. Parameters value This value sets the router priority. The higher the value, the higher the priority. The range is from 0 to 127. The default is 64. level-1 (OPTIONAL) Specify the priority for Level 1. This setting is the default. level-2 (OPTIONAL) Specify the priority for Level 2.
PAGE 790
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The IS-IS protocol automatically determines area boundaries and are able to keep Level 1 and Level 2 routing separate. Poorly planned use of this feature may cause configuration errors, such as accidental area partitioning. If you are configuring only one area in your network, you do not need to run both Level 1 and Level 2 routing algorithms.
PAGE 791
initial_wait_interval seconds (OPTIONAL) Enter the initial wait time, in seconds, before running the first LSP generation. The range is from 0 to 120 seconds. The default is 1 second. second_wait_interv al seconds (OPTIONAL) Enter the wait interval, in seconds, between the first and second LSP generation. The range is from 0 to 120 seconds. The default is 5 seconds. Defaults Refer to Parameters.
PAGE 792
Because each device can generate a maximum of 255 LSPs, consider carefully whether you use the lsp-mtu command. lsp-refresh-interval Set the link state PDU (LSP) refresh interval. LSPs must be refreshed before they expire. When the LSPs are not refreshed after a refresh interval, they are kept in a database until their max-lsp-lifetime reaches zero and then LSPs is purged. Syntax lsp-refresh-interval seconds To restore the default refresh interval, use the no lsp-refresh-interval command.
PAGE 793
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To configure the number of area addresses on router, use this command. This value must be consistent with routers in the same area, otherwise the router forms only Level 2 adjacencies. The value must be same among all the routers to form Level 1 adjacencies.
PAGE 794
Defaults 4 Command Modes Supported Modes Command History • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. metric-style To generate and accept old-style, new-style, or both styles of type, length, and values (TLV), configure a router.
PAGE 795
multi-topology Enables multi-topology IS-IS. It also allows enabling/disabling of old and new style TLVs for IP prefix information in the LSPs. Syntax multi-topology [transition] To return to a single topology configuration, use the no multi-topology [transition] command. Defaults Disabled Command Modes CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 796
Parameters interface Defaults Not configured. Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Usage Information Enter the following keywords and slot/port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information. • For Loopback interface, enter the keyword loopback then a number from 0 to 16383. • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
PAGE 797
Defaults Command Modes Supported Modes Command History Usage Information level-1-2 (OPTIONAL) Routes are independently redistributed into IS-IS as Level-1-2 routes. level-2 (OPTIONAL) Routes are independently redistributed into IS-IS as Level 2 routes. This setting is the default. route-map mapname (OPTIONAL) If you do not enter the route-map argument, all routes are redistributed. If a map-name value is not specified, no routers are imported.
PAGE 798
Parameters AS number Enter a number that corresponds to the autonomous system number. The range is from 1 to 65355. level-1 (OPTIONAL) Routes are independently redistributed into IS-IS Level 1 routes only. level-1-2 (OPTIONAL) Routes are independently redistributed into IS-IS Level 1 and Level 2 routes. level-2 (OPTIONAL) Routes are independently redistributed into IS-IS as Level 2 routes only. This setting is the default. metric metric-value (OPTIONAL) The value used for the redistributed route.
PAGE 799
redistribute ospf Redistribute routing information from an OSPF process. Syntax redistribute ospf process-id [level-1| level-1-2 | level-2] [match {internal | external}] [metric metric-value] [metric-type {external | internal}] [route-map map-name] To return to the default values, use the no redistribute ospf process-id [level-1| level-1-2 | level-2] [match {internal | external}] [metric metric-value][metric-type {external | internal}] [route-map map-name] command.
PAGE 800
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. How a metric value assigned to a redistributed route is advertised depends on how on the configuration of the metric-style command. If the metric-style command is set for Narrow mode and the metric value in the redistribute ospf command is set to a number higher than 63, the metric value advertised in LSPs is 63.
PAGE 801
To return to the default values, use the no set-overload-bit command. Defaults Command Modes Supported Modes Command History Usage Information Not set. • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 802
address-family ipv6 unicast maximum-paths 16 multi-topology transition set-overload-bit spf-interval level-1 100 15 20 spf-interval level-2 120 20 25 exit-address-family show isis database Display the IS-IS link state database. Syntax show isis database [level-1 | level-2] [local] [detail | summary] [lspid] Parameters Command Modes Supported Modes Command History Usage Information level-1 (OPTIONAL) Displays the Level 1 IS-IS link-state database.
PAGE 803
Field Description The last octet is the LSP number. An LSP is divided into multiple LSP fragments if there is more data than cannot fit in a single LSP. Each fragment has a unique LSP number. An * after the LSPID indicates that the system originates an LSP where this command was issued. Example LSP Seq Num This value is the sequence number for the LSP that allows other systems to determine if they have received the latest information from the source.
PAGE 804
Area Address: 49.0000.0001 NLPID: 0xCC 0x8E IP Address: 10.1.1.1 IPv6 Address: 1011::1 Topology: IPv4 (0x00) IPv6 (0x8002) Metric: 10 IS OSPF.00 Metric: 10 IS (MT-IPv6) OSPF.00 Metric: 10 IP 10.1.1.0 255.255.255.0 Metric: 10 IP 15.1.1.0 255.255.255.0 Metric: 20 IP 10.3.3.0 255.255.255.
PAGE 805
show isis hostname Display IS-IS host names configured or learned on the system. Syntax Command Modes Supported Modes Command History Example show isis hostname • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show isis hostname System Id Dynamic Name Static Name *F100.E120.0013 Force10 ISIS Dell# show isis interface Display detailed IS-IS interface status and configuration information.
PAGE 806
MTU 1497, Encapsulation SAP Routing Protocol: IS-IS Circuit Type: Level-1-2 Interface Index 37847070, Local circuit ID 1 Level-1 Metric: 10, Priority: 64, Circuit ID: systest-3.01 Hello Interval: 10, Hello Multiplier: 3, CSNP Interval: 10 Number of active level-1 adjacencies: 1 Level-2 Metric: 10, Priority: 64, Circuit ID: systest-3.
PAGE 807
Usage Information Use this command to confirm that the neighbor adjacencies are operating correctly. If you suspect that they are not, you can verify the specified area addresses of the routers by using the show isis neighbors command. The following describes the show isis neighbors command shown in the following example. Example Field Description System Id The value that identifies a system in an area. Interface The interface, slot, and port in which the router was discovered.
PAGE 808
Example The bold section identifies that Multi-Topology IS-IS is enabled. Dell#show isis protocol IS-IS Router: System Id: F100.E120.0013 IS-Type: level-1-2 Manual area address(es): 49.0000.0001 Routing for area address(es): 49.0000.
PAGE 809
Example Item Description Level-1/Level-2 LSPs sourced (new/refresh) Displays the number of new and refreshed LSPs. Level-1/Level-2 LSPs flooded (sent/rcvd) Displays the number of flooded LSPs sent and received. Level-1/Level-2 LSPs CSNPs (sent/ rcvd) Displays the number of CSNP LSPs sent and received. Level-1/Level-2 LSPs PSNPs (sent/ rcvd) Displays the number of PSNP LPSs sent and received. Level-1/Level-2 DR Elections Displays the number of times designated router elections ran.
PAGE 810
Parameters Defaults level-l (OPTIONAL) Enter the keyword level-1 to apply the configuration to Level-1 SPF calculations. level-2 (OPTIONAL) Enter the keyword level-2 to apply the configuration to Level-2 SPF calculations. interval seconds Enter the maximum number of seconds between SPF calculations. The range is from 0 to 120 seconds. The default is 10 seconds. initial_wait_interval seconds (OPTIONAL) Enter the initial wait time, in seconds, before running the first SPF calculations.
PAGE 811
32 Isolated Networks This chapter describes the isolated networks commands in the Dell Networking OS. io-aggregator isolated-network vlan Enable the isolated-network functionality for a particular VLAN or a set of VLANs.
PAGE 812
combination. For example: VLAN IDs (comma-separated): 3, 4, 6. Range (hyphenseparated): 5-10. Combination: 3, 4, 5-10, 8. Defaults None Command Modes EXEC Privilege Usage Information This command is used to show the isolated-network feature status and the VLANs configured for this feature. Show running-config will save this command under io-aggregator. Supported Modes All Modes Command History Example 812 Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.
PAGE 813
33 Link Aggregation Control Protocol (LACP) This chapter contains commands for Dell Networking’s implementation of the link aggregation control protocol (LACP) for the creation of dynamic link aggregation groups (LAGs — called port-channels in Dell Networking OS parlance).
PAGE 814
Version Description 9.6(0.0) Supported on the M I/O Aggregator. clear lacp counters Clear Port Channel counters. Syntax clear lacp port-channel-number counters Parameters port-channelnumber Enter a port-channel number: The range is from 1 to 128. Command Modes EXEC EXEC Privilege Supported Modes Command History Related Commands All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 815
Command Modes EXEC EXEC Privilege Supported Modes Command History All Modes Version Description 9.4(0.0) Supported on the FN I/O Aggregator. io-aggregator auto-lag enable Enable auto-lag globally on the server facing ports Syntax io-aggregator auto-lag enable To disable the auto-lag, use the no io-aggregator auto-lag enable command. When disabled, all the server ports associated in a LAG are removed and the LAG itself gets removed. Any LACPDUs received on the server ports are discarded.
PAGE 816
Full–Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.11(0.0) Introduced the support on VLT mode. 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the M I/O Aggregator and FN I/O Aggregator.
PAGE 817
Parameters priority-value Enter the port-priority value. The higher the value number, the lower the priority. The range is from 1 to 65535. The default is 32768. Defaults 32768 Command Modes INTERFACE Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 818
Usage Information Version Description 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. LACP Modes Mode Function active An interface is in an active negotiating state in this mode. LACP runs on any link configured in the active state and also automatically initiates negotiation with other ports by initiating LACP packets. passive An interface is not in an active negotiating state in this mode.
PAGE 819
show interfaces port-channel Display information on configured Port Channel groups. Syntax Parameters show interfaces port-channel [channel-number] [brief| description] channel-number For a Port Channel interface, enter the keyword port-channel followed by a number. The range is from 1 to 128. brief (OPTIONAL) Enter the keyword brief to display only the port channel number, the state of the port channel, and the number of interfaces in the port channel.
PAGE 820
Field Description Last clearing... Displays the time when the show interfaces counters were cleared. Queueing strategy. States the packet queuing strategy. FIFO means first in first out. packets input... Displays the number of packets and bytes into the interface. Input 0 IP packets... Displays the number of packets with IP headers, VLAN tagged headers, and MPLS headers. The number of packets may not add correctly because a VLAN tagged IP packet counts as both a VLAN packet and an IP packet.
PAGE 821
Example Field Description Status Displays the status of the port channel. • down — if the port channel is disabled (shutdown) • up — if the port channel is enabled (no shutdown) Uptime Displays the age of the port channel in hours:minutes:seconds. Ports Lists the interfaces assigned to this port channel. (untitled) Displays the status of the physical interfaces (up or down). • In Layer 2 port channels, an * (asterisk) indicates which interface is the primary port of the port channel.
PAGE 822
show lacp Displays the LACP matrix. Syntax show lacp port-channel-number [sys-id | counters] Parameters Command Modes Supported Modes Command History Example (PortChannel-Number) port-channelnumber Enter a port-channel number: sys-id (OPTIONAL) Enter the keywords sys-id and the value that identifies a system. counters (OPTIONAL) Enter the keyword counters to display the LACP counters. • EXEC • EXEC Privilege The range is from 1 to 128. All Modes Version Description 9.9(0.
PAGE 823
TenGig 0/1 Dell# Related Commands 200 200 0 0 0 0 clear lacp counters — Clears the LACP counters. show interfaces port-channel — Displays the information on configured Port Channel groups. show link-bundle-distribution port-channel Display the traffic-handling and utilization of the member interfaces of the port channel.
PAGE 824
show port-channel-flow Display an egress port in a given port-channel flow. Syntax show port-channel-flow port-channel number incoming-interface interface { srcmac address dest-mac address {vlan vlanid | ether-type }} [ src-ip address dest-ip address ] [ src-port number dest-port number ] Parameters port-channel number Enter the keywords port-channel then the number of the port channel to display flow information. The range is from 1 to 128.
PAGE 825
• Egress port for unfragmented packets. • In the event of fragmented packets, the egress port of the first fragment. • In the event of fragmented packets, the egress port of the subsequent fragments. NOTE: In the show port-channel–flow command output, the egress port for an unknown unicast, multicast, or broadcast traffic is not displayed.
PAGE 826
34 Layer 2 This chapter describes commands to configure Layer 2 features.
PAGE 827
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. mac-address-table aging-time Specify an aging time for MAC addresses to remove from the MAC address table. Syntax mac-address-table aging-time seconds To delete the configured aging time, use the no mac-address-table aging-time seconds command.
PAGE 828
• vlan vlan-id For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. Enter the keyword vlan then a VLAN ID number from 1 to 4094. Defaults Not configured. Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 829
Parameters Defaults address_limit Enter the maximum number of MAC addresses that can be learned on the interface. The range is from 1 to 1000000. dynamic (OPTIONAL) Enter the keyword dynamic to allow aging of MACs even though a learning limit is configured. no-station-move (OPTIONAL) Enter the keywords no-station-move to disallow a station move (associate the learned MAC address with the most recently accessed port) on learned MAC addresses.
PAGE 830
mac learning-limit learn-limit-violation Configure an action for a MAC address learning-limit violation. Syntax mac learning-limit learn-limit-violation {log | shutdown} To return to the default, use the no mac learning-limit learn-limit-violation {log | shutdown} command. Parameters log Enter the keyword log to generate a syslog message on a learning-limit violation. shutdown Enter the keyword shutdown to shut down the port on a learning-limit violation.
PAGE 831
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command is supported on physical interfaces, static LAGs, and LACP LAGs. Related Commands show mac learning-limit — displays details of the mac learning-limit. mac learning-limit reset Reset the MAC address learning-limit error-disabled state.
PAGE 832
• vlan vlan-id Command Modes Supported Modes Command History • EXEC • EXEC Privilege For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information. (OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to the VLAN. The range is from 1 to 4094. All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 833
count Command Modes Supported Modes • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword count, then optionally, by an interface or VLAN ID, to display total or interface-specific static addresses, dynamic addresses, and MAC addresses in use. Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 834
Column Heading Description Interface State Displays the interface type and slot/port information. The following abbreviations describe the interface types: • gi — Gigabit Ethernet then a slot/port • po — Port Channel then a number. The range is from 1 to 255. \ • so — SONET then a slot/port. • te — 10–Gigabit Ethernet then a slot/port. Lists if the MAC address is in use (Active) or not in use (Inactive).
PAGE 835
Dell# Related Commands show mac-address-table — displays the current MAC address configuration. show mac learning-limit Display MAC address learning limits set for various interfaces. Syntax Parameters Command Modes Supported Modes Command History Example show mac learning-limit [violate-action] [detail] [interface interface] violate-action (OPTIONALY) Enter the keywords violate-action to display the MAC learning limit violation status.
PAGE 836
To remove the description from the VLAN, use the no description command. Parameters description Defaults none Command Modes INTERFACE VLAN Supported Modes All Modes Command History Related Commands Enter a text string description to identify the VLAN (80 characters maximum). Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. show vlan – displays the VLAN configuration.
PAGE 837
default-vlan disable Disable the default VLAN so that all switchports are placed in the Null VLAN until they are explicitly configured as a member of another VLAN. Defaults Enabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 838
show config Display the current configuration of the selected VLAN. Syntax show config Command Modes INTERFACE VLAN Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-if-vl-100)#show config ! interface Vlan 1 description a no ip address mtu 2500 shutdown Dell(conf-if-vl-100)# show vlan Display the current VLAN configurations on the switch.
PAGE 839
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show vlan command shown in the following example. Column Heading Description (Column 1 — no heading) asterisk symbol (*) = Default VLAN • G = GVRP VLAN • P = primary VLAN • C = community VLAN • I = isolated VLAN • O = OpenFlow NUM Displays existing VLAN IDs.
PAGE 840
1002 Active Dell# Example (VLAN ID) T Te 0/3,13,55-56 Dell# show vlan id 40 Codes: * - Default VLAN, G - GVRP VLANs, R - Remote Port Mirroring VLANs, P - Primary, C - Community, I - Isolated Q: U - Untagged, T - Tagged x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack, H - VSN tagged i - Internal untagged, I - Internal tagged, v - VLT untagged, V - VLT tagged NUM Status Description Q Ports 1 Inactive a Dell# Example (Brief) Dell#show vlan brief VLAN Name STG MAC Aging IP Address ----
PAGE 841
Defaults All interfaces in Layer 2 mode are untagged. Command Modes INTERFACE VLAN Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When you use the no tagged command, the interface is automatically placed in the Default VLAN as an untagged interface unless the interface is a member of another VLAN.
PAGE 842
If the track ip command is not configured, the VLAN's Layer 3 operational state depends on all the members of the VLAN. The Layer 2 state of the VLAN, and hence the Layer 2 traffic, is not affected by the track ip command configuration. Related Commands interface vlan — configures a VLAN. tagged — specifies which interfaces in a VLAN are tagged. untagged Add a Layer 2 interface to a VLAN as an untagged interface.
PAGE 843
35 Link Layer Discovery Protocol (LLDP) The link layer discovery protocol (LLDP) advertises connectivity and management from the local station to the adjacent stations on an IEEE 802 LAN. LLDP facilitates multi-vendor interoperability by using standard management tools to discover and make available a physical topology for network management. The Dell Networking OS implementation of LLDP is based on IEEE standard 801.1ab. This chapter describes the LLDP commands.
PAGE 844
Parameters port-protocol-vlanid Enter the keywords port-protocol-vlan-id to advertise the port protocol VLAN identification TLV. port-vlan-id Enter the keywords port-vlan-id to advertise the port VLAN identification TLV. vlan-name Enter the keywords vlan-name to advertise the vlan-name TLV. Defaults Disabled. Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp) Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.
PAGE 845
advertise interface-port-desc Advertise port descriptor. Syntax advertise interface-port-desc {description | port-id} To remove the advertised port descriptor, use the no advertise interface—port—desc {description | port-id} command. Parameters description Enter the keyword description then the interface description. port-id Enter the keyword port-id then the port-id. The range is from 0 to 7.
PAGE 846
Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.16.1 Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The command options system-capabilities, system-description, and system-name can be invoked individually or together, in any sequence.
PAGE 847
Command Modes EXEC Privilege Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. debug lldp interface Enable LLDP debugging to display timer events, neighbor additions or deletions, and other information about incoming and outgoing packets.
PAGE 848
disable Enable or disable LLDP. Syntax disable To enable LLDP, use the no disable command. Defaults Enabled, that is no disable. Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp) Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 849
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. mode To receive or transmit, set LLDP. Syntax mode {tx | rx} To return to the default, use the no mode {tx | rx} command. Parameters tx Enter the keyword tx to set the mode to transmit. rx Enter the keyword rx to set the mode to receive. Defaults Both transmit and receive.
PAGE 850
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol lldp (Configuration) Enable LLDP globally on the switch. Syntax protocol lldp To disable LLDP globally on the chassis, use the no protocol lldp command. Defaults Enabled.
PAGE 851
When you enter the LLDP protocol in the Interface context, it overrides global configurations. When you execute the no protocol lldp from INTERFACE mode, interfaces begin to inherit the configuration from global LLDP CONFIGURATION mode. show lldp neighbors Display LLDP neighbor information for all interfaces or a specified interface.
PAGE 852
Example Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Dell#show lldp statistics --------- LLDP GLOBAL STATISTICS ON CHASSIS -----------Total number of neighbors: 4 Last table change time: 00:01:17, In ticks: 3859 Total number of Table Inserts: 7 Total number of Table Deletes: 3 Total number of Table Drops: 0 Total number of Table Age Outs: 0 Dell# show running-config lldp Display the current global LLDP configuration.
PAGE 853
Regarding connected endpoint devices, LLDP-MED provides network connectivity devices with the ability to: • manage inventory • manage Power over Ethernet (POE) • identify physical location • identify network policy advertise med guest-voice To advertise a separate limited voice service for a guest user with their own IP telephony handset or other appliances that support interactive voice services, configure the system.
PAGE 854
To return to the default, use the no advertise med guest-voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094. layer2_priority Enter the Layer 2 priority. The range is from 0 to 7. DSCP_value Enter the DSCP value. The range is from 0 to 63. priority-tagged number Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7. Defaults unconfigured.
PAGE 855
8.3.16.1 Usage Information Related Commands Introduced on the MXL 10/40GbE Switch IO Module. • ECS — Emergency call service such as defined by TIA or the national emergency numbering association (NENA) • ELIN — Emergency location identification number, a valid North America Numbering Plan format telephone number supplied for ECS purposes. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration.
PAGE 856
priority-tagged number Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7. Defaults unconfigured. Command Modes CONFIGURATION (conf-lldp) Supported Modes Full-Switch Command History Related Commands 9.9(0.0) Introduced on the FN IOM. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration.
PAGE 857
advertise med video-conferencing To advertise dedicated video conferencing and other similar appliances that support real-time interactive video, configure the system. Syntax advertise med video-conferencing {vlan-id} | {priority-tagged number} To return to the default, use the no advertise med video-conferencing {vlan-id} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094.
PAGE 858
Version 8.3.16.1 Related Commands Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration. advertise med voice To advertise a dedicated IP telephony handset or other appliances supporting interactive voice services, configure the system.
PAGE 859
Defaults unconfigured. Command Modes CONFIGURATION (conf-lldp) Supported Modes Full-Switch Command History Related Commands 9.9(0.0) Introduced on the FN IOM. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration.
PAGE 860
36 Microsoft Network Load Balancing Network Load Balancing (NLB) is a clustering functionality that is implemented by Microsoft on Windows 2000 Server and Windows Server 2003 operating systems. NLB uses a distributed methodology or pattern to equally split and balance the network traffic load across a set of servers that are part of the cluster or group.
PAGE 861
With multicast NLB mode, the data is forwarded to all the servers based on the port specified using the Layer 2 multicast command, which is the mac-address-table static multicast vlan output-range , command in CONFIGURATION mode. Limitations With Enabling NLB on Switches The following limitations apply to switches on which you configure NLB: • The NLB unicast mode uses switch flooding to transmit all packets to all the servers that are part of the VLAN.
PAGE 862
• mac-address-table static (for Multicast MAC Address) • ip vlan-flooding mac-address-table static (for Multicast MAC Address) For multicast mode of network load balancing (NLB), configure a static multicast MAC address, associate the multicast MAC address with the VLAN used to switch Layer 2 multicast traffic, and add output ports that will receive multicast streams on the VLAN.
PAGE 863
Example (Multicast) mac-address-table static 01:00:5E:01:00:01 {multicast vlan 2 output—range Te 0/2,Te 0/3} ip vlan-flooding Enable unicast data traffic flooding on VLAN member ports. Syntax ip vlan-flooding To disable, use the no ip vlan-flooding command. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL Switch .
PAGE 864
37 Multicast Source Discovery Protocol (MSDP) Multicast source discovery protocol (MSDP) connects multiple PIM Sparse-Mode (PIM-SM) domains together. MSDP peers connect using TCP port 639. Peers send keepalives every 60 seconds. A peer connection is reset after 75 seconds if no MSDP packets are received. MSDP connections are parallel with MBGP connections.
PAGE 865
Version Description 9.3(0.0) Introduced on the MXL Switch . clear ip msdp sa-cache Clears the entire source-active cache, the source-active entries of a particular multicast group, rejected, or local source-active entries. Syntax Parameters clear ip msdp sa-cache [group-address | rejected-sa | local] group-address Enter the group IP address in dotted decimal format (A.B.C.D.).
PAGE 866
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug ip msdp Turn on MSDP debugging. Syntax debug ip msdp {event peer address | packet peer address | pim} To turn debugging off, use the no debug ip msdp {event peer address | packet peer address | pim} command. Parameters event peer address Enter the keyword event then the peer address in a dotted decimal format (A.B.C.D.).
PAGE 867
Related Commands Version Description 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.2(0.0) Introduced on the MXL Switch . show ip msdp sa-cache rejected-sa — Displays the rejected SAs in the SA cache. ip msdp default-peer Define a default peer from which to accept all source-active (SA) messages. Syntax ip msdp default-peer peer address [list name] To remove the default peer, use the no ip msdp default-peer {peer address} list name command.
PAGE 868
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip msdp mesh-group To be a member of a mesh group, configure a peer. Syntax ip msdp mesh-group {name} {peer address} To remove the peer from a mesh group, use the no ip msdp mesh-group {name} {peer address} command. Parameters name Enter a string of up to 16 characters long for as the mesh group name. peer address Enter the peer address in a dotted decimal format (A.B.C.D.). Defaults Not configured.
PAGE 869
Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip msdp peer Configure an MSDP peer. Syntax ip msdp peer peer address [connect-source] [description] [sa-limit number] To remove the MSDP peer, use the no ip msdp peer peer address [connect-source interface] [description name] [sa-limit number] command.
PAGE 870
If the total number of SA messages received from the peer is already larger than the limit when this command is applied, those SA messages continue to be accepted. To enforce the limit in such situation, use the clear ip msdp peer command to reset the peer. Related Commands ip msdp sa-limit — configures the MSDP SA Limit. clear ip msdp peer — clears the MSDP peer. show ip msdp — displays the MSDP information. ip msdp redistribute Filter local PIM SA entries in the SA cache.
PAGE 871
access-list name Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Enter the name of an extended ACL that contains permitted SAs. If you do not use this option, all local entries are blocked. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip msdp sa-limit Configure the upper limit of source-active (SA) entries in SA-cache.
PAGE 872
ip msdp shutdown Administratively shut down a configured MSDP peer. Syntax ip msdp shutdown {peer address} Parameters peer address Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Enter the peer address in a dotted decimal format (A.B.C.D.). Version Version 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip multicast-msdp Enable MSDP.
PAGE 873
Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show ip msdp peer 100.1.1.1 Peer Addr: 100.1.1.1 Local Addr: 100.1.1.
PAGE 874
Example 874 Dell#sh ip msdp sa-cache rejected-sa MSDP Rejected SA Cache 200 rejected SAs UpTime GroupAddr SourceAddr RPAddr 00:00:13 225.1.2.1 10.1.1.3 110.1.1.1 00:00:13 225.1.2.2 10.1.1.4 110.1.1.1 00:00:13 225.1.2.3 10.1.1.3 110.1.1.1 00:00:13 225.1.2.4 10.1.1.4 110.1.1.1 00:00:13 225.1.2.5 10.1.1.3 110.1.1.1 00:00:13 225.1.2.6 10.1.1.4 110.1.1.1 00:00:13 225.1.2.7 10.1.1.3 110.1.1.1 00:00:13 225.1.2.8 10.1.1.4 110.1.1.1 00:00:13 225.1.2.9 10.1.1.3 110.1.1.1 00:00:13 225.1.2.10 10.1.1.4 110.1.1.
PAGE 875
38 Multiple Spanning Tree Protocol (MSTP) Multiple spanning tree protocol (MSTP), as implemented by the Dell Networking Operating System (OS), conforms to IEEE 802.1s.
PAGE 876
events Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example • For Receive, enter the keyword in. • For Transmit, enter the keyword out. (OPTIONAL) Enter the keyword events to debug MSTP events. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 877
Supported Modes Command History Related Commands Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol spanning-tree mstp — enters MULTIPLE SPANNING TREE mode. disable Enable bridge protocol data units (BPDU) filter globally to filter transmission of BPDU on port-fast enabled interfaces. Syntax edge-port bpdufilter default To disable global bpdu filter default, use the no edge-port bpdufilter default command.
PAGE 878
hello-time — changes the time interval between bridge protocol data units (BPDUs). hello-time Set the time interval between generation of MSTB bridge protocol data units (BPDUs). Syntax hello-time seconds To return to the default value, use the no hello-time command. Parameters seconds Enter a number as the time interval between transmission of BPDUs. The range is from 1 to 10. The default is 2 seconds.
PAGE 879
Related Commands edge-port bpdufilter default — the amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State. hello-time — changes the time interval between BPDUs. max-hops Configure the maximum hop count. Syntax max-hops number To return to the default values, use the no max-hops command. Parameters range Enter a number for the maximum hop count. The range is from 1 to 40. The default is 20.
PAGE 880
Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, all VLANs are mapped to MST instance zero (0) unless you use the vlan range command to map it to a non-zero instance. Although MSTP instance IDs range from 0 to 4094, only 64 active instances are supported on the switch. name The name you assign to the multiple spanning tree region.
PAGE 881
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. MSTP is not enabled when you enter MULTIPLE SPANNING TREE mode. To enable MSTP globally on the switch, enter the no disable command while in MULTIPLE SPANNING TREE mode. For more information about the multiple spanning tree protocol, refer to the Dell Networking OS Configuration Guide.
PAGE 882
Command Modes MULTIPLE SPANNING TREE Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-mstp)#show config ! protocol spanning-tree mstp no disable name CustomerSvc revision 2 MSTI 10 VLAN 101-105 max-hops 5 Dell(conf-mstp)# show spanning-tree mst configuration View the multiple spanning tree configuration.
PAGE 883
guard Command Modes Supported Modes Command History • EXEC • EXEC Privilege (Optional) Enter the keyword guard to display the type of guard enabled on an MSTP interface and the current port state. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Enable the multiple spanning tree protocol prior to using this command.
PAGE 884
---------------------------------------------------------Gi 0/0 128.257 128 20000 EDS 0 32768 0001.e801.6aa8 128.257 Interface Name Role PortID Prio Cost Sts Cost Link-type Edge Boundary ---------------------------------------------------------Gi 0/0 ErrDis 128.257 128 20000 EDS 0 P2P No No Dell#show spanning-tree msti 0 MSTI 0 VLANs mapped 1-4094 Root Identifier has priority 32768, Address 0001.e801.
PAGE 885
Parameters spanning-tree Defaults Enable. Command Modes INTERFACE Supported Modes Full–Switch Command History Enter the keywords spanning-tree to enable the MSTP on the interface. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. spanning-tree msti Configure multiple spanning tree instance cost and priority for an interface.
PAGE 886
spanning-tree mstp Configures a Layer 2 MSTP interface as an edge port with (optionally) a bridge protocol data unit (BPDU) guard, or enables the root guard or loop guard feature on the interface. Syntax spanning-tree mstp {edge-port [bpduguard [shutdown-on-violation]] | bpdufilter| rootguard} Parameters edge-port Enter the keywords edge-port to configure the interface as a multiple spanning tree edge port.
PAGE 887
tc-flush-standard Enable the MAC address flushing after receiving every topology change notification. Syntax tc-flush-standard To disable, use the no tc-flush-standard command. Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, the sytem implements an optimized flush mechanism for MSTP.
PAGE 888
39 Multicast The multicast commands are supported by Dell Networking Operating System (OS).
PAGE 889
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2.(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip pim tib — shows the PIM tree information base. ip mroute Assign a static mroute.
PAGE 890
ip multicast-limit To limit the number of multicast entries on the system, use this feature. Syntax ip multicast-limit limit Parameters limit Defaults 15000 routes. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Enter the desired maximum number of multicast entries on the system. The range is from 1 to 50000. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 891
mtrace Trace a multicast route from the source to the receiver. Syntax Parameters Command Modes Command History Usage Information mtrace [vrf vrf-name] {source-address/hostname} [destination-address/hostname] [group-address/hostname] vrf vrf-name Enter the keyword vrf followed by the name of the VRF. If VRF name is not mentioned, the default VRF will be used. Mtrace is not supported for management VRF. source-address/ hostname Enter the source IP address in dotted decimal format (A.B.C.D).
PAGE 892
-3 2.2.2.1 PIM 103.103.103.0/24 -4 103.103.103.3 --> Source -----------------------------------------------------------------The mtrace command traverses the path of the response data block in the reverse direction of the multicast data traffic. The mtrace command traverses the reverse path to the source from the destination.
PAGE 893
Command Modes Supported Modes Command History Example (Static) • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2.(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show ip mroute static Mroute: 23.23.23.0/24, interface: Lo 2 Protocol: static, distance: 0, route-map: none, last change: 00:00:23 Example (Snooping) Dell#show ip mroute snooping IPv4 Multicast Snooping Table (*, 224.0.0.
PAGE 894
Example Field Description uptime Displays the amount of time the entry has been in the multicast forwarding table. Incoming interface Displays the reverse path forwarding (RPF) information towards the source for (S,G) entries and the RP for (*,G) entries.
PAGE 895
RPF RPF RPF RPF interface: Te 0/4 neighbor: 165.87.31.4 route/mask: 10.10.10.9/255.255.255.255 type: unicast IPv6 Multicast Commands The following section contains the IPv6 multicast commands. debug ipv6 mld_host Enable the collection of debug information for MLD host transactions. Syntax [no] debug ipv6 mld_host [int-count | interface type] [slot/port-range] To discontinue collection of debug information for the MLD host transactions, use the no debug ipv6 mld_host command.
PAGE 896
Parameters limit Defaults 15000 routes. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Enter the desired maximum number of multicast entries on the system. The range is from 1 to 50000. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This feature allows you to limit the number of multicast entries on the system.
PAGE 897
40 Neighbor Discovery Protocol (NDP) The Dell Networking Operating System (OS) supports the network discovery protocol for IPv6. The neighbor discovery protocol for IPv6 is defined in RFC 2461 as part of the Stateless Address Autoconfiguration protocol. It replaces the Address Resolution Protocol used with IPv4.
PAGE 898
Command Modes Supported Modes Command History • EXEC • EXEC Privilege • For a Fast Ethernet interface, enter the keyword fastEthernet then the slot/port information. • For a Port Channel interface, enter the keywords port-channel then a number. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN, enter the keyword vlan then the VLAN ID. The range is from 1 to 4094. Full–Switch Version Description 9.9(0.
PAGE 899
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ipv6 neighbors Display IPv6 discovery information. Entering the command without options shows all the IPv6 neighbor addresses stored on the control processor (CP). Syntax Parameters show ipv6 neighbors [vrf vrf-name] [ipv6-address| interface interface] vrf vrf-name (OPTIONAL) Enter the keyword vrf followed by the name of the VRF to display the neighbors corresponding to that VRF.
PAGE 900
41 NPIV Proxy Gateway The N-port identifier virtualization (NPIV) Proxy Gateway (NPG) feature provides FCoE-FC bridging capability on the FN IOM with the FC Flex IO module switch, allowing server CNAs to communicate with SAN fabrics over the FN IOMwith the FC Flex IO module.
PAGE 901
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. A DCB map is a template used to configure DCB parameters and apply them on converged Ethernet interfaces. DCB parameters include priority-based flow control (PFC) and enhanced traffic selection (ETS). To display the PFC and ETS settings in DCB maps, enter the show qos dcb-map command.
PAGE 902
Related Commands fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric. show fcoe-map— displays the Fibre Channel and FCoE configuration parameters in FCoE maps. fabric-id vlan In an FCoE map, configure the association between the dedicated VLAN used to carry FCoE traffic between servers and a SAN, and the fabric where the desired storage arrays are installed.
PAGE 903
fcf-priority In an FCoE map, configure the priority used by a server CNA to select an upstream FCoE forwarder (FCF). Syntax Parameters fcf—priority priority priority Enter the priority assigned to the FN 2210S Aggregator NPIV proxy gateway, which appears to a downstream server CNA as an FCF. The range of FCF priority values is from 1 to 255. Defaults 128 Command Modes FCOE MAP Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.
PAGE 904
Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN 2210S Aggregator. 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. The FC-MAP value you enter must match the FC-MAP value used by an FC switch or FCoE forwarder (FCF) in the fabric. An FCF switch accepts only FCoE traffic that uses the correct FC-MAP value.
PAGE 905
Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN2210S Aggregator with the PMUX module. 9.3(0.0) Introduced on the M I/O Aggregator with the PMUX module. An FCoE map is a template used to map FCoE and FC parameters in a converged fabric.
PAGE 906
Usage Information The command is supported only in FN2210S Aggregator. fka-adv-period In an FCoE map, configure the time interval used to transmit FIP keepalive (FKA) advertisements. Syntax fka-adv-period seconds Parameters seconds Defaults 8 seconds Command Modes FCoE MAP Supported Modes All Modes Command History Enter the time period (in seconds) used to send FIP keepalive messages to peer devices. The range is from 8 to 90 seconds. Version Description 9.6(0.
PAGE 907
Usage Information FIP keepalive (FKA) messaging is used to detect if other FCoE devices are reachable. To remove FIP keepalive monitoring from an FCoE map, enter the no keepalive command. Related Commands fcoe-map— creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric. show fcoe-map— displays the Fibre Channel and FCoE configuration parameters in FCoE maps. show fcoe-map Displays the Fibre Channel and FCoE configuration parameters in FCoE maps.
PAGE 908
Field Description FC-MAP FCoE MAC address-prefix value - The unique 24-bit MAC address prefix that identifies a fabric. FCF Priority The priority used by a server to select an upstream FCoE forwarder. Config-State Indicates whether the configured FCoE and FC parameters in the FCoE map are valid: Active (all mandatory FCoE and FC parameters are correctly configured) or Incomplete (either the FC-MAP value, fabric ID, or VLAN ID are not correctly configured).
PAGE 909
Oper-State Members Related Commands DOWN fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric. show fc sw Display the switch configuration for Fibre Channel capability. Syntax Command Modes Supported Modes Command History Example show fc sw • EXEC • EXEC Privilege All modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN2210S Aggregator. 9.3(0.
PAGE 910
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN 2210S Aggregator. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator.
PAGE 911
Field Description ENode-Intf FN I/O Aggregator with the FC Flex IO module Ethernet interface (slot/port) to which a server CNA is connected. ENode-WWPN Worldwide port name (WWPN) of a server CNA port. FCoE-Vlan VLAN ID of the dedicated VLAN used to transmit FCoE traffic to and from the fabric. Fabric-Intf Fabric-facing Fibre Channel port (slot/port) on which FC traffic is transmitted to the specified fabric.
PAGE 912
Example Related Commands Field Description FC-ID FC port ID provided by the fabric. LoginMethod Method used by the server CNA to log in to the fabric; for example, FLOGI or FDISC. Secs Number of seconds that the fabric connection is up. State Status of the fabric connection: logged in.
PAGE 913
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN I/O Aggregator. 9.6(0.0) Supported on the M I/O Aggregator. Use the show qos dcb-map command to display the enhanced transmission selection (ETS) and priority-based flow control (PFC) parameters used to configure server-facing Ethernet ports. The following table describes the show qos dcb-map output shown in the example below.
PAGE 914
Version Description 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module.
PAGE 915
42 Open Shortest Path First (OSPFv2 and OSPFv3) The Switch supports open shortest path first version 2 (OSPFv2) for IPv4 and version 3 (OSPFv3) for IPv6. Up to 16 OSPF instances can be run simultaneously on the Switch. OSPF is an Interior Gateway Protocol (IGP), which means that it distributes routing information between routers in a single Autonomous System (AS). OSPF is also a link-state protocol in which all routers contain forwarding tables derived from information about their links to their neighbors.
PAGE 916
• ip ospf dead-interval • ip ospf hello-interval • ip ospf message-digest-key • ip ospf mtu-ignore • ip ospf network • ip ospf priority • ip ospf retransmit-interval • ip ospf transmit-delay • log-adjacency-changes • maximum-paths • mib-binding • network area • passive-interface • redistribute • redistribute bgp • redistribute isis • router-id • router ospf • show config • show ip ospf • show ip ospf asbr • show ip ospf database • show ip ospf database asbr-summa
PAGE 917
• debug ipv6 ospf • debug ipv6 ospf bfd • debug ipv6 ospf events • debug ipv6 ospf packet • debug ipv6 ospf spf • default-information originate • graceful-restart grace-period • graceful-restart mode • ipv6 ospf area • ipv6 ospf authentication • ipv6 ospf bfd all-neighbors • ipv6 ospf cost • ipv6 ospf dead-interval • ipv6 ospf encryption • ipv6 ospf graceful-restart helper-reject • ipv6 ospf hello-interval • ipv6 ospf priority • ipv6 router ospf • maximum-paths • passi
PAGE 918
Defaults cost = 1; no areas are configured. Command Modes ROUTER OSPF Supported Modes Full—Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information In the Dell Networking operating software, cost is defined as reference bandwidth. Related Commands area stub — creates a stub area. area nssa Specify an area as a not so stubby area (NSSA).
PAGE 919
Parameters area-id Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535. ip-address Specify an IP address in dotted decimal format. mask Specify a mask for the destination prefix. Enter the full mask (for example, 255.255.255.0). not-advertise (OPTIONAL) Enter the keywords not-advertise to set the status to DoNotAdvertise (that is, the Type 3 summary-LSA is suppressed and the component networks remain hidden from other areas.) Defaults Not configured.
PAGE 920
Usage Information To configure all routers and access servers within a stub, use this command. Related Commands router ospf — enters ROUTER OSPF mode to configure an OSPF instance. auto-cost Specify how the OSPF interface cost is calculated based on the reference bandwidth method. Syntax auto-cost [reference-bandwidth ref-bw] To return to the default bandwidth or to assign cost based on the interface type, use the no auto-cost [reference-bandwidth] command.
PAGE 921
clear ip ospf statistics Clear the packet statistics in interfaces and neighbors. Syntax Parameters clear ip ospf process-id statistics [interface name {neighbor router-id}] process-id Enter the OSPF Process ID to clear a specific process. If no Process ID is entered, all OSPF processes are cleared.
PAGE 922
database-timer rate-limit Command Modes EXEC Privilege Supported Modes Full—Switch Command History Usage Information 922 (OPTIONAL) Enter the keywords database-timer rate-limit to display the LSA throttling timer information. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the debug ip ospf command shown in the Example below. Field Description 8:14 Displays the time stamp.
PAGE 923
Field Example Description • N + (N-bit is set) • N - (N-bit is not set) • MC+ (bit used by MOSPF is set and router is able to forward IP multicast packets) • MC- (bit used by MOSPF is not set and router cannot forward IP multicast packets) • E + (router is able to accept AS External LSAs) • E - (router cannot accept AS External LSAs) • T + (router can support TOS) • T - (router cannot support TOS) hi: Displays the amount of time configured for the HELLO interval.
PAGE 924
Supported Modes Command History Related Commands Full—Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. redistribute — redistributes routes from other routing protocols into OSPF. default-metric Change the metrics of redistributed routes to a value useful to OSPF. Use this command with the redistribute command. Syntax default-metric number To return to the default values, use the no default-metric [number] command.
PAGE 925
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip ospf asbr — displays the VLAN configuration. distance Define an administrative distance for particular routes to a specific IP address. Syntax distance weight [ip-address mask access-list-name] To delete the settings, use the no distance weight [ip-address mask access-list-name] command. Parameters weight Specify an administrative distance. The range is from 1 to 255. The default is 110.
PAGE 926
• inter-area dist2 = 110 • intra-area dist1 = 110 Command Modes ROUTER OSPF Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To specify a distance for routes learned from other routing domains, use the redistribute command. distribute-list in Apply a filter to incoming routing updates from OSPF to the routing table.
PAGE 927
Parameters prefix-list-name Enter the name of a configured prefix list. bgp (OPTIONAL) Enter the keyword bgp to specify that BGP routes are distributed. connected (OPTIONAL) Enter the keyword connected to specify that connected routes are distributed. isis (OPTIONAL) Enter the keyword isis to specify that IS-IS routes are distributed. rip (OPTIONAL) Enter the keyword rip to specify that RIP routes are distributed.
PAGE 928
NOTE: The faster the convergence, the more frequent the route calculations and updates. This behavior impacts CPU utilization and may impact adjacency stability in larger topologies. Generally, convergence level 1 meets most convergence requirements. Higher convergence levels should only be selected following consultation with Dell Networking technical support. flood-2328 Enable RFC-2328 flooding behavior. Syntax flood-2328 To disable, use the no flood-2328 command. Defaults Disabled.
PAGE 929
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. graceful-restart helper-reject Specify the OSPF router to not act as a helper during graceful restart. Syntax graceful-restart helper-reject ip-address To return to default value, use the no graceful-restart helper-reject command. Parameters ip-address Defaults Not configured.
PAGE 930
graceful-restart role Specify the role for your OSPF router during graceful restart. Syntax graceful-restart role [helper-only | restart-only] To disable graceful restart role, use the no graceful-restart role command. Parameters role helper-only (OPTIONAL) Enter the keywords helper-only to specify the OSPF router is a helper only during graceful restart. role restart-only (OPTIONAL) Enter the keywords restart-only to specify the OSPF router is a restart only during graceful-restart.
PAGE 931
ip ospf authentication-key Enable authentication and set an authentication key on OSPF traffic on an interface. Syntax ip ospf authentication-key [encryption-type] key To delete an authentication key, use the no ip ospf authentication-key command. Parameters encryption-type (OPTIONAL) Enter 7 to encrypt the key. key Enter an eight-character string. Strings longer than eight characters are truncated. Defaults Not configured.
PAGE 932
ip ospf dead-interval Set the time interval since the last hello-packet was received from a router. After the interval elapses, the neighboring routers declare the router dead. Syntax ip ospf dead-interval seconds To return to the default values, use the no ip ospf dead-interval command. Parameters seconds Defaults 40 seconds Command Modes INTERFACE Supported Modes Full—Switch Command History Enter the number of seconds for the interval. The range is from 1 to 65535. The default is 40 seconds.
PAGE 933
ip ospf message-digest-key Enable OSPF MD5 authentication and send an OSPF message digest key on the interface. Syntax ip ospf message-digest-key keyid md5key To delete a key, use the no ip ospf message-digest-key keyid command. Parameters keyid Enter a number as the key ID. The range is from 1 to 255. key Enter a continuous character string as the password. Defaults No MD5 authentication is configured.
PAGE 934
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip ospf network Set the network type for the interface. Syntax ip ospf network {broadcast | point-to-point} To return to the default, use the no ip ospf network command. Parameters broadcast Enter the keyword broadcast to designate the interface as part of a broadcast network.
PAGE 935
Usage Information Setting a priority of 0 makes the router ineligible for election as a designated router or backup designated router. Use this command for interfaces connected to multi-access networks, not point-to-point networks. ip ospf retransmit-interval Set the retransmission time between lost link state advertisements (LSAs) for adjacencies belonging to the interface. Syntax ip ospf retransmit-interval seconds To return to the default values, use the no ip ospf retransmit-interval command.
PAGE 936
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. log-adjacency-changes To send a Syslog message about changes in the OSPF adjacency state, set the system. Syntax log-adjacency-changes To disable the Syslog messages, use the no log-adjacency-changes command. Defaults Disabled. Command Modes ROUTER OSPF Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 937
mib-binding Enable this OSPF process ID to manage the SNMP traps and process SNMP queries. Syntax mib-binding To mib-binding on this OSPF process, use the no mib-binding command. Defaults none. Command Modes ROUTER OSPF Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command is either enabled or disabled.
PAGE 938
Usage Information To enable OSPF on an interface, the network area command must include, in its range of addresses, the primary IP address of an interface. NOTE: An interface can be attached only to a single OSPF area. If you delete all the network area commands for Area 0, the show ip ospf command output does not list Area 0. passive-interface Suppress both receiving and sending routing updates on an interface.
PAGE 939
• Save passive-interface interface into the running configuration. passive-interface default • All present and future OSPF interfaces are marked as passive. • Any adjacency is explicitly terminated from all OSPF interfaces. • All previous passive-interface interface commands are removed from the running configuration. • All previous no passive-interface interface commands are removed from the running configuration. no passive-interface interface • Remove the interface from the passive list.
PAGE 940
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To redistribute the default route (0.0.0.0/0), configure the default-information originate command. Related Commands default-information originate — generates a default route into the OSPF routing domain. redistribute bgp Redistribute BGP routing information throughout the OSPF instance.
PAGE 941
To disable redistribution, use the no redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value | metric-type type-value] [route-map map-name] [tag tag-value] command. Parameters tag (OPTIONAL) Enter the name of the IS-IS routing process. level-1 (OPTIONAL) Enter the keywords level-1 to redistribute only IS-IS Level-1 routes. level-1-2 (OPTIONAL) Enter the keywords level-1-2 to redistribute both IS-IS Level-1 and Level-2 routes.
PAGE 942
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information You can configure an arbitrary value in the IP address format for each router. However, each router ID must be unique. If you use this command on an OSPF router process, which is already active (that is, has neighbors), a prompt reminding you that changing the router-id brings down the existing OSPF adjacency.
PAGE 943
Command Modes ROUTER OSPF Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-router_ospf)#show config ! router ospf 3 passive-interface FastEthernet 0/1 Dell(conf-router_ospf)# show ip ospf Display information on the OSPF process configured on the switch.
PAGE 944
Line Beginning with Description “Number of...” Displays the number and type of areas configured for this process ID. Example Dell#show ip ospf 10 Routing Process ospf 10 with ID 1.1.1.
PAGE 945
You can determine if an ASBR is in a directly connected area (or not) by the flags. For ASBRs in a directly connected area, E flags are set. In the following example, router 1.1.1.1 is in a directly connected area since the Flag is E/-/-/. For remote ASBRs, the E flag is clear (-/-/-/). Example Dell#show ip ospf 1asbr RouterID 3.3.3.3 1.1.1.1 Dell# Flags -/-/-/ E/-/-/ Cost Nexthop 2 10.0.0.2 0 0.0.0.0 Interface Area Gi 0/1 1 0 show ip ospf database Display all LSA information.
PAGE 946
13.1.1.1 13.1.1.1 676 0x80000097 0x1035 192.68.135.2 192.68.135.2 1419 0x80000294 0x9cbd Link ID 10.2.3.2 10.2.4.2 Link ID 0.0.0.0 1.1.1.1 10.1.1.0 10.1.2.0 10.2.2.0 10.2.3.0 10.2.4.0 11.1.1.0 11.1.2.0 12.1.2.0 13.1.1.0 13.1.2.0 172.16.1.0 Dell> Related Commands 2 1 Network (Area 0.0.0.0) ADV Router Age Seq# Checksum 13.1.1.1 676 0x80000003 0x6592 192.68.135.2 908 0x80000055 0x683e Type-5 AS External ADV Router Age Seq# 192.68.135.2 908 0x80000052 192.68.135.2 908 0x8000002a 11.1.2.1 718 0x80000002 11.1.
PAGE 947
Usage Information Example The following describes the show ip ospf database asbr-summary command shown in the following example. Field Description LS Age Displays the LSA’s age. Options Displays the optional capabilities available on router. The following options can be found in this item: • TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
PAGE 948
show ip ospf database external Display information on the AS external (type 5) LSAs. Syntax show ip ospf process-id database external [link-state-id] [adv-router ipaddress] Parameters process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 949
Example Field Description Checksum Displays the Fletcher checksum of the LSA’s complete contents. Length Displays the length in bytes of the LSA. Network Mask Displays the network mask implemented on the area. Metrics Type Displays the external type. TOS Displays the Type of Service (TOS) options. Option 0 is the only option. Metric Displays the LSA metric. Forward Address Identifies the address of the forwarding router. Data traffic is forwarded to this router.
PAGE 950
show ip ospf database network Display the network (type 2) LSA information. Syntax show ip ospf process-id database network [link-state-id] [adv-router ipaddress] Parameters process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 951
Example Field Description Length Displays the Fletcher checksum of an LSA’s complete contents. Network Mask Displays the length in bytes of the LSA. Attached Router Identifies the IP address of routers attached to the network. Dell#show ip ospf 1 data network OSPF Router with ID (20.20.20.5) (Process ID 1) Network (Area 0.0.0.0) LS age: 1372 Options: (No TOS-capability, DC, E) LS type: Network Link State ID: 202.10.10.2 Advertising Router: 20.20.20.
PAGE 952
Command Modes Supported Modes Command History Related Commands • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip ospf database — displays OSPF database information. show ip ospf database opaque-area Display the opaque-area (type 10) LSA information.
PAGE 953
Item Example Description • TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service. • DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits. • E or No E is displayed on whether the originating router can accept AS External LSAs. LS Type Displays the LSA’s type. Link State ID Displays the Link State ID. Advertising Router Identifies the advertising router’s ID.
PAGE 954
adv-router ipaddress Command Modes Supported Modes Command History Related Commands • EXEC • EXEC Privilege • the network’s IP address for Type 3 LSAs or Type 5 LSAs • the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs • the default destination (0.0.0.0) for Type 5 LSAs (OPTIONAL) Enter the keywords adv-router and the ip-address to display only the LSA information about that router. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 955
show ip ospf database router Display the router (type 1) LSA information. Syntax Parameters show ip ospf process-id database router [link-state-id] [adv-router ip-address] process-id Enter the OSPF Process ID to show a specific process. If you do not enter a process ID, the command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 956
Example Item Description Length Displays the length in bytes of the LSA. Number of Links Displays the number of active links to the type of router (Area Border Router or AS Boundary Router) listed in the previous line. Link connected to: Identifies the type of network to which the router is connected. (Link ID) Identifies the link type and address. (Link Data) Identifies the router interface address. Number of TOS Metric Lists the number of TOS metrics.
PAGE 957
(Link ID) Network/subnet number: 11.1.5.0 --More-Related Commands show ip ospf database — displays OSPF database information. show ip ospf database summary Display the network summary (type 3) LSA routing information. Syntax Parameters show ip ospf process-id database summary [link-state-id] [adv-router ipaddress] process-id Enter the OSPF process ID to show a specific process. If you do not enter a process ID, the command applies only to the first OSPF process.
PAGE 958
Example Item Description Advertising Router Identifies the router ID of the LSA’s originating router. LS Seq Number Displays the link state sequence number. This number allows you to identify old or duplicate LSAs. Checksum Displays the Fletcher checksum of an LSA’s complete contents. Length Displays the length in bytes of the LSA. Network Mask Displays the network mask implemented on the area. TOS Displays the TOS options. Option 0 is the only option. Metric Displays the LSA metrics.
PAGE 959
show ip ospf interface Display the OSPF interfaces configured. If OSPF is not enabled on the switch, no output is generated. Syntax Parameters Command Modes Supported Modes Command History Usage Information show ip ospf process-id interface [interface] process-id Enter the OSPF process ID to show a specific process. If you do not enter a process ID, the command applies only to the first OSPF process.
PAGE 960
Example Item Description Neighbor Count... This line displays the number of neighbors and adjacent neighbors. Listed below this line are the details about each adjacent neighbor. Dell>show ip ospf int TenGigabitEthernet 1/1 is up, line protocol is up Internet Address 192.168.1.2/30, Area 0.0.0.1 Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 192.168.253.2, Interface address 192.168.1.
PAGE 961
Example Item Description Neighbor ID Displays the neighbor router ID. Pri Displays the priority assigned neighbor. State Displays the OSPF state of the neighbor. Dead Time Displays the expected time until the system declares the neighbor dead. Address Displays the IP address of the neighbor. Interface Displays the interface type slot/port information. Area Displays the neighbor’s area (process ID). Dell#show ip ospf 34 neighbor Neighbor ID 20.20.20.7 192.10.10.2 20.20.20.
PAGE 962
Prefix Cost Nexthop 1.1.1.1 1 0.0.0.0 3.3.3.3 2 13.0.0.3 13.0.0.0 1 0.0.0.0 150.150.150.0 2 13.0.0.3 172.30.1.0 2 13.0.0.3 Dell# Interface Lo 0 Te 0/4 Te 0/4 Te 0/4 Te 0/4 Area 0 1 0 1 Type Intra-Area Intra-Area Intra-Area External Intra-Area show ip ospf statistics Display OSPF statistics. Syntax show ip ospf process-id statistics global | [interface name {neighbor routerid}] Parameters process-id Enter the OSPF Process ID to show a specific process.
PAGE 963
Row Heading Description DDiscr Number of database description packets. LSReq Number of link state request packets. LSUpd Number of link state update packets. LSAck Number of link state acknowledgement packets. TxQ-Len The transmission queue length. RxQ-Len The reception queue length. Tx-Mark The highest number mark in the transmission queue. Rx-Mark The highest number mark in the reception queue. Hello-Q The queue, for transmission or reception, for the hello packets.
PAGE 964
LSAck RX 2 TX 2 34 0 26 2 1 3 34 0 25 3 1 3 OSPF Global Queue Length TxQ-Len RxQ-Len Tx-Mark Rx-Mark Hello-Q 0 0 1 1 LSR-Q 0 0 1 1 Other-Q 0 0 2 2 Error packets (Receive statistics) Intf-Down 0 Non-Dr 0 Self-Org 0 Wrong-Len 0 Invld-Nbr 0 Nbr-State 0 Auth-Err 0 MD5-Err 0 Chksum 0 Version 0 AreaMis 0 Conf-Issues 0 No-Buffer 0 Seq-No 0 Socket 0 Q-OverFlow 0 Unknown-Pkt 0 RtidZero 0 Error packets (Transmit statistics) Socket Errors 0 Dell# Usage Information Example (Statistics) Related Commands
PAGE 965
show ip ospf timers rate-limit Show the LSA currently in the queue waiting for timers to expire. Syntax Parameters Defaults Command Modes Supported Modes Command History Example show ip ospf process-id timers rate-limit process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. none • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 966
Usage Information To isolate problems with inter-area and external routes, use this command. In OSPF inter-area and external routes are calculated by adding LSA cost to the cost of reaching the router. If an inter-area or external route is not of correct cost, the display can determine if the path to the originating router is correct or not. Example Dell#show ip ospf 1 topology Router ID 3.3.3.3 1.1.1.1 Dell# Flags Cost E/B/-/ 1 E/-/-/ 1 Nexthop 20.0.0.3 10.0.0.
PAGE 967
To return to the default, use the no timers spf command. Parameters delay Enter a number as the delay. The range is from 0 to 2147483647. The default is 5 seconds. holdtime Enter a number as the hold time. The range is from 0 to 2147483647. The default is 10 seconds. msec Enter the keyword msec to specify the time interval value in milli seconds. NOTE: If you do not specify the msec option, the timer values are considered as seconds.
PAGE 968
Defaults hold-interval Set the next interval to send the same LSA. This interval is the time between sending the same LSA after the start-interval has been attempted. The range is from 1 to 600,000 milliseconds. max-interval Set the maximum amount of time the system waits before sending the LSA. The range is from 1 to 600,000 milliseconds.
PAGE 969
OSPFv3 Commands The fundamental mechanisms of OSPF (flooding, DR election, area support, SPF calculations, and so on) remain unchanged. However, OSPFv3 runs on a per-link basis instead of on a per-IP-subnet basis. Most changes were necessary to handle the increased address size of IPv6. The Dell Networking implementation of OSPFv3 is based on IETF RFC 2740. area authentication Configure an IPsec authentication policy for OSPFv3 packets in an OFSPFv3 area.
PAGE 970
An SPI number must be unique to one IPsec security policy (authentication or encryption) on the router. If you have enabled IPsec encryption in an OSPFv3 area with the area encryption command, you cannot use the area authentication command in the area at the same time. The configuration of IPsec authentication on an interface-level takes precedence over an area-level configuration. If you remove an interface configuration, an area authentication policy that has been configured is applied to the interface.
PAGE 971
Valid values: 0 (key is not encrypted) or 7 (key is encrypted). key Text string used in authentication. For MD5 authentication, the key must be 32 hex digits (non-encrypted) or 64 hex digits (encrypted). For SHA-1 authentication, the key must be 40 hex digits (non-encrypted) or 80 hex digits (encrypted). null Defaults Not configured.
PAGE 972
no-redistribution (OPTIONAL) Specify that the redistribute command does not distribute routes into the NSSA. This command can be used when the router is an autonomous system boundary router (ASBR) or area border router (ABR). default-informationoriginate (OPTIONAL) Allows external routing information to be imported into the NSSA by using Type 7 default. no-summary (OPTIONAL) Specify that no summary LSAs should be sent into the NSSA. Defaults Not configured.
PAGE 973
Parameters ref-bw (OPTIONAL) Specify a reference bandwidth in megabits per second. The range is from 1 to 4294967. The default is 100 megabits per second. Defaults 100 megabits per second. Command Modes ROUTER OSPFv3 Supported Modes Full-Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 974
debug ipv6 ospf Display debug information and interface types on OSPF IPv6 packets or events. Syntax debug ipv6 ospf {packet | events} [interface] Parameters interface Command Modes EXEC Privilege Supported Modes Full—Switch Command History (OPTIONAL) Enter one of the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 975
Usage Information Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following section describes the command fields. Lines Beginning With or Including Description OSPFv3... Debugging is on for all OSPFv3 packets and all interfaces. 05:21:01 Displays the time stamp. Sending Ver:3 Sending OSPF3 version..
PAGE 976
• vrf vrf-name For a VLAN interface, enter the keyword vlan then a number from 1 to 4094. Enter the keyword vrf to view debugging information on OSPF corresponding to that VRF. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.
PAGE 977
Lines Beginning With or Including Description Chksum: Displays the OSPFv3 checksum. debug ipv6 ospf packet Display debug information and interface types on OSPF IPv6 packets. Syntax Parameters debug ipv6 ospf packet [interface] [vrf vrf-name] [detail] interface (OPTIONAL) Enter one of the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 978
Example Example (detail) Command Fields Lines Beginning With or Including Description OSPFv3... Debugging is on for all OSPFv3 packets and all interfaces. 05:21:01 Displays the time stamp. Sending Ver:3 Sending OSPF3 version.. type: Displays the type of packet sent: • 1 - Hello packet • 2 - database description • 3 - link state request • 4 - link state update • 5 - link state acknowledgement Length: Displays the OSPFv3 packet length. Router ID: Displays the OSPFv3 router ID.
PAGE 979
Usage Information Version Description 9.11.0.0 Introduced the command. The following section describes the command fields. Lines Beginning With or Including Description OSPFv3... Debugging is on for all OSPFv3 packets and all interfaces. 05:21:01 Displays the time stamp. Sending Ver:3 Sending OSPF3 version.. Example default-information originate Configure the system to generate a default external route into an OSPFv3 routing domain.
PAGE 980
graceful-restart grace-period Enable OSPFv3 graceful restart globally by setting the grace period (in seconds) that an OSPFv3 router’s neighbors continues to advertise the router as adjacent during a graceful restart. Syntax graceful-restart grace-period seconds To disable OSPFv3 graceful restart, enter no graceful-restart grace-period. Parameters seconds Time duration, in seconds, that specifies the duration of the restart process before OSPFv3 terminates the process.
PAGE 981
Command Modes ROUTER OSPFv3 Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. OSPFv3 graceful restart supports planned-only and/or unplanned-only restarts. The default is support for both planned and unplanned restarts. • A planned restart occurs when you enter the redundancy force-failover rpm command to force the primary RPM to switch to the backup RPM.
PAGE 982
To remove an IPsec authentication policy from an interface, use the no ipv6 ospf authentication spi number command. To remove null authentication on an interface to allow the interface to inherit the authentication policy configured for the OSPFv3 area, use the no ipv6 ospf authentication null command. Parameters null Causes an authentication policy configured for the area to not be inherited on the interface. ipsec spi number Security Policy index (SPI) value that identifies an IPsec security policy.
PAGE 983
To disable all BFD sessions on an OSPFv3 interface implicitly, use the no ipv6 ospf bfd all-neighbors disable command. Parameters disable (OPTIONAL) Enter the keyword disable to disable BFD on this interface. interval milliseconds (OPTIONAL) Enter the keyword interval to specify non-default BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 100.
PAGE 984
Defaults Default cost based on the bandwidth. Command Modes INTERFACE Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 985
To remove null authentication on an interface to allow the interface to inherit the authentication policy configured for the OSPFv3 area, use the no ipv6 ospf encryption null command. Parameters null Causes an encryption policy configured for the area to not be inherited on the interface. ipsec spi number Security Policy index (SPI) value that identifies an IPsec security policy. The range is from 256 to 4294967295. esp encryptionalgorithm Encryption algorithm used with ESP.
PAGE 986
An SPI value must be unique to one IPsec security policy (authentication or encryption) on the router. Configure the same encryption policy (same SPI and key) on each OSPFv3 interface in a link. ipv6 ospf graceful-restart helper-reject Configure an OSPFv3 interface to not act upon the Grace LSAs that it receives from a restarting OSPFv3 neighbor. Syntax ipv6 ospf graceful-restart helper-reject To disable the helper-reject role, use the no ipv6 ospf graceful-restart helper-reject command.
PAGE 987
Usage Information The time interval between hello packets must be the same for routers in a network. ipv6 ospf priority To determine the Designated Router for the OSPFv3 network, set the priority of the interface. Syntax ipv6 ospf priority number To return to the default time interval, use the no ipv6 ospf priority command. Parameters number Defaults 1 Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Enter the number as the priority.
PAGE 988
maximum-paths Enable the software to forward packets over multiple paths. Syntax maximum-paths number To disable packet forwarding over multiple paths, use the no maximum-paths command. Parameters number Specify the number of paths. The range is from 1 to 64. The default is 8 paths. Defaults 4 Command Modes ROUTER OSPF for OSPFv3 Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Added support for OSPFv3. 8.3.16.
PAGE 989
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Added support for OSPFv3. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, no interfaces are passive. Routing updates are sent to all interfaces on which the routing protocol is enabled.
PAGE 990
route-map mapname (OPTIONAL) Enter the keywords route-map then the name of an established route map. If the route map is not configured, the default is deny (to drop all routes). tag tag-value (OPTIONAL) Enter the keyword tag to set the tag for routes redistributed into OSPFv3. The range is from 0 to 4294967295 The default is 0. Defaults Not configured. Command Modes ROUTER OSPF for OSPFv2 ROUTER OSPFv3 for OSPFv3 Supported Modes Command History Full–Switch Version Description 9.9(0.
PAGE 991
Usage Information You can configure an arbitrary value in the IP address for each router. However, each router ID must be unique. If this command is used on an OSPFv3 process that is already active (has neighbors), all the neighbor adjacencies are brought down immediately and new sessions are initiated with the new router ID. Example Dell(conf)#router ospf 100 Dell(conf-router_ospf)#router-id 1.1.1.
PAGE 992
Parameters interface interface Defaults none Command Modes EXEC (OPTIONAL) Displays information about the SAs used on a specified OSPFv3 interface, where interface is one of the following values: • For a Port Channel interface, enter port-channel then the port channel number. • For a 10-Gigabit Ethernet interface, enter TenGigabitEthernet then the slot/ port number. • For a VLAN interface, enter vlan vlan-id. The valid VLAN IDs range is from 1 to 4094.
PAGE 993
Usage Information Version Description 9.2(0.0) Introduced on the M I/O Aggregator. The show crypto ipsec sa ipv6 command output displays security associations set up for OSPFv3 links in IPsec authentication and encryption policies on the router. show ipv6 ospf interface View OSPFv3 interface information.
PAGE 994
show ipv6 ospf neighbor Display the OSPF neighbor information on a per-interface basis. Syntax show ipv6 ospf neighbor [interface] Parameters interface Defaults none Command Modes EXEC (OPTIONAL) Enter the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
PAGE 995
Command Modes ROUTER OSPFv3 for OSPFv3 Supported Modes Full–Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version Description 9.11(0.0) Introduced the msec keyword. 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 996
43 Policy-based Routing (PBR) Policy-based routing (PBR) allows you to apply routing policies to specific interfaces. To enable PBR, create a redirect list and apply it to the interface. After the redirect list is applied to the interface, all traffic passing through the interface is subject to the rules defined in the redirect list. PBR is supported by the Dell Networking operating software (OS).
PAGE 997
ip redirect-group Apply a redirect list (policy-based routing) on an interface. You can apply multiple redirect lists to an interface by entering this command multiple times. Syntax ip redirect-group redirect-list-nametest [l2–switch] To remove a redirect list from an interface, use the no ip redirect-group name command. Parameters redirect-list-name Enter the name of a configured redirect list. l2–switch Enter the keyword l2–switch to enable PBR on Layer2 (switched) traffic.
PAGE 998
• show ip redirect-list – displays the redirect-list configuration. ip redirect-list Configure a redirect list and enter REDIRECT-LIST mode. Syntax ip redirect-list redirect-list-name To remove a redirect list, use the no ip redirect-list command. Parameters redirect-list-name Defaults none Command Modes CONFIGURATION Supported Modes Full—Switch Command History Enter the name of a redirect list. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 999
mask Enter a network mask in /prefix format (/x). any Enter the keyword any to specify that all traffic is subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address. destination Enter the IP address of the network or host to which the packets are sent.
PAGE 1000
• Parameters You can also use the no redirect {ip-address | slot/port}| tunnel tunnel-id}[track ]{ip-protocol-number [bit] | protocol-type} {source mask | any | host ip-address} {destination mask | any | host ip-address} [operator] command. ip-address Enter the IP address of the forwarding router. slot/port Enter the keyword slot / port followed by the slot/port information. ip-protocol-number Enter a number from 0 to 255 for the protocol identified in the IP protocol header.
PAGE 1001
Command Modes REDIRECT-LIST Supported Modes Full—Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Added the keyword track-id on the MXL. 9.4(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 8.4.2.1 Introduced on the C-Series. 8.4.2.0 Introduced on the E-Series TeraScale. seq Configure a filter with an assigned sequence number for the redirect list.
PAGE 1002
host ip-address Enter the keyword host then the IP address to specify a host IP address. destination Enter the IP address of the network or host to which the packets are sent. bit (OPTIONAL) For the TCP protocol type only, enter one or a combination of the following TCP flags: operator • fin = finish (no more data from the user) • psh = push function • rst = reset the connection • syn = synchronize sequence number • urg = urgent field (OPTIONAL) For the TCP and UDP parameters only.
PAGE 1003
show cam pbr Displaysthe PBR CAM content. Syntax Parameters show cam pbr {[interface interface] | stack—unit slot-number port-set number]} [summary] interface interface Enter the keyword interface then the name of the interface. stack–unit number Enter the keyword stack-unit then the slot number. The range is from 0 to 11 . port-set number Enter the keywords port-set then the port-pipe number. The range is from 0 to 0. summary Enter the keyword summary to view only the total number of CAM entries.
PAGE 1004
Parameters Command Modes Supported Modes Command History Example redirect-list-name • EXEC • EXEC Privilege Enter the name of a configured Redirect list. Full—Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for removing the Sonet interface on the MXL. 7.4.1.0 Introduced. Dell#show ip redirect-list explicit_tunnel IP redirect-list explicit_tunnel: Defined as: seq 5 redirect tunnel 1 track 1 tcp 155.55.2.0/24 222.22.2.
PAGE 1005
44 PIM-Sparse Mode (PIM-SM) The protocol-independent multicast (PIM) commands are supported by the Dell Networking Operating System (OS).
PAGE 1006
• ipv6 pim join-filter • ipv6 pim query-interval • ipv6 pim neighbor-filter • ipv6 pim register-filter • ipv6 pim rp-address • ipv6 pim rp-candidate • ipv6 pim sparse-mode • ipv6 pim spt-threshold • show ipv6 pim bsr-router • show ipv6 pim interface • show ipv6 pim neighbor • show ipv6 pim rp • show ipv6 pim tib IPv4 PIM-Sparse Mode Commands The following describes the IPv4 PIM-sparse mode (PIM-SM) commands.
PAGE 1007
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you use this command on a local VLT node, all multicast routes from the local PIM TIB, the entire multicast route table, and all the entries in the data plane are deleted. The local VLT node sends a request to the peer VLT node to download multicast routes learned by the peer.
PAGE 1008
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip pim bsr-border Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per interface. Syntax ip pim bsr-border To return to the default value, use the no ip pim bsr-border command. Defaults Disabled. Command Modes INTERFACE Supported Modes Full—Swtich Command History Usage Information Version Description 9.9(0.
PAGE 1009
Command Modes CONFIGURATION Supported Modes Full—Swtich Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip pim dr-priority Change the designated router (DR) priority for the interface. Syntax ip pim dr-priority priority-value To remove the DR priority value assigned, use the no ip pim dr-priority command.
PAGE 1010
Supported Modes Full—Switch Usage Information When you configure a join filter, it is applicable for both ingress and egress flows. There is no option to specify in or out parameters while configuring a join filter. Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Example Dell(conf)# ip access-list extended iptv-channels Dell(config-ext-nacl)# permit ip 10.1.2.3/24 225.1.1.
PAGE 1011
Parameters access-list Defaults none Command Modes CONFIGURATION Supported Modes Full—Switch Command History Usage Information Enter the name of a standard access list. Maximum 16 characters. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Do not enter this command before creating the access-list. ip pim query-interval Change the frequency of PIM Router-Query messages.
PAGE 1012
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The access name is an extended IP access list that denies PIM register packets to RP at the source DR based on the multicast and group addresses. Do not enter this command before creating the access-list. ip pim rp-address Configure a static PIM rendezvous point (RP) address for a group or access-list.
PAGE 1013
Parameters interface For a Loopback interface, enter the keyword loopback then a number from 0 to 16383. • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. (OPTIONAL) Enter the priority used in Bootstrap election process. The range is zero (0) to 255. The default is 192.
PAGE 1014
ip pim sparse-mode sg-expiry-timer Enable expiry timers globally for all sources, or for a specific set of (S,G) pairs an access list defines. Syntax ip pim sparse-mode sg-expiry-timer seconds [access-list name] To disable configured timers and return to default mode, use the no ip pim sparse-mode sg-expirytimer command. Parameters seconds Enter the number of seconds the S, G entries are retained. The range is from 211 to 86400.
PAGE 1015
no ip pim snooping dr-flood Disable the flooding of multicast packets to the PIM designated router. Syntax no ip pim snooping dr-flood To re-enable the flooding of multicast packets to the PIM designated router, use the ip pim snooping drflood command. Defaults Enabled. Command Modes CONFIGURATION Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1016
Example E600-7-rpm0#show ip pim bsr-router PIMv2 Bootstrap information This system is the Bootstrap Router (v2) BSR address: 7.7.7.7 (?) Uptime: 16:59:06, BSR Priority: 0, Hash mask length: 30 Next bootstrap message in 00:00:08 This system is a candidate BSR Candidate BSR address: 7.7.7.7, priority: 0, hash mask length: 30 show ip pim interface View information on the interfaces with IP PIM enabled.
PAGE 1017
172.21.110.1 172.21.203.1 te 1/6 te 1/7 v2/S 0 v2/S 0 30 1 30 1 172.21.110.1 172.21.203.1 show ip pim neighbor View PIM neighbors. Syntax Command Modes Supported Modes Command History Usage Information show ip pim neighbor • EXEC • EXEC Privilege Full—Swtich Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim neighbor command shown in the following example.
PAGE 1018
Parameters Command Modes Supported Modes Command History mapping (OPTIONAL) Enter the keyword mapping to display the multicast groups-to-RP mapping and information on how RP is learnt. group-address (OPTIONAL) Enter the multicast group address mask in dotted decimal format to view RP for a specific group. • EXEC • EXEC Privilege Full—Swtich Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1019
• Supported Modes Command History Usage Information Example (#2) EXEC Privilege Full—Swtich Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim snooping interface commands shown in the following example. Field Description Interface Displays the VLAN interfaces with PIM-SM snooping enabled.
PAGE 1020
Usage Information The following describes the show ip pim snooping neighbor commands shown in the following example. Field Description Neighbor address Displays the IP address of the neighbor learned through PIM-SM snooping. Interface Displays the VLAN ID number and slot/port on which the PIM-SM-enabled neighbor was discovered.
PAGE 1021
Usage Information Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim snooping tib commands shown in the following example. Field Description (S, G) Displays the entry in the PIM multicast snooping database. uptime Displays the amount of time the entry has been in the PIM multicast route table. expires Displays the amount of time until the entry expires and is removed from the database.
PAGE 1022
(165.87.1.7, 225.1.2.1), uptime 00:00:08, expires 00:02:52, flags: j Incoming interface: Vlan 2, RPF neighbor 0.0.0.0 Outgoing interface list: TenGigabitEthernet 4/7 Upstream Port -/TenGigabitEthernet 4/6 DR Port -/TenGigabitEthernet 4/8 RPF 165.87.32.10 00:00:08/00:02:52 show ip pim summary View information about PIM-SM operation. Syntax show ip pim summary Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege Full—Swtich Version Description 9.9(0.
PAGE 1023
0/0 register messages sent/received Memory usage: TIB Nexthop cache Interface table Neighbor table RP Mapping : : : : : 3768 bytes 0 bytes 992 bytes 528 bytes 0 bytes show ip pim tib View the PIM tree information base (TIB). Syntax Parameters Command Modes Supported Modes Command History Usage Information show ip pim tib [group-address [source-address]] group-address (OPTIONAL) Enter the group address in dotted decimal format (A.B.C.D).
PAGE 1024
Example Field Description Incoming interface Displays the reverse path forwarding (RPF) interface towards the RP/ source. RPF neighbor Displays the next hop from this interface towards the RP/source.
PAGE 1025
Example Dell#show running-config pim ! ip pim snooping enable Related Commands ip pim sparse-mode — enables PIM-SM snooping. IPv6 PIM-Sparse Mode Commands The following describes the IPv6 PIM-sparse mode (PIM-SM) commands. ipv6 pim bsr-border Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per interface. Syntax ipv6 pim bsr-border Defaults Disabled. Command Modes INTERFACE Supported Modes Full—Swtich Command History Usage Information Version Description 9.
PAGE 1026
Defaults Refer to Parameters. Command Modes CONFIGURATION Supported Modes Full—Swtich Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 pim dr-priority Change the designated router (DR) priority for the IPv6 interface. Syntax ipv6 pim dr-priority priority-value To remove the DR priority value assigned, use the no ipv6 pim dr-priority command.
PAGE 1027
Supported Modes Command History Example Full—Swtich Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1028
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Do not enter this command before creating the access-list. ipv6 pim register-filter Configure the source DR so that it does not send register packets to the RP for the specified sources and groups.
PAGE 1029
override Enter the keyword override to override the BSR updates with static RP. The override takes effect immediately during enable/disable. NOTE: This option is applicable to multicast group range. Defaults none Command Modes CONFIGURATION Supported Modes Full—Swtich Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The RP addresses are stored in the order in which they are entered.
PAGE 1030
ipv6 pim sparse-mode Enable IPv6 PIM sparse mode on the interface. Syntax ipv6 pim sparse-mode To disable IPv6 PIM sparse mode, use the no ipv6 pim sparse-mode command. Defaults Disabled. Command Modes INTERFACE Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Enable the interface (use the no shutdown command) and not have the switchport command configured.
PAGE 1031
show ipv6 pim bsr-router View information on the Bootstrap router (v2). Syntax Command Modes Supported Modes Command History Example show ipv6 pim bsr-router • EXEC • EXEC Privilege Full—Swtich Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1032
DR : this router Dell# show ipv6 pim neighbor Displays IPv6 PIM neighbor information. Syntax show ipv6 pim neighbor [detail] Parameters Supported Modes Command Modes Command History Example detail (OPTIONAL) Enter the keyword detail to displayed PIM neighbor detailed information. Full—Swtich • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1033
Example Dellshow ipv6 pim rp Group RP ff0e::225:1:2:1 14::1 ff0e::225:1:2:2 14::1 ff0e::226:1:2:1 14::1 ff0e::226:1:2:2 14::1 Dell Example (Mapping) Dellshow ipv6 pim rp mapping PIM Group-to-RP Mappings Group(s): ff00::/8 RP: 14::1, v2 Info source: 14::1, via bootstrap, priority 192 Uptime: 00:03:37, expires: 00:01:53 Group(s): ff00::/8, Static RP: 14::2, v2 Dell show ipv6 pim tib View the IPv6 PIM multicast-routing database (tree information base — tib).
PAGE 1034
TenGigabitEthernet 1/1 (25::1, ff0e::225:1:2:2), uptime 00:09:54, expires 00:00:00,flags: CJ RPF neighbor: TenGigabitEthernet 0/3, fe80::201:e8ff:fe00:6265 Outgoing interface list: TenGigabitEthernet 1/1 (25::2, ff0e::225:1:2:2), uptime 00:09:54, expires 00:00:00,flags: CJ RPF neighbor: TenGigabitEthernet 0/3, fe80::201:e8ff:fe00:6265 Outgoing interface list: TenGigabitEthernet 1/1 (25::1, ff0e::226:1:2:1), uptime 00:09:54, expires 00:00:00,flags: CJ RPF neighbor: TenGigabitEthernet 0/3, fe80::201:e8ff:fe00
PAGE 1035
45 Port Monitoring The port monitoring feature allows you to monitor network traffic by forwarding a copy of each incoming or outgoing packet from one port to another port. Important Points to Remember • Port monitoring is supported on physical ports only. Port-channel interfaces and virtual local area networks (VLANs), are not supported. • The monitoring (destination, “MG”) and monitored (source, “MD”) ports must be on the same switch.
PAGE 1036
description Enter a description of this monitoring session. Syntax description {description} To remove the description, use the no description {description} command. Parameters description Enter a description regarding this session (80 characters maximum). Defaults none Command Modes MONITOR SESSION (conf-mon-sess-session-ID) Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.
PAGE 1037
Related Commands Version Description 9.11(0.0) Introduced GRE protocol support. • monitor session — creates a session for monitoring traffic with port monitoring. • show monitor session — displays information about monitor configurations. flow-based enable Enable flow-based monitoring. Syntax flow-based enable To disable flow-based monitoring, use the no flow-based enable command. Defaults Disabled, that is flow-based monitoring is not applied.
PAGE 1038
Supported Modes Full—Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Introduced on the MXL 10/40GbE Switch IO Module. monitor session — enables a monitoring session.
PAGE 1039
Usage Information The monitor command is saved in the running configuration at Monitor Session mode level and can be restored after a chassis reload. Example Dell(conf)# monitor session 60 Dell(conf-mon-sess-60) Related Command show monitor session — displays the monitor session. show running-config monitor session — displays the running configuration of a monitor session. show config Display the current monitor session configuration.
PAGE 1040
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. Dell#show monitor session 5 SessionID Source Destination Direction Mode --------- ---------------- --------- ---5 Te 0/4 Te 0/3 rx interface Dell# Related Commands Type ---Port-based monitor session — creates a session for monitoring. show running-config monitor session Displays the running configuration of all monitor sessions or a specific session.
PAGE 1041
source (port monitoring) Configure a port monitor source. Syntax source interface destination interface direction {rx | tx | both} To disable a monitor source, use the no source interface destination interface direction {rx | tx | both} command. Parameters interface Enter the one of the following keywords and slot/port information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1042
46 Private VLAN (PVLAN) Private VLANs extend the Dell Networking OS security suite by providing Layer 2 isolation between ports within the same private VLAN. A private VLAN partitions a traditional VLAN into subdomains identified by a primary and secondary VLAN pair. The Dell Networking OS private VLAN implementation is based on RFC 3069. For more information, refer to the following commands. The command output is augmented in the Dell Networking OS version 7.8.1.
PAGE 1043
Topics: • ip local-proxy-arp • private-vlan mapping secondary-vlan • private-vlan mode • show interfaces private-vlan • show vlan private-vlan • show vlan private-vlan mapping • switchport mode private-vlan ip local-proxy-arp Enable/disable Layer 3 communication between secondary VLANs in a private VLAN. Syntax [no] ip local-proxy-arp To disable Layer 3 communication between secondary VLANs in a private VLAN, use the no ip local-proxyarp command in INTERFACE VLAN mode for the primary VLAN.
PAGE 1044
private-vlan mapping secondary-vlan Map secondary VLANs to the selected primary VLAN. Syntax [no] private-vlan mapping secondary-vlan vlan-list To remove specific secondary VLANs from the configuration, use the no private-vlan mapping secondary-vlan vlan-list command syntax. Parameters vlan-list Defaults none Command Modes INTERFACE VLAN Supported Modes Full—Switch Command History Usage Information Related Commands Enter the list of secondary VLANs to associate with the selected primary VLAN.
PAGE 1045
isolated Enter the keyword isolated to configure the VLAN as an isolated VLAN. primary Enter the keyword primary to configure the VLAN as a primary VLAN. Defaults none Command Modes INTERFACE VLAN Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The VLAN: • can be in only one mode, either community, isolated, or primary.
PAGE 1046
Supported Modes Command History Usage Information Full—Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command has two types of display — a list of all PVLAN interfaces or for a specific interface. Examples of both types of output are shown below. The following describes the show interfaces private-vlan command shown in the following examples.
PAGE 1047
Defaults Command Modes Supported Modes Command History Usage Information isolated (OPTIONAL) Enter the keyword isolated to display VLANs configured as isolated VLANs, along with their interfaces. primary (OPTIONAL) Enter the keyword primary to display VLANs configured as primary VLANs, along with their interfaces. primary_vlan (OPTIONAL) Enter a private VLAN ID or secondary VLAN ID to display interface details about the designated PVLAN.
PAGE 1048
Example (Isolated) Dell# show vlan private-vlan isolated Primary Secondary Type Active Ports ------- --------- --------- ------ ---------10 primary Yes Gi 2/1,3 100 isolated Yes Gi 2/2,4-6 200 isolated Yes Gi 3/2,4-6 Example (Community) Dell# show vlan private-vlan community Primary Secondary Type Active Ports ------- --------- --------- ------ ----------10 primary Yes Gi 2/1,3 101 community Yes Gi 2/7-10 20 primary Yes Po 10, 12-13 Gi 3/1 201 community No 202 community Yes Gi 3/11-12 Example (Specific)
PAGE 1049
• Supported Modes Command History EXEC Privilege Full—Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced the on MXL 10/40GbE Switch IO Module. Usage Information The output of this command, shown below, displays the community and isolated VLAN IDs that are associated with each primary VLAN.
PAGE 1050
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The assignment of the various PVLAN port types to port and port channel (LAG) interfaces is shown in the following example.
PAGE 1051
47 Per-VLAN Spanning Tree Plus (PVST+) The Dell Networking Operating System (OS) implementation of per-VLAN spanning tree plus (PVST+) is based on the IEEE 802.1w standard spanning tree protocol, but it creates a separate spanning tree for each VLAN configured. NOTE: For easier command line entry, the plus (+) sign is not used at the command line.
PAGE 1052
Related Commands protocol spanning-tree pvst — enter SPANNING TREE mode on the switch. disable Disable PVST+ globally. Syntax disable To enable PVST+, use the no disable command. Defaults Disabled. Command Modes CONFIGURATION (conf-pvst) Supported Modes Full—Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol spanning-tree pvst — enter PVST+ mode.
PAGE 1053
Supported Modes Command History Example Full—Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-pvst)#do show spanning-tree pvst vlan 2 brief VLAN 2 Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 001e.c9f1.00f3 Root Bridge hello time 2, max age 20, forward delay 15 Bridge ID Priority 32768, Address 001e.c9f1.
PAGE 1054
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#conf Dell(conf)#protocol spanning-tree pvst Dell(conf-pvst)#no disable Dell(conf-pvst)#vlan 2 bridge-priority 4096 Dell(conf-pvst)#vlan 3 bridge-priority 16384 Dell(conf-pvst)# Dell(conf-pvst)#show config ! protocol spanning-tree pvst no disable vlan 2 bridge-priority 4096 vlan 3 bridge-priority 16384 Dell# Usage Information After you enable PVST+, the device runs an STP instance for each VLAN it supports.
PAGE 1055
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show spanning-tree pvst command shown in the following examples. Field Description Interface Name PVST interface. Instance PVST instance. Sts Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS), blocking (BLK), or shut down (EDS Shut). Guard Type Type of STP guard configured (Root, Loop, or BPDU guard).
PAGE 1056
Port 450 (TenGigabitEthernet 0/1) is disabled Discarding Port path cost 2000, Port priority 128, Port Identifier 128.450 Designated root has priority 32768, address 001e.c9f1.00:f3 Designated bridge has priority 32768, address 001e.c9f1.00:f3 Designated port id is 128.
PAGE 1057
spanning-tree pvst Configure a PVST+ interface with one of these settings: edge port with optional bridge port data unit (BPDU) guard, port disablement if an error condition occurs, port priority or cost for a VLAN range, loop guard, or root guard. Syntax Parameters spanning-tree pvst {edge-port [bpduguard [shutdown-on-violation]] | bpdufilter] | err-disable | vlan vlan-range {cost number | priority value} | rootguard} edge-port Enter the keywords edge-port to configure the interface as a PVST+ edge port.
PAGE 1058
Disable state if a BPDU appears, and a message is logged so that the administrator can take corrective action. When BPDU guard and BPDU filter is enabled on the port, then BPDU filter takes the highest precedence. NOTE: A port configured as an edge port, on a PVST switch, will immediately transition to the forwarding state. Only ports connected to end-hosts should be configured as an edge port. Consider an edge port similar to a port with a spanning-tree portfast enabled.
PAGE 1059
tc-flush-standard Enable the MAC address flushing after receiving every topology change notification. Syntax tc-flush-standard To disable, use the no tc-flush-standard command. Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, the system implements an optimized flush mechanism for PVST+.
PAGE 1060
show spanning-tree pvst — displays the PVST+ configuration. vlan forward-delay Set the amount of time the interface waits in the Listening state and the Learning state before transitioning to the Forwarding state. Syntax vlan vlan-id forward-delay seconds To return to the default setting, use the no vlan forward-delay command. Parameters vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094.
PAGE 1061
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. vlan bridge-priority — sets the bridge-priority value. vlan forward-delay — changes the time interval before the system transitions to the forwarding state. vlan max-age — changes the time interval before PVST+ refreshes. show spanning-tree pvst — displays the PVST+ configuration.
PAGE 1062
48 Quality of Service (QoS) The Dell Networking operating software commands for quality of service (QoS) include traffic conditioning and congestion control. QoS commands are not universally supported on all Dell Networking Products. Global Configuration Commands There are only two global configuration QoS commands. qos-rate-adjust By default, while rate limiting, policing, and shaping, the system does not include the Preamble, SFD, or the IFG fields.
PAGE 1063
0 0-7 1 0-7 2 0-7 3 0-7 4 0-7 5 0-7 6 0-7 7 0-7 Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full-Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. To apply dot1p-queue-mapping, use the service-class dynamic dot1p command.
PAGE 1064
dot1p Queue Number 5 5 6 6 7 7 Defaults none Command Modes INTERFACE Supported Modes Programmable-Mux (PMUX) Full-Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The dot1p-priority command changes the priority of incoming traffic on the interface.
PAGE 1065
Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. NOTE: Per port rate police is supported for Layer 2 tagged and untagged switched traffic and for Layer 3 traffic. Per VLAN rate police is supported on only tagged ports with Layer 2 switched traffic.
PAGE 1066
service-class dynamic dot1p Honor all 802.1p markings on incoming switched traffic on an interface (from INTERFACE mode) or on all interfaces (from CONFIGURATION mode). A CONFIGURATION mode entry supersedes an INTERFACE mode entry. Syntax service-class dynamic dot1p To return to the default setting, use the no service-class dynamic dot1p command. Defaults All dot1p traffic is mapped to Queue 0 unless you enable the service-class dynamic dot1p command.
PAGE 1067
service-class bandwidth-percentage Specify a minimum bandwidth for queues. Syntax Parameters service-class bandwidth-percentage queue0 number queue1 number queue2 number queue3 number number Enter the bandwidth-weight, as a percentage. The range is from 1 to 100. Defaults none Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full-Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.
PAGE 1068
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. After you configure a unicast queue as strict-priority, that particular queue, on the entire chassis, is treated as a strict-priority queue. Traffic for a strict priority is scheduled before any other queues are serviced.
PAGE 1069
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The unit of bandwidth percentage is 1%. A bandwidth percentage of 0 is allowed and disables the scheduling of that class. If the sum of the bandwidth percentages given to all eight classes exceeds 100%, the bandwidth percentage automatically scales down to 100%. Related Commands qos-policy-output — creates a QoS output policy. class-map Create/access a class map.
PAGE 1070
match ip dscp configures the match criteria based on the DSCP value. match ip access-group — configures a match criterion for a class map based on the contents of the designated MAC ACL. match mac dot1p — configures a match criterion for a class map based on a dot1p value. match mac vlan — configures a match criterion for a class map based on VLAN ID. service-queue — assigns a class map and QoS policy to different queues. show qos class-map — views the current class map information.
PAGE 1071
Command Modes CONFIGURATION Supporting Modes Full–Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the S6000–ON. 9.5(0.
PAGE 1072
match ip access-group Configure match criteria for a class map, based on the access control list (ACL). Syntax match ip access-group access-group-name [set-ip-dscp value] To remove ACL match criteria from a class map, use the no match ip access-group access-groupname [set-ip-dscp value] command. Parameters access-group-name Enter the ACL name whose contents are used as the match criteria in determining if packets belong to the class the class-map specifies.
PAGE 1073
Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Introduced on the MXL switch. To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria. Use this command to match an IP class-map against a single VLAN ID . Related Commands class-map — identifies the class map. match ip vrf Uses a VRF as the match criterion for an L3 class map.
PAGE 1074
Parameters description Enter a description to identify the policies (80 characters maximum). Defaults none Command Modes CONFIGURATION (policy-map-input and policy-map-output; conf-qos-policy-in and conf-qos-policy-out; wred) Supported Modes Programmable-Mux (PMUX) Full-Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.
PAGE 1075
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria. The match ip dscp and match ip precedence commands are mutually exclusive. Up to 64 IP DSCP values can be matched in one match statement. For example, to indicate IP DCSP values 0 1 2 3 4 5 6 7, enter either the match ip dscp 0,1,2,3,4,5,6,7 or match ip dscp 0-7 command.
PAGE 1076
The match ip precedence command and the match ip dscp command are mutually exclusive. Up to eight precedence values can be matched in one match statement. For example, to indicate the IP precedence values 0 1 2 3, enter either the match ip precedence 0-3 or match ip precedence 0,1,2,3 command. NOTE: Only one of the IP precedence values must be a successful match criterion, not all of the specified IP precedence values must match. Related Commands class-map — identifies the class map.
PAGE 1077
Usage Information To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria. Related Commands class-map — identifies the class map. match mac vlan Configure a match criterion for a class map based on VLAN ID. Syntax Parameters match mac vlan number number Defaults none Command Modes CLASS-MAP Supported Modes Full–Switch Command History Enter the VLAN ID. The range is from 1 to 4094. Version Description 9.9(0.
PAGE 1078
Usage Information Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Aggregate input/output QoS policy applies to all the port ingoing/outgoing traffic. Aggregate input/output QoS policy can coexist with per queue input/output QoS policies. 1 If only aggregate input QoS policy exists, input traffic conditioning configurations (rate-police) apply. Any marking configurations in aggregate input QoS policy are ignored.
PAGE 1079
policy-map-output Create an output policy map. Syntax policy-map-output policy-map-name To remove a policy map, use the no policy-map-output policy-map-name command. Parameters policy-map-name Enter the name for the policy map in character format (32 characters maximum). Defaults none Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.
PAGE 1080
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To specify the name of the input QoS policy, use this command. After the input policy is specified, rate-police is defined. This command enables Qos-Policy-Input Configuration mode — (conf-qos-policy-in).
PAGE 1081
rate police Police the incoming traffic rate on the selected interface. Syntax Parameters rate police [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burst-KB]] kbps Enter the keyword kbps to specify the rate limit in Kilobits per second (Kbps). Make the following value a multiple of 64. The range is from 0 to 40000000. The default granularity is Megabits per second (Mbps). committed-rate Enter the bandwidth in Mbps. The range is from 0 to 10000.
PAGE 1082
Command Modes QOS-POLICY-OUT Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When you apply rate-shape in QoS policy both on the Queue Level and in Aggregate mode, the queue-based shaping occurs first then aggregate rate shaping. service-policy input Apply an input policy map to the selected interface.
PAGE 1083
service-policy output Apply an output policy map to the selected interface. Syntax service-policy output policy-map-name To remove the output policy map from the interface, use the no service-policy output policy-mapname command. Parameters policy-map-name Enter the name for the policy map in character format (16 characters maximum). You can identify an existing policy map or name one that does not yet exist.
PAGE 1084
qos-policy qospolicy-name (OPTIONAL) Enter the keywords qos-policy then the QoS policy name assigned to the queue in text format (32 characters maximum). This specifies the input QoS policy assigned to the queue under policy-map-input and output QoS policy under policy-map-output context. Defaults none Command Modes CONFIGURATION (conf-policy-map-in and conf-policy-map-out) Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM.
PAGE 1085
show qos class-map View the current class map information. Syntax Parameters Defaults Command Modes Supported Modes Command History Example show qos class-map [class-name] class-name (Optional) Enter the name of a configured class map. none • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1086
The following table describes the show qos dcb-map output shown in the example below. Example Field Description State Complete: All mandatory DCB parameters are correctly configured. In progress: The DCB map configuration is not complete. Some mandatory parameters are not configured. PFC Mode PFC configuration in DCB map: On (enabled) or Off. PG Priority group configured in the DCB map. TSA Transmission scheduling algorithm used by the priority group: Enhanced Transmission Selection (ETS).
PAGE 1087
• Supported Modes Command History Example (IPv4) EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1088
Example Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show qos policy-map-input Policy-map-input PolicyMapInput Aggregate Qos-policy-name AggPolicyIn Queue# Class-map-name Qos-policy-name 0 ClassMap1 qosPolicyInput Dell# show qos qos-policy-output View the output QoS policy details. Syntax show qos qos-policy-output [qos-policy-name] Parameters Defaults qos-policy-name Enter the QoS policy name.
PAGE 1089
Parameters Defaults Command Modes Supported Modes Command History Example qos-policy-name Enter the QoS policy name. none • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show qos qos-policy-input Qos-policy-input QosInput Rate-police 100 50 peak 100 50 Dscp 32 Dell# show qos qos-policy-output View the output QoS policy details.
PAGE 1090
show qos statistics View QoS statistics. Syntax show qos statistics {egress—queue [interface]} | {wred-profile [interface]} | [interface Parameters egress-queue interface Enter the keyword egress-queue to display the egress-queue statistics and optionally one of the fo or number information.
PAGE 1091
show qos wred-profile View the WRED profile details. Syntax Parameters Defaults Command Modes Supported Modes Command History Example show qos wred-profile wred-profile-name wred-profile-name Enter the WRED profile name to view the profile details. none • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1092
Usage Information This feature allows you to determine if the CAM has enough space available before applying the configuration on an interface. An input policy map with both Trust and Class-map configuration, the Class-map rules are ignored and only the Trust rule is programmed in the CAM. In such an instance, the Estimated CAM output column contains the size of the CAM space required for the Trust rule and not the Class-map rule.
PAGE 1093
trust Specify dynamic classification (DSCP) or dot1p to trust. Syntax Parameters trust {diffserv [fallback]| dot1p [fallback]} diffserv Enter the keyword diffserv to specify trust of DSCP markings. dot1p Enter the keyword dot1p to specify trust dot1p configuration. fallback Enter the keyword fallback to classify packets according to their DSCP value as a secondary option in case no match occurs against the configured class maps.
PAGE 1094
wred Designate the WRED profile to yellow or green traffic. Syntax wred [[{yellow | green} profile-name] ecn] To remove the WRED drop precedence, use the no wred {yellow | green} [profile-name] command. Parameters yellow | green Enter the keyword yellow for yellow traffic. A DSCP value of xxx110 and xxx101 maps to yellow. Enter the keyword green for green traffic. A DSCP value of xxx0xx maps to green. profile-name Enter your WRED profile name in character format (16 character maximum).
PAGE 1095
Command Modes CONFIGURATION (conf-qos-policy-out) Supported Modes Full–Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.0.2.0 Introduced on the S6000. 8.3.19.0 Introduced on the S4820t. 8.3.11.
PAGE 1096
Defaults The five pre-defined WRED profiles. When you configure a new profile, the minimum and maximum threshold defaults to predefined wred_ge_g values. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Use the default pre-defined profiles or configure your own profile.
PAGE 1097
The default setting for each DSCP value (0-63) is green (low drop precedence). This command allows setting the number of specific DSCP values to yellow or red. Important Points to Remember • All DSCP values that are not specified as yellow or red are colored green. • A DSCP value cannot be in both the yellow and red lists. Setting the red or yellow list with any DSCP value that is already in the other list results in an error and no update to that list is made.
PAGE 1098
Related Commands qos dscp-color-map — associates the DSCP color map profile with an interface so that all IP packets received on it is given a color based on that color map dscp — sets the number of specific DSCP values for color map profile to yellow or red. qos dscp-color-policy Associates the DSCP color map profile with an interface so that all IP packets received on it is given a color based on that color map.
PAGE 1099
Parameters summary Enter the summary keyword to display summary information about a color policy on one or more interfaces. Detail Enter the detail keyword to display detailed information about a color policy on one or more interfaces. interface Enter the name of the interface that has color policy configured. Defaults None Command Modes EXEC Supported Modes Full-Switch Command History This guide is platform-specific.
PAGE 1100
Example Display all DSCP color maps. Dell# show qos dscp-color-map Dscp-color-map mapONE yellow 4,7 red 20,30 Dscp-color-map mapTWO yellow 16,55 Display a specific DSCP color map. Dell# show qos dscp-color-map mapTWO Dscp-color-map mapTWO yellow 16,55 Related Commands show qos dscp-color-policy — displays a DSCP Color Policy Configuration show qos dot1p-queue-mapping View dot1p to queue mapping.
PAGE 1101
fallback Enter the keyword fallback to classify packets according to their DSCP value as a secondary option in case no match occurs against the configured class maps. Defaults none Command Modes CONFIGURATION (conf-policy-map-in) Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 1102
49 Routing Information Protocol (RIP) Routing information protocol (RIP) is a distance vector routing protocol. The Dell Networking Operating System (OS) supports both RIP version 1 (RIPv1) and RIP version 2 (RIPv2). The implementation of RIP is based on IETF RFCs 2453 and RFC 1058. For more information about configuring RIP, refer to the Dell Networking OS Configuration Guide.
PAGE 1103
To send sub-prefix routing information, use the no auto-summary command. Defaults Enabled. Command Modes ROUTER RIP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. clear ip rip Update all the RIP routes in the routing table. Syntax clear ip rip Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.
PAGE 1104
trigger Command Modes EXEC Privilege Supported Modes Full–Switch Command History (OPTIONAL) Enter the keyword trigger to debug only RIP trigger extensions. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. default-information originate Generate a default route for the RIP traffic.
PAGE 1105
Parameters number Defaults 1 Command Modes ROUTER RIP Supported Modes Full–Switch Command History Specify a number. The range is from 1 to 16. The default is 1. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command ensures that route information being redistributed is converted to the same metric value. Related Commands redistribute — allows you to redistribute routes learned by other methods.
PAGE 1106
mask If you enter an IP address, also enter a mask for that IP address, in either dotted decimal format or /prefix format (/x). prefix-name (OPTIONAL) Enter a configured prefix list name. Defaults weight = 120 Command Modes ROUTER RIP Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1107
distribute-list out Configure a filter for outgoing routing updates. Syntax distribute-list prefix-list-name out [interface | bgp | connected | ospf | static] To delete the filter, use the no distribute-list prefix-list-name out command. Parameters prefix-list-name Enter the name of a configured prefix list. interface (OPTIONAL) Identifies the interface type slot/port as one of the following: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1108
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip split-horizon — sets the RIP routing updates to exclude routing prefixes. ip rip receive version To receive specific versions of RIP, set the interface. The RIP version you set on the interface overrides the version command in ROUTER RIP mode. Syntax ip rip receive version [1] [2] To return to the default, use the no ip rip receive version command.
PAGE 1109
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To enable the interface to send both version of RIP packets, use the ip rip send version 1 2 command. Related Commands ip rip receive version — sets the RIP version for the interface to receive traffic. version — sets the RIP version for the switch software. ip split-horizon Enable split-horizon for RIP data on the interface.
PAGE 1110
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. RIP supports a maximum of 16 ECMP paths. neighbor Define a neighbor router with which to exchange RIP information. Syntax neighbor ip-address To delete a neighbor setting, use the no neighbor ip-address command. Parameters ip-address Defaults Not configured.
PAGE 1111
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. You can enable an unlimited number of RIP networks. RIP operates over interfaces configured with any address the network command specifies. offset-list Specify a number to add to the incoming or outgoing route metrics learned using RIP.
PAGE 1112
output-delay Set the interpacket delay of successive packets to the same neighbor. Syntax output-delay delay To return to the switch software defaults for interpacket delay, use the no output-delay command. Parameters delay Defaults Not configured. Command Modes ROUTER RIP Supported Modes Full–Switch Command History Usage Information Specify a number of milliseconds as the delay interval. The range is from 8 to 50. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1113
Related Commands neighbor — enables RIP for a specified network. network — defines a neighbor. redistribute Redistribute information from other routing instances. Syntax redistribute {connected | static} To disable redistribution, use the no redistribute {connected | static} command. Parameters connected Enter the keyword connected to specify that information from active routes on interfaces is redistributed.
PAGE 1114
metric metric-value (OPTIONAL) Enter the keyword metric then a number as the metric value. The range is from 0 to 16. route-map mapname (OPTIONAL) Enter the keywords route-map then the name of a configured route map. Defaults Not configured. Command Modes ROUTER RIP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. router rip To configure and enable RIP, enter ROUTER RIP mode.
PAGE 1115
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-router_rip)#show config ! router rip network 172.31.0.0 passive-interface TenGigabitEthernet 0/1 Dell(conf-router_rip)# show ip rip database Display the routes that RIP learns. If the switch learned no RIP routes, no output is generated.
PAGE 1116
[50/2] via [50/2] via 210.250.40.0/24 207.250.53.0/24 [50/2] via [50/2] via [50/2] via 207.250.53.0/24 208.250.42.0/24 [50/2] via [50/2] via [50/2] via 208.250.42.0/24 1.1.18.2, 00:00:14, Vlan 18 1.1.130.2, 00:00:12, Port-channel 30 auto-summary 1.1.120.2, 00:00:55, Port-channel 20 1.1.130.2, 00:00:12, Port-channel 30 1.1.10.2, 00:00:18, Vlan 10 auto-summary 1.1.120.2, 00:00:55, Port-channel 20 1.1.130.2, 00:00:12, Port-channel 30 1.1.10.
PAGE 1117
Defaults holddown Enter the number of seconds to specify a time interval during which the route is marked as unreachable but still sending RIP packets. The holddown value should be at least three times the update timer value. The range is from zero (0) to 4294967295. The default is 180 seconds. flush Enter the number of seconds to specify the time interval during which the route is advertised as unreachable. When this interval expires, the route is flushed from the routing table.
PAGE 1118
50 Remote Monitoring (RMON) The Dell Networking Operating System (OS) remote monitoring (RMON) is based on IEEE standards, providing both 32-bit and 64-bit monitoring and long-term statistics collection.
PAGE 1119
rmon alarm Set an alarm on any MIB object. Syntax rmon alarm number variable interval {delta | absolute} rising-threshold value event-number falling-threshold value event-number [owner string] To disable the alarm, use the no rmon alarm number command. Parameters number Enter the alarm integer number from 1 to 65535. The value must be unique in the RMON alarm table. variable Enter the MIB object to monitor. The variable must be in the SNMP OID format; for example, 1.3.6.1.2.1.1.3.
PAGE 1120
rmon collection history Enable the RMON MIB history group of statistics collection on an interface. Syntax rmon collection history {controlEntry integer} [owner name] [buckets number] [interval seconds] To remove a specified RMON history group of statistics collection, use the no rmon collection history {controlEntry integer} command. Parameters controlEntry integer Enter the keyword controlEntry to specify the RMON group of statistics using a value.
PAGE 1121
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. rmon event Add an event in the RMON event table. Syntax rmon event number [log] [trap community] [description string] [owner name] To disable RMON on an interface, use the no rmon event number command. Parameters number Assign an event number in integer format from 1 to 65535. The number value must be unique in the RMON event table.
PAGE 1122
variable The MIB object to monitor. The variable must be in the SNMP OID format; for example, 1.3.6.1.2.1.1.3 The object type must be a 64-bit integer. interval Time, in seconds, the alarm monitors the MIB variables; this is the alarmSampleType in the RMON alarm table. The range is from 5 to 3600 seconds. delta Enter the keyword delta to test the change between MIB variables. This is the alarmSampleType in the RMON alarm table. absolute Enter the keyword absolute to test each MIB variable directly.
PAGE 1123
ether statistics table: 8 entries, 4608 bytes ether history table: 8 entries, 6000 bytes alarm table: 390 entries, 102960 bytes high-capacity alarm table: 5 entries, 1680 bytes event table: 500 entries, 206000 bytes log table: 2 entries, 552 bytes Dell# show rmon alarms Display the contents of the RMON alarm table. Syntax Parameters show rmon alarms [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry.
PAGE 1124
16 17 18 19 20 21 22 Dell# 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 show rmon events Display the contents of the RMON event table. Syntax show rmon events [index] [brief] Parameters index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON event table in an easy-toread format.
PAGE 1125
18 19 20 21 22 Dell# 18 19 20 21 22 show rmon hc-alarm Display the contents of RMON High-Capacity alarm table. Syntax Parameters show rmon hc-alarm [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON High-Capacity alarm table in an easy-to-read format. Defaults none Command Modes EXEC Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1126
show rmon history Display the contents of the RMON Ethernet history table. Syntax show rmon history [index] [brief] Parameters index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON Ethernet history table in an easy-to-read format Defaults none Command Modes EXEC Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1127
Defaults none Command Modes EXEC Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The log table has a maximum of 500 entries. If the log exceeds that maximum, the oldest log entry is purged to allow room for the new entry.
PAGE 1128
under-size packets: 0 over-size packets: 0 fragment errors: 0 jabber errors: 0 collision: 0 64bytes packets: 0 65-127 bytes packets: 0 128-255 bytes packets: 0 256-511 bytes packets: 0 512-1023 bytes packets: 0 1024-1518 bytes packets: 0 owner: 1 status: OK HC packets received overflow: 0 HC packets received: 0 HC bytes received overflow: 0 HC bytes received: 0 HC 64bytes packets overflow: 0 HC 64bytes packets: 0 HC 65-127 bytes packets overflow: 0 HC 65-127 bytes packets: 0 HC 128-255
PAGE 1129
51 Rapid Spanning Tree Protocol (RSTP) The Dell Networking Operating System (OS) implementation of rapid spanning tree protocol (RSTP) is based on the IEEE 802.1w standard spanning-tree protocol. The RSTP algorithm configures connectivity throughout a bridged local area network (LAN) that is comprised of LANs interconnected by bridges. bridge-priority Set the bridge priority for RSTP. Syntax bridge-priority priority-value To return to the default value, use the no bridge-priority command.
PAGE 1130
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. Optionally, enter an in or out parameter with the optional interface: events Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example • For Receive, enter in. • For Transmit, enter out. (OPTIONAL) Enter the keyword events to debug RSTP events. Version Description 9.9(0.0) Introduced on the FN IOM 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1131
Defaults RSTP is disabled. Command Modes CONFIGURATION RSTP (conf-rstp) Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol spanning-tree rstp — enters SPANNING TREE mode on the switch. forward-delay Configure the amount of time the interface waits in the Listening State and the Learning State before transitioning to the Forwarding State.
PAGE 1132
Defaults 2 seconds Command Modes CONFIGURATION RSTP (conf-rstp) Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The hello time is encoded in BPDUs in increments of 1/256ths of a second. The standard minimum hello time in seconds is 1 second, which is encoded as 256.
PAGE 1133
edge-port bpdufilter default To filter transmission of BPDU on port fast enabled interfaces, enable BPDU Filter globally. Syntax edge-port bpdufilter default To disable global bpdu filter default, use the no edge-port bpdufilter default command. Parameters priority-value Enter a number as the bridge priority value in increments of 4096. The range is from 0 to 61440. The default is 32768.
PAGE 1134
show config View the current configuration for the mode. Only non-default values are displayed. Syntax show config Command Modes CONFIGURATION RSTP (conf-rstp) Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1135
priority priority Enter keyword priority then a value in increments of 16 as the priority. The range is from 0 to 240. The default is 128. rootguard Enter the keyword rootguard to enable root guard on an RSTP port or port-channel interface. Defaults Not configured. Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1136
spanning-tree rstp Configure an RSTP interface with one of these settings: port cost, edge port with optional bridge port data unit (BPDU) guard, port priority, loop guard, or root guard. Syntax spanning-tree rstp {cost port-cost | edge-port [bpduguard [shutdown-onviolation]] | bpdufilter | priority priority | {rootguard}} Parameters cost port-cost Enter the keyword cost then the port cost value. The range is from 1 to 200000.
PAGE 1137
NOTE: A port configured as an edge port, on an RSTP switch, immediately transitions to the Forwarding state. Only configure ports connected to end-hosts as edge ports. Consider an edge port similar to a port with a spanning-tree portfast enabled. If you do not enable shutdown-on-violation, BPDUs are still sent to the RPM CPU. You cannot enable STP root guard and loop guard at the same time on a port.
PAGE 1138
52 Security This chapter describes various types of security commands in the Dell Networking OS, in the following sections: The commands are listed in the following sections: • AAA Accounting Commands • Authentication and Password Commands • RADIUS Commands • TACACS+ Commands • SSH Server and SCP Commands NOTE: Starting with the Dell Networking OS version 7.2.1.0, LEAP with MSCHAP v2 supplicant is implemented.
PAGE 1139
Parameters system Enter the keyword system to send accounting information of any other AAA configuration. exec Enter the keyword exec to send accounting information when a user has logged in to EXEC mode. commands level Enter the keyword command then a privilege level for accounting of commands executed at that privilege level. name | default Enter one of the following: For default, the default accounting methods used.
PAGE 1140
To permit accounting records to users with user name value of NULL, use the no aaa accounting suppress null-username command. Defaults Accounting records are recorded for all users. Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator and M I/O Aggregator.
PAGE 1141
Version Description 9.6.(0.0) Supported on the FN I/O Aggregator. aaa authorization config-commands Set parameters that restrict (or permit) a user’s access to EXEC level commands. Syntax aaa authorization config-commands Disable authorization checking for CONFIGURATION level commands using the no aaa authorization config-commands command. Defaults Enabled when you configure aaa authorization commands command.
PAGE 1142
Command Modes CONFIGURATION Supported Modes All Modes Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following table lists the Dell Networking OS version history for this command. Version Description 9.9(0.0) Introduced on the FN IOM. 9.6.(0.0) Supported on the FN I/O Aggregator and M I/O Aggregator. accounting Apply an accounting method list to terminal lines.
PAGE 1143
Defaults none Command Modes CONFIGURATION Supporting Modes Full–Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the S6000–ON. 9.5(0.
PAGE 1144
Authentication and Password Commands This section contains the commands that control the management access to the system. aaa authentication enable Configure AAA Authentication method lists for user access to EXEC privilege mode (the “Enable” access). Syntax aaa authentication enable {default | method-list-name} method [... method2] To return to the default setting, use the no aaa authentication enable {default | method-listname} method [... method2] command.
PAGE 1145
the server key is invalid, Dell Networking OS proceeds to the next authentication method. The TACACS+ is incorrect, but the user is still authenticated by the secondary method. Related Commands enable password — changes the password for the enable command. login authentication — enables AAA login authentication on the terminal lines. radius-server host — specifies a RADIUS server host. tacacs-server host — specifies a TACACS+ server host.
PAGE 1146
Usage Information Version Description 9.3(0.0) Supported on the M I/O Aggregator. By default, the locally configured username password is used. If you configure aaa authentication login default, Dell Networking Operating System (OS) uses the methods this command defines for login instead. Methods configured with the aaa authentication login command are evaluated in the order they are configured.
PAGE 1147
Related Commands Version Description 9.5(0.0) Introduced the support for roles on the MXL 10/40GbE Switch. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. aaa authorization commands — sets the parameters that restrict (or permit) a user’s access to EXEC and CONFIGURATION level commands aaa authorization exec — sets the parameters that restrict (or permit) a user’s access to EXEC level commands.
PAGE 1148
To return to the default setting, use the no aaa authentication role-only command. Parameters name Enter a text string for the name of the user up to 63 characters. It cannot be one of the system defined roles (sysadmin, secadmin, netadmin, netoperator). inherit existing-rolename Enter the inherit keyword then specify the system defined role to inherit permissions from (sysadmin, secadmin, netadmin, netoperator).
PAGE 1149
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, the aaa authorization commands command configures the system to check both EXEC level and CONFIGURATION level commands. To enable only EXEC-level command checking, use the command no aaa authorization config-commands. role method is supported only on Full-Switch mode. aaa authorization exec Set parameters that restrict (or permit) a user’s access to EXEC-level commands.
PAGE 1150
Usage Information Version Description 9.11(0.0) Introduced this command. When an operating system enables to change the user authenticators, the users might access resources and perform tasks that they do not have authorization. Once re-authentication is enabled, Dell EMC Networking OS prompts the users to re-authenticate whenever there is a change in authenticators.
PAGE 1151
Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To define a password for the level to which you are assigning privilege or access, use the enable password command. privilege level (LINE mode) Change the access level for users on the terminal lines.
PAGE 1152
Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. Usage Information After entering the banner login command, type one or more spaces and a delineator character. Enter the banner text then the second delineator character. When the user is connected to the router, if a message of the day banner is configured, it displays first.
PAGE 1153
Defaults No banner is configured and the CR is required when creating a banner. Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. Usage Information After entering the banner login command, type one or more spaces and a delineator character. Enter the banner text then the second delineator character.
PAGE 1154
Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. Usage Information After entering the banner login command, type one or more spaces and a delineator character. Enter the banner text then the second delineator character. When the user is connected to the router, if a message of the day banner is configured, it displays first.
PAGE 1155
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. exec-banner Enable the display of a text string when the user enters EXEC mode. Syntax exec-banner To disable the banner on terminal lines, use the no exec-banner command. Defaults Enabled on all lines (if configured, the banner appears). Command Modes LINE Supported Modes All Modes Command History Version Description 9.9(0.
PAGE 1156
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. line — applies an authentication method list to the designated terminal lines. ip access-list standard — names (or selects) a standard access list to filter based on the IP address. ip access-list extended — names (or selects) an extended access list based on the IP addresses or protocols. enable password Change the password for the enable command.
PAGE 1157
“abcd CNTL v ]e”. When the password is created, you do not use the CNTL + v key combination and enter “abcd]e”. NOTE: The question mark (?) is not a supported character. Related Commands show running-config — views the current configuration. privilege level (CONFIGURATION mode) — controls access to the command modes within the switch. enable restricted Allows Dell Networking technical support to access restricted commands.
PAGE 1158
encryption-type (OPTIONAL) Enter the number 5 or 0 as the encryption type. Enter a 5 then a text string as the hidden password. The text string must be a password that was already encrypted by a Dell Networking router. Use this parameter only with a password that you copied from the show runningconfig file of another Dell Networking router. password Enter a text string, up to 32 characters long, as the clear text password. Defaults No password is configured. level = 15.
PAGE 1159
encryption-type (OPTIONAL) Enter the number 8 or 0 as the encryption type. Enter 8 to enter the sha256–based hashed password. password Enter a text string, up to 32 characters long, as the clear text password. Defaults No password is configured. level = 15. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. Related Commands Version Description 9.10(0.
PAGE 1160
Related Commands aaa authentication login — selects the login authentication methods. password Specify a password for users on terminal lines. Syntax password [encryption-type] password To delete a password, use the no password password command. Parameters encryption-type password (OPTIONAL) Enter either zero (0) or 7 as the encryption type for the password entered. The options are • 0 is the default and means the password is not encrypted and stored as clear text.
PAGE 1161
To return to the default, use the no password-attributes [min-length number] [max-retry number] [lockout-period minutes] [character-restriction [upper number] [lower number] [numeric number] [special-char number]] command. Parameters min-length number (OPTIONAL) Enter the keywords min-length then the number of characters. The range is from 0 to 32 characters. max-retry number (OPTIONAL) Enter the keywords max-retry then the number of maximum password retries. The range is from 0 to 16.
PAGE 1162
To store new passwords as clear text, use the no service password-encryption command. Defaults Enabled. Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information CAUTION: Encrypting passwords with this command does not provide a high level of security. When the passwords are encrypted, you cannot return them to plain text unless you re-configure them.
PAGE 1163
show users Allows you to view information on all users logged in to the switch. Syntax Parameters show users [all] all Command Modes EXEC Privilege Supported Modes All Modes Command History Usage Information Example Related Commands (OPTIONAL) Enter the keyword all to view all terminal lines in the switch. Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.0) Introduced the support for roles on the MXL 10/40GbE Switch. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1164
Command History Usage Information This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.11(0.0) Introduced this command. The secured CLI mode prevents the users from enhancing the permissions or promoting the privilege levels. After entering the command, save the running-configuration. Once you save the running-configuration, the secured CLI mode is enabled.
PAGE 1165
username Establish an authentication system based on user names. Syntax username name [access-class access-list-name] [nopassword | {password | secret | sha256-password} [encryption-type] password] [privilege level] [role rolename] If you do not want a specific user to enter a password, use the nopassword option. To delete authentication for a user, use the no username name command. Parameters name Enter a text string for the name of the user up to 63 characters.
PAGE 1166
Version Description 9.5(0.0) Introduced the support for roles on the MXL 10/40GbE Switch. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To view the defined user names, use the show running-config user command. Related Commands password — specifies a password for users on terminal lines. show running-config — views the current configuration. RADIUS Commands The following RADIUS commands are supported by Dell Networking Operating System (OS).
PAGE 1167
Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. The following is a list of the Dell EMC Networking OS version history for this command. Version Description 9.13(0.0) Introduced on the C9010, S3100, S3048–ON, S4048T-ON, S4048–ON, S5000, S6010– ON, S6000–ON, S6100–ON, S6000, Z9100–ON, Z9500, FM-IOM, and MXL. client-key Configures global shared key for the trusted DAC clients.
PAGE 1168
To remove the port bounce configuration, enter the no coa-bounce-port command. Defaults Enabled. Command Modes Usage Information Command History • CONF-DYNAMIC-AUTH • Configure no coa-bounce-port to drop radius CoA port-bounce requests from the DAC. This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. The following is a list of the Dell EMC Networking OS version history for this command.
PAGE 1169
Defaults Command Modes Command History Enabled. • CONF-DYNAMIC-AUTH This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. The following is a list of the Dell EMC Networking OS version history for this command. Version Description 9.13(0.0) Introduced on the C9010, S3100, S3048–ON, S4048T-ON, S4048–ON, S5000, S6010– ON, S6000–ON, S6100–ON, S6000, Z9100–ON, Z9500, FN-IOM, and MXL.
PAGE 1170
Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. The following is a list of the Dell EMC Networking OS version history for this command. Version Description 9.13(0.0) Introduced on the C9010, S3100, S3048–ON, S4048T-ON, S4048–ON, S5000, S6010– ON, S6000–ON, S6100–ON, S6000, Z9100–ON, Z9500, FN-IOM, and MXL.
PAGE 1171
Usage Information Version Description 9.13(0.0) Introduced on the C9010, S3100, S3048–ON, S4048T-ON, S4048–ON, S5000, S6010– ON, S6000–ON, S6100–ON, S6000, Z9100–ON, Z9500, FN-IOM, and MXL. If this configuration is not enabled, then dynamic authorization messages are not handled by the NAS. ip radius source-interface Specify an interface’s IP address as the source IP address for RADIUS connections.
PAGE 1172
Usage Information Command History • Optionally specify dynamic authorization port number. Default port is 3799. This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. The following is a list of the Dell EMC Networking OS version history for this command. Version Description 9.13(0.
PAGE 1173
Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. radius-server host Configure a RADIUS server host. Syntax Parameters radius-server host {hostname | ipv4-address | ipv6-address} [auth-port portnumber] [retransmit retries] [timeout seconds] [key [encryption-type] key] hostname Enter the name of the RADIUS server host.
PAGE 1174
Usage Information Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. To configure any number of RADIUS server hosts for each server host that is configured, use this command. Dell Networking Operating System (OS) searches for the RADIUS hosts in the order they are configured in the software.
PAGE 1175
If you configure the key parameter in the radius-server host command, the key configured with the radius-server key command is the default key for all RADIUS communications. Related Commands radius-server host — configures a RADIUS host. radius-server retransmit Configure the number of times the switch attempts to connect with the configured RADIUS host server before declaring the RADIUS host server unreachable.
PAGE 1176
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. radius-server host — configures a RADIUS host. role Changes command permissions for roles.
PAGE 1177
Related Commands Version Description 9.5(0.0) Introduced on the MXL. userrole rate-limit Configure NAS to allow or reject RADIUS dynamic authorization (DA) packets based on the configurable rate limit value. Syntax rate-limit packets per minute To undo the configuration, enter the no rate-limit command. Defaults Parameters Command Modes Usage Information Command History 30 packets per minute. packet per minute Enter the number of packets that you want processed per minute.
PAGE 1178
Usage Information Command History • Duplicate packets are dropped within replay-protection-window period if packet has same source IP address, source UDP port and identifier. This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. The following is a list of the Dell EMC Networking OS version history for this command. Version Description 9.13(0.
PAGE 1179
Example Version Description 9.3(0.0) Supported on the M I/O Aggregator. Dell#show privilege Current privilege level is 15 Dell# Suppressing AAA Accounting for Null Username Sessions When you activate AAA accounting, the Dell Networking OS software issues accounting records for all users on the system, including users whose username string, because of protocol translation, is NULL.
PAGE 1180
start-stop Enter the keywords start-stop to send a “start accounting” notice at the beginning of the requested event and a “stop accounting” notice at the end of the event. wait-start Enter the keywords wait-start to ensure that the TACACS+ security server acknowledges the start notice before granting the user’s process request. stop-only Enter the keywords stop-only to instruct the TACACS+ security server to send a “stop record accounting” notice at the end of the requested user process.
PAGE 1181
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip tacacs source-interface Specify an interface’s IP address as the source IP address for TACACS+ connections. Syntax ip tacacs source-interface interface To delete a source interface, use the no ip tacacs source-interface command. Parameters interface Defaults Not configured.
PAGE 1182
key key Defaults Not configured. Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information (OPTIONAL) Enter the keyword key then a string up to 42 characters long as the authentication key. This authentication key must match the key specified in the tacacsserver key for the TACACS+ daemon. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator.
PAGE 1183
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. The key configured with this command must match the key configured on the TACACS+ daemon. timeout login response Specify how long the software waits for the login input (for example, the user name and password) before timing out.
PAGE 1184
Parameters Defaults rsa Enter the keyword rsa then the key size to generate a SSHv2 RSA host keys. The range is from 1024 to 2048 if you did not enable FIPS mode; if you enabled FIPS mode, you can only generate a 2048-bit key. The default is 1024. rsa1 Enter the keyword rsa1 then the key size to generate a SSHv1 RSA host keys. The range is from 1024 to 2048. The default is 1024. Key size 1024; if you enable FIPS mode, the key size is 2048. Command History Usage Information Version Description 9.
PAGE 1185
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Debug information includes details for key-exchange, authentication, and established session for each connection. ip scp topdir Identify a location for files used in secure copy transfer. Syntax ip scp topdir directory To return to the default setting, use the no ip scp topdir command.
PAGE 1186
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command specifies the maximum number of attempts to authenticate a user on an SSH connection with the remote host for password authentication. SSH disconnects when the number of password failures exceeds authentication-retries. ip ssh cipher Configure the list of ciphers supported on both SSH client and SCP.
PAGE 1187
• When FIPS is enabled or disabled, the client ciphers get default configuration. ip ssh connection-rate-limit Configure the maximum number of incoming SSH connections per minute. Syntax Parameters ip ssh connection-rate-limit 1-10 1-10 Defaults 10 per minute Command Modes CONFIGURATION Supported Modes Full–Switch Command History Enter the number of maximum numbers of incoming SSH connections allowed per minute. The range is from 1 to 10 per minute. The default is 10 per minute.
PAGE 1188
NOTE: Administrators must specify the two files (rhosts and pub-key-file) to configure hostbased authentication. Related Commands ip ssh pub-key-file — public keys of trusted hosts from a file. ip ssh rhostsfile — trusted hosts and users for rhost authentication. ip ssh key-size Configure the size of the server-generated RSA SSHv1 key.
PAGE 1189
• Defaults hmac-md5-96 The default list of MAC algorithm is in the order as shown below: When FIPS mode is enabled: • hmac-sha2–256 • hmac-sha1 • hmac-sha1–96 When FIPS mode is disabled: • hmac-sha2-256 • hmac-sha1 • hmac-sha1–96 • hmac-md5 • hmac-md5-96 Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. Usage Information Version Description 9.
PAGE 1190
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. With password authentication enabled, you can authenticate using the local, RADIUS, or TACACS+ password fallback order as configured. ip ssh rhostsfile Specify the rhost file used for host-based authorization.
PAGE 1191
Parameters time minutes Enter the keywords time then the amount of time in minutes. The range is from 10 to 1440 minutes. The default is 60 minutes volume rekeylimit Enter the keywords volume then the amount of volume in megabytes. The range is from 1 to 4096 to megabytes. The default is 1024 megabytes Defaults The default time is 60 minutes. The default volume is 1024 megabytes. Command Modes CONFIGURATION mode Supported Modes Full–Switch Command History This guide is platform-specific.
PAGE 1192
ip ssh rsa-authentication (EXEC) Add keys for the RSA authentication. Syntax ip ssh rsa-authentication {my-authorized-keys WORD} To delete the authorized keys, use the no ip ssh rsa-authentication {my-authorized-keys} command. Parameters my-authorized-keys WORD Defaults none Command Modes EXEC Supported Modes Full–Switch Command History Usage Information Enter the keywords my-authorized-keys then the filename of the RSA authorizedkeys. Version Description 9.9(0.0) Introduced on the FN IOM.
PAGE 1193
• aes128-cbc • aes192-cbc • aes256-cbc • aes128-ctr • aes192-ctr • aes256-ctr The default cipher list is used. mac hmacalgorithm • 3des-cbc • aes128-cbc • aes192-cbc • aes256-cbc • aes128-ctr • aes192-ctr • aes256-ctr Enter the keyword mac then a space-delimited list of hash message authentication code (HMAC) algorithms supported by the SSH server for keying hashing for the message authentication.
PAGE 1194
When FIPS is not enabled, the default key-exchange-algorithms are the following: • diffie-hellman-group-exchange-sha1 • diffie-hellman-group1-sha1, • diffie-hellman-group14-sha1 port port-number (OPTIONAL) Enter the keyword port then the port number of the listening port of the SSH server. The range is from 1 to 65535. The default is 22. [version {1 | 2}] (OPTIONAL) Enter the keyword version then the SSH version 1 or 2 to specify only SSHv1 or SSHv2.
PAGE 1195
Command History Usage Information This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.13.0.1 Introduced on the MXL, C9010, S3048–ON, S3100 series, S4810, S4820T, S4048–ON, S4048T-ON, S5000, S6000, S6000–ON, S6100–ON, S6010–ON, Z9500, Z9100–ON and FN-IOM. To disable the DNS in SSH server configuration, use the no ip ssh server dns enable command.
PAGE 1196
IlbaCuSTW1Q== Dell# Related Commands crypto key generate — generates the SSH keys. show ip ssh Display information about established SSH sessions. Syntax show ip ssh Command Modes Supported Modes Command History • EXEC • EXEC Privilege All Modes Version Description 9.10(0.0) Removed the support for hmac-sha2-256-96 algorithm. 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 1197
Supported Modes Command History All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information This command displays the contents of the flash://ADMIN_DIRssh/knownhosts file. Example Dell#show ip ssh client-pub-keys poclab4,123.12.1.
PAGE 1198
show role Display information on permissions assigned to a command, including user role and/or permission level. Syntax show role mode {mode} {command} Parameters command Enter the command’s keywords to assign the command to a certain access level. You can enter one or all of the keywords. mode mode Enter keyword then one of the following modes.
PAGE 1199
secadmin sysadmin netoperator testadmin Command Modes EXEC Privilege Supported Modes Full–Switch Command History Related Commands Exec Config Exec Config Interface Line Router IP Route-map Protocol MAC netadmin Exec Config Interface Line Router IP Route-map Protocol MAC Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the S6000-ON. 9.5(0.0) Introduced on the Z9000, S6000, S4820T, S4810, MXL. userrole — creates user roles for the role-based security model.
PAGE 1200
ip ssh pub-key-file Specify the file used for host-based authentication. Syntax ip ssh pub-key-file {WORD} Parameters WORD Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Enter the file name for the host-based authentication. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command specifies the file used for the host-based authentication.
PAGE 1201
Defaults none Command Modes EXEC Privilege Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp snooping — displays the contents of the DHCP binding table. ip dhcp relay Enable Option 82. Syntax Parameters ip dhcp relay information-option [trust-downstream] trust-downstream Defaults Disabled.
PAGE 1202
Related Commands ip dhcp snooping vlan — enables DHCP Snooping on one or more VLANs. ip dhcp snooping database Delay writing the binding table for a specified time. Syntax ip dhcp snooping database write-delay minutes Parameters minutes Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Command History The range is from 5 to 21600. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1203
Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp snooping — displays the contents of the DHCP binding table. ip dhcp snooping database renew Renew the binding table. Syntax ip dhcp snooping database renew Defaults none Command Modes Supported Modes • EXEC • EXEC Privilege Full–Switch Command History Version Description 9.9(0.
PAGE 1204
Defaults Disabled. Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp snooping vlan Enable DHCP Snooping on one or more VLANs. Syntax [no] ip dhcp snooping vlan name Parameters name Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Enter the name of a VLAN on which to enable DHCP Snooping.
PAGE 1205
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. clear ip dhcp snooping — clears the contents of the DHCP binding table. username Establish an authentication system based on user names. Syntax username name [nopassword | {password | secret} [encryption-type] password] [privilege level] If you do not want a specific user to enter a password, use the nopassword option. To delete authentication for a user, use the no username name command.
PAGE 1206
show running-config — views the current configuration. userrole Create user roles for the role-based security model. Syntax userrole name inherit existing-role-name To delete a role name, use the no userrole name command. Note that the reserved role names may not be deleted. Parameters name Enter a text string for the name of the user up to 63 characters. It cannot be one of the system defined roles (sysadmin, secadmin, netadmin, netoperator).
PAGE 1207
ICMP Vulnerabilities The Internet Control Message Protocol (ICMP) is a network-layer Internet protocol that provides message packets to report errors and other information regarding IP packet processing back to the source. Dell Networking OS mainly addresses the following ICMP vulnerabilities: • ICMP Mask Reply • ICMP Timestamp Request • ICMP Replies • IP ID Values Randomness You can configure the Dell Networking OS to drop ICMP reply messages.
PAGE 1208
ICMPv6 Message Types Who are you reply (140) Mtrace response (200) Mtrace messages (201) NOTE: The Dell Networking OS does not suppress the following ICMPv6 message types: • Packet too big (2) • Echo request (128) • Multicast listener query (130) • Multicast listener report (131) • Multicast listener done (132) • Router solicitation (133) • Router advertisement (134) • Neighbor solicitation (135) • Neighbor advertisement (136) • Redirect (137) • Router renumbering (138) • MLD v2 liste
PAGE 1209
System Security Commands The following section lists the system security commands. generate hash Generate a hash checksum for the given file or the startup configuration using the MD5, SHA1, or SHA256 algorithm. Syntax Parameters generate hash {md5 | sha1 | sha256} {flash://filename | startup-config} md5 | sha1 | sha256 Enter the keyword md5, sha1, or sha256 to generate .
PAGE 1210
• root-password Defaults Not configured Command Modes Full–Switch Command History Usage Information 9 directs the system to encrypt the clear text password and store the encrypted password in an inaccessible location. Enter the root password. Version Description 9.14(0.0) Introduced on the S5048F–ON. 9.13(0.0) Introduced on the S3100 series, S3048–ON, S4048–ON, S4048T-ON, S5000, S6000, S6000–ON, S6010–ON, S6100–ON, Z9100–ON, Z9500, C9010, MXL, and FN-IOM.
PAGE 1211
Version Description 9.13(0.0) Introduced on the S3100 series, S3048–ON, S4048–ON, S4048T-ON, S5000, S6000, S6000–ON, S6010–ON, S6100–ON, Z9100–ON, MXL, and FN-IOM. Usage Information When you reboot the system using the reload command, the system performs OS image verification on the primary boot image. You can enable boot image hash validation only for images on local flash partitions such as A: or B:.
PAGE 1212
Command Modes Command History Example 1212 Full–Switch Version Description 9.14(0.0) Introduced on the S5048F–ON. 9.13(0.0) Introduced on the S3100 series, S3048–ON, S4048–ON, S4048T-ON, S5000, S6000, S6000–ON, S6010–ON, S6100–ON, Z9100–ON, Z9500, C9010, MXL, and FN-IOM.
PAGE 1213
53 sFlow sFlow monitoring system includes an sFlow Agent and an sFlow Collector. • The sFlow Agent combines the flow samples and interface counters into sFlow datagrams and forwards them to the sFlow Collector. • The sFlow Collector analyses the sFlow Datagrams received from the different devices and produces a network-wide view of traffic flows.
PAGE 1214
sflow collector Configure a collector device to which sFlow datagrams are forwarded. Syntax sflow collector {ip-address} agent-addr {ip-address} [number [max-datagram-size number]] | [max-datagram-size number] To delete a configured collector, use the no sflow collector {ip-address} agent-addr {ipv4address} [number [max-datagram-size number]] | [max-datagram-size number] command. Parameters sflow collector ipaddress Enter the IPv4 (A.B.C.D) of the sFlow collector device.
PAGE 1215
sflow enable (Global) Enable sFlow globally. Syntax sflow enable To disable sFlow, use the no sflow enable command. Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information sFlow is disabled by default. In addition to this command, you must enable sFlow on individual interfaces where you want sFlow sampling.
PAGE 1216
sflow extended-switch enable Enable packing information on a switch only. Syntax sflow extended-switch enable To disable packing information, use the no sflow extended-switch [enable] command. Parameters enable Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Enter the keyword enable to enable global extended information. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1217
Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL switch. Dell(conf)#sflow max-header-size extended sflow polling-interval (Global) Set the sFlow polling interval at a global level. Syntax sflow polling-interval interval value To return to the default, use the no sflow polling-interval interval command.
PAGE 1218
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command sets the counter polling interval for an interface. Related Commands sflow polling-interval (Global) — globally sets the polling interval. sflow sample-rate (Global) Change the global default sampling rate. Syntax sflow sample-rate value To return to the default sampling rate, use the no sflow sample-rate command.
PAGE 1219
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command changes the sampling rate for an interface. By default, the sampling rate of an interface is set to the same value as the current global default sampling rate. If the value you enter is not a correct power of 2, the command generates an error message with the previous and next power-of-2 value.
PAGE 1220
sflow enable sflow sample-rate 2048 Dell#show running-config interface tengigabitethernet 0/1 ! interface TenGigabitEthernet 0/1 no ip address sflow enable sflow sample-rate 256 no shutdown show sflow stack-unit Display the sFlow information on a stack unit. Syntax show sflow stack-unit {unit number} Parameters Command Modes Supported Modes Command History unit number • EXEC • EXEC Privilege (OPTIONAL) Enter a unit number to view information on the stack unit in that slot.
PAGE 1221
54 Service Provider Bridging Service provider bridging is composed of virtual local area network (VLAN) Stacking, Layer 2 Protocol Tunneling, and Provider Backbone Bridging as described in the Dell Networking OS Configuration Guide. This chapter includes commands for the Dell Networking operating software Layer 2 Protocol Tunneling (L2PT). L2PT enables protocols to tunnel through an 802.1q tunnel. For more information, see VLAN Stacking, Spanning Tree Protocol (STP), and GARP VLAN Registration (GVRP).
PAGE 1222
• in | out | both Enter the keyword in, out, or both to debug incoming interfaces, outgoing interfaces, or both incoming and outgoing interfaces. vlan vlan-id Enter the keyword vlan then the VLAN ID. The range is from 1 to 4094. count value Enter the keyword count then the number of debug outputs. The range is from 1 to 100. Defaults Debug disabled.
PAGE 1223
protocol-tunnel destination-mac Overwrite the BPDU destination MAC address with a specific value. Syntax Parameters protocol-tunnel destination-mac xstp address stp Change the default destination MAC address used for L2PT to another value. Defaults The default destination MAC is 01:01:e8:00:00:00. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1224
Parameters rate Defaults 75 frames per second. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Enter the rate in frames per second. The range is from 75 to 3000. The default is 75. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Example Dell# Dell#conf Dell(conf)#protocol-tunnel rate-limit 1000 Dell(conf)# Related Commands show protocol-tunnel — displays tunneling information for all VLANs.
PAGE 1225
Te1/2 Dell# Related Commands 2 STP, PVST show running-config — displays the current configuration.
PAGE 1226
55 Simple Network Management Protocol (SNMP) and Syslog This chapter contains commands to configure and monitor the simple network management protocol (SNMP) v1/v2/v3 and Syslog.
PAGE 1227
• logging • logging buffered • logging console • logging facility • logging history • logging history size • logging monitor • logging on • logging source-interface • logging synchronous • logging trap • logging version • show logging • show logging driverlog stack-unit • show logging auditlog • terminal monitor SNMP Commands The following SNMP commands are available in the Dell Networking OS.
PAGE 1228
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.0) Introduced on the MXL. Example Dell(conf)#clear logging auditlog Related Commands show logging auditlog — displays audit log show snmp Display the status of SNMP network elements.
PAGE 1229
show snmp engineID Display the identification of the local SNMP engine and all remote engines that are configured on the router. Syntax Command Modes Supported Modes Command History Example show snmp engineID • EXEC • EXEC Privilege Full–Switch Mode Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show snmp engineID Local SNMP engineID: 0000178B02000001E80214A8 Remote Engine ID IP-addr Port 80001F88043132333435 172.31.1.
PAGE 1230
Related Commands snmp-server group — configures an SNMP server group. show snmp supported-mibs Display the list of SNMP MIBs supported by the platform. Syntax show snmp supported-mibs Command Modes Command History Example • EXEC • EXEC Privilege This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.14(0.
PAGE 1231
Command History Example This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.14(0.0) Introduced on the C9010, FN-IOM, MIOA, MXL, S3048–ON, S3100, S4048–ON, S4048T-ON, S5048F-ON, S6000, S6000–ON, S6010–ON, S6100–ON and Z9100–ON. DellEMC#show snmp supported-traps TRAP OID ----------------------------------------------------------------------COLDSTART 1.3.6.1.6.3.1.1.5.1 WARMSTART 1.3.
PAGE 1232
Dell# snmp context Enables you to map a bgp vrf instance within a SNMP context through community mapping, in SNMPv2c and SNMPv3. Syntax [no] snmp context [context name] Parameters context name Enter a unique name for the context. Defaults None Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Usage Information Version Description 9.13(0.
PAGE 1233
is a port connected to Router2. This is a port connected to Router2. This is a port connected to Router2. This is a port connected to Router2. IF-MIB::ifAlias.134792448 = STRING: snmp-server community Configure a new community string access for SNMPv1 v2 and v3. Syntax snmp-server community community-name {ro | rw} [security-name name][accesslist-name] To remove access to a community, use the no snmp-server community community-string {ro | rw} [security-name name [access-list-name] command.
PAGE 1234
of the three sub-options as a sub-option, and so forth. The second Example shows the creation of a standard IPv4 ACL called snmp-ro-acl and then assigning it to the SNMP community guest. NOTE: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP; TCP and ICMP rules are not valid for SNMP. In IPv6 ACLs, port rules are not valid for SNMP.
PAGE 1235
Parameters notification-type notification-option Enter the type of notification from the following list: • ecfm — Notification of changes to ECFM. • entity — Notification of changes to entity. • envmon — For Dell Networking device notifications when an environmental threshold is exceeded. • eoam — Notification of changes to the EOAM state. • ets — Notification of changes to the ets traps. • fips — Notification of changes to the FIP snooping state. • lacp — Notification of changes.
PAGE 1236
snmp-server engineID Configure the name for both the local and remote SNMP engines on the router. Syntax snmp-server engineID [local engineID] [remote ip-address udp-port port-number engineID] To return to the default, use the no snmp-server engineID [local engineID] [remote ipaddress udp-port port-number engineID] command. Parameters local engineID Enter the keyword local then the engine ID number that identifies the copy of the SNMP on the local device. Format (as specified in RFC 3411): 12 octets.
PAGE 1237
snmp-server group Configure a new SNMP group or a table that maps SNMP users to SNMP views. Syntax snmp-server group [group_name {1 | 2c | 3 {auth | noauth | priv}}] [read name] [write name] [notify name] [ access-list-name | access-list-name]] To remove a specified group, use the no snmp-server group [group_name {v1 | v2c | v3 {auth | noauth | priv}}] [read name] [write name] [notify name] [access-list-name | access-list-name]] command.
PAGE 1238
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following Example specifies the group named harig as a version 3 user requiring both authentication and encryption and read access limited to the read named rview. NOTE: The number of configurable groups is limited to 16 groups.
PAGE 1239
NOTE: For version 1 and version 2c security models, this string represents the name of the SNMP community. The string can be set using this command; however, Dell Networking OS recommends setting the community string using the snmp-server community command before executing this command. For version 3 security model, this string is the USM user security name. udp-port portnumber (OPTIONAL) Enter the keywords udp-port then the port number of the remote host to use. The range is from 0 to 65535.
PAGE 1240
notifications, at least one snmp-server enable command and the snmp-server host command for that host must be enabled. NOTE: For v1 / v2c trap configuration, if the community-string is not defined using the snmp-server community command prior to using this command, the default form of the snmp-server community command automatically is configured with the community-name the same as specified in the snmpserver host command.
PAGE 1241
Parameters byte-count Defaults 8 Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Enter one of the following values 8, 16, 24 or 32. Packet sizes are 8000 bytes, 16000 bytes, 32000 bytes, and 64000 bytes. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. snmp-server trap-source Configure a specific interface as the source for SNMP traffic.
PAGE 1242
priv-password [access access-list-name | ipv6 access-list-name | access-listname ipv6 access-list-name] To remove a user from the SNMP group, use the no snmp-server user name {group_name remote ip-address udp-port port-number} [1 | 2c | 3] [encrypted] [auth {md5 | sha} auth-password] [priv des56 | aes128–cfb} priv password] [access access-listname | ipv6 access-list-name] command. Parameters name Enter the name of the user (not to exceed 20 characters), on the host that connects to the agent.
PAGE 1243
Defaults If no authentication or privacy option is configured, then the messages are exchanged (attempted anyway) without any authentication or encryption. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Added support for the AES128-CFB encryption algorithm on the MXL 10/40GbE Switch IO Module platform. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1244
To remove a user from the SNMP group, use the no snmp-server user name {group_name remote ip-address udp-port port-number} [1 | 2c | 3] [encrypted] [auth {md5 | sha} auth-password] [priv {des56 | aes128–cfb} priv-password] [access access-listname | ipv6 access-list-name | access-list-name ipv6 access-list-name] command. Parameters auth-password (OPTIONAL) Enter a text string (up to 20 characters long) password that enables the agent to receive packets from the host and to send packets to the host.
PAGE 1245
Parameters view-name Enter the name of the view (not to exceed 20 characters). oid-tree Enter the OID sub tree for the view (not to exceed 20 characters). included (OPTIONAL) Enter the keyword included to include the MIB family in the view. excluded (OPTIONAL) Enter the keyword excluded to exclude the MIB family in the view. Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1246
clear logging Clear the messages in the logging buffer. Syntax clear logging Defaults none Command Modes EXEC Privilege Supported Modes Full–Switch Mode Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show logging — displays logging settings and system messages in the internal buffer. default logging buffered Return to the default setting for messages logged to the internal buffer.
PAGE 1247
Related Commands logging console — sets the logging console parameters. logging extended Logs security and audit events to a system log server. Syntax logging extended Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 1248
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. logging monitor — sets the logging monitor parameters. terminal monitor — sends system messages to the terminal/monitor. default logging trap Return to the default settings for logging messages to the Syslog servers. Syntax default logging trap Defaults level = 6 or informational Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Related Commands Version Description 9.
PAGE 1249
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.0) Introduced udp and tcp keywords on the MXL 10/40GbE Switch. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. logging on — enables the logging asynchronously to logging buffer, console, Syslog server, and terminal lines. logging trap — enables logging to the Syslog server based on severity. logging buffered Enable logging and specify which messages are logged to an internal buffer.
PAGE 1250
logging console Specify which messages are logged to the console. Syntax logging console [level] To return to the default values, use the default logging console command. To disable logging to the console, use the no logging console command. Parameters level (OPTIONAL) Indicate a value from 0 to 7 or enter one of the following parameters: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging. The default is 7 or debugging.
PAGE 1251
• local5 (local use) • local6 (local use) • local7 (local use) • lpr (line printer system) • mail (mail system) • news (USENET news) • sys9 (system use) • sys10 (system use) • sys11 (system use) • sys12 (system use) • sys13 (system use) • sys14 (system use) • syslog (Syslog process) • user (user process) • uucp (Unix to Unix copy process) The default is local7.
PAGE 1252
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you configure the snmp-server trap-source command, the system messages logged to the history table are also sent to the SNMP network management station. Related Commands show logging — displays information logged to the history buffer. logging history size Specify the number of messages stored in the system logging history table.
PAGE 1253
Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. default logging monitor — returns the logging monitor parameters to the default setting. logging on Specify that debug or error messages are asynchronously logged to multiple destinations, such as the logging buffer, Syslog server, or terminal lines.
PAGE 1254
Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History • For Loopback interfaces, enter the keyword loopback then a number from zero (0) to 16383. • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a ten-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For VLAN interface, enter the keyword vlan then a number from 1 to 4094.
PAGE 1255
Usage Information When you enable logging synchronous, unsolicited messages appear between software prompts and outputs. Only the messages with a severity at or below the set level are sent to the console. If the message queue limit is reached on a terminal line and messages are discarded, a system message appears on that terminal line. Messages may continue to appear on other terminal lines. Related Commands logging on — enables logging.
PAGE 1256
The following is a list of the Dell Networking OS version history for this command. Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.0) Introduced on the MXL. To display syslog messages in a RFC 3164 or RFC 5424 format, use the log version command in configuration mode. By default, the system log version is set to 0.
PAGE 1257
Logging to 172.16.1.162 Logging to 10.10.10.4 Logging to 10.1.2.4 Logging to 172.31.1.4 Logging to 133.33.33.4 May 22 10:21:10: %STKUNIT0-M:CP ( 10.11.68.22 )by admin May 22 10:16:35: %STKUNIT0-M:CP ( 10.11.68.22 )by admin May 22 09:39:12: %STKUNIT0-M:CP ( 10.11.68.22 )by admin May 22 09:03:56: %STKUNIT0-M:CP ( 10.11.68.22 )by admin May 22 09:01:51: %STKUNIT0-M:CP ( 10.11.68.22 )by admin May 22 08:53:09: %STKUNIT0-M:CP password authentication suc cess on vty0 ( 10.11.68.
PAGE 1258
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.. This command displays internal software driver information, which may be useful during troubleshooting switch initialization errors, such as a downed Port-Pipe. show logging auditlog Displays an audit log. Syntax show logging auditlog Defaults none Command Modes EXEC Supported Modes Full–Switch Command History This guide is platform-specific.
PAGE 1259
Related Commands logging monitor — sets the logging parameters on the monitor/terminal.
PAGE 1260
56 Stacking Commands Stacking is supported on the FN410S and FN410T cards with ports 9 and 10 as the stack ports. Stacking is limited to six Aggregators in the same or different chassis in a single stack. Stacking provides a single point of management and NIC teaming for high availability and higher throughput. To configure an Aggregator stack, you must use the CLI. The stacking commands are always available and operational.
PAGE 1261
Parameter Unit number Defaults None Command Modes EXEC Privilege Supported Modes All Modes Command History Usage Information The unit number ranges from 0 to 5. Version Description 9.9(0.0) Introduced on the FN IOM. 9.6.(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. This command is supported on the M I/O, FN410S, and FN410T Aggregators. This command is used to reset the stack-unit. The master unit can also be power cycled using this command.
PAGE 1262
redundancy force-failover stack-unit Force the standby unit in the stack to become the management unit. Syntax redundancy force-failover stack-unit Defaults Not enabled. Command Modes EXEC Privilege Supported Modes Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. reset stack-unit Reset any designated stack member except the management unit (master unit).
PAGE 1263
4 Member not present 5 Member not present Dell# Dell#reset stack-unit 0 >>>Resetting master not allowed % Error: Reset of master unit is not allowed.
PAGE 1264
Stack Unit Config: Start-up Config: Runtime Event Log: Running Config: ACL Mgr: LACP: STP: SPAN: Dell# Related Commands no no no no no no no no block block block block block block block block sync sync sync sync sync sync sync sync done done done done done done done done redundancy disable-auto-reboot — prevents the system from auto-rebooting if it fails. show system stack-ports Display information about the stacking ports on all switches in the FN I/O Aggregator switch stack..
PAGE 1265
0/10 1/9 1/10 Dell# Example (Status) Example (Topology) 1/10 0/10 10 10 10 up up up Dell# show system stack-ports status Topology: Daisy chain Interface Link Speed Admin Link (Gb/s) Status Status 0/9 10 up down 0/10 10 up up 1/9 10 up down 1/10 10 up up up down up Trunk Group Dell# show system stack-ports topology Topology: Daisy chain Interface Connection Trunk Group 0/9 0/9 1/10 1/10 Dell Related Commands 1/10 # 0/10 power-cycle stack-unit—resets the designated stack member.
PAGE 1266
Unit Boot-Mode Next-Boot -----------------------------------------------0 stack stack 1 stack stack 2 stack stack 3 stack stack 4 Not Present 5 Not Present Dell# show system stack-unit stack-group Displays the stack-groups present/configured for a FN I/O Aggregator stack unit.
PAGE 1267
Parameters Defaults Command Modes Supported Modes Command History unit number <0-5> Enter the number of the member stack unit. The range is from 0 to 5. programmable-mux Enable programmable multiplex mode. stack Enable stack mode. standalone Enable stand-alone mode. vlt Enable virtual link trunking mode. full-switch Enable full-switch mode. standalone • CONFIGURATION All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.6.(0.0) Supported on the FN I/O Aggregator. 8.3.17.
PAGE 1268
Command History Usage Information Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.6.(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. This command is supported on the M I/O, FN410S, and FN410T Aggregators. • reload – reboots Dell Networking Operating System (OS). • show system – displays the status of all stack members or a specific member. stack-unit provision Preconfigure a logical stacking ID of a switch that joins the stack.
PAGE 1269
Supported Modes Command History Usage Information All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.6.(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. This command is supported on the FN410S and the FN410T Aggregators. You can renumber any switch, including the management unit or a stand-alone unit. You cannot renumber a unit to a number of an active member in the stack. When executing this command on the master, the stack reloads.
PAGE 1270
Example Dell(conf)#track-stack-ports disable-all-links Warning: Enabling stack-port tracking shuts down all the operationally UP interfaces, when both/all the stack ports of the unit are down. This Action is not modified when enabled along with UFD feature.
PAGE 1271
57 Storm Control The Dell Networking operating software storm control feature allows you to limit or suppress traffic during a traffic storm. Important Points to Remember • Interface commands can only be applied on physical interfaces (virtual local area networks [VLANs] and link aggregation group [LAG] interfaces are not supported). • An INTERFACE-level command only supports storm control configuration on ingress.
PAGE 1272
io-aggregator broadcast storm-control Rate-limit the traffic storm to 1 Gbps. Syntax io-aggregator broadcast storm-control To disable storm control, use the no io-aggregator broadcast storm-control command. Defaults Enabled Command Modes Supported Modes • CONFIGURATION Standalone-Mux (SMUX) Full–Switch Mode Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 1273
show storm-control unknown-unicast Display the storm control unknown-unicast configuration. Syntax Parameters show storm-control unknown-unicast [interface] interface (OPTIONAL) Enter the following interface to display the interface specific storm control configuration: • Defaults Command Modes Supported Modes For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1274
8.3.16.1 Example Introduced on the MXL 10/40GbE Switch IO Module. Dell#show storm-control broadcast tengigabitethernet 3/8 Broadcast storm control configuration Interface Direction Packets/Second ---------------------------------------TenGig 3/8 Ingress 1000 Dell# show storm-control multicast Display the storm control multicast configuration.
PAGE 1275
To disable multicast storm control on the interface, use the no storm-control multicast packets_per_second in command. Parameters packets_per_secon d Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554368. Command Modes INTERFACE (conf-if-interface-slot/port) Supported Modes Programmable-Mux (PMUX) Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.
PAGE 1276
To disable broadcast storm control on the interface, use the no storm-control broadcast [packets_per_second in] command. Parameters packets_per_secon d Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554368. Defaults none Command Modes INTERFACE (conf-if-interface-slot/port) Supported Modes Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1277
Parameters pfc-llfc in Enter the keyword pfc-llfc to get the flow control traffic. The range is from 0 to 33554368 packets per second. shutdown Enter the keyword shutdown to shut down the port when the rate exceeds. Defaults none Command Modes INTERFACE (conf-if-interface-slot/port) Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1278
To disable unknown-unicast storm control on the interface, use the no storm-control unknown-unicast [packets_per_second in] command. Parameters packets_per_secon d Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554431. Command Modes INTERFACE (conf-if-interface-slot/port) Supported Modes Programmable-Mux (PMUX) Full–Switch Mode Command History 1278 Storm Control Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 1279
58 SupportAssist SupportAssist sends troubleshooting data securely to Dell. SupportAssist in this Dell EMC Networking OS release does not support automated email notification at the time of hardware fault alert, automatic case creation, automatic part dispatch, or reports. SupportAssist requires Dell EMC Networking OS 9.9(0.0) and SmartScripts 9.7 or later to be installed on the Dell EMC Networking device. For more information on SmartScripts, see Dell EMC Networking Open Automation guide.
PAGE 1280
Usage Information Example Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.0) Introduced on the C9010, Z9100–ON, S6100–ON, and S3100 series. 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. • When you run the command, the system displays a message with the information directing to the URL for further information.
PAGE 1281
transmission and/or use of the Collected Data, you may not download, install or otherwise use SupportAssist. Reject the EULA: DellEMC(conf)#eula-consent support-assist reject Aug 24 22:35:38: %STKUNIT1-M:CP %SUPPORT_ASSIST-6-SUPASSIST_EVT: Event monitor service stopped I do not accept the terms of the license agreement. The SupportAssist feature has been deactivated and can no longer be used.
PAGE 1282
Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Usage Information Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.0) Introduced on the C9010, Z9100–ON, S6100–ON, and S3100 series. 9.9(0.
PAGE 1283
NOTE: The full transfer includes the core files as well in the information sent. The core transfer does not send core files that are older than 30 days. SupportAssist Commands Dell EMC Networking OS supports the following SupportAssist mode commands. activity Move to the SupportAssist Activity mode for an activity. Allow the user to configure customized details for a specific activity.
PAGE 1284
contact-company Configure the contact information for the company. Syntax contact-company name {company-name}[company-next-name] ... [company-next-name] To remove the contact company information, use the no contact-company command. Parameters company-name Enter the name for the company. If there are multiple words in the name, use optional additional fields. company-nextname (OPTIONAL) Enter the next components of the company name, up to 5 components are allowed.
PAGE 1285
Command Modes SUPPORTASSIST Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Usage Information Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.0) Introduced on the C9010, Z9100–ON, S6100–ON, and S3100 series. 9.9(0.
PAGE 1286
server Configure the name of the remote SupportAssist Server and move to SupportAssist Server mode. Syntax server {default | server-name} To delete a server, use the no server server-name command. Parameters default Enter the keyword default for the default server. server-name Enter the name of the custom server to which the logs would be transferred. To include a space, enter a space within double quotes. Defaults Default server has URL stor.g3.ph.dell.
PAGE 1287
Parameters file-specification local-file-name Command Modes Enter the full file specification for the action-manifest file. For example: • tftp://hostip/filepath • ftp://userid:password@hostip/filepath • scp://userid:password@hostip/filepath Enter the name of the local action-manifest file, up to 32 characters long. Allowable characters are: a to z, A to Z, 0 to 9, -, _, and space.
PAGE 1288
Defaults Default Command Modes SUPPORTASSIST ACTIVITY FULL-TRANSFER SUPPORTASSIST ACTIVITY EVENT-TRANSFER Command History Usage Information Related Commands This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.
PAGE 1289
Usage Information Related Commands Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. To revert to the default action-manifest file, use the action-manifest install command. If necessary, you can then remove the custom action-manifest file. • action-manifest get — copy an action-manifest file for an activity to the system. • action-manifest install — configure the action-manifest to use for a specific activity.
PAGE 1290
To disable a particular SupportAssist activity, use the no enable command. Defaults Enabled Command Modes SUPPORTASSIST ACTIVITY FULL-TRANSFER SUPPORTASSIST ACTIVITY CORE-TRANSFER SUPPORTASSIST ACTIVITY EVENT-TRANSFER Command History Usage Information This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.
PAGE 1291
province | region | state name (OPTIONAL) Enter the keyword province, region or state then the name of province, region or state for the company site. To include a space, enter a space within double quotes. country companycountry (OPTIONAL) Enter the keyword country then the country for the company site. To include a space, enter a space within double quotes.
PAGE 1292
Command History Usage Information This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.0) Introduced on the C9010, Z9100–ON, S6100–ON, and S3100 series. 9.9(0.
PAGE 1293
email-address Configure the email addresses to reach the contact person. Syntax email-address primary email-address [alternate email-address] To remove an email address, use the no email-address command. To remove the primary and the alternate email addresses, use the no email-address primary and no email-address alternate commands respectively. Parameters primary emailaddress Enter the keyword primary then the primary email address for the person.
PAGE 1294
alternate phone Enter the keyword alternate then the alternate phone number for the person. Command Modes SUPPORTASSIST PERSON Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Usage Information Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.
PAGE 1295
Related Commands Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. • email-address — configure email addresses to reach the contact person. • phone — configure phone numbers to reach the contact person. time-zone Configure the time zone for contacting the person. Syntax time-zone zone +-HH:MM[start-time HH:MM] [end-time HH:MM] To remove the time zone, use the no time-zone [zone | start-time | end-time] command.
PAGE 1296
proxy-ip-address Configure a proxy for reaching the SupportAssist remote server. Syntax proxy-ip-address {ipv4-address | ipv6-address} port port-number [ username userid password [encryption-type] password ] To remove the proxy, use the no proxy-ip-address command. Parameters ipv4-address Enter the IP address of the proxy server in a dotted decimal format (A.B.C.D). ipv6-address Enter the IPv6 address of the proxy server in the x:x:x:x::x format.
PAGE 1297
enable Enable communication with the SupportAssist server. Syntax enable To disable communication to a specific SupportAssist server, use the no enable command. Defaults Enabled Command Modes SUPPORTASSIST SERVER Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Related Commands Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.
PAGE 1298
Usage Information Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.0) Introduced on the C9010, Z9100–ON, S6100–ON, and S3100 series. 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. The URL should be formatted to follow the ISO format. show eula-consent Display the EULA for the feature.
PAGE 1299
& performance information and related data (Collected Data) and transmits this information to Dell. By downloading SupportAssist and agreeing to be bound by these terms and the Dell end user license agreement, available at: www.dell.com/ aeula, you agree to allow Dell to provide remote monitoring services of your IT environment and you give Dell the right to collect the Collected Data in accordance with Dells Privacy Policy, available at: www.dell.
PAGE 1300
enable all ! activity event-transfer enable action-manifest install default ! activity core-transfer enable ! contact-company name Dell street-address F lane , Sector 30 address city Brussels state HeadState country Belgium postalcode S328J3 ! contact-person first Fred last Nash email-address primary des@sed.com alternate sed@dol.com phone primary 123422 alternate 8395729 preferred-method email time-zone zone +05:30 start-time 12:23 end-time 15:23 ! server Dell enable url http://1.1.1.
PAGE 1301
09:43:56 IST event-transfer 09:48:21 IST full-transfer 09:38:27 IST DellEMC# Success Feb 15 2016 09:47:43 IST Feb 15 2016 Success Feb 15 2016 09:36:12 IST Feb 15 2016 SupportAssist 1301
PAGE 1302
59 Spanning Tree Protocol (STP) The commands in this chapter configure and monitor the IEEE 802.1d spanning tree protocol (STP). Topics: • bridge-priority • debug spanning-tree • description • disable • forward-delay • hello-time • max-age • portfast bpdufilter default • protocol spanning-tree • show config • show spanning-tree 0 • spanning-tree 0 bridge-priority Set the bridge priority of the switch in an IEEE 802.1D spanning tree.
PAGE 1303
debug spanning-tree Enable debugging of the spanning tree protocol and view information on the protocol. Syntax debug spanning-tree {stp-id [all | bpdu | events | exceptions] | protocol} To disable debugging, use the no debug spanning-tree command. Parameters stp-id Enter zero (0). The switch supports one spanning tree group with a group ID of 0. protocol Enter the keyword for the type of STP to debug, either mstp, pvst, or rstp.
PAGE 1304
disable Disable the spanning tree protocol globally on the switch. Syntax disable To enable Spanning Tree Protocol, use the no disable command. Defaults Enabled (that is, the spanning tree protocol is disabled.) Command Modes SPANNING TREE Supported Modes Full–Switch Mode Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. portfast bpdufilter default — enters SPANNING TREE mode.
PAGE 1305
hello-time Set the time interval between generation of the spanning tree bridge protocol data units (BPDUs). Syntax hello-time seconds To return to the default value, use the no hello-time command. Parameters seconds Defaults 2 seconds Command Modes SPANNING TREE Supported Modes Full–Switch Mode Command History Related Commands Enter a number as the time interval between transmission of BPDUs. The range is from 1 to 10. The default is 2 seconds. Version Description 9.9(0.
PAGE 1306
hello-time — changes the time interval between BPDUs. portfast bpdufilter default Enable BPDU Filter globally to filter transmission of BPDU on port fast enabled interfaces. Syntax portfast bpdufilter default To disable global bpdu filter default, use the no edge-port bpdufilter default command. Defaults Disabled Command Modes SPANNING TREE Command History Version Description 9.9(0.0) Introduced on the FN MXL. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1307
show config Display the current configuration for the mode. Only non-default values display. Syntax show config Command Modes SPANNING TREE Supported Modes Full–Switch Mode Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1308
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Enable spanning tree group 0 prior to using this command. The following describes the show spanning-tree 0 command shown in the example. Example Field Description “Bridge Identifier...” Lists the bridge priority and the MAC address for this STP bridge. “Configured hello...” Displays the settings for hello time, max age, and forward delay. “We are.
PAGE 1309
Timers: message age 0, forward_delay 0, hold 0 Number of transitions to forwarding state 1 BPDU: sent:18, received 0 The port is not in the portfast mode Port 3 (TenGigabitEthernet 1/2) is Forwarding Port path cost 4, Port priority 8, Port Identifier 8.27 Designated root has priority 32768, address 0001.e800.0a56 Designated bridge has priority 32768, address 0001.e800.0a56 Designated port id is 8.
PAGE 1310
To disable Spanning Tree group on an interface, use the no spanning-tree stp-id {cost cost | {rootguard} | portfast [bpduguard [shutdown-on-violation] | bpdufilter] | priority priority} command. Parameters stp-id Enter the STP instance ID. The range is 0. cost cost Enter the keyword cost then a number as the cost. The range is 1 to 65535. The defaults are: • 10-Gigabit Ethernet interface = 2. • Port Channel interface with 10-Gigabit Ethernet = 1.
PAGE 1311
60 System Time The commands in this chapter configure time values on the system, either using the Dell Networking OS, the hardware, or using the network time protocol (NTP). With NTP, the switch can act only as a client to an NTP clock host. For more information, refer to the Network Time Protocol section of the Management chapter in the Dell Networking OS Configuration Guide.
PAGE 1312
month Enter the name of one of the 12 months, in English. You can enter the number of a day and change the order of the display to time day month year . day Enter the number of the day. The range is from 1 to 31. You can enter the name of a month to change the order of the display to time month day year . year Enter a four-digit number as the year. The range is from 1993 to 2035. Defaults Not configured.
PAGE 1313
end-month Enter the name of one of the 12 months in English. You can enter the name of a day to change the order of the display to time day month year. end-time Enter the time in hours:minutes. For the hour variable, use the 24-hour format; example, 17:15 is 5:15 pm. end-year Enter a four-digit number as the year. The range is from 1993 to 2035. offset (OPTIONAL) Enter the number of minutes to add during the summer-time period. The range is from 1 to1440. The default is 60 minutes.
PAGE 1314
end-week week-number: enter a number from 1 to 4 as the number of the week to end daylight saving time. • first: enter the keyword first to end daylight saving time in the first week of the month. • last: enter the keyword last to end daylight saving time in the last week of the month. Enter the weekday name that you want daylight saving time to end. Enter the weekdays using the three letter abbreviations; for example Sun, Sat, Mon, and so on. The range is from Sun to Sat.
PAGE 1315
Supported Modes Command History Full–Switch Version Description 9.14(0.0) Introduced on the C9010, FN–IOM, MIOA, MXL, S3048–ON, S4048–ON, S4048T-ON, S5048F-ON, S6000, S6000–ON, S6010-ON, S6100–ON, and Z9100–ON. ntp offset-threshold Configure the threshold time interval before which the system generates an NTP audit log message if the time difference from the NTP server is greater than a threshold value (offset-threshold).
PAGE 1316
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. You can configure multiple time-serving hosts (up to 250). From these time-serving hosts, the operating system chooses one NTP host with which to synchronize. Because many polls to NTP hosts can impact network performance, Dell Networking recommends limiting the number of hosts configured.
PAGE 1317
key Enter the authentication key in the previously specified format. Defaults NTP authentication is not configured by default. If you do not specify the option [0 | 7], 0 is selected by default. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.14(0.0) The trusted-key range value is increased from 1 to 65534. 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1318
Usage Information Related Commands Version Description 9.14(0.0) Introduced on the C9010, FN–IOM, MIOA, MXL, S3048–ON, S4048–ON, S4048T–ON, S5048F–ON, S6000, S6000–ON, S6010–ON, S6100–ON, and Z9100–ON. NTP control key is not configured by default. If the encryption–type (0 or 7) is not specified, then 0 is selected by default. • ntp authentication-key—sets an authentication key for NTP. • ntp authenticate—enables the NTP authentication parameters that you set.
PAGE 1319
key keyid (OPTIONAL) Enter the keyword key and a number as the NTP peer key. The range is from 1 to 65534. prefer (OPTIONAL) Enter the keyword prefer to indicate that this peer has priority over other servers. version number (OPTIONAL) Enter the keyword version and a number to correspond to the NTP version used on the server. The range is from 1 to 4. minpoll pollinginterval (OPTIONAL) Enter the keyword minpollthen the polling-interval. The polling interval range is from 4 to 16.
PAGE 1320
Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History • For VLAN interface, enter the keyword vlan then a number from 1 to 4094. • For the Management interface, enter the keyword ManagementEthernet then slot/port information.This option is valid only in Full-Switch mode. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1321
Parameters Command Modes Supported Modes Command History detail • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword detail to view the source information of the clock. All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Example Dell#show clock 12:30:04.402 pacific Tue May 22 2012 Dell# Example (Detail) Dell#show clock detail 12:30:26.
PAGE 1322
Field Description • + means the peer was selected for possible synchronization. • - means the peer is a candidate for selection. • x means designated falsesticker by the intersection algorithm. remote Displays the remote IP address of the NTP peer. ref clock Displays the IP address of the remote peer’s reference clock. st Displays the peer’s stratum, that is, the number of hops away from the external time source. A 16 in this column means the NTP peer cannot reach the time source.
PAGE 1323
Supported Modes Full–Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Added support for VRF. 9.4.(0.0) Added support for VRF. show ntp status Display the current NTP status.
PAGE 1324
Related Commands 1324 System Time show ntp associations — displays information on the NTP master and peer configurations.
PAGE 1325
61 Tunneling Tunneling is supported on the Dell Networking OS. tunnel-mode Enable a tunnel interface. Syntax tunnel mode {ipip | ipv6 | ipv6ip}[decapsulate-any] To disable an active tunnel interface, use the no tunnel mode command. Parameters ipip Enable tunnel in RFC 2003 mode and encapsulate IPv4 and/or IPv6 datagrams inside an IPv4 tunnel. ipv6 Enable tunnel in RFC 2473 mode and encapsulate IPv4 and/or IPv6 datagrams inside an IPv6 tunnel.
PAGE 1326
tunnel source Set a source address for the tunnel. Syntax tunnel source {ip-address | ipv6–address | interface-type-number} To delete the current tunnel source address, use the no tunnel source command. Parameters ip-address Enter the source IPv4 address in A.B.C.D format. ipv6–address Enter the source IPv6 address in X:X:X:X::X format. interface-typenumber • For a Port Channel interface, enter the keywords port-channel then a number from 1 to 128.
PAGE 1327
count (OPTIONAL) Enter the keyword count to count packets processed by the filter. The range is from 3-10, Default range is 3. unlimited Enter the keyword unlimited to specify the unlimited number of keepalive probe packets. Defaults Tunnel keepalive is disabled. Command Modes INTERFACE TUNNEL Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Introduced on the MXL.
PAGE 1328
This command will fail if the address family entered does not match the outer header address family of the tunnel mode, tunnel source, or any other tunnel allow-remote. If any allow-remote are configured, the tunnel source or tunnel mode commands will fail if the outer header address family does not match that of the configured allow-remote. tunnel dscp Configure the method to set the DSCP in the outer tunnel header.
PAGE 1329
Command Modes INTERFACE TUNNEL (conf-if-tu) Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The tunnel interface is inoperable without a valid tunnel destination address for the configured Tunnel mode. To establish a logical tunnel to the particular destination address, use the destination address of the outer tunnel header.
PAGE 1330
Command Modes INTERFACE TUNNEL (conf-if-tu) Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module. A value of 0 copies the inner packet hop limit (ipv6) or time-to-live (ipv4) in the encapsulated packet to the tunnel header hop limit (ipv6) or time-to-live (ipv4) value.
PAGE 1331
ipv6 unnumbered Configure a tunnel interface to operate without a unique explicit IPv6 address and select the interface from which the tunnel will borrow its address. Syntax ipv6 unnumbered {interface-type interface-number} Use the no ipv6 unnumbered command to set the tunnel back to default logical address. If the tunnel was previously operational, this will make the tunnel interface operationally down, unless the tunnel also has an IPv4 address configured.
PAGE 1332
62 u-Boot All commands in this chapter are in u-Boot mode. These commands are supported on the Dell Networking Operating System (OS) FN IOM platform. To access this mode, press any key when the following line appears on the console during a system boot. Hit any key to stop autoboot: Enter u-Boot immediately, as the BOOT_USER# prompt. NOTE: This chapter describes only a few commands available in u-Boot mode. NOTE: You cannot use the Tab key to complete commands in this mode.
PAGE 1333
Command Modes uBoot Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. boot selection Change the ROM bootstrap bootflash partition. Syntax boot selection [a | b] Command Modes uBoot Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1334
Supported Modes Command History Example Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # boot write net config retries 2 Updated number of Network Boot Config retries to 2. BOOT_USER # boot zero Clears the primary, secondary, or default boot parameters. Syntax boot zero [primary | secondary | default] Command Modes uBoot Supported Modes Full–Switch Command History Version Description 9.9(0.
PAGE 1335
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. help Display the help menu. Syntax help Command Modes uBoot Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1336
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ignore startup config Ignore the system startup configuration. Syntax ignore startup-config Command Modes uBoot Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. interface management ethernet ip address Set the management port IP address and mask.
PAGE 1337
no interface management ethernet ip address Clear the management port IP address and mask. Syntax no interface management ethernet ip address Command Modes uBoot Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. reload Reload the FN IOM switch. Syntax reload Command Modes uBoot Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.
PAGE 1338
BOOT_USER # show boot selection Display the ROM bootstrap bootflash partition. Syntax show boot selection Command Modes uBoot Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # show boot selection ROM BOOTSTRAP SELECTOR PARMETERS: ================================ Next ROM bootstrap set to occur from Bootflash partition A.
PAGE 1339
Dell Force10 Networks System Boot Official IOM_XLOAD_LP_IMG_BOOT_SELECTOR, BSP Release 4.0.0.0bt1 Created Tue May 1 10:56:34 2012 by build on login-sjc-01 BOOT_USER # show bootvar Show summary of operating system boot parameters. Syntax show bootvar Command Modes uBoot Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1340
Example 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # show default-gateway Gateway IP address: 15.0.0.1 BOOT_USER # show interface management Ethernet Show the management port IP address and mask. Syntax show interface management ethernet Command Modes uBoot Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1341
syntax help Show the syntax information. Syntax help Command Modes uBoot Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # help ***** Dell Force10 Boot Interface Help Information ***** Current access level: USER LEVEL Use "syntax help" for more information on syntax.
PAGE 1342
63 Uplink Failure Detection (UFD) Uplink failure detection (UFD) provides detection of the loss of upstream connectivity and, if you use this with network interface controller (NIC) teaming, automatic recovery from a failed link. NOTE: In Standalone, VLT, and Stacking modes, the UFD group number is 1 by default and cannot be changed.
PAGE 1343
Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. • downstream — assigns a port or port-channel to the uplink-state group as a downstream interface. • uplink-state-group — creates an uplink-state group and enables the tracking of upstream links.
PAGE 1344
Parameters seconds Specify the time (in seconds) to wait for the upstream port channel (LAG 128) to come back up before server ports are brought down. The range is from 1 to 120. Command Modes UPLINK-STATE-GROUP Supported Modes Standalone, Stacking, VLT Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator.
PAGE 1345
To delete an uplink-state group, enter the no downstream interface command. Parameters interface Enter one of the following interface types: • 10 Gigabit Ethernet: tengigabitethernet {slot/port |slot/portrange} • Port channel: port-channel {1-512 | port-channel-range} Where port-range and port-channel-range specify a range of ports separated by a dash (-) and/or individual ports/port channels in any order; for example: tengigabitethernet 1/1-2,5,9,11-12 port-channel 1-3,5.
PAGE 1346
Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. • downstream — assigns a port or port-channel to the uplink-state group as a downstream interface. • uplink-state-group — creates an uplink-state group and enables the tracking of upstream links.
PAGE 1347
enable Re-enable upstream-link tracking for an uplink-state group after it has been disabled. Syntax enable To disable upstream-link tracking without deleting the uplink-state group, use the no enable command. group-id Enables debugging on the specified uplink-state group. Valid group-id values are 1 to 16. Defaults Upstream-link tracking is automatically enabled in an uplink-state group. Command Modes UPLINK-STATE-GROUP Supported Modes All Modes Command History Version Description 9.9(0.
PAGE 1348
upstream PortChannel 1 ! uplink state track 2 downstream TengigabitEthernet 0/1,3,5 upstream TengigabitEthernet 0/9,10 Related Commands • show uplink-state-group — displays the status information on a specified uplink-state group or all groups. • uplink-state-group — creates an uplink-state group and enables the tracking of upstream links. show uplink-state-group Display status information on a specified uplink-state group or all groups.
PAGE 1349
Related Commands • show running-config uplink-state-group— displays the current configuration of one or more uplink-state groups. • uplink-state-group — create an uplink-state group and enables the tracking of upstream links. uplink-state-group Create an uplink-state group and enable the tracking of upstream links on a switch/ router. Syntax uplink-state-group group-id To delete an uplink-state group, enter the no uplink-state-group group-id command.
PAGE 1350
upstream Assign a port or port-channel to the uplink-state group as an upstream interface. Syntax upstream interface To delete an uplink-state group, use the no upstream interface command.
PAGE 1351
64 VLAN Stacking With the virtual local area network (VLAN)-stacking feature (also called stackable VLANs and QinQ), you can “stack” VLANs into one tunnel and switch them through the network transparently. For more information about basic VLAN commands, refer to the Virtual LAN (VLAN) Commands section in the Layer 2 chapter.
PAGE 1352
Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. dei honor Honor the incoming DEI value by mapping it to a system drop precedence. Enter the command once for 0 and once for 1. Syntax dei honor {0 | 1} {green | red | yellow} Parameters 0|1 Enter the bit value you want to map to a color.
PAGE 1353
Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information You must first enable DEI for this configuration to take effect. Related Commands dei enable — enables DEI. member Assign a stackable VLAN access or trunk port to a VLAN. The VLAN must contain the vlan-stack compatible command in its configuration.
PAGE 1354
Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1355
Related Commands dei mark — sets the DEI value on egress. vlan-stack access Specify a Layer 2 port or port channel as an access port to the stackable VLAN network. Syntax vlan-stack access To remove access port designation, use the no vlan-stack access command. Defaults Not configured. Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1356
* NUM 1 2 Status Inactive Active 3 Active 4 Active 5 Active Dell# Q Ports M M M M M M M M M M M Te 1/2 Te 1/0-2 Po1(Te 1/3-4) Te 1/5 Te 1/3 Po1(Te 1/3-5) Te 1/6 Te 1/4 Po1(Te 1/5-6) Te 1/6 Te 1/5 vlan-stack dot1p-mapping Map C-Tag dot1p values to an S-Tag dot1p value. You can separate the C-Tag values by commas and dashed ranges are permitted. Dynamic mode CoS overrides any Layer 2 QoS configuration if there is conflicts.
PAGE 1357
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information For specific interoperability limitations regarding the S-Tag TPID, refer to the Dell Networking OS Configuration Guide. Related Commands portmode hybrid — sets a port (physical ports only) to accept both tagged and untagged frames. A port configured this way is identified as a hybrid port in report displays.
PAGE 1358
interface TenGigabitEthernet 0/42 no ip address switchport vlan-stack trunk no shutdown Dell(conf-if-Te-0/42)#interface vlan 100 Dell(conf-if-vl-100)#vlan-stack compatible Dell(conf-if-vl-100-stack)#member TenGigabitethernet 0/12 Dell(conf-if-vl-100-stack)#show config ! interface Vlan 100 no ip address vlan-stack compatible member TenGigabitEthernet 0/42 shutdown Dell(conf-if-vl-100-stack)#interface vlan 20 Dell(conf-if-vl-20)#tagged Tengigabitethernet 0/12 Dell(conf-if-vl-20)#show config ! interface Vlan 2
PAGE 1359
65 Virtual Link Trunking (VLT) VLT allows physical links between two chassis to appear as a single virtual link to the network core. VLT eliminates the requirement for Spanning Tree protocols by allowing link aggregation group (LAG) terminations on two separate distribution or core switches, and by supporting a loop-free topology.
PAGE 1360
• show vlt role • show vlt statistics • stack-unit iom-mode • system-mac • unit-id • vlt domain • vlt-peer-lag port-channel • show vlt private-vlan back-up destination Configure the IPv4 or IPv6 address of the management interface on the remote VLT peer to be used as the endpoint of the VLT backup link for sending out-of-band hello messages.
PAGE 1361
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. clear ip pim tib Clear PIM tree information from the PIM database. Syntax Parameters clear ip pim tib [group] group Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information (OPTIONAL) Enter the multicast group address in dotted decimal format (A.B.C.D). Version Description 9.9(0.
PAGE 1362
Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. VLT ARP Statistics ---------------ARP Tunnel Pkts sent:0 ARP Tunnel Pkts Rcvd:0 ARP-sync Pkts Sent:0 ARP-sync Pkts Rcvd:0 ARP Reg Request sent:19 ARP Reg Request rcvd:10 delay-restore abort-threshold Increase the Boot Up timer to some value (>60 seconds).
PAGE 1363
lacp ungroup member-independent Prevent possible loop during the bootup of a VLT peer switch or a device that accesses the VLT domain. Syntax Parameters lacp ungroup member-independent {vlt | port-channel} port-channel Force all LACP port-channel members to become switchports. vlt Force all VLT LACP members to become switchports. Defaults Not configured. Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.
PAGE 1364
9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. peer-link port-channel Configure the specified port channel as the chassis interconnect trunk between VLT peers in the domain. Syntax peer-link port-channel port-channel-number {peer-down-vlan vlan id} Parameters port-channelnumber Enter the port-channel number that acts as the interconnect trunk.
PAGE 1365
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. peer-routing-timeout Configure the timeout for the software to wait before connecting to a VLT peer with a Down status. This command is applicable for both IPV6/ IPV4. Syntax peer-routing-timeout value To restore the default value, use the no peer-routing-timeout command. Parameters value Enter the timeout value in seconds. The range is from 1 to 65535. The default value is 0 (no timeout).
PAGE 1366
show ip mroute View the multicast routing table. Syntax show ip mroute [static | group-address [source-address] | count | snooping [vlan vlan-id] [group-address [source-address]] | summary | vlt [group-address | count] Parameters Static (OPTIONAL) Enter the keyword static to view static multicast routes. group-address [source-address] (OPTIONAL) Enter the multicast group-address to view only routes associated with that group.
PAGE 1367
Field Description Incoming interface Displays the reverse path forwarding (RPF) information towards the source for (S,G) entries and the RP for (*,G) entries. Outgoing interface list: Lists the interfaces that meet one of the following: • a directly connected member of the Group • statically configured member of the Group • received a (*,G) or (S,G) Join message Example (static) Dell#show ip mroute static Mroute: 23.23.23.
PAGE 1368
show vlt backup-link Displays information on the backup link operation. Syntax show vlt backup-link Default Not configured. Command Modes EXEC Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator.
PAGE 1369
Version Local System MAC address Remote System MAC address Remote system version Delay-Restore timer : : : : Delay-Restore Abort Threshold Peer-Routing Peer-Routing-Timeout timer Multicast peer-routing timeout Dell# : 6(3) 00:01:e8:8a:e9:91 00:01:e8:8a:e9:76 6(3) 90 seconds : 60 seconds : Disabled : 0 seconds : 150 seconds show vlt detail Displays detailed status information about VLT domains currently configured on the switch. Syntax show vlt detail Default Not configured.
PAGE 1370
(*, 225.1.1.2) Dell# VLAN 15 te 0/5 show vlt mismatch Display mismatches in VLT parameters. Syntax show vlt mismatch Command Modes EXEC Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator.
PAGE 1371
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. Dell#show vlt role VLT Role ---------VLT Role: System MAC address: Primary Role Priority: Local System MAC address: Local System Role Priority: Local Unit Id: Dell# Primary 00:01:05:08:02:05 32768 00:01:e8:00:ab:03 32768 0 show vlt statistics Displays statistics on VLT operations.
PAGE 1372
IGMP IGMP IGMP IGMP IGMP IGMP IGMP IGMP Reg Request sent: Reg Request rcvd: Reg Response sent: Reg Response rcvd: PDU Tunnel Pkt sent: PDU Tunnel Pkt rcvd: Tunnel PDUs sent: Tunnel PDUs rcvd: 2 2 2 1 0 0 0 0 VLT ARP Statistics -------------------ARP Tunnel Pkts sent:0 ARP Tunnel Pkts Rcvd:0 ARP Tunnel Pkts sent Non Vlt:0 ARP Tunnel Pkts Rcvd Non Vlt:0 ARP-sync Pkts Sent:0 ARP-sync Pkts Rcvd:0 ARP Reg Request sent:2 ARP Reg Request rcvd:1 VLT IOA Statistics ------------------------------IOA Info Pkts sent
PAGE 1373
system-mac Reconfigure the default MAC address for the domain. Syntax Parameters system-mac mac-address mac-address Enter the system MAC address for the VLT domain. Defaults Not configured. Command Modes VLT DOMAIN Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator.
PAGE 1374
Usage Information Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. When you create a VLT domain on a switch, Dell Networking OS automatically assigns a unique unit ID (0 or 1) to each peer switch. The unit IDs are used for internal system operations. Use the unit-id command to explicitly configure the unit ID of a VLT peer. Configure a different unit ID (0 or 1) on each peer switch.
PAGE 1375
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. show vlt private-vlan Display the association of private VLAN (PVLAN) with the VLT LAG. You can configure VLT peer nodes in a PVLAN on the switch. Syntax show vlt private-vlan Command Modes EXEC Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.
PAGE 1376
66 Virtual Router Redundancy Protocol (VRRP) Virtual router redundancy protocol (VRRP) is supported by the Dell Networking Operating System (OS) for IPv4 and IPv6. The following commands apply to both VRRP IPv4 and IPv6: • advertise-interval • description • disable • hold-time • preempt • priority • show config • track • virtual-address VRRP Ipv6 are in the VRRP for IPv6 Commands section.
PAGE 1377
advertise-interval Set the time interval between VRRP advertisements. Syntax advertise-interval {seconds | centisecs centisecs} To return to the default settings, use the no advertise-interval command. Parameters seconds Enter a number of seconds. The range is from 1 to 255. The default is 1 second. centisecs centisecs Enter the keyword centisecs followed by the number of centisecs in multiple of 25 centisecs. The range is 25 to 4075 centisecs in multiples of 25 centisecs.
PAGE 1378
Usage Information 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The given password is encrypted by the system and the show config displays an encrypted text string for any of the encrypted typed used. clear counters vrrp Clear the counters maintained on VRRP operations. Syntax clear counters vrrp [vrrp-id] Parameters vrrp-id Command Modes EXEC Privilege Supported Modes Full–Switch Command History (OPTIONAL) Enter the number of the VRRP group ID.
PAGE 1379
packets Enter the keyword packets to enable debugging of VRRP control packets. state Enter the keyword state to enable debugging of VRRP state changes. timer Enter the keyword timer to enable debugging of the VRRP timer. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1380
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To enable VRRP traffic, assign an IP address to the VRRP group using the virtual-address command and enter no disable. Related Commands virtual-address — specifies the IP address of the virtual router. hold-time Specify a delay (in seconds) before a switch becomes the MASTER virtual router. By delaying the initialization of the VRRP MASTER, the new switch can stabilize its routing tables.
PAGE 1381
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. priority Specify a VRRP priority value for the VRRP group. The VRRP protocol uses this value during the MASTER election process. Syntax priority priority To return to the default value, use the no priority command. Parameters priority Defaults 100 Command Modes VRRP Supported Modes Full–Switch Command History Usage Information Enter a number as the priority.
PAGE 1382
Example 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-if-vrid-4)#show con vrrp-group 4 virtual-address 119.192.182.124 ! show vrrp View the VRRP groups that are active. If no VRRP groups are active, the system returns No Active VRRP group. Syntax show vrrp [vrrp-id] [interface] [brief] Parameters vrrp-id (OPTIONAL) Enter the Virtual Router Identifier for the VRRP group to view only that group. The range is from 1 to 255.
PAGE 1383
Item Description • State Example (Brief) N = Preempt is not enabled. Displays the operational state of the interface by using one of the following: • NA/IF (the interface is not available). • MASTER (the interface associated with the MASTER router). • BACKUP (the interface associated with the BACKUP router). Master addr Displays the IP address of the MASTER router. Virtual addr(s) Displays the virtual IP addresses of the VRRP routers associated with the interface.
PAGE 1384
Example Item Description Tracking states.. This line is displayed if the track command is configured on an interface. Below this line, the following information on the tracked interface is displayed: • Dn or Up states whether the interface is down or up. • the interface type slot/port information. Dell>show vrrp -----------------TenGigabitEthernet 1/3, VRID: 1, Net: 10.1.1.253 VRF: 0 default State: Master, Priority: 105, Master: 10.1.1.
PAGE 1385
cost Defaults cost = 10 Command Modes VRRP Supported Modes Full–Switch Command History Usage Information (OPTIONAL) Enter a number as the amount to be subtracted from the priority value. The range is 1 to 254. The default is 10. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1386
vrrp delay minimum Set the delay time for VRRP initialization after an interface comes up. Syntax vrrp delay minimum seconds Parameters seconds Defaults 0 Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Related Command Enter the number of seconds for the delay for VRRP initialization after an interface becomes operational. The range is from 0 to 900 (0 indicates no delay). Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1387
Usage Information This command applies to all the VRRP configured interfaces on a system. When used with the vrrp delay minimum CLI, the later timer rules the VRRP enabling. For example, if vrrp delay reload is 600 and the vrrp delay minimum is 300: • When the system reloads, VRRP waits 600 seconds (10 minutes) to bring up VRRP on all interfaces that are up and configured for VRRP.
PAGE 1388
Defaults Not configured Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information NOTE: This command also enables you to clear the port configurations corresponding to a range of ports. • You can specify multiple ports as slot/port-range.
PAGE 1389
show vrrp ipv6 View the IPv6 VRRP groups that are active. If no VRRP groups are active, the system returns No Active VRRP group. Syntax Parameters show vrrp ipv6 [vrid] [interface] [brief] vrid (OPTIONAL) Enter the virtual router identifier for the VRRP group to view only that group. The range is from 1 to 255.
PAGE 1390
Example Line Beginning with Description Adv rcvd:... This line displays counters for the following: • Adv rcvd displays the number of VRRP advertisements received on the interface. • Adv sent displays the number of VRRP advertisements sent on the interface. • Bad pkts rcvd displays the number of invalid packets received on the interface. Virtual MAC address Displays the virtual MAC address of the VRRP group.
PAGE 1391
Usage Information The VRRP group only becomes active and sends VRRP packets when a link-local virtual IP address is configured. When you delete the virtual address, the VRRP group stops sending VRRP packets. • When VRF microcode is not loaded in CAM, the VRID for a VRRP group is the same as the VRID number configured with the vrrp-group or vrrp-ipv6-group command.
PAGE 1392
NOTE: Do not run VRRP version 2 and version 3 in the same group for an extended period of time.
PAGE 1393
67 SNMP Traps This chapter lists the traps sent by the Dell Networking Operating System (OS). Each trap is listed by the fields Message ID, Trap Type, and Trap Option. Table 6.
PAGE 1394
Message ID Trap Type Trap Option NONE NONE ENVMON TEMP ENVMON TEMP ENVMON TEMP ENVMON TEMP ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE PROTO NONE PROTO NONE %RPM0-P:CP %SNMP-4-RMON_HC_FALLING_THRESHOLD: RMON highcapacity falling threshold alarm from SNMP OID RESV N/A CHM_MIN_ALRM_TEMP %CHMGR-2-MINOR_TEMP: Minor alarm: chassis temperature CHM_MIN_ALRM_TEMP_CLR %CHMRG-5-MINOR_TEMP_CLR: Minor alarm cleared: chassis temperature normal
PAGE 1395
Message ID Trap Type Trap Option PROTO NONE PROTO NONE PROTO NONE ETS NONE ETS NONE ETS NONE ETS NONE PFC NONE PFC NONE %VRRP-6-VRRP_MASTER: vrid-%d on %s entering MASTER VRRP_PROTOCOL_ERROR VRRP_PROTOERR: VRRP protocol error on %S BGP4_ESTABLISHED %TRAP-5-PEER_ESTABLISHED: Neighbor %a, state %s BGP4_BACKW_XSITION %TRAP-5-BACKWARD_STATE_TRANS: Neighbor %a, state %s ETS_TRAP_TYPE_MODULE_STATUS_CHA NGE %DIFFSERV-5-ETS_TRAP_TYPE_MODULE_STATUS_CHANGE: ETS Module status changed to enabled %D
PAGE 1396
Message ID Trap Type Trap Option PFC NONE PFC NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE ENTITY NONE %DIFFSERV-5-PFC_TRAP_TYPE_ADMIN_MODE_CHANGE : PFC Admin mode changed to off for port %s PFC_TRAP_TYPE_OPER_STATE_CHANGE %DIFFSERV-5-PFC_TRAP_TYPE_OPER_STATE_CHANGE: PFC Oper state changed to init for port %s %DIFFSERV-5-PFC_TRAP_TYPE_OPER_STATE_CHANGE: PFC Oper state changed to off for port %s %DIFFSERV-5-PFC_TRAP_TYPE_OPER_STATE_CHANGE: PFC Oper state c
PAGE 1397
68 FC Flex IO Modules This part provides a generic, broad-level description of the operations, capabilities, and configuration commands of the Fiber Channel (FC) Flex IO module. FC Flex IO Module mentioned in this guide refers to FCF Port Combo Card.
PAGE 1398
description (for FCoE maps) In an FCoE map, add a text description of the FCoE and FC parameters used to transmit storage traffic over a Switch with the FC Flex IO module NPIV proxy gateway in a converged fabric. Syntax description text Parameters text Defaults None Command Modes FCOE MAP Supported Modes Full–Switch Command History Enter a maximum of 32 characters. Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.
PAGE 1399
downstream server CNA ports as FCoE forwarder (FCF) ports on an FCoE network. When applied to FC and Ethernet ports on an NPIV proxy gateway, an FCoE map allows the switch to operate as an FCoE-FC bridge between an FC SAN and an FCoE network by providing FCoE-enabled servers and switches with the necessary parameters to log in to a SAN fabric. Use the fcoe-map command to create an FCoE map.
PAGE 1400
You must first create a VLAN and then specify the configured VLAN ID in the fabric-id vlan command. Otherwise, the following error message is displayed. FTOS(conf-fcoe-f)#fabric-id 10 vlan 10 % Error: Vlan 10 does not exist Related Commands fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric. show fcoe-map — displays the Fibre Channel and FCoE configuration parameters in FCoE maps.
PAGE 1401
The range of FC-MAP values is from 0EFC00 to 0EFCFF. Defaults None Command Modes FCoE MAP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN 2210S Aggregator. 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. The FC-MAP value you enter must match the FC-MAP value used by an FC switch or FCoE forwarder (FCF) in the fabric.
PAGE 1402
Command Modes • Keepalive: enable • Vlan priority: 3 CONFIGURATION INTERFACE Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. An FCoE map is a template used to map FCoE and FC parameters in a converged fabric.
PAGE 1403
Command History Version Version 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. Usage Information To delete the FIP keepalive time period from an FCoE map, enter the no fka-adv-erpiod command. Related Commands fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric.
PAGE 1404
Related Commands fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric. show fcoe-map— displays the Fibre Channel and FCoE configuration parameters in FCoE maps. keepalive In an FCoE map, enable the monitoring of FIP keepalive messages (if it is disabled). Syntax keepalive Parameters None Defaults FIP keepalive monitoring is enabled on Ethernet and Fibre Channel interfaces.
PAGE 1405
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. Use the show fcoe-map command to display the FC and FCoE parameters used to configure server-facing Ethernet (FCoE) and fabric-facing FC ports in all FCoE maps on a switch with the FC Flex IO module NPIV proxy gateway.
PAGE 1406
Example Field Description FKA-ADV-period Time interval (in seconds) used to transmit FIP keepalive advertisements. FCF Priority The priority used by a server to select an upstream FCoE forwarder. Config-State Indicates whether the configured FCoE and FC parameters in the FCoE map are valid: Active (all mandatory FCoE and FC parameters are correctly configured) or Incomplete (either the FC-MAP value, fabric ID, or VLAN ID are not correctly configured).
PAGE 1407
Usage Information Version Description 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. Use the show npiv devices command to display information on the server CNA, server-facing Ethernet and fabric-facing FC ports, and the SAN fabric in each server-fabric connection over a switch with the FC Flex IO module NPIV proxy gateway. The following table describes the show npiv devices brief output shown in the example below.
PAGE 1408
Example Related Commands 1408 Field Description FCoE VLAN ID of the dedicated VLAN used to transmit FCoE traffic from a server CNA to a fabric and configured on both the server-facing the switch with the FC Flex IO module port and server CNA port. Fabric Map Name of the FCoE map containing the FCoE/FC configuration parameters for the server CNA-fabric connection. Enode WWPN Worldwide port name of the server CNA port. Enode WWNN Worldwide node name of the server CNA.
PAGE 1409
69 Debugging and Diagnostics This chapter contains the following sections: • Offline Diagnostic Commands • Hardware Commands Topics: • Offline Diagnostic Commands • Hardware Commands • clear hardware stack-unit • clear hardware system-flow • show hardware layer2 acl • show hardware layer3 • diag stack-unit • hardware watchdog • online stack-unit • offline stack-unit • show diag • show hardware stack-unit • show hardware system-flow • show hardware buffer interface • show har
PAGE 1410
• offline stack-unit • show diag Hardware Commands These commands display information from a hardware sub-component or ASIC. The hardware commands are: • clear hardware stack-unit • show diag • show hardware stack-unit • show hardware system-flow clear hardware stack-unit Clear statistics from selected hardware components.
PAGE 1411
clear hardware system-flow Clear system-flow statistics from selected hardware components. Syntax Parameters clear hardware system-flow layer2 stack-unit 0–5 port-set 0–0 counters stack-unit 0–5 Enter the keywords stack-unit then 0 to 5 to select a particular stack member and then enter one of the following command options to clear a specific collection of data.
PAGE 1412
show hardware layer3 Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe. Syntax show hardware layer3 {acl | qos} stack-unit 0–5 port-set 0–0 Parameters acl | qos Enter either the keyword acl or the keyword qos to select between ACL or QoS data. stack-unit 0–5 Enter the keywords stack-unit then a numeral from 0 to 5 to select a stack ID. port-set 0–0 Enter the keyword port-set with a port-pipe number.
PAGE 1413
no-reboot Enter the keyword no-reboot to avoid automatic rebooting of the chassis after completion of diagnostic execution. Generally, this option is never used because if you run the diagnostic once again without rebooting the chassis, it may cause an issue with the diagnostic results.. terminate Enter the keyword terminate to stop the execution of the level diag that is already started using the diag stack-unit command.
PAGE 1414
online stack-unit Place a stack unit in the online state. Syntax online stack-unit number Parameters number Defaults none Command Modes EXEC Privilege Command History Enter the stack-unit number. The range is from 0 to 5. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. offline stack-unit Place a stack unit in the offline state.
PAGE 1415
show diag View diagnostics information. Syntax Parameters show diag {information | stack-unit unit-id [detail | summary] | testcase} information Enter the keyword information to view current diagnostics information in the system. stack-unit unit-id Enter the keyword stack-unit followed by the unit-id to display information on a specific stack member. The range is from 0 to 5. detail (OPTIONAL) Enter the keyword detail to view detailed diagnostics information.
PAGE 1416
Example 3 (show diag testcase stackunit Command) Dell#show diag testcase stack-unit 0 ******** Blade IOM Diagnostics Test ********** Test ID ------1 3 4 5 6 7 8 9 11 12 13 14 16 17 101 102 103 104 105 106 107 108 109 110 111 113 114 117 123 124 201 203 204 205 206 207 208 Test Description ---------------POWERRAILSTATUSTEST TSENSORACCESSTEST RTCPRESENCETEST CPUSDRAMPRESENCETEST CPUSDRAMSIZETEST USBAACCESSTEST USBHOSTCONTROLLERACCESSTEST SDFLASHACCESSTEST CPLDPRESENCETEST FLASHACCESSTEST BOARDREVTEST MGMTPH
PAGE 1417
Dell# show hardware stack-unit Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
PAGE 1418
• Supported Modes Command History EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Replaced the keyword port with interface. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 1419
0 errors Dell# Example (drop counters) Dell#show hardware stack-unit 1 unit 0 counters unit: 0 port: 1 (interface Te 1/1) Description RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX TX TX TX TX TX TX TX TX TX TX TX TX - IPV4 L3 Unicast Frame Counter IPV4 L3 Routed Multicast Packets IPV6 L3 Unicast Frame Counter IPV6 L3 Routed Multicast Packets Unicast Packet Counter 64 Byte Frame Counter 65 to 127 Byte Fram
PAGE 1420
TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX - Unicast Frame Counter Multicast Frame Counter Broadcast Frame Counter Byte Counter Control Frame Counter Pause Control Frame Counter Oversized Frame Counter Jabber Counter VLAN Tag Frame Counter Double VLAN Tag Frame Counter RUNT Frame Counter Fragment Counter PFC Frame Priority 0 PFC Frame Priority 1 PFC Frame Priority 2 PFC Frame Priority 3 PFC Frame Priority 4 PFC Frame Priority 5 PFC Frame Priority 6 PFC
PAGE 1421
RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX Example (portstatistics) - Fragment Counter VLAN Tagged Packets Ingress Dropped Packet MTU Check Error Frame Counter PFC Frame Priority 0 PFC Frame Priority 1 PFC Frame Priority 2 PFC Frame Priority 3 PFC Frame Priority 4 PFC Frame Priority 5 PFC Frame Priority 6 PFC Frame Priority 7 Debug Counter 0 Debug Counter
PAGE 1422
loop back Dell# port link xe0 xe1 xe2 xe3 xe4 xe5 xe6 xe7 xe8 xe9 xe10 xe11 up up up down up down up down down down up up duplex scan neg? 10G 10G 10G 1G 10G 1G 10G 1G 10G 10G 10G 10G FD FD FD FD FD FD FD FD FD FD FD FD SW SW SW SW SW SW SW SW SW SW SW SW Yes Yes Yes Yes Yes Yes Yes Yes No No No No state pause Forward Forward Forward Block Forward Block Forward Block Block Block Forward Forward RX RX RX RX RX discrd ops None None None None None None None None None None None None FA FA FA FA FA
PAGE 1423
bcmLinkMonStatusShow: The Current Link Status Is Front End Link Status 0xea3000000000000000000000 Front End Port Present Status 0x000000000000000000000000 Back Plane Link Status 0x00000000 ****************************************************** Link Status of all the ports in the Device - 0 The linkStatus of Front End Port 42 is TRUE The linkStatus of Front End Port 43 is TRUE The linkStatus of Front End Port 44 is TRUE The linkStatus of Front End Port 45 is FALSE The linkStatus of Front End Port 46 is TRUE
PAGE 1424
Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/6 Queue 6 ----Maximum Shared Limit: 7667 Default Packet Buffer allocate for the Queue: 8 Used Packet Buffer: 0 Related Commands show interfaces stack-unit — displays information on all interfaces on a specific stack member. show processes cpu — displays CPU usage information based on running processes. show system — displays the current status of all stack members or a specific member.
PAGE 1425
705 704 703 701 699 698 697 696 695 693 509 508 507 506 510 505 504 503 502 501 500 499 498 497 496 495 494 493 492 491 490 Dell# Example (noncounters) 249 147 145 144 773 772 771 770 769 VLT L2PM Sync Frames VLT ARP Sync Frames VLT IPM Sync Frames VLT NDPM Sync Frames VLT TTL1 Packets Tunneled VLT Dyn Client pkts VLT PIM Sync Frames VLT MRTM Sync Frames VLT SMUX Sync Frames DROP Cases BGP_SPORT PACKETS BGP_DPORT PACKETS MSDP_SPORT PACKETS MSDP_DPORT PACKETS IGMP PACKETS WITH IP OPTIONS FP Entry for OSP
PAGE 1426
############## FP Entry for redirecting LACP traffic to CPU Port ############ EID 2045: gid=1, slice=15, slice_idx=0x02, prio=0x7fd, flags=0x82, Installed tcam: color_indep=0, higig=0, higig_mask=0, KEY=0x00000000 00000000 00000000 0180c200 00020000 00000000 00000000 , FPF4=0x00 MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000 , 0x00 action={act=Drop, param0=0(0x00), param1=0(0x00)}, action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)}, action={act=CopyToCpu, param0=0(0x00), param1=0
PAGE 1427
EXEC Privilege Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Introduced on the M I/O Aggregator and FN I/O Aggregator.
PAGE 1428
Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/1 Queue 11 ----Maximum Shared Limit: 29514 Default Packet Buffer allocate for the Queue: 8 show hardware counters interface interface Display the counter information for a specific interface. Syntax show hardware counters interface interface Parameters Defaults counters Enter the keywords counters to display counter value for the specified stack-member the port-pipe.
PAGE 1429
RX - 4096 to 9216 Byte Frame Counter RX - Good Packet Counter RX - Packet/Frame Counter RX - Unicast Frame Counter RX - Multicast Frame Counter RX - Broadcast Frame Counter RX - Byte Counter RX - Control Frame Counter RX - Pause Control Frame Counter RX - Oversized Frame Counter RX - Jabber Frame Counter RX - VLAN Tag Frame Counter RX - Double VLAN Tag Frame Counter RX - RUNT Frame Counter RX - Fragment Counter RX - VLAN Tagged Packets RX - Ingress Dropped Packet RX - MTU Check Error Frame Counter RX - PFC
PAGE 1430
Version Description 9.8(0.0) Introduced on the M I/O Aggregator and the FN I/O Aggregator.
PAGE 1431
Packets dropped by FP (L2+L3) Drops Port bitmap zero Drops Rx VLAN Drops --- Ingress MAC counters--Ingress FCSDrops Ingress MTUExceeds --- MMU Drops --Ingress MMU Drops Ingress Drops Bytes HOL DROPS(TOTAL) HOL DROPS on COS0 HOL DROPS on COS1 HOL DROPS on COS2 HOL DROPS on COS3 HOL DROPS on COS4 HOL DROPS on COS5 HOL DROPS on COS6 HOL DROPS on COS7 HOL DROPS on COS8 HOL DROPS on COS9 HOL DROPS on COS10 HOL DROPS on COS11 HOL DROPS on COS12 HOL DROPS on COS13 HOL DROPS on COS14 TxPurge CellErr Aged Drops ---
PAGE 1432
A Internet Control Message Protocol (ICMP) Message Types This chapter lists and describes the possible ICMP message type resulting from a ping. The first three columns list the possible symbol or type/code. For example, you would receive a ! or 03 as an echo reply from your ping. Table 7. ICMP messages and their definitions Symbol Type Code . Description Query Error Timeout (no reply) ! 0 U 3 C 3 . destination unreachable: 0 network unreachable . 1 host unreachable .
PAGE 1433
Symbol & Type Code Description Query 10 0 router solicitation . 11 Error time exceeded: 0 time-to-live equals 0 during transit . 1 time-to-live equals 0 during reassembly . 12 parameter problem: 1 IP header bad (catchall error) . 2 required option missing . 13 0 timestamp request . 14 0 timestamp reply . 15 0 information request (obsolete) . 16 0 information reply (obsolete) . 17 0 address mask request . 18 0 address mask reply .