Concept Guide

ManualsBrandsDell ManualsAccess PlatformsFN IO Module

Dell PowerEdge FN I/O Module

Command Line Reference Guide

9.14.1.0

Summary of content (1438 pages)

PAGE 1
Dell PowerEdge FN I/O Module Command Line Reference Guide 9.14.1.
PAGE 2
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2018 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
PAGE 3
Contents 1 About this Guide...........................................................................................................................................46 Objectives......................................................................................................................................................................... 46 Audience........................................................................................................................................................
PAGE 4
dir....................................................................................................................................................................................... 67 format flash.......................................................................................................................................................................67 HTTP Copy via CLI...........................................................................................................................
PAGE 5
http-server........................................................................................................................................................................96 ip ftp password.................................................................................................................................................................96 ip ftp source-interface................................................................................................................................
PAGE 6
802.1X........................................................................................................................................................ 136 debug dot1x..................................................................................................................................................................... 137 dot1x authentication (Configuration)............................................................................................................................
PAGE 7
permit (for Extended IP ACLs)...................................................................................................................................... 171 permit icmp......................................................................................................................................................................173 permit tcp.........................................................................................................................................................
PAGE 8
show route-map.............................................................................................................................................................208 deny (for Standard IP ACLs)........................................................................................................................................ 209 deny.....................................................................................................................................................................
PAGE 9
bfd all-neighbors.............................................................................................................................................................276 bfd disable....................................................................................................................................................................... 278 bfd enable (Configuration).............................................................................................................................
PAGE 10
clear ip bgp dampening................................................................................................................................................. 308 clear ip bgp flap-statistics............................................................................................................................................ 308 clear ip bgp peer-group................................................................................................................................................
PAGE 11
shutdown address-family-ipv4–multicast...................................................................................................................336 shutdown address-family-ipv4–unicast...................................................................................................................... 337 shutdown address-family-ipv6–unicast...................................................................................................................... 337 show capture bgp-pdu neighbor........
PAGE 12
clone-config check........................................................................................................................................................ 376 clone-config create........................................................................................................................................................ 377 12 Content Addressable Memory (CAM).......................................................................................................
PAGE 13
bandwidth-percentage..................................................................................................................................................403 dcb-enable......................................................................................................................................................................403 dcb-policy buffer-threshold (Global Configuration)...................................................................................................
PAGE 14
Commands to Configure the System to be a DHCP Server.................................................................................... 443 clear ip dhcp............................................................................................................................................................. 443 debug ip dhcp server...............................................................................................................................................444 debug ipv6 dhcp .............
PAGE 15
ip dhcp source-address-validation.........................................................................................................................463 ip dhcp snooping vlan..............................................................................................................................................463 ipv6 dhcp snooping vlan......................................................................................................................................... 464 ip dhcp relay.........
PAGE 16
feature fip-snooping................................................................................................................................................ 493 fip-snooping enable................................................................................................................................................. 494 fip-snooping fc-map................................................................................................................................................
PAGE 17
ip igmp group-join-limit................................................................................................................................................. 525 ip igmp querier-timeout.................................................................................................................................................526 ip igmp query-interval................................................................................................................................................
PAGE 18
show interfaces........................................................................................................................................................ 561 show interfaces configured.................................................................................................................................... 564 show interfaces dampening...................................................................................................................................
PAGE 19
vlan untagged (CMC)............................................................................................................................................. 600 25 IPv4 Routing............................................................................................................................................602 arp....................................................................................................................................................................................
PAGE 20
show ip route summary.................................................................................................................................................636 show ip traffic.................................................................................................................................................................637 show tcp statistics...............................................................................................................................................
PAGE 21
show ipv6 flowlabel-zero.............................................................................................................................................. 668 show ipv6 interface....................................................................................................................................................... 669 show ipv6 mld_host....................................................................................................................................................
PAGE 22
default-metric...........................................................................................................................................................698 description................................................................................................................................................................ 699 distance bgp.......................................................................................................................................................
PAGE 23
show ip bgp ipv6 unicast filter-list......................................................................................................................... 725 show ip bgp ipv6 unicast flap-statistics................................................................................................................726 show ip bgp ipv6 unicast inconsistent-as............................................................................................................. 727 show ip bgp ipv6 unicast neighbors......
PAGE 24
show ip bgp ipv6 unicast neighbors...................................................................................................................... 754 show ip bgp ipv6 unicast peer-group.................................................................................................................... 756 show ip bgp ipv6 unicast summary........................................................................................................................757 30 iSCSI Optimization......................
PAGE 25
ip router isis.....................................................................................................................................................................784 ipv6 router isis................................................................................................................................................................ 784 isis circuit-type...................................................................................................................................
PAGE 26
debug lacp....................................................................................................................................................................... 816 io-aggregator auto-lag enable....................................................................................................................................... 817 lacp link-fallback...............................................................................................................................................
PAGE 27
debug lldp interface.......................................................................................................................................................850 disable.............................................................................................................................................................................. 851 hello..................................................................................................................................................
PAGE 28
debug spanning-tree mstp............................................................................................................................................878 description...................................................................................................................................................................... 879 disable...........................................................................................................................................................
PAGE 29
fka-adv-period............................................................................................................................................................... 909 keepalive......................................................................................................................................................................... 909 show fcoe-map..........................................................................................................................................
PAGE 30
network area.................................................................................................................................................................. 940 passive-interface............................................................................................................................................................ 941 redistribute...............................................................................................................................................
PAGE 31
ipv6 ospf authentication............................................................................................................................................... 984 ipv6 ospf bfd all-neighbors........................................................................................................................................... 985 ipv6 ospf cost...........................................................................................................................................................
PAGE 32
ip pim sparse-mode.......................................................................................................................................................1017 ip pim sparse-mode sg-expiry-timer...........................................................................................................................1018 ip pim spt-threshold......................................................................................................................................................
PAGE 33
private-vlan mode........................................................................................................................................................ 1048 show interfaces private-vlan.......................................................................................................................................1049 show vlan private-vlan.................................................................................................................................................
PAGE 34
match mac vlan....................................................................................................................................................... 1081 policy-aggregate......................................................................................................................................................1081 policy-map-input....................................................................................................................................................
PAGE 35
ip rip send version.......................................................................................................................................................... 1112 ip split-horizon................................................................................................................................................................ 1113 maximum-paths..........................................................................................................................................
PAGE 36
52 Security.................................................................................................................................................. 1142 AAA Accounting Commands....................................................................................................................................... 1142 aaa accounting........................................................................................................................................................
PAGE 37
coa-disable-port...................................................................................................................................................... 1172 coa-reauthenticate..................................................................................................................................................1173 debug radius.............................................................................................................................................................
PAGE 38
show ip ssh............................................................................................................................................................. 1200 show ip ssh client-pub-keys.................................................................................................................................. 1201 show ip ssh rsa-authentication.............................................................................................................................1202 show role......
PAGE 39
protocol-tunnel enable................................................................................................................................................. 1228 protocol-tunnel rate-limit.............................................................................................................................................1228 show protocol-tunnel...................................................................................................................................................
PAGE 40
logging trap................................................................................................................................................................... 1260 logging version...............................................................................................................................................................1261 show logging............................................................................................................................................
PAGE 41
server........................................................................................................................................................................1291 SupportAssist Activity Commands............................................................................................................................. 1291 action-manifest get................................................................................................................................................
PAGE 42
ntp authentication-key................................................................................................................................................. 1321 ntp control-key-passwd...............................................................................................................................................1322 ntp master ..................................................................................................................................................
PAGE 43
63 Uplink Failure Detection (UFD)............................................................................................................... 1347 clear ufd-disable........................................................................................................................................................... 1347 debug uplink-state-group............................................................................................................................................ 1348 defer-timer...
PAGE 44
show vlt role..................................................................................................................................................................1375 show vlt statistics.........................................................................................................................................................1376 stack-unit iom-mode........................................................................................................................................
PAGE 45
interface vlan (NPIV proxy gateway)...................................................................................................................1408 keepalive..................................................................................................................................................................1409 show fcoe-map......................................................................................................................................................
PAGE 46
1 About this Guide This book provides information about the Dell Networking OS command line interface (CLI) on the Dell PowerEdge FN I/O Module. This book also includes information about the protocols and features found in the Dell Networking OS and on the Dell Networking systems supported by the Dell Networking OS.
PAGE 47
x|y Keywords and parameters separated by a bar require you to choose one option. x||y Keywords and parameters separated by a double bar allow you to choose any or all of the options. Information Icons This book uses the following information symbols: NOTE: The Note icon signals important operational information. CAUTION: The Caution icon signals information about situations that could result in equipment damage or loss of data.
PAGE 48
2 Before You Start By following the instructions in the Dell PowerEdge FN I/O Module Getting Started Guide that is shipped with the product, you install the FN I/O Module in a Dell PowerEdge FX2 server chassis. The Aggregator installs with zero-touch configuration. After you power it on, an Aggregator boots up with default settings and autoconfigures with software features enabled. This chapter describes the default settings and software features that are automatically configured at startup.
PAGE 49
• Password (calvin) • VLAN (vlan1) and IP address for in-band management (DHCP-assigned) • IP address for out-of-band (OOB) management (DHCP-assigned) • Read-only SNMP community name (public) • Broadcast storm control (enabled) • Unregistered Multicast Packets flooding (enabled) • IGMP snooping in all VLANs except the default VLAN (enabled) • VLAN configuration (all ports belong to all VLANs) You can change any of these default settings using the CLI.
PAGE 50
The Aggregator also provides zero-touch configuration for FCoE configuration. The Aggregator auto-configures to match the FCoE settings used in the ToR switches to which it connects through its uplink ports. iSCSI Operation Support for iSCSI traffic is turned on by default when the Aggregator powers up. No configuration is required. When the Aggregator powers up, it monitors known TCP ports for iSCSI storage devices on all interfaces.
PAGE 51
The tagged VLAN membership of the uplink LAG is automatically configured based on the tagged and untagged VLAN configuration of all server-facing ports (ports 1 to 8). The untagged VLAN used for the uplink LAG is always the default VLAN. Server-Facing LAGs The tagged VLAN membership of a server-facing LAG is automatically configured based on the server-facing ports that are members of the LAG.
PAGE 52
Refer to the appropriate chapter for detailed information on how to configure specific software settings.
PAGE 53
3 CLI Basics This chapter describes the command line interface (CLI) structure and command modes. The Dell operating system commands are in a text-based interface that allows you to use the launch commands, change command modes, and configure interfaces and protocols.
PAGE 54
User "" on line User "admin" on User "admin" on User "Irene" on Dell#conf console0 line vty0 ( 123.12.1.123 ) line vty1 ( 123.12.1.123 ) line vty3 ( 123.12.1.321 ) When another user enters CONFIGURATION mode, the Dell Networking OS sends a message similar to the following: % Warning: User "admin" on line vty2 "172.16.1.210" is in configuration In this case, the user is “admin” on vty2. Navigating the CLI The Dell Networking OS displays a CLI prompt comprised of the host name and CLI mode.
PAGE 55
brief functional description: To obtain a list of available options: Type a keyword and then type a space and a ?. To obtain a list of partial keywords using a partial keyword: Type a partial keyword and then type a ?.
PAGE 56
Using the Keyword no Command To disable, delete or return to default values, use the no form of the commands. For most commands, if you type the keyword no in front of the command, you disable that command or delete it from the running configuration. In this guide, the no form of the command is described in the Syntax portion of the command description.
PAGE 57
Dell#show running-config|no-more Filtering the Command Output Multiple Times You can filter a single command output multiple times. To filter a command output multiple times, place the save option as the last filter. For example: Dell# command | grep regular-expression | except regular-expression | grep other-regularexpression | find regular-expression | no-more | save Command Modes To navigate and launch various CLI modes, use specific commands.
PAGE 58
To enter INTERFACE mode: 1 Verify that you are logged in to CONFIGURATION mode. 2 Enter the interface command and then enter an interface type and interface number that is available on the switch. The prompt changes to include the designated interface and slot/port number.
PAGE 59
Track Login Activity Dell Networking OS enables you to track the login activity of users and view the successful and unsuccessful login events. When you log in using the console or VTY line, the system displays the last successful login details of the current user and the number of unsuccessful login attempts since your last successful login to the system. The system stores the number of unsuccessful login attempts that have occurred in the last 30 days by default.
PAGE 60
-----------------------------------------------------------------User: admin Last login time: Mon Feb 16 04:40:00 2015 Last login location: Line vty0 ( 10.14.1.
PAGE 61
Configuring Concurrent Session Limit To configure concurrent session limit, follow this procedure: • Limit the number of concurrent sessions for all users. CONFIGURATION mode login concurrent-session limit number-of-sessions Example of Configuring Concurrent Session Limit The following example limits the permitted number of concurrent login sessions to 4.
PAGE 62
3 vty 1 10.14.1.97 4 vty 2 10.14.1.97 5 vty 3 10.14.1.
PAGE 63
4 File Management This chapter contains commands needed to manage the configuration files and includes other file management commands. boot system gateway Specify the IP address of the default next-hop gateway for the management subnet. Syntax Parameters boot system gateway ip-address ip-address Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information Enter an IP address in dotted decimal format. Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.
PAGE 64
Usage Information Version Description 8.3.17.0 Supported on the M I/O Aggregator. 9.4(0.0) Supported on the FN I/O aggregator. The system first attempts to load the image from the primary path. If it fails to boot, the system tries to load the image from the secondary path and if that also fails, the system loads the default image. cd Change to a different working directory.
PAGE 65
Usage Information Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. The Dell Networking OS supports a maximum of 100 files, at the root directory level, on both the internal and external Flash. The usbflash commands are supported. For a list of approved USB vendors, refer to the Dell Networking OS Release Notes.
PAGE 66
Password to login remote host: Destination file name [test.cfg]: test1.cfg Related Commands cd — Changes the working directory. copy running-config startup-config Copy running configuration to the startup configuration. Syntax copy running-config startup-config {duplicate} Command Modes EXEC Privilege Supported Modes All Modes Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.
PAGE 67
dir Displays the files in a file system. The default is the current directory. Syntax Parameters dir [filename | directory name:] filename | directory name: Command Modes EXEC Privilege Supported Modes All Modes Command History Example (OPTIONAL) Enter one of the following: • For a file or directory on the internal Flash, enter flash:// then the filename or directory name. • For a file or directory on an external USB drive, enter usbflash:// then the filename or directory name.
PAGE 68
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. You must include the colon (:) when entering this command. CAUTION: This command deletes all files, including the startup configuration file. So, after executing this command, consider saving the running config as the startup config (use the write memory command or copy run start command).
PAGE 69
Example copy http://admin:admin123@10.16.206.77/sample_file flash://sample_file Related Commands copy ftp:flash Copy files from FTP server to switch logging coredump stack-unit Enable the coredump. Syntax logging coredump stack-unit all Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 70
Usage Information Because flash space may be limited, using this command ensures your entire crash kernel files are uploaded successfully and completely. Only a single coredump server can be configured. Configuration of a new coredump server over-writes any previously configured server. NOTE: You must disable logging coredump before you designate a new server destination for your core dumps. Related Commands logging coredump – disables the kernel coredump pwd Display the current working directory.
PAGE 71
restore factory-defaults Restore factory defaults. Syntax Parameters restore factory-defaults stack-unit id {clear-all | nvram} factory-defaults Return the system to its factory default mode. id Enter the stack member unit identifier to restore the mentioned stack-unit. The range is from 0 to 6. Enter the keyword all to restore all units in the stack. clear-all Enter the keywords clear-all to reset the NvRAM and the system startup configuration. nvram Enter the keyword nvram to reset the NvRAM only.
PAGE 72
Example (NvRAM, all) Dell#restore factory-defaults stack-unit all nvram ************************************************* *Warning - Restoring factory defaults will delete the existing* *persistent settings (stacking, fanout, etc.)* *All the units in the stack will be split into standalone units.* *After restoration the unit(s) will be powercycled immediately.
PAGE 73
Example Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Dell#show boot system stack-unit all Current system image information in the system: ============================================= Type Boot Type A B --------------------------------------------Stack-unit 0 is not present. Stack-unit 1 DOWNLOAD BOOT 9-1-0-218 9-1-0-202 Stack-unit 2 is not present. Stack-unit 3 is not present. Stack-unit 4 is not present. Stack-unit 5 is not present.
PAGE 74
show file-systems Displays information about the file systems on the system. Syntax show file-systems Command Modes EXEC Privilege Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 75
Parameters file-url Defaults none Command Modes EXEC Privilege Supported Modes All Modes Command History Usage Information Example (OPTIONAL) Enter the following location keywords and information: • For a file on the internal Flash, enter flash:// then the filename. • For a file on an FTP server, enter ftp://user:password@hostip/filepath. • For a file on a TFTP server, enter tftp://hostip/filepath. • For a file on the external Flash, enter usbflash://filepath then the filename.
PAGE 76
for the current IGMP configuration interface for the current interface configuration line for the current line configuration lldp for the current lldp configuration logging for the current logging configuration managementroute for the current Management port forwarding configuration monitor for the current Monitor configuration snmp for the current SNMP configuration uplink-stategroup for the uplink state group configuration users for the current users configuration configured (OPTIONAL)
PAGE 77
no shutdown Dell# Usage Information The status option allows you to display the size and checksum of the running configuration and the startup configuration. show startup-config Display the startup configuration. Syntax show startup-config Command Modes EXEC Privilege Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 78
Example Dell#show version Dell Force10 Real Time Operating System Software Dell Force10 Operating System Version: 1.0 Dell Force10 Application Software Version: E8-3-17-38 Copyright (c) 1999-2012 by Dell Inc. All Rights Reserved.
PAGE 79
0–5 Enter the keyword 0–5 to upgrade only the mentioned stack-unit. all Enter the keyword all to upgrade all the member stack-units. booted Enter the keyword booted to upgradefrom the current image in the M I/O Aggregator. ftp: After entering the keyword ftp:, you can either follow it with the location of the source file in this form: //userid:password@hostip/filepath or press Enter to launch a prompt sequence.
PAGE 80
ftp After entering the keyword ftp you can either follow it with the location of the source file in this form://userid:password@hostip/filepath, or press Enter to launch a prompt sequence. scp After entering the keyword scp you can either follow it with the location of the source file in this form://userid:password@hostip/filepath, or press Enter to launch a prompt sequence.
PAGE 81
sha256 Enter the sha256 keyword to use the SHA256 Secure Hash Algorithm flash:// (Optional). Enter the flash:// keyword. The default is to use the flash drive. You can just enter the image file name. img-file Enter the name the Dell Networking software image file to validate. hash-value (Optional). Enter the relevant hash published on i-Support. Defaults flash drive Command Modes EXEC mode Command History Usage Information Example Version Description 9.5(0.
PAGE 82
5 Control and Monitoring This chapter describes control and monitoring for the I/O Aggregator. asf-mode Enable alternate store and forward (ASF) mode and forward packets as soon as a threshold is reached. Syntax asf-mode stack-unit {unit-id | all} queue size To return to standard Store and Forward mode, use the no asf-mode stack unit command. Parameters unit-id Enter the stack member unit identifier of the stack member to reset. The range is from 0 to 5 or all.
PAGE 83
Command Modes EXEC Privilege Supported Modes All Modes Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. show system— Displays the current status of all stack members or a specific member. banner exec Configure a message that is displayed when your enter EXEC mode.
PAGE 84
This is the banner Related Commands banner login — sets a banner for login connections to the system. banner motd — sets a Message of the Day banner. exec-banner — Enables the display of a text string when you enter EXEC mode. line — enables and configures the console and virtual terminal lines to the system. banner login Set a banner to display when logging on to the system. Syntax banner login {acknowledgement | keyboard-interactive | c line c} Enter no banner login to delete the banner text.
PAGE 85
prompt keyboard-interactive Prompt will be displayed by default If you configure the acknowledgement keyword, the system requires a positive acknowledgement from the user while logging in to the system. $ telnet 10.11.178.16 Trying 10.11.178.16... Connected to 10.11.178.16. Escape character is '^]'. THIS IS A LOGIN BANNER. PRESS ‘Y’ TO ACKNOWLEDGE. ACKNOWLEDGE? [y/n]: y Login: admin Password: Related Commands banner motd — sets a Message of the Day banner.
PAGE 86
Command Modes EXEC Privilege Supported Modes All Modes Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. This command clears alarms that are no longer active. If an alarm situation is still active, it is seen in the system output. clear command history Clear the command history log.
PAGE 87
configure Enter CONFIGURATION mode from EXEC Privilege mode. Syntax Parameters configure [terminal] terminal Command Modes EXEC Privilege Supported Modes All Modes Command History Example (OPTIONAL) Enter the keyword terminal to specify that you are configuring from the terminal. Version Description 9.9(0.0) Introduced on the IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 88
Related Commands show cpu-traffic-stats— displays the cpu traffic statistics. debug ifm trace-flags Turn on the IFM internal trace-flags. Syntax debug ifm trace-flags trace-flags To disable this command, use the no debug ifm trace-flags command. Parameters trace-flags Defaults None Command Modes EXEC Privilege Supported Modes All Modes Command History Enter a hexadecimal number representing the trace-flag. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 89
Parameters level Defaults 1 Command Modes EXEC Privilege Supported Modes All Modes Command History (OPTIONAL) Enter a number for a privilege level of the Dell Networking OS. The range is from 0 to 15. The default is 1. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. do Allows the execution of most EXEC-level commands from all CONFIGURATION levels without returning to the EXEC level.
PAGE 90
enable Enter EXEC Privilege mode or any other privilege level configured. After entering this command, you may need to enter a password. Syntax enable [level] Parameters level Defaults 15 Command Modes EXEC Supported Modes All Modes Command History (OPTIONAL) Enter a number for a privilege level of the Dell Networking OS. The range is from 0 to 15. The default is 15. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.
PAGE 91
enable optic-info-update interval Enable polling intervals of optical information updates for simple network management protocol (SNMP). Syntax enable optic-info-update interval seconds To disable optical power information updates, use the no enable optic-info-update interval command. Parameters interval seconds Defaults Disabled Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Enter the keyword interval then the polling interval in seconds.
PAGE 92
Supported Modes Command History Related Commands • INTERFACE • MONITOR SESSION • PROTOCOL LLDP All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. exit— returns to the lower command mode. exec-timeout Set a time interval that the system waits for input on a line before disconnecting the session.
PAGE 93
Command Modes Supported Modes Command History Related Commands • EXEC Privilege • CONFIGURATION • LINE • INTERFACE • PROTOCOL LLDP All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. end — returns to EXEC Privilege mode. feature unique-name Set a unique host name for the system.
PAGE 94
ftp-server enable Enable FTP server functions on the system. Syntax ftp-server enable Defaults Disabled Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Example morpheus% ftp 10.31.1.111 Connected to 10.31.1.111. 220 FTOS (1.0) FTP server ready Name (10.31.1.
PAGE 95
Supported Modes Command History All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information After you enable FTP server functions with the ftp-server enable command, Dell Networking recommends specifying a top-level directory path. Without a top-level directory path specified, the Dell Networking OS directs users to the flash directory when logging in to the FTP server.
PAGE 96
Parameters name Enter a text string, up to 32 characters long. Defaults Dell Networking Operating System (OS) Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information The host name is used in the prompt. Related Commands feature unique-name http-server Disable / Enable the Blade I/O Manager Software.
PAGE 97
password Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information • 0 (zero) for an unecrypted (clear text) password • 7 (seven) for a hidden text password Enter a string up to 40 characters as the password. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 98
ip telnet server enable Enable the Telnet server on the switch. Syntax ip telnet server enable To disable the Telnet server, use the no ip telnet server enable command. Defaults Enabled Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 99
ip ftp username Assign a user name for outgoing FTP connection requests. Syntax Parameters ip ftp username username username Enter a text string as the user name up to 40 characters long. Defaults No user name is configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Configure a password with the ip ftp password command.
PAGE 100
Version Description 8.3.17.0 Supported on the M I/O Aggregator. Usage Information You cannot delete a terminal connection. Related Commands show memory— View current memory usage on the M I/O Aggregator. login concurrent-session Configures the limit of concurrent sessions for all users on console and virtual terminal lines.
PAGE 101
When you try to login, the following message appears with all your existing concurrent sessions, providing an option to close any one of the existing sessions: $ telnet 10.11.178.14 Trying 10.11.178.14... Connected to 10.11.178.14. Escape character is '^]'. Login: admin Password: Current sessions for user admin: Line Location 2 vty 0 10.14.1.97 3 vty 1 10.14.1.
PAGE 102
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Only the system and security administrators can configure login activity tracking and view the login activity details of other users. If you enable user login statistics, the system displays the last successful login details of the current user and the details of any failed login attempts by others.
PAGE 103
motd-banner Enable a message of the day (MOTD) banner to appear when you log in to the system. Syntax motd-banner Defaults Enabled on all lines. Command Modes LINE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show login statistics Displays login statistics of users who have used the console or virtual terminal lines to log in to the system.
PAGE 104
Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To view the successful and failed login details of the current user in the last 30 days or the custom defined period, use the show login statistics command. To view the successful and failed login details of all users in the last 30 days or the custom defined period, use the show login statistics all command.
PAGE 105
----------------------------------------------------------------------------------------------------------------------------------User: admin3 Last login time: 13:18:42 UTC Tue Mar 22 2016 Last login location: Line vty0 ( 10.16.127.145 ) Unsuccessful login attempt(s) since the last successful login: 0 Unsuccessful login attempt(s) in last 30 day(s): 3 Successful login attempt(s) in last 30 day(s): 2 The following is sample output of the show login statistics user user-id command.
PAGE 106
Defaults Supported Modes Command History 106 Enter the keyword ifagt then the number of an interface agent to display software pipe and IPC statistics. ifcb interface Enter the keyword ifcb then one of the following interface IDs then the slot/port information to display interface control block information for that interface: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10G Ethernet interface, enter the keyword TenGigabitEthernet.
PAGE 107
ping Test connectivity between the system and another device by sending echo requests and waiting for replies. Syntax Parameters Command Modes Supported Modes Command History ping host host • EXEC • EXEC Privilege Enter the host name or the destination IP address of the device to which you are testing connectivity. All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 108
Version Description 8.3.17.0 Supported on the M I/O Aggregator. Usage Information If there is a change in the configuration, the Dell Networking OS prompts you to save the new configuration. Or you can save your running configuration with the copy running-config command. Related Commands reset stack-unit — resets any designated stack member except the management unit. service timestamps Add time stamps to debug and log messages. This command adds either the uptime or the current time and date.
PAGE 109
show alarms Display the active major and minor alarms on the system. Syntax Command Modes Supported Modes Command History Example show alarms [threshold] • EXEC • EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 110
Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information One trace log message is generated for each command. No password information is saved to this file. Example Dell#show command-history [4/20 10:27:23]: CMD-(CLI):[enable]by default from console [4/20 10:27:23]: CMD-(CLI):[configure terminal]by default from console - Repeated 1 time.
PAGE 111
Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information The type may be auto, manual, or rollback. When set to auto, Dell Networking OS automatically denies access to CONFIGURATION mode to all other users every time the user on the listed VTY line enters CONFIGURATION mode. When set to manual, the user on the listed VTY line must explicitly set the lock each time before entering CONFIGURATION mode.
PAGE 112
Received 100% traffic on TenGigabitEthernet 8/2 Total packets:100 LLC:0, SNAP:0, IP:100, ARP:0, other:0 Unicast:100, Multicast:0, Broadcast:0 Dell# Related Commands debug cpu-traffic-stats — enables CPU traffic statistics for debugging. show debugging View a list of all enabled debugging processes. Syntax show debugging Command Modes EXEC Privilege Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 113
Supported Modes Command History All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. show environment Displays the system component status (for example, temperature or voltage). Syntax Parameters Command Modes Supported Modes Command History Example (all) show environment [all | stack-unit unit-id] all Enter the keyword all to view all components.
PAGE 114
* Management Unit Dell# Example (thermalsensor) Dell#show environment thermal-sensor -- Thermal Sensor Readings (deg C) -Unit Sensor0 Sensor1 Sensor2 Sensor3 Sensor4 Sensor5 Sensor6 Sensor7 Sensor8 Sensor9 ----------------------------------------------------------------1 51 51 64 61 61 61 67 61 64 66 Dell# show inventory Display the switch type, components (including media), and Dell Networking OS version including hardware identification numbers and configured protocols.
PAGE 115
Dell# Related Commands show config (from INTERFACE VLAN mode) — displays information on a specific physical interface or virtual interface. show memory Display current memory usage on the M I/O Aggregator. Syntax Parameters Command Modes Supported Modes Command History show memory [stack-unit 0–5] stack-unit 0–5 • EXEC • EXEC Privilege (OPTIONAL) Enter the keywords stack-unit then the stack unit ID of the stack member to display memory information on the designated stack member.
PAGE 116
output of memory statistics to the designated stack member. Refer to Example (stackunit). summary Command Modes Supported Modes Command History Example (summary) • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword summary to view a summary view CPU utilization of processes related to line card processing. Refer to Example (summary). All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 117
show processes memory — displays CPU usage information based on running processes. show processes ipc flow-control Displays the single window protocol queue (SWPQ) statistics. Syntax Parameters Defaults Command Modes Supported Modes Command History Usage Information show processes ipc flow-control [cp] cp (OPTIONAL) Enter the keyword cp to view the control processor’s SWPQ statistics. none • EXEC • EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 118
Example • If no response is received within a defined period of time, the SWP timeout mechanism resubmits the message at the head of the FIFO queue. • After retrying a defined number of times, the SWP-2-NOMORETIMEOUT timeout message is generated. • In the example, a retry (Retries) value of zero indicates that the SWP mechanism reached the maximum number of retransmissions without an acknowledgement.
PAGE 119
Usage Information show processes memory output Field Description Total: Total system memory available MaxUsed: Total maximum memory used ever (history indicated with time stamp) CurrentUsed: Total memory currently in use CurrentFree: Total system memory available SharedUsed: Total used shared memory SharedFree: Total free shared memory PID Process ID Process Process Name ResSize Actual resident size of the process in memory Size Process test, stack, and data size Allocs Total dynami
PAGE 120
--More-Example (management-unit) Dell#show processes memory management-unit Total:2147483648, MaxUsed:499093504 [07/23/2012 17:42:16] CurrentUsed:499093504, CurrentFree:1648390144 SharedUsed:18470440, SharedFree:2501104 PID Process 633 fcoecntrl 289 iscsiOpt 476 dhclient 521 ndpm 160 vrrp 318 frrp 218 xstp 277 pim --More-- ResSize 9277440 7380992 1626112 7389184 7712768 7192576 9445376 7585792 Size 270336 114688 552960 618496 335872 180224 2740224 1007616 Allocs 1380528 23262 0 4848 880 71086 21858 6216
PAGE 121
Example — System reboot for unknown reasons DellEMC# show reset-reason Cause: N/A Reload Time: N/A Example — System reboot due to power loss or pressing the power button off and on. The example shows the reason for the last reboot as N/A for warm reset. Example — System reboot due to watchdog timeout DellEMC#show reset-reason Cause: N/A. Reset Time: N/A Example — System reboot due to thermal shutdown The example shows the reason for the last reboot as N/A for thermal shutdown.
PAGE 122
Command History Example (Command) Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Dell#show revision -- Stack unit 1 -IOM SYSTEM CPLD : 1 Dell# show server-interfaces Displays server port information. Syntax show server-interfaces{brief|detail} Command Modes Supported Modes Command History • EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 123
Interface index is 34149121 Internet address is not set Mode of IP Address Assignment : NONE DHCP Client-ID :tenG130001ec9f10099 MTU 12000 bytes, IP MTU 11982 bytes LineSpeed auto Flowcontrol rx on tx off ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 00:59:19 Queueing strategy: fifo Input Statistics: 0 packets, 0 bytes 0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 0 Multicasts, 0 Broadcasts 0 runt
PAGE 124
Example (show system brief command) Version Description 8.3.17.0 Supported on the M I/O Aggregator. Dell#show system brief Stack MAC Reload-Type : f4:8e:38:0e:e5:fc : normal-reload [Next boot : normal-reload] -- Stack Info -Unit UnitType Status ReqTyp CurTyp Version Ports -----------------------------------------------------------------------------0 Management online PE-FN-410S-IOM PE-FN-410S-IOM 9.11(0.
PAGE 125
No Of MACs : 3 Dell# Related Commands asset-tag —Assign and store unique asset-tag to the stack member. show version — Displays the Dell version. show processes memory —Displays the memory usage based on the running processes. show diag — Displays the data plane and management plane input and output statistics of a particular stack member. show tech-support Displays a collection of data from other show commands, necessary for Dell Networking technical support to perform troubleshooting on Aggregators.
PAGE 126
For example: Dell#show tech-support |grep regular-expression |except regularexpression | find regular-expression | save flash://result This display output is an accumulation of the same information that is displayed when you execute one of the following showcommands: Example (save) 126 • show cam • show clock • show environment • show file • show interfaces • show inventory • show processes cpu • show processes memory • show running-conf • show version • show os-version • show revi
PAGE 127
Example (show tech-support) Dell#show tech-support page ----------------------------------- show version ------------------------------Dell Real Time Operating System Software Dell Operating System Version: 2.0 Dell Application Software Version: 9.14(0.0RC2) Copyright (c) 1999-2018 by Dell Inc. All Rights Reserved.
PAGE 128
Copyright (c) 1999-2012 by Dell Inc. All Rights Reserved. Build Time: Thu Jul 19 05:59:59 PDT 2012 Build Path: /sites/sjc/work/swsystems01-2/ravisubramani/ravis-8317/SW/SRC/ Cp_src/ Tacacs FTOS uptime is 4 day(s), 7 hour(s), 14 minute(s) System image file is "dv-m1000e-2-b2" System Type: I/O-Aggregator Control Processor: MIPS RMI XLP with 2147483648 bytes of memory. 256M bytes of boot flash memory. 1 34-port GE/TE (XL) 56 Ten GigabitEthernet/IEEE 802.
PAGE 129
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 130
Command Modes Supported Modes Command History Usage Information • EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. This command displays all CPU utilization thresholds of the management, standby, and stack-units. show util-threshold memory Displays the set memory utilization threshold values.
PAGE 131
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. telnet Connect through Telnet to a server. The Telnet client and server in Dell Networking OS support IPv4 connections. You can establish a Telnet session directly to the router or a connection can be initiated from the router.
PAGE 132
Supported Modes Command History All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. terminal length Configure the number of lines displayed on the terminal screen. Syntax terminal length screen-length To return to the default values, use the no terminal length command. Parameters screen-length Enter a number of lines. Entering zero will cause the terminal to display without pausing.
PAGE 133
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. terminal xml Enable XML mode in Telnet and SSH client sessions. Syntax terminal xml To exit the XML mode, use the no terminal monitor command. Defaults Command Modes Supported Modes Command History Usage Information Disabled • EXEC • EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 134
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information When you enter the traceroute command without specifying an IP address (Extended Traceroute), you are prompted for a target and source IP address, timeout in seconds (default is 5), a probe count (default is 3), minimum TTL (default is 1), maximum TTL (default is 30), and port number (default is 33434).
PAGE 135
Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Each time you issue this command, it replaces the previously configured address of the same family. The no virtual-ip command takes an address/prefix-length argument, so that the desired address only is removed.
PAGE 136
6 802.1X An authentication server must authenticate a client connected to an 802.1X switch port. Until the authentication, only extensible authentication protocol over LAN (EAPOL) traffic is allowed through the port to which a client is connected. After authentication is successful, normal traffic passes through the port. The Dell Networking operating software supports remote authentication dial-in service (RADIUS) and active directory environments using 802.1X Port Authentication.
PAGE 137
• dot1x supplicant-timeout • dot1x tx-period • show dot1x cos-mapping interface • show dot1x interface debug dot1x Display 802.1X debugging information. Syntax Parameters debug dot1x [all | auth-pae-fsm | backend-fsm | eapol-pdu] [interface interface] all Enable all 802.1X debug messages. auth-pae-fsm Enable authentication PAE FSM debug messages. backend-fsm Enable backend FSM debug messages. eapol-pdu Enable the EAPOL frame trace and related debug messages.
PAGE 138
dot1x authentication (Interface) Enable dot1x on an interface. Enable dot1x both globally and at the interface level. Syntax dot1x authentication To disable dot1x on an interface, use the no dot1x authentication command. Defaults Disabled Command Modes INTERFACE Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 139
Related Commands • dot1x port-control — Enables port control on an interface. • dot1x guest-vlan — Configures a guest VLAN for limited access users or for devices that are not 802.1X capable. • show dot1x interface — Displays the 802.1X configuration of an interface. dot1x auth-server Configure the authentication server to RADIUS. Syntax dot1x auth-server radius Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.
PAGE 140
dot1x guest-vlan Configure a guest VLAN for limited access users or for devices that are not 802.1X capable. Syntax dot1x guest-vlan vlan-id To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command. Parameters vlan-id Enter the VLAN Identifier. The range is from 1 to 4094. Defaults Not configured. Command Modes CONFIGURATION (conf-if-interface-slot/port) Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 141
multi-auth Defaults single-host Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Enable multi-supplicant authentication. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. • Single-host mode authenticates only one host per authenticator port and drops all other traffic on the port.
PAGE 142
Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. dot1x max-supplicants Restrict the number of supplicants that can be authenticated and permitted to access the network through the port. This configuration is only takes effect in Multi-Auth mode.
PAGE 143
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The authenticator completes authentication only when port-control is set to auto. dot1x quiet-period Set the number of seconds that the authenticator remains quiet after a failed authentication with a client. Syntax dot1x quiet-period seconds To disable quiet time, use the no dot1x quiet-time command.
PAGE 144
dot1x reauth-max Configure the maximum number of times a port can reauthenticate before the port becomes unauthorized. Syntax dot1x reauth-max number To return to the default, use the no dot1x reauth-max command. Parameters number Defaults 2 Command Modes INTERFACE Supported Modes Full–Switch Command History Enter the permitted number of reauthentications. The range is from 1 to 10. The default is 2. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 145
Where the default values are as follows: dot1x server-timeout (30 seconds), radius-server retransmit (3 seconds), and radius-server timeout (5 seconds). For example: Dell(conf)#radius-server host 10.11.197.105 timeout 6 Dell(conf)#radius-server host 10.11.197.105 retransmit 4 Dell(conf)#interface tengigabitethernet 2/1 Dell(conf-if-te-2/1)#dot1x server-timeout 40 dot1x supplicant-timeout Configure the amount of time after which exchanges with the supplicant time-out.
PAGE 146
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show dot1x cos-mapping interface Display the CoS priority-mapping table the RADIUS server provides and applies to authenticated supplicants on an 802.1X-enabled system.
PAGE 147
802.1p CoS re-map table for Supplicant: 00:00:00:00:00:10 Dot1p 0 1 2 3 4 5 6 7 Dell# Remapped Dot1p 7 6 5 4 3 2 1 0 show dot1x interface Display the 802.1X configuration of an interface.
PAGE 148
Mac-Auth-Bypass: Mac-Auth-Bypass Only: Tx Period: Quiet Period: ReAuth Max: Supplicant Timeout: Server Timeout: Re-Auth Interval: Max-EAP-Req: Host Mode: Auth PAE State: Backend State: Dell# Enable Enable 3 seconds 60 seconds 2 30 seconds 30 seconds 3600 seconds 2 SINGLE_HOST Authenticated Idle Dell#show dot1x interface tengigabitethernet 0/1 mac-address 00:00:00:00:00:10 Supplicant Mac: 0 0 0 0 0 10 Lookup for Mac: 802.
PAGE 149
7 Access Control Lists (ACL) Access control lists (ACLs) are supported by the Dell Networking Operating System (OS).
PAGE 150
• permit udp • seq • Common MAC Access List Commands • clear counters mac access-group • mac access-group • show mac access-lists • show mac accounting access-list • Standard MAC ACL Commands • deny • deny • mac access-list extended • permit • seq • Extended MAC ACL Commands • mac access-list standard • permit • seq • IP Prefix List Commands • clear ip prefix-list • deny • ip prefix-list • permit • seq • show config • show ip prefix-list detail • show ip pr
PAGE 151
• deny udp • deny arp (for Extended MAC ACLs) • deny icmp • deny ether-type (for Extended MAC ACLs) • deny • deny • permit (for Standard IP ACLs) • permit • permit ether-type (for Extended MAC ACLs) • permit icmp • permit udp • permit (for Extended IP ACLs) • permit • seq • permit tcp • seq arp • seq ether-type • seq • seq • permit udp • permit tcp • permit icmp • permit • deny udp (for IPv6 ACLs) • deny tcp (for IPv6 ACLs) • deny icmp (for Extended IPv6 AC
PAGE 152
• Supported Modes Command History CONFIGURATION-MAC ACCESS LIST-EXTENDED Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. remark Enter a description for an ACL entry. Syntax remark [remark-number] [description] Parameters remark-number Enter the remark number. The range is from 0 to 4294967290. NOTE: You can use the same sequence number for the remark and an ACL rule.
PAGE 153
To remove a remark, use the no remark command with or without the sequence number. If there is a matching string, the system deletes the remark. Example DellEMC(config-std-nacl)# remark 10 Deny rest of the traffic DellEMC(config-std-nacl)# remark 5 Permit traffic from XYZ Inc. DellEMC(config-std-nacl)# show config ! ip access-list standard test remark 5 Permit traffic from XYZ Inc. seq 5 permit 1.1.1.
PAGE 154
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you have exhausted all the sequence numbers, this feature permits re-assigning a new sequence number to entries of an existing access-list. Related Commands resequence prefix-list ipv4 — resequences a prefix list. resequence prefix-list ipv4 Re-assign sequence numbers to entries of an existing prefix list.
PAGE 155
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(config-std-nacl)#show conf ! ip access-list standard test remark 5 Permit traffic from XYZ Inc. seq 5 permit 1.1.1.0/24 count remark 10 Deny traffic from ABC seq 10 deny 2.1.1.0/24 count Dell(config-std-nacl)# Common IP ACL Commands The following commands are available within both IP ACL modes (Standard and Extended) and do not have mode-specific options.
PAGE 156
specify (ipv4 or ipv6), the ACL processes either IPv4 or IPv6 rules, but not both. Using this configuration, you can set up two different types of access classes with each class processing either IPv4 or IPv6 rules separately. However, if you already have configured generic IP ACL on a terminal line, then you cannot further apply IPv4 or IPv6 specific filtering on top of this configuration. Because, both IPv4 and IPv6 access classes are already configured on this terminal line.
PAGE 157
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module platform. You can assign one ACL (standard or extended ACL) to an interface.. NOTE: This command is not supported on the FN IOMSwitch Loopback interfaces. NOTE: If outbound(egress) IP ACL is applied on switch port, filter will be applied only for routed traffic egressing out of that port.
PAGE 158
show ip accounting access-list Display the IP access-lists created on the switch and the sequence of filters. Syntax show ip accounting {access-list access-list-name | cam_count} interface interface Parameters Command Modes Supported Modes Command History Usage Information access-list-name Enter the name of the ACL to be displayed. cam_count List the count of the CAM rules for this ACL.
PAGE 159
The switch supports both Ingress and Egress IP ACLs. NOTE: Also refer to the Commands Common to all ACL Types and Common IP ACL Commands sections. ip access-list standard Create a standard IP access list (IP ACL) to filter based on IP address. Syntax Parameters ip access-list standard access-list-name access-list-name Enter a string up to 140 characters long as the ACL name. Defaults All IP access lists contain an implicit deny any, that is, if no match occurs, the packet is dropped.
PAGE 160
mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address or hostname. no-drop Enter the keywords no-drop to match only the forwarded packets. count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
PAGE 161
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 162
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only.
PAGE 163
The following commands configure extended IP ACLs, which in addition to the IP address, also examine the packet’s protocol type. The switch supports both Ingress and Egress IP ACLs. NOTE: Also refer to theCommands Common to all ACL Types and Common IP ACL Commands sections. deny (for Extended IP ACLs) Configure a filter that drops IP packets meeting the filter criteria.
PAGE 164
monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
PAGE 165
Parameters • Use the no seq sequence-number command, if you know the filter’s sequence number. • Use the no deny icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
PAGE 166
If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.
PAGE 167
port port • lt = less than • range = inclusive range of ports (you must specify two ports for the port command) Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: Defaults • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent.
PAGE 168
Usage Information The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. You can configure either count (packets) or count (bytes). However, for an ACL with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) at any given time. Most ACL rules require one entry in the CAM.
PAGE 169
deny udp To drop user datagram protocol (UDP) packets meeting the filter criteria, configure a filter. Syntax deny udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte]] [order] [fragments] [threshold-in-msgs [count]] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 170
ACL logs are terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. Defaults By default 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which the ACL logs are generated is five minutes. Command Modes CONFIGURATION-IP ACCESS-LIST-EXTENDED Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.
PAGE 171
Total Ports: 1024 Related Commands deny — assigns a filter to deny IP traffic. deny tcp — assigns a filter to deny TCP traffic. ip access-list extended Name (or select) an extended IP access list (IP ACL) based on IP addresses or protocols. Syntax ip access-list extended access-list-name To delete an access list, use the no ip access-list extended access-list-name command. Parameters access-list-name Enter a string up to 140 characters long as the access list name.
PAGE 172
Parameters source Enter the IP address in dotted decimal format of the network from which the packet was sent. mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address or hostname.
PAGE 173
can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction.
PAGE 174
numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100.
PAGE 175
permit tcp To pass TCP packets meeting the filter criteria, configure a filter. Syntax permit tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [bit] [dscp] [operator port [port]] [count [byte]] [order] [fragments][log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 176
destination Enter the IP address of the network or host to which the packets are sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 177
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 178
To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit udp {source mask | any | host ip-address} {destination mask | any | host ip-address command. source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
PAGE 179
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the “Quality of Service” chapter of the Dell Operating System Configuration Guide. You can configure either count (packets) or count (bytes). However, for an ACL with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) at any given time.
PAGE 180
permit — assigns a permit filter for IP packets. permit tcp — assigns a permit filter for TCP packets. seq Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter.
PAGE 181
• 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. dscp (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values. order (OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry.
PAGE 182
If you configure the sequence-number, the sequence-number is used as a tie breaker for rules with the same order. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 183
mac access-group Apply a MAC ACL to traffic entering or exiting an interface. Enter into the Interface mode and apply the MAC ACL in the following manner. Syntax mac access-group access-list-name {in [vlan vlan-range] | out} To delete a MAC access-group, use the no mac access-group mac-list-name command. Parameters access-list-name Enter the name of a configured MAC access list, up to 140 characters. vlan vlan-range (OPTIONAL) Enter the keyword vlan and then enter a range of VLANs.
PAGE 184
show mac access-lists Display all of the Layer 2 ACLs configured in the system, whether or not they are applied to an interface, and the count of matches/ mismatches against each ACL entry displayed. Syntax show mac access-lists [access-list-name] [interface interface] [in | out] Parameters access-list-name Enter the name of a configured MAC ACL, up to 140 characters.
PAGE 185
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The ACL hit counters in this command increment the counters for each matching rule, not just the first matching rule.
PAGE 186
The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. mac-destinationaddress Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format. mac-destinationaddress-mask Specify which bits in the MAC address must match.
PAGE 187
mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match). count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
PAGE 188
This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Related Commands permit — configures a MAC address filter to pass packets. seq — configures a MAC address filter with a specified sequence number. mac access-list extended Name a new or existing extended MAC access control list (extended MAC ACL).
PAGE 189
permit To forward packets from a specific source MAC address, configure a filter. Syntax permit {any | mac-source-address [mac-source-address-mask]} [count [byte]] | log [interval minutes] [threshold-in-msgs[count] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit {any | mac-source-address mac-source-address-mask} command.
PAGE 190
When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval. If ACL logging is stopped because the configured threshold is exceeded, it is re-enabled after the logging interval period elapses.
PAGE 191
of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
PAGE 192
Extended MAC ACL Commands When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit. The following commands configure Extended MAC ACLs. The Switch supports both Ingress and Egress MAC ACLs. mac access-list standard To configure a standard MAC ACL, name a new or existing MAC access control list (MAC ACL) and enter MAC ACCESS LIST mode. Syntax mac access-list standard mac-list-name Parameters mac-list-name Defaults Not configured.
PAGE 193
• Parameters Use the no permit {any | host mac-address | mac-source-address mac-sourceaddress-mask} {any | mac-destination-address mac-destination-address-mask} command. any Enter the keyword any to forward all packets. host Enter the keyword host then a MAC address to forward packets with that host address. mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match.
PAGE 194
seq Configure a filter with a specific sequence number. Syntax seq sequence-number {deny | permit} {any | host mac-address | mac-sourceaddress mac-source-address-mask} {any | host mac-address | mac-destinationaddress mac-destination-address-mask} [ethertype operator] [count [byte]] Parameters sequence-number Enter a number as the filter sequence number. The range is from zero (0) to 65535. deny Enter the keyword deny to drop any traffic matching this filter.
PAGE 195
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. deny — configures a filter to drop packets. permit — configures a filter to forward packets. IP Prefix List Commands When you create an access-list without any rule and then apply it to an interface, the ACL behavior reflects implicit permit. To configure or enable IP prefix lists, use these commands.
PAGE 196
Command Modes PREFIX-LIST Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Sequence numbers for this filter are automatically assigned starting at sequence number 5. If you do not use the ge or le options, only packets with an exact match to the prefix are filtered. Related Commands permit — configures a filter to pass packets.
PAGE 197
ge min-prefixlength (OPTIONAL) Enter the keyword ge and then enter the minimum prefix length, which is a number from zero (0) to 32. le max-prefix-length (OPTIONAL) Enter the keyword le and then enter the maximum prefix length, which is a number from zero (0) to 32. Command Modes PREFIX-LIST Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 198
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information If you do not use the ge or le options, only packets with an exact match to the prefix are filtered. Related Commands deny — configures a filter to drop packets. permit — configures a filter to pass packets. show config Display the current PREFIX-LIST configurations.
PAGE 199
Example Dell#show ip prefix-list detail Ip Prefix-list with the last deletion/insertion: PL_OSPF_to_RIP ip prefix-list PL_OSPF_to_RIP: count: 3, range entries: 1, sequences: 5 - 25 seq 5 permit 1.1.1.0/24 (hit count: 0) seq 10 deny 2.1.0.0/16 ge 23 (hit count: 0) seq 25 permit 192.0.0.0 bitmask 192.0.0.0 (hit count: 800) show ip prefix-list summary Display a summary of the configured prefix lists.
PAGE 200
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The continue feature allows movement from one route-map entry to a specific route-map entry (the sequence number). If you do not specify the sequence number, the continue feature simply moves to the next sequence number (also known as an implied continue). If a match clause exists, the continue feature executes only after a successful match occurs.
PAGE 201
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. route-map — Enables a route map. match interface To match routes whose next hop is on the interface specified, configure a filter. Syntax match interface interface To remove a match, use the no match interface interface command. Parameters interface Defaults Not configured.
PAGE 202
match ip address To match routes based on IP addresses specified in an access list, configure a filter. Syntax match ip address prefix-list-name Parameters prefix-list-name Defaults Not configured. Command Modes ROUTE-MAP Supported Modes Full–Switch Command History Related Commands Enter the name of configured prefix list, up to 140 characters. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 203
Related Commands match interface — redistributes routes that match the next-hop interface. match ip address — redistributes routes that match an IP address. match ip route-source — redistributes routes that match routes advertised by other routers. match metric — redistributes routes that match a specific metric. match route-type — redistributes routes that match a route type. match tag — redistributes routes that match a specific tag.
PAGE 204
Parameters metric-value Defaults Not configured. Command Modes ROUTE-MAP Supported Modes Full–Switch Command History Related Commands Enter a value to match. The range is from zero (0) to 4294967295. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. match interface — redistributes routes that match the next-hop interface. match ip address — redistributes routes that match an IP address.
PAGE 205
match ip route-source — redistributes routes that match routes advertised by other routers. match metric — redistributes routes that match a specific metric. match tag — redistributes routes that match a specific tag. match tag To redistribute only routes that match a specified tag value, configure a filter. Syntax Parameters match tag tag-value tag-value Defaults Not configured.
PAGE 206
Defaults Not configured. If you do not define a keyword (permit or deny) for the route map, the permit action is the default. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 207
Parameters + (OPTIONAL) Enter + to add a metric-value to the redistributed routes. - (OPTIONAL) Enter - to subtract a metric-value from the redistributed routes. metric-value Enter a number as the new metric value. The range is from zero (0) to 4294967295. Defaults Not configured. Command Modes ROUTE-MAP Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 208
set tag To specify a tag for redistributed routes, configure a filter. Syntax set tag tag-value Parameters tag-value Defaults Not configured. Command Modes ROUTE-MAP Supported Modes Full–Switch Command History Related Commands Enter a number as the tag. The range is from zero (0) to 4294967295. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. set automatic-tag — computes the tag value of the route.
PAGE 209
Parameters Command Modes Supported Modes Command History map-name • EXEC • EXEC Privilege (OPTIONAL) Enter the name of a configured route map, up to 140 characters. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show route-map route-map firpo, permit, sequence 10 Match clauses: Set clauses: tag 34 Dell# Related Commands route-map — configures a route map.
PAGE 210
threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.
PAGE 211
deny To drop packets with a certain IP address, configure a filter. Syntax deny {any | host mac-address | mac-source-address mac-source-address-mask}{any | host mac-address | mac-destination-address mac-destination-address-mask} [ethertype-operator] [count [byte]][log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters Defaults • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 212
Usage Information Version Description 9.4(0.0) Added the support for flow-based monitoring on the MXL 10/40GbE Switch IO Module. 9.3(0.0) Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide.
PAGE 213
mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. dscp (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
PAGE 214
can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction.
PAGE 215
port port • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port command) Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535.
PAGE 216
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. You can configure either count (packets) or count (bytes). However, for an ACL with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) at any given time.
PAGE 217
deny udp — assigns a filter to deny UDP traffic. deny udp To drop user datagram protocol (UDP) packets meeting the filter criteria, configure a filter. Syntax deny udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte]] [order] [fragments] [threshold-in-msgs [count]] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 218
threshold-in-msgs count (OPTIONAL) Enter the threshold-in-msgs keyword then a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs are terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. Defaults By default 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which the ACL logs are generated is five minutes.
PAGE 219
Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM. Dell# Data Mask From To 1 0000000000000000 1111110000000000 0 #Covered 1023 1024 Total Ports: 1024 Related Commands deny — assigns a filter to deny IP traffic. deny tcp — assigns a filter to deny TCP traffic. deny arp (for Extended MAC ACLs) Configure an egress filter that drops ARP packets on egress ACL supported line cards. (For more information, refer to your line card documentation).
PAGE 220
count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 221
the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port.
PAGE 222
fragments Enter the keyword fragments to use ACLs to control packet fragments. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
PAGE 223
To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no deny ether-type protocol-type-number {destination-mac-address macaddress-mask | any} vlan vlan-id {source-mac-address mac-address-mask | any} command. protocol-typenumber Enter a number from 600 to FFFF as the specific Ethernet type traffic to drop. destination-macaddress macaddress-mask Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
PAGE 224
Command Modes CONFIGURATION-EXTENDED-ACCESS-LIST Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platforms. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platforms. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 225
log (OPTIONAL) Enter the keywordlog to enable the triggering of ACL log messages. threshold-in-msgs count (OPTIONAL) Enter thethreshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated.
PAGE 226
deny To drop packets with a certain IP address, configure a filter. Syntax deny {any | host mac-address | mac-source-address mac-source-address-mask}{any | host mac-address | mac-destination-address mac-destination-address-mask} [ethertype-operator] [count [byte]][log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters Defaults • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 227
Usage Information Version Description 9.4(0.0) Added the support for flow-based monitoring on the MXL 10/40GbE Switch IO Module. 9.3(0.0) Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide.
PAGE 228
mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address or hostname. no-drop Enter the keywords no-drop to match only the forwarded packets. count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
PAGE 229
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 230
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When the configured maximum threshold is exceeded, generation of logs are stopped.
PAGE 231
destination-macaddress macaddress-mask Enter a MAC address and mask in the nn:nn:nn:nn:nn format. For the MAC address mask, specify which bits in the MAC address must match. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. any Enter the keyword any to match and drop specific Ethernet traffic on the interface.
PAGE 232
Usage Information Version Description 9.4(0.0) Added the support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. 8.2.1.0 Allows ACL control of fragmented packets for IP (Layer 3) ACLs. 8.1.1.0 Introduced on the E-Series ExaScale. 7.4.1.0 Added the monitor option. 6.5.10 Expanded to include the optional QoS order priority for the ACL entry.
PAGE 233
To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or noncontiguous.
PAGE 234
Usage Information The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 235
• range = inclusive range of ports (you must specify two ports for the port parameter) port port Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is 0 to 65535. destination Enter the IP address of the network or host to which the packets are sent. count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
PAGE 236
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 237
mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address or hostname. count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
PAGE 238
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 239
Command Modes CONFIGURATION-MAC ACCESS LIST-STANDARD Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When the configured maximum threshold is exceeded, generation of logs are stopped.
PAGE 240
mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask (OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match). count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes.
PAGE 241
for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Related Commands deny — configures a filter to drop packets. permit — configures a filter to forward packets.
PAGE 242
port port Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
PAGE 243
Usage Information The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the “Quality of Service” chapter of the Dell Networking OS Configuration Guide. The switch cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented. Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (for example, gt, lt, or range) may require more than one entry.
PAGE 244
seq arp Configure an egress filter with a sequence number that filters ARP packets meeting this criteria. This command is supported only on 12port GE line cards with SFP optics. For specifications, refer to your line card documentation.
PAGE 245
monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. NOTE: For more information, refer to the Flow-based Monitoring section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly.
PAGE 246
can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction.
PAGE 247
The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 248
• The order option works across ACL groups that have been applied on an interface via the QoS policy framework. • The order option takes precedence over seq sequence-number. • If sequence-number is not configured, the rules with the same order value are ordered according to their configuration order. • If sequence-number is configured, the sequence-number is used as a tie breaker for rules with the same order. When you use the log option, the CP processor logs details about the packets that match.
PAGE 249
any Enter the keyword any to specify that all routes are subject to the filter. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. dscp (OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values. order (OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry.
PAGE 250
You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface.
PAGE 251
port port • lt = less than • range = inclusive range of ports (you must specify two ports for the port parameter.) (OPTIONAL) Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent.
PAGE 252
Usage Information The order option is relevant in the context of the Policy QoS feature only. The following applies: • The seq sequence-number command is applicable only in an ACL group. • The order option works across ACL groups that have been applied on an interface via the QoS policy framework. • The order option takes precedence over seq sequence-number. • If sequence-number is not configured, the rules with the same order value are ordered according to their configuration order.
PAGE 253
mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. any Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host and then enter the IP address to specify a host IP address. dscp Enter the keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63.
PAGE 254
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (for example, gt, lt, or range) may require more than one entry. The range of ports is configured in the CAM based on bit mask boundaries; the space required depends on exactly what ports are included in the range. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 255
permit tcp To pass TCP packets meeting the filter criteria, configure a filter. Syntax permit tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [bit] [dscp] [operator port [port]] [count [byte]] [order] [fragments][log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number.
PAGE 256
destination Enter the IP address of the network or host to which the packets are sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
PAGE 257
When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval.
PAGE 258
To remove this filter, you have two choices: Parameters • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or noncontiguous.
PAGE 259
Usage Information The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
PAGE 260
log OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in-msgs (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated.
PAGE 261
port Defaults • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port command) Enter the application layer port number. Enter two port numbers if using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet • 20 and 21 = FTP • 25 = SMTP • 169 = SNMP count (OPTIONAL) Enter the keyword count to count the packets that filter the processes.
PAGE 262
You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode.
PAGE 263
Defaults • 25 = SMTP • 169 = SNMP destination Enter the IP address of the network or host to which the packets are sent. bit (OPTIONAL) Enter the keyword bit to count the bits that filter the processes. count (OPTIONAL) Enter the keyword count to count the packets that filter the processes. byte (OPTIONAL) Enter the keyword byte to count the bytes that filter the processes. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.
PAGE 264
mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Related Commands deny – assigns a filter to deny IP traffic. deny udp – assigns a filter to deny UDP traffic. deny icmp (for Extended IPv6 ACLs) Configure a filter to drop all or specific ICMP messages.
PAGE 265
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added the support for flow-based monitoring on the MXL 10/40GbE Switch IO Module platform. 9.3(0.0) Added the support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. When the configured maximum threshold is exceeded, generation of logs is stopped.
PAGE 266
fragments Enter the keyword fragments to use ACLs to control packet fragments. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. The threshold range is from 1 to 100.
PAGE 267
8 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM) This section describes the access control list (ACL) virtual local area network (VLAN) group, and content addressable memory (CAM) enhancements. member vlan Add VLAN members to an ACL VLAN group. Syntax Parameters member vlan {VLAN-range} VLAN-range Enter the member VLANs using comma-separated VLAN IDs, a range of VLAN IDs, a single VLAN ID, or a combination.
PAGE 268
ip access-group Apply an egress IP ACL to the ACL VLAN group. Syntax ip access-group {group name} out implicit-permit Parameters group-name Enter the name of the ACL VLAN group where you want the egress IP ACLs applied, up to 140 characters. out Enter the keyword out to apply the ACL to outgoing traffic.
PAGE 269
Version Description 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform. Usage Information When an ACL-VLAN-Group name or the Access List Group Name contains more than 30 characters, the name is truncated in the show acl-vlan-group command output. Examples The following sample illustrates the output of the show acl-vlan-group command. NOTE: Some group names and some access list names are truncated.
PAGE 270
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform. After CAM configuration for ACL VLAN groups is performed, you must reboot the system to enable the settings to be stored in nonvolatile storage. During the initialization of CAM, the chassis manager reads the NVRAM and allocates the dynamic VCAP regions.
PAGE 271
vlanaclopt <0-2> Allocate the number of FP blocks for the ACL VLAN optimization feature. Default If you use the default keyword with the cam-acl-vlan command, the FP blocks allocated for VLAN processes are restored to their default values. No FP blocks or dynamic VLAN Content Aware Processor (VCAP) groups are allocated for VLAN operations by default. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM.
PAGE 272
• L2AclCam • V6AclCam The following describes the output fields of this show command: Field Description LineCard Number of the line card that contains information on ACL VLAN groups Portpipe The hardware path that packets follow through a system for ACL optimization CAM-Region Type of area in the CAM block that is used for ACL VLAN groups Total CAM space Total amount of space in the CAM block Used CAM Amount of CAM space that is currently in use Available CAM Amount of CAM space that is fr
PAGE 273
Command Modes EXEC EXEC Privilege Supported Modes Command History Examples Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform. The following sample output shows the line-by-line style display when using the show running-config aclvlan-group option.
PAGE 274
You can create an ACL VLAN group and attach the ACL with the VLAN members. Optimization is applicable only when you create an ACL VLAN group. If you apply an ACL separately on the VLAN interface, each ACL maps with the VLAN and increased CAM space utilization occurs. Attaching an ACL individually to VLAN interfaces is similar to the behavior of ACL-VLAN mapping storage in CAM prior to the implementation of the ACL VLAN group functionality.
PAGE 275
description (ACL VLAN Group) Add a description to the ACL VLAN group. Syntax Parameters description description description Enter a description to identify the ACL VLAN group (80 characters maximum). Default No default behavior or values Command Modes CONFIGURATION (conf-acl-vl-grp) Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module platform.
PAGE 276
9 Bidirectional Forwarding Detection (BFD) Bidirectional forwarding detection (BFD) is a detection protocol that provides fast forwarding path failure detection. The Dell Networking Operating System (OS) implementation is based on the standards specified in the IETF Draft draft-ietf-bfd-base-03 and supports BFD on all Layer 3 physical interfaces including virtual local area network (VLAN) interfaces and port-channels.
PAGE 277
• Passive — The passive system does not initiate a session. It only responds to a request for session initialization from the active system. The default is active. Defaults See Parameters. Command Modes ROUTER OSPF ROUTER OSPFv3 ROUTER BGP ROUTER ISIS Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.13(0.
PAGE 278
Usage Information Version Description 8.2.1.0 Introduced BFD for OSPF and ISIS on the E-Series. 7.6.1.0 Introduced BFD for OSPF on the C-Series. 7.5.1.0 Introduced BFD for ISIS on the E-Series. 7.4.1.0 Introduced BFD for OSPF on the E-Series.
PAGE 279
Defaults BFD is disabled by default. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. bfd enable (Interface) Enable BFD on an interface. Syntax bfd enable Defaults BFD is enabled on all interfaces when you enable BFD from CONFIGURATION mode. Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.
PAGE 280
Command Modes INTERFACE Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-if-gi-0/3)#bfd interval 250 min_rx 300 multiplier 4 role passive Dell(conf-if-gi-0/3)# bfd protocol-liveness Enable the BFD protocol liveness feature.
PAGE 281
min_rx milliseconds Enter the keywords min_rx to specify the minimum rate at which the local system receives control packets from the remote system. The range is from 50 to 1000. The default is 200. multiplier value Enter the keywords multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3. role [active | passive] Enter the role that the local system assumes: • Active — The active system initiates the BFD session.
PAGE 282
• Passive — passive system does not initiate a session. It only responds to a request for session initialization from the active system. The default is Active. Defaults See Parameters. Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Usage Information Version Description 9.10(0.2) Introduced support for enabling BFD on non-default VRFs for OSPFv2. 9.10(0.
PAGE 283
multiplier value Enter the keyword multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3. role [active | passive] Enter the role that the local system assumes: • Active — The active system initiates the BFD session. Both systems can be active for the same session. • Passive — The passive system does not initiate a session. It only responds to a request for session initialization from the active system.
PAGE 284
The default is Active. Defaults See Parameters Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command provides the flexibility to fine-tune the timer values based on individual interface needs when ISIS BFD is configured in CONFIGURATION mode.
PAGE 285
• Related Commands The neighbor only inherits the global timer values configured with the bfd neighbor command: interval, min_rx, and multiplier. neighbor bfd disable — explicitly disables a BFD session with a BGP neighbor or a BGP peer group. show bfd neighbors — displays the BFD neighbor information on all interfaces or a specified interface. neighbor bfd disable Explicitly disable a BFD session with a BGP neighbor or a BGP peer group.
PAGE 286
Parameters vrf vrf name (Optional) Enter the keyword vrf and then the name of the VRF to display the BFD sessions with all neighbors within the VRF. interface (OPTIONAL) Enter one of the following keywords and slot/port or number information: detail Defaults • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a port channel interface, enter the keywords port-channel then a number.
PAGE 287
Related Commands • bfd all-neighbors — establish BFD sessions with all neighbors discovered by the IS-IS protocol or OSPF protocol out of all interfaces. vrrp bfd neighbor Establish a BFD for VRRP session with a neighbor. Syntax Parameters vrrp bfd neighbor ip-address neighbor ip-address Defaults none Command Modes INTERFACE Supported Modes Full–Switch Command History Enter the IP address of the BFD neighbor. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 288
10 Border Gateway Protocol IPv4 (BGPv4) For detailed information about configuring BGP, refer to the BGP chapter in the Dell Networking OS Configuration Guide.
PAGE 289
• clear ip bgp • clear ip bgp dampening • clear ip bgp flap-statistics • clear ip bgp peer-group • debug ip bgp • debug ip bgp dampening • debug ip bgp events • debug ip bgp keepalives • debug ip bgp notifications • debug ip bgp soft-reconfiguration • debug ip bgp updates • default-metric • description • max-paths • neighbor activate • neighbor add-path • neighbor advertisement-interval • neighbor advertisement-start • neighbor allowas-in • neighbor default-originate
PAGE 290
• shutdown address-family-ipv4–unicast • shutdown address-family-ipv6–unicast • show capture bgp-pdu neighbor • show config • show ip bgp • show ip bgp cluster-list • show ip bgp community • show ip bgp community-list • show ip bgp dampened-paths • show ip bgp detail • show ip bgp extcommunity-list • show ip bgp filter-list • show ip bgp flap-statistics • show ip bgp inconsistent-as • show ip bgp neighbors • show ip bgp next-hop • show ip bgp paths • show ip bgp paths as-p
PAGE 291
NOTE: Dell Networking OS Version 7.7.1 supports 2-Byte (16-bit) and 4-Byte (32-bit) format for autonomous system numbers (ASNs), where the 2-Byte format is 1-65535 and the 4-Byte format is 1-4294967295. NOTE: Dell Networking OS Version 8.3.1.0 supports dotted format as well as the traditional plain format for AS numbers. Display the dot format using the show ip bgp commands. To determine the comparable dot format for an ASN from a traditional format, use ASN/65536. ASN%65536.
PAGE 292
suppress-map mapname Defaults (OPTIONAL) Enter the keywords suppress-map then the name of a configured route map to identify which more-specific routes in the aggregate are suppressed. Not configured. Command Modes Supported Modes Command History Usage Information • ROUTER BGP ADDRESS FAMILY • ROUTER BGP ADDRESS FAMILY IPv6 Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 293
• Supported Modes Command History Related Commands ROUTER BGP-address-family Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor add-path — specifies that this neighbor/peer group can send/receive multiple path advertisements. bgp always-compare-med Allows you to enable comparison of the MULTI_EXIT_DISC (MED) attributes in the paths from different external ASs.
PAGE 294
Usage Information Before enabling this feature, enable the enable bgp four-octet-as-supportcommand. If you disable the four-octect-support command after using dot or dot+ format, the AS numbers revert to asplain text. When you apply an asnotation, it is reflected in the running-configuration. If you change the notation type, the running-config updates dynamically and the new notation shows.
PAGE 295
bgp bestpath as-path multipath-relax Include prefixes received from different AS paths during multipath calculation. Syntax bgp bestpath as-path multipath-relax To return to the default BGP routing process, use the no bgp bestpath as-path multipath-relax command. Defaults Disabled Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 296
To return to the default selection, use the no bgp bestpath med missing-as-best command. Defaults Disabled Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The MED is a 4-byte unsigned integer value and the default behavior is to assume a missing MED as 4294967295. This command causes a missing MED to be treated as 0.
PAGE 297
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Route reflection to clients is not necessary if all client routers are fully meshed. Related Commands bgp cluster-id — assigns an ID to a BGP cluster with two or more route reflectors. neighbor route-reflector-client — configures a route reflector and clients. bgp cluster-id Assign a cluster ID to a BGP cluster with more than one route reflector.
PAGE 298
To delete a BGP confederation identifier, use the no bgp confederation identifier as-number command. Parameters as-number Defaults Not configured. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Enter the AS number. The range is from 0 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format). Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 299
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. All the routers in the Confederation must be 4 byte or 2 byte identified routers. You cannot mix them. The autonomous systems configured in this command are visible to the EBGP neighbors. Each autonomous system is fully meshed and contains a few connections to other autonomous systems. After specifying autonomous systems numbers for the BGP confederation, recycle the peers to update their configuration.
PAGE 300
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information If you enter the bgp dampening command, the default values for half-life, reuse, suppress, and maxsuppress-time are applied. The parameters are position-dependent; therefore, if you configure one parameter, configure the parameters in the order they appear in the CLI. Related Commands show ip bgp dampened-paths — views the BGP paths.
PAGE 301
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command is enabled by default, that is for all updates received from EBGP peers, BGP ensures that the first AS of the first AS segment is always the AS of the peer. If not, the update is dropped and a counter is increments. To view the “failed enforce-first-as check” counter, use the show ip bgp neighbors command.
PAGE 302
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Routers supporting 4-byte ASNs advertise that function in the OPEN message. The behavior of a 4-byte router is slightly different depending on whether it is speaking to a 2-byte router or a 4-byte router. When creating Confederations, all the routers in the Confederation must be 4 byte or 2 byte identified routers. You cannot mix them.
PAGE 303
bgp non-deterministic-med Compare MEDs of paths from different autonomous systems. Syntax bgp non-deterministic-med To return to the default, use the no bgp non-deterministic-med command. Defaults Disabled (that is, paths/routes for the same destination but from different ASs do not have their MEDs compared). Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 304
Enabling or disabling outbound optimization dynamically resets all neighbor sessions. When you enable outbound optimization, all peers receive the same update packets. Also, the next-hop address, which is chosen as one of the addresses of the neighbor's reachable interface, is the same for all peers. bgp recursive-bgp-next-hop Enable next-hop resolution through other routes learned by BGP. Syntax bgp recursive-bgp-next-hop To disable next-hop resolution, use the no bgp recursive-bgp-next-hop command.
PAGE 305
Usage Information BGP uses regular expressions (regex) to filter route information. In particular, the use of regular expressions to filter routes based on AS-PATHs and communities is common. In a large-scale configuration, filtering millions of routes based on regular expressions can be quite CPU intensive, as a regular expression evaluation involves generation and evaluation of complex finite state machines.
PAGE 306
bgp soft-reconfig-backup To avoid the peer from resending messages, use this command only when route-refresh is not negotiated. Syntax bgp soft-reconfig-backup To return to the default setting, use the no bgp soft-reconfig-backup command. Defaults Off Command Modes ROUTER BGP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 307
Related Commands capture bgp-pdu max-buffer-size — specifies a size for the capture buffer. show capture bgp-pdu neighbor — displays BGP packet capture information. capture bgp-pdu max-buffer-size Set the size of the BGP packet capture buffer. This buffer size pertains to both IPv4 and IPv6 addresses. Syntax Parameters capture bgp-pdu max-buffer-size 100-102400000 100-102400000 Defaults 40960000 bytes.
PAGE 308
Command Modes EXEC Privilege Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. bgp recursive-bgp-next-hop — disables next-hop resolution through other routes learned by the BGP. bgp soft-reconfig-backup — turns on BGP Soft Reconfiguration. clear ip bgp dampening Clear information on route dampening and return the suppressed route to the Active state.
PAGE 309
• + = (plus) the sequences in a pattern (1 or more sequences). • ? = (question mark) sequences in a pattern (either 0 or 1 sequences). NOTE: Enter an escape sequence (CTRL+v) prior to entering the ? regular expression. Command Modes EXEC Privilege Supported Modes Full–Switch Command History • [ ] = (brackets) a range of single-character patterns. • ( ) = (parenthesis) groups a series of pattern elements to a single element. • { } = (braces) minimum and the maximum match count.
PAGE 310
debug ip bgp Display all information on BGP, including BGP events, keepalives, notifications, and updates. Syntax debug ip bgp [ip-address | peer-group peer-group-name] [in | out] To disable all BGP debugging, use the no debug ip bgp command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group peergroup-name Enter the keywords peer-group then the name of the peer group to debug.
PAGE 311
out Command Modes EXEC Privilege Supported Modes Full–Switch Command History Related Commands (OPTIONAL) Enter the keyword out to view only outbound dampened routes. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show debugging — view enabled debugging operations. show ip bgp dampened-paths — view BGP dampened routes. debug ip bgp events Display information on local BGP state changes and other BGP events.
PAGE 312
To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] keepalives [in | out] command. Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group peergroup-name (OPTIONAL) Enter the keyword peer-group then the name of the peer group. in (OPTIONAL) Enter the keyword in to view only inbound keepalive messages. out (OPTIONAL) Enter the keyword out to view only outbound keepalive messages.
PAGE 313
debug ip bgp soft-reconfiguration Enable soft-reconfiguration debug. Syntax debug ip bgp {ip-address | peer-group-name} soft-reconfiguration To disable, use the no debug ip bgp {ip-address | peer-group-name} softreconfiguration command. Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group-name (OPTIONAL) Enter the name of the peer group to disable or enable all routers within the peer group..
PAGE 314
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To remove all configured debug commands for BGP, enter the no debug ip bgp command. default-metric Allows you to change the metric of redistributed routes to locally originated routes. Use this command with the redistribute command. Syntax default-metric number To return to the default setting, use the no default-metric command.
PAGE 315
Command Modes ROUTER BGP Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. router bgp — enters ROUTER mode on the switch. max-paths Configure the maximum number of parallel routes (multipath support) BGP supports. Syntax max-paths {ebgp | ibgp} number To return to the default values, enter the no maximum-paths command.
PAGE 316
Defaults Disabled Command Modes CONFIGURATION-ROUTER-BGP-ADDRESS FAMILY Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. By default, when you create a neighbor/peer group configuration in the Router BGP context, this enables IPv4/ Unicast AFI/SAFI. When you use activate in the new context, the neighbor/peer group enables for AFI/SAFI.
PAGE 317
To return to the default value, use the no neighbor {ip-address | peer-group-name} advertisement-interval command. Parameters Defaults ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group to set the advertisement interval for all routers in the peer group. seconds Enter a number as the time interval, in seconds, between BGP advertisements. The range is from 0 to 600 seconds.
PAGE 318
neighbor allowas-in Set the number of times an AS number can occur in the AS path. Syntax neighbor {ip-address | peer-group-name} allowas-in number To return to the default value, use the no neighbor {ip-address | peer-group-name} allowas-in command. Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
PAGE 319
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you apply a route map to a BGP peer or neighbor with the neighbor default-originate command configured, the software does not apply the set filters in the route map to that BGP peer or neighbor. neighbor description Assign a character string describing the neighbor or group of neighbors (peer group).
PAGE 320
out Defaults Not configured. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Enter the keyword out to distribute only outbound traffic. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Other BGP filtering commands include: neighbor filter-list, ip as-path access-list, and neighbor route-map. Related Commands neighbor route-map — assigns a route map to a neighbor or peer group.
PAGE 321
To disable, use the no neighbor {ipv4-address | peer-group-name} fall-over command. Parameters ipv4-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group. Defaults Disabled. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 322
neighbor maximum-prefix Control the number of network prefixes received. Syntax neighbor {ip-address | peer-group-name} maximum-prefix maximum [threshold] [warning-only] To return to the default values, use the no neighbor {ip-address | peer-group-name} maximumprefix maximum command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format. peer-group-name Enter the name of the peer group.
PAGE 323
peer-group-name Enter the name of a configured peer group. encryption-type (OPTIONAL) Enter 7 as the encryption type for the password entered. 7 means that the password is encrypted and hidden. password Enter a text string up to 80 characters long. The first character of the password must be a letter. You cannot use spaces in the password. Defaults Not configured. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.
PAGE 324
Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. You can assign up to 256 peers to one peer group. When you add a peer to a peer group, it inherits all the peer group’s configured parameters.
PAGE 325
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you create a peer group, it is disabled (Shut mode). Related Commands neighbor peer-group (assigning peers) — assigns routers to a peer group. neighbor remote-as — assigns a indirectly connected AS to a neighbor or peer group. neighbor shutdown — disables a peer or peer group.
PAGE 326
To delete a remote AS entry, use the no neighbor {ip-address | peer-group-name} remote-as number command. Parameters ip-address Enter the IP address of the neighbor to enter the remote AS in its routing table. peer-group-name Enter the name of the peer group to enter the remote AS into routing tables of all routers within the peer group. number Enter a number of the AS. The range is from 0 to 65535 (2 byte) or from 1 to 4294967295 (4 byte). Defaults Not configured.
PAGE 327
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Applies to EBGP neighbors only. Configure your system to accept 4-byte formats before entering a 4 byte AS Number. If the AS-PATH contains both public and private AS number or contains AS numbers of an EBGP neighbor, the private AS numbers are not removed.
PAGE 328
neighbor route-reflector-client Configure the router as a route reflector and the specified neighbors as members of the cluster. Syntax neighbor {ip-address | peer-group-name} route-reflector-client To remove one or more neighbors from a cluster, use the no neighbor {ip-address | peer-groupname} route-reflector-client command. If you delete all members of a cluster, you also delete the route-reflector configuration on the router.
PAGE 329
peer-group-name Enter the name of the peer group to disable or enable all routers within the peer group. Defaults Enabled (that is, BGP neighbors and peer groups are disabled.) Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Peers that are enabled within a peer group are disabled when their peer group is disabled.
PAGE 330
NOTE: This command is supported in BGP Router Configuration mode for IPv4 Unicast address only. Related Commands show ip bgp neighbors — displays routes received by a neighbor. neighbor timers Set keepalive and hold time timers for a BGP neighbor or a peer group. Syntax neighbor {ip-address | peer-group-name} timers keepalive holdtime To return to the default values, use the no neighbor {ip-address | peer-group-name} timers command.
PAGE 331
To return to the default values, use the no neighbor {ip-address | ipv6-address | peer-groupname} timers extended idle holdtime command. Parameters ip-address Enter the IP address of the peer router in dotted decimal format. ipv6-address Enter the IPv6 address of the peer router in X:X:X:X::X format. peer-group-name Enter the name of the peer group to set the timers for all routers within the peer group.
PAGE 332
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Loopback interfaces are up constantly and the BGP session may need one interface constantly up to stabilize the session. The neighbor update-source command is not necessary for directly connected internal BGP sessions. neighbor weight Assign a weight to the neighbor connection, which is used to determine the best path.
PAGE 333
mask Enter the mask of the IP address in the slash prefix length format (for example, /24). The mask appears in command outputs in dotted decimal format (A.B.C.D). route-map mapname (OPTIONAL) Enter the keyword route-map then the name of an established route map. Only the following ROUTE-MAP mode commands are supported: • match ip address • set metric • set tag If the route map is not configured, the default is deny (to drop all routes). Defaults Not configured.
PAGE 334
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Although the system does not generate a route due to the backdoor config, there is an option for injecting/ sourcing a local route in the presence of network backdoor config on a learned route. redistribute Redistribute routes into BGP. Syntax redistribute {connected | static} [route-map map-name] To disable redistribution, use the no redistribution {connected | static} command.
PAGE 335
Related Commands neighbor default-originate — injects the default route. redistribute ospf Redistribute OSPF routes into BGP. Syntax redistribute ospf process-id [[match external {1 | 2}] [match internal]] [route-map map-name] To stop redistribution of OSPF routes, use the no redistribute ospf process-id command. Parameters process-id Enter the number of the OSPF process. The range is from 1 to 65535.
PAGE 336
Defaults Not enabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. At least one interface must be in Layer 3 mode for the router bgp command to be accepted.
PAGE 337
9.11.0.0 Usage Information Introduced on the S-Series, Z-Series, MXL, and IOM. You can use this command to disable all the configured BGP neighbors corresponding to the multicast IPv4 address families. This command is global for all VRFs. shutdown address-family-ipv4–unicast Disables all the BGP neighbors corresponding to the unicast IPv4 address families.
PAGE 338
This command is global for all VRFs. show capture bgp-pdu neighbor Display BGP packet capture information for an IPv4 address on the system. Syntax show capture bgp-pdu neighbor ipv4-address Parameters ipv4-address Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example Enter the IPv4 address (in dotted decimal format) of the BGP address to display packet information for that address. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 339
Command Modes ROUTER BGP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Example Dell(conf-router_bgp)#show config ! router bgp 45 neighbor suzanne peer-group neighbor suzanne no shutdown neighbor sara peer-group neighbor sara shutdown neighbor 13.14.15.20 peer-group suzanne neighbor 13.14.15.20 shutdown neighbor 123.34.55.123 peer-group suzanne neighbor 123.34.55.
PAGE 340
Command Modes Supported Modes Command History Usage Information community-list community-listname (OPTIONAL) Enter the keyword community-list then the community–list–name to display the routes matching the community–list. dampened-paths (OPTIONAL) Enter the keyword dampened-paths to display the paths suppressed due to dampening. extcommunity-list list name (OPTIONAL) Enter the keyword extcommunity-list then the list name to display the routes matching the extended community-list.
PAGE 341
Example Field Description Next Hop Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then local routes exist in the routing table. Metric Displays the BGP route’s metric, if assigned. LocPrf Displays the BGP LOCAL_PREF attribute for the route. Weight Displays the route’s weight. Path Lists all the ASs the route passed through to reach the destination network. Dell EMC> show ip bgp BGP table version is 847562, local router ID is 63.114.8.
PAGE 342
Following is the example for displaying all the received routes from all IPv6 neighbors: DellEMC# show ip bgp ipv6 unicast neighbors all received-routes BGP local RIB : Routes to be Added 0, Replaced 0, Withdrawn 0 BGP local router ID is 11.1.1.
PAGE 343
Usage Information Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp cluster-list command shown in the following example. Field Description Network Displays the destination network prefix of each BGP route. Next Hop Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then local routes exist in the routing table. Metric Displays the BGP route’s metric, if assigned.
PAGE 344
community-number Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system. You can specify up to eight community numbers to view information on those community groups. local-AS Enter the keywords local-AS to view all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED. All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03) community attribute must not be advertised to external BGP peers.
PAGE 345
Example Field Description Weight Displays the route’s weight. Path Lists all the ASs the route passed through to reach the destination network. Dell>show ip bgp community BGP table version is 3762622, local router ID is 63.114.8.48 Status codes: s suppressed, d damped, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed, n - network Origin codes: i - IGP, e - EGP, ? - incomplete Network * i 3.0.0.0/8 *>i 4.2.49.12/30 * i 4.21.132.0/23 *>i 4.24.
PAGE 346
Usage Information The show ip bgp community-list command without any parameters lists BGP routes matching the Community List and the output is the same as for the show ip bgp command output. The following describes the show ip bgp community-list pass command shown in the following example. Example Field Description Network Displays the destination network prefix of each BGP route. Next Hop Displays the next hop address of the BGP router. If 0.0.0.
PAGE 347
Example Field Description Path Lists all the ASs the dampened route passed through to reach the destination network. Dell>show ip bgp dampened-paths BGP table version is 210708, local router ID is 63.114.8.
PAGE 348
TxUpdCodeP 0x41a1b780 : TrEvt 0 : LocPref 100 : tmpPathP 0x41a1b7b8 : LogNbrChgs 1 RecursiveNH 1 : PgCfgId 0 : KeepAlive 0 : HldTime 0 : DioHdl 0 : AggrValTmrP 0x41ee7024 UpdNetTmrP 0 : RedistTmrP 0x41ee7094 : PeerChgTmrP 0 : CleanRibTmrP 0x41ee7104 PeerUpdTmrP 0x41ee70cc : DfrdNHTmrP 0x41ee7174 : DfrdRtselTmrP 0x41ee713c : FastExtFallover 1 : FastIntFallover 0 : Enforce1stAS 1 PeerIdBitsP 0x41967120 : softOutSz 16 : RibUpdCtxCBP 0 UpdPeerCtxCBP 0 : UpdPeerCtxAFI 0 : TcpioCtxCB 0 : RedistBlk 1 NextCBPurg 11
PAGE 349
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To view the total number of COMMUNITY attributes found, use the show ip bgp summary command. The text line above the route table states the number of COMMUNITY attributes found. The show ip bgp community command without any parameters lists BGP routes with at least one BGP community attribute and the output is the same as for the show ip bgp command output.
PAGE 350
Example Field Description Path Lists all the ASs the route passed through to reach the destination network. Dell#show ip bgp filter-list hello BGP table version is 80227, local router ID is 120.1.1.1 Status codes: s suppressed, d damped, h history, * valid, > best Path source: I - internal, a - aggregate, c - confed-external, r redistributed, n network Origin codes: i - IGP, e - EGP, ? - incomplete Network * I 6.1.5.
PAGE 351
NOTE: Enter an escape sequence (CTRL+v) prior to entering the ? regular expression. Command Modes Supported Modes Command History Usage Information Example • EXEC • EXEC Privilege • [ ] = (brackets) a range of single-character patterns. • ( ) = (parenthesis) groups a series of pattern elements to a single element. • { } = (braces) minimum and the maximum match count. • ^ = (caret) the beginning of the input string.
PAGE 352
• Supported Modes Command History Usage Information Example EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp inconsistent-as command shown in the following example. Field Description Network Displays the destination network prefix of each BGP route. Next Hop Displays the next hop address of the BGP router. If 0.0.0.
PAGE 353
Parameters ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. ip-address (OPTIONAL) Enter the IP address of the neighbor to view only BGP information exchanged with that neighbor. advertised-routes (OPTIONAL) Enter the keywords advertised-routes to view only the routes the neighbor sent. dampened-routes (OPTIONAL) Enter the keywords dampened-routes to view information on dampened routes from the BGP neighbor.
PAGE 354
The Lines Beginning with: Description • last read is the time (hours:minutes:seconds) the router read a message from its neighbor • hold time is the number of seconds configured between messages from its neighbor • keepalive interval is the number of seconds between keepalive messages to help ensure that the TCP session is still alive.
PAGE 355
Received 1404 messages, 0 in queue 3 opens, 1 notifications, 1394 updates 6 keepalives, 0 route refresh requests Sent 48 messages, 0 in queue 3 opens, 2 notifications, 0 updates 43 keepalives, 0 route refresh requests Minimum time between advertisement runs is 30 seconds Minimum time before advertisements start is 0 seconds Capabilities received from neighbor for IPv4 Unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) CISCO_ROUTE_REFRESH(128) Capabilities advertised to neighbor for IPv4 Unicast : MULTIPROTO_EXT(1
PAGE 356
*> 70.70.27.0/24 100.10.10.2 *> 70.70.28.0/24 100.10.10.2 *> 70.70.29.0/24 100.10.10.2 Dell# Example (deniedroutes) 0 0 0 0 100 200 ? 0 100 200 ? 0 100 200 ? Dell#show ip bgp neighbors 100.10.10.2 denied-routes 4 denied paths using 205 bytes of memory BGP table version is 34, local router ID is 100.10.10.
PAGE 357
63.114.8.33 63.114.8.34 63.114.8.35 63.114.8.60 Dell> 63.114.8.33, 63.114.8.34, 63.114.8.35, 63.114.8.60, Gi Gi Gi Gi 12/22 12/22 12/22 12/22 240984 135152 1 135155 0 0 0 0 0 0 0 0 00:18:25 00:18:13 00:18:07 00:18:11 show ip bgp paths View all the BGP path attributes in the BGP database. Syntax Parameters show ip bgp paths [regexp regular-expression] regexp regularexpression Enter a regular expression then use one or a combination of the following characters to match: • .
PAGE 358
Example Field Description Path Displays the AS path for the route, with the origin code for the route listed last. Numbers listed between braces {} are AS_SET information.
PAGE 359
0x1ea3c1ec 0x1ea3c25c 0x1ea3c1b4 0x1ea3c304 0x1ea3c10c 0x1ea3c144 0x1ea3c17c 0x1ea3c2cc 0x1ea3c09c 0x1ea3c0d4 0x1ea3c224 0x1ea3c294 0x1ea3c02c Dell# 251 251 507 507 763 763 763 763 764 764 1019 1019 1021 1 1 1 1 1 1 1 1 1 1 1 1 4 42 22 13 33 {92 93} {102 103} 12 32 {72 73} {82 83} 43 23 show ip bgp paths community View all unique COMMUNITY numbers in the BGP database.
PAGE 360
0x1f58ad6c 82 46 209:209 209:41528 0x1c6e2064 83 2 209:777 209:40832 0x1f588ecc 85 570 209:209 209:40832 0x1f57cc0c 98 2 209:209 209:21226 286:3031 13646:1044 13646:1124 13646:1154 13646:1164 13646:1184 13646:1194 13646:1204 13646:1214 13646:1224 13646:1234 13646:1244 13646:1254 13646:1264 13646:3000 0x1d65b2ac 117 6 209:209 209:999 209:31272 0x1f5854ac 119 18 209:209 209:21226 286:108 286:111 286:777 286:3033 517:5104 show ip bgp peer-group Allows you to view information on the BGP peers in a peer group.
PAGE 361
Example ( ) Line beginning with: Description Peer-group members: Lists the IP addresses of the peers in the peer group. If the address is outbound optimized, an * is displayed next to the IP address.
PAGE 362
show ip bgp regexp Display the subset of the BGP routing table matching the regular expressions specified. Syntax show ip bgp regexp regular-expression [character] Parameters regular-expression [character] Enter a regular expression then use one or a combination of the following characters to match: • . = (period) any single character (including a white space). • * = (asterisk) the sequences in a pattern (zero or more sequences). • + = (plus) the sequences in a pattern (one or more sequences).
PAGE 363
Path source: I - internal, a - aggregate, c - confed-external, r redistributed, n - network Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path *>I 3.0.0.0/8 1.1.1.2 0 100 0 2914 1239 80 i *>I 4.0.0.0/8 1.1.1.2 0 100 0 2914 3356 i *>I 4.17.225.0/24 1.1.1.2 0 100 0 2914 11853 11853 11853 11853 11853 6496 *>I 4.17.226.0/23 1.1.1.2 0 100 0 2914 11853 11853 11853 11853 11853 6496 *>I 4.17.251.0/24 1.1.1.2 0 100 0 2914 11853 11853 11853 11853 11853 6496 *>I 4.17.252.0/23 1.
PAGE 364
Field Description BGP path attribute entries Displays the number of BGP path attributes and the amount of memory used to process them. BGP AS-PATH entries Displays the number of BGP AS_PATH attributes processed and the amount of memory used to process them. BGP community entries Displays the number of BGP COMMUNITY attributes processed and the amount of memory used to process them. The show ip bgp community command provides more details on the COMMUNITY attributes.
PAGE 365
BGP-RIB over all using 385 bytes of memory 2 BGP path attribute entrie(s) using 168 bytes of memory 1 BGP AS-PATH entrie(s) using 39 bytes of memory 1 BGP community entrie(s) using 43 bytes of memory 2 neighbor(s) using 7232 bytes of memory Neighbor AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/Pfx 100.10.10.2 200 46 41 34 0 0 00:14:33 5 120.10.10.2 300 40 47 34 0 0 00:37:10 0 Dell# show running-config bgp To display the current BGP configuration, use this feature.
PAGE 366
timers bgp extended Adjust the BGP idle holdtime for all the BGP neighbors. Syntax timers bgp extended idle-holdtime To return to the default, use the no timers bgp extended command. Parameters extended idleholdtime Enter a number for the time interval, in seconds, for the peer to be idle state. The range is from 1 to 32767. The default is 15 seconds. Defaults The default idle-holdtime is 15 seconds.
PAGE 367
Parameters dampening Command Modes EXEC Privilege Supported Modes Full–Switch Command History Enter the keyword dampening to clear route flap dampening information. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. distance bgp Define an administrative distance for routes. Syntax distance bgp external-distance internal-distance local-distance To return to default values, use the no distance bgp command.
PAGE 368
show ip bgp dampened-paths View BGP routes that are dampened (non-active). Syntax show ip bgp [ipv4 unicast] dampened-paths Command Modes Supported Modes Command History Usage Information Example • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip bgp damp command shown in the following example.
PAGE 369
To delete the Route Origin community, use the no set extcommunity command. Parameters as4 ASN4:NN Enter the keyword as4 then the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value). ASN:NNNN Enter the 2-octet AS specific extended community number in the format ASN:NNNN (2byte AS number:4-byte community value). IPADDR:NN Enter the IP address specific extended community in the format IPADDR:NN (4-byte IPv4 Unicast Address:2-byte community value).
PAGE 370
Defaults none Command Modes ROUTE MAP (config-route-map) Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If the set community rt and soo are in the same route-map entry, the behavior defines as: • Related Commands If the rt option comes before soo, with or without the additive option, soo overrides the communities rt sets.
PAGE 371
show ip bgp extcommunity-list View information on all routes with Extended Community attributes. Syntax Parameters Command Modes Supported Modes Command History Usage Information show ip bgp [ipv4 unicast] extcommunity-list [list name] ipv4 unicast (OPTIONAL) Enter the keywords ipv4 unicast to view information only related to ipv4 unicast routes. list name Enter the extended community list name you wish to view. The range is 140 characters.
PAGE 372
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you enable soft-reconfiguration for a neighbor and you execute the clear ip bgp soft in command, the update database stored in the router is replayed and updates are re-evaluated. With this command, the replay and update process is triggered only if route-refresh request is not negotiated with the peer.
PAGE 373
debug ip bgp ipv6 unicast soft-reconfiguration Enable soft-reconfiguration debugging for IPv6 unicast routes. Syntax debug ip bgp [ipv4-address | ipv6-address | peer-group-name] ipv6 unicast softreconfiguration To disable debugging, use the no debug ip bgp [ipv4-address | ipv6-address | peer-groupname] ipv6 unicast soft-reconfiguration command. Parameters ipv4-address | ipv6address Enter the IP address of the neighbor on which you want to enable soft-reconfiguration debugging.
PAGE 374
Related Commands Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ipv6 prefix-list — View the selected IPv6 prefix-list. show ipv6 prefix-list Displays the specified IPv6 prefix list. Syntax show ipv6 prefix-list detail {prefix-list name} | summary Parameters detail Display a detailed description of the selected IPv6 prefix list. prefix-list name Enter the name of the prefix list. NOTE: There is a 140-character limit for prefix list names.
PAGE 375
summary Command Modes EXEC Supported Modes Full–Switch Command History Display a summary of RPF routes. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 376
11 Configuration Cloning Configuration Cloning enables you to clone the configuration from one aggregator to the other. It identifies a source aggregator where running configuration is check-pointed, extracted and downloaded to the target aggregator for further use. The target aggregator checks the compatibility of the cloning file regarding the mode, port types and optional modules.
PAGE 377
Command History Version Description 9.10(0.0) Introduced on the FN IOM and M I/O Aggregator. clone-config create Create the cloning configuration. Syntax Parameters clone-config create [file-name filename][output xml] create Enter the keyword create to create the cloning configuration file. file-name filename Enter the keywords file-name to save the cloning configuration in user-defined filename. By default, it gets stored in flash under the filename cloning-config.
PAGE 378
12 Content Addressable Memory (CAM) Content addressable memory (CAM) commands are supported on the Dell Networking operating software on the platform. WARNING: If you are using these features for the first time, contact Dell Networking Technical Assistance Center (TAC) for guidance.
PAGE 379
vman-qos—dual—fp number] ipv4pbr number} ecfmacl number [nlbclusteraclnumber]fcoeacl number iscsioptacl number} Parameters default Use the default CAM profile settings and set the CAM as follows: • L3 ACL (ipv4acl): 4 • L2 ACL(l2acl): 5 • IPv6 L3 ACL (ipv6acl): 0 • L3 QoS (ipv4qos): 1 • L2 QoS (l2qos): 1 • L2PT (L2PT): 0 • MAC ACL (IpMacAcl): 0 • VmanDualQos: 0 • EcfmAcl: 0 • nlbclusteracl: 0 • FcoeAcl: 4 • iscsiOptAcl: 2 l2acl number Enter the keyword l2acl and then the number of
PAGE 380
vman-dual-qos number Enter the keyword vman-dual-qos and then the number of FP blocks for VMAN dual QoS. The range is from 0 to 4. Ipv4pbr number Enter the keyword ipv4pbr and then the number of FP blocks for ipv4pbr ACL. The range is from 0 to 8. Openflow number Enter the keyword openflow and then the number of FP blocks for open flow (multiples of 4). The range is from 0 to 8. fcoeacl number Enter the keyword fcoeacl and then the number of FP blocks for FCOE ACL. The range is from 0 to 6.
PAGE 381
cam-optimization Optimize CAM utilization for QoS Entries by minimizing require policy-map CAM space. Syntax Parameters cam-optimization [qos] qos Optimize CAM usage for QoS. Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 382
silence-period default Enter the keyword default to set the silence period for receiving syslog message regarding CAM usage for CAM region, slot/portpipe. The default silence period is 0 seconds. silence-period silence-period-value Enter the silence period for stop receiving syslog message for the respective CAM region, slot/portpipe. The range is from 0 to 65535 seconds. Command Modes CONFIGURATION Supported Modes Full-Switch Command History Usage Information Version Description 9.14.1.
PAGE 383
Ipv4Qos : L2Qos : L2PT : IpMacAcl : VmanQos : VmanDualQos : EcfmAcl : FcoeAcl : iscsiOptAcl : ipv4pbr : vrfv4Acl : Openflow : fedgovacl : nlbclusteracl: 2 1 0 0 0 0 0 0 0 0 0 0 0 0 -- stack-unit 0 -Current Settings(in block sizes) 1 block = 128 entries L2Acl : 6 Ipv4Acl : 4 Ipv6Acl : 0 Ipv4Qos : 2 L2Qos : 1 L2PT : 0 IpMacAcl : 0 VmanQos : 0 VmanDualQos : 0 EcfmAcl : 0 FcoeAcl : 0 iscsiOptAcl : 0 ipv4pbr : 0 vrfv4Acl : 0 Openflow : 0 fedgovacl : 0 nlbclusteracl: 0 -- stack-unit 1 -Current Settings(in block
PAGE 384
Command Modes Configuration Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The display reflects the settings implemented with the cam-acl-egress command.
PAGE 385
13 Control Plane Policing (CoPP) The Dell Networking OS supports the following CoPP commands. control-plane-cpuqos To manage control-plane traffic, enter control-plane mode and configure the switch. Syntax control-plane-cpuqos Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 386
Related Commands qos-policy-input — creates a QoS input policy map. policy-map-input — creates an input policy map. service-policy rate-limit-protocols Apply a policy for the system to rate limit control protocols on a per-protocol basis. Syntax service-policy rate-limit-protocols policy-name Parameters policy-name Enter the service-policy name, using a string up to 32 characters. Defaults Not configured.
PAGE 387
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command applies the service-policy based on the type of protocol defined in the ACL rules. Create ACL and QoS policies prior to enabling this command.
PAGE 388
VRRP Dell# any any _ Q10 _ show ipv6 protocol-queue-mapping Display the queue mapping for each configured IPv6 protocol. Syntax show ipv6 protocol-queue-mapping Defaults Not configured. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 389
LLDP GVRP STP ISIS Dell# any 01:80:c2:00:00:21 01:80:c2:00:00:00 01:80:c2:00:00:14/15 09:00:2b:00:00:04/05 0x88cc any any any any Q8 Q8 Q7 Q9 Q9 CP CP CP CP CP _ _ _ _ Control Plane Policing (CoPP) 389
PAGE 390
14 u-Boot All commands in this chapter are in u-Boot mode. These commands are supported on the Dell Networking Aggregator only. To access this mode, hit any key when the following line appears on the console during a system boot: Hit any key to stop autoboot: You enter u-Boot immediately, as indicated by the BOOT_USER# prompt. NOTE: Only the most frequently used commands available in uBoot mode are described in this chapter. In uBoot mode, you cannot use the Tab key for command completion.
PAGE 391
Command History Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. boot show net config retries Show the number of retries for network boot configuration failure. Syntax boot show net config retries Command Modes uBoot Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 392
Command Modes uBoot Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. default gateway Set the default gateway IP address. Syntax default-gateway Command Modes uBoot Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.
PAGE 393
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. BOOT_USER # help ***** Dell Force10 Boot Interface Help Information ***** Current access level: USER LEVEL Use "syntax help" for more information on syntax.
PAGE 394
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. interface management ethernet ip address Set the management port IP address and mask. Syntax interface management ethernet ip address Command Modes uBoot Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.
PAGE 395
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. reload Reload the switch. Syntax reload Command Modes uBoot Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. show boot blc Show the boot loop counter value.
PAGE 396
show boot selection Displays the ROM bootstrap bootflash partition. Syntax show boot selection Command Modes uBoot Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. BOOT_USER # show boot blc ? Total 1 possible command found.
PAGE 397
Boot Selector Partition: Dell Force10 Networks System Boot Official IOM_XLOAD_LP_IMG_BOOT_SELECTOR, BSP Release 4.0.0.0bt1 Created Tue May 1 10:56:34 2012 by build on login-sjc-01 BOOT_USER # show bootvar Show the summary of operating system boot parameters. Syntax show bootvar Command Modes uBoot Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 398
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. BOOT_USER # show default-gateway Gateway IP address: 15.0.0.1 BOOT_USER # show interface management ethernet Show the management port IP address and mask. Syntax show interface management ethernet Command Modes uBoot Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM.
PAGE 399
syntax help Show the syntax information. Syntax help Command Modes uBoot Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 400
15 Data Center Bridging (DCB) Data center bridging (DCB) refers to a set of IEEE Ethernet enhancements that provide data centers with a single, robust, converged network to support multiple traffic types, including local area network (LAN), server, and storage traffic. DCB features are auto-configured in standalone mode. The Dell Networking OS commands for DCB features include 802.1Qbb priority-based flow control (PFC), 802.
PAGE 401
• dcbx version • debug dcbx • description • fc-map • fcoe-map • fcoe priority-bits • iscsi priority-bits • keepalive • interface vlan (NPIV proxy gateway) • pfc mode on • pfc no-drop queues • priority • priority-group bandwidth pfc • priority-pgid • qos-policy-output ets • qos-policy-buffer • priority-list • scheduler • show dcb • show interface dcbx detail • show interface ets • show interface pfc • show interface pfc statistics • show qos priority-groups •
PAGE 402
Defaults Application priority TLVs are enabled to advertise FCoE and iSCSI. Command Modes PROTOCOL LLDP Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 403
You can enable ETS recommend TLVs (ets-reco) only if you enable ETS configuration TLVs (ets-conf). To disable TLV transmission, use the no form of the command; for example, no advertise dcbx-tlv pfc ets-reco. DCBX requires that you enable LLDP to advertise DCBX TLVs to peers. Configure DCBX operation at the INTERFACE level on a switch or globally on the switch. To verify the DCBX configuration on a port, use the show interface dcbx detail command.
PAGE 404
Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. DCB is not supported if you enable link-level flow control on one or more interfaces. dcb-policy buffer-threshold (Global Configuration) Assign the dcb buffer threshold policy on the stack ports.
PAGE 405
dcb-policy buffer-threshold (Interface Configuration) Assign the DCB policy to the DCB buffer threshold profile on interfaces. This setting takes precedence over the global buffer-threshold setting. Syntax Parameters dcb-policy buffer-threshold profile-name buffer-threshold Configure the profile name for the DCB buffer threshold profile-name Enter the name of the profile, which can be a string of up to 32 characters in length.
PAGE 406
clear ets counters Clear ETS TLV counters. Syntax clear ets counters [tengigabitethernet slot/port] Parameters Command Modes Supported Modes Command History slot/port • Enter the slot/port number. EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. clear pfc counters Clear the PFC TLV counters and PFC statistics on an interface or stack unit.
PAGE 407
dcb enable pfc-queues Configure the number of PFC queues. Syntax Parameters dcb enable pfc-queues value value Enter the number of PFC queues. The range is from 1 to 4. The number of ports supported based on lossless queues configured will depend on the buffer. Default 2 Command Modes CONFIGURATION mode Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN 2210S Aggregator. 9.3(0.
PAGE 408
Command Modes Supported Modes Command History Example (Disable) • CONFIGURATION All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.3 Added auto-detect parameter on the M I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 409
stack-unit 0 port-set 0 DCB Status: Enabled, PFC Queue Count: 4 stack-unit Total Buffer PFC Total Buffer PFC Shared Buffer PFC Available Buffer PP (KB) (KB) (KB) (KB) -----------------------------------------------------------------0 0 3822 1912 832 450 Dell(conf)# Example (Enable DCB with AutoDetect) Dell#show dcb stack-unit 0 port-set 0 DCB Status : Disabled PFC Queue Count : 2 Total Buffer[lossy + lossless] (in KB) : 3822 PFC Total Buffer (in KB) : 1912 PFC Shared Buffer (in KB) : 832 PFC Available Buf
PAGE 410
Usage Information The dcb-map stack-unit all stack-ports all command overwrites any previous DCB maps applied to stack ports. dcbx-port role Configure the DCBX port role the interface uses to exchange DCB information. Syntax dcbx port-role {config-source | auto-downstream | auto-upstream | manual} To remove DCBX port role, use the no dcbx port-role {config-source | auto-downstream | auto-upstream | manual} command.
PAGE 411
Parameters auto | cee | cin | ieee-v2.5 Enter the DCBX version type used on the interface, where: • auto: configures the port to operate using the DCBX version received from a peer. • cee: configures the port to use CEE (Intel 1.01). • cin: configures the port to use Cisco-Intel-Nuova (DCBX 1.0). • ieee-v2.5: configures the port to use IEEE 802.1az (Draft 2.5).
PAGE 412
Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Introduced on the FC Flex IO module installed in the M I/O Aggregator. description Enter a text description of the DCB policy (PFC input or ETS output). Syntax description text To remove the text description, use the no description command. Parameters Defaults text Enter the description of the output policy. The maximum is 32 characters.
PAGE 413
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN 2210S Aggregator. 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. The FC-MAP value you enter must match the FC-MAP value used by an FC switch or FCoE forwarder (FCF) in the fabric. An FCF switch accepts only FCoE traffic that uses the correct FC-MAP value. The FC-MAP value is used to generate the fabric-provided MAC address (FP-MAC).
PAGE 414
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN2210S Aggregator. 9.3(0.0) Introduced on the M I/O Aggregator. An FCoE map is a template used to map FCoE and FC parameters in a converged fabric. An FCoE map is used to virtualize upstream FC ports on an FN2210S Aggregator with the PMUX module NPIV proxy gateway so that they appear to downstream server CNA ports as FCoE forwarder (FCF) ports on an FCoE network.
PAGE 415
iscsi priority-bits Configure the iSCSI priority advertised for the iSCSI protocol in application priority TLVs. Syntax iscsi priority-bits priority-bitmap To remove the configured iSCSI priority, use the no iscsi priority-bits command. Parameters priority-bitmap Enter the priority-bitmap range. The range is from 1 to FF. Defaults 0x10 Command Modes PROTOCOL LLDP Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.
PAGE 416
Usage Information When you configure keepalive, the system sends a self-addressed packet out of the configured interface to verify that the far end of a WAN link is up. When you configure no keepalive, the system does not send keepalive packets and so the local end of a WAN link remains up even if the remote end is down.
PAGE 417
To disable the PFC configuration, use the no pfc mode on command. Defaults PFC mode is on. Command Modes DCB MAP Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Introduced on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. By applying a DCB input policy with PFC enabled, you enable PFC operation on ingress port traffic.
PAGE 418
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The maximum number of lossless queues globally supported on the switch is two. The following lists the dot1p priority-queue assignments. dot1p Value in the Incoming Frame Description heading 0 0 1 0 2 0 3 1 4 2 5 3 6 3 7 3 priority Configure the priority for the PFC threshold to be allocated to the buffer space parameters.
PAGE 419
Default The default size of the ingress buffer is 45 KB. The default buffer limit at which the port sends the pause to peer and recommences the sending of packets to the peer is 10 KB. The default threshold weight of the shared buffer space is 10. Command Modes DCB-BUFFER-THRESHOLD mode Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL platform.
PAGE 420
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Introduced on the FC Flex IO module installed in the M I/O Aggregator. Use the dcb-map command to configure priority groups with PFC and/or ETS settings and apply them to Ethernet interfaces. Use the priority-pgid command to map 802.1p priorities to a priority group. You can assign each 802.1p priority to only one priority group.
PAGE 421
dot1p6_group-num dot1p7_group-num Defaults None Command Modes DCB MAP Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Introduced on the FC Flex IO module installed in the M I/O Aggregator. PFC and ETS settings are not pre-configured on Ethernet ports. You must use the dcb-map command to configure different groups of 802.
PAGE 422
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 423
resume-offset Buffer offset limit for resuming in KB threshold-value Buffer offset limit at which the port resumes the peer in KB. Enter a number in the range of 1 to 7787. The default is 10 KB. shared-thresholdweight Buffer shared threshold weight size Weightage of the priorities on the shared buffer size in the system. Enter a number in the range from 0 to 9. The default shared threshold weight is 10. Default The default size of the ingress buffer is 45 KB.
PAGE 424
Parameters value Enter the priority list value. Separate priority values with a comma; specify a priority range with a dash; for example, priority-list 3,5-7. The range is from 0 to 7. Defaults none Command Modes PRIORITY-GROUP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default: • All 802.
PAGE 425
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. dot1p priority traffic on the switch is scheduled to the current queue mapping. dot1p priorities within the same queue must have the same traffic properties and scheduling method. ETS-assigned scheduling applies only to data queues, not to control queues. The configuration of bandwidth allocation and strict-queue scheduling is not supported at the same time for a priority group.
PAGE 426
Parameters port-type Enter the port type. slot/port Enter the slot/port number. NOTE: This command also enables you to view information corresponding to a range of ports. • You can specify multiple ports as slot/port-range. For example, if you want to display information corresponding to all ports between 1 and 4, specify the port range as show interfaces interface-type 1/1 - 4. Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information Version Description 9.9(0.
PAGE 427
Example Field Description Local DCBX Status: DCBX Max Version Supported Highest DCBX version supported in Control TLVs. Local DCBX Status: Sequence Number Sequence number transmitted in Control TLVs. Local DCBX Status: Acknowledgment Number Acknowledgement number transmitted in Control TLVs. Local DCBX Status: Protocol State Current operational state of the DCBX protocol: ACK or IN-SYNC.
PAGE 428
Local DCBX Configured mode is CEE Peer Operating version is CEE Local DCBX TLVs Transmitted: ErPfi Local DCBX Status ----------------DCBX Operational Version is 0 DCBX Max Version Supported is 0 Sequence Number: 2 Acknowledgment Number: 2 Protocol State: In-Sync Peer DCBX Status: ---------------DCBX Operational Version is 0 DCBX Max Version Supported is 255 Sequence Number: 2 Acknowledgment Number: 2 Total DCBX Frames transmitted 27 Total DCBX Frames received 6 Total DCBX Frame errors 0 Total DCBX Frames un
PAGE 429
Field Description Interface Interface type with stack-unit and port number. Max Supported TC Group Maximum number of priority groups supported. Number of Traffic Classes Number of 802.1p priorities currently configured. Admin mode ETS mode: on or off. When on, the scheduling and bandwidth allocation configured in an ETS output policy or received in a DCBX TLV from a peer can take effect on an interface.
PAGE 430
4 0% ETS 5 0% ETS 6 0% ETS 7 0% ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Remote Parameters: ------------------Remote is disabled Local Parameters: -----------------Local is enabled TC-grp Priority# Bandwidth TSA 0 0,1,2,3,4,5,6,7 100% ETS 1 0% ETS 2 0% ETS 3 0% ETS 4 0% ETS 5 0% ETS 6 0% ETS 7 0% ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Oper status is init Conf TLV Tx Status
PAGE 431
Remote Parameters: ------------------Remote is disabled Local Parameters : -----------------Local is enabled TC-grp Priority# 0 0,1,2,3,4,5,6,7 1 2 3 4 5 6 7 Bandwidth 100% 0% 0% 0% 0% 0% 0% 0% TSA ETS ETS ETS ETS ETS ETS ETS ETS Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Oper status is init ETS DCBX Oper status is Down Reason: Port Shutdown State Machine Type is Asymmetric Conf TLV Tx Status is enabled Reco TLV Tx Status is enabled 0 Input Con
PAGE 432
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM and added support to display the interface configurations corresponding to a range of ports. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To clear the PFC TLV counters, use the clear pfc counters interface port-type slot/port command.
PAGE 433
Field Description Application Priority TLV: Local FCOE Priority Map Priority bitmap the local DCBX port uses in FCoE advertisements in application priority TLVs. Application Priority TLV: Local ISCSI Priority Map Priority bitmap the local DCBX port uses in ISCSI advertisements in application priority TLVs. Application Priority TLV: Remote FCOE Priority Map Status of FCoE advertisements in application priority TLVs from the remote peer port: enabled or disabled.
PAGE 434
PFC Link Delay 45556 pause quanta Application Priority TLV Parameters : -------------------------------------FCOE TLV Tx Status is disabled ISCSI TLV Tx Status is disabled Local FCOE PriorityMap is 0x8 Local ISCSI PriorityMap is 0x10 Remote FCOE PriorityMap is 0x8 Remote ISCSI PriorityMap is 0x8 0 Input TLV pkts, 1 Output TLV pkts, 0 Error pkts, 0 Pause Tx pkts, 0 Pause Rx pkts show interface pfc statistics Displays counters for the PFC frames received and transmitted (by dot1p priority class) on an interf
PAGE 435
show qos priority-groups Displays the ETS priority groups configured on the switch, including the 802.1p priority classes and ID of each group. Syntax show qos priority-groups Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 436
Example Field Description State Complete: All mandatory DCB parameters are correctly configured. In progress: The DCB map configuration is not complete. Some mandatory parameters are not configured. PFC Mode PFC configuration in DCB map: On (enabled) or Off. PG Priority group configured in the DCB map. TSA Transmission scheduling algorithm used by the priority group: Enhanced Transmission Selection (ETS). BW Percentage of bandwidth allocated to the priority group.
PAGE 437
Admin Parameters: -------------------Admin is enabled TC-grp Priority# Bandwidth TSA -----------------------------------------------0 0,1,2,3,4,5,6,7 100% ETS 1 - 2 - 3 - 4 - 5 - 6 - 7 - 8 - Stack unit 1 stack port all Max Supported TC Groups is 4 Number of Traffic Classes is 1 Admin mode is on Admin Parameters: -------------------Admin is enabled TC-grp Priority# Bandwidth TSA -----------------------------------------------0 0,1,2,3,4,5,6,7 100% ETS 1 2 3 4 5 6 7 8 - dcb pfc-shared-buffer-size Configure t
PAGE 438
Dell(conf)#dcb pfc-shared-buffer-size 2000 %ERROR: pfc shared buffer size configured cannot accommodate existing buffer requirement in the system. Enter a smaller value for the shared buffer size or increase the total buffer size appropriately by using the dcb pfc-total- buffer-size command. Example Dell(conf)#dcb pfc-shared-buffer-size 5000 dcb pfc-total-buffer-size Configure the total buffer size for PFC in kilobytes.
PAGE 439
Parameters profile-name Enter the name of the profile, which can be a string of up to 32 characters in length. Default None Command Modes CONFIGURATION mode Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL platform. Usage Information When you enter the profile name, you enter the DCB buffer threshold configuration mode.
PAGE 440
services, such as file transfers. You can configure the amount of buffer space to be allocated for each priority and the pause or resume thresholds for the buffer. This method of configuration enables you to effectively manage and administer the behavior of lossless queues. Example Dell(conf)#dcb pfc-queues 4 dcb {ets | pfc} enable Enable priority flow control or enhanced transmission selection on interface. Syntax dcb {ets | pfc} enable • To disable ETS on interface, use “no dcb ets enable” command.
PAGE 441
number Enter a weight for the queue on the shared buffer as a number in the range of 1 to 11. Default The default threshold weight on the shared buffer for each queue is 9. Therefore, each queue can consume up to 66.67 percent of available shared buffer by default. Command Modes INTERFACE mode Supported Modes Full–Switch Usage Information You can configure all the data queues. You can configure queues 0-7.
PAGE 442
Command Modes CONFIGURATION Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 443
16 Dynamic Host Configuration Protocol Dynamic host configuration protocol (DHCP) is an application layer protocol that dynamically assigns IP addresses and other configuration parameters to network end-stations (hosts) based on configuration policies determined by network administrators. An Aggregator can operate as a DHCP client. As a DHCP client, the Aggregator requests an IP address from a DHCP server.
PAGE 444
address Enter the IP address to clear the binding entry for a single IP address. conflicts Enter the keyword conflicts to delete all of the log entries created for IP address conflicts. server statistics Enter the keywords server statistics to clear all the server counter information. Defaults none Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 445
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. default-router Assign a default gateway to clients based on the address pool. Syntax default-router address [address2...address8] Parameters address Defaults none Command Modes DHCP Supported Modes Full–Switch Command History Enter a list of routers that may be the default gateway for clients on the subnet. You may specify up to eight routers.
PAGE 446
Parameters address Defaults none Command Modes DHCP Supported Modes Full–Switch Command History Enter a list of DNS servers that may service clients on the subnet. You may list up to eight servers, in order of preference. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. domain-name Assign a domain to clients based on the address pool.
PAGE 447
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. hardware-address For manual configurations, specify the client hardware address. Syntax Parameters hardware-address address address Defaults none Command Modes DHCP Supported Modes Full–Switch Command History Enter the hardware address of the client. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 448
Parameters days Enter the number of days of the lease. The range is from 0 to 31. hours Enter the number of hours of the lease. The range is from 0 to 23. minutes Enter the number of minutes of the lease. The range is from 0 to 59. infinite Specify that the lease never expires. Defaults 24 hours Command Modes DHCP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 449
• Defaults Hybrid Command Modes DHCP Supported Modes Full–Switch Command History Peer-to-peer: Enter the keyword p-node. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. network Specify the range of addresses in an address pool. Syntax Parameters network network /prefix-length network/ prefixlength Defaults none Command Modes DHCP Supported Modes Full–Switch Command History Specify a range of addresses.
PAGE 450
show ip dhcp configuration Display the DHCP configuration. Syntax show ip dhcp configuration [global | pool name] Parameters pool name Display the configuration for a DHCP pool. global Display the DHCP configuration for the entire system. Defaults none Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 451
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Commands to Configure the System to be a DHCP Client To configure the system to be a DHCP client, use the following commands. ip address dhcp Acquire an IP address dynamically on an interface from the DHCP server. Syntax ip address dhcp [relay | vendor-class-identifier] To disable DHCP Client on an interface, use the no ip address dhcp command.
PAGE 452
Command Modes EXEC Privilege Supported Modes All Modes Default None Command History • For the management interface on the stack-unit, enter the keyword managementethernet followed by slot/port information. The slot and port range is 0. • For a VLAN, enter the keyword vlan followed by a number from 1 to 4094. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 453
debug ip dhcp client packets Enable the display of log messages for all DHCP packets sent and received on DHCP client interfaces. Syntax Parameters debug ip dhcp client packets [interface type slot/port] interface type slot/ port Command Modes EXEC Privilege Supported Modes All Modes Default None Command History Display log messages for DHCP packets sent and received on the specified interface.
PAGE 454
Usage Information When you enter the release dhcp command, although the IP address that was dynamically-acquired from a DHCP server is released from an interface, the ability to acquire a new DHCP server-assigned address remains in the running configuration for the interface. To acquire a new IP address, enter either the renew dhcp command at the EXEC privilege level or the ip address dhcp command at the interface configuration level.
PAGE 455
• Command Modes EXEC Privilege Supported Modes All Modes Default None. Command History For a VLAN, enter the keyword vlan followed by a number from 1 to 4094. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. show ip dhcp lease Displays lease information about the dynamic IP address currently assigned to a DHCP client-enabled interface.
PAGE 456
Defaults Disabled Command Modes INTERFACE VLAN Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. arp inspection-trust — specifies a port as trusted so that ARP frames are not validated against the binding table. arp inspection-limit Configure dynamic ARP inspection rate-limit to verify the rate of ARP packet received in a port on a specific interval.
PAGE 457
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. arp inspection — enables dynamic ARP inspection on a VLAN. clear ip dhcp snooping Clear the DHCP binding table. Syntax clear ip dhcp snooping binding Defaults none Command Modes EXEC Privilege Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 458
To disable the IPv4 DHCP relay source interface, use the no ip dhcp relay source–interface interface command. Parameters Defaults source-interface interface Enter the keyword source-interface then the type of interface and the interface information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/plot information. • For a 10-Gigabit Ethernet information, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 459
Parameters Defaults Command Modes source-interface interface Enter the keyword source-interface then the type of interface and the interface information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/plot information. • For a 10-Gigabit Ethernet information, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet information, enter the keyword FortyGigabitEthernet then the slot/port information.
PAGE 460
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When enabled, no learning takes place until you enable snooping on a VLAN. After disabling DHCP snooping, the binding table is deleted, and Option 82, IP Source Guard, and Dynamic ARP Inspection are disabled. Introduced in the Dell Networking OS version 7.8.1.
PAGE 461
ipv6 dhcp snooping database write-delay To set time interval for storing the snooping binding entries in a file. Syntax [no] ipv6 dhcp snooping database write-delay value To disable the storing of snooping binding entries in a file, use the no ipv6 dhcp snooping write-delay command. Parameters value Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Command History The range is from 5 to 21600. The value of the minutes range is from 5 min. to 15 days. Version Description 9.
PAGE 462
Supported Modes Command History Full–Switch Version Description 9.13(0.0) Enhanced the command to map multiple IP addresses to one MAC address. Enhanced to support DHCP snooping in a VLT setup. 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Instructions You can map multiple IP addresses to the same MAC address. Related Commands show ip dhcp snooping — displays the contents of the DHCP binding table.
PAGE 463
ipv6 dhcp snooping trust Configure an interface as trusted for DHCP snooping. Syntax [no] ipv6 dhcp snooping trust To disable dhcp snooping trusted capability on this interface, use the no ipv6 dhcp snooping trust command. Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL. ip dhcp source-address-validation Enable the IP Source Guard.
PAGE 464
Parameters name Defaults Disabled Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Enter the name of a VLAN on which to enable DHCP Snooping. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When enabled, the system begins creating entries in the binding table for the specified VLANs. NOTE: Learning only happens if there is a trusted port in the VLAN.
PAGE 465
Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip dhcp snooping Display the contents of the DHCP binding table or display the interfaces configured with IP Source Guard.
PAGE 466
Example Dell#show ipv6 dhcp snooping IPv6 DHCP Snooping IPv6 DHCP Snooping Mac Verification : Enabled. : Disabled. Database write-delay (In minutes) : 5 DHCP packets information Snooping packets Snooping packets processed on L2 vlans : 0 : 0 DHCP Binding File Details Invalid File Invalid Binding Entry Binding Entry lease expired : 0 : 0 : 0 Dell# ip dhcp snooping verify mac-address Validate a DHCP packet’s source hardware address against the client hardware address field (CHADDR) in the payload.
PAGE 467
17 Equal Cost Multi-Path (ECMP) Equal cost multi-path (ECMP) is supported on the Dell Networking OS. ecmp-group Provides a mechanism to monitor traffic distribution on an ECMP link bundle. A system log is generated when the standard deviation of traffic distribution on a member link exceeds a defined threshold. Syntax ecmp-group {ecmp-group-id interface interface | link-bundle-monitor} To remove the selected interface, use the ecmp-group no interface command.
PAGE 468
xor1 | xor2 | xor4 | xor8 | xor16}[[hg {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16}]| [lag {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16 }][stack-unit|linecard number | port-set number] | [hg—seed value] | [seedvalue] To return to the default hash algorithm, use the no hash-algorithm command. To return to the default ECMP hash algorithm, use the no hash-algorithm ecmp algorithm-value command.
PAGE 469
xor2 | xor4 | xor8 | xor16}|lsb | xor1 | xor2 | xor4 | xor8 | xor16 hg {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16} lag {crc16 | crc16cc | crc32MSB | crc32LSB | xor1 | xor2 | xor4 | xor8 | xor16} crc16 |crc16cc |crc32MSB |crc32LSB |xor1 |xor2 |xor4 |xor8 | xor16 • lsb: Returns the LSB of the key as the hash • xor1: Use CRC16_BISYNC_AND_XOR1 — Upper 8 bits of CRC16-BISYNC and lower 8 bits of xor1 • xor2: Use CRC16_BISYNC_AND_XOR2 — Upper 8 bits of CRC16-BISYNC and lower
PAGE 470
linecard number (OPTIONAL) : Enter the keyword linecard then the linecard slot number. port-set number (OPTIONAL) Enter the keyword port-set then the port-set slot number. Defaults 0 for hash-algorithm value on TeraScale and ExaScale IPSA and IPDA mask value is FF for a line card. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. Added flow-based-hashing support for hashing on ECMP. 9.2(0.
PAGE 471
hash-algorithm ecmp Change the hash algorithm used to distribute traffic flows across an ECMP (equal-cost multipath routing) group. Syntax hash-algorithm ecmp {crc-upper} | {dest-ip} | {lsb} To return to the default hash algorithm, use the no hash-algorithm ecmp command. Parameters Defaults crc-upper Uses the upper 32 bits of the key for the hash computation. The default is crc-lower. dest-ip Uses the destination IP for ECMP hashing. The default is enabled.
PAGE 472
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Deterministic ECMP sorts ECMPs in order even though RTM provides them in a random order. However, the hash algorithm uses as a seed the lower 12 bits of the chassis MAC, which yields a different hash result for every chassis.
PAGE 473
link-bundle-distribution trigger-threshold Provides a mechanism to set the threshold to trigger when traffic distribution begins being monitored on an ECMP link bundle. Syntax Parameters link-bundle-distribution trigger-threshold [percent] percent Command Modes EXEC Privilege Supported Modes Full–Switch Command History Indicate the threshold value when traffic distribution starts being monitored on an ECMP link bundle. The range is from 1 to 90%. The default is 60%. Version Description 9.9(0.
PAGE 474
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show link-bundle distribution Display the link-bundle distribution for the interfaces in the bundle, type of bundle (LAG or ECMP), and the most recently calculated interface utilization (either bytes per second rate or maximum rate) for each interface. Syntax show link-bundle-distribution Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example 474 Version Description 9.9(0.
PAGE 475
18 FC FLEXIO FPORT The switch is a blade switch which is plugged into the Dell M1000 Blade server chassis.The blade module contains two slots for pluggable flexible module. With single FC Flex IO module, 4 ports are supported, whereas 8 ports are supported with both FC Flex IO modules. Each port can operate in 2G, 4G or 8G Fiber Channel speed. The topology-wise, FC Flex IOM is directly connected to a FC Storage.
PAGE 476
• fabric • active-zoneset • stack-unit port-group port portmode • show fc ns • show fc switch • show fc zoneset • show fc zone • show fc alias • show fcoe-map • show system stack-unit port-group portmode feature fc Enable feature fc with FPort functionality. Syntax feature fc fport domain-id range Parameters Range Command Modes CONFIGURATION Supported Modes Full–Switch Command History Enter the range from 1 to 239. Version Description 9.9(0.0) Introduced on the FN IOM. 9.
PAGE 477
Version Description 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.0) Introduced on the S5000. Example without member Dell(conf)# fc zone z1 Dell(conf-fc-zone-z1)# Example with member Dell(conf)#fc zone test Dell(conf-fc-zone-test)#member ? WORD WWN(00:00:00:00:00:00:00:00), portID(000000), or Alias name(word) Dell(conf-fc-zone-test)#member Related Commands show fc zone — displays the configured zone. show fcoe-map — displays the fabric parameters.
PAGE 478
fc zoneset Create a zoneset. Syntax fc zoneset zoneset_name [member] To delete a zoneset, use the no fc zoneset zoneset_name [member] command. Parameters zoneset_namemem ber Command Modes CONFIGURATION Supported Modes Full–Switch Command History Enter the zoneset name. Enter the WWPN, FC-ID, or Alias name. Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.0) Introduced on the S5000.
PAGE 479
Usage Information Version Description 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.0(1.3) Introduced on the S5000. An FCoE map is a template to map FCoE and FC parameters in a converged fabric. An FCoE map virtualizes upstream FC ports on an NPIV proxy gateway to appear to downstream server CNA ports as FCoE forwarder (FCF) ports on an FCoE network.
PAGE 480
necessary parameters to FCoE-enabled servers and switches to log in to a SAN fabric. Use the fcoe-map command to create an FCoE map. On an FN IOM NPIV proxy gateway, an FCoE map is applied on fabric-facing FC ports and server-facing Ethernet ports. Use the fabric command to apply an FCoE map on an FC port. Use the fcoe-map command to apply an FCoE map on an Ethernet port.
PAGE 481
Parameters Defaults stack-unit Enter the keywords stack-unit then the stack member number to select the stack unit. The range is from 0 to 5. port-group Enter the keywords port-group then the port group number. The range is from 0 to 1. port Enter the keyword port then the port number. The range is from 9 to 12. The port numbers 9 to 10 map to port-group 0 and the port numbers 11 to 12 map to port-group 1. portmode Enter the keyword portmode to set the port mode.
PAGE 482
Switch Name 10:00:5c:f9:dd:ef:0a:00 Domain Id 1 Switch Port 53 Port Id 01:35:00 Port Name 10:00:8c:7c:ff:17:f8:01 Node Name 20:00:8c:7c:ff:17:f8:01 Class of Service 8 IP Address Symbolic Port Name Brocade-1860 | 3.0.3.
PAGE 483
Total number of Intf# Domain 9 2 11 2 Dell# devices = FC-ID 02:09:00 02:0b:00 2 Enode-WWPN Enode-WWNN 32:11:0e:fc:00:00:00:88 22:11:0e:fc:00:00:00:88 31:11:0e:fc:00:00:00:77 21:11:0e:fc:00:00:00:77 show fc switch Display the switch configuration for Fibre Channel capability. Syntax show fc switch Parameters None Command Modes Supported Modes Command History Usage Information Example • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.
PAGE 484
• Supported Modes Command History Example EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.0) Introduced on the S5000.
PAGE 485
Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1(1.0) Introduced on the S5000. Dell#show fc zone ZoneName ZoneMember ======================================================= brcd_sanb brcd_cna1_wwpn1 sanb_p2tgt1_wwpn Dell# Related Commands fc zone — creates a zone. show fc alias Display the configured alias.
PAGE 486
show fcoe-map Display the Fibre Channel and FCoE configuration parameters in FCoE maps. Syntax show fcoe-map Parameters None Command Modes Supported Modes Command History Usage Information • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 9.1.1.0 Introduced on the S5000.
PAGE 487
show system stack-unit port-group portmode Display the port-group port mode information. Syntax Parameters Command Modes Command History show system stack-unit unit-number port-group portmode stack-unit unitnumber • EXEC • EXEC Privilege Enter the keywords stack-unit then the unit number. The range is from 0 to 11. Version Description 9.11(0.0) Included support for all external ports. 9.6(0.0) Supported on the FN2210S Aggregator.
PAGE 488
19 FIPS Cryptography To configure federal information processing standards (FIPS) cryptography, use the following commands on the switch. Topics: • fips mode enable • show fips status • show ip ssh • ssh fips mode enable Enable the FIPS cryptography mode on the platform. Syntax fips mode enable To disable the FIPS cryptography mode, use the no fips mode enable command. Default Disabled Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.
PAGE 489
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show fips status FIPS Mode : Disabled Dell# Dell#show fips status FIPS Mode : Enabled Dell# show ip ssh Display information about established SSH sessions Syntax show ip ssh Defaults none Command Modes EXEC EXEC Privilege Supported Modes Command History Example Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 490
ssh Open an SSH connection specifying the hostname, username, port number, and version of the SSH client. Syntax ssh {hostname | ipv4 address | ipv6 address} [-c encryption cipher | -l username | -m HMAC alogorithm | -p port-number | -v {1|2}] Parameters hostname (OPTIONAL) Enter the IP address or the hostname of the remote device. ipv4 address (OPTIONAL) Enter the IP address in dotted decimal format A.B.C.D.
PAGE 491
Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If FIPS mode is not enabled: Dell#ssh 10.11.8.12 ? -c Encryption cipher to use (for v2 client -l User name option -m HMAC algorithm to use (for v2 clients only) -p SSH server port option (default 22) -v SSH protocol version Dell#ssh 10.11.8.
PAGE 492
20 FIP Snooping In a converged Ethernet network, an Aggregator can operate as an intermediate Ethernet bridge to snoop on Fibre Channel over Ethernet Initialization Protocol (FIP) packets during the login process on Fibre Channel over Ethernet (FCoE) forwarders (FCFs). Acting as a transit FIP snooping bridge, the switch uses dynamically-created ACLs to permit only authorized FCoE traffic to be transmitted between an FCoE end-device and an FCF. This chapter describes the FIP snooping commands.
PAGE 493
Version Description 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. clear fip-snooping statistics Clear the statistics on the FIP packets snooped on all VLANs, a specified VLAN, or a specified port interface. Syntax Parameters clear fip-snooping statistics [interface vlanVlan-id| interfaceport-type port/ slot|interface port-channel port-channel-number] vlan-id Enter the VLAN ID of the FIP packet statistics to be cleared.
PAGE 494
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. fip-snooping enable Enable FIP snooping on all VLANs or on a specified VLAN. Syntax fip-snooping enable To disable the FIP snooping feature on all or a specified VLAN, use the no fip-snooping enable command. Defaults FIP snooping is disabled on all VLANs. Command Modes Supported Modes • CONFIGURATION • VLAN INTERFACE Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.
PAGE 495
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. fip-snooping port-mode fcf Configure the port for bridge-to-FCF links. Syntax fip-snooping port-mode fcf To disable the bridge-to-FCF link on a port, use the no fip-snooping port-mode fcf command.
PAGE 496
Command History Usage Information 496 FIP Snooping Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. The following table describes the show fip-snooping statistics command. Field Description Number of Vlan Requests Number of FIP-snooped VLAN request frames received on the interface.
PAGE 497
Example Field Description Number of FLOGO Rejects Number of FIP FLOGO reject frames received on the interface Number of CVLs Number of FIP clear virtual link frames received on the interface Number of FCF Discovery Number of FCF discovery timeouts that occurred on the interface Number of VN Port Session Number of VN port session timeouts that occurred on the interface Number of Session failures due to Hardware Config Number of session failures due to hardware configuration that occurred on the i
PAGE 498
Example (port channel) Dell# show fip-snooping statistics interface port-channel 22 Number of Vlan Requests :0 Number of Vlan Notifications :2 Number of Multicast Discovery Solicits :0 Number of Unicast Discovery Solicits :0 Number of FLOGI :0 Number of FDISC :0 Number of FLOGO :0 Number of Enode Keep Alive :0 Number of VN Port Keep Alive :0 Number of Multicast Discovery Advertisement :4451 Number of Unicast Discovery Advertisement :2 Number of FLOGI Accepts :2 Number of FLOGI Rejects :0 Number of FDISC Ac
PAGE 499
virtual-linkmaintenance Enable for clear virtual link and keepalive packets. vlan-discovery Enable for FIP VLAN requests and notifications. port-channel Port-channel interface. tengigabitethernet TenGigabit Ethernet interface. tx Enable for packet transmit specific debugs. Command Modes EXEC Privilege Supported Modes All Modes Command History Version Description 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 500
Command History Usage Information Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. The following table describes the show fip-snooping enode command. Field Description ENode MAC MAC address of the ENode ENode Interface Slot/ port number of the interface connected to the ENode.
PAGE 501
Example Field Description FCF Interface Slot/ port number of the interface to which the FCF is connected. VLAN VLAN ID number used by the session FC-MAP FC-MAP value advertised by the FCF. FKA_ADV_PERIOD Period of time (in milliseconds) during which FIP keep-alive advertisements are transmitted.
PAGE 502
Example Field Description FC-ID Fibre Channel ID assigned by the FCF. Port WWPN Worldwide port name of the CNA port. Port WWNN Worldwide node name of the CNA port.
PAGE 503
Field Description Number of Multicast Discovery Solicits Number of FIP-snooped multicast discovery solicit frames received on the interface. Number of Unicast Discovery Number of FIP-snooped unicast discovery solicit frames received on the interface. Number of FLOGI Number of FIP-snooped FLOGI request frames received on the interface.
PAGE 504
Example Dell# show fip-snooping statistics interface vlan 100 Number of Vlan Requests Number of Vlan Notifications Number of Multicast Discovery Solicits Number of Unicast Discovery Solicits Number of FLOGI Number of FDISC Number of FLOGO Number of Enode Keep Alive Number of VN Port Keep Alive Number of Multicast Discovery Advertisement Number of Unicast Discovery Advertisement Number of FLOGI Accepts Number of FLOGI Rejects Number of FDISC Accepts Number of FDISC Rejects Number of FLOGO Accepts Number of
PAGE 505
Number of VN Port Session Timeouts Number of Session failures due to Hardware Config :0 :0 show fip-snooping system Displays information on the status of FIP snooping on the switch (enabled or disabled), including the number of FCoE VLANs, FCFs, ENodes, and currently active sessions. Syntax Command Modes Supported Modes Command History Example show fip-snooping system • EXEC • EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 506
*1 1002 506 FIP Snooping 0X0EFC00 1 1 1
PAGE 507
21 Force10 Resilient Ring Protocol (FRRP) FRRP is a proprietary protocol for that offers fast convergence in a Layer 2 network without having to run the spanning tree protocol (STP). The resilient ring protocol is an efficient protocol that transmits a high-speed token across a ring to verify the link status. All the intelligence is contained in the master node with practically no intelligence required of the transit mode. Important Points to Remember • FRRP is media- and speed-independent.
PAGE 508
Usage Information Example 9.9(0.0) Introduced on the FN MXL. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Executing this command without the optional ring-id command clears the statistics counters on all the available rings. The system requires a command line confirmation before the command executes.
PAGE 509
description Enter an identifying description of the ring. Syntax description Word To remove the ring description, use the no description [Word] command. Parameters Word Enter a description of the ring. Maximum: 255 characters. Defaults none Command Modes CONFIGURATION (conf-frrp) Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. disable Disable the resilient ring protocol.
PAGE 510
secondary interface control-vlan vlan-id • Fast Ethernet interface: enter the keyword FastEthernet then the slot/ port information. • Port Channel interface: enter the keyword port-channel then a number. The range is from 1 to 128.
PAGE 511
9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. mode Set the Master or Transit mode of the ring. Syntax mode {master | transit} To reset the mode, use the no mode {master | transit} command. Parameters master Enter the keyword master to set the Ring node to Master mode. transit Enter the keywordtransit to set the Ring node to Transit mode.
PAGE 512
show frrp Display the resilient ring protocol configuration. Syntax show frrp [ring-id [summary]] | [summary] Parameters ring-id Enter the ring identification number. The range is from 1 to 255 summary (OPTIONAL) Enter the keyword summary to view just a summarized version of the Ring configuration. Defaults none Command Modes EXEC Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 513
Related Commands protocol frrp — enters the resilient ring protocol and designate a ring identification. timer Set the hello interval or dead interval for the Ring control packets. Syntax timer {hello-interval milliseconds}| {dead-interval milliseconds} To remove the timer, use the no timer {hello-interval [milliseconds]}| {dead-interval milliseconds} command.
PAGE 514
22 GARP VLAN Registration (GVRP) The Dell Networking Operating System (OS) supports the basic GVRP commands. The generic attribute registration protocol (GARP) mechanism allows the configuration of a GARP participant to propagate through a network quickly. A GARP participant registers or de-registers its attributes with other participants by making or withdrawing declarations of attributes. At the same time, based on received declarations or withdrawals, GARP handles attributes of other participants.
PAGE 515
• clear gvrp statistics • debug gvrp • disable • garp timers • gvrp enable • gvrp registration • protocol gvrp • show config • show garp timers • show gvrp • clear gvrp statistics • show vlan clear gvrp statistics Clear GVRP statistics on an interface.
PAGE 516
pdu Defaults Disabled. Command Modes EXEC Supported Modes Full–Switch Command History Enter the keyword pdu then one of the following Interface keywords and slot/port or number information: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 517
NOTE: Designate the milliseconds in multiples of 100. leave Enter the keyword leave then the number of milliseconds to configure the leave time. The range is from 100 to 2147483647 milliseconds. The default is 600 milliseconds. NOTE: Designate the milliseconds in multiples of 100. leave-all Enter the keywords leave-all then the number of milliseconds to configure the leaveall time. The range is from 100 to 2147483647 milliseconds. The default is 1000 milliseconds.
PAGE 518
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. disable — globally disables GVRP. gvrp registration Configure the GVRP register type. Syntax gvrp registration {fixed | normal | forbidden} To return to the default, use the gvrp register normal command. Parameters fixed Enter the keyword fixed then the VLAN range in a comma-separated VLAN ID set. normal Enter the keyword normal then the VLAN range in a comma-separated VLAN ID set.
PAGE 519
Command Modes CONFIGURATION Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. disable — globally disables GVRP. show config Display the global GVRP configuration. Syntax show config Command Modes CONFIGURATION-GVRP Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 520
LeaveAll Timer Dell# Related Commands 10000 garp timers — sets the intervals (in milliseconds) for sending GARP messages. show gvrp Display the GVRP configuration. Syntax show gvrp [brief | interface] Parameters Defaults brief (OPTIONAL) Enter the keyword brief to display a brief summary of the GVRP configuration. interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords port-channel then a number.
PAGE 521
clear gvrp statistics Clear GVRP statistics on an interface. Syntax Parameters clear gvrp statistics {interface interface | summary} interface interface summary Defaults Command Modes Supported Modes Command History Usage Information Enter the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
PAGE 522
Leave All Transmitted: 41 Invalid Messages/Attributes skipped: 0 Failed Registrations: 0 Dell# Related Commands show gvrp — displays the GVRP configuration. show vlan Display the global VLAN configuration. Syntax show vlan Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 523
23 Internet Group Management Protocol (IGMP) The Dell Networking OS supports IGMP snooping version 2 and 3 on all Dell Networking systems.
PAGE 524
IGMP Snooping Commands Dell Networking OS supports IGMP Snooping version 2 and 3 on all Dell Networking systems. Important Points to Remember for IGMP Snooping • Dell Networking OS supports version 1, version 2, and version 3 hosts. • Dell Networking OS IGMP snooping implementation is based on IP multicast address (not based on Layer 2 multicast mac address) and the IGMP snooping entries are in Layer 3 flow table not in Layer 2 forwarding information base (FIB).
PAGE 525
Parameters group-address (OPTIONAL) Enter the IP multicast group address in dotted decimal format. interface (OPTIONAL) Enter the interface type and slot/port information: For a VLAN interface enter the keyword vlan followed by a number from 1 to 4094. Command Modes EXEC Privilege Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 526
Command Modes CONFIGURATION (conf-if-interface-slot/port) Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. ip igmp querier-timeout Change the interval that must pass before a multicast router decides that there is no longer another multicast router that should be the querier.
PAGE 527
Command Modes INTERFACE Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. ip igmp query-max-resp-time Set the maximum query response time advertised in general queries. Syntax ip igmp query-max-resp-time seconds To return to the default values, use the no ip igmp query-max-resp-time command.
PAGE 528
Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. To enable IGMP snooping, enter this command. When you enable this command from CONFIGURATION mode, IGMP snooping enables on all VLAN interfaces (except the default VLAN). NOTE: Execute the no shutdown command on the VLAN interface for IGMP Snooping to function.
PAGE 529
Parameters Enabled Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. ip igmp snooping last-member-query-interval The last member query interval is the maximum response time inserted into Group-Specific queries sent in response to Group-Leave messages.
PAGE 530
Parameters interface interface Enter the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. Defaults Not configured. Command Modes INTERFACE VLAN — (conf-if-vl-n) Supported Modes Programmable-Mux (PMUX) Command History Usage Information Version Description 9.4(0.
PAGE 531
ip igmp version Manually set the version of the router to IGMPv2 or IGMPv3. Syntax Parameters ip igmp version {2 | 3} 2 Enter the number 2 to set the IGMP version number to IGMPv2. 3 Enter the number 3 to set the IGMP version number to IGMPv3. Defaults 2 (that is, IGMPv2) Command Modes INTERFACE Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.
PAGE 532
Example Version Description 8.3.17.0 Supported on the M I/O Aggregator. Dell#show ip igmp groups Total Number of Groups: 5 IGMP Connected Group Membership Group Address Interface Mode Uptime Expires Last Reporter 225.0.0.0 Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.51 Member Ports: Po 2 225.0.0.2 Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.51 Member Ports: Po 2 225.0.0.3 Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.51 Member Ports: Po 2 225.0.0.4 Vlan 100 IGMPv2 00:00:05 00:02:04 3.0.0.
PAGE 533
• Supported Modes Command History Example EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 534
Vlan 2 Po 128 Dell# Related Commands 534 show ip igmp groups — Use this IGMP command to view groups.
PAGE 535
24 Interfaces This chapter defines the interface commands on the Aggregator switch. Basic Interface Commands The following commands are for Physical, Loopback, and Null interfaces. clear counters Clear the counters used in the show interfaces commands for VLANs, and physical interfaces, or selected ones. Syntax clear counters interface Defaults Without a specific interface specified, the command clears all interface counters.
PAGE 536
Example Dell#clear counters Clear counters on all interfaces [confirm] clear dampening Clear the dampening counters on all the interfaces or just the specified interface. Syntax clear dampening [interface] Parameters interface (OPTIONAL) Enter any of the following keywords and slot/port or number to clear counters from a specified interface: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
PAGE 537
• Defaults medium Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information long = For 10-meter and 15-meter cable lengths. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command only works on ports that the system recognizes as CX4 ports.
PAGE 538
Parameters half-life Enter the number of seconds after which the penalty is decreased. The penalty decreases half after the half-life period expires. The range is from 1 to 30 seconds. The default is 5 seconds. reuse-threshold Enter a number as the reuse threshold, the penalty value below which the interface state is changed to “up”. The range is from 1 to 20000. The default is 750.
PAGE 539
Defaults No description is defined. Command Modes INTERFACE Supported Modes All Modes Command History Usage Information Related commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. • Spaces between characters are not preserved after entering this command unless you enclose the entire description in quotation marks (“desc_text”).
PAGE 540
Version Description 9.14(0.0) Introduced on the platforms S4048–ON, S6100–ON, Z9100–ON, S4048T-ON, S3048– ON, S6000, S6010–ON, S5048F-ON, FN-IOM and MXL. 9.13(0.2P2) Introduced on the S3100. Usage Information This command has to be configured before the interface moves to Err-disabled state. If not, the recovery action is not performed. Related Commands errdisable recovery interval— Configure recovery timer interval for an interface.
PAGE 541
Parameters Defaults rx on Enter the keywords rx on to process the received flow control frames on this port. This is the default value for the receive side. rx off Enter the keywords rx off to ignore the received flow control frames on this port. tx on Enter the keywords tx on to send control frames from this port to the connected device when a higher rate of traffic is received. This is the default value on the send side.
PAGE 542
• The only configuration applicable to half duplex ports is rx off tx off. The following error is returned: Cannot configure Asymmetric flowcontrol when speed <1G, config ignored> • You cannot configure half duplex when the flow control configuration is on (default is rx on tx on). The following error is returned: Cannot configure half duplex when flowcontrol is on, config ignored NOTE: The flow control must be off (rx off tx off) before configuring the half duplex.
PAGE 543
Related Commands show running-config — displays the flow configuration parameters (non-default values only). interface Configure a physical interface on the switch. Syntax Parameters interface interface interface Enter one of the following keywords and slot/port or number information: • Defaults Not configured.
PAGE 544
To remove a loopback interface, use the no interface loopback number command. Parameters number Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Enter a number as the interface number. The range is from 0 to 16383. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 545
Example Dell(conf)#interface managementethernet 0/0 Dell(conf-if-ma-0/0)# interface null Configure a Null interface on the switch. Syntax Parameters interface null number number Enter zero (0) as the Null interface number. Defaults Not configured; number = 0 Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 546
six comma separated ranges—spaces are not required between the commas. Commaseparated ranges can include VLANs, port-channels and physical interfaces. Slot/Port information must contain a space before and after the dash. For example, interface range tengigabitethernet 0/1 - 5 is valid; interface range tengigabitethernet 0/1-5 is not valid.
PAGE 547
Use the show running-config command to display the VLAN and port-channel interfaces. VLAN or portchannel interfaces that are not displayed in the show running-config command cannot be used with the bulk configuration feature of the interface range command. You cannot create virtual interfaces (VLAN, Port-channel) using the interface range command. NOTE: If a range has VLAN, physical, and port-channel interfaces, only commands related to physical interfaces can be bulk configured.
PAGE 548
Command History Example (Single Range) Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This example shows how to define an interface range macro named test. Execute the show running-config command to display the macro definition.
PAGE 549
interface vlan Configure a VLAN. Configure the default VLAN to enable Static or DCHP IP configuration. You can configure up to 4094 VLANs. Syntax interface vlan vlan-id To delete a VLAN, use the no interface vlan vlan-id command. Parameters vlan-id Enter 1 for the default VLAN. Enter a number as the VLAN identifier. The range is from 1 to 4096. Defaults Not configured, except for the default VLAN, which is configured as VLAN 1.
PAGE 550
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Usage Information If you configure interface type as CR4 with auto-negotiation enabled, also configure CR4 with autonegotiation. Many DAC cable link issues are resolved by setting the interface type as CR4. Related Commands interface — configures a physical interface. interface port-channel — configures a port channel group.
PAGE 551
load-balance By default, Dell Networking OS uses an IP 4-tuple (IP SA, IP DA, Source Port, and Destination Port) to distribute IP traffic over members of a Port Channel as well as equal-cost paths. To designate another method to balance traffic over Port Channel members, use the loadbalance command.
PAGE 552
Usage Information By default, Dell Networking OS distributes incoming traffic based on a hash algorithm using the following criteria: • IP source address • IP destination address • TCP/UDP source port • TCP/UDP destination port load-balance hg Choose the traffic flow parameters the hash calculation uses while distributing the traffic across internal higig links.
PAGE 553
tunnel [ipv4-overipv4 | ipv4-overgre-ipv4 | mac-inmac] To use tunnel key fields in hash computation, enter the keyword tunnel then one of the parameters: • ipv4-over-ipv4 — Use ipv4-over-ipv4 field in hash calculation. • ipv4-over-gre-ipv4 — Use ipv4-over-gre-ipv4 field in hash calculation. • mac-in-mac — Use mac-in-mac field in hash calculation. Defaults IP selection 5-tuples (source-ip dest-ip vlan protocol L4-source-port L4-dest-port).
PAGE 554
Example (Single Interface) Key Description monitor time Displays the amount of time since the monitor interface command was entered. time Displays the amount of time the chassis is up (since last reboot). m Change the view from a single interface to all interfaces on the line card or visa-versa. c Refresh the view. b Change the counters displayed from Packets on the interface to Bytes.
PAGE 555
To return to the default MTU value, use the no mtu command. Parameters value Enter a maximum frame size in bytes. The range is from 594 to 9252. The default is 1554. Defaults 1554 Command Modes INTERFACE Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 556
Layer 2 Overhead Link MTU and IP MTU Delta Untagged Packet with VLAN-Stack Header 22 bytes Tagged Packet with VLAN-Stack Header 26 bytes negotiation auto Enable auto-negotiation on an interface. Syntax negotiation auto To disable auto-negotiation, enter no negotiation auto command. Defaults Enabled. Command Modes INTERFACE Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 557
Port 0 • auto-negotiation enabled* speed 1000 or auto • auto-negotiation enabled speed 100 • auto-negotiation disabled speed 100 • auto-negotiation disabled speed 100 • auto-negotiation enabled* speed 1000 or auto Port 1 • auto-negotiation enabled* speed 1000 or auto • auto-negotiation enabled speed 100 • auto-negotiation disabled speed 100 • auto-negotiation enabled speed 100 • auto-negotiation disabled speed 100 Link Status Between Port 1 and Port 2 • Up at 1000 Mb/s • Up at 100 Mb/
PAGE 558
• untagged frames and classify them as VLAN 10 frames • VLAN 20 tagged frames The following describes the do show interfaces command shown in the following example. This example shows output with “Hybrid” as the newly added value for 802.1QTagged. The options for this field are: • True — port is tagged • False — port is untagged • Hybrid — port accepts both tagged and untagged frames The following describes the interface vlan command shown in the following example.
PAGE 559
Related Commands show interfaces switchport — displays the configuration of switchport (Layer 2) interfaces on the switch. vlan-stack trunk— specifies an interface as a trunk port to the Stackable VLAN network. rate-interval Configure the traffic sampling interval on the selected interface. Syntax Parameters rate-interval seconds seconds Enter the number of seconds for which to collect traffic data. The range is from 5 to 299 seconds. NOTE: For 0 to 5 seconds, polling occurs every 5 seconds.
PAGE 560
Defaults 299 seconds Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. Usage Information Version Description 9.11.0.0 Introduced on all Dell Networking OS platforms. The output of the show interfaces command displays the configured rate interval, along with the collected traffic data.
PAGE 561
show config Display the interface configuration. Syntax show config Command Modes INTERFACE Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-if)#show conf ! interface TenGigabitEthernet 1/7 no ip address switchport no shutdown Dell(conf-if)# show config (from INTERFACE RANGE mode) Display the bulk configured interfaces (group).
PAGE 562
Command Modes Supported Modes Command History Usage Information • EXEC • EXEC Privilege • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN interface, enter the keyword vlan followed by a number from 1 to 4094. • For a Port Channel interface, enter the keyword port-channel followed by a number. The range is from 1 to 128. All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 563
Line Description • Number of packets with IP headers and VLAN tagged headers. NOTE: The sum of the number of packets may not be as expected since a VLAN tagged IP packet counts as both a VLAN packet and an IP packet. • Packet size and the number of those packets inbound to the interface • Number of symbol errors, runts, giants, and throttles packets: – symbol errors = number packets containing bad data. That is, the port MAC detected a physical coding error in the packet.
PAGE 564
Virtual-IP is not set Virtual-IP IPv6 address is not set MTU 1554 bytes, IP MTU 1500 bytes LineSpeed 100 Mbit, Mode full duplex ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 5d4h57m Queueing strategy: fifo Input 3448753 packets, 950008323 bytes, 3442163 multicast Received 0 errors, 0 discarded Output 4627 packets, 814226 bytes, 0 multicast Output 0 errors, 0 invalid protocol Related Commands show interfaces configured — Displays any interface with a non-default configurati
PAGE 565
Parameters interface (Optional) Enter one of the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. NOTE: This command also enables you to view information corresponding to a range of ports.
PAGE 566
show interfaces description Display the descriptions configured on the interface. Syntax show interfaces [interface] description Parameters interface Enter one of the following keywords and slot/port or number information: • For the management interface on the stack unit enter the keyword ManagementEthernet followed by the slot/port information. The slot range is 0-0 and the port range is 0.
PAGE 567
TenGigabitEthernet 0/6 NO admin up TenGigabitEthernet 0/7 NO up down TenGigabitEthernet 0/8 YES up up down show interfaces stack-unit Display information on all interfaces on a specific Aggregator stack member. Syntax Parameters Command Modes Supported Modes Command History Example show interfaces stack-unit unit-number unit-number • EXEC • EXEC Privilege Enter the stack member number (0 to 5). All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 568
Related Commands show diag — Displays data plane and management plane input/output statistics. show interfaces status Displays a summary of interface information or specify a stack unit and interface to display status information for that specific interface only.
PAGE 569
show interfaces switchport Display only virtual and physical interfaces in Layer 2 mode. This command displays the Layer 2 mode interfaces’ IEEE 802.1Q tag status and VLAN membership. Syntax Parameters show interfaces switchport [interface | stack-unit unit-id ] interface (OPTIONAL) Enter one of the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
PAGE 570
Codes: tagged U x G i - Untagged, T - Tagged Dot1x untagged, X - Dot1x tagged GVRP tagged, M - Trunk, H - VSN tagged Internal untagged, I - Internal tagged, v - VLT untagged, V - VLT Name: TenGigabitEthernet 2/9 802.1QTagged: True Vlan membership: Q Vlans T 1001 Name: TenGigabitEthernet 2/11 802.1QTagged: True Vlan membership: Q Vlans T 1001 Dell# Related Commands show ip interface — displays Layer 3 information about the interfaces.
PAGE 571
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show interfaces transceiver command shown in the following example. Line Description Rx Power measurement type Output depends on the vendor, typically either “Average” or “OMA” (Receiver optical modulation amplitude). Temp High Alarm threshold Factory-defined setting, typically in Centigrade. Value differs between SFPs and SFP+.
PAGE 572
Interfaces Line Description TX Power Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+. Power Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+. Temperature Current temperature of the SFPs. If this temperature crosses Temp High alarm/warning thresholds, the temperature high alarm/warning flag is set to true. Voltage Current voltage of the SFPs.
PAGE 573
Example Line Description Tx Power Low Alarm Flag This can be either true or false, depending on the Current Tx power value displayed above. Rx Power Low Alarm Flag This can be either true or false, depending on the Current Rx power value displayed above. Temperature High Warning Flag This can be either true or false, depending on the Current Temperature value displayed above. Voltage High Warning Flag This can be either true or false, depending on the Current Voltage value displayed above.
PAGE 574
SFP 1 Rx Power measurement type = Average =================================== SFP 1 Temp High Alarm threshold = 95.000C SFP 1 Voltage High Alarm threshold = 3.900V SFP 1 Bias High Alarm threshold = 17.000mA SFP 1 TX Power High Alarm threshold = 0.631mW SFP 1 RX Power High Alarm threshold = 1.259mW SFP 1 Temp Low Alarm threshold = -25.000C SFP 1 Voltage Low Alarm threshold = 2.700V SFP 1 Bias Low Alarm threshold = 1.000mA SFP 1 TX Power Low Alarm threshold = 0.067mW SFP 1 RX Power Low Alarm threshold = 0.
PAGE 575
show range Display all interfaces configured using the interface range command. Syntax show range Command Modes INTERFACE RANGE (config-if-range) Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell(conf-if-range-te-0/6)#show range interface tengigabitethernet 0/6 Dell(conf-if-range-te-0/6)# Related Commands interface — configures a physical interface on the switch.
PAGE 576
port channel, you must enter no shutdown on the port channel interface and at least one interface within that port channel. The shutdown and description commands are the only commands that you can configure on an interface that is a member of a port channel. Related Commands vlan tagged —Test the condition of copper cables on 100/1000/10G Base-T modules. interface vlan — Creates a VLAN. show ip interface — Displays the interface routing status.
PAGE 577
If you use an active optical cable (AOC), you can convert the QSFP+ port to a 10 Gigabit SFP+ port or 1 Gigabit SFP port. You can use the speed command to enable the required speed. Related Commands • negotiation auto — enables or disables auto-negotiation on an interface. stack-unit portmode Split a single 40G port into 4-10G ports on the switch. Syntax Parameters stack-unit stack-unit-number port number portmode quad stack-unit Enter the stack member unit identifier of the stack member to reset.
PAGE 578
To retain the existing wavelength, use the no wavelength command. Defaults none Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. Usage Information Version Description 9.10(0.0) Introduced on the S6000, S6000–ON, S5000, S4810, S4820T, S3048–ON, S4048–ON, M I/O Aggregator, FN I/O Module, MXL, C9010, S3100 series, and Z9100-ON.
PAGE 579
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. Defaults Not configured. Command Modes INTERFACE PORTCHANNEL Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. Use the interface port-channel command to access this command.
PAGE 580
To remove an existing LAG supergroup, use the no group group_number command. Parameters group_number Enter an integer from 1 to 32 that uniquely identifies this LAG fate-sharing group. port-channel number Enter the keywords port-channel then an existing LAG number. Enter this keyword/ variable combination twice, identifying the two paired LAGs. Defaults none Command Modes PORT-CHANNEL FAILOVER-GROUP (conf-po-failover-grp) Supported Modes Full–Switch Command History Version Description 9.9(0.
PAGE 581
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Port Channel interfaces are logical interfaces and can be either in Layer 2 mode (by using the switchport command) or Layer 3 mode (by configuring an IP address). You can add a Port Channel in Layer 2 mode to a VLAN. A Port Channel can contain both 100/1000 interfaces and GE interfaces.
PAGE 582
Usage Information If you use this command to configure the minimum number of links in a LAG that must be in “oper up” status, the LAG must have at least that number of “oper up” links before it can be declared as up. For example, if the required minimum is four, and only three are up, the LAG is considered down. port-channel failover-group To configure a LAG failover group, access PORT-CHANNEL FAILOVER-GROUP mode.
PAGE 583
no ip address shutdown Dell(conf-if-po-1)# show interfaces port-channel Display information on configured Port Channel groups. Syntax Parameters show interfaces port-channel [channel-number] [brief| description] channel-number For a Port Channel interface, enter the keyword port-channel followed by a number. The range is from 1 to 128. brief (OPTIONAL) Enter the keyword brief to display only the port channel number, the state of the port channel, and the number of interfaces in the port channel.
PAGE 584
Field Description Members in this... Displays the interfaces belonging to this port channel. ARP type:... Displays the ARP type and the ARP timeout value for the interface. Last clearing... Displays the time when the show interfaces counters were cleared. Queueing strategy. States the packet queuing strategy. FIFO means first in first out. packets input... Displays the number of packets and bytes into the interface. Input 0 IP packets...
PAGE 585
Field Status Example Description • L3 — for Layer 3 • L2 — for Layer 2 Displays the status of the port channel. • down — if the port channel is disabled (shutdown) • up — if the port channel is enabled (no shutdown) Uptime Displays the age of the port channel in hours:minutes:seconds. Ports Lists the interfaces assigned to this port channel. (untitled) Displays the status of the physical interfaces (up or down).
PAGE 586
tdr-cable-test Test the condition of copper cables on 100/1000/10GBase-T modules. Syntax tdr-cable-test interface Parameters interface Defaults none Command Modes EXEC Supported Modes All Modes Command History Enter the keyword TenGigabitEthernet followed by the slot/port information for the 100/1000/10GBase-T Ethernet interface. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 587
Status Definition OK Status: Terminated TDR test is complete, no fault is detected on the cable, and the test is terminated. Length: 92 (+/- 1) meters, Status: Shorted A short is detected on the cable. The location, in this Example is 92 meters. The short is accurate to plus or minus one meter. Length: 93 (+/- 1) meters, Status: Open An opening is detected on the cable. The location, in this Example is 93 meters. The open is accurate to plus or minus one meter.
PAGE 588
• Supported Modes Command History Example EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#debug ip udp-helper UDP helper debugging is on 01:20:22: Pkt rcvd on Te 4/1 with IP DA (0xffffffff) will be sent on Te 4/2 Te 4/3 Vlan 3 01:44:54: Pkt rcvd on Te 5/1 is handed over for DHCP processing. Related Commands ip udp-broadcast-address — configures a UDP IP address for broadcast.
PAGE 589
ip udp-helper udp-port Enable the UDP broadcast feature on an interface either for all UDP ports or a specified list of UDP ports. Syntax ip udp-helper udp-port [udp-port-list] To disable the UDP broadcast on a port, use the no ip udp-helper udp-port [udp-port-list] command. Parameters udp-port-list (OPTIONAL) Enter up to 16 comma-separated UDP port numbers. NOTE: If you do not use this option, all UDP ports are considered by default.
PAGE 590
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show ip udp-helper -------------------------------------------------Port UDP port list -------------------------------------------------Te 1/1 656, 658 Te 1/2 All Related Commands debug ip udp-helper — enables debug and displays the debug information on a console. ip udp-broadcast-address — configures a UDP IP address for broadcast.
PAGE 591
Occasionally, while sending broadcast traffic over multiple VLANs, state of a VLAN interface may continually switch between Master and Backup. • auto vlan • default vlan-id • name • show config (from INTERFACE VLAN mode) • show vlan • vlan tagged • vlan untagged auto vlan Change the port to auto or admin vlan mode (enable or disable all auto VLANs). Syntax auto vlan To remove membership from 4K VLAN, use the no auto vlan command.
PAGE 592
Command Modes EXEC Privilege Supported Modes All Modes Command History Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. default vlan-id Set the default VLAN ID. Syntax default vlan-id To reset the default VLAN ID, use the no default vlan-id command. Defaults none Command Modes CONFIGURATION Supported Modes All Modes Command History Related commands Version Description 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 593
To disable monitoring and return to the CLI prompt, press the q key. Parameters Command Modes Supported Modes Command History Usage Information interface • EXEC • EXEC Privilege (OPTIONAL) Enter the following keywords and slot/port or number information: • For the management port, enter the keyword managementethernet followed by the slot (0) and the port (0). • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
PAGE 594
Input packets: Output packets: 64B packets: Over 64B packets: Over 127B packets: Over 255B packets: Over 511B packets: Over 1023B packets: Error statistics: Input underruns: Input giants: Input throttles: Input CRC: Input IP checksum: Input overrun: Output underruns: Output throttles: m l T q Example (All Interfaces) - 1 1 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 pps pps pps pps pps pps pps pps 0 0 0 0 0 0 0 0 c - Clear screen a - Page down t - Decrease refresh interval Interface Link In Packets
PAGE 595
To remove the name from the VLAN, use the no name command. Parameters vlan-name Defaults Not configured. Command Modes INTERFACE VLAN Supported Modes All Modes Command History Usage Information Enter up to 32 characters as the name of the VLAN. Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. This CLI applies only to the Default VLAN.
PAGE 596
Command History Example Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Dell(conf-if-vl-1)#show config ! interface Vlan 1 description a no ip address mtu 2500 shutdown Dell(conf-if-vl-1)# show config (from PROTOCOL LLDP mode) Displays the LLDP configuration. Syntax show config Command Modes PROTOCOL LLDP Supported Modes All Modes Command History Example Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.
PAGE 597
name vlan-name Command Modes Supported Modes Command History Usage Information • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword name followed by the name configured for the VLAN. Only information on the VLAN named is displayed. All Modes Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 598
Codes: * - Default VLAN, G - GVRP VLANs Q: U - Untagged, T - Tagged x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack NUM Status Description Q Ports 222 Inactive U TenGig 1/22 Dell(conf-if-vl-222)# Dell# Related Commands interface vlan — Configures a VLAN. speed (for 1000/10000 interfaces) Set the speed for 1000/10000 interfaces. Both sides of a link must be set to the same speed (1000/10000) or to auto or the link may not come up.
PAGE 599
stack-unit port-group port mode ethernet Converts the interfaces 9 and 10 from Fibre Channel mode to Ethernet. Syntax stack-unit unit number port-group 0 portmode ethernet To convert the interfaces 9 and 10 from Ethernet to Fibre Channel mode, use the no stack-unit unit number port-group 0 portmode ethernet. Parameters stack-unit Enter the keyword stack-unit followed by a stack member number to select the stack unit. The range is 0 to 5. port-group Enter the keyword port-group followed by 0.
PAGE 600
When two or more ports configured for VLANs form a LAG, the resulting LAG is a tagged member of all the configured VLANs and an untagged member of the VLAN to which the port with the lowest port ID belongs. For example, if port 0/1-32 is an untagged member of VLAN 2 and port 0/41 is an untagged member of VLAN 3, the resulting LAG consisting of the two ports is an untagged member of VLAN 2 and a tagged member of VLAN3.
PAGE 601
Tagged interfaces can belong to multiple VLANs, while untagged interfaces can only belong to one VLAN at a time. When two or more ports configured for VLANs form a LAG, the resulting LAG is a tagged member of all the configured VLANs and an untagged member of the VLAN to which the port with the lowest port ID belongs.
PAGE 602
25 IPv4 Routing The aggregator supports both IPv4 and IPv6 routing and these are used only for the management purpose. This chapter describes the IPv4 related commands.
PAGE 603
• ip tcp initial-time • show ip tcp initial-time • ip unreachables • management route • show arp • show arp retries • show hosts • show ip cam stack-unit • show ip fib stack-unit • show ip interface • show ip management-route • show ip multicast-cam stack-unit • show ip protocols • show ip route • show ip route list • show ip route summary • show ip traffic • show tcp statistics arp To associate an IP address with a multicast MAC address in the switch when you configure m
PAGE 604
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Added the support for association of an IP address with multicast MAC address on the MXL platform. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. For multicast mode of NLB, to associate an IP address with a multicast MAC address in the switch, use address resolution protocol (ARP) by entering the arp ip-address multicast-mac-address command in Global configuration mode.
PAGE 605
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Retries are 20 seconds apart. Related Commands show arp retries — displays the configured number of ARP retries. arp timeout Set the time interval for an ARP entry to remain in the ARP cache.
PAGE 606
no-refresh (OPTIONAL) Enter the keywords no-refresh to delete the ARP entry from CAM. Or use this option with interface or ip ip-address to specify which dynamic ARP entries you want to delete. NOTE: Transit traffic may not be forwarded during the period when deleted ARP entries are resolved again and re-installed in CAM. Use this option with extreme caution. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 607
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To clear Layer 3 CAM inconsistencies, use this command. CAUTION: Executing this command causes traffic disruption. Related Commands show ip fib stack-unit — shows FIB entries. clear ip route Clear one or all routes in the routing table. Syntax clear ip route {* | ip-address mask} Parameters * Enter an asterisk (*) to clear all learned IP routes.
PAGE 608
Version Description 8.3.17.0 Supported on the M I/O Aggregator. debug arp View information on ARP transactions. Syntax debug arp [interface] [count value] To stop debugging ARP transactions, use the no debug arp command.
PAGE 609
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. FTOS#debug ip dhcp 00:12:21 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xbf05140f, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0 00:12:21 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.
PAGE 610
• count value Command Modes EXEC Privilege Supported Modes All Modes Command History For VLAN, enter the keyword vlan then by a number from 1 to 4094. (OPTIONAL) Enter the keywords count then the count value. The ranges from 1 to 65534. The default is Infinity. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 611
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the debug ip packet command in the following example. Field Description s= Lists the source address of the packet and the name of the interface (in parentheses) that received the packet.
PAGE 612
following example). ARP packets (arp) and Ether-type (ether-type) are also not supported in the accessgroup option. The entire rule is skipped to compose the filter.
PAGE 613
ip directed-broadcast Enables the interface to receive directed broadcast packets. Syntax ip directed-broadcast To disable the interface from receiving directed broadcast packets, use the no ip directed-broadcast command. Defaults Disabled (that is, the interface does not receive directed broadcast packets) Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 614
To view current bindings, use the show hosts command. To view a DNS-related configuration, use the show running-config resolve command. Related Commands ip domain-name — specifies a DNS server. ip domain-lookup To address resolution (that is, DNS), enable dynamic host-name. Syntax ip domain-lookup To disable DNS lookup, use the no ip domain-lookup command. Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.
PAGE 615
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. You can only configure one domain name with the ip domain-name command. To configure more than one domain name, configure the ip domain-list command up to six times.
PAGE 616
ip helper-address hop-count disable Disable the hop-count increment for the DHCP relay agent. Syntax ip helper-address hop-count disable To re-enable the hop-count increment, use the no ip helper-address hop-count disable command. Defaults Enabled; the hops field in the DHCP message header is incremented by default. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 617
ip icmp source-interface Enable the ICMP error and unreachable messages to be sent with the source interface IP address, such as the loopback address, instead of the hops of the preceding devices along the network path to be used for easy debugging and diagnosis of network disconnections and reachability problems with IPv4 packets.
PAGE 618
Example Dell(conf)#ip icmp source-interface tengigabitethernet 0/1 Dell(conf)# ipv6 icmp source-interface Enable the ICMP error and unreachable messages to be sent with the source interface IP address, such as the loopback address, instead of the hops of the preceding devices along the network path to be used for easy debugging and diagnosis of network disconnections and reachability problems with IPv6 packets.
PAGE 619
along the path because the DNS server maps the loopback IP address to the hostname and does not translate the IP address of every interface of the switch to the hostname. Example Dell(conf)#ipv6 icmp source-interface tengigabitethernet 0/1 Dell(conf)# ip max-frag-count Set the maximum number of fragments allowed in one packet for packet re-assembly. Syntax ip max-frag-count count To place no limit on the number of fragments allowed, use the no ip max-frag-count command.
PAGE 620
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The system does not support sending DNS queries over a VLAN. DNS queries are sent out on all other interfaces, including the Management port. ip proxy-arp Enable proxy ARP on an interface. Syntax ip proxy-arp To disable proxy ARP, use the no ip proxy-arp command. Defaults Enabled. Command Modes INTERFACE Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.
PAGE 621
Command History Usage Information Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. Using the following example of a static route: ip route 33.33.33.0 /24 tengigabitethernet 0/0 172.31.5.43 • The software installs a next hop that is not on the directly connected subnet but which recursively resolves to a next hop on the interface’s configured subnet. In the example, if gig 0/0 has an ip address on subnet 2.2.2.0 and if 172.31.5.
PAGE 622
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL platform. You can configure the amount of time for which the device must wait before it attempts to establish a TCP connection. Using this capability, you can limit the wait times for TCP connection requests.
PAGE 623
management route Configure a static route that points to the Management interface or a forwarding router. Syntax Parameters management route {ipv4-address | ipv6–address}/mask{forwarding-router-address | managementethernet} {ipv4-address | ipv6–address}/ mask Enter an IPv4 address (A.B.C.D) or the IPv6 address followed by the prefix-length for the IP address of the management interface. forwarding-routeraddress Enter an IPv4 address of a forwarding router.
PAGE 624
Command History Usage Information Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. The following describes the show arp command shown in the following example. Row Heading Description Protocol Displays the protocol type. Address Displays the IP address of the ARP entry. Age(min) Displays the age (in minutes) of the ARP entry. Hardware Address Displays the MAC address associated with the ARP entry.
PAGE 625
show arp retries Display the configured number of ARP retries. Syntax Command Modes Supported Modes Command History Related Commands show arp retries • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Module arp retries — sets the number of ARP retries in case the system does not receive an ARP reply in response to an ARP request. show hosts View the host table and DNS configuration.
PAGE 626
Field Description • perm — the entry was manually configured and will not time out • temp — the entry was learned and will time out after 72 hours of inactivity. Also included in the flag is an indication of the validity of the route: Example • ok — the entry is valid. • ex — the entry expired. • ?? — the entry is suspect. TTL Displays the amount of time until the entry ages out of the cache. For dynamically learned entries only. Type Displays IP as the type of entry.
PAGE 627
summary Command Modes Supported Modes Command History Usage Information Example • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword summary to view a table listing route prefixes and the total number routes which can be entered in to CAM. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip cam command shown in the following example.
PAGE 628
Field Description Initial Size Displays the CAM size the system allocates for the corresponding mask. The system adjusts the CAM size if the number of routes for the mask exceeds the initial allocation. Example (ECMPGroup) Dell#show ip cam stack-unit 0 po 0 ecmp-group detail Example (MemberInfo) Dell#show ip cam stack-unit 0 po 0 ecmp-group member-info detail Destination EC CG ----------------1.1.1.2 0 0 2.1.1.2 0 0 1.1.1.1 0 0 2.1.1.1 0 0 1.1.1.0 0 0 2.1.1.0 0 0 100.1.1. 0 1 100.1.1. 0 1 0.0.0.
PAGE 629
Example Field Description Destination Lists the destination IP address. Gateway Displays either the word “direct” and an interface for a directly connected route or the remote IP address used to forward the traffic. First-Hop Displays the first hop IP address. Mac-Addr Displays the MAC address. Port Displays the egress-port information. VId Displays the VLAN ID. If no VLAN is assigned, zero (0) is listed. EC Displays the number of ECMP paths.
PAGE 630
Command History Usage Information Version Description 9.11(0.0) Updated the command output to include the unicast reverse path forwarding (uRPF) status. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. The following describes the show ip interface command shown in the following example. Lines Description TenGigabitEthernet 0/0... Displays the interface’s type, slot/port and physical and line protocol Internet address...
PAGE 631
Example (Brief) Dell#show ip interface brief Interface IP-Address TenGigabitEthernet 0/1 unassigned TenGigabitEthernet 0/2 unassigned TenGigabitEthernet 0/3 unassigned TenGigabitEthernet 0/4 unassigned TenGigabitEthernet 0/5 unassigned TenGigabitEthernet 0/6 unassigned TenGigabitEthernet 0/7 unassigned TenGigabitEthernet 0/8 unassigned TenGigabitEthernet 0/9 unassigned OK? NO YES YES NO NO NO NO NO NO Method None None None None None None None None None Status up up up up up up up up up Protocol down up
PAGE 632
Parameters 0-5 Enter the stack-unit ID, from 0 to 5. pipe-number Enter the number of the Port-Pipe number. The range is from 0 to 0. ip-address mask [longer-prefix] (OPTIONAL) Enter the IP address and mask of a route to CAM entries for that route only. Enter the keyword longer-prefixes to view routes with a common prefix. Command Modes Supported Modes Command History Usage Information detail Enter the keyword detail to display the group index ID used by the ecmp routes int he CAM.
PAGE 633
Field Description • Example Te = 10 Gigabit Ethernet interface Dell#show ip multicast-cam stack-unit 0 port-set 0 10.10.10.10/32 longer-prefixes Destination EC CG V C VId Mac-Addr Port ----------------- -- -- - - ----- ----------------------------10.10.10.10 0 0 1 1 0 00:00:00:00:00:00 3f01 CP Dell# show ip protocols View information on all routing protocols enabled and active on the switch.
PAGE 634
Parameters Command Modes Supported Modes Command History Usage Information 634 IPv4 Routing ip-address (OPTIONAL) Specify a name of a device or the IP address of the device to view more detailed information about the route. mask (OPTIONAL) Specify the network mask of the route. Use this parameter with the IP address parameter. longer-prefixes (OPTIONAL) Enter the keywords longer-prefixes to view all routes with a common prefix.
PAGE 635
Field Description • IA = IS-IS inter-area • * = candidate default • > = non-active route • + = summary routes Destination Identifies the route’s destination IP address. Gateway Identifies whether the route is directly connected and on which interface the route is configured. Dist/Metric Identifies if the route has a specified distance or metric. Last Change Identifies when the route was last changed or configured.
PAGE 636
E2- OSPF external type 2, i - IS-IS, L1 - IS-IS level-1, L2- IS-IS level-2, IA - IS-IS inter area, * - candidate default, >- non-active route, + - summary route Gateway of last resort is not set R R R R C Related Commands Destination ----------2.1.0.0/24 2.1.1.0/24 2.1.2.0/24 2.1.3.0/24 2.1.4.0/24 Gateway ------via 2.1.4.1, Te via 2.1.4.1, Te via 2.1.4.1, Te via 2.1.4.
PAGE 637
Total 1388 active route(s) using 222440 bytes Total 2 non-active route(s) using 128 bytes Dell> Related Commands show ip route — displays information about the routes found in the switch. show ip traffic View IP, ICMP, UDP, TCP and ARP traffic statistics. Syntax show ip traffic Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 638
Keyword Definition ...no port broadcasts The incoming broadcast/multicast packet did not have any listener. ...socket full The applications buffer is full and the incoming packet are dropped. The F10 Monitoring MIB provides access to the following statistics. Example • IP Statistics: Bcast: Received: Object = f10BcastPktRecv, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.1 • IP Statistics: Bcast: Sent: Object = f10BcastPktSent, OIDs = 1.3.6.1.4.1.6027.3.3.5.1.
PAGE 639
Usage Information Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. The following describes the show tcp statistics cp command shown in the following example. Field Description Rcvd: Displays the number and types of TCP packets received by the switch. 0 checksum error...
PAGE 640
Example Field Description 20 Total rxmt... Displays the number of times the switch tried to re-send data and the number of connections dropped during the TCP retransmit timeout period. 0 Keepalive.... Lists the number of keepalive packets in timeout, the number keepalive probes and the number of TCP connections dropped during keepalive.
PAGE 641
26 Internet Protocol Security (IPSec) Internet protocol security (IPSec) is an end-to-end security scheme for securing IP communications by authenticating and encrypting all packets in a session. Use IPSec between hosts, gateways, or hosts and gateways. IPSec uses a series of protocol functions to achieve information security: • Authentication Headers (AH) — Connectionless integrity and origin authentication for IP packets.
PAGE 642
To delete a transform set, use the no crypto ipsec transform-set name {ah-authentication {md5|sha1|null} | esp-authentication {md5|sha1|null} | esp-encryption {3des| cbc|des|null}} command. Parameters name Enter the name for the transform set. ah-authentication Enter the keywords ah-authentication then the transform type of operation to apply to traffic. The transform type represents the encryption or authentication applied to traffic.
PAGE 643
crypto ipsec policy Create a crypto policy used by ipsec. Syntax crypto ipsec policy name seq-num ipsec-manual To delete a crypto policy entry, use the no crypto ipsec policy name seq-num ipsec-manual command. Parameters name Enter the name for the crypto policy set. seq-num Enter the sequence number assigned to the crypto policy entry. Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 644
match Match a sequence number to the transmission control protocol (TCP)/user datagram protocol (UDP) packets. Syntax match seq-num {tcp | udp} {ipv6 | ip} port-num dest-ip dest-port-num To remove the match filter for the crypto map, use the no match seq-num command. Parameters seq-num Enter the match command sequence number. The range is from 0 to 255. tcp Enter the keyword tcp to configure a TCP access list filter. udp Enter the keyword udp to configure a UDP access list filter.
PAGE 645
Parameters name Enter the name of the host to delete. Enter * to delete all host table entries. inbound Specify the inbound session key for IPSec. outbound Specify the outbound session key for IPSec. ah Use the AH protocol when you select the AH transform set in the crypto policy. esp Use the ESP protocol when you select the ESP transform set in the crypto policy. spi Enter the security parameter index number. hex-key-string Enter the session key in hex format (a string of 8, 16, or 20 bytes).
PAGE 646
ESP Encry Transform Dell(conf)# : show crypto ipsec policy Display the crypto policy configuration. Syntax show crypto ipsec policy name Parameters name Command Modes EXEC Supported Modes Full–Switch Command History Example Enter the name for the crypto policy set. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 647
transform-set Specify the transform set the crypto policy uses. Syntax transform-set transform-set-name To delete a transform set from the crypto policy, use the no transform-set transform-set-name command. Parameters transform-setname Enter the name for the crypto policy transform set. Defaults none Command Modes CONFIG-CRYPTO-POLICY Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 648
27 IPv6 Access Control Lists (IPv6 ACLs) IPv6 ACLs and IPv6 Route Map commands are supported on Dell Networking switch. NOTE: For IPv4 ACL commands, refer to the Access Control Lists (ACL) chapter. Important Points to Remember • Certain platforms require manual CAM usage space allotment. For more information, refer to the cam-acl (Configuration) command. • Egress IPv6 ACL and IPv6 ACL on the Loopback interface is not supported. • Reference to an empty ACL permits any traffic.
PAGE 649
Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. For the new settings to take effect, save the new CAM settings to the startup-config (write-mem or copy run start), then reload the system. The total amount of space allowed is 16 FP blocks. System flow requires three blocks and these blocks cannot be reallocated.
PAGE 650
Ranges for the CAM profiles are from 1 to 10, except for the ipv6acl profile which is from 0 to 10. The ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).
PAGE 651
ipv6 control-plane egress-filter Enable egress Layer 3 ACL lookup for IPv6 CPU traffic. Syntax ipv6 control-plane egress-filter Defaults Not enabled. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. permit To configure a filter that matches the filter criteria, select an IPv6 protocol number, ICMP, IPv6, TCP, or UDP.
PAGE 652
of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. Defaults Not configured.
PAGE 653
count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in-msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands.
PAGE 654
show cam-acl Show space allocated for IPv6 ACLs. Syntax show cam-acl Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 655
Dell# Related Commands cam-acl — configures CAM profiles to support IPv6 ACLs. show cam-acl-egress Show information on FP groups allocated for egress ACLs. Syntax Command Modes Supported Modes Command History Example show cam-acl-egress • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 656
28 IPv6 Basics This chapter describes IPv6 basic commands.
PAGE 657
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. clear ipv6 route Clear (refresh) all or a specific route from the IPv6 routing table. Syntax Parameters clear ipv6 route {* | ipv6-address prefix-length} * Enter the * to clear (refresh) all routes from the IPv6 routing table. ipv6-address prefixlength Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
PAGE 658
To disable the address autoconfig operation on the management interface, use the no ipv6 address autoconfig command. Default Disabled Command Modes INTERFACE (management interface only) Supported Modes Full–Switch Command History Usage Infomation Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. • SAA can configure up to two addresses.
PAGE 659
Usage Information • If two addresses are configured, delete an existing address before configuring a new address. • If the last manually-configured global IPv6 address is removed using the “no” form of the command, the linklocal IPv6 address is removed automatically. • IPv6 addresses on a single management interface cannot be members of the same subnet. • IPv6 secondary addresses on management interfaces across platform must be members of the same subnet.
PAGE 660
ipv6 control-plane icmp error-rate-limit Configure the maximum number of ICMP error packets per second that can be sent per second. Syntax ipv6 control-plane icmp error-rate-limit {1-200} To restore the default value, use the no ipv6 control-plane icmp error-rate-limit command. Parameters pps Default 100 pps Command Modes CONFIGURATION Supported Modes Full–Switch Command History Enter the maximum number of error packets generated per second.
PAGE 661
To remove an IP host, use the no ipv6 host name {ipv6–address}. Parameters name Enter a text string to associate with one IP address. ipv6-address Enter the IPv6 address (X:X:X:X::X) to be mapped to the name. Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 name-server Enter up to six IPv6 addresses of name servers.
PAGE 662
To restore the default value, use the no ipv6 nd dad attempts command. Parameters number of attempts Enter the number of attempts to be made to detect a duplicate address. The range is from 0 to 15. Setting the value to 0 disables DAD on the interface. Default 3 attempts Command Modes INTERFACE (management interface only) Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 663
A value of 0 indicates to the host that the RDNSS address should not be used. You must specify a lifetime using the lifetime or infinite parameter. infinite Defaults Not Configured Command Modes INTERFACE CONFIG Supported Modes Full–Switch Command History Usage Information Enter the keyword infinite to specify that the RDNSS lifetime does not expire. Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.0) Introduced on the MXL.
PAGE 664
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. By default, all prefixes configured as addresses on the interface are advertised. This command allows control over the individual parameters per prefix; you can use the default keyword to use the default parameters for all prefixes.
PAGE 665
• For a loopback interface, enter the keyword loopback then a number from zero (0) to 16383. • For the null interface, enter the keyword null then zero (0). • For a port channel interface, enter the keyword port-channel then the port channel number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a tunnel interface, enter the keyword tunnel then the tunnel interface number. The range is from 1 to 16383.
PAGE 666
gigabitethernet Gigabit Ethernet interface loopback Loopback interface null Null interface port-channel Port-Channel interface tenGigabitethernet TenGigabit Ethernet interface fortyGigE FortyGigabit Ethernet interface tunnel Tunnel interface vlan Vlan interface Dell(conf)#ipv6 route 44::0 /64 33::1 ? <1-255> Distance metric for this route permanent Permanent route tag Set tag for this route Dell(conf)#ipv6 route 44::0 /64 33::1 Dell(conf)#ipv6 route 44::0 /64 tengigabitethernet 0/1 ? X:X:X:X::X Forwarding r
PAGE 667
show ipv6 cam stack-unit Displays the IPv6 CAM entries for the specified stack-unit. Syntax Parameters show ipv6 cam stack-unit unit-number port-set {0-0} [summary | index | ipv6 address] unit-number Enter the stack unit’s ID number. The range is from 0 to 5. port-set Enter the keyword Port Set. summary (OPTIONAL) Enter the keyword summary to display a table listing network prefixes and the total number prefixes which can be entered into the IPv6 CAM.
PAGE 668
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 flowlabel-zero — Configure IPv6 address auto-configuration for the management interface. show ipv6 fib stack-unit View all FIB entries. Syntax show ipv6 fib stack-unit unit-number [summary | ipv6-address] Parameters slot-number Enter the number of the stack unit. The range is from 0 to 5.
PAGE 669
Related Commands ipv6 nd dad attempts — Configure system to set the flow label field in the packets to zero. show ipv6 interface Display the status of interfaces configured for IPv6.
PAGE 670
Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The Management port is enabled by default (no shutdown). If necessary, use the ipv6 address command to assign an IPv6 address to the Management port.
PAGE 671
fe80::201:e8ff:fea7:497e 300::1/64 Dell# Example (tunnel) Dell#show ipv6 interface tun 1 Tunnel 1 is up, line protocol is up IPV6 is enabled Link Local address: fe80::201:e8ff:fea7:497e Global Unicast address(es): 400::1, subnet is 400::/64 (MANUAL) Remaining lifetime: infinite Global Anycast address(es): Joined Group address(es): ff02::1 ff02::2 ff02::1:ff00:1 ff02::1:ffa7:497e ND MTU is 0 ICMP redirects are not sent DAD is enabled, number of DAD attempts: 3 ND reachable time is 20410 milliseconds ND base
PAGE 672
Example Field Description Malformed Packets The number of MLDv1 and MLDv2 packets that do not match the requirement for a valid MLD packet. MLD Host Traffic Counters Elapsed time since counters cleared: 0028:33:52 Received Sent Valid MLD Packets 97962 18036 Reports 79962 18034 Leaves ---0 MLDv2 Queries 18000 ---MLDv1 Queries 0 ---Errors: Malformed Packets: 4510 show ipv6 route Displays the IPv6 routes.
PAGE 673
Usage Information Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ipv6 route command shown in the following examples.
PAGE 674
L Dell# via 100::1, Te 0/8, 00:00:50 fe80::/10 [0/0] Direct, Nu 0, 20:00:18 Example (Summary) Dell#show ipv6 route summary Route Source Active Routes connected 3 static 1 Total 4 Total 4 active route(s) using 928 bytes Dell# Non-active Routes 0 0 0 trust ipv6-diffserv Allows the dynamic classification of IPv6 DSCP. Syntax trust ipv6-diffserv To remove the definition, use the no trust ipv6-diffserv command.
PAGE 675
29 IPv6 Border Gateway Protocol (IPv6 BGP) IPv6 Border Gateway Protocol (IPv6 BGP) is supported on Dell Networking platforms. This chapter includes the following sections: • IPv6 BGP Commands • IPv6 MBGP Commands Topics: • IPv6 BGP Commands • IPv6 MBGP Commands IPv6 BGP Commands BGP is an external gateway protocol that transmits interdomain routing information within and between autonomous systems (AS).
PAGE 676
Usage Information After this command is executed, all subsequent commands apply to this address family. You can exit from this AFI/ SAFI to the IPv6 Unicast (the default) family by entering the exit command and returning to the Router BGP context. aggregate-address Summarize a range of prefixes to minimize the number of entries in the routing table.
PAGE 677
In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed. The opposite is true: routes meeting the permit clause are suppressed. If the route is injected using the network command, that route still appears in the routing table if you configure the summary-only parameter in the aggregate-address command. The summary-only parameter suppresses all advertisements.
PAGE 678
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you enable this command, use the capture bgp-pdu max-buffer-size * command to recompute the best path. bgp bestpath med confed Enable MULTI_EXIT_DISC (MED) attribute comparison on paths learned from BGP confederations. Syntax bgp bestpath med confed To disable MED comparison on BGP confederation paths, use the no bgp bestpath med confed command. Defaults Disabled.
PAGE 679
Usage Information The MED is a 4-byte unsigned integer value and the default behavior is to assume a missing MED as 4294967295. This command causes a missing MED to be treated as 0. During path selection, paths with a lower MED are preferred over those with a higher MED. bgp client-to-client reflection Allows you to enable route reflection between clients in a cluster. Syntax bgp client-to-client reflection To disable client-to-client reflection, use the no bgp client-to-client reflection command.
PAGE 680
Usage Information When a BGP cluster contains only one route reflector, the cluster ID is the route reflector’s router ID. For redundancy, a BGP cluster may contain two or more route reflectors and you assign a cluster ID with the bgp cluster-id command. Without a cluster ID, the route reflector cannot recognize route updates from the other route reflectors within the cluster.
PAGE 681
Parameters as-number Enter the AS number. The range is 1 to 65535. ...as-number (OPTIONAL) Enter up to 16 confederation numbers. The range is from 1 to 65535. Defaults Not configured. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The Autonomous Systems configured in this command are visible to the EBGP neighbors.
PAGE 682
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information If you enter bgp dampening, the default values for half-life, reuse, suppress, and max-suppresstime are applied. The parameters are position-dependent; therefore, if you configure one parameter, you must configure the parameters in the order they appear in the command. Related Commands show ip bgp ipv6 unicast dampened-paths — views the BGP paths.
PAGE 683
Usage Information This is enabled by default; that is, for all updates received from EBGP peers, BGP ensures that the first AS of the first AS segment is always the AS of the peer. If not, the update is dropped and a counter is incremented. To view the failed enforce-first-as check counter, use the show ip bgp ipv6 unicast neighbors command. If you disable enforce-first-as, view it using the show ip protocols command.
PAGE 684
When creating Confederations, all the routers in the Confederation must be 4- or 2-byte identified routers. You cannot mix them. Where the 2-Byte format is from 1 to 65535, the 4-Byte format is from 1 to 4294967295. Both formats are accepted, and the advertisements reflect the entered format. For more information about using the 2- or 4-Byte format, refer to the Dell Networking OS Configuration Guide.
PAGE 685
To disable logging, use the no bgp log-neighbor-changes command. Defaults Enabled. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The bgp log-neighbor-changes command appears in the show config command output. Related Commands show config — views the current configuration.
PAGE 686
To disable next-hop resolution, use the no bgp recursive-bgp-next-hop command. Defaults Enabled. Command Modes ROUTER BGP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This command is a knob to disable BGP next-hop resolution using BGP learned routes.
PAGE 687
bgp router-id Assign a user-given ID to a BGP router. Syntax bgp router-id ip-address To delete a user-assigned IP address, use the no bgp router-id command. Parameters ip-address Enter an IP address in dotted decimal format to reset only that BGP neighbor. Defaults The router ID is the highest IP address of the Loopback interface or, if no Loopback interfaces are configured, the highest IP address of a physical interface on the router.
PAGE 688
capture bgp-pdu neighbor (ipv6) Enable capture of an IPv6 BGP neighbor packet. Syntax capture bgp-pdu neighbor ipv6-address direction {both | rx | tx} To disable capture of the IPv6 BGP neighbor packet, use the no capture bgp-pdu neighbor ipv6address command. Parameters Defaults ipv6-address Enter the IPv6 address of the target BGP neighbor. direction {both | rx | tx} Enter the keyword direction and a direction — either rx for inbound, tx for outbound, or both. Not configured.
PAGE 689
Related Commands Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. capture bgp-pdu neighbor (ipv6) — enables route reflection between the route reflector and the clients. show capture bgp-pdu neighbor — configures a route reflector and clients. clear ip bgp * (asterisk) Reset all BGP sessions in the specified category. The soft parameter (BGP Soft Reconfiguration) clears the policies without resetting the TCP connection.
PAGE 690
Parameters as-number Enter an autonomous system (AS) number to reset neighbors belonging to that AS. If used without a qualifier, the keyword resets all neighbors belonging to that AS. The range is from 1 to 65535. flap-statistics (OPTIONAL) Enter the keywords flap-statistics to clear all flap statistics belonging to that AS or a specified address family within that AS. ipv4 (OPTIONAL) Enter the keyword ipv4 to select options for that address family.
PAGE 691
multicast (OPTIONAL) Enter the keyword multicast to select the multicast option within the selected address family. Multicast is supported on IPv4 only. soft (OPTIONAL) Enter the keyword soft to configure and activate policies without resetting the BGP TCP session; that is, BGP Soft Reconfiguration. NOTE: If you enter clear ip bgp ip6-address soft, both inbound and outbound policies are reset. in (OPTIONAL) Enter the keyword in to activate only inbound policies.
PAGE 692
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. After you enter this command, the software deletes the history routes and returns the suppressed routes to the active state. clear ip bgp ipv6 flap-statistics Clear BGP flap statistics, which includes number of flaps and the time of the last flap.
PAGE 693
clear ip bgp ipv6 unicast soft Clear and reapply policies for IPv6 unicast routes without resetting the TCP connection; that is, perform BGP soft reconfiguration. Syntax Parameters clear ip bgp {* | as-number | ipv4-neighbor-addr | ipv6-neighbor-addr | peergroup name} ipv6 unicast soft [in | out] * Clear and reapply policies for all BGP sessions. as-number Clear and reapply policies for all neighbors belonging to the AS. The range is from 0 to 65535 (2 Byte), from 1 to 4294967295 (4 Byte), or from 0.
PAGE 694
peer-group peergroup-name Enter the keywords peer-group then the name of the peer group. in (OPTIONAL) Enter the keyword in to view only information on inbound BGP routes. out (OPTIONAL) Enter the keyword out to view only information on outbound BGP routes. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 695
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Entering a no debug ip bgp command removes all configured debug commands for BGP. debug ip bgp ipv6 dampening View information on dampened (non-active) IPv6 routes. Syntax debug ip bgp ipv6 unicast dampening [in | out] To disable debugging, use the no debug ip bgp ipv6 unicast dampening command.
PAGE 696
Defaults Disabled. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command turns on BGP soft-reconfiguration inbound debugging for IPv6 unicast routes. If no neighbor is specified, debug is turned on for all neighbors. Related Commands show ip bgp ipv6 unicast dampened-paths — views BGP dampened routes.
PAGE 697
debug ip bgp notifications Allows you to view information about BGP notifications received from neighbors. Syntax debug ip bgp [ipv6-address | peer-group peer-group-name] notifications [in | out] To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] notifications [in | out] command. Parameters ipv6-address (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
PAGE 698
ipv6 unicast [ipv6address] (OPTIONAL) Enter the keywords ipv6 unicast, and, optionally, an ipv6 address. in (OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors. out (OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 699
description Enter a description of the BGP routing protocol. Syntax description {description} To remove the description, use the no description {description} command. Parameters description Defaults none Command Modes ROUTER BGP Supported Modes Full–Switch Command History Related Commands Enter a description to identify the BGP protocol (80 characters maximum). Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 700
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information CAUTION: Dell Networking recommends that you do not change the administrative distance of internal routes. Changing the administrative distances may cause routing table inconsistencies. The higher the administrative distance assigned to a route means that your confidence in that route is low. Routes assigned an administrative distance of 255 are not installed in the routing table.
PAGE 701
peer-group-name Identify a peer group by name. activate Enter the keyword activate to enable the identified neighbor or peer group in the new AFI/SAFI. Defaults Disabled. Command Modes ROUTER BGPV6-ADDRESS FAMILY Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 702
neighbor allowas-in Set the number of times an AS number can occur in the AS path. Syntax neighbor {ip-address | peer-group-name} allowas-in number To return to the default value, use the no neighbor {ip-address | peer-group-name} allowas-in command. Parameters ip-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 703
Command Modes ROUTER BGPV6-ADDRESS FAMILY Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you apply a route map to a BGP peer or neighbor with the neighbor default-originate command configured, the software does not apply the set filters in the route map to that BGP peer or neighbor.
PAGE 704
NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group. prefix-list-name Enter the name of an established prefix list. If the prefix list is not configured, the default is permit (to allow all routes). in Enter the keyword in to distribute only inbound traffic. out Enter the keyword out to distribute only outbound traffic. Defaults Not configured.
PAGE 705
Usage Information To prevent loops, the neighbor ebgp-multihop command does not install default routes of the multihop peer. Networks not directly connected are not considered valid for best path selection. neighbor fall-over Enable or disable fast fall-over for BGP neighbors. Syntax neighbor {ipv6-address | peer-group-name} fall-over To disable, use the no neighbor {ipv6-address | peer-group-name} fall-over command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format.
PAGE 706
Defaults Not configured. Command Modes ROUTER BGPV6-ADDRESS FAMILY Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor maximum-prefix Control the number of network prefixes received.
PAGE 707
Related Commands show ip bgp ipv6 unicast summary — displays the current BGP configuration. neighbor X:X:X::X password Enable TCP MD5 Authentication for an IPv6 BGP peer session. Syntax neighbor x:x:x::x password {7 |
PAGE 708
Usage Information If you configure the set ipv6 next-hop command in ROUTE-MAP mode, its configuration takes precedence over the neighbor next-hop-self command. neighbor peer-group (assigning peers) Allows you to assign one peer to a existing peer group. Syntax neighbor ipv6-address peer-group peer-group-name To delete a peer from a peer group, use the no neighbor ipv6-address peer-group peer-groupname command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format.
PAGE 709
show ip bgp ipv6 unicast peer-group — views BGP peers. show ip bgp ipv6 unicast neighbors — views BGP neighbors configurations. neighbor peer-group (creating group) Allows you to create a peer group and assign it a name. Syntax neighbor peer-group-name peer-group To delete a peer group, use the no neighbor peer-group-name peer-group command. Parameters peer-group-name Defaults Not configured.
PAGE 710
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information After you configure a peer group as passive, you must assign it a subnet using the neighbor subnet command. Related Commands neighbor subnet — assigns a subnet to a dynamically configured BGP neighbor. neighbor remote-as Create and specify the remote peer to the BGP neighbor.
PAGE 711
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group to remove the private AS numbers. Defaults Disabled (that is, the private AS number are not removed). Command Modes ROUTER BGPV6-ADDRESS FAMILY Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 712
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted. If you identify a peer group by name, the peers in that peer group inherit the characteristics in the Route map used in this command.
PAGE 713
To disable sending a COMMUNITY attribute, use the no neighbor {ipv6-address | peer-groupname} send-community command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group. All routers in the peer group receive routes from a route reflector. Defaults Not configured and COMMUNITY attributes are not sent to neighbors.
PAGE 714
Related Commands show ip bgp ipv6 unicast summary — displays the current BGP configuration. show ip bgp ipv6 unicast neighbors — displays IPv6 routing information exchanged by BGP neighbors. neighbor soft-reconfiguration inbound Enable a BGP soft-reconfiguration and start storing updates for inbound IPv6 unicast routes.
PAGE 715
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. neighbor timers Set keepalive and hold time timers for a BGP neighbor or a peer group. Syntax neighbor {ipv6-address | peer-group-name} timers keepalive holdtime To return to the default values, use the no neighbor {ipv6-address | peer-group-name} timers command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format.
PAGE 716
neighbor update-source Enable the software to use Loopback interfaces for TCP connections for BGP sessions. Syntax neighbor {ipv6-address | peer-group-name} update-source loopback interface To use the closest interface, use the no neighbor {ipv6-address | peer-group-name} updatesource loopback interface command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 717
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. In the system best path selection process, the path with the highest weight value is preferred. NOTE: To apply the weight to the connection and recompute the best path, reset the neighbor connection (the capture bgp-pdu max-buffer-size * command).
PAGE 718
network backdoor Specify this IGP route as the preferred route. Syntax network ipv6-address prefix-length backdoor To remove a network, use the no network ipv6-address prefix-length backdoor command. Parameters ipv6-address prefixlength Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros. Defaults Not configured.
PAGE 719
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you do not configure the default-metric command, in addition to the redistribute command, or there is no route map to set the metric, the metric for redistributed static and connected is “0”. To redistribute the default route (0::0/0), configure the neighbor default-originate command.
PAGE 720
redistribute ospf Redistribute OSPFv3 routes into BGP. Syntax redistribute ospf process-id [[match external {1 | 2}] [match internal]] [route-map map-name] To stop redistribution of OSPF routes, use the no redistribute ospf process-id command. Parameters process-id Enter the number of the OSPFv3 process. The range is from 1 to 65535. match external {1 | 2} (OPTIONAL) Enter the keywords match external to redistribute OSPF external routes. You can specify 1 or 2 to redistribute those routes only.
PAGE 721
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show capture bgp-pdu neighbor Display BGP packet capture information for an IPv6 address. Syntax Parameters Defaults show capture bgp-pdu neighbor ipv6-address ipv6-address • EXEC • EXEC Privilege Command Modes CONFIGURATION Supported Modes Full–Switch Command History Related Command Enter the IPv6 address (X:X:X:X::X) of a BGP neighbor.
PAGE 722
neighbor RR-CLIENT-PASSIV peer-group passive neighbor RR-CLIENT-PASSIV remote-as 18508 neighbor RR-CLIENT-PASSIV subnet 9000::9:0/120 neighbor RR-CLIENT-PASSIV no shutdown neighbor 1109::33 remote-as 18508 neighbor 1109::33 update-source Loopback 101 neighbor 1109::33 no shutdown neighbor 2222::220 remote-as 18508 neighbor 2222::220 route-reflector-client neighbor 2222::220 update-source Loopback 100 neighbor 2222::220 no shutdown neighbor 4000::33 remote-as 18508 neighbor 4000::33 no shutdown neighbor 4000
PAGE 723
Parameters Command Modes Supported Modes Command History cluster-id • EXEC • EXEC Privilege (OPTIONAL) Enter the cluster id in dotted decimal format. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast community View information on all routes with community attributes or view specific BGP community groups.
PAGE 724
show ip bgp ipv6 unicast community-list View routes that are affected by a specific community list. Syntax show ip bgp ipv6 unicast community-list community-list-name [exact-match] Paramters Command Modes Supported Modes Command History community-listname Enter the name of a configured IP community list. exact-match (OPTIONAL) Enter the keywords exact-match to display only for an exact match of the communities. • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.
PAGE 725
• Supported Modes Command History EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast extcommunity-list View information on all routes with Extended Community attributes.
PAGE 726
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast flap-statistics View flap statistics on BGP routes. Syntax show ip bgp ipv6 unicast flap-statistics [ipv6-address prefix-length] [filterlist as-path-name] [regexp regular-expression] Parameters ipv6-address prefixlength Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
PAGE 727
show ip bgp ipv6 unicast inconsistent-as View routes with inconsistent originating autonomous system (AS) numbers; that is, prefixes that are announced from the same neighbor AS but with a different AS-Path. Syntax Command Modes Supported Modes Command History show ip bgp ipv6 unicast inconsistent-as • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 728
NOTE: You must configure the neighbor soft-reconfiguration inbound command prior to viewing all the information received from the neighbors. denied-routes [network [networkmask] Command Modes Supported Modes Command History Usage Information 728 • EXEC • EXEC Privilege (OPTIONAL) Enter the keywords denied-routes then either the network address (in dotted decimal format) or the network mask (in slash prefix format) to view all information on routes denied using neighbor inbound filters.
PAGE 729
Example Lines Beginning With Description BGP table version Displays which version of the primary BGP routing table the router and the neighbor are using. Prefixes accepted Displays the number of network prefixes accepted by the router and the amount of memory used to process those prefixes. Prefixes advertised Displays the number of network prefixes advertised, the number rejected, and the number withdrawn from the BGP routing table.
PAGE 730
BGP neighbor is 5ffe:11::3, remote AS 1, external link BGP version 4, remote router ID 5.5.5.
PAGE 731
Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 732
9000::8:2 9000::9:2 9000::a:2 9000::b:14 Dell# 18508 18508 18508 18508 35 44 35 29 32 19 32 29 0 0 0 0 0 0 0 0 0 0 0 0 00:16:42 00:16:41 00:16:43 00:13:01 0 0 0 0 show ip bgp next-hop View all next hops (using learned routes only) with current reachability and flap status. This command only displays one path, even if the next hop is reachable by multiple paths.
PAGE 733
Command Modes Supported Modes Command History • EXEC • EXEC Privilege • ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified. • $ = (dollar sign) the end of the output string. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp paths as-path View all unique AS-PATHs in the BGP database.
PAGE 734
show ip bgp paths extcommunity View all unique extended community information in the BGP database. Syntax show ip bgp paths extcommunity Command Modes Supported Modes Command History • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp regexp Allows you to view the subset of BGP routing table matching the regular expressions specified.
PAGE 735
timers bgp Allows you to adjust the BGP network timers for all neighbors. Syntax timers bgp keepalive holdtimer To return to the default values, use the no timers bgp command. Parameters Defaults keepalive Enter the time interval (in seconds) between which the system sends keepalive messages. The range is from 1 to 65535. The default is 60 seconds. holdtimer Enter the time interval (in seconds) that the the system waits since the last keepalive message before declaring a BGP peer dead.
PAGE 736
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. After this command is executed, all subsequent commands apply to this address family. You can exit from this AFI/ SAFI to the IPv6 Unicast (the default) family by entering the exit command and returning to the Router BGP context.
PAGE 737
Do not add the as-set parameter to the aggregate. If routes within the aggregate are constantly changing, the aggregate flaps to keep track of the changes in the AS_PATH. In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed. The opposite is true: routes meeting the permit clause are suppressed.
PAGE 738
NOTE: The :: notation specifies successive hexadecimal fields of zeros. dampening (OPTIONAL) Enter the keyword dampening to clear route flap dampening information. flap-statistics (OPTIONAL) Enter the keywords flap-statistics to reset the flap statistics on all prefixes from that neighbor. peer-group (OPTIONAL) Enter the keywords peer-group to clear all members of a peer-group. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.
PAGE 739
Command Modes EXEC Privilege Supported Modes Full–Switch Command History • * (asterisk) matches on sequences in a pattern (zero or more sequences). • + (plus sign) matches on sequences in a pattern (one or more sequences). • ? (question mark) matches sequences in a pattern (0 or 1 sequences). • [ ] (brackets) matches a range of single-character patterns. • ^ (caret) matches the beginning of the input string.
PAGE 740
updates Enter the keyword updates to view BGP update information. in (OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors. out (OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug ip bgp ipv6 unicast updates View information about BGP updates.
PAGE 741
Defaults internal-distance Enter a number to assign to routes learned from a router within the AS. The range is from 1 to 255. The default is 200. local-distance Enter a number to assign to routes learned from networks listed in the network command. The range is from 1 to 255. The default is 200.
PAGE 742
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information By default, when a neighbor/peer group configuration is created in the Router BGP context, it is enabled for the IPv6/Unicast AFI/SAFI. By using activate in the new context, the neighbor/peer group is enabled for AFI/SAFI. Related Command address family — changes the context to SAFI. neighbor advertisement-interval Set the advertisement interval between BGP neighbors or within a BGP peer group.
PAGE 743
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group to set the default route of all routers in that peer group. route-map mapname (OPTIONAL) Enter the keywords route-map then the name of a configured route map. Defaults Not configured. Command Modes ROUTER BGPV6-ADDRESS FAMILY Supported Modes Full–Switch Command History Version Description 9.9(0.
PAGE 744
Related Commands neighbor filter-list — assigns a AS-PATH list to a neighbor or peer group. neighbor route-map — assigns a route map to a neighbor or peer group. neighbor filter-list Configure a BGP filter based on the AS-PATH attribute. Syntax neighbor [ipv6-address | peer-group-name] filter-list aspath access-list-name [in | out] To delete a BGP filter, use the no neighbor [ipv6-address | peer-group-name] filter-list aspath access-list-name [in | out] command.
PAGE 745
peer-group-name Enter the name of the peer group. maximum Enter a number as the maximum number of prefixes allowed for this BGP router. The range is from 1 to 4294967295. threshold (OPTIONAL) Enter a number to be used as a percentage of the maximum value. When the number of prefixes reaches this percentage of the maximum value, the software sends a message. The range is from 1 to 100 percent. The default is 75.
PAGE 746
neighbor remove-private-as Remove private AS numbers from the AS-PATH of outgoing updates. Syntax neighbor {ipv6-address | peer-group-name} remove-private-as To return to the default, use the no neighbor {ipv6-address | peer-group-name} removeprivate-as command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group-name Enter the name of the peer group to remove the private AS numbers.
PAGE 747
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted. If you identify a peer group by name, the peers in that peer group inherit the characteristics in the Route map used in this command.
PAGE 748
To remove a network, use the no network ipv6-address [route-map map-name] command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. route-map mapname (OPTIONAL) Enter the keywords route-map then the name of an established route map. If the route map is not configured, the default is deny (to drop all routes). Defaults Not configured.
PAGE 749
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you do not configure the default-metric command, in addition to the redistribute command, or there is no route map to set the metric, the metric for redistributed static and connected is “0”. To redistribute the default route (0::0/0), configure the neighbor default-originate command. Related Commands neighbor default-originate — injects the default route.
PAGE 750
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast community View information on all routes with community attributes or view specific BGP community groups.
PAGE 751
Paramters Command Modes Supported Modes Command History community-listname • EXEC • EXEC Privilege Enter the name of a configured IP community list. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast dampened-paths View BGP routes that are dampened (non-active).
PAGE 752
Detail information for BGP Node bgpNdP 0x41a17000 : NdTmrP 0x41a17000 : NdKATmrP 0x41a17014 : NdTics 327741 : NhLocAS 1 : NdState 2 : NdRPMPrim 1 : NdListSoc 13 NdAuto 1 : NdEqCost 1 : NdSync 0 : NdDefOrg 0 NdV6ListSoc 14 NdDefDid 0 : NdConfedId 0 : NdMedConfed 0 : NdMedMissVal -1 : NdIgnrIllId 0 : NdRRC2C 1 : NdClstId 33686273 : NdPaTblP 0x41a19088 NdASPTblP 0x41a19090 : NdCommTblP 0x41a19098 : NhOptTransTblP 0x41a190a0 : NdRRClsTblP 0x41a190a8 NdPktPA 0 : NdLocCBP 0x41a6f000 : NdTmpPAP 0x419efc80 : NdTmpA
PAGE 753
• . = (period) any single character (including a white space). • * = (asterisk) the sequences in a pattern (0 or more sequences). • + = (plus) the sequences in a pattern (1 or more sequences). • ? = (question mark) sequences in a pattern (either 0 or 1 sequences). NOTE: You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression. Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege • [ ] = (brackets) a range of single-character patterns.
PAGE 754
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip bgp ipv6 unicast neighbors Allows you to view the information exchanged by BGP neighbors. Syntax show ip bgp ipv6 unicast neighbors [ipv6-address prefix-length [advertisedroutes | dampened-routes | detail | flap-statistics | routes]] Parameters ipv6-address prefixlength (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format. The range is from /0 to /128.
PAGE 755
Lines Beginning With Example Description • last read is the time (hours:minutes:seconds) the router reads a message from its neighbor • hold time is the number of seconds configured between messages from its neighbor • keepalive interval is the number of seconds between keepalive messages to help ensure that the TCP session is still alive Received messages This line displays the number of BGP messages received, the number of notifications (error messages), and the number of messages waiting in a qu
PAGE 756
Capabilities advertised to neighbor for IPv6 Unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) CISCO_ROUTE_REFRESH(128) For address family: IPv6 Unicast BGP table version 12, neighbor version 12 2 accepted prefixes consume 32 bytes Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer Prefixes advertised 0, rejected 0, withdrawn 0 from peer Connections established 3; dropped 2 Last reset 00:00:39, due to Closed by neighbor Notification History 'OPEN error/Bad AS' Sent : 0 Recv: 1 Local host: 5ffe:10::4, Loc
PAGE 757
Parameters Command Modes Supported Modes Command History Related Commands peer-group-name (OPTIONAL) Enter the name of a peer group to view information about that peer group only. summary (OPTIONAL) Enter the keyword summary to view status information of the peers in that peer group. The output is the same as that found in the show ip bgp ipv6 unicast summary command. • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 758
Field Description BGP AS-PATH entries Displays the number of BGP AS_PATH attributes processed and the amount of memory used to process them. BGP community entries Displays the number of BGP COMMUNITY attributes processed and the amount of memory used to process them. The show ip bgp ipv6 unicast community command provides more details on the COMMUNITY attributes. Dampening enabled Displayed only when dampening is enabled. Displays the number of paths designated as history, dampened, or penalized.
PAGE 759
30 iSCSI Optimization Internet small computer system interface (iSCSI) optimization enables quality-of-service (QoS) treatment for iSCSI storage traffic on an Aggregator. NOTE: When iSCSI storage devices are detected on the server-ports, storm-control is disabled on those ports. When the iSCSI devices are off the ports, storm-control is enabled again.
PAGE 760
Usage Information You can configure iSCSI TLVs to send either globally or on a specified interface. The interface configuration takes priority over global configuration. iscsi aging time Set the aging time for iSCSI sessions. Syntax iscsi aging time time To remove the iSCSI session aging time, use the no iscsi aging time command. Parameters time Enter the aging time for the iSCSI session. The range is from 5 to 43,200 minutes.
PAGE 761
dscp dscp-value Enter the DSCP value assigned to the incoming packets in an iSCSI session. The valid range is from 0 to 63. The default is: the DSCP value in ingress packets is not changed. remark Marks the incoming iSCSI packets with the configured dot1p or DSCP value when they egress to the switch. The default is: the dot1and DSCP values in egress packets are not changed. Defaults The default dot1p VLAN priority value is 4 without the remark option.
PAGE 762
iscsi priority-bits Configure the iSCSI priority advertised for the iSCSI protocol in application priority TLVs. Syntax iscsi priority-bits priority-bitmap To remove the configured iSCSI priority, use the no iscsi priority-bits command. Parameters priority-bitmap Enter the priority-bitmap range. The range is from 1 to FF. Defaults 0x10 Command Modes PROTOCOL LLDP Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.
PAGE 763
iscsi target port Configure the iSCSI target ports and optionally, the IP addresses on which iSCSI communication is monitored. Syntax iscsi target port [tcp-port-2...tcp-port-16]ip-address [ip-address] To remove the configured iSCSI target ports or IP addresses, use the no iscsi target port command. Parameters tcpport-2...tcpport- 16 Enter the tcp-port number of the iSCSI target ports. The tcp-port-n is the TCP port number or a list of TCP port numbers on which the iSCSI target listens to requests.
PAGE 764
Example Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 765
• show iscsi sessions detailed — displays detailed information on active iSCSI sessions on the switch. show iscsi sessions detailed Displays detailed information on active iSCSI sessions on the switch. Syntax Parameters Command Modes Supported Modes Command History Example Related Commands show iscsi sessions detailed [session isid] isid • EXEC • EXEC Privilege Enter the session’s iSCSi ID to display detailed information on specified iSCSi session. All Modes Version Description 9.9(0.
PAGE 766
Command Modes EXEC Privilege Supported Modes Full–Switch Command History Related Commands 766 Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. • show iscsi — displays the currently configured iSCSI settings. • show iscsi sessions — show iscsi session — displays detailed information about active iSCSI sessions on the switch. • show iscsi sessions detailed — displays detailed information on active iSCSI sessions on the switch.
PAGE 767
31 Intermediate System to Intermediate System (ISIS) The Dell Networking OS supports the intermediate system to intermediate system (IS-IS) protocol for IPv4 and IPv6. IS-IS is an interior gateway protocol that uses a shortest-path-first algorithm. IS-IS facilitates the communication between open systems, supporting routers passing both IP and OSI traffic. A router is considered an intermediate system. Networks are partitioned into manageable routing domains, called areas.
PAGE 768
• hello padding • hostname dynamic • ignore-lsp-errors • ip router isis • ipv6 router isis • isis circuit-type • isis csnp-interval • isis csnp-interval • isis hello-multiplier • isis hello padding • isis ipv6 metric • isis metric • isis network point-to-point • isis password • isis priority • is-type • log-adjacency-changes • lsp-gen-interval • lsp-mtu • lsp-refresh-interval • max-area-addresses • max-lsp-lifetime • maximum-paths • metric-style • multi-topol
PAGE 769
To disable adjacency check, use the no adjacency-check command. Defaults Command Modes Supported Modes Enabled. • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To perform protocol-support consistency checks on hello packets, use this command. The adjacency-check is enabled by default.
PAGE 770
area-password Configure a hash message authentication code (HMAC) password for an area. Syntax area-password [hmac-md5 | encryption-type] password To delete a password, use the no area-password command. Parameters hmac-md5 (OPTIONAL) Enter the keywords hmac-md5 to encrypt the password. encryption-type (OPTIONAL) Enter 7 to encrypt the password using DES.
PAGE 771
Usage Information CAUTION: Use caution when you enter this command. Back up your configuration prior to using this command or your IS-IS configuration will be erased. clear isis Restart the IS-IS process. All IS-IS data is cleared. Syntax Parameters clear isis [tag] {* | database | traffic} tag (Optional) Enter an alphanumeric string to specify the IS-IS routing tag area. * Enter the keyword * to clear all IS-IS information and restart the IS-IS process.
PAGE 772
Related Commands hostname dynamic — enables dynamic learning of host names from routers in the domain and allows the routers to advertise the host names in LSPs. debug isis Enable debugging for all IS-IS operations. Syntax debug isis To disable debugging of IS-IS, use the no debug isis command. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 773
debug isis local-updates To debug IS-IS local update packets, enable debugging on a specific interface and provides diagnostic information. Syntax debug isis local-updates [interface] To turn off debugging, use the no debug isis local-updates [interface] command.
PAGE 774
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. debug isis spf-triggers Enable debugging on the events that triggered IS-IS shortest path first (SPF) events for debugging purposes. Syntax debug isis spf-triggers To turn off debugging, use the no debug isis spf-triggers command. Command Modes Command History EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 775
To disable the generation of a default route into the specified IS-IS routing domain, use the no defaultinformation originate [always] [metric metric] [route-map map-name] command. Parameters Defaults Command Modes Supported Modes Command History Usage Information always (OPTIONAL) Enter the keyword always to have the default route always advertised. metric metric (OPTIONAL) Enter the keyword metric then a number to assign to the route. The range is from 0 to 16777215.
PAGE 776
Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. router isis — Enter ROUTER mode on the switch. distance Define the administrative distance for learned routes. Syntax distance weight [ip-address mask [prefix-list]] To return to the default values, use the no distance weight command.
PAGE 777
Parameters Defaults Command Modes Supported Modes Command History Related Commands prefix-list-name Specify the prefix list to filter prefixes in routing updates. interface (OPTIONAL) Identifies the interface type slot/port as one of the following: • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 778
• Supported Modes Command History Usage Information Related Commands CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. You can assign a name to a routing process so a prefix list IS applied to only the routes derived from the specified routing process. • distribute-list in — filters the networks received in updates.
PAGE 779
password Defaults No default password. Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Usage Information Related Commands Enter an alphanumeric string up to 16 characters long. If you do not specify an encryption type or hmac-md5 keywords, the password is processed as plain text which provides limited security. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 780
graceful-restart interval Set the graceful restart grace period, the time during that all graceful restart attempts are prevented. Syntax graceful-restart interval minutes To return to the default, use the no graceful-restart interval command. Parameters minutes Defaults 5 minutes Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Enter the graceful-restart interval minutes. The range is from 1 to 20 minutes. The default is 5 minutes. Version Description 9.9(0.
PAGE 781
graceful-restart t2 Configure the wait time for the graceful restart timer T2 that a restarting router uses as the wait time for each database to synchronize. Syntax graceful-restart t2 {level-1 | level-2} seconds To return to the default, use the no graceful-restart t2 command. Parameters level-1, level-2 Enter the keywords level-1 or level-2 to identify the database instance type to which the wait interval applies. seconds Enter the gracefule-restart t2 time in seconds.
PAGE 782
Override the default restart-wait time by entering the no graceful-restart restart-wait command. When you disable restart-wait, the current adjacency hold time is used. Set the t3 timer to adjacency on the restarting router when implementing this command. The restarting router gets the remaining time value from its peer and adjusts its T3 value so only when you have configured gracefulrestart t3 adjacency.
PAGE 783
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information IS-IS hellos are padded to the full maximum transmission unit (MTU) size. Padding IS-IS Hellos (IIHS) to the full MTU provides early error detection of large frame transmission problems or mismatched MTUs on adjacent interfaces. Related Commands isis hello padding — turns ON or OFF hello padding on an interface basis.
PAGE 784
Usage Information IS-IS normally purges LSPs with an incorrect data link checksum causing the LSP source to regenerate the message. A cycle of purging and regenerating LSPs can occur when a network link continues to deliver accurate LSPs even though there is a link causing data corruption. This process could cause disruption to your system operation. ip router isis Configure IS-IS routing processes on an interface and attach an area tag name to the routing process.
PAGE 785
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Configure a network entity title (the net command) to specify the area address and the router system ID. To establish adjacencies and establish dynamic routing, enable routing on one or more interfaces. You can configure only one IS-IS routing process to perform Level 2 routing.
PAGE 786
isis csnp-interval Configure the IS-IS complete sequence number PDU (CSNP) interval on an interface. Syntax isis csnp-interval seconds [level-1 | level-2] To return to the default values, use the no isis csnp-interval [seconds] [level-1 | level-2] command. Parameters seconds Interval of transmission time between CSNPs on multi-access networks for the designated intermediate system. The range is from 0 to 65535. The default is 10.
PAGE 787
Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The default values of this command are typically satisfactory transmission times for a specific interface on a designated intermediate system. To maintain database synchronization, the designated routers send CSNPs. You can configure Level 1 and Level 2 CSNP intervals independently.
PAGE 788
To return to the default, use the no isis hello padding command. Defaults Padding of hello PDUs is enabled (ON). Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Hello PDUs are “padded” only when both the global and interface padding options are ON. Turning either one OFF disables padding for the corresponding interface.
PAGE 789
isis metric Assign a metric to an interface. Syntax isis metric default-metric [level-1 | level-2] To return to the default values, use the no isis metric [default-metric] [level-1 | level-2] command. Parameters default-metric Metric assigned to the link and used to calculate the cost from each other router via the links in the network to other destinations. You can configure this metric for Level 1 or Level 2 routing.
PAGE 790
isis password Configure an authentication password for an interface. Syntax isis password [hmac-md5] password [level-1 | level-2] To delete a password, use the no isis password [password] [level-1 | level-2] command. Parameters encryption-type (OPTIONAL) Enter 7 to encrypt the password using DES. hmac-md5 (OPTIONAL) Enter the keywords hmac-md5 to encrypt the password using MD5. password Assign the interface authentication password.
PAGE 791
level-2 (OPTIONAL) Specify the priority for Level 2. Defaults value = 64; level-1 (if not otherwise specified). Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. You can configure priorities independently for Level 1 and Level 2. Priorities determine which router on a LAN is the designated router. Priorities are advertised within hellos.
PAGE 792
log-adjacency-changes Generate a log messages for adjacency state changes. Syntax log-adjacency-changes To disable this function, use the no log-adjacency-changes command. Defaults Adjacency changes are not logged. Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 793
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. LSP throttling slows down the frequency at which LSPs are generated during network instability. Even though throttling LSP generations slows down network convergence, no throttling can result in a network not functioning as expected. If network topology is unstable, throttling slows down the scheduling of LSP generations until the topology regains its stability.
PAGE 794
Parameters seconds Defaults 900 seconds Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Usage Information The LSP refresh interval, in seconds. This value has to be less than the seconds value specified with the max-lsp-lifetime command. The range is from 1 to 65535 seconds. The default is 900. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 795
max-lsp-lifetime Set the maximum time that link-state packets (LSPs) exist without being refreshed. Syntax max-lsp-lifetime seconds To restore the default time, use the no max-lsp-lifetime command. Parameters seconds Defaults 1200 seconds Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Usage Information The maximum lifetime of LSP in seconds. This value must be greater than the lsprefresh-interval command. The higher the value the longer the LSPs are kept.
PAGE 796
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. metric-style To generate and accept old-style, new-style, or both styles of type, length, and values (TLV), configure a router. Syntax metric-style {narrow [transition] | transition | wide [transition]} [level-1 | level-2] To return to the default values, use the no metric-style {narrow [transition] | transition | wide [transition]} [level-1 | level-2] command.
PAGE 797
Defaults Disabled Command Modes CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. net To configure an IS-IS network entity title (NET) for a routing process, use this mandatory command. If you did not configure a NET, the ISIS process does not start. Syntax net network-entity-title To remove a net, use the no net network-entity-title command.
PAGE 798
Defaults Not configured. Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Usage Information • For a SONET interface, enter the keyword sonet then the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 799
Defaults Command Modes Supported Modes Command History Usage Information • metric metric-value = 0 • metric-type= internal; level-2 • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. To redistribute a default route (0.0.0.0/0), configure the default-information originate command.
PAGE 800
metric metric-value (OPTIONAL) The value used for the redistributed route. Use a metric value that is consistent with the destination protocol. The range is from 0 to 16777215. The default is 0. metric-type {external| internal} (OPTIONAL) The external link type associated with the default route advertised into a routing domain. The two options are: route-map mapname • external • internal map-name is an identifier for a configured route map.
PAGE 801
Parameters process-id Enter a number that corresponds to the OSPF process ID to be redistributed. The range is from 1 to 65355. metric metric-value (OPTIONAL) The value used for the redistributed route. Use a metric value that is consistent with the destination protocol. The range is from 0 to 16777215. The default is 0. metric-type {external | internal} (OPTIONAL) The external link type associated with the default route advertised into a routing domain.
PAGE 802
router isis Allows you to enable the IS-IS routing protocol and to specify an IP IS-IS process. Syntax router isis [tag] To disable IS-IS routing, use the no router isis [tag] command. Parameters tag Defaults Not configured. Command Modes ROUTER ISIS Supported Modes Full–Switch Command History Usage Information (OPTIONAL) This is a unique name for a routing process. A null tag is assumed if the tag option is not specified.
PAGE 803
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Set the overload bit when a router experiences problems, such as a memory shortage due to an incomplete link state database which can result in an incomplete or inaccurate routing table. If you set the overload bit in its LSPs, other routers ignore the unreliable router in their SPF calculations until the router has recovered.
PAGE 804
show isis database Display the IS-IS link state database. Syntax show isis database [level-1 | level-2] [local] [detail | summary] [lspid] Parameters Command Modes Supported Modes Command History Usage Information level-1 (OPTIONAL) Displays the Level 1 IS-IS link-state database. level-2 (OPTIONAL) Displays the Level 2 IS-IS link-state database. local (OPTIONAL) Displays local link-state database information.
PAGE 805
Example Field Description LSP Seq Num This value is the sequence number for the LSP that allows other systems to determine if they have received the latest information from the source. LSP Checksum This is the checksum of the entire LSP packet. LSP Holdtime This value is the amount of time, in seconds, that the LSP remains valid. A zero holdtime indicates that this is a purged LSP and is being removed from the link state database.
PAGE 806
Metric: 10 IP 15.1.1.0 255.255.255.0 Metric: 20 IP 10.3.3.0 255.255.255.0 Metric: 10 IPv6 (MT-IPv6) 1011::/64 Metric: 10 IPv6 (MT-IPv6) 1511::/64 Metric: 10 IPv6 (MT-IPv6) 2511::/64 Metric: 20 IPv6 (MT-IPv6) 1033::/64 Metric: 10 IPv6 2511::/64 Metric: 20 IPv6 1033::/64 Hostname: ISIS Dell# show isis graceful-restart detail Display detailed IS-IS graceful restart related settings.
PAGE 807
• Supported Modes Command History Example EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show isis hostname System Id Dynamic Name Static Name *F100.E120.0013 Force10 ISIS Dell# show isis interface Display detailed IS-IS interface status and configuration information.
PAGE 808
LSP Interval: 33 GigabitEthernet 0/8 is up, line protocol is up MTU 1497, Encapsulation SAP Routing Protocol: IS-IS Circuit Type: Level-1-2 Interface Index 38371358, Local circuit ID 2 Level-1 Metric: 10, Priority: 64, Circuit ID: systest-3.02 Hello Interval: 10, Hello Multiplier: 3, CSNP Interval: 10 Number of active level-1 adjacencies: 1 Level-2 Metric: 10, Priority: 64, Circuit ID: systest-3.
PAGE 809
Example Field Description Priority IS-IS priority the neighbor advertises. The neighbor with highest priority becomes the designated router for the interface. Uptime Displays the interfaces uptime. Circuit Id The neighbor’s interpretation of the designated router for the interface. The bold sections below identify that Multi-Topology IS-IS is enabled. Dell#show isis neighbors System Id Interface State Type Priority Uptime Circuit Id TEST Gi 7/1 Up L1L2(M) 127 09:28:01 TEST.
PAGE 810
Generate narrow metrics: level-1-2 Accept narrow metrics: level-1-2 Generate wide metrics: none Accept wide metrics: none Multi Topology Routing is enabled in transition mode. Dell# show isis traffic This command allows you to display IS-IS traffic interface information.
PAGE 811
Example Item Description Level-1/Level-2 LSPs PSNPs (sent/ rcvd) Displays the number of PSNP LPSs sent and received. Level-1/Level-2 DR Elections Displays the number of times designated router elections ran. Level-1/Level-2 SPF Calculations Displays the number of shortest path first calculations. LSP checksum errors received Displays the number of checksum errors LSPs received. LSP authentication failures Displays the number of LSP authentication failures.
PAGE 812
second_wait_interv al seconds Defaults (OPTIONAL) Enter the wait interval, in seconds, between the first and second SPF calculations. The range is from 0 to 120 seconds. The default is 5 seconds. Refer to Parameters. Command Modes Supported Modes Command History Usage Information • ROUTER ISIS (for IPv4) • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 813
32 Isolated Networks This chapter describes the isolated networks commands in the Dell Networking OS. io-aggregator isolated-network vlan Enable the isolated-network functionality for a particular VLAN or a set of VLANs.
PAGE 814
combination. For example: VLAN IDs (comma-separated): 3, 4, 6. Range (hyphenseparated): 5-10. Combination: 3, 4, 5-10, 8. Defaults None Command Modes EXEC Privilege Usage Information This command is used to show the isolated-network feature status and the VLANs configured for this feature. Show running-config will save this command under io-aggregator. Supported Modes All Modes Command History Example 814 Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.
PAGE 815
33 Link Aggregation Control Protocol (LACP) This chapter contains commands for Dell Networking’s implementation of the link aggregation control protocol (LACP) for the creation of dynamic link aggregation groups (LAGs — called port-channels in Dell Networking OS parlance).
PAGE 816
Version Description 9.6(0.0) Supported on the M I/O Aggregator. clear lacp counters Clear Port Channel counters. Syntax clear lacp port-channel-number counters Parameters port-channelnumber Enter a port-channel number: The range is from 1 to 128. Command Modes EXEC EXEC Privilege Supported Modes Command History Related Commands All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 817
Command Modes EXEC EXEC Privilege Supported Modes Command History All Modes Version Description 9.4(0.0) Supported on the FN I/O Aggregator. io-aggregator auto-lag enable Enable auto-lag globally on the server facing ports Syntax io-aggregator auto-lag enable To disable the auto-lag, use the no io-aggregator auto-lag enable command. When disabled, all the server ports associated in a LAG are removed and the LAG itself gets removed. Any LACPDUs received on the server ports are discarded.
PAGE 818
Full–Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.11(0.0) Introduced the support on VLT mode. 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the M I/O Aggregator and FN I/O Aggregator.
PAGE 819
Parameters priority-value Enter the port-priority value. The higher the value number, the lower the priority. The range is from 1 to 65535. The default is 32768. Defaults 32768 Command Modes INTERFACE Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 820
Usage Information Version Description 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. LACP Modes Mode Function active An interface is in an active negotiating state in this mode. LACP runs on any link configured in the active state and also automatically initiates negotiation with other ports by initiating LACP packets. passive An interface is not in an active negotiating state in this mode.
PAGE 821
show interfaces port-channel Display information on configured Port Channel groups. Syntax Parameters show interfaces port-channel [channel-number] [brief| description] channel-number For a Port Channel interface, enter the keyword port-channel followed by a number. The range is from 1 to 128. brief (OPTIONAL) Enter the keyword brief to display only the port channel number, the state of the port channel, and the number of interfaces in the port channel.
PAGE 822
Field Description Last clearing... Displays the time when the show interfaces counters were cleared. Queueing strategy. States the packet queuing strategy. FIFO means first in first out. packets input... Displays the number of packets and bytes into the interface. Input 0 IP packets... Displays the number of packets with IP headers, VLAN tagged headers, and MPLS headers. The number of packets may not add correctly because a VLAN tagged IP packet counts as both a VLAN packet and an IP packet.
PAGE 823
Example Field Description Status Displays the status of the port channel. • down — if the port channel is disabled (shutdown) • up — if the port channel is enabled (no shutdown) Uptime Displays the age of the port channel in hours:minutes:seconds. Ports Lists the interfaces assigned to this port channel. (untitled) Displays the status of the physical interfaces (up or down). • In Layer 2 port channels, an * (asterisk) indicates which interface is the primary port of the port channel.
PAGE 824
show lacp Displays the LACP matrix. Syntax show lacp port-channel-number [sys-id | counters] Parameters Command Modes Supported Modes Command History Example (PortChannel-Number) port-channelnumber Enter a port-channel number: sys-id (OPTIONAL) Enter the keywords sys-id and the value that identifies a system. counters (OPTIONAL) Enter the keyword counters to display the LACP counters. • EXEC • EXEC Privilege The range is from 1 to 128. All Modes Version Description 9.9(0.
PAGE 825
TenGig 0/1 Dell# Related Commands 200 200 0 0 0 0 clear lacp counters — Clears the LACP counters. show interfaces port-channel — Displays the information on configured Port Channel groups. show link-bundle-distribution port-channel Display the traffic-handling and utilization of the member interfaces of the port channel.
PAGE 826
show port-channel-flow Display an egress port in a given port-channel flow. Syntax show port-channel-flow port-channel number incoming-interface interface { srcmac address dest-mac address {vlan vlanid | ether-type }} [ src-ip address dest-ip address ] [ src-port number dest-port number ] Parameters port-channel number Enter the keywords port-channel then the number of the port channel to display flow information. The range is from 1 to 128.
PAGE 827
• Egress port for unfragmented packets. • In the event of fragmented packets, the egress port of the first fragment. • In the event of fragmented packets, the egress port of the subsequent fragments. NOTE: In the show port-channel–flow command output, the egress port for an unknown unicast, multicast, or broadcast traffic is not displayed.
PAGE 828
34 Layer 2 This chapter describes commands to configure Layer 2 features.
PAGE 829
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. mac-address-table aging-time Specify an aging time for MAC addresses to remove from the MAC address table. Syntax mac-address-table aging-time seconds To delete the configured aging time, use the no mac-address-table aging-time seconds command.
PAGE 830
• vlan vlan-id For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. Enter the keyword vlan then a VLAN ID number from 1 to 4094. Defaults Not configured. Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 831
Parameters Defaults address_limit Enter the maximum number of MAC addresses that can be learned on the interface. The range is from 1 to 1000000. dynamic (OPTIONAL) Enter the keyword dynamic to allow aging of MACs even though a learning limit is configured. no-station-move (OPTIONAL) Enter the keywords no-station-move to disallow a station move (associate the learned MAC address with the most recently accessed port) on learned MAC addresses.
PAGE 832
mac learning-limit learn-limit-violation Configure an action for a MAC address learning-limit violation. Syntax mac learning-limit learn-limit-violation {log | shutdown} To return to the default, use the no mac learning-limit learn-limit-violation {log | shutdown} command. Parameters log Enter the keyword log to generate a syslog message on a learning-limit violation. shutdown Enter the keyword shutdown to shut down the port on a learning-limit violation.
PAGE 833
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command is supported on physical interfaces, static LAGs, and LACP LAGs. Related Commands show mac learning-limit — displays details of the mac learning-limit. mac learning-limit reset Reset the MAC address learning-limit error-disabled state.
PAGE 834
When you disable the port security, all the interface level configurations are reset. Also, all dynamically learnt MAC addresses on the interfaces configured with MAC address learning limit are cleared. show cam mac stack-unit Display the content addressable memory (CAM) size and the portions allocated for MAC addresses and for MAC ACLs.
PAGE 835
show mac-address-table Display the MAC address table. Syntax Parameters Command Modes Supported Modes show mac-address-table [dynamic | static] [address mac-address | interface interface | vlan vlan-id] [count [vlan vlan-id] [interface interface-type [slot [/port]]]] dynamic (OPTIONAL) Enter the keyword dynamic to display only those MAC addresses the switch dynamically learns. Optionally, you can also add one of these combinations: address/mac-address, interface/interface, or vlan vlan-id.
PAGE 836
Column Heading Description VlanId Displays the VLAN ID number. Mac Address Displays the MAC address in nn:nn:nn:nn:nn:nn format. Type Lists whether the MAC address was manually configured (Static), learned dynamically (Dynamic), or associated with a specific port (Sticky). Interface Displays the interface type and slot/port information. The following abbreviations describe the interface types: State Example • gi — Gigabit Ethernet then a slot/port. • po — Port Channel then a number.
PAGE 837
Example (Count) Dell#show mac-address-table count MAC Entries for all vlans : Dynamic Address Count : Static Address (User-defined) Count : Total MAC Addresses in Use: Dell# 5 0 5 show mac-address-table aging-time Display the aging times assigned to the MAC addresses on the switch.
PAGE 838
• Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 839
default vlan-id Specify a VLAN as the Default VLAN. Syntax default vlan-id vlan-id To remove the default VLAN status from a VLAN and VLAN 1 does not exist, use the no default vlan-id vlan-id syntax. Parameters vlan-id Enter the VLAN ID number of the VLAN to become the new Default VLAN. The range is from 1 to 4094. The default is 1. Defaults The Default VLAN is VLAN 1. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.
PAGE 840
name Assign a name to the VLAN. Syntax name vlan-name To remove the name from the VLAN, use the no name command. Parameters vlan-name Defaults Not configured. Command Modes INTERFACE VLAN Supported Modes Full–Switch Command History Enter up to 32 characters as the name of the VLAN. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 841
show vlan Display the current VLAN configurations on the switch. Syntax Parameters Command Modes Supported Modes Command History Usage Information show vlan [brief | id vlan-id | name vlan-name] brief (OPTIONAL) Enter the keyword brief to display the following information: • VLAN ID • VLAN name (left blank if none is configured) • Spanning Tree Group ID • MAC address aging time • IP address id vlan-id (OPTIONAL) Enter the keyword id then a number from 1 to 4094.
PAGE 842
Column Heading Description Ports Example • x (not capitalized x) for Dot1x untagged • X (capitalized X) for Dot1x tagged • o (not capitalized o) for OpenFlow untagged • O (capitalized O) for OpenFlow tagged • H for VSN tagged • i (not capitalized i) for Internal untagged • I (capitalized I) for Internal tagged • v (not capitalized v) for VLT untagged • V (capitalized V) for VLT tagged Displays the type, slot, and port information.
PAGE 843
Q: U - Untagged, T - Tagged x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack NUM Status Description 222 Inactive Dell(conf-if-vl-222)# Related Commands Q Ports U Gi 1/22 vlan-stack compatible — enables the Stackable VLAN feature on the selected VLAN. interface vlan — configures a VLAN. tagged Add a Layer 2 interface to a VLAN as a tagged interface. Syntax tagged interface To remove a tagged interface from a VLAN, use the no tagged interface command.
PAGE 844
track ip Track the Layer 3 operational state of a Layer 3 VLAN, using a subset of the VLAN member interfaces. Syntax track ip interface To remove the tracking feature from the VLAN, use the no track ip interface command. Parameters interface Defaults Not configured.
PAGE 845
• For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. Defaults All interfaces in Layer 2 mode are untagged. Command Modes INTERFACE VLAN Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 846
35 Link Layer Discovery Protocol (LLDP) The link layer discovery protocol (LLDP) advertises connectivity and management from the local station to the adjacent stations on an IEEE 802 LAN. LLDP facilitates multi-vendor interoperability by using standard management tools to discover and make available a physical topology for network management. The Dell Networking OS implementation of LLDP is based on IEEE standard 801.1ab. This chapter describes the LLDP commands.
PAGE 847
Parameters port-protocol-vlanid Enter the keywords port-protocol-vlan-id to advertise the port protocol VLAN identification TLV. port-vlan-id Enter the keywords port-vlan-id to advertise the port VLAN identification TLV. vlan-name Enter the keywords vlan-name to advertise the vlan-name TLV. Defaults Disabled. Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp) Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.
PAGE 848
advertise interface-port-desc Advertise port descriptor. Syntax advertise interface-port-desc {description | port-id} To remove the advertised port descriptor, use the no advertise interface—port—desc {description | port-id} command. Parameters description Enter the keyword description then the interface description. port-id Enter the keyword port-id then the port-id. The range is from 0 to 7.
PAGE 849
Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.16.1 Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The command options system-capabilities, system-description, and system-name can be invoked individually or together, in any sequence.
PAGE 850
Command Modes EXEC Privilege Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. debug lldp interface Enable LLDP debugging to display timer events, neighbor additions or deletions, and other information about incoming and outgoing packets.
PAGE 851
disable Enable or disable LLDP. Syntax disable To enable LLDP, use the no disable command. Defaults Enabled, that is no disable. Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if-interface-lldp) Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 852
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. mode To receive or transmit, set LLDP. Syntax mode {tx | rx} To return to the default, use the no mode {tx | rx} command. Parameters tx Enter the keyword tx to set the mode to transmit. rx Enter the keyword rx to set the mode to receive. Defaults Both transmit and receive.
PAGE 853
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol lldp (Configuration) Enable LLDP globally on the switch. Syntax protocol lldp To disable LLDP globally on the chassis, use the no protocol lldp command. Defaults Enabled.
PAGE 854
When you enter the LLDP protocol in the Interface context, it overrides global configurations. When you execute the no protocol lldp from INTERFACE mode, interfaces begin to inherit the configuration from global LLDP CONFIGURATION mode. show lldp neighbors Display LLDP neighbor information for all interfaces or a specified interface.
PAGE 855
Example Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Dell#show lldp statistics --------- LLDP GLOBAL STATISTICS ON CHASSIS -----------Total number of neighbors: 4 Last table change time: 00:01:17, In ticks: 3859 Total number of Table Inserts: 7 Total number of Table Deletes: 3 Total number of Table Drops: 0 Total number of Table Age Outs: 0 Dell# show running-config lldp Display the current global LLDP configuration.
PAGE 856
Regarding connected endpoint devices, LLDP-MED provides network connectivity devices with the ability to: • manage inventory • manage Power over Ethernet (POE) • identify physical location • identify network policy advertise med guest-voice To advertise a separate limited voice service for a guest user with their own IP telephony handset or other appliances that support interactive voice services, configure the system.
PAGE 857
To return to the default, use the no advertise med guest-voice-signaling {vlan-id layer2_priority DSCP_value} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094. layer2_priority Enter the Layer 2 priority. The range is from 0 to 7. DSCP_value Enter the DSCP value. The range is from 0 to 63. priority-tagged number Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7. Defaults unconfigured.
PAGE 858
8.3.16.1 Usage Information Related Commands Introduced on the MXL 10/40GbE Switch IO Module. • ECS — Emergency call service such as defined by TIA or the national emergency numbering association (NENA) • ELIN — Emergency location identification number, a valid North America Numbering Plan format telephone number supplied for ECS purposes. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration.
PAGE 859
priority-tagged number Enter the keywords priority-tagged then the Layer 2 priority. The range is from 0 to 7. Defaults unconfigured. Command Modes CONFIGURATION (conf-lldp) Supported Modes Full-Switch Command History Related Commands 9.9(0.0) Introduced on the FN IOM. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration.
PAGE 860
advertise med video-conferencing To advertise dedicated video conferencing and other similar appliances that support real-time interactive video, configure the system. Syntax advertise med video-conferencing {vlan-id} | {priority-tagged number} To return to the default, use the no advertise med video-conferencing {vlan-id} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094.
PAGE 861
Version 8.3.16.1 Related Commands Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration. advertise med voice To advertise a dedicated IP telephony handset or other appliances supporting interactive voice services, configure the system.
PAGE 862
Defaults unconfigured. Command Modes CONFIGURATION (conf-lldp) Supported Modes Full-Switch Command History Related Commands 9.9(0.0) Introduced on the FN IOM. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration.
PAGE 863
36 Microsoft Network Load Balancing Network Load Balancing (NLB) is a clustering functionality that is implemented by Microsoft on Windows 2000 Server and Windows Server 2003 operating systems. NLB uses a distributed methodology or pattern to equally split and balance the network traffic load across a set of servers that are part of the cluster or group.
PAGE 864
With multicast NLB mode, the data is forwarded to all the servers based on the port specified using the Layer 2 multicast command, which is the mac-address-table static multicast vlan output-range , command in CONFIGURATION mode. Limitations With Enabling NLB on Switches The following limitations apply to switches on which you configure NLB: • The NLB unicast mode uses switch flooding to transmit all packets to all the servers that are part of the VLAN.
PAGE 865
mac-address-table static (for Multicast MAC Address) For multicast mode of network load balancing (NLB), configure a static multicast MAC address, associate the multicast MAC address with the VLAN used to switch Layer 2 multicast traffic, and add output ports that will receive multicast streams on the VLAN. To delete a configured static multicast MAC address from the MAC address table on the router, enter the no mac-address-table static multicast-mac-address command.
PAGE 866
ip vlan-flooding Enable unicast data traffic flooding on VLAN member ports. Syntax ip vlan-flooding To disable, use the no ip vlan-flooding command. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL Switch . Default Disabled Usage Information By default this command is disabled.
PAGE 867
37 Multicast Source Discovery Protocol (MSDP) Multicast source discovery protocol (MSDP) connects multiple PIM Sparse-Mode (PIM-SM) domains together. MSDP peers connect using TCP port 639. Peers send keepalives every 60 seconds. A peer connection is reset after 75 seconds if no MSDP packets are received. MSDP connections are parallel with MBGP connections.
PAGE 868
clear ip msdp sa-cache Clears the entire source-active cache, the source-active entries of a particular multicast group, rejected, or local source-active entries. Syntax clear ip msdp sa-cache [group-address | rejected-sa | local] Parameters group-address Enter the group IP address in dotted decimal format (A.B.C.D.).
PAGE 869
debug ip msdp Turn on MSDP debugging. Syntax debug ip msdp {event peer address | packet peer address | pim} To turn debugging off, use the no debug ip msdp {event peer address | packet peer address | pim} command. Parameters event peer address Enter the keyword event then the peer address in a dotted decimal format (A.B.C.D.). packet peer address Enter the keyword packet then the peer address in a dotted decimal format (A.B.C.D.). pim Enter the keyword pim to debug advertisement from PIM.
PAGE 870
Related Commands show ip msdp sa-cache rejected-sa — Displays the rejected SAs in the SA cache. ip msdp default-peer Define a default peer from which to accept all source-active (SA) messages. Syntax ip msdp default-peer peer address [list name] To remove the default peer, use the no ip msdp default-peer {peer address} list name command. Parameters peer address Enter the peer address in a dotted decimal format (A.B.C.D.
PAGE 871
ip msdp mesh-group To be a member of a mesh group, configure a peer. Syntax ip msdp mesh-group {name} {peer address} To remove the peer from a mesh group, use the no ip msdp mesh-group {name} {peer address} command. Parameters name Enter a string of up to 16 characters long for as the mesh group name. peer address Enter the peer address in a dotted decimal format (A.B.C.D.). Defaults Not configured.
PAGE 872
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip msdp peer Configure an MSDP peer. Syntax ip msdp peer peer address [connect-source] [description] [sa-limit number] To remove the MSDP peer, use the no ip msdp peer peer address [connect-source interface] [description name] [sa-limit number] command. Parameters peer address Enter the peer address in a dotted decimal format (A.B.C.D.).
PAGE 873
Related Commands ip msdp sa-limit — configures the MSDP SA Limit. clear ip msdp peer — clears the MSDP peer. show ip msdp — displays the MSDP information. ip msdp redistribute Filter local PIM SA entries in the SA cache. SAs which the ACL denies time out and are not refreshed. Until they time out, they continue to reside in the MSDP SA cache. Syntax Parameters ip msdp redistribute [list acl-name] list acl-name Defaults Not configured.
PAGE 874
Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip msdp sa-limit Configure the upper limit of source-active (SA) entries in SA-cache. Syntax ip msdp sa-limit number To return to the default, use the no ip msdp sa-limit number command.
PAGE 875
Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Version 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip multicast-msdp Enable MSDP. Syntax ip multicast-msdp To exit MSDP, use the no ip multicast-msdp command. Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 876
Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show ip msdp peer 100.1.1.1 Peer Addr: 100.1.1.1 Local Addr: 100.1.1.
PAGE 877
00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 00:00:13 Dell# 225.1.2.9 10.1.1.3 225.1.2.10 10.1.1.4 225.1.2.11 10.1.1.3 225.1.2.11 10.1.1.3 225.1.2.12 10.1.1.4 225.1.2.13 10.1.1.3 225.1.2.14 10.1.1.4 225.1.2.15 10.1.1.3 225.1.2.16 10.1.1.4 225.1.2.17 10.1.1.3 225.1.2.18 10.1.1.4 225.1.2.19 10.1.1.3 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.1 110.1.1.1 13.1.1.2 13.1.1.2 13.1.1.2 13.1.1.
PAGE 878
38 Multiple Spanning Tree Protocol (MSTP) Multiple spanning tree protocol (MSTP), as implemented by the Dell Networking Operating System (OS), conforms to IEEE 802.1s.
PAGE 879
• events Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example For Transmit, enter the keyword out. (OPTIONAL) Enter the keyword events to debug MSTP events. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#debug spanning-tree mstp bpdu tengigabitethernet 0/16 ? in Receive (in) out Transmit (out) Dell# description Enter a description of the multiple spanning tree.
PAGE 880
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol spanning-tree mstp — enters MULTIPLE SPANNING TREE mode. disable Enable bridge protocol data units (BPDU) filter globally to filter transmission of BPDU on port-fast enabled interfaces. Syntax edge-port bpdufilter default To disable global bpdu filter default, use the no edge-port bpdufilter default command. Defaults disabled.
PAGE 881
hello-time — changes the time interval between bridge protocol data units (BPDUs). hello-time Set the time interval between generation of MSTB bridge protocol data units (BPDUs). Syntax hello-time seconds To return to the default value, use the no hello-time command. Parameters seconds Enter a number as the time interval between transmission of BPDUs. The range is from 1 to 10. The default is 2 seconds.
PAGE 882
Related Commands edge-port bpdufilter default — the amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State. hello-time — changes the time interval between BPDUs. max-hops Configure the maximum hop count. Syntax max-hops number To return to the default values, use the no max-hops command. Parameters range Enter a number for the maximum hop count. The range is from 1 to 40. The default is 20.
PAGE 883
Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, all VLANs are mapped to MST instance zero (0) unless you use the vlan range command to map it to a non-zero instance. Although MSTP instance IDs range from 0 to 4094, only 64 active instances are supported on the switch. name The name you assign to the multiple spanning tree region.
PAGE 884
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. MSTP is not enabled when you enter MULTIPLE SPANNING TREE mode. To enable MSTP globally on the switch, enter the no disable command while in MULTIPLE SPANNING TREE mode. For more information about the multiple spanning tree protocol, refer to the Dell Networking OS Configuration Guide.
PAGE 885
Command Modes MULTIPLE SPANNING TREE Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-mstp)#show config ! protocol spanning-tree mstp no disable name CustomerSvc revision 2 MSTI 10 VLAN 101-105 max-hops 5 Dell(conf-mstp)# show spanning-tree mst configuration View the multiple spanning tree configuration.
PAGE 886
guard Command Modes Supported Modes Command History • EXEC • EXEC Privilege (Optional) Enter the keyword guard to display the type of guard enabled on an MSTP interface and the current port state. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Enable the multiple spanning tree protocol prior to using this command.
PAGE 887
---------------------------------------------------------Gi 0/0 128.257 128 20000 EDS 0 32768 0001.e801.6aa8 128.257 Interface Name Role PortID Prio Cost Sts Cost Link-type Edge Boundary ---------------------------------------------------------Gi 0/0 ErrDis 128.257 128 20000 EDS 0 P2P No No Dell#show spanning-tree msti 0 MSTI 0 VLANs mapped 1-4094 Root Identifier has priority 32768, Address 0001.e801.
PAGE 888
Parameters spanning-tree Defaults Enable. Command Modes INTERFACE Supported Modes Full–Switch Command History Enter the keywords spanning-tree to enable the MSTP on the interface. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. spanning-tree msti Configure multiple spanning tree instance cost and priority for an interface.
PAGE 889
spanning-tree mstp Configures a Layer 2 MSTP interface as an edge port with (optionally) a bridge protocol data unit (BPDU) guard, or enables the root guard or loop guard feature on the interface. Syntax Parameters spanning-tree mstp {edge-port [bpduguard [shutdown-on-violation]] | bpdufilter| rootguard} edge-port Enter the keywords edge-port to configure the interface as a multiple spanning tree edge port.
PAGE 890
tc-flush-standard Enable the MAC address flushing after receiving every topology change notification. Syntax tc-flush-standard To disable, use the no tc-flush-standard command. Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information 890 Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, the sytem implements an optimized flush mechanism for MSTP.
PAGE 891
39 Multicast The multicast commands are supported by Dell Networking Operating System (OS).
PAGE 892
Related Commands Version Description 9.2.(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ip pim tib — shows the PIM tree information base. ip mroute Assign a static mroute.
PAGE 893
ip multicast-limit To limit the number of multicast entries on the system, use this feature. Syntax Parameters ip multicast-limit limit limit Defaults 15000 routes. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Enter the desired maximum number of multicast entries on the system. The range is from 1 to 50000. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 894
mtrace Trace a multicast route from the source to the receiver. Syntax mtrace [vrf vrf-name] {source-address/hostname} [destination-address/hostname] [group-address/hostname] Parameters Command Modes Command History Usage Information vrf vrf-name Enter the keyword vrf followed by the name of the VRF. If VRF name is not mentioned, the default VRF will be used. Mtrace is not supported for management VRF. source-address/ hostname Enter the source IP address in dotted decimal format (A.B.C.D).
PAGE 895
-3 2.2.2.1 PIM 103.103.103.0/24 -4 103.103.103.3 --> Source -----------------------------------------------------------------The mtrace command traverses the path of the response data block in the reverse direction of the multicast data traffic. The mtrace command traverses the reverse path to the source from the destination.
PAGE 896
Command Modes Supported Modes Command History Example (Static) • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2.(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Dell#show ip mroute static Mroute: 23.23.23.0/24, interface: Lo 2 Protocol: static, distance: 0, route-map: none, last change: 00:00:23 Example (Snooping) Dell#show ip mroute snooping IPv4 Multicast Snooping Table (*, 224.0.0.
PAGE 897
Example Field Description uptime Displays the amount of time the entry has been in the multicast forwarding table. Incoming interface Displays the reverse path forwarding (RPF) information towards the source for (S,G) entries and the RP for (*,G) entries.
PAGE 898
RPF RPF RPF RPF interface: Te 0/4 neighbor: 165.87.31.4 route/mask: 10.10.10.9/255.255.255.255 type: unicast IPv6 Multicast Commands The following section contains the IPv6 multicast commands. debug ipv6 mld_host Enable the collection of debug information for MLD host transactions. Syntax [no] debug ipv6 mld_host [int-count | interface type] [slot/port-range] To discontinue collection of debug information for the MLD host transactions, use the no debug ipv6 mld_host command.
PAGE 899
Parameters limit Defaults 15000 routes. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Enter the desired maximum number of multicast entries on the system. The range is from 1 to 50000. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. This feature allows you to limit the number of multicast entries on the system.
PAGE 900
40 Neighbor Discovery Protocol (NDP) The Dell Networking Operating System (OS) supports the network discovery protocol for IPv6. The neighbor discovery protocol for IPv6 is defined in RFC 2461 as part of the Stateless Address Autoconfiguration protocol. It replaces the Address Resolution Protocol used with IPv4.
PAGE 901
Command Modes Supported Modes Command History • EXEC • EXEC Privilege • For a Fast Ethernet interface, enter the keyword fastEthernet then the slot/port information. • For a Port Channel interface, enter the keywords port-channel then a number. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN, enter the keyword vlan then the VLAN ID. The range is from 1 to 4094. Full–Switch Version Description 9.9(0.
PAGE 902
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. show ipv6 neighbors Display IPv6 discovery information. Entering the command without options shows all the IPv6 neighbor addresses stored on the control processor (CP). Syntax show ipv6 neighbors [vrf vrf-name] [ipv6-address| interface interface] Parameters vrf vrf-name (OPTIONAL) Enter the keyword vrf followed by the name of the VRF to display the neighbors corresponding to that VRF.
PAGE 903
41 NPIV Proxy Gateway The N-port identifier virtualization (NPIV) Proxy Gateway (NPG) feature provides FCoE-FC bridging capability on the FN IOM with the FC Flex IO module switch, allowing server CNAs to communicate with SAN fabrics over the FN IOMwith the FC Flex IO module.
PAGE 904
Usage Information Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. A DCB map is a template used to configure DCB parameters and apply them on converged Ethernet interfaces. DCB parameters include priority-based flow control (PFC) and enhanced traffic selection (ETS). To display the PFC and ETS settings in DCB maps, enter the show qos dcb-map command.
PAGE 905
show fcoe-map— displays the Fibre Channel and FCoE configuration parameters in FCoE maps. fabric-id vlan In an FCoE map, configure the association between the dedicated VLAN used to carry FCoE traffic between servers and a SAN, and the fabric where the desired storage arrays are installed.
PAGE 906
Parameters priority Enter the priority assigned to the FN 2210S Aggregator NPIV proxy gateway, which appears to a downstream server CNA as an FCF. The range of FCF priority values is from 1 to 255. Defaults 128 Command Modes FCOE MAP Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN 2210S Aggregator. 9.3(0.
PAGE 907
Usage Information Version Description 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. The FC-MAP value you enter must match the FC-MAP value used by an FC switch or FCoE forwarder (FCF) in the fabric. An FCF switch accepts only FCoE traffic that uses the correct FC-MAP value. The FC-MAP value is used to generate the fabric-provided MAC address (FP-MAC). The FPMA is used by servers to transmit FCoE traffic to the fabric.
PAGE 908
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN2210S Aggregator with the PMUX module. 9.3(0.0) Introduced on the M I/O Aggregator with the PMUX module. An FCoE map is a template used to map FCoE and FC parameters in a converged fabric.
PAGE 909
fka-adv-period In an FCoE map, configure the time interval used to transmit FIP keepalive (FKA) advertisements. Syntax fka-adv-period seconds Parameters seconds Defaults 8 seconds Command Modes FCoE MAP Supported Modes All Modes Command History Enter the time period (in seconds) used to send FIP keepalive messages to peer devices. The range is from 8 to 90 seconds. Version Description 9.6(0.0) Supported on the FN 2210S Aggregator. 9.3(0.
PAGE 910
Usage Information FIP keepalive (FKA) messaging is used to detect if other FCoE devices are reachable. To remove FIP keepalive monitoring from an FCoE map, enter the no keepalive command. Related Commands fcoe-map— creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric. show fcoe-map— displays the Fibre Channel and FCoE configuration parameters in FCoE maps. show fcoe-map Displays the Fibre Channel and FCoE configuration parameters in FCoE maps.
PAGE 911
Field Description FC-MAP FCoE MAC address-prefix value - The unique 24-bit MAC address prefix that identifies a fabric. FCF Priority The priority used by a server to select an upstream FCoE forwarder. Config-State Indicates whether the configured FCoE and FC parameters in the FCoE map are valid: Active (all mandatory FCoE and FC parameters are correctly configured) or Incomplete (either the FC-MAP value, fabric ID, or VLAN ID are not correctly configured).
PAGE 912
Oper-State Members Related Commands DOWN fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric. show fc sw Display the switch configuration for Fibre Channel capability. Syntax show fc sw Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege All modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN2210S Aggregator. 9.3(0.
PAGE 913
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN 2210S Aggregator. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator.
PAGE 914
Field Description ENode-Intf FN I/O Aggregator with the FC Flex IO module Ethernet interface (slot/port) to which a server CNA is connected. ENode-WWPN Worldwide port name (WWPN) of a server CNA port. FCoE-Vlan VLAN ID of the dedicated VLAN used to transmit FCoE traffic to and from the fabric. Fabric-Intf Fabric-facing Fibre Channel port (slot/port) on which FC traffic is transmitted to the specified fabric.
PAGE 915
Example Related Commands Field Description FC-ID FC port ID provided by the fabric. LoginMethod Method used by the server CNA to log in to the fabric; for example, FLOGI or FDISC. Secs Number of seconds that the fabric connection is up. State Status of the fabric connection: logged in.
PAGE 916
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN I/O Aggregator. 9.6(0.0) Supported on the M I/O Aggregator. Use the show qos dcb-map command to display the enhanced transmission selection (ETS) and priority-based flow control (PFC) parameters used to configure server-facing Ethernet ports. The following table describes the show qos dcb-map output shown in the example below.
PAGE 917
Version Description 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module.
PAGE 918
42 Open Shortest Path First (OSPFv2 and OSPFv3) The Switch supports open shortest path first version 2 (OSPFv2) for IPv4 and version 3 (OSPFv3) for IPv6. Up to 16 OSPF instances can be run simultaneously on the Switch. OSPF is an Interior Gateway Protocol (IGP), which means that it distributes routing information between routers in a single Autonomous System (AS). OSPF is also a link-state protocol in which all routers contain forwarding tables derived from information about their links to their neighbors.
PAGE 919
• ip ospf hello-interval • ip ospf message-digest-key • ip ospf mtu-ignore • ip ospf network • ip ospf priority • ip ospf retransmit-interval • ip ospf transmit-delay • log-adjacency-changes • maximum-paths • mib-binding • network area • passive-interface • redistribute • redistribute bgp • redistribute isis • router-id • router ospf • show config • show ip ospf • show ip ospf asbr • show ip ospf database • show ip ospf database asbr-summary • show ip ospf databa
PAGE 920
• debug ipv6 ospf bfd • debug ipv6 ospf events • debug ipv6 ospf packet • debug ipv6 ospf spf • default-information originate • graceful-restart grace-period • graceful-restart mode • ipv6 ospf area • ipv6 ospf authentication • ipv6 ospf bfd all-neighbors • ipv6 ospf cost • ipv6 ospf dead-interval • ipv6 ospf encryption • ipv6 ospf graceful-restart helper-reject • ipv6 ospf hello-interval • ipv6 ospf priority • ipv6 router ospf • maximum-paths • passive-interface • red
PAGE 921
Defaults cost = 1; no areas are configured. Command Modes ROUTER OSPF Supported Modes Full—Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information In the Dell Networking operating software, cost is defined as reference bandwidth. Related Commands area stub — creates a stub area. area nssa Specify an area as a not so stubby area (NSSA).
PAGE 922
Parameters area-id Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535. ip-address Specify an IP address in dotted decimal format. mask Specify a mask for the destination prefix. Enter the full mask (for example, 255.255.255.0). not-advertise (OPTIONAL) Enter the keywords not-advertise to set the status to DoNotAdvertise (that is, the Type 3 summary-LSA is suppressed and the component networks remain hidden from other areas.) Defaults Not configured.
PAGE 923
Usage Information To configure all routers and access servers within a stub, use this command. Related Commands router ospf — enters ROUTER OSPF mode to configure an OSPF instance. auto-cost Specify how the OSPF interface cost is calculated based on the reference bandwidth method. Syntax auto-cost [reference-bandwidth ref-bw] To return to the default bandwidth or to assign cost based on the interface type, use the no auto-cost [reference-bandwidth] command.
PAGE 924
clear ip ospf statistics Clear the packet statistics in interfaces and neighbors. Syntax clear ip ospf process-id statistics [interface name {neighbor router-id}] Parameters process-id Enter the OSPF Process ID to clear a specific process. If no Process ID is entered, all OSPF processes are cleared.
PAGE 925
database-timer rate-limit Command Modes EXEC Privilege Supported Modes Full—Switch Command History Usage Information (OPTIONAL) Enter the keywords database-timer rate-limit to display the LSA throttling timer information. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the debug ip ospf command shown in the Example below. Field Description 8:14 Displays the time stamp.
PAGE 926
Field Example Description • N + (N-bit is set) • N - (N-bit is not set) • MC+ (bit used by MOSPF is set and router is able to forward IP multicast packets) • MC- (bit used by MOSPF is not set and router cannot forward IP multicast packets) • E + (router is able to accept AS External LSAs) • E - (router cannot accept AS External LSAs) • T + (router can support TOS) • T - (router cannot support TOS) hi: Displays the amount of time configured for the HELLO interval.
PAGE 927
Supported Modes Command History Related Commands Full—Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. redistribute — redistributes routes from other routing protocols into OSPF. default-metric Change the metrics of redistributed routes to a value useful to OSPF. Use this command with the redistribute command. Syntax default-metric number To return to the default values, use the no default-metric [number] command.
PAGE 928
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip ospf asbr — displays the VLAN configuration. distance Define an administrative distance for particular routes to a specific IP address. Syntax distance weight [ip-address mask access-list-name] To delete the settings, use the no distance weight [ip-address mask access-list-name] command. Parameters weight Specify an administrative distance. The range is from 1 to 255. The default is 110.
PAGE 929
• inter-area dist2 = 110 • intra-area dist1 = 110 Command Modes ROUTER OSPF Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To specify a distance for routes learned from other routing domains, use the redistribute command. distribute-list in Apply a filter to incoming routing updates from OSPF to the routing table.
PAGE 930
Parameters prefix-list-name Enter the name of a configured prefix list. bgp (OPTIONAL) Enter the keyword bgp to specify that BGP routes are distributed. connected (OPTIONAL) Enter the keyword connected to specify that connected routes are distributed. isis (OPTIONAL) Enter the keyword isis to specify that IS-IS routes are distributed. rip (OPTIONAL) Enter the keyword rip to specify that RIP routes are distributed.
PAGE 931
NOTE: The faster the convergence, the more frequent the route calculations and updates. This behavior impacts CPU utilization and may impact adjacency stability in larger topologies. Generally, convergence level 1 meets most convergence requirements. Higher convergence levels should only be selected following consultation with Dell Networking technical support. flood-2328 Enable RFC-2328 flooding behavior. Syntax flood-2328 To disable, use the no flood-2328 command. Defaults Disabled.
PAGE 932
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. graceful-restart helper-reject Specify the OSPF router to not act as a helper during graceful restart. Syntax graceful-restart helper-reject ip-address To return to default value, use the no graceful-restart helper-reject command. Parameters ip-address Defaults Not configured.
PAGE 933
graceful-restart role Specify the role for your OSPF router during graceful restart. Syntax graceful-restart role [helper-only | restart-only] To disable graceful restart role, use the no graceful-restart role command. Parameters role helper-only (OPTIONAL) Enter the keywords helper-only to specify the OSPF router is a helper only during graceful restart. role restart-only (OPTIONAL) Enter the keywords restart-only to specify the OSPF router is a restart only during graceful-restart.
PAGE 934
ip ospf authentication-key Enable authentication and set an authentication key on OSPF traffic on an interface. Syntax ip ospf authentication-key [encryption-type] key To delete an authentication key, use the no ip ospf authentication-key command. Parameters encryption-type (OPTIONAL) Enter 7 to encrypt the key. key Enter an eight-character string. Strings longer than eight characters are truncated. Defaults Not configured.
PAGE 935
ip ospf dead-interval Set the time interval since the last hello-packet was received from a router. After the interval elapses, the neighboring routers declare the router dead. Syntax ip ospf dead-interval seconds To return to the default values, use the no ip ospf dead-interval command. Parameters seconds Defaults 40 seconds Command Modes INTERFACE Supported Modes Full—Switch Command History Enter the number of seconds for the interval. The range is from 1 to 65535. The default is 40 seconds.
PAGE 936
ip ospf message-digest-key Enable OSPF MD5 authentication and send an OSPF message digest key on the interface. Syntax ip ospf message-digest-key keyid md5key To delete a key, use the no ip ospf message-digest-key keyid command. Parameters keyid Enter a number as the key ID. The range is from 1 to 255. key Enter a continuous character string as the password. Defaults No MD5 authentication is configured.
PAGE 937
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip ospf network Set the network type for the interface. Syntax ip ospf network {broadcast | point-to-point} To return to the default, use the no ip ospf network command. Parameters broadcast Enter the keyword broadcast to designate the interface as part of a broadcast network.
PAGE 938
Usage Information Setting a priority of 0 makes the router ineligible for election as a designated router or backup designated router. Use this command for interfaces connected to multi-access networks, not point-to-point networks. ip ospf retransmit-interval Set the retransmission time between lost link state advertisements (LSAs) for adjacencies belonging to the interface. Syntax ip ospf retransmit-interval seconds To return to the default values, use the no ip ospf retransmit-interval command.
PAGE 939
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. log-adjacency-changes To send a Syslog message about changes in the OSPF adjacency state, set the system. Syntax log-adjacency-changes To disable the Syslog messages, use the no log-adjacency-changes command. Defaults Disabled. Command Modes ROUTER OSPF Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 940
mib-binding Enable this OSPF process ID to manage the SNMP traps and process SNMP queries. Syntax mib-binding To mib-binding on this OSPF process, use the no mib-binding command. Defaults none. Command Modes ROUTER OSPF Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command is either enabled or disabled.
PAGE 941
Usage Information To enable OSPF on an interface, the network area command must include, in its range of addresses, the primary IP address of an interface. NOTE: An interface can be attached only to a single OSPF area. If you delete all the network area commands for Area 0, the show ip ospf command output does not list Area 0. passive-interface Suppress both receiving and sending routing updates on an interface.
PAGE 942
• Save passive-interface interface into the running configuration. passive-interface default • All present and future OSPF interfaces are marked as passive. • Any adjacency is explicitly terminated from all OSPF interfaces. • All previous passive-interface interface commands are removed from the running configuration. • All previous no passive-interface interface commands are removed from the running configuration. no passive-interface interface • Remove the interface from the passive list.
PAGE 943
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To redistribute the default route (0.0.0.0/0), configure the default-information originate command. Related Commands default-information originate — generates a default route into the OSPF routing domain. redistribute bgp Redistribute BGP routing information throughout the OSPF instance.
PAGE 944
To disable redistribution, use the no redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value | metric-type type-value] [route-map map-name] [tag tag-value] command. Parameters tag (OPTIONAL) Enter the name of the IS-IS routing process. level-1 (OPTIONAL) Enter the keywords level-1 to redistribute only IS-IS Level-1 routes. level-1-2 (OPTIONAL) Enter the keywords level-1-2 to redistribute both IS-IS Level-1 and Level-2 routes.
PAGE 945
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information You can configure an arbitrary value in the IP address format for each router. However, each router ID must be unique. If you use this command on an OSPF router process, which is already active (that is, has neighbors), a prompt reminding you that changing the router-id brings down the existing OSPF adjacency.
PAGE 946
Command Modes ROUTER OSPF Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-router_ospf)#show config ! router ospf 3 passive-interface FastEthernet 0/1 Dell(conf-router_ospf)# show ip ospf Display information on the OSPF process configured on the switch.
PAGE 947
Line Beginning with Description “Number of...” Displays the number and type of areas configured for this process ID. Example Dell#show ip ospf 10 Routing Process ospf 10 with ID 1.1.1.
PAGE 948
You can determine if an ASBR is in a directly connected area (or not) by the flags. For ASBRs in a directly connected area, E flags are set. In the following example, router 1.1.1.1 is in a directly connected area since the Flag is E/-/-/. For remote ASBRs, the E flag is clear (-/-/-/). Example Dell#show ip ospf 1asbr RouterID 3.3.3.3 1.1.1.1 Dell# Flags -/-/-/ E/-/-/ Cost Nexthop 2 10.0.0.2 0 0.0.0.0 Interface Area Gi 0/1 1 0 show ip ospf database Display all LSA information.
PAGE 949
13.1.1.1 13.1.1.1 676 0x80000097 0x1035 192.68.135.2 192.68.135.2 1419 0x80000294 0x9cbd Link ID 10.2.3.2 10.2.4.2 Link ID 0.0.0.0 1.1.1.1 10.1.1.0 10.1.2.0 10.2.2.0 10.2.3.0 10.2.4.0 11.1.1.0 11.1.2.0 12.1.2.0 13.1.1.0 13.1.2.0 172.16.1.0 Dell> Related Commands 2 1 Network (Area 0.0.0.0) ADV Router Age Seq# Checksum 13.1.1.1 676 0x80000003 0x6592 192.68.135.2 908 0x80000055 0x683e Type-5 AS External ADV Router Age Seq# 192.68.135.2 908 0x80000052 192.68.135.2 908 0x8000002a 11.1.2.1 718 0x80000002 11.1.
PAGE 950
Usage Information Example The following describes the show ip ospf database asbr-summary command shown in the following example. Field Description LS Age Displays the LSA’s age. Options Displays the optional capabilities available on router. The following options can be found in this item: • TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
PAGE 951
show ip ospf database external Display information on the AS external (type 5) LSAs. Syntax Parameters show ip ospf process-id database external [link-state-id] [adv-router ipaddress] process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 952
Example Field Description Checksum Displays the Fletcher checksum of the LSA’s complete contents. Length Displays the length in bytes of the LSA. Network Mask Displays the network mask implemented on the area. Metrics Type Displays the external type. TOS Displays the Type of Service (TOS) options. Option 0 is the only option. Metric Displays the LSA metric. Forward Address Identifies the address of the forwarding router. Data traffic is forwarded to this router.
PAGE 953
show ip ospf database network Display the network (type 2) LSA information. Syntax Parameters show ip ospf process-id database network [link-state-id] [adv-router ipaddress] process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 954
Example Field Description Length Displays the Fletcher checksum of an LSA’s complete contents. Network Mask Displays the length in bytes of the LSA. Attached Router Identifies the IP address of routers attached to the network. Dell#show ip ospf 1 data network OSPF Router with ID (20.20.20.5) (Process ID 1) Network (Area 0.0.0.0) LS age: 1372 Options: (No TOS-capability, DC, E) LS type: Network Link State ID: 202.10.10.2 Advertising Router: 20.20.20.
PAGE 955
Command Modes Supported Modes Command History Related Commands • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show ip ospf database — displays OSPF database information. show ip ospf database opaque-area Display the opaque-area (type 10) LSA information.
PAGE 956
Item Example Description • TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service. • DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits. • E or No E is displayed on whether the originating router can accept AS External LSAs. LS Type Displays the LSA’s type. Link State ID Displays the Link State ID. Advertising Router Identifies the advertising router’s ID.
PAGE 957
adv-router ipaddress Command Modes Supported Modes Command History Related Commands • EXEC • EXEC Privilege • the network’s IP address for Type 3 LSAs or Type 5 LSAs • the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs • the default destination (0.0.0.0) for Type 5 LSAs (OPTIONAL) Enter the keywords adv-router and the ip-address to display only the LSA information about that router. Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 958
show ip ospf database router Display the router (type 1) LSA information. Syntax show ip ospf process-id database router [link-state-id] [adv-router ip-address] Parameters process-id Enter the OSPF Process ID to show a specific process. If you do not enter a process ID, the command applies only to the first OSPF process. link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format.
PAGE 959
Example Item Description Length Displays the length in bytes of the LSA. Number of Links Displays the number of active links to the type of router (Area Border Router or AS Boundary Router) listed in the previous line. Link connected to: Identifies the type of network to which the router is connected. (Link ID) Identifies the link type and address. (Link Data) Identifies the router interface address. Number of TOS Metric Lists the number of TOS metrics.
PAGE 960
(Link ID) Network/subnet number: 11.1.5.0 --More-Related Commands show ip ospf database — displays OSPF database information. show ip ospf database summary Display the network summary (type 3) LSA routing information. Syntax show ip ospf process-id database summary [link-state-id] [adv-router ipaddress] Parameters process-id Enter the OSPF process ID to show a specific process. If you do not enter a process ID, the command applies only to the first OSPF process.
PAGE 961
Example Item Description Advertising Router Identifies the router ID of the LSA’s originating router. LS Seq Number Displays the link state sequence number. This number allows you to identify old or duplicate LSAs. Checksum Displays the Fletcher checksum of an LSA’s complete contents. Length Displays the length in bytes of the LSA. Network Mask Displays the network mask implemented on the area. TOS Displays the TOS options. Option 0 is the only option. Metric Displays the LSA metrics.
PAGE 962
show ip ospf interface Display the OSPF interfaces configured. If OSPF is not enabled on the switch, no output is generated. Syntax show ip ospf process-id interface [interface] Parameters Command Modes Supported Modes Command History Usage Information 962 process-id Enter the OSPF process ID to show a specific process. If you do not enter a process ID, the command applies only to the first OSPF process.
PAGE 963
Example Item Description Neighbor Count... This line displays the number of neighbors and adjacent neighbors. Listed below this line are the details about each adjacent neighbor. Dell>show ip ospf int TenGigabitEthernet 1/1 is up, line protocol is up Internet Address 192.168.1.2/30, Area 0.0.0.1 Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 192.168.253.2, Interface address 192.168.1.
PAGE 964
Example Item Description Neighbor ID Displays the neighbor router ID. Pri Displays the priority assigned neighbor. State Displays the OSPF state of the neighbor. Dead Time Displays the expected time until the system declares the neighbor dead. Address Displays the IP address of the neighbor. Interface Displays the interface type slot/port information. Area Displays the neighbor’s area (process ID). Dell#show ip ospf 34 neighbor Neighbor ID 20.20.20.7 192.10.10.2 20.20.20.
PAGE 965
Prefix Cost Nexthop 1.1.1.1 1 0.0.0.0 3.3.3.3 2 13.0.0.3 13.0.0.0 1 0.0.0.0 150.150.150.0 2 13.0.0.3 172.30.1.0 2 13.0.0.3 Dell# Interface Lo 0 Te 0/4 Te 0/4 Te 0/4 Te 0/4 Area 0 1 0 1 Type Intra-Area Intra-Area Intra-Area External Intra-Area show ip ospf statistics Display OSPF statistics. Syntax Parameters show ip ospf process-id statistics global | [interface name {neighbor routerid}] process-id Enter the OSPF Process ID to show a specific process.
PAGE 966
Row Heading Description DDiscr Number of database description packets. LSReq Number of link state request packets. LSUpd Number of link state update packets. LSAck Number of link state acknowledgement packets. TxQ-Len The transmission queue length. RxQ-Len The reception queue length. Tx-Mark The highest number mark in the transmission queue. Rx-Mark The highest number mark in the reception queue. Hello-Q The queue, for transmission or reception, for the hello packets.
PAGE 967
LSAck RX 2 TX 2 34 0 26 2 1 3 34 0 25 3 1 3 OSPF Global Queue Length TxQ-Len RxQ-Len Tx-Mark Rx-Mark Hello-Q 0 0 1 1 LSR-Q 0 0 1 1 Other-Q 0 0 2 2 Error packets (Receive statistics) Intf-Down 0 Non-Dr 0 Self-Org 0 Wrong-Len 0 Invld-Nbr 0 Nbr-State 0 Auth-Err 0 MD5-Err 0 Chksum 0 Version 0 AreaMis 0 Conf-Issues 0 No-Buffer 0 Seq-No 0 Socket 0 Q-OverFlow 0 Unknown-Pkt 0 RtidZero 0 Error packets (Transmit statistics) Socket Errors 0 Dell# Usage Information Example (Statistics) Related Commands
PAGE 968
show ip ospf timers rate-limit Show the LSA currently in the queue waiting for timers to expire. Syntax show ip ospf process-id timers rate-limit Parameters Defaults process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process. none Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 969
Usage Information To isolate problems with inter-area and external routes, use this command. In OSPF inter-area and external routes are calculated by adding LSA cost to the cost of reaching the router. If an inter-area or external route is not of correct cost, the display can determine if the path to the originating router is correct or not. Example Dell#show ip ospf 1 topology Router ID 3.3.3.3 1.1.1.1 Dell# Flags Cost E/B/-/ 1 E/-/-/ 1 Nexthop 20.0.0.3 10.0.0.
PAGE 970
To return to the default, use the no timers spf command. Parameters delay Enter a number as the delay. The range is from 0 to 2147483647. The default is 5 seconds. holdtime Enter a number as the hold time. The range is from 0 to 2147483647. The default is 10 seconds. msec Enter the keyword msec to specify the time interval value in milli seconds. NOTE: If you do not specify the msec option, the timer values are considered as seconds.
PAGE 971
Defaults hold-interval Set the next interval to send the same LSA. This interval is the time between sending the same LSA after the start-interval has been attempted. The range is from 1 to 600,000 milliseconds. max-interval Set the maximum amount of time the system waits before sending the LSA. The range is from 1 to 600,000 milliseconds.
PAGE 972
OSPFv3 Commands The fundamental mechanisms of OSPF (flooding, DR election, area support, SPF calculations, and so on) remain unchanged. However, OSPFv3 runs on a per-link basis instead of on a per-IP-subnet basis. Most changes were necessary to handle the increased address size of IPv6. The Dell Networking implementation of OSPFv3 is based on IETF RFC 2740. area authentication Configure an IPsec authentication policy for OSPFv3 packets in an OFSPFv3 area.
PAGE 973
An SPI number must be unique to one IPsec security policy (authentication or encryption) on the router. If you have enabled IPsec encryption in an OSPFv3 area with the area encryption command, you cannot use the area authentication command in the area at the same time. The configuration of IPsec authentication on an interface-level takes precedence over an area-level configuration. If you remove an interface configuration, an area authentication policy that has been configured is applied to the interface.
PAGE 974
Valid values: 0 (key is not encrypted) or 7 (key is encrypted). key Text string used in authentication. For MD5 authentication, the key must be 32 hex digits (non-encrypted) or 64 hex digits (encrypted). For SHA-1 authentication, the key must be 40 hex digits (non-encrypted) or 80 hex digits (encrypted). null Defaults Not configured.
PAGE 975
no-redistribution (OPTIONAL) Specify that the redistribute command does not distribute routes into the NSSA. This command can be used when the router is an autonomous system boundary router (ASBR) or area border router (ABR). default-informationoriginate (OPTIONAL) Allows external routing information to be imported into the NSSA by using Type 7 default. no-summary (OPTIONAL) Specify that no summary LSAs should be sent into the NSSA. Defaults Not configured.
PAGE 976
Parameters ref-bw (OPTIONAL) Specify a reference bandwidth in megabits per second. The range is from 1 to 4294967. The default is 100 megabits per second. Defaults 100 megabits per second. Command Modes ROUTER OSPFv3 Supported Modes Full-Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command.
PAGE 977
debug ipv6 ospf Display debug information and interface types on OSPF IPv6 packets or events. Syntax Parameters debug ipv6 ospf {packet | events} [interface] interface Command Modes EXEC Privilege Supported Modes Full—Switch Command History (OPTIONAL) Enter one of the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 978
Usage Information Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following section describes the command fields. Lines Beginning With or Including Description OSPFv3... Debugging is on for all OSPFv3 packets and all interfaces. 05:21:01 Displays the time stamp. Sending Ver:3 Sending OSPF3 version..
PAGE 979
• vrf vrf-name For a VLAN interface, enter the keyword vlan then a number from 1 to 4094. Enter the keyword vrf to view debugging information on OSPF corresponding to that VRF. Command Modes EXEC Privilege Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.
PAGE 980
Lines Beginning With or Including Description Chksum: Displays the OSPFv3 checksum. debug ipv6 ospf packet Display debug information and interface types on OSPF IPv6 packets. Syntax debug ipv6 ospf packet [interface] [vrf vrf-name] [detail] Parameters interface (OPTIONAL) Enter one of the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 981
Version Description 7.4.1.0 Introduced on E-Series. Lines Beginning With or Including Description OSPFv3... Debugging is on for all OSPFv3 packets and all interfaces. 05:21:01 Displays the time stamp. Sending Ver:3 Sending OSPF3 version..
PAGE 982
Command History Usage Information This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.11.0.0 Introduced the command. The following section describes the command fields. Lines Beginning With or Including Description OSPFv3... Debugging is on for all OSPFv3 packets and all interfaces. 05:21:01 Displays the time stamp. Sending Ver:3 Sending OSPF3 version..
PAGE 983
graceful-restart grace-period Enable OSPFv3 graceful restart globally by setting the grace period (in seconds) that an OSPFv3 router’s neighbors continues to advertise the router as adjacent during a graceful restart. Syntax graceful-restart grace-period seconds To disable OSPFv3 graceful restart, enter no graceful-restart grace-period. Parameters seconds Time duration, in seconds, that specifies the duration of the restart process before OSPFv3 terminates the process.
PAGE 984
Command Modes ROUTER OSPFv3 Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. OSPFv3 graceful restart supports planned-only and/or unplanned-only restarts. The default is support for both planned and unplanned restarts. • A planned restart occurs when you enter the redundancy force-failover rpm command to force the primary RPM to switch to the backup RPM.
PAGE 985
To remove an IPsec authentication policy from an interface, use the no ipv6 ospf authentication spi number command. To remove null authentication on an interface to allow the interface to inherit the authentication policy configured for the OSPFv3 area, use the no ipv6 ospf authentication null command. Parameters null Causes an authentication policy configured for the area to not be inherited on the interface. ipsec spi number Security Policy index (SPI) value that identifies an IPsec security policy.
PAGE 986
To disable all BFD sessions on an OSPFv3 interface implicitly, use the no ipv6 ospf bfd all-neighbors disable command. Parameters disable (OPTIONAL) Enter the keyword disable to disable BFD on this interface. interval milliseconds (OPTIONAL) Enter the keyword interval to specify non-default BFD session parameters beginning with the transmission interval. The range is from 50 to 1000. The default is 100.
PAGE 987
Defaults Default cost based on the bandwidth. Command Modes INTERFACE Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 988
To remove null authentication on an interface to allow the interface to inherit the authentication policy configured for the OSPFv3 area, use the no ipv6 ospf encryption null command. Parameters null Causes an encryption policy configured for the area to not be inherited on the interface. ipsec spi number Security Policy index (SPI) value that identifies an IPsec security policy. The range is from 256 to 4294967295. esp encryptionalgorithm Encryption algorithm used with ESP.
PAGE 989
An SPI value must be unique to one IPsec security policy (authentication or encryption) on the router. Configure the same encryption policy (same SPI and key) on each OSPFv3 interface in a link. ipv6 ospf graceful-restart helper-reject Configure an OSPFv3 interface to not act upon the Grace LSAs that it receives from a restarting OSPFv3 neighbor. Syntax ipv6 ospf graceful-restart helper-reject To disable the helper-reject role, use the no ipv6 ospf graceful-restart helper-reject command.
PAGE 990
Usage Information The time interval between hello packets must be the same for routers in a network. ipv6 ospf priority To determine the Designated Router for the OSPFv3 network, set the priority of the interface. Syntax ipv6 ospf priority number To return to the default time interval, use the no ipv6 ospf priority command. Parameters number Defaults 1 Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Enter the number as the priority.
PAGE 991
maximum-paths Enable the software to forward packets over multiple paths. Syntax maximum-paths number To disable packet forwarding over multiple paths, use the no maximum-paths command. Parameters number Specify the number of paths. The range is from 1 to 64. The default is 8 paths. Defaults 4 Command Modes ROUTER OSPF for OSPFv3 Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Added support for OSPFv3. 8.3.16.
PAGE 992
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Added support for OSPFv3. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, no interfaces are passive. Routing updates are sent to all interfaces on which the routing protocol is enabled.
PAGE 993
route-map mapname (OPTIONAL) Enter the keywords route-map then the name of an established route map. If the route map is not configured, the default is deny (to drop all routes). tag tag-value (OPTIONAL) Enter the keyword tag to set the tag for routes redistributed into OSPFv3. The range is from 0 to 4294967295 The default is 0. Defaults Not configured. Command Modes ROUTER OSPF for OSPFv2 ROUTER OSPFv3 for OSPFv3 Supported Modes Command History Full–Switch Version Description 9.9(0.
PAGE 994
Usage Information You can configure an arbitrary value in the IP address for each router. However, each router ID must be unique. If this command is used on an OSPFv3 process that is already active (has neighbors), all the neighbor adjacencies are brought down immediately and new sessions are initiated with the new router ID. Example Dell(conf)#router ospf 100 Dell(conf-router_ospf)#router-id 1.1.1.
PAGE 995
Parameters interface interface Defaults none Command Modes EXEC (OPTIONAL) Displays information about the SAs used on a specified OSPFv3 interface, where interface is one of the following values: • For a Port Channel interface, enter port-channel then the port channel number. • For a 10-Gigabit Ethernet interface, enter TenGigabitEthernet then the slot/ port number. • For a VLAN interface, enter vlan vlan-id. The valid VLAN IDs range is from 1 to 4094.
PAGE 996
Usage Information Version Description 9.2(0.0) Introduced on the M I/O Aggregator. The show crypto ipsec sa ipv6 command output displays security associations set up for OSPFv3 links in IPsec authentication and encryption policies on the router. show ipv6 ospf interface View OSPFv3 interface information.
PAGE 997
show ipv6 ospf neighbor Display the OSPF neighbor information on a per-interface basis. Syntax Parameters show ipv6 ospf neighbor [interface] interface Defaults none Command Modes EXEC (OPTIONAL) Enter the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128.
PAGE 998
Usage Information Use SNMPv3 context configuration to distinguish between various OSPFv3 VRF instances. Example DellEMC(conf-ipv6-router_ospf)#snmp context ospf1 DellEMC>show runnig-config ospf ! ipv6 router ospf 10 router-id 10.10.10.1 snmp context ospf1 ! DellEMC> timers spf Set the time interval between when the switch receives a topology change and starts a shortest path first (SPF) calculation. Syntax timers spf delay holdtime msec To return to the default, use the no timers spf command.
PAGE 999
Dell(conf)#ipv6 router ospf 1 Dell(conf-ipv6-router_ospf)#timer spf 2 5 msec Dell(conf-ipv6-router_ospf)# Dell(conf-ipv6-router_ospf)#show config ! ipv6 router ospf 1 timers spf 2 5 msec Dell(conf-ipv6-router_ospf)# Dell(conf-ipv6-router_ospf)#end Dell# Open Shortest Path First (OSPFv2 and OSPFv3) 999
PAGE 1000
43 Policy-based Routing (PBR) Policy-based routing (PBR) allows you to apply routing policies to specific interfaces. To enable PBR, create a redirect list and apply it to the interface. After the redirect list is applied to the interface, all traffic passing through the interface is subject to the rules defined in the redirect list. PBR is supported by the Dell Networking operating software (OS).
PAGE 1001
ip redirect-group Apply a redirect list (policy-based routing) on an interface. You can apply multiple redirect lists to an interface by entering this command multiple times. Syntax ip redirect-group redirect-list-nametest [l2–switch] To remove a redirect list from an interface, use the no ip redirect-group name command. Parameters redirect-list-name Enter the name of a configured redirect list. l2–switch Enter the keyword l2–switch to enable PBR on Layer2 (switched) traffic.
PAGE 1002
• show ip redirect-list – displays the redirect-list configuration. ip redirect-list Configure a redirect list and enter REDIRECT-LIST mode. Syntax ip redirect-list redirect-list-name To remove a redirect list, use the no ip redirect-list command. Parameters redirect-list-name Defaults none Command Modes CONFIGURATION Supported Modes Full—Switch Command History Enter the name of a redirect list. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 1003
mask Enter a network mask in /prefix format (/x). any Enter the keyword any to specify that all traffic is subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address. destination Enter the IP address of the network or host to which the packets are sent.
PAGE 1004
• Parameters You can also use the no redirect {ip-address | slot/port}| tunnel tunnel-id}[track ]{ip-protocol-number [bit] | protocol-type} {source mask | any | host ip-address} {destination mask | any | host ip-address} [operator] command. ip-address Enter the IP address of the forwarding router. slot/port Enter the keyword slot / port followed by the slot/port information. ip-protocol-number Enter a number from 0 to 255 for the protocol identified in the IP protocol header.
PAGE 1005
Command Modes REDIRECT-LIST Supported Modes Full—Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Added the keyword track-id on the MXL. 9.4(0.0) Introduced on the MXL 10/40GbE Switch IO Module. 8.4.2.1 Introduced on the C-Series. 8.4.2.0 Introduced on the E-Series TeraScale. seq Configure a filter with an assigned sequence number for the redirect list.
PAGE 1006
host ip-address Enter the keyword host then the IP address to specify a host IP address. destination Enter the IP address of the network or host to which the packets are sent. bit (OPTIONAL) For the TCP protocol type only, enter one or a combination of the following TCP flags: operator • fin = finish (no more data from the user) • psh = push function • rst = reset the connection • syn = synchronize sequence number • urg = urgent field (OPTIONAL) For the TCP and UDP parameters only.
PAGE 1007
show cam pbr Displaysthe PBR CAM content. Syntax Parameters show cam pbr {[interface interface] | stack—unit slot-number port-set number]} [summary] interface interface Enter the keyword interface then the name of the interface. stack–unit number Enter the keyword stack-unit then the slot number. The range is from 0 to 11 . port-set number Enter the keywords port-set then the port-pipe number. The range is from 0 to 0. summary Enter the keyword summary to view only the total number of CAM entries.
PAGE 1008
Parameters Command Modes Supported Modes Command History Example redirect-list-name • EXEC • EXEC Privilege Enter the name of a configured Redirect list. Full—Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Added support for removing the Sonet interface on the MXL. 7.4.1.0 Introduced. Dell#show ip redirect-list explicit_tunnel IP redirect-list explicit_tunnel: Defined as: seq 5 redirect tunnel 1 track 1 tcp 155.55.2.0/24 222.22.2.
PAGE 1009
44 PIM-Sparse Mode (PIM-SM) The protocol-independent multicast (PIM) commands are supported by the Dell Networking Operating System (OS).
PAGE 1010
• ipv6 pim neighbor-filter • ipv6 pim register-filter • ipv6 pim rp-address • ipv6 pim rp-candidate • ipv6 pim sparse-mode • ipv6 pim spt-threshold • show ipv6 pim bsr-router • show ipv6 pim interface • show ipv6 pim neighbor • show ipv6 pim rp • show ipv6 pim tib IPv4 PIM-Sparse Mode Commands The following describes the IPv4 PIM-sparse mode (PIM-SM) commands.
PAGE 1011
Usage Information Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. If you use this command on a local VLT node, all multicast routes from the local PIM TIB, the entire multicast route table, and all the entries in the data plane are deleted. The local VLT node sends a request to the peer VLT node to download multicast routes learned by the peer. Both local and synced routes are removed from the local VLT node multicast route table.
PAGE 1012
Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip pim bsr-border Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per interface. Syntax ip pim bsr-border To return to the default value, use the no ip pim bsr-border command. Defaults Disabled. Command Modes INTERFACE Supported Modes Full—Swtich Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 1013
Supported Modes Command History Full—Swtich Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ip pim dr-priority Change the designated router (DR) priority for the interface. Syntax ip pim dr-priority priority-value To remove the DR priority value assigned, use the no ip pim dr-priority command.
PAGE 1014
Usage Information Command History When you configure a join filter, it is applicable for both ingress and egress flows. There is no option to specify in or out parameters while configuring a join filter. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Example Dell(conf)# ip access-list extended iptv-channels Dell(config-ext-nacl)# permit ip 10.1.2.3/24 225.1.1.0/24 Dell(config-ext-nacl)# permit ip any 232.1.1.
PAGE 1015
Parameters access-list Defaults none Command Modes CONFIGURATION Supported Modes Full—Switch Command History Usage Information Enter the name of a standard access list. Maximum 16 characters. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Do not enter this command before creating the access-list. ip pim query-interval Change the frequency of PIM Router-Query messages.
PAGE 1016
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The access name is an extended IP access list that denies PIM register packets to RP at the source DR based on the multicast and group addresses. Do not enter this command before creating the access-list. ip pim rp-address Configure a static PIM rendezvous point (RP) address for a group or access-list.
PAGE 1017
Parameters interface For a Loopback interface, enter the keyword loopback then a number from 0 to 16383. • For a Port Channel interface, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. (OPTIONAL) Enter the priority used in Bootstrap election process. The range is zero (0) to 255. The default is 192.
PAGE 1018
ip pim sparse-mode sg-expiry-timer Enable expiry timers globally for all sources, or for a specific set of (S,G) pairs an access list defines. Syntax ip pim sparse-mode sg-expiry-timer seconds [access-list name] To disable configured timers and return to default mode, use the no ip pim sparse-mode sg-expirytimer command. Parameters seconds Enter the number of seconds the S, G entries are retained. The range is from 211 to 86400.
PAGE 1019
no ip pim snooping dr-flood Disable the flooding of multicast packets to the PIM designated router. Syntax no ip pim snooping dr-flood To re-enable the flooding of multicast packets to the PIM designated router, use the ip pim snooping drflood command. Defaults Enabled. Command Modes CONFIGURATION Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1020
Example E600-7-rpm0#show ip pim bsr-router PIMv2 Bootstrap information This system is the Bootstrap Router (v2) BSR address: 7.7.7.7 (?) Uptime: 16:59:06, BSR Priority: 0, Hash mask length: 30 Next bootstrap message in 00:00:08 This system is a candidate BSR Candidate BSR address: 7.7.7.7, priority: 0, hash mask length: 30 show ip pim interface View information on the interfaces with IP PIM enabled.
PAGE 1021
172.21.110.1 172.21.203.1 te 1/6 te 1/7 v2/S 0 v2/S 0 30 1 30 1 172.21.110.1 172.21.203.1 show ip pim neighbor View PIM neighbors. Syntax Command Modes Supported Modes Command History Usage Information show ip pim neighbor • EXEC • EXEC Privilege Full—Swtich Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim neighbor command shown in the following example.
PAGE 1022
Parameters Command Modes Supported Modes Command History mapping (OPTIONAL) Enter the keyword mapping to display the multicast groups-to-RP mapping and information on how RP is learnt. group-address (OPTIONAL) Enter the multicast group address mask in dotted decimal format to view RP for a specific group. • EXEC • EXEC Privilege Full—Swtich Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1023
• Supported Modes Command History Usage Information Example (#2) EXEC Privilege Full—Swtich Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim snooping interface commands shown in the following example. Field Description Interface Displays the VLAN interfaces with PIM-SM snooping enabled.
PAGE 1024
Usage Information The following describes the show ip pim snooping neighbor commands shown in the following example. Field Description Neighbor address Displays the IP address of the neighbor learned through PIM-SM snooping. Interface Displays the VLAN ID number and slot/port on which the PIM-SM-enabled neighbor was discovered.
PAGE 1025
Usage Information Example Version Description 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show ip pim snooping tib commands shown in the following example. Field Description (S, G) Displays the entry in the PIM multicast snooping database. uptime Displays the amount of time the entry has been in the PIM multicast route table. expires Displays the amount of time until the entry expires and is removed from the database.
PAGE 1026
(165.87.1.7, 225.1.2.1), uptime 00:00:08, expires 00:02:52, flags: j Incoming interface: Vlan 2, RPF neighbor 0.0.0.0 Outgoing interface list: TenGigabitEthernet 4/7 Upstream Port -/TenGigabitEthernet 4/6 DR Port -/TenGigabitEthernet 4/8 RPF 165.87.32.10 00:00:08/00:02:52 show ip pim summary View information about PIM-SM operation. Syntax show ip pim summary Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege Full—Swtich Version Description 9.9(0.
PAGE 1027
0/0 register messages sent/received Memory usage: TIB Nexthop cache Interface table Neighbor table RP Mapping : : : : : 3768 bytes 0 bytes 992 bytes 528 bytes 0 bytes show ip pim tib View the PIM tree information base (TIB). Syntax Parameters Command Modes Supported Modes Command History Usage Information show ip pim tib [group-address [source-address]] group-address (OPTIONAL) Enter the group address in dotted decimal format (A.B.C.D).
PAGE 1028
Example Field Description Incoming interface Displays the reverse path forwarding (RPF) interface towards the RP/ source. RPF neighbor Displays the next hop from this interface towards the RP/source.
PAGE 1029
Example Dell#show running-config pim ! ip pim snooping enable Related Commands ip pim sparse-mode — enables PIM-SM snooping. IPv6 PIM-Sparse Mode Commands The following describes the IPv6 PIM-sparse mode (PIM-SM) commands. ipv6 pim bsr-border Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per interface. Syntax ipv6 pim bsr-border Defaults Disabled. Command Modes INTERFACE Supported Modes Full—Swtich Command History Usage Information Version Description 9.
PAGE 1030
Defaults Refer to Parameters. Command Modes CONFIGURATION Supported Modes Full—Swtich Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. ipv6 pim dr-priority Change the designated router (DR) priority for the IPv6 interface. Syntax ipv6 pim dr-priority priority-value To remove the DR priority value assigned, use the no ipv6 pim dr-priority command.
PAGE 1031
Supported Modes Command History Example Full—Swtich Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1032
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Do not enter this command before creating the access-list. ipv6 pim register-filter Configure the source DR so that it does not send register packets to the RP for the specified sources and groups.
PAGE 1033
override Enter the keyword override to override the BSR updates with static RP. The override takes effect immediately during enable/disable. NOTE: This option is applicable to multicast group range. Defaults none Command Modes CONFIGURATION Supported Modes Full—Swtich Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The RP addresses are stored in the order in which they are entered.
PAGE 1034
ipv6 pim sparse-mode Enable IPv6 PIM sparse mode on the interface. Syntax ipv6 pim sparse-mode To disable IPv6 PIM sparse mode, use the no ipv6 pim sparse-mode command. Defaults Disabled. Command Modes INTERFACE Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Enable the interface (use the no shutdown command) and not have the switchport command configured.
PAGE 1035
show ipv6 pim bsr-router View information on the Bootstrap router (v2). Syntax Command Modes Supported Modes Command History Example show ipv6 pim bsr-router • EXEC • EXEC Privilege Full—Swtich Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1036
DR : this router Dell# show ipv6 pim neighbor Displays IPv6 PIM neighbor information. Syntax show ipv6 pim neighbor [detail] Parameters Supported Modes Command Modes Command History Example detail (OPTIONAL) Enter the keyword detail to displayed PIM neighbor detailed information. Full—Swtich • EXEC • EXEC Privilege Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1037
Example Dellshow ipv6 pim rp Group RP ff0e::225:1:2:1 14::1 ff0e::225:1:2:2 14::1 ff0e::226:1:2:1 14::1 ff0e::226:1:2:2 14::1 Dell Example (Mapping) Dellshow ipv6 pim rp mapping PIM Group-to-RP Mappings Group(s): ff00::/8 RP: 14::1, v2 Info source: 14::1, via bootstrap, priority 192 Uptime: 00:03:37, expires: 00:01:53 Group(s): ff00::/8, Static RP: 14::2, v2 Dell show ipv6 pim tib View the IPv6 PIM multicast-routing database (tree information base — tib).
PAGE 1038
TenGigabitEthernet 1/1 (25::1, ff0e::225:1:2:2), uptime 00:09:54, expires 00:00:00,flags: CJ RPF neighbor: TenGigabitEthernet 0/3, fe80::201:e8ff:fe00:6265 Outgoing interface list: TenGigabitEthernet 1/1 (25::2, ff0e::225:1:2:2), uptime 00:09:54, expires 00:00:00,flags: CJ RPF neighbor: TenGigabitEthernet 0/3, fe80::201:e8ff:fe00:6265 Outgoing interface list: TenGigabitEthernet 1/1 (25::1, ff0e::226:1:2:1), uptime 00:09:54, expires 00:00:00,flags: CJ RPF neighbor: TenGigabitEthernet 0/3, fe80::201:e8ff:fe00
PAGE 1039
45 Port Monitoring The port monitoring feature allows you to monitor network traffic by forwarding a copy of each incoming or outgoing packet from one port to another port. Important Points to Remember • Port monitoring is supported on physical ports only. Port-channel interfaces and virtual local area networks (VLANs), are not supported. • The monitoring (destination, “MG”) and monitored (source, “MD”) ports must be on the same switch.
PAGE 1040
description Enter a description of this monitoring session. Syntax description {description} To remove the description, use the no description {description} command. Parameters description Enter a description regarding this session (80 characters maximum). Defaults none Command Modes MONITOR SESSION (conf-mon-sess-session-ID) Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.
PAGE 1041
Related Commands Version Description 9.11(0.0) Introduced GRE protocol support. • monitor session — creates a session for monitoring traffic with port monitoring. • show monitor session — displays information about monitor configurations. flow-based enable Enable flow-based monitoring. Syntax flow-based enable To disable flow-based monitoring, use the no flow-based enable command. Defaults Disabled, that is flow-based monitoring is not applied.
PAGE 1042
Supported Modes Full—Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Introduced on the MXL 10/40GbE Switch IO Module. monitor session — enables a monitoring session.
PAGE 1043
Usage Information The monitor command is saved in the running configuration at Monitor Session mode level and can be restored after a chassis reload. Example Dell(conf)# monitor session 60 Dell(conf-mon-sess-60) Related Command show monitor session — displays the monitor session. show running-config monitor session — displays the running configuration of a monitor session. show config Display the current monitor session configuration.
PAGE 1044
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. Dell#show monitor session 5 SessionID Source Destination Direction Mode --------- ---------------- --------- ---5 Te 0/4 Te 0/3 rx interface Dell# Related Commands Type ---Port-based monitor session — creates a session for monitoring. show running-config monitor session Displays the running configuration of all monitor sessions or a specific session.
PAGE 1045
source (port monitoring) Configure a port monitor source. Syntax source interface destination interface direction {rx | tx | both} To disable a monitor source, use the no source interface destination interface direction {rx | tx | both} command. Parameters interface Enter the one of the following keywords and slot/port information: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1046
46 Private VLAN (PVLAN) Private VLANs extend the Dell Networking OS security suite by providing Layer 2 isolation between ports within the same private VLAN. A private VLAN partitions a traditional VLAN into subdomains identified by a primary and secondary VLAN pair. The Dell Networking OS private VLAN implementation is based on RFC 3069. For more information, refer to the following commands. The command output is augmented in the Dell Networking OS version 7.8.1.
PAGE 1047
Topics: • ip local-proxy-arp • private-vlan mapping secondary-vlan • private-vlan mode • show interfaces private-vlan • show vlan private-vlan • show vlan private-vlan mapping • switchport mode private-vlan ip local-proxy-arp Enable/disable Layer 3 communication between secondary VLANs in a private VLAN. Syntax [no] ip local-proxy-arp To disable Layer 3 communication between secondary VLANs in a private VLAN, use the no ip local-proxyarp command in INTERFACE VLAN mode for the primary VLAN.
PAGE 1048
private-vlan mapping secondary-vlan Map secondary VLANs to the selected primary VLAN. Syntax [no] private-vlan mapping secondary-vlan vlan-list To remove specific secondary VLANs from the configuration, use the no private-vlan mapping secondary-vlan vlan-list command syntax. Parameters vlan-list Defaults none Command Modes INTERFACE VLAN Supported Modes Full—Switch Command History Usage Information Related Commands Enter the list of secondary VLANs to associate with the selected primary VLAN.
PAGE 1049
isolated Enter the keyword isolated to configure the VLAN as an isolated VLAN. primary Enter the keyword primary to configure the VLAN as a primary VLAN. Defaults none Command Modes INTERFACE VLAN Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The VLAN: • can be in only one mode, either community, isolated, or primary.
PAGE 1050
Supported Modes Command History Usage Information Full—Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command has two types of display — a list of all PVLAN interfaces or for a specific interface. Examples of both types of output are shown below. The following describes the show interfaces private-vlan command shown in the following examples.
PAGE 1051
Defaults Command Modes Supported Modes Command History Usage Information isolated (OPTIONAL) Enter the keyword isolated to display VLANs configured as isolated VLANs, along with their interfaces. primary (OPTIONAL) Enter the keyword primary to display VLANs configured as primary VLANs, along with their interfaces. primary_vlan (OPTIONAL) Enter a private VLAN ID or secondary VLAN ID to display interface details about the designated PVLAN.
PAGE 1052
Example (Isolated) Dell# show vlan private-vlan isolated Primary Secondary Type Active Ports ------- --------- --------- ------ ---------10 primary Yes Gi 2/1,3 100 isolated Yes Gi 2/2,4-6 200 isolated Yes Gi 3/2,4-6 Example (Community) Dell# show vlan private-vlan community Primary Secondary Type Active Ports ------- --------- --------- ------ ----------10 primary Yes Gi 2/1,3 101 community Yes Gi 2/7-10 20 primary Yes Po 10, 12-13 Gi 3/1 201 community No 202 community Yes Gi 3/11-12 Example (Specific)
PAGE 1053
• Supported Modes Command History EXEC Privilege Full—Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced the on MXL 10/40GbE Switch IO Module. Usage Information The output of this command, shown below, displays the community and isolated VLAN IDs that are associated with each primary VLAN.
PAGE 1054
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The assignment of the various PVLAN port types to port and port channel (LAG) interfaces is shown in the following example.
PAGE 1055
47 Per-VLAN Spanning Tree Plus (PVST+) The Dell Networking Operating System (OS) implementation of per-VLAN spanning tree plus (PVST+) is based on the IEEE 802.1w standard spanning tree protocol, but it creates a separate spanning tree for each VLAN configured. NOTE: For easier command line entry, the plus (+) sign is not used at the command line.
PAGE 1056
disable Disable PVST+ globally. Syntax disable To enable PVST+, use the no disable command. Defaults Disabled. Command Modes CONFIGURATION (conf-pvst) Supported Modes Full—Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol spanning-tree pvst — enter PVST+ mode. edge-port bpdufilter default Enable BPDU Filter globally to filter transmission of BPDU on port fast enabled interfaces.
PAGE 1057
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-pvst)#do show spanning-tree pvst vlan 2 brief VLAN 2 Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 001e.c9f1.00f3 Root Bridge hello time 2, max age 20, forward delay 15 Bridge ID Priority 32768, Address 001e.c9f1.
PAGE 1058
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#conf Dell(conf)#protocol spanning-tree pvst Dell(conf-pvst)#no disable Dell(conf-pvst)#vlan 2 bridge-priority 4096 Dell(conf-pvst)#vlan 3 bridge-priority 16384 Dell(conf-pvst)# Dell(conf-pvst)#show config ! protocol spanning-tree pvst no disable vlan 2 bridge-priority 4096 vlan 3 bridge-priority 16384 Dell# Usage Information After you enable PVST+, the device runs an STP instance for each VLAN it supports.
PAGE 1059
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The following describes the show spanning-tree pvst command shown in the following examples. Field Description Interface Name PVST interface. Instance PVST instance. Sts Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS), blocking (BLK), or shut down (EDS Shut). Guard Type Type of STP guard configured (Root, Loop, or BPDU guard).
PAGE 1060
Port 450 (TenGigabitEthernet 0/1) is disabled Discarding Port path cost 2000, Port priority 128, Port Identifier 128.450 Designated root has priority 32768, address 001e.c9f1.00:f3 Designated bridge has priority 32768, address 001e.c9f1.00:f3 Designated port id is 128.
PAGE 1061
spanning-tree pvst Configure a PVST+ interface with one of these settings: edge port with optional bridge port data unit (BPDU) guard, port disablement if an error condition occurs, port priority or cost for a VLAN range, loop guard, or root guard. Syntax Parameters spanning-tree pvst {edge-port [bpduguard [shutdown-on-violation]] | bpdufilter] | err-disable | vlan vlan-range {cost number | priority value} | rootguard} edge-port Enter the keywords edge-port to configure the interface as a PVST+ edge port.
PAGE 1062
Disable state if a BPDU appears, and a message is logged so that the administrator can take corrective action. When BPDU guard and BPDU filter is enabled on the port, then BPDU filter takes the highest precedence. NOTE: A port configured as an edge port, on a PVST switch, will immediately transition to the forwarding state. Only ports connected to end-hosts should be configured as an edge port. Consider an edge port similar to a port with a spanning-tree portfast enabled.
PAGE 1063
tc-flush-standard Enable the MAC address flushing after receiving every topology change notification. Syntax tc-flush-standard To disable, use the no tc-flush-standard command. Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full—Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. By default, the system implements an optimized flush mechanism for PVST+.
PAGE 1064
show spanning-tree pvst — displays the PVST+ configuration. vlan forward-delay Set the amount of time the interface waits in the Listening state and the Learning state before transitioning to the Forwarding state. Syntax vlan vlan-id forward-delay seconds To return to the default setting, use the no vlan forward-delay command. Parameters vlan vlan-range Enter the keyword vlan then the VLAN numbers. The range is from 1 to 4094.
PAGE 1065
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. vlan bridge-priority — sets the bridge-priority value. vlan forward-delay — changes the time interval before the system transitions to the forwarding state. vlan max-age — changes the time interval before PVST+ refreshes. show spanning-tree pvst — displays the PVST+ configuration.
PAGE 1066
48 Quality of Service (QoS) The Dell Networking operating software commands for quality of service (QoS) include traffic conditioning and congestion control. QoS commands are not universally supported on all Dell Networking Products. Global Configuration Commands There are only two global configuration QoS commands. qos-rate-adjust By default, while rate limiting, policing, and shaping, the system does not include the Preamble, SFD, or the IFG fields.
PAGE 1067
0 0-7 1 0-7 2 0-7 3 0-7 4 0-7 5 0-7 6 0-7 7 0-7 Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full-Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. To apply dot1p-queue-mapping, use the service-class dynamic dot1p command.
PAGE 1068
dot1p Queue Number 5 5 6 6 7 7 Defaults none Command Modes INTERFACE Supported Modes Programmable-Mux (PMUX) Full-Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The dot1p-priority command changes the priority of incoming traffic on the interface.
PAGE 1069
Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. NOTE: Per port rate police is supported for Layer 2 tagged and untagged switched traffic and for Layer 3 traffic. Per VLAN rate police is supported on only tagged ports with Layer 2 switched traffic.
PAGE 1070
service-class dynamic dot1p Honor all 802.1p markings on incoming switched traffic on an interface (from INTERFACE mode) or on all interfaces (from CONFIGURATION mode). A CONFIGURATION mode entry supersedes an INTERFACE mode entry. Syntax service-class dynamic dot1p To return to the default setting, use the no service-class dynamic dot1p command. Defaults All dot1p traffic is mapped to Queue 0 unless you enable the service-class dynamic dot1p command.
PAGE 1071
service-class bandwidth-percentage Specify a minimum bandwidth for queues. Syntax Parameters service-class bandwidth-percentage queue0 number queue1 number queue2 number queue3 number number Enter the bandwidth-weight, as a percentage. The range is from 1 to 100. Defaults none Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full-Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.
PAGE 1072
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. After you configure a unicast queue as strict-priority, that particular queue, on the entire chassis, is treated as a strict-priority queue. Traffic for a strict priority is scheduled before any other queues are serviced.
PAGE 1073
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The unit of bandwidth percentage is 1%. A bandwidth percentage of 0 is allowed and disables the scheduling of that class. If the sum of the bandwidth percentages given to all eight classes exceeds 100%, the bandwidth percentage automatically scales down to 100%. Related Commands qos-policy-output — creates a QoS output policy. class-map Create/access a class map.
PAGE 1074
match ip dscp configures the match criteria based on the DSCP value. match ip access-group — configures a match criterion for a class map based on the contents of the designated MAC ACL. match mac dot1p — configures a match criterion for a class map based on a dot1p value. match mac vlan — configures a match criterion for a class map based on VLAN ID. service-queue — assigns a class map and QoS policy to different queues. show qos class-map — views the current class map information.
PAGE 1075
Command Modes CONFIGURATION Supporting Modes Full–Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the S6000–ON. 9.5(0.
PAGE 1076
match ip access-group Configure match criteria for a class map, based on the access control list (ACL). Syntax match ip access-group access-group-name [set-ip-dscp value] To remove ACL match criteria from a class map, use the no match ip access-group access-groupname [set-ip-dscp value] command. Parameters access-group-name Enter the ACL name whose contents are used as the match criteria in determining if packets belong to the class the class-map specifies.
PAGE 1077
Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Introduced on the MXL switch. To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria. Use this command to match an IP class-map against a single VLAN ID . Related Commands class-map — identifies the class map. match ip vrf Uses a VRF as the match criterion for an L3 class map.
PAGE 1078
Parameters description Enter a description to identify the policies (80 characters maximum). Defaults none Command Modes CONFIGURATION (policy-map-input and policy-map-output; conf-qos-policy-in and conf-qos-policy-out; wred) Supported Modes Programmable-Mux (PMUX) Full-Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.
PAGE 1079
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria. The match ip dscp and match ip precedence commands are mutually exclusive. Up to 64 IP DSCP values can be matched in one match statement. For example, to indicate IP DCSP values 0 1 2 3 4 5 6 7, enter either the match ip dscp 0,1,2,3,4,5,6,7 or match ip dscp 0-7 command.
PAGE 1080
The match ip precedence command and the match ip dscp command are mutually exclusive. Up to eight precedence values can be matched in one match statement. For example, to indicate the IP precedence values 0 1 2 3, enter either the match ip precedence 0-3 or match ip precedence 0,1,2,3 command. NOTE: Only one of the IP precedence values must be a successful match criterion, not all of the specified IP precedence values must match. Related Commands class-map — identifies the class map.
PAGE 1081
Usage Information To access this command, enter the class-map command. After the class map is identified, you can configure the match criteria. Related Commands class-map — identifies the class map. match mac vlan Configure a match criterion for a class map based on VLAN ID. Syntax Parameters match mac vlan number number Defaults none Command Modes CLASS-MAP Supported Modes Full–Switch Command History Enter the VLAN ID. The range is from 1 to 4094. Version Description 9.9(0.
PAGE 1082
Usage Information Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Aggregate input/output QoS policy applies to all the port ingoing/outgoing traffic. Aggregate input/output QoS policy can coexist with per queue input/output QoS policies. 1 If only aggregate input QoS policy exists, input traffic conditioning configurations (rate-police) apply. Any marking configurations in aggregate input QoS policy are ignored.
PAGE 1083
policy-map-output Create an output policy map. Syntax policy-map-output policy-map-name To remove a policy map, use the no policy-map-output policy-map-name command. Parameters policy-map-name Enter the name for the policy map in character format (32 characters maximum). Defaults none Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.
PAGE 1084
Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To specify the name of the input QoS policy, use this command. After the input policy is specified, rate-police is defined. This command enables Qos-Policy-Input Configuration mode — (conf-qos-policy-in).
PAGE 1085
rate police Police the incoming traffic rate on the selected interface. Syntax Parameters rate police [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [burst-KB]] kbps Enter the keyword kbps to specify the rate limit in Kilobits per second (Kbps). Make the following value a multiple of 64. The range is from 0 to 40000000. The default granularity is Megabits per second (Mbps). committed-rate Enter the bandwidth in Mbps. The range is from 0 to 10000.
PAGE 1086
Command Modes QOS-POLICY-OUT Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. When you apply rate-shape in QoS policy both on the Queue Level and in Aggregate mode, the queue-based shaping occurs first then aggregate rate shaping. service-policy input Apply an input policy map to the selected interface.
PAGE 1087
service-policy output Apply an output policy map to the selected interface. Syntax service-policy output policy-map-name To remove the output policy map from the interface, use the no service-policy output policy-mapname command. Parameters policy-map-name Enter the name for the policy map in character format (16 characters maximum). You can identify an existing policy map or name one that does not yet exist.
PAGE 1088
qos-policy qospolicy-name (OPTIONAL) Enter the keywords qos-policy then the QoS policy name assigned to the queue in text format (32 characters maximum). This specifies the input QoS policy assigned to the queue under policy-map-input and output QoS policy under policy-map-output context. Defaults none Command Modes CONFIGURATION (conf-policy-map-in and conf-policy-map-out) Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM.
PAGE 1089
show qos class-map View the current class map information. Syntax Parameters Defaults Command Modes Supported Modes Command History Example show qos class-map [class-name] class-name (Optional) Enter the name of a configured class map. none • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1090
The following table describes the show qos dcb-map output shown in the example below. Example Field Description State Complete: All mandatory DCB parameters are correctly configured. In progress: The DCB map configuration is not complete. Some mandatory parameters are not configured. PFC Mode PFC configuration in DCB map: On (enabled) or Off. PG Priority group configured in the DCB map. TSA Transmission scheduling algorithm used by the priority group: Enhanced Transmission Selection (ETS).
PAGE 1091
• Supported Modes Command History Example (IPv4) EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1092
Example Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show qos policy-map-input Policy-map-input PolicyMapInput Aggregate Qos-policy-name AggPolicyIn Queue# Class-map-name Qos-policy-name 0 ClassMap1 qosPolicyInput Dell# show qos qos-policy-output View the output QoS policy details. Syntax show qos qos-policy-output [qos-policy-name] Parameters Defaults qos-policy-name Enter the QoS policy name.
PAGE 1093
Parameters Defaults Command Modes Supported Modes Command History Example qos-policy-name Enter the QoS policy name. none • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show qos qos-policy-input Qos-policy-input QosInput Rate-police 100 50 peak 100 50 Dscp 32 Dell# show qos qos-policy-output View the output QoS policy details.
PAGE 1094
show qos statistics View QoS statistics. Syntax show qos statistics {egress—queue [interface]} | {wred-profile [interface]} | [interface Parameters egress-queue interface Enter the keyword egress-queue to display the egress-queue statistics and optionally one of the fo or number information.
PAGE 1095
show qos wred-profile View the WRED profile details. Syntax Parameters Defaults Command Modes Supported Modes Command History Example show qos wred-profile wred-profile-name wred-profile-name Enter the WRED profile name to view the profile details. none • EXEC • EXEC Privilege Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1096
Usage Information This feature allows you to determine if the CAM has enough space available before applying the configuration on an interface. An input policy map with both Trust and Class-map configuration, the Class-map rules are ignored and only the Trust rule is programmed in the CAM. In such an instance, the Estimated CAM output column contains the size of the CAM space required for the Trust rule and not the Class-map rule.
PAGE 1097
trust Specify dynamic classification (DSCP) or dot1p to trust. Syntax Parameters trust {diffserv [fallback]| dot1p [fallback]} diffserv Enter the keyword diffserv to specify trust of DSCP markings. dot1p Enter the keyword dot1p to specify trust dot1p configuration. fallback Enter the keyword fallback to classify packets according to their DSCP value as a secondary option in case no match occurs against the configured class maps.
PAGE 1098
wred Designate the WRED profile to yellow or green traffic. Syntax wred [[{yellow | green} profile-name] ecn] To remove the WRED drop precedence, use the no wred {yellow | green} [profile-name] command. Parameters yellow | green Enter the keyword yellow for yellow traffic. A DSCP value of xxx110 and xxx101 maps to yellow. Enter the keyword green for green traffic. A DSCP value of xxx0xx maps to green. profile-name Enter your WRED profile name in character format (16 character maximum).
PAGE 1099
Command Modes CONFIGURATION (conf-qos-policy-out) Supported Modes Full–Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.0.2.0 Introduced on the S6000. 8.3.19.0 Introduced on the S4820t. 8.3.11.
PAGE 1100
Defaults The five pre-defined WRED profiles. When you configure a new profile, the minimum and maximum threshold defaults to predefined wred_ge_g values. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the M I/O Aggregator. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Use the default pre-defined profiles or configure your own profile.
PAGE 1101
The default setting for each DSCP value (0-63) is green (low drop precedence). This command allows setting the number of specific DSCP values to yellow or red. Important Points to Remember • All DSCP values that are not specified as yellow or red are colored green. • A DSCP value cannot be in both the yellow and red lists. Setting the red or yellow list with any DSCP value that is already in the other list results in an error and no update to that list is made.
PAGE 1102
Related Commands qos dscp-color-map — associates the DSCP color map profile with an interface so that all IP packets received on it is given a color based on that color map dscp — sets the number of specific DSCP values for color map profile to yellow or red. qos dscp-color-policy Associates the DSCP color map profile with an interface so that all IP packets received on it is given a color based on that color map.
PAGE 1103
Parameters summary Enter the summary keyword to display summary information about a color policy on one or more interfaces. Detail Enter the detail keyword to display detailed information about a color policy on one or more interfaces. interface Enter the name of the interface that has color policy configured. Defaults None Command Modes EXEC Supported Modes Full-Switch Command History This guide is platform-specific.
PAGE 1104
Example Display all DSCP color maps. Dell# show qos dscp-color-map Dscp-color-map mapONE yellow 4,7 red 20,30 Dscp-color-map mapTWO yellow 16,55 Display a specific DSCP color map. Dell# show qos dscp-color-map mapTWO Dscp-color-map mapTWO yellow 16,55 Related Commands show qos dscp-color-policy — displays a DSCP Color Policy Configuration show qos dot1p-queue-mapping View dot1p to queue mapping.
PAGE 1105
fallback Enter the keyword fallback to classify packets according to their DSCP value as a secondary option in case no match occurs against the configured class maps. Defaults none Command Modes CONFIGURATION (conf-policy-map-in) Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 1106
49 Routing Information Protocol (RIP) Routing information protocol (RIP) is a distance vector routing protocol. The Dell Networking Operating System (OS) supports both RIP version 1 (RIPv1) and RIP version 2 (RIPv2). The implementation of RIP is based on IETF RFCs 2453 and RFC 1058. For more information about configuring RIP, refer to the Dell Networking OS Configuration Guide.
PAGE 1107
Defaults Enabled. Command Modes ROUTER RIP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. clear ip rip Update all the RIP routes in the routing table. Syntax clear ip rip Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1108
Command Modes EXEC Privilege Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. default-information originate Generate a default route for the RIP traffic. Syntax default-information originate [always] [metric metric-value] [route-map mapname] To return to the default values, use the no default-information originate command.
PAGE 1109
Command Modes ROUTER RIP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command ensures that route information being redistributed is converted to the same metric value. Related Commands redistribute — allows you to redistribute routes learned by other methods. description Enter a description of the RIP routing protocol.
PAGE 1110
Defaults weight = 120 Command Modes ROUTER RIP Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. default-metric — assigns one distance metric to all routes learned using the redistribute command. distribute-list in Configure a filter for incoming routing updates.
PAGE 1111
Parameters prefix-list-name Enter the name of a configured prefix list. interface (OPTIONAL) Identifies the interface type slot/port as one of the following: • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a VLAN, enter the keyword vlan then a number from 1 to 4094. (OPTIONAL) Enter the keyword connected to filter only directly connected routes. ospf (OPTIONAL) Enter the keyword ospf to filter all OSPF routes.
PAGE 1112
ip rip receive version To receive specific versions of RIP, set the interface. The RIP version you set on the interface overrides the version command in ROUTER RIP mode. Syntax ip rip receive version [1] [2] To return to the default, use the no ip rip receive version command. Parameters 1 (OPTIONAL) Enter the number 1 for RIP version 1. 2 (OPTIONAL) Enter the number 2 for RIP version 2.
PAGE 1113
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To enable the interface to send both version of RIP packets, use the ip rip send version 1 2 command. Related Commands ip rip receive version — sets the RIP version for the interface to receive traffic. version — sets the RIP version for the switch software. ip split-horizon Enable split-horizon for RIP data on the interface.
PAGE 1114
Usage Information RIP supports a maximum of 16 ECMP paths. neighbor Define a neighbor router with which to exchange RIP information. Syntax neighbor ip-address To delete a neighbor setting, use the no neighbor ip-address command. Parameters ip-address Defaults Not configured. Command Modes ROUTER RIP Supported Modes Full–Switch Command History Usage Information Enter the IP address, in dotted decimal format, of a router with which to exchange information. Version Description 9.9(0.
PAGE 1115
Usage Information You can enable an unlimited number of RIP networks. RIP operates over interfaces configured with any address the network command specifies. offset-list Specify a number to add to the incoming or outgoing route metrics learned using RIP. Syntax offset-list prefix-list-name {in | out} offset [interface] To delete an offset list, use the no offset-list prefix-list-name {in | out} offset [interface] command.
PAGE 1116
Defaults Not configured. Command Modes ROUTER RIP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command is intended for low-speed interfaces. passive-interface Suppress routing updates on a specified interface. Syntax passive-interface interface To delete a passive interface, use the no passive-interface interface command.
PAGE 1117
To disable redistribution, use the no redistribute {connected | static} command. Parameters connected Enter the keyword connected to specify that information from active routes on interfaces is redistributed. static Enter the keyword static to specify that information from static routes is redistributed. Defaults Not configured. Command Modes ROUTER RIP Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1118
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. router rip To configure and enable RIP, enter ROUTER RIP mode. Syntax router rip To disable RIP, use the no router rip command. Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1119
show ip rip database Display the routes that RIP learns. If the switch learned no RIP routes, no output is generated. Syntax Parameters show ip rip database [ip-address mask] ip-address (OPTIONAL) Specify an IP address in dotted decimal format to view RIP information on that network only. If you enter an IP address, also enter a mask for that IP address. mask (OPTIONAL) Specify a mask, in /network format, for the IP address.
PAGE 1120
show running-config rip Display the current RIP configuration. Syntax show running-config rip Defaults none Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show running-config rip ! router rip distribute-list Test1 in distribute-list Test21 out network 10.0.0.0 passive-interface TenGigabitEthernet 1/4 neighbor 20.20.20.
PAGE 1121
• invalid = 180 seconds • holddown = 180 seconds • flush = 240 seconds Command Modes ROUTER RIP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. If you change the timers on one router, also synchronize the timers on all routers in the RIP domain. version Specify either RIP version 1 or RIP version 2.
PAGE 1122
50 Remote Monitoring (RMON) The Dell Networking Operating System (OS) remote monitoring (RMON) is based on IEEE standards, providing both 32-bit and 64-bit monitoring and long-term statistics collection.
PAGE 1123
rmon alarm Set an alarm on any MIB object. Syntax rmon alarm number variable interval {delta | absolute} rising-threshold value event-number falling-threshold value event-number [owner string] To disable the alarm, use the no rmon alarm number command. Parameters number Enter the alarm integer number from 1 to 65535. The value must be unique in the RMON alarm table. variable Enter the MIB object to monitor. The variable must be in the SNMP OID format; for example, 1.3.6.1.2.1.1.3.
PAGE 1124
rmon collection history Enable the RMON MIB history group of statistics collection on an interface. Syntax rmon collection history {controlEntry integer} [owner name] [buckets number] [interval seconds] To remove a specified RMON history group of statistics collection, use the no rmon collection history {controlEntry integer} command. Parameters controlEntry integer Enter the keyword controlEntry to specify the RMON group of statistics using a value.
PAGE 1125
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. rmon event Add an event in the RMON event table. Syntax rmon event number [log] [trap community] [description string] [owner name] To disable RMON on an interface, use the no rmon event number command. Parameters number Assign an event number in integer format from 1 to 65535. The number value must be unique in the RMON event table.
PAGE 1126
variable The MIB object to monitor. The variable must be in the SNMP OID format; for example, 1.3.6.1.2.1.1.3 The object type must be a 64-bit integer. interval Time, in seconds, the alarm monitors the MIB variables; this is the alarmSampleType in the RMON alarm table. The range is from 5 to 3600 seconds. delta Enter the keyword delta to test the change between MIB variables. This is the alarmSampleType in the RMON alarm table. absolute Enter the keyword absolute to test each MIB variable directly.
PAGE 1127
ether statistics table: 8 entries, 4608 bytes ether history table: 8 entries, 6000 bytes alarm table: 390 entries, 102960 bytes high-capacity alarm table: 5 entries, 1680 bytes event table: 500 entries, 206000 bytes log table: 2 entries, 552 bytes Dell# show rmon alarms Display the contents of the RMON alarm table. Syntax Parameters show rmon alarms [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry.
PAGE 1128
16 17 18 19 20 21 22 Dell# 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 1.3.6.1.2.1.1.3 show rmon events Display the contents of the RMON event table. Syntax show rmon events [index] [brief] Parameters index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON event table in an easy-toread format.
PAGE 1129
18 19 20 21 22 Dell# 18 19 20 21 22 show rmon hc-alarm Display the contents of RMON High-Capacity alarm table. Syntax Parameters show rmon hc-alarm [index] [brief] index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON High-Capacity alarm table in an easy-to-read format. Defaults none Command Modes EXEC Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1130
show rmon history Display the contents of the RMON Ethernet history table. Syntax show rmon history [index] [brief] Parameters index (OPTIONAL) Enter the table index number to display just that entry. brief (OPTIONAL) Enter the keyword brief to display the RMON Ethernet history table in an easy-to-read format Defaults none Command Modes EXEC Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1131
Defaults none Command Modes EXEC Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The log table has a maximum of 500 entries. If the log exceeds that maximum, the oldest log entry is purged to allow room for the new entry.
PAGE 1132
under-size packets: 0 over-size packets: 0 fragment errors: 0 jabber errors: 0 collision: 0 64bytes packets: 0 65-127 bytes packets: 0 128-255 bytes packets: 0 256-511 bytes packets: 0 512-1023 bytes packets: 0 1024-1518 bytes packets: 0 owner: 1 status: OK HC packets received overflow: 0 HC packets received: 0 HC bytes received overflow: 0 HC bytes received: 0 HC 64bytes packets overflow: 0 HC 64bytes packets: 0 HC 65-127 bytes packets overflow: 0 HC 65-127 bytes packets: 0 HC 128-255
PAGE 1133
51 Rapid Spanning Tree Protocol (RSTP) The Dell Networking Operating System (OS) implementation of rapid spanning tree protocol (RSTP) is based on the IEEE 802.1w standard spanning-tree protocol. The RSTP algorithm configures connectivity throughout a bridged local area network (LAN) that is comprised of LANs interconnected by bridges. bridge-priority Set the bridge priority for RSTP. Syntax bridge-priority priority-value To return to the default value, use the no bridge-priority command.
PAGE 1134
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. Optionally, enter an in or out parameter with the optional interface: events Command Modes EXEC Privilege Supported Modes Full–Switch Command History Example • For Receive, enter in. • For Transmit, enter out. (OPTIONAL) Enter the keyword events to debug RSTP events. Version Description 9.9(0.0) Introduced on the FN IOM 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1135
Defaults RSTP is disabled. Command Modes CONFIGURATION RSTP (conf-rstp) Supported Modes Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. protocol spanning-tree rstp — enters SPANNING TREE mode on the switch. forward-delay Configure the amount of time the interface waits in the Listening State and the Learning State before transitioning to the Forwarding State.
PAGE 1136
Defaults 2 seconds Command Modes CONFIGURATION RSTP (conf-rstp) Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The hello time is encoded in BPDUs in increments of 1/256ths of a second. The standard minimum hello time in seconds is 1 second, which is encoded as 256.
PAGE 1137
edge-port bpdufilter default To filter transmission of BPDU on port fast enabled interfaces, enable BPDU Filter globally. Syntax edge-port bpdufilter default To disable global bpdu filter default, use the no edge-port bpdufilter default command. Parameters priority-value Enter a number as the bridge priority value in increments of 4096. The range is from 0 to 61440. The default is 32768.
PAGE 1138
show config View the current configuration for the mode. Only non-default values are displayed. Syntax show config Command Modes CONFIGURATION RSTP (conf-rstp) Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1139
priority priority Enter keyword priority then a value in increments of 16 as the priority. The range is from 0 to 240. The default is 128. rootguard Enter the keyword rootguard to enable root guard on an RSTP port or port-channel interface. Defaults Not configured. Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1140
spanning-tree rstp Configure an RSTP interface with one of these settings: port cost, edge port with optional bridge port data unit (BPDU) guard, port priority, loop guard, or root guard. Syntax spanning-tree rstp {cost port-cost | edge-port [bpduguard [shutdown-onviolation]] | bpdufilter | priority priority | {rootguard}} Parameters cost port-cost Enter the keyword cost then the port cost value. The range is from 1 to 200000.
PAGE 1141
NOTE: A port configured as an edge port, on an RSTP switch, immediately transitions to the Forwarding state. Only configure ports connected to end-hosts as edge ports. Consider an edge port similar to a port with a spanning-tree portfast enabled. If you do not enable shutdown-on-violation, BPDUs are still sent to the RPM CPU. You cannot enable STP root guard and loop guard at the same time on a port.
PAGE 1142
52 Security This chapter describes various types of security commands in the Dell Networking OS, in the following sections: The commands are listed in the following sections: • AAA Accounting Commands • Authentication and Password Commands • RADIUS Commands • TACACS+ Commands • SSH Server and SCP Commands NOTE: Starting with the Dell Networking OS version 7.2.1.0, LEAP with MSCHAP v2 supplicant is implemented.
PAGE 1143
exec Enter the keyword exec to send accounting information when a user has logged in to EXEC mode. commands level Enter the keyword command then a privilege level for accounting of commands executed at that privilege level. name | default Enter one of the following: • For default, the default accounting methods used. Enter the keywords start-stop to send a “start accounting” notice at the beginning of the requested event and a “stop accounting” notice at the end of the event.
PAGE 1144
Defaults Accounting records are recorded for all users. Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator and M I/O Aggregator. Dell Networking OS issues accounting records for all users on the system, including users whose username string, due to protocol translation, is NULL.
PAGE 1145
aaa authorization config-commands Set parameters that restrict (or permit) a user’s access to EXEC level commands. Syntax aaa authorization config-commands Disable authorization checking for CONFIGURATION level commands using the no aaa authorization config-commands command. Defaults Enabled when you configure aaa authorization commands command. Command Modes CONFIGURATION Supported Modes All Modes Command History This guide is platform-specific.
PAGE 1146
Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following table lists the Dell Networking OS version history for this command. Version Description 9.9(0.0) Introduced on the FN IOM. 9.6.(0.0) Supported on the FN I/O Aggregator and M I/O Aggregator. accounting Apply an accounting method list to terminal lines.
PAGE 1147
Supporting Modes Full–Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the S6000–ON. 9.5(0.
PAGE 1148
To return to the default setting, use the no aaa authentication enable {default | method-listname} method [... method2] command. Parameters default Enter the keyword default then the authentication methods to use as the default sequence of methods for the Enable login. The default is default enable. method-list-name Enter a text string (up to 16 characters long) to name the list of enabled authentication methods activated at login. method Enter one of the following methods: ...
PAGE 1149
aaa authentication login Configure AAA Authentication method lists for user access to EXEC mode (Enable log-in). Syntax aaa authentication login {method-list-name | default} method [... method4] To return to the default setting, use the no aaa authentication login {method-list-name | default} command. Parameters method-list-name Enter a text string (up to 16 characters long) as the name of a user-configured method list that can be applied to different lines.
PAGE 1150
NOTE: If authentication fails using the primary method, Dell Networking Operating System (OS) employs the second method (or third method, if necessary) automatically. For example, if the TACACS+ server is reachable, but the server key is invalid, Dell Networking Operating System (OS) proceeds to the next authentication method. The TACACS+ is incorrect, but the user is still authenticated by the secondary method.
PAGE 1151
aaa authorization commands Set parameters that restrict (or permit) a user’s access to EXEC and CONFIGURATION level commands. Syntax aaa authorization commands {level | role role-name}{name | default} {local | tacacs+ | none} Undo a configuration with the no aaa authorization commands {level | role role-name} {name | default} {local | tacacs+ | none} command. Parameters commands level Enter the keyword commands then the command privilege level for command level authorization.
PAGE 1152
Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the S6000-ON. 9.5(0.0) Introduced on the Z9000, S6000, S4820T, S4810, and MXL. By default, access to commands are determined by the user’s role (if defined) or by the user’s privilege level. If the aaa authorization role-only command is enabled, then only the user’s role is used.
PAGE 1153
aaa authorization exec Set parameters that restrict (or permit) a user’s access to EXEC-level commands. Syntax aaa authorization exec {name | default} {local || tacacs+ || if-authenticated || none} To disable authorization checking for EXEC level commands, use the no aaa authorization exec command. Parameters name Define a name for the list of authorization methods. default Define the default list of authorization methods.
PAGE 1154
Once re-authentication is enabled, Dell EMC Networking OS prompts the users to re-authenticate whenever there is a change in authenticators. The change in authentication happens when: • Add or remove an authentication server (RADIUS/TACACS+) • Modify an AAA authentication/authorization list • Change to role-only (RBAC) mode The re-authentication is also applicable for authenticated 802.1x devices.
PAGE 1155
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. To define a password for the level to which you are assigning privilege or access, use the enable password command. privilege level (LINE mode) Change the access level for users on the terminal lines. Syntax privilege level level To delete access to a terminal line, use the no privilege level level command. Parameters level level Enter the keyword level then a number for the access level.
PAGE 1156
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. Usage Information After entering the banner login command, type one or more spaces and a delineator character. Enter the banner text then the second delineator character. When the user is connected to the router, if a message of the day banner is configured, it displays first.
PAGE 1157
Supported Modes Command History All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. Usage Information After entering the banner login command, type one or more spaces and a delineator character. Enter the banner text then the second delineator character. When the user is connected to the router, if a message of the day banner is configured, it displays first.
PAGE 1158
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. Usage Information After entering the banner login command, type one or more spaces and a delineator character. Enter the banner text then the second delineator character. When the user is connected to the router, if a message of the day banner is configured, it displays first.
PAGE 1159
Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. exec-banner Enable the display of a text string when the user enters EXEC mode. Syntax exec-banner To disable the banner on terminal lines, use the no exec-banner command. Defaults Enabled on all lines (if configured, the banner appears). Command Modes LINE Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.
PAGE 1160
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. line — applies an authentication method list to the designated terminal lines. ip access-list standard — names (or selects) a standard access list to filter based on the IP address. ip access-list extended — names (or selects) an extended access list based on the IP addresses or protocols. enable password Change the password for the enable command.
PAGE 1161
“abcd CNTL v ]e”. When the password is created, you do not use the CNTL + v key combination and enter “abcd]e”. NOTE: The question mark (?) is not a supported character. Related Commands show running-config — views the current configuration. privilege level (CONFIGURATION mode) — controls access to the command modes within the switch. enable restricted Allows Dell Networking technical support to access restricted commands.
PAGE 1162
encryption-type (OPTIONAL) Enter the number 5 or 0 as the encryption type. Enter a 5 then a text string as the hidden password. The text string must be a password that was already encrypted by a Dell Networking router. Use this parameter only with a password that you copied from the show runningconfig file of another Dell Networking router. password Enter a text string, up to 32 characters long, as the clear text password. Defaults No password is configured. level = 15.
PAGE 1163
encryption-type (OPTIONAL) Enter the number 8 or 0 as the encryption type. Enter 8 to enter the sha256–based hashed password. password Enter a text string, up to 32 characters long, as the clear text password. Defaults No password is configured. level = 15. Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. Related Commands Version Description 9.10(0.
PAGE 1164
Related Commands aaa authentication login — selects the login authentication methods. password Specify a password for users on terminal lines. Syntax password [encryption-type] password To delete a password, use the no password password command. Parameters encryption-type password (OPTIONAL) Enter either zero (0) or 7 as the encryption type for the password entered. The options are • 0 is the default and means the password is not encrypted and stored as clear text.
PAGE 1165
To return to the default, use the no password-attributes [min-length number] [max-retry number] [lockout-period minutes] [character-restriction [upper number] [lower number] [numeric number] [special-char number]] command. Parameters min-length number (OPTIONAL) Enter the keywords min-length then the number of characters. The range is from 0 to 32 characters. max-retry number (OPTIONAL) Enter the keywords max-retry then the number of maximum password retries. The range is from 0 to 16.
PAGE 1166
To store new passwords as clear text, use the no service password-encryption command. Defaults Enabled. Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information CAUTION: Encrypting passwords with this command does not provide a high level of security. When the passwords are encrypted, you cannot return them to plain text unless you re-configure them.
PAGE 1167
show users Allows you to view information on all users logged in to the switch. Syntax Parameters show users [all] all Command Modes EXEC Privilege Supported Modes All Modes Command History Usage Information Example Related Commands (OPTIONAL) Enter the keyword all to view all terminal lines in the switch. Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.0) Introduced the support for roles on the MXL 10/40GbE Switch. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1168
Command History Usage Information This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.11(0.0) Introduced this command. The secured CLI mode prevents the users from enhancing the permissions or promoting the privilege levels. After entering the command, save the running-configuration. Once you save the running-configuration, the secured CLI mode is enabled.
PAGE 1169
username Establish an authentication system based on user names. Syntax username name [access-class access-list-name] [nopassword | {password | secret | sha256-password} [encryption-type] password] [privilege level] [role rolename] If you do not want a specific user to enter a password, use the nopassword option. To delete authentication for a user, use the no username name command. Parameters name Enter a text string for the name of the user up to 63 characters.
PAGE 1170
Version Description 9.5(0.0) Introduced the support for roles on the MXL 10/40GbE Switch. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To view the defined user names, use the show running-config user command. Related Commands password — specifies a password for users on terminal lines. show running-config — views the current configuration. RADIUS Commands The following RADIUS commands are supported by Dell Networking Operating System (OS).
PAGE 1171
Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. The following is a list of the Dell EMC Networking OS version history for this command. Version Description 9.14(1.0) Introduced on the S4810 and S4820T. 9.13(0.0) Introduced on the C9010, S3100, S3048–ON, S4048T-ON, S4048–ON, S5000, S6010– ON, S6000–ON, S6100–ON, S6000, Z9100–ON, Z9500, FM-IOM, and MXL.
PAGE 1172
coa-bounce-port Configure NAS to allow or reject the port bounce RADIUS messages from DAC. Syntax coa-bounce-port To remove the port bounce configuration, enter the no coa-bounce-port command. Defaults Enabled. Command Modes Usage Information Command History • CONF-DYNAMIC-AUTH • Configure no coa-bounce-port to drop radius CoA port-bounce requests from the DAC. This guide is platform-specific.
PAGE 1173
Version Description 9.13(0.0) Introduced on the C9010, S3100, S3048–ON, S4048T-ON, S4048–ON, S5000, S6010– ON, S6000–ON, S6100–ON, S6000, Z9100–ON, Z9500, FN-IOM, and MXL. coa-reauthenticate Configure NAS to re-authenticate dot1x user session requests from DAC. Syntax coa-reauthenticate To allow or reject re-authentication requests, enter the no coa-reauthenticate command. Defaults Command Modes Command History Enabled. • CONF-DYNAMIC-AUTH This guide is platform-specific.
PAGE 1174
da-rsp-timeout Configure timeout value for the back end task to respond to DAC requests. Syntax da-rsp-timeout minutes To undo the configuration, enter the no da-rsp-timeout command. Defaults 10 Minutes. Parameters Command Modes Usage Information Command History minutes Enter the time out value. • CONF-DYNAMIC-AUTH • Time for DAS to wait before the back end response is received. This guide is platform-specific.
PAGE 1175
Version Description 9.13(0.0) Introduced on the C9010, S3100, S3048–ON, S4048T-ON, S4048–ON, S5000, S6010– ON, S6000–ON, S6100–ON, S6000, Z9100–ON, Z9500, FN-IOM, and MXL. dynamic-auth-enable Configure NAS to receive and process dynamic authorization messages. Syntax dynamic-auth-enable To stop NAS from receiving and processing dynamic authorization messages, use the no dynamic-authenable command. Defaults Command Modes Command History Disabled. • CONF-DYNAMIC-AUTH This guide is platform-specific.
PAGE 1176
Supported Modes Command History All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. port Configures NAS port number to accept CoA or DM requests. Syntax port port-number To remove the NAS port configuration, enter the no port command. Defaults 3799 Parameters Command Modes Usage Information Command History port-number Enter the NAS port number to accept CoA and DM requests. The range is from 1 to 65535.
PAGE 1177
Usage Information Command History • All dynamic authorization commands are configured by entering this mode. This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. The following is a list of the Dell EMC Networking OS version history for this command. Version Description 9.14(1.0) Introduced on the S4810 and S4820T. 9.13(0.
PAGE 1178
retransmit retries (OPTIONAL) Enter the keyword retransmit then a number as the number of attempts. This parameter overwrites the radius-server retransmit command. The range is from zero (0) to 100. The default is 3 attempts. timeout seconds (OPTIONAL) Enter the keyword timeout then the seconds the time interval the switch waits for a reply from the RADIUS server. This parameter overwrites the radiusserver timeout command. The range is from 0 to 1000. The default is 5 seconds.
PAGE 1179
To delete a password, use the no radius-server key command. Parameters encryption-type key Defaults Not configured. Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information (OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered. The options are: • 0 is the default and means the key is not encrypted and stored as clear text. • 7 means that the key is encrypted and hidden.
PAGE 1180
Related Commands Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. radius-server host — configures a RADIUS host. radius-server timeout To reply to a request, configure the amount of time the RADIUS client (the switch) waits for a RADIUS host server . Syntax radius-server timeout seconds To return to the default value, use the no radius-server timeout command.
PAGE 1181
router for Router mode addrole Enter the keyword addrole to add permission to the command. You cannot add or delete rights for the sysadmin role. deleterole Enter the keyword deleterole to remove access to the command. You cannot add or delete rights for the sysadmin role. role-name Enter a text string for the name of the user role up to 63 characters. These are 3 system defined roles you can modify: secadmin, netadmin, and netoperator.
PAGE 1182
Version Description 9.14(1.0) Introduced on the S4810 and S4820T. 9.13(0.0) Introduced on the C9010, S3100, S3048–ON, S4048T-ON, S4048–ON, S5000, S6010– ON, S6000–ON, S6100–ON, S6000, Z9100–ON, Z9500, FN-IOM, and MXL. replay-protection-window Configure replay protection window period to drop the duplicate packets. Syntax replay-protection-window minutes To undo the configuration, enter the no replay-protection-window command. Defaults 5 Minutes.
PAGE 1183
The following is a list of the Dell EMC Networking OS version history for this command. Version Description 9.14(1.0) Introduced on the S4810 and S4820T. 9.13(0.0) Introduced on the C9010, S3100, S3048–ON, S4048T-ON, S4048–ON, S5000, S6010– ON, S6000–ON, S6100–ON, S6000, Z9100–ON, Z9500, FN-IOM, and MXL. show privilege View your access level. Syntax Command Modes Supported Modes Command History Example show privilege • EXEC • EXEC Privilege All Modes Version Description 9.9(0.
PAGE 1184
TACACS+ Commands Dell Networking OS supports TACACS+ as an alternate method for login authentication. TACACS+ Accounting Enable AAA Accounting and create a record for monitoring the accounting function.
PAGE 1185
Example Related Commands Version Description 9.5(0.0) Supported on the FN I/O Agregator and M I/O Aggregator. Dell(config)# aaa accounting exec default start-stop tacacs+ Dell(config)# aaa accounting command 15 default start-stop tacacs+ Dell(config)# enable password changes the password for the enable command. login authentication enables AAA login authentication on the terminal lines. password creates a password. tacacs-server host specifies a TACACS+ server host.
PAGE 1186
Command Modes CONFIGURATION Supported Modes All Modes Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. tacacs-server host Specify a TACACS+ host. Syntax tacacs-server host {hostname | ipv4-address | ipv6-address} [port number] [timeout seconds] [key key] Parameters hostname Enter the name of the TACACS+ server host. ipv4-address | ipv6address Enter the IPv4 address (A.B.C.
PAGE 1187
tacacs-server key — configures a TACACS+ key for the TACACS server. tacacs-server key Configure a key for communication between a TACACS+ server and a client. Syntax tacacs-server key [encryption-type] key To delete a key, use the no tacacs-server key key command. Parameters encryption-type key Defaults Not configured. Command Modes CONFIGURATION Supported Modes All Modes Command History Usage Information (OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered.
PAGE 1188
Supported Modes Command History Usage Information All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. The software measures the period of inactivity defined in this command as the period between consecutive keystrokes. For example, if your password is “password” you can enter “p” and wait 29 seconds to enter the next letter.
PAGE 1189
Generating 1024-bit SSHv1 RSA key. ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! Dell(conf)# Related Commands ip ssh server — enables the SSH server. show crypto — displays the SSH host public keys. debug ip ssh Enables collecting SSH debug information. Syntax debug ip ssh {client | server} To disable debugging, use the no debug ip ssh {client | server} command. Parameters client Enter the keyword client to enable collecting debug information on the client.
PAGE 1190
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To configure the switch as an SCP server, use the ip ssh server command. Related Commands ip ssh server — enables the SSH and SCP server on the switch. ip ssh authentication-retries Configure the maximum number of attempts that should be used to authenticate a user.
PAGE 1191
• aes256-ctr • aes256-cbc • aes192-ctr • aes192-cbc • aes128-ctr • aes128-cbc • 3des-cbc Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. Usage Information Version Description 9.10(0.0) Introduced on the S6100–ON, S6000, S6000–ON, S5000, S4810, S4820T, S3048–ON, S4048–ON, MXL, C9010, S3100 series, and Z9100-ON.
PAGE 1192
ip ssh hostbased-authentication Enable hostbased-authentication for the SSHv2 server. Syntax ip ssh hostbased-authentication enable To disable hostbased-authentication for SSHv2 server, use the no ip ssh hostbased-authentication enable command. Parameters enable Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Enter the keyword enable to enable hostbased-authentication for SSHv2 server. Version Description 9.9(0.
PAGE 1193
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The server-generated key is used for SSHv1 key-exchange. ip ssh mac Configure the list of MAC algorithms supported on both SSH client and SCP. Syntax Parameters ip ssh mac mac-list mac mac-list Enter the keyword mac then a space-delimited list of message authentication code (MAC) algorithms supported by the SSH client.
PAGE 1194
Command History Usage Information This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide. Version Description 9.10(0.0) Introduced on the S6100–ON, S6000, S6000–ON, S5000, S4810, S4820T, S3048–ON, S4048–ON, MXL, C9010, S3100 series, and Z9100-ON. • You can select one or more MAC algorithms from the list.
PAGE 1195
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#conf Dell(conf)# ip ssh rhostsfile flash://shosts Dell(conf)# Usage Information This command specifies the rhost file used for host-based authentication. This creates/ file overwrites the flash:/ADMIN_DIR/ssh/shosts file and deletes the user-specified file.
PAGE 1196
ip ssh rsa-authentication (Config) Enable RSA authentication for the SSHv2 server. Syntax ip ssh rsa-authentication enable To disable RSA authentication, use the no ip ssh rsa-authentication enable command. Parameters enable Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Enter the keyword enable to enable RSA authentication for the SSHv2 server. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1197
Usage Information If you want to log in without being prompted for a password, log in through RSA authentication. To do that, first add the SSHv2 RSA public keys to the list of authorized keys. This command adds the specified RSA keys to the following file: flash://ADMIN_DIR/ssh/authorized-keys-username (where username is the user associated with this terminal). NOTE: The no form of this command deletes the file flash://ADMIN_DIR/ssh/ authorizedkeys-username file.
PAGE 1198
The following HMAC algorithms are available: • hmac-sha1 • hmac-sha1-96 • hmac-sha2-256 When FIPS is enabled, the default HMAC algorithm is hmac-sha1-96. When FIPS is not enabled, the default HMAC algorithms are the following: kex key-exchangealgorithm • hmac-md5 • hmac-md5-96 • hmac-sha1 • hmac-sha1-96 • hmac-sha2-256 Enter the keyword kex and then a space-delimited list of key exchange algorithms supported by the SSH server.
PAGE 1199
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command enables the SSH server and begins listening on a port. If a port is not specified, listening is on SSH default port 22. NOTE: Starting with Dell Networking OS Release 9.2(0.0), SSH server is enabled by default. Example Dell# conf Dell(conf)# ip ssh server port 45 Dell(conf)# ip ssh server enable Dell# Related Commands show ip ssh — displays the ssh information.
PAGE 1200
rsa Enter the keyword rsa to display the host SSHv2 RSA public key. rsa1 Enter the keyword rsa1 to display the host SSHv1 RSA public key. Defaults none Command Modes EXEC Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command is useful if the remote SSH client implements Strict Host Key Checking. You can copy the host key to your list of known hosts.
PAGE 1201
Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Example Dell#show ip ssh SSH server : enabled. SSH server version : v1 and v2. SSH server vrf : default. SSH server ciphers : 3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc,aes128ctr,aes192-ctr,aes256-ctr. SSH server macs : hmac-sha2-256, hmac-sha1, hmac-sha1-96, hmac-md5, hmac-md5-96.
PAGE 1202
show ip ssh rsa-authentication Displays the authorized-keys for the RSA authentication. Syntax show ip ssh rsa-authentication {my-authorized-keys} Parameters my-authorized-keys Defaults none Command Modes EXEC Supported Modes All Modes Command History Display the RSA authorized keys. Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 1203
Command Modes EXEC Privilege Supported Modes Full–Switch Command History Examples Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the S6000-ON. 9.5(0.
PAGE 1204
ssh Open an SSH connection specifying the host name, username, port number and version of the SSH client. Dell Networking OS supports both inbound and outbound SSH sessions using IPv4 addressing. Inbound SSH supports accessing the system through the management interface as well as through a physical Layer 3 interface. Syntax ssh {hostname | ipv4 address} [-| username | -p port-number|-v {1|2}] Parameters hostname (OPTIONAL) Enter the IP address or the host name of the remote device.
PAGE 1205
Usage Information Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. This command specifies the file used for the host-based authentication. The creates/ file overwrites the flash://ADMIN_DIR/ssh/knownhosts file and deletes the user-specified file. Even though this command is a global configuration command, it does not appear in the running configuration because you only need to run this command once.
PAGE 1206
ip dhcp relay Enable Option 82. Syntax ip dhcp relay information-option [trust-downstream] Parameters trust-downstream Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Configure the system to trust Option 82 when it is received from the previous-hop router. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp snooping Enable DHCP Snooping globally.
PAGE 1207
Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp snooping binding Create a static entry in the DHCP binding table.
PAGE 1208
ip dhcp snooping database renew Renew the binding table. Syntax ip dhcp snooping database renew Defaults none Command Modes Supported Modes • EXEC • EXEC Privilege Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.19.0 Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp snooping trust Configure an interface as trusted.
PAGE 1209
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. ip dhcp snooping vlan Enable DHCP Snooping on one or more VLANs. Syntax Parameters [no] ip dhcp snooping vlan name name Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Enter the name of a VLAN on which to enable DHCP Snooping. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1210
username Establish an authentication system based on user names. Syntax username name [nopassword | {password | secret} [encryption-type] password] [privilege level] If you do not want a specific user to enter a password, use the nopassword option. To delete authentication for a user, use the no username name command. Parameters name Enter a text string for the name of the user up to 63 characters. nopassword Enter the keyword nopassword to specify that the user should not enter a password.
PAGE 1211
userrole Create user roles for the role-based security model. Syntax userrole name inherit existing-role-name To delete a role name, use the no userrole name command. Note that the reserved role names may not be deleted. Parameters name Enter a text string for the name of the user up to 63 characters. It cannot be one of the system defined roles (sysadmin, secadmin, netadmin, netoperator).
PAGE 1212
ICMP Vulnerabilities The Internet Control Message Protocol (ICMP) is a network-layer Internet protocol that provides message packets to report errors and other information regarding IP packet processing back to the source. Dell Networking OS mainly addresses the following ICMP vulnerabilities: • ICMP Mask Reply • ICMP Timestamp Request • ICMP Replies • IP ID Values Randomness You can configure the Dell Networking OS to drop ICMP reply messages.
PAGE 1213
ICMPv6 Message Types Who are you reply (140) Mtrace response (200) Mtrace messages (201) NOTE: The Dell Networking OS does not suppress the following ICMPv6 message types: • Packet too big (2) • Echo request (128) • Multicast listener query (130) • Multicast listener report (131) • Multicast listener done (132) • Router solicitation (133) • Router advertisement (134) • Neighbor solicitation (135) • Neighbor advertisement (136) • Redirect (137) • Router renumbering (138) • MLD v2 liste
PAGE 1214
System Security Commands The following section lists the system security commands. generate hash Generate a hash checksum for the given file or the startup configuration using the MD5, SHA1, or SHA256 algorithm. Syntax generate hash {md5 | sha1 | sha256} {flash://filename | startup-config} Parameters md5 | sha1 | sha256 Enter the keyword md5, sha1, or sha256 to generate .
PAGE 1215
root-password Defaults Not configured Command Modes Full–Switch Command History Usage Information • 7 directs the system to store the password with a dynamic salt. • 9 directs the system to encrypt the clear text password and store the encrypted password in an inaccessible location. Enter the root password. Version Description 9.14(1.0) Introduced on the S4810 and S4820T. 9.14(0.0) Introduced on the S5048F–ON. 9.13(0.
PAGE 1216
Command History Version Description 9.14(1.0) Introduced on the S4810 and S4820T. 9.14(0.0) Introduced on the S5048F–ON. 9.13(0.0) Introduced on the S3100 series, S3048–ON, S4048–ON, S4048T-ON, S5000, S6000, S6000–ON, S6010–ON, S6100–ON, Z9100–ON, MXL, and FN-IOM. Usage Information When you reboot the system using the reload command, the system performs OS image verification on the primary boot image.
PAGE 1217
verified startup-config Enable hash validation for the startup configuration during system startup. Syntax verified startup-config To disable hash validation for the startup configuration, use the no verified startup-config command. Defaults Not configured Command Modes Full–Switch Command History Example Version Description 9.14(1.0) Introduced on the S4810 and S4820T. 9.14(0.0) Introduced on the S5048F–ON. 9.13(0.
PAGE 1218
53 sFlow sFlow monitoring system includes an sFlow Agent and an sFlow Collector. • The sFlow Agent combines the flow samples and interface counters into sFlow datagrams and forwards them to the sFlow Collector. • The sFlow Collector analyses the sFlow Datagrams received from the different devices and produces a network-wide view of traffic flows.
PAGE 1219
sflow collector Configure a collector device to which sFlow datagrams are forwarded. Syntax sflow collector {ip-address} agent-addr {ip-address} [number [max-datagram-size number]] | [max-datagram-size number] To delete a configured collector, use the no sflow collector {ip-address} agent-addr {ipv4address} [number [max-datagram-size number]] | [max-datagram-size number] command. Parameters sflow collector ipaddress Enter the IPv4 (A.B.C.D) of the sFlow collector device.
PAGE 1220
sflow enable (Global) Enable sFlow globally. Syntax sflow enable To disable sFlow, use the no sflow enable command. Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information sFlow is disabled by default. In addition to this command, you must enable sFlow on individual interfaces where you want sFlow sampling.
PAGE 1221
sflow extended-switch enable Enable packing information on a switch only. Syntax sflow extended-switch enable To disable packing information, use the no sflow extended-switch [enable] command. Parameters enable Defaults Disabled. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Enter the keyword enable to enable global extended information. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1222
Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.7(0.0) Introduced on the MXL switch. Dell(conf)#sflow max-header-size extended sflow polling-interval (Global) Set the sFlow polling interval at a global level. Syntax sflow polling-interval interval value To return to the default, use the no sflow polling-interval interval command.
PAGE 1223
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command sets the counter polling interval for an interface. Related Commands sflow polling-interval (Global) — globally sets the polling interval. sflow sample-rate (Global) Change the global default sampling rate. Syntax sflow sample-rate value To return to the default sampling rate, use the no sflow sample-rate command.
PAGE 1224
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information This command changes the sampling rate for an interface. By default, the sampling rate of an interface is set to the same value as the current global default sampling rate. If the value you enter is not a correct power of 2, the command generates an error message with the previous and next power-of-2 value.
PAGE 1225
sflow enable sflow sample-rate 2048 Dell#show running-config interface tengigabitethernet 0/1 ! interface TenGigabitEthernet 0/1 no ip address sflow enable sflow sample-rate 256 no shutdown show sflow stack-unit Display the sFlow information on a stack unit. Syntax Parameters Command Modes Supported Modes Command History show sflow stack-unit {unit number} unit number • EXEC • EXEC Privilege (OPTIONAL) Enter a unit number to view information on the stack unit in that slot. The range is from 0 to 5.
PAGE 1226
54 Service Provider Bridging Service provider bridging is composed of virtual local area network (VLAN) Stacking, Layer 2 Protocol Tunneling, and Provider Backbone Bridging as described in the Dell Networking OS Configuration Guide. This chapter includes commands for the Dell Networking operating software Layer 2 Protocol Tunneling (L2PT). L2PT enables protocols to tunnel through an 802.1q tunnel. For more information, see VLAN Stacking, Spanning Tree Protocol (STP), and GARP VLAN Registration (GVRP).
PAGE 1227
in | out | both Enter the keyword in, out, or both to debug incoming interfaces, outgoing interfaces, or both incoming and outgoing interfaces. vlan vlan-id Enter the keyword vlan then the VLAN ID. The range is from 1 to 4094. count value Enter the keyword count then the number of debug outputs. The range is from 1 to 100. Defaults Debug disabled. Command Modes EXEC Privilege Supported Modes Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 1228
protocol-tunnel destination-mac Overwrite the BPDU destination MAC address with a specific value. Syntax protocol-tunnel destination-mac xstp address Parameters stp Change the default destination MAC address used for L2PT to another value. Defaults The default destination MAC is 01:01:e8:00:00:00. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1229
Parameters rate Defaults 75 frames per second. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Enter the rate in frames per second. The range is from 75 to 3000. The default is 75. Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. Example Dell# Dell#conf Dell(conf)#protocol-tunnel rate-limit 1000 Dell(conf)# Related Commands show protocol-tunnel — displays tunneling information for all VLANs.
PAGE 1230
Te1/2 Dell# Related Commands 1230 2 STP, PVST show running-config — displays the current configuration.
PAGE 1231
55 Simple Network Management Protocol (SNMP) and Syslog This chapter contains commands to configure and monitor the simple network management protocol (SNMP) v1/v2/v3 and Syslog.
PAGE 1232
• logging buffered • logging console • logging facility • logging history • logging history size • logging monitor • logging on • logging source-interface • logging synchronous • logging trap • logging version • show logging • show logging driverlog stack-unit • show logging auditlog • terminal monitor SNMP Commands The following SNMP commands are available in the Dell Networking OS.
PAGE 1233
The following is a list of the Dell Networking OS version history for this command. Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.0) Introduced on the MXL. Example Dell(conf)#clear logging auditlog Related Commands show logging auditlog — displays audit log show snmp Display the status of SNMP network elements. Syntax Command Modes Supported Modes Command History show snmp • EXEC • EXEC Privilege Full–Switch Mode Version Description 9.9(0.0) Introduced on the FN IOM. 8.
PAGE 1234
Command Modes Supported Modes Command History Example • EXEC • EXEC Privilege Full–Switch Mode Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell#show snmp engineID Local SNMP engineID: 0000178B02000001E80214A8 Remote Engine ID IP-addr Port 80001F88043132333435 172.31.1.3 5009 80001F88043938373635 172.31.1.3 5008 Dell# Related Commands snmp-server engineID — configures local and remote SNMP engines on the router.
PAGE 1235
show snmp supported-mibs Display the list of SNMP MIBs supported by the platform. Syntax Command Modes Command History Example show snmp supported-mibs • EXEC • EXEC Privilege This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.14(0.0) Introduced on the C9010, FN-IOM, MIOA, MXL, S3048–ON, S3100, S4048–ON, S4048T-ON, S5048F-ON, S6000, S6000–ON, S6010–ON, S6100–ON and Z9100–ON.
PAGE 1236
Example Version Description 9.14(0.0) Introduced on the C9010, FN-IOM, MIOA, MXL, S3048–ON, S3100, S4048–ON, S4048T-ON, S5048F-ON, S6000, S6000–ON, S6010–ON, S6100–ON and Z9100–ON. DellEMC#show snmp supported-traps TRAP OID ----------------------------------------------------------------------COLDSTART 1.3.6.1.6.3.1.1.5.1 WARMSTART 1.3.6.1.6.3.1.1.5.2 LINKDOWN 1.3.6.1.6.3.1.1.5.3 LINKUP 1.3.6.1.6.3.1.1.5.4 Authenticationfailure 1.3.6.1.6.3.1.1.5.5 dellNetIfAlarmHighBer 1.3.6.1.4.1.6027.3.11.1.4.1.
PAGE 1237
snmp context Enables you to map a BGP VRF instance within an SNMP context through community mapping in SNMPv2c and SNMPv3. Syntax Parameters [no] snmp context [context name] context name Enter a unique name for the context. Defaults None Command Modes CONFIGURATION Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Usage Information Version Description 9.14.1.
PAGE 1238
Example DellEMC(conf-ipv6-router_ospf)#snmp context ospf1 DellEMC>show runnig-config ospf ! ipv6 router ospf 10 router-id 10.10.10.1 snmp context ospf1 ! DellEMC> snmp ifmib ifalias long Display the entire description string through the Interface MIB, which would be truncated otherwise to 63 characters. Syntax snmp ifmib ifalias long Defaults Interface description truncated beyond 63 characters.
PAGE 1239
ro Enter the keyword ro to specify read-only permission. rw Enter the keyword rw to specify read-write permission. security-name name (Optional) Enter the keywords security-name then the security name as defined by the community MIB. access-list-name (Optional) Enter a standard IPv4 access list name (a string up to 16 characters long). Defaults none Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Usage Information Version Description 9.9(0.
PAGE 1240
Related Commands ip access-list standard — names (or selects) a standard access list to filter based on IP address. show running-config — displays the current SNMP configuration and defaults. snmp-server contact Configure contact information for troubleshooting this SNMP node. Syntax snmp-server contact text To delete the SNMP server contact information, use the no snmp-server contact command.
PAGE 1241
• notification-option xstp — Notification of a state change in MSTP (802.1s), RSTP (802.1w), and PVST +. For the envmon notification-type, enter one of the following optional parameters: • temperature For the snmp notification-type, enter one of the following optional parameters: Defaults Not enabled.
PAGE 1242
• remote ip-address Enter the keyword remote then the IP address that identifies the copy of the SNMP on the remote device. udp-port portnumber engineID Enter the keywords udp-port then the user datagram protocol (UDP) port number on the remote device. The range is from 0 to 65535. The default is 162. Defaults As above. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Usage Information The remaining eight octets are the MAC address of the chassis.
PAGE 1243
• 2c allows transmission of informs and counter 64, which allows for integers twice the width of what is normally allowed. The default is 1. auth (OPTIONAL) Enter the keyword auth to specify authentication of a packet without encryption. noauth (OPTIONAL) Enter the keyword noauth to specify no authentication of a packet. priv (OPTIONAL) Enter the keyword priv to specify both authentication and then scrambling of the packet.
PAGE 1244
To remove the SNMP host, use the no snmp-server host ip-address [traps | informs] [version 1 | 2c | 3] [auth | noauth | priv] [community-string] [udp-port number] [notification-type] command. Parameters ip-address Enter the keyword host then the IP address of the host (configurable hosts is limited to 16). traps (OPTIONAL) Enter the keyword traps to send trap notifications to the specified host. The default is traps.
PAGE 1245
The default is all trap types are sent to host. Defaults As above. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. In order to configure the router to send SNMP notifications, enter at least one snmp-server host command. If you enter the command with no keywords, all trap types are enabled for the host.
PAGE 1246
snmp-server location Configure the location of the SNMP server. Syntax snmp-server location text To delete the SNMP location, use the no snmp-server location command. Parameters text Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Enter an alpha-numeric text string, up to 55 characters long. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1247
Parameters interface Enter the following keywords and slot/port or number information: • For a Loopback interface, enter the keyword loopback then a number from 0 to 16383. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. Defaults The IP address assigned to the management interface is the default. Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.
PAGE 1248
• 3 is the most secure of the security modes. • 2c allows transmission of informs and counter 64, which allows for integers twice the width of what is normally allowed. The default is 1. encrypted (OPTIONAL) Enter the keyword encrypted to specify the password appear in encrypted format (a series of digits, masking the true characters of the string). auth (OPTIONAL) Enter the keyword auth to specify authentication of a packet without encryption.
PAGE 1249
Example Dell# snmp-server user privuser v3group v3 encrypted auth md5 9fc53d9d908118b2804fe80e3ba8763d priv des56 d0452401a8c3ce42804fe80e3ba8763d Usage Information The following command is an example of how to enter a plain-text password as the string authpasswd for user authuser of group v3group.
PAGE 1250
Usage Information Version Description 9.3(0.0) Added support for the AES128-CFB encryption algorithm on the MXL 10/40GbE Switch IO Module platform 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1251
snmp trap link-status Enable the interface to send SNMP link traps, which indicate whether the interface is up or down. Syntax snmp trap link-status To disable sending link trap messages, use the no snmp trap link-status command. Defaults Enabled. Command Modes INTERFACE Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1252
Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. default logging buffered — sets the logging buffered parameters. default logging console Return the default settings for messages logged to the console. Syntax default logging console Defaults level = 7 or debugging Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Related Commands Version Description 9.9(0.
PAGE 1253
When you enabled RBAC and extended logging: • Only the system administrator role can execute this command. • The system administrator and system security administrator roles can view security events and system events. • The system administrator role can view audit, security, and system events. • The network administrator and network operator roles can view system events.
PAGE 1254
logging Configure an IP address or host name of a Syslog server where logging messages are sent. You can configure multiple logging servers of both IPv4 and/or IPv6. Syntax logging {ip-address | ipv6–address |hostname} {{udp {port}} | {tcp {port}} To disable logging, use the no logging command. Parameters ip-address Enter the IPv4 address in dotted decimal format. ipv6-address Enter the IPv6 address in the x:x:x:x::X format. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
PAGE 1255
size (OPTIONAL) Indicate the size, in bytes, of the logging buffer. The number of messages buffered depends on the size of each message. The range is from 40960 to 524288. The default is 40960 bytes. Defaults level = 7; size = 40960 bytes Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1256
show logging — displays the logging setting and system messages in the internal buffer. logging facility Configure the Syslog facility used for error messages sent to Syslog servers. Syntax logging facility [facility-type] To return to the default values, use the no logging facility command.
PAGE 1257
Related Commands Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. logging — enables logging to a Syslog server. logging on — enables logging. logging history Specify which messages are logged to the history table of the switch and the SNMP network management station (if configured). Syntax logging history level To return to the default values, use the no logging history command.
PAGE 1258
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When the number of messages reach the limit you set with the logging history size command, older messages are deleted as newer ones are added to the table. Related Commands show logging — displays information logged to the history buffer. logging monitor Specify which messages are logged to Telnet applications.
PAGE 1259
9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information When you use the no logging on command, messages are logged only to the console. Related Commands logging — enables logging to the Syslog server. logging buffered — sets the logging buffered parameters. logging console — sets the logging console parameters. logging monitor — sets the logging parameters for the terminal connections.
PAGE 1260
logging synchronous Synchronize unsolicited messages and output. Syntax logging synchronous [level level | all] [limit number-of-buffers] To disable message synchronization, use the no logging synchronous [level level | all] [limit number-of-buffers] command. Parameters all Enter the keyword all to ensure that all levels are printed asynchronously. level level Enter the keyword level then a number as the severity level. A high number indicates a low severity level and vice versa.
PAGE 1261
Parameters level Defaults 6 or informational Command Modes CONFIGURATION Supported Modes Full–Switch Mode Command History Related Commands Indicate a value from 0 to 7 or enter one of the following parameters: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging. The default is 6 or informational. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1262
show logging Display the logging settings and system messages logged to the internal buffer of the switch. Syntax show logging [number | history [reverse][number] | reverse [number] | summary] Parameters Command Modes Supported Modes Command History Example (Partial) 1262 number (OPTIONAL) Enter the number of messages displayed in the output. The range is from 1 to 65535. history (OPTIONAL) Enter the keyword history to view only information in the Syslog history table.
PAGE 1263
( 10.11.68.22 )by admin May 19 12:05:43: %STKUNIT0-M:CP %SYS-5-CONFIG_I: Configured from vty2 ( 10.11.68.22 )by admin May 19 10:23:59: %STKUNIT0-M:CP %SYS-5-CONFIG_I: Configured from vty0 ( 10.11.68.
PAGE 1264
The following is a list of the Dell Networking OS version history for this command. Version Description 9.9(0.0) Introduced on the FN IOM. 9.5(0.0) Introduced on the MXL. Example Dell(conf)#show logging audit Related Commands clear logging auditlog — clears audit log. terminal monitor Configure the system to display messages on the monitor/terminal. Syntax terminal monitor To return to default settings, use the terminal no monitor command. defaults Disabled.
PAGE 1265
56 Stacking Commands Stacking is supported on the FN410S and FN410T cards with ports 9 and 10 as the stack ports. Stacking is limited to six Aggregators in the same or different chassis in a single stack. Stacking provides a single point of management and NIC teaming for high availability and higher throughput. To configure an Aggregator stack, you must use the CLI. The stacking commands are always available and operational.
PAGE 1266
Parameter Unit number Defaults None Command Modes EXEC Privilege Supported Modes All Modes Command History Usage Information The unit number ranges from 0 to 5. Version Description 9.9(0.0) Introduced on the FN IOM. 9.6.(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. This command is supported on the M I/O, FN410S, and FN410T Aggregators. This command is used to reset the stack-unit. The master unit can also be power cycled using this command.
PAGE 1267
redundancy force-failover stack-unit Force the standby unit in the stack to become the management unit. Syntax redundancy force-failover stack-unit Defaults Not enabled. Command Modes EXEC Privilege Supported Modes Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. reset stack-unit Reset any designated stack member except the management unit (master unit).
PAGE 1268
4 Member not present 5 Member not present Dell# Dell#reset stack-unit 0 >>>Resetting master not allowed % Error: Reset of master unit is not allowed.
PAGE 1269
Stack Unit Config: Start-up Config: Runtime Event Log: Running Config: ACL Mgr: LACP: STP: SPAN: Dell# Related Commands no no no no no no no no block block block block block block block block sync sync sync sync sync sync sync sync done done done done done done done done redundancy disable-auto-reboot — prevents the system from auto-rebooting if it fails. show system stack-ports Display information about the stacking ports on all switches in the FN I/O Aggregator switch stack..
PAGE 1270
0/10 1/9 1/10 Dell# Example (Status) Example (Topology) 1/10 0/10 10 10 10 up up up Dell# show system stack-ports status Topology: Daisy chain Interface Link Speed Admin Link (Gb/s) Status Status 0/9 10 up down 0/10 10 up up 1/9 10 up down 1/10 10 up up up down up Trunk Group Dell# show system stack-ports topology Topology: Daisy chain Interface Connection Trunk Group 0/9 0/9 1/10 1/10 Dell Related Commands 1/10 # 0/10 power-cycle stack-unit—resets the designated stack member.
PAGE 1271
Unit Boot-Mode Next-Boot -----------------------------------------------0 stack stack 1 stack stack 2 stack stack 3 stack stack 4 Not Present 5 Not Present Dell# show system stack-unit stack-group Displays the stack-groups present/configured for a FN I/O Aggregator stack unit. Syntax Parameters show system stack-unit unit-number stack-group [configured] unit number <0–5> Defaults none Command Modes EXEC Privilege Supported Modes All Modes Command History Enter the number of the member stack unit.
PAGE 1272
Parameters Defaults unit number <0-5> Enter the number of the member stack unit. The range is from 0 to 5. programmable-mux Enable programmable multiplex mode. stack Enable stack mode. standalone Enable stand-alone mode. vlt Enable virtual link trunking mode. full-switch Enable full-switch mode. standalone Command Modes Supported Modes Command History • CONFIGURATION All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.6.(0.0) Supported on the FN I/O Aggregator. 8.3.
PAGE 1273
Command History Usage Information Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.6.(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. This command is supported on the M I/O, FN410S, and FN410T Aggregators. • reload – reboots Dell Networking Operating System (OS). • show system – displays the status of all stack members or a specific member. stack-unit provision Preconfigure a logical stacking ID of a switch that joins the stack.
PAGE 1274
Supported Modes Command History Usage Information All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.6.(0.0) Supported on the FN I/O Aggregator. 9.3(0.0) Supported on the M I/O Aggregator. This command is supported on the FN410S and the FN410T Aggregators. You can renumber any switch, including the management unit or a stand-alone unit. You cannot renumber a unit to a number of an active member in the stack. When executing this command on the master, the stack reloads.
PAGE 1275
Example Dell(conf)#track-stack-ports disable-all-links Warning: Enabling stack-port tracking shuts down all the operationally UP interfaces, when both/all the stack ports of the unit are down. This Action is not modified when enabled along with UFD feature.
PAGE 1276
57 Storm Control The Dell Networking operating software storm control feature allows you to limit or suppress traffic during a traffic storm. Important Points to Remember • Interface commands can only be applied on physical interfaces (virtual local area networks [VLANs] and link aggregation group [LAG] interfaces are not supported). • An INTERFACE-level command only supports storm control configuration on ingress.
PAGE 1277
io-aggregator broadcast storm-control Rate-limit the traffic storm to 1 Gbps. Syntax io-aggregator broadcast storm-control To disable storm control, use the no io-aggregator broadcast storm-control command. Defaults Command Modes Supported Modes Enabled • CONFIGURATION Standalone-Mux (SMUX) Full–Switch Mode Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Introduced on the M I/O Aggregator.
PAGE 1278
show storm-control unknown-unicast Display the storm control unknown-unicast configuration. Syntax show storm-control unknown-unicast [interface] Parameters interface (OPTIONAL) Enter the following interface to display the interface specific storm control configuration: • Defaults For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
PAGE 1279
8.3.16.1 Example Introduced on the MXL 10/40GbE Switch IO Module. Dell#show storm-control broadcast tengigabitethernet 3/8 Broadcast storm control configuration Interface Direction Packets/Second ---------------------------------------TenGig 3/8 Ingress 1000 Dell# show storm-control multicast Display the storm control multicast configuration.
PAGE 1280
To disable multicast storm control on the interface, use the no storm-control multicast packets_per_second in command. Parameters packets_per_secon d Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554368. Command Modes INTERFACE (conf-if-interface-slot/port) Supported Modes Programmable-Mux (PMUX) Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.
PAGE 1281
To disable broadcast storm control on the interface, use the no storm-control broadcast [packets_per_second in] command. Parameters packets_per_secon d Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554368. Defaults none Command Modes INTERFACE (conf-if-interface-slot/port) Supported Modes Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1282
Parameters pfc-llfc in Enter the keyword pfc-llfc to get the flow control traffic. The range is from 0 to 33554368 packets per second. shutdown Enter the keyword shutdown to shut down the port when the rate exceeds. Defaults none Command Modes INTERFACE (conf-if-interface-slot/port) Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking OS Command Line Reference Guide.
PAGE 1283
To disable unknown-unicast storm control on the interface, use the no storm-control unknown-unicast [packets_per_second in] command. Parameters packets_per_secon d Enter the packets per second of broadcast traffic allowed into the network. The range is from 0 to 33554431. Command Modes INTERFACE (conf-if-interface-slot/port) Supported Modes Programmable-Mux (PMUX) Full–Switch Mode Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 1284
58 SupportAssist SupportAssist sends troubleshooting data securely to Dell. SupportAssist in this Dell EMC Networking OS release does not support automated email notification at the time of hardware fault alert, automatic case creation, automatic part dispatch, or reports. SupportAssist requires Dell EMC Networking OS 9.9(0.0) and SmartScripts 9.7 or later to be installed on the Dell EMC Networking device. For more information on SmartScripts, see Dell EMC Networking Open Automation guide.
PAGE 1285
Usage Information Example Version Description 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.0) Introduced on the C9010, Z9100–ON, S6100–ON, and S3100 series. 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. • When you run the command, the system displays a message with the information directing to the URL for further information.
PAGE 1286
Reject the EULA: DellEMC(conf)#eula-consent support-assist reject Aug 24 22:35:38: %STKUNIT1-M:CP %SUPPORT_ASSIST-6-SUPASSIST_EVT: Event monitor service stopped I do not accept the terms of the license agreement. The SupportAssist feature has been deactivated and can no longer be used. To enable SupportAssist configurations, accept the terms of the license agreement by configuring this command 'eula-consent support-assist accept'.
PAGE 1287
Command History Usage Information This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.0) Introduced on the C9010, Z9100–ON, S6100–ON, and S3100 series. 9.9(0.
PAGE 1288
NOTE: The full transfer includes the core files as well in the information sent. The core transfer does not send core files that are older than 30 days. SupportAssist Commands Dell EMC Networking OS supports the following SupportAssist mode commands. activity Move to the SupportAssist Activity mode for an activity. Allow the user to configure customized details for a specific activity.
PAGE 1289
contact-company Configure the contact information for the company. Syntax contact-company name {company-name}[company-next-name] ... [company-next-name] To remove the contact company information, use the no contact-company command. Parameters company-name Enter the name for the company. If there are multiple words in the name, use optional additional fields. company-nextname (OPTIONAL) Enter the next components of the company name, up to 5 components are allowed.
PAGE 1290
Command Modes SUPPORTASSIST Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Usage Information Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.0) Introduced on the C9010, Z9100–ON, S6100–ON, and S3100 series. 9.9(0.
PAGE 1291
server Configure the name of the remote SupportAssist Server and move to SupportAssist Server mode. Syntax server {default | server-name} To delete a server, use the no server server-name command. Parameters default Enter the keyword default for the default server. server-name Enter the name of the custom server to which the logs would be transferred. To include a space, enter a space within double quotes. Defaults Default server has URL stor.g3.ph.dell.
PAGE 1292
Parameters file-specification local-file-name Command Modes Enter the full file specification for the action-manifest file. For example: • tftp://hostip/filepath • ftp://userid:password@hostip/filepath • scp://userid:password@hostip/filepath Enter the name of the local action-manifest file, up to 32 characters long. Allowable characters are: a to z, A to Z, 0 to 9, -, _, and space.
PAGE 1293
Defaults Default Command Modes SUPPORTASSIST ACTIVITY FULL-TRANSFER SUPPORTASSIST ACTIVITY EVENT-TRANSFER Command History Usage Information Related Commands This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.
PAGE 1294
Usage Information Related Commands Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. To revert to the default action-manifest file, use the action-manifest install command. If necessary, you can then remove the custom action-manifest file. • action-manifest get — copy an action-manifest file for an activity to the system. • action-manifest install — configure the action-manifest to use for a specific activity.
PAGE 1295
To disable a particular SupportAssist activity, use the no enable command. Defaults Enabled Command Modes SUPPORTASSIST ACTIVITY FULL-TRANSFER SUPPORTASSIST ACTIVITY CORE-TRANSFER SUPPORTASSIST ACTIVITY EVENT-TRANSFER Command History Usage Information This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.
PAGE 1296
province | region | state name (OPTIONAL) Enter the keyword province, region or state then the name of province, region or state for the company site. To include a space, enter a space within double quotes. country companycountry (OPTIONAL) Enter the keyword country then the country for the company site. To include a space, enter a space within double quotes.
PAGE 1297
Command History Usage Information This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.0) Introduced on the C9010, Z9100–ON, S6100–ON, and S3100 series. 9.9(0.
PAGE 1298
email-address Configure the email addresses to reach the contact person. Syntax email-address primary email-address [alternate email-address] To remove an email address, use the no email-address command. To remove the primary and the alternate email addresses, use the no email-address primary and no email-address alternate commands respectively. Parameters primary emailaddress Enter the keyword primary then the primary email address for the person.
PAGE 1299
alternate phone Enter the keyword alternate then the alternate phone number for the person. Command Modes SUPPORTASSIST PERSON Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Usage Information Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.
PAGE 1300
Related Commands Version Description 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. • email-address — configure email addresses to reach the contact person. • phone — configure phone numbers to reach the contact person. time-zone Configure the time zone for contacting the person. Syntax time-zone zone +-HH:MM[start-time HH:MM] [end-time HH:MM] To remove the time zone, use the no time-zone [zone | start-time | end-time] command.
PAGE 1301
proxy-ip-address Configure a proxy for reaching the SupportAssist remote server. Syntax proxy-ip-address {ipv4-address | ipv6-address} port port-number [ username userid password [encryption-type] password ] To remove the proxy, use the no proxy-ip-address command. Parameters ipv4-address Enter the IP address of the proxy server in a dotted decimal format (A.B.C.D). ipv6-address Enter the IPv6 address of the proxy server in the x:x:x:x::x format.
PAGE 1302
enable Enable communication with the SupportAssist server. Syntax enable To disable communication to a specific SupportAssist server, use the no enable command. Defaults Enabled Command Modes SUPPORTASSIST SERVER Command History This guide is platform-specific. For command information about other platforms, see the relevant Dell EMC Networking OS Command Line Reference Guide. Related Commands Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.
PAGE 1303
Usage Information Version Description 9.11(0.0) Introduced on the M I/O Aggregator and FN IOM. 9.10(0.1) Introduced on the S6010-ON and S4048T-ON. 9.10(0.0) Introduced on the S3148. 9.10(0.0) Introduced on the C9010, Z9100–ON, S6100–ON, and S3100 series. 9.9(0.0) Introduced on the S4810, S4820T, S3048–ON, S4048–ON, S5000, S6000, S6000–ON, Z9500, MXL. The URL should be formatted to follow the ISO format. show eula-consent Display the EULA for the feature.
PAGE 1304
& performance information and related data (Collected Data) and transmits this information to Dell. By downloading SupportAssist and agreeing to be bound by these terms and the Dell end user license agreement, available at: www.dell.com/ aeula, you agree to allow Dell to provide remote monitoring services of your IT environment and you give Dell the right to collect the Collected Data in accordance with Dells Privacy Policy, available at: www.dell.
PAGE 1305
enable all ! activity event-transfer enable action-manifest install default ! activity core-transfer enable ! contact-company name Dell street-address F lane , Sector 30 address city Brussels state HeadState country Belgium postalcode S328J3 ! contact-person first Fred last Nash email-address primary des@sed.com alternate sed@dol.com phone primary 123422 alternate 8395729 preferred-method email time-zone zone +05:30 start-time 12:23 end-time 15:23 ! server Dell enable url http://1.1.1.
PAGE 1306
09:43:56 IST event-transfer 09:48:21 IST full-transfer 09:38:27 IST DellEMC# 1306 SupportAssist Success Feb 15 2016 09:47:43 IST Feb 15 2016 Success Feb 15 2016 09:36:12 IST Feb 15 2016
PAGE 1307
59 Spanning Tree Protocol (STP) The commands in this chapter configure and monitor the IEEE 802.1d spanning tree protocol (STP). Topics: • bridge-priority • debug spanning-tree • description • disable • forward-delay • hello-time • max-age • portfast bpdufilter default • protocol spanning-tree • show config • show spanning-tree 0 • spanning-tree 0 bridge-priority Set the bridge priority of the switch in an IEEE 802.1D spanning tree.
PAGE 1308
debug spanning-tree Enable debugging of the spanning tree protocol and view information on the protocol. Syntax debug spanning-tree {stp-id [all | bpdu | events | exceptions] | protocol} To disable debugging, use the no debug spanning-tree command. Parameters stp-id Enter zero (0). The switch supports one spanning tree group with a group ID of 0. protocol Enter the keyword for the type of STP to debug, either mstp, pvst, or rstp.
PAGE 1309
disable Disable the spanning tree protocol globally on the switch. Syntax disable To enable Spanning Tree Protocol, use the no disable command. Defaults Enabled (that is, the spanning tree protocol is disabled.) Command Modes SPANNING TREE Supported Modes Full–Switch Mode Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. portfast bpdufilter default — enters SPANNING TREE mode.
PAGE 1310
hello-time Set the time interval between generation of the spanning tree bridge protocol data units (BPDUs). Syntax hello-time seconds To return to the default value, use the no hello-time command. Parameters seconds Defaults 2 seconds Command Modes SPANNING TREE Supported Modes Full–Switch Mode Command History Related Commands Enter a number as the time interval between transmission of BPDUs. The range is from 1 to 10. The default is 2 seconds. Version Description 9.9(0.
PAGE 1311
hello-time — changes the time interval between BPDUs. portfast bpdufilter default Enable BPDU Filter globally to filter transmission of BPDU on port fast enabled interfaces. Syntax portfast bpdufilter default To disable global bpdu filter default, use the no edge-port bpdufilter default command. Defaults Disabled Command Modes SPANNING TREE Command History Version Description 9.9(0.0) Introduced on the FN MXL. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1312
show config Display the current configuration for the mode. Only non-default values display. Syntax show config Command Modes SPANNING TREE Supported Modes Full–Switch Mode Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1313
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Enable spanning tree group 0 prior to using this command. The following describes the show spanning-tree 0 command shown in the example. Example Field Description “Bridge Identifier...” Lists the bridge priority and the MAC address for this STP bridge. “Configured hello...” Displays the settings for hello time, max age, and forward delay. “We are.
PAGE 1314
Timers: message age 0, forward_delay 0, hold 0 Number of transitions to forwarding state 1 BPDU: sent:18, received 0 The port is not in the portfast mode Port 3 (TenGigabitEthernet 1/2) is Forwarding Port path cost 4, Port priority 8, Port Identifier 8.27 Designated root has priority 32768, address 0001.e800.0a56 Designated bridge has priority 32768, address 0001.e800.0a56 Designated port id is 8.
PAGE 1315
To disable Spanning Tree group on an interface, use the no spanning-tree stp-id {cost cost | {rootguard} | portfast [bpduguard [shutdown-on-violation] | bpdufilter] | priority priority} command. Parameters stp-id Enter the STP instance ID. The range is 0. cost cost Enter the keyword cost then a number as the cost. The range is 1 to 65535. The defaults are: • 10-Gigabit Ethernet interface = 2. • Port Channel interface with 10-Gigabit Ethernet = 1.
PAGE 1316
60 System Time The commands in this chapter configure time values on the system, either using the Dell Networking OS, the hardware, or using the network time protocol (NTP). With NTP, the switch can act only as a client to an NTP clock host. For more information, refer to the Network Time Protocol section of the Management chapter in the Dell Networking OS Configuration Guide.
PAGE 1317
day Enter the number of the day. The range is from 1 to 31. You can enter the name of a month to change the order of the display to time month day year . year Enter a four-digit number as the year. The range is from 1993 to 2035. Defaults Not configured. Command Modes EXEC Privilege Supported Modes All Modes Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator.
PAGE 1318
end-time Enter the time in hours:minutes. For the hour variable, use the 24-hour format; example, 17:15 is 5:15 pm. end-year Enter a four-digit number as the year. The range is from 1993 to 2035. offset (OPTIONAL) Enter the number of minutes to add during the summer-time period. The range is from 1 to1440. The default is 60 minutes. Defaults Not configured. Command Modes CONFIGURATION Supported Modes All Modes Command History Related Commands Version Description 9.9(0.
PAGE 1319
• first: enter the keyword first to end daylight saving time in the first week of the month. • last: enter the keyword last to end daylight saving time in the last week of the month. Enter the weekday name that you want daylight saving time to end. Enter the weekdays using the three letter abbreviations; for example Sun, Sat, Mon, and so on. The range is from Sun to Sat. end-month Enter the name of one of the 12 months in English. end-time Enter the time in hours:minutes:seconds.
PAGE 1320
Command History Version Description 9.14(0.0) Introduced on the C9010, FN–IOM, MIOA, MXL, S3048–ON, S4048–ON, S4048T-ON, S5048F-ON, S6000, S6000–ON, S6010-ON, S6100–ON, and Z9100–ON. ntp offset-threshold Configure the threshold time interval before which the system generates an NTP audit log message if the time difference from the NTP server is greater than a threshold value (offset-threshold).
PAGE 1321
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. You can configure multiple time-serving hosts (up to 250). From these time-serving hosts, the operating system chooses one NTP host with which to synchronize. Because many polls to NTP hosts can impact network performance, Dell Networking recommends limiting the number of hosts configured.
PAGE 1322
key Enter the authentication key in the previously specified format. Defaults NTP authentication is not configured by default. If you do not specify the option [0 | 7], 0 is selected by default. Command Modes CONFIGURATION Supported Modes Full–Switch Command History Usage Information Version Description 9.14(0.0) The trusted-key range value is increased from 1 to 65534. 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1323
Usage Information Related Commands Version Description 9.14(0.0) Introduced on the C9010, FN–IOM, MIOA, MXL, S3048–ON, S4048–ON, S4048T–ON, S5048F–ON, S6000, S6000–ON, S6010–ON, S6100–ON, and Z9100–ON. NTP control key is not configured by default. If the encryption–type (0 or 7) is not specified, then 0 is selected by default. • ntp authentication-key—sets an authentication key for NTP. • ntp authenticate—enables the NTP authentication parameters that you set.
PAGE 1324
key keyid (OPTIONAL) Enter the keyword key and a number as the NTP peer key. The range is from 1 to 65534. prefer (OPTIONAL) Enter the keyword prefer to indicate that this peer has priority over other servers. version number (OPTIONAL) Enter the keyword version and a number to correspond to the NTP version used on the server. The range is from 1 to 4. minpoll pollinginterval (OPTIONAL) Enter the keyword minpollthen the polling-interval. The polling interval range is from 4 to 16.
PAGE 1325
Defaults Not configured. Command Modes CONFIGURATION Supported Modes Full–Switch Command History • For VLAN interface, enter the keyword vlan then a number from 1 to 4094. • For the Management interface, enter the keyword ManagementEthernet then slot/port information.This option is valid only in Full-Switch mode. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1326
Parameters Command Modes Supported Modes Command History detail • EXEC • EXEC Privilege (OPTIONAL) Enter the keyword detail to view the source information of the clock. All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 8.3.17.0 Supported on the M I/O Aggregator. Example Dell#show clock 12:30:04.402 pacific Tue May 22 2012 Dell# Example (Detail) Dell#show clock detail 12:30:26.
PAGE 1327
Field Description • + means the peer was selected for possible synchronization. • - means the peer is a candidate for selection. • x means designated falsesticker by the intersection algorithm. remote Displays the remote IP address of the NTP peer. ref clock Displays the IP address of the remote peer’s reference clock. st Displays the peer’s stratum, that is, the number of hops away from the external time source. A 16 in this column means the NTP peer cannot reach the time source.
PAGE 1328
Supported Modes Full–Switch Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide. The following is a list of the Dell Networking OS version history for this command. Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Added support for VRF. 9.4.(0.0) Added support for VRF. show ntp status Display the current NTP status.
PAGE 1329
Related Commands show ntp associations — displays information on the NTP master and peer configurations.
PAGE 1330
61 Tunneling Tunneling is supported on the Dell Networking OS. tunnel-mode Enable a tunnel interface. Syntax tunnel mode {ipip | ipv6 | ipv6ip}[decapsulate-any] To disable an active tunnel interface, use the no tunnel mode command. Parameters ipip Enable tunnel in RFC 2003 mode and encapsulate IPv4 and/or IPv6 datagrams inside an IPv4 tunnel. ipv6 Enable tunnel in RFC 2473 mode and encapsulate IPv4 and/or IPv6 datagrams inside an IPv6 tunnel.
PAGE 1331
tunnel source Set a source address for the tunnel. Syntax tunnel source {ip-address | ipv6–address | interface-type-number} To delete the current tunnel source address, use the no tunnel source command. Parameters ip-address Enter the source IPv4 address in A.B.C.D format. ipv6–address Enter the source IPv6 address in X:X:X:X::X format. interface-typenumber • For a Port Channel interface, enter the keywords port-channel then a number from 1 to 128.
PAGE 1332
count (OPTIONAL) Enter the keyword count to count packets processed by the filter. The range is from 3-10, Default range is 3. unlimited Enter the keyword unlimited to specify the unlimited number of keepalive probe packets. Defaults Tunnel keepalive is disabled. Command Modes INTERFACE TUNNEL Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Introduced on the MXL.
PAGE 1333
This command will fail if the address family entered does not match the outer header address family of the tunnel mode, tunnel source, or any other tunnel allow-remote. If any allow-remote are configured, the tunnel source or tunnel mode commands will fail if the outer header address family does not match that of the configured allow-remote. tunnel dscp Configure the method to set the DSCP in the outer tunnel header.
PAGE 1334
Command Modes INTERFACE TUNNEL (conf-if-tu) Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module. The tunnel interface is inoperable without a valid tunnel destination address for the configured Tunnel mode. To establish a logical tunnel to the particular destination address, use the destination address of the outer tunnel header.
PAGE 1335
Command Modes INTERFACE TUNNEL (conf-if-tu) Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module. A value of 0 copies the inner packet hop limit (ipv6) or time-to-live (ipv4) in the encapsulated packet to the tunnel header hop limit (ipv6) or time-to-live (ipv4) value.
PAGE 1336
ipv6 unnumbered Configure a tunnel interface to operate without a unique explicit IPv6 address and select the interface from which the tunnel will borrow its address. Syntax ipv6 unnumbered {interface-type interface-number} Use the no ipv6 unnumbered command to set the tunnel back to default logical address. If the tunnel was previously operational, this will make the tunnel interface operationally down, unless the tunnel also has an IPv4 address configured.
PAGE 1337
62 u-Boot All commands in this chapter are in u-Boot mode. These commands are supported on the Dell Networking Operating System (OS) FN IOM platform. To access this mode, press any key when the following line appears on the console during a system boot. Hit any key to stop autoboot: Enter u-Boot immediately, as the BOOT_USER# prompt. NOTE: This chapter describes only a few commands available in u-Boot mode. NOTE: You cannot use the Tab key to complete commands in this mode.
PAGE 1338
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. boot selection Change the ROM bootstrap bootflash partition. Syntax boot selection [a | b] Command Modes uBoot Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1339
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # boot write net config retries 2 Updated number of Network Boot Config retries to 2. BOOT_USER # boot zero Clears the primary, secondary, or default boot parameters. Syntax boot zero [primary | secondary | default] Command Modes uBoot Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1340
9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. help Display the help menu. Syntax help Command Modes uBoot Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # help ***** Dell Force10 Boot Interface Help Information ***** Current access level: USER LEVEL Use "syntax help" for more information on syntax.
PAGE 1341
ignore startup config Ignore the system startup configuration. Syntax ignore startup-config Command Modes uBoot Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. interface management ethernet ip address Set the management port IP address and mask.
PAGE 1342
Command Modes uBoot Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. reload Reload the FN IOM switch. Syntax reload Command Modes uBoot Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. show boot blc Show the boot loop counter value.
PAGE 1343
show boot selection Display the ROM bootstrap bootflash partition. Syntax show boot selection Command Modes uBoot Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # show boot selection ROM BOOTSTRAP SELECTOR PARMETERS: ================================ Next ROM bootstrap set to occur from Bootflash partition A. Last ROM bootstrap occurred from Bootflash partition B.
PAGE 1344
BOOT_USER # show bootvar Show summary of operating system boot parameters. Syntax show bootvar Command Modes uBoot Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # show bootvar PRIMARY OPERATING SYSTEM BOOT PARAMETERS: ======================================== boot device : tftp file name : premnath Management Etherenet IP address : 10.16.130.
PAGE 1345
8.3.16.1 Example Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # show default-gateway Gateway IP address: 15.0.0.1 BOOT_USER # show interface management Ethernet Show the management port IP address and mask. Syntax show interface management ethernet Command Modes uBoot Supported Modes Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1346
syntax help Show the syntax information. Syntax help Command Modes uBoot Supported Modes Full–Switch Command History Example 1346 Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. BOOT_USER # help ***** Dell Force10 Boot Interface Help Information ***** Current access level: USER LEVEL Use "syntax help" for more information on syntax.
PAGE 1347
63 Uplink Failure Detection (UFD) Uplink failure detection (UFD) provides detection of the loss of upstream connectivity and, if you use this with network interface controller (NIC) teaming, automatic recovery from a failed link. NOTE: In Standalone, VLT, and Stacking modes, the UFD group number is 1 by default and cannot be changed.
PAGE 1348
Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. • downstream — assigns a port or port-channel to the uplink-state group as a downstream interface. • uplink-state-group — creates an uplink-state group and enables the tracking of upstream links.
PAGE 1349
Parameters seconds Specify the time (in seconds) to wait for the upstream port channel (LAG 128) to come back up before server ports are brought down. The range is from 1 to 120. Command Modes UPLINK-STATE-GROUP Supported Modes Standalone, Stacking, VLT Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator.
PAGE 1350
To delete an uplink-state group, enter the no downstream interface command. Parameters interface Enter one of the following interface types: • 10 Gigabit Ethernet: tengigabitethernet {slot/port |slot/portrange} • Port channel: port-channel {1-512 | port-channel-range} Where port-range and port-channel-range specify a range of ports separated by a dash (-) and/or individual ports/port channels in any order; for example: tengigabitethernet 1/1-2,5,9,11-12 port-channel 1-3,5.
PAGE 1351
Full–Switch Command History Related Commands Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. • downstream — assigns a port or port-channel to the uplink-state group as a downstream interface. • uplink-state-group — creates an uplink-state group and enables the tracking of upstream links.
PAGE 1352
enable Re-enable upstream-link tracking for an uplink-state group after it has been disabled. Syntax enable To disable upstream-link tracking without deleting the uplink-state group, use the no enable command. group-id Enables debugging on the specified uplink-state group. Valid group-id values are 1 to 16. Defaults Upstream-link tracking is automatically enabled in an uplink-state group. Command Modes UPLINK-STATE-GROUP Supported Modes All Modes Command History Version Description 9.9(0.
PAGE 1353
upstream PortChannel 1 ! uplink state track 2 downstream TengigabitEthernet 0/1,3,5 upstream TengigabitEthernet 0/9,10 Related Commands • show uplink-state-group — displays the status information on a specified uplink-state group or all groups. • uplink-state-group — creates an uplink-state group and enables the tracking of upstream links. show uplink-state-group Display status information on a specified uplink-state group or all groups.
PAGE 1354
Related Commands • show running-config uplink-state-group— displays the current configuration of one or more uplink-state groups. • uplink-state-group — create an uplink-state group and enables the tracking of upstream links. uplink-state-group Create an uplink-state group and enable the tracking of upstream links on a switch/ router. Syntax uplink-state-group group-id To delete an uplink-state group, enter the no uplink-state-group group-id command.
PAGE 1355
upstream Assign a port or port-channel to the uplink-state group as an upstream interface. Syntax upstream interface To delete an uplink-state group, use the no upstream interface command.
PAGE 1356
64 VLAN Stacking With the virtual local area network (VLAN)-stacking feature (also called stackable VLANs and QinQ), you can “stack” VLANs into one tunnel and switch them through the network transparently. For more information about basic VLAN commands, refer to the Virtual LAN (VLAN) Commands section in the Layer 2 chapter.
PAGE 1357
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. dei honor Honor the incoming DEI value by mapping it to a system drop precedence. Enter the command once for 0 and once for 1. Syntax Parameters dei honor {0 | 1} {green | red | yellow} 0|1 Enter the bit value you want to map to a color. green | red | yellow Choose a color: • Green: High priority packets that are the least preferred to be dropped.
PAGE 1358
Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information You must first enable DEI for this configuration to take effect. Related Commands dei enable — enables DEI. member Assign a stackable VLAN access or trunk port to a VLAN. The VLAN must contain the vlan-stack compatible command in its configuration.
PAGE 1359
Supported Modes Command History Example Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1360
vlan-stack access Specify a Layer 2 port or port channel as an access port to the stackable VLAN network. Syntax vlan-stack access To remove access port designation, use the no vlan-stack access command. Defaults Not configured. Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1361
2 Active 3 Active 4 Active 5 Active Dell# M M M M M M M M M M M Te 1/2 Te 1/0-2 Po1(Te 1/3-4) Te 1/5 Te 1/3 Po1(Te 1/3-5) Te 1/6 Te 1/4 Po1(Te 1/5-6) Te 1/6 Te 1/5 vlan-stack dot1p-mapping Map C-Tag dot1p values to an S-Tag dot1p value. You can separate the C-Tag values by commas and dashed ranges are permitted. Dynamic mode CoS overrides any Layer 2 QoS configuration if there is conflicts.
PAGE 1362
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information For specific interoperability limitations regarding the S-Tag TPID, refer to the Dell Networking OS Configuration Guide. Related Commands portmode hybrid — sets a port (physical ports only) to accept both tagged and untagged frames. A port configured this way is identified as a hybrid port in report displays.
PAGE 1363
interface TenGigabitEthernet 0/42 no ip address switchport vlan-stack trunk no shutdown Dell(conf-if-Te-0/42)#interface vlan 100 Dell(conf-if-vl-100)#vlan-stack compatible Dell(conf-if-vl-100-stack)#member TenGigabitethernet 0/12 Dell(conf-if-vl-100-stack)#show config ! interface Vlan 100 no ip address vlan-stack compatible member TenGigabitEthernet 0/42 shutdown Dell(conf-if-vl-100-stack)#interface vlan 20 Dell(conf-if-vl-20)#tagged Tengigabitethernet 0/12 Dell(conf-if-vl-20)#show config ! interface Vlan 2
PAGE 1364
65 Virtual Link Trunking (VLT) VLT allows physical links between two chassis to appear as a single virtual link to the network core. VLT eliminates the requirement for Spanning Tree protocols by allowing link aggregation group (LAG) terminations on two separate distribution or core switches, and by supporting a loop-free topology.
PAGE 1365
• show vlt statistics • stack-unit iom-mode • system-mac • unit-id • vlt domain • vlt-peer-lag port-channel • show vlt private-vlan back-up destination Configure the IPv4 or IPv6 address of the management interface on the remote VLT peer to be used as the endpoint of the VLT backup link for sending out-of-band hello messages. Syntax Parameters back-up destination {[ipv4–address] | [ipv6 ipv6–address] [interval seconds]} ipv4–address Enter the IPv4 address of the backup destination.
PAGE 1366
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. clear ip pim tib Clear PIM tree information from the PIM database. Syntax clear ip pim tib [group] Parameters group Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information (OPTIONAL) Enter the multicast group address in dotted decimal format (A.B.C.D). Version Description 9.9(0.0) Introduced on the FN IOM. 9.2(0.
PAGE 1367
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. VLT ARP Statistics ---------------ARP Tunnel Pkts sent:0 ARP Tunnel Pkts Rcvd:0 ARP-sync Pkts Sent:0 ARP-sync Pkts Rcvd:0 ARP Reg Request sent:19 ARP Reg Request rcvd:10 delay-restore abort-threshold Increase the Boot Up timer to some value (>60 seconds).
PAGE 1368
Parameters port-channel Force all LACP port-channel members to become switchports. vlt Force all VLT LACP members to become switchports. Defaults Not configured. Command Modes CONFIGURATION Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator.
PAGE 1369
peer-link port-channel Configure the specified port channel as the chassis interconnect trunk between VLT peers in the domain. Syntax Parameters peer-link port-channel port-channel-number {peer-down-vlan vlan id} port-channelnumber Enter the port-channel number that acts as the interconnect trunk. peer-down-vlan vlan id Enter the keyword peer-down-vlan then a VLAN ID to configure the VLAN that the VLT peer link uses when the VLT peer is down. Defaults Not configured.
PAGE 1370
peer-routing-timeout Configure the timeout for the software to wait before connecting to a VLT peer with a Down status. This command is applicable for both IPV6/ IPV4. Syntax peer-routing-timeout value To restore the default value, use the no peer-routing-timeout command. Parameters value Enter the timeout value in seconds. The range is from 1 to 65535. The default value is 0 (no timeout).
PAGE 1371
show ip mroute View the multicast routing table. Syntax Parameters show ip mroute [static | group-address [source-address] | count | snooping [vlan vlan-id] [group-address [source-address]] | summary | vlt [group-address | count] Static (OPTIONAL) Enter the keyword static to view static multicast routes. group-address [source-address] (OPTIONAL) Enter the multicast group-address to view only routes associated with that group.
PAGE 1372
Field Description Incoming interface Displays the reverse path forwarding (RPF) information towards the source for (S,G) entries and the RP for (*,G) entries. Outgoing interface list: Lists the interfaces that meet one of the following: • a directly connected member of the Group • statically configured member of the Group • received a (*,G) or (S,G) Join message Example (static) Dell#show ip mroute static Mroute: 23.23.23.
PAGE 1373
show vlt backup-link Displays information on the backup link operation. Syntax show vlt backup-link Default Not configured. Command Modes EXEC Supported Modes All Modes Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator.
PAGE 1374
Version Local System MAC address Remote System MAC address Remote system version Delay-Restore timer : : : : Delay-Restore Abort Threshold Peer-Routing Peer-Routing-Timeout timer Multicast peer-routing timeout Dell# : 6(3) 00:01:e8:8a:e9:91 00:01:e8:8a:e9:76 6(3) 90 seconds : 60 seconds : Disabled : 0 seconds : 150 seconds show vlt detail Displays detailed status information about VLT domains currently configured on the switch. Syntax show vlt detail Default Not configured.
PAGE 1375
(*, 225.1.1.2) Dell# VLAN 15 te 0/5 show vlt mismatch Display mismatches in VLT parameters. Syntax show vlt mismatch Command Modes EXEC Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator.
PAGE 1376
Command History Example Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. Dell#show vlt role VLT Role ---------VLT Role: System MAC address: Primary Role Priority: Local System MAC address: Local System Role Priority: Local Unit Id: Dell# Primary 00:01:05:08:02:05 32768 00:01:e8:00:ab:03 32768 0 show vlt statistics Displays statistics on VLT operations.
PAGE 1377
IGMP IGMP IGMP IGMP IGMP IGMP IGMP IGMP Reg Request sent: Reg Request rcvd: Reg Response sent: Reg Response rcvd: PDU Tunnel Pkt sent: PDU Tunnel Pkt rcvd: Tunnel PDUs sent: Tunnel PDUs rcvd: 2 2 2 1 0 0 0 0 VLT ARP Statistics -------------------ARP Tunnel Pkts sent:0 ARP Tunnel Pkts Rcvd:0 ARP Tunnel Pkts sent Non Vlt:0 ARP Tunnel Pkts Rcvd Non Vlt:0 ARP-sync Pkts Sent:0 ARP-sync Pkts Rcvd:0 ARP Reg Request sent:2 ARP Reg Request rcvd:1 VLT IOA Statistics ------------------------------IOA Info Pkts sent
PAGE 1378
system-mac Reconfigure the default MAC address for the domain. Syntax system-mac mac-address Parameters mac-address Enter the system MAC address for the VLT domain. Defaults Not configured. Command Modes VLT DOMAIN Supported Modes Programmable-Mux (PMUX) Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator.
PAGE 1379
Usage Information Version Description 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. When you create a VLT domain on a switch, Dell Networking OS automatically assigns a unique unit ID (0 or 1) to each peer switch. The unit IDs are used for internal system operations. Use the unit-id command to explicitly configure the unit ID of a VLT peer. Configure a different unit ID (0 or 1) on each peer switch.
PAGE 1380
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.4(0.0) Supported on the FN I/O Aggregator. 9.2(0.0) Supported on the M I/O Aggregator. show vlt private-vlan Display the association of private VLAN (PVLAN) with the VLT LAG. You can configure VLT peer nodes in a PVLAN on the switch. Syntax show vlt private-vlan Command Modes EXEC Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.
PAGE 1381
66 Virtual Router Redundancy Protocol (VRRP) Virtual router redundancy protocol (VRRP) is supported by the Dell Networking Operating System (OS) for IPv4 and IPv6. The following commands apply to both VRRP IPv4 and IPv6: • advertise-interval • description • disable • hold-time • preempt • priority • show config • track • virtual-address VRRP Ipv6 are in the VRRP for IPv6 Commands section.
PAGE 1382
advertise-interval Set the time interval between VRRP advertisements. Syntax advertise-interval {seconds | centisecs centisecs} To return to the default settings, use the no advertise-interval command. Parameters seconds Enter a number of seconds. The range is from 1 to 255. The default is 1 second. centisecs centisecs Enter the keyword centisecs followed by the number of centisecs in multiple of 25 centisecs. The range is 25 to 4075 centisecs in multiples of 25 centisecs.
PAGE 1383
Usage Information 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. The given password is encrypted by the system and the show config displays an encrypted text string for any of the encrypted typed used. clear counters vrrp Clear the counters maintained on VRRP operations. Syntax Parameters clear counters vrrp [vrrp-id] vrrp-id Command Modes EXEC Privilege Supported Modes Full–Switch Command History (OPTIONAL) Enter the number of the VRRP group ID.
PAGE 1384
packets Enter the keyword packets to enable debugging of VRRP control packets. state Enter the keyword state to enable debugging of VRRP state changes. timer Enter the keyword timer to enable debugging of the VRRP timer. Command Modes EXEC Privilege Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1385
Version Description 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information To enable VRRP traffic, assign an IP address to the VRRP group using the virtual-address command and enter no disable. Related Commands virtual-address — specifies the IP address of the virtual router. hold-time Specify a delay (in seconds) before a switch becomes the MASTER virtual router. By delaying the initialization of the VRRP MASTER, the new switch can stabilize its routing tables.
PAGE 1386
Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. priority Specify a VRRP priority value for the VRRP group. The VRRP protocol uses this value during the MASTER election process. Syntax priority priority To return to the default value, use the no priority command. Parameters priority Defaults 100 Command Modes VRRP Supported Modes Full–Switch Command History Usage Information Enter a number as the priority.
PAGE 1387
Example 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Dell(conf-if-vrid-4)#show con vrrp-group 4 virtual-address 119.192.182.124 ! show vrrp View the VRRP groups that are active. If no VRRP groups are active, the system returns No Active VRRP group. Syntax Parameters show vrrp [vrrp-id] [interface] [brief] vrrp-id (OPTIONAL) Enter the Virtual Router Identifier for the VRRP group to view only that group. The range is from 1 to 255.
PAGE 1388
Item Description • State Example (Brief) N = Preempt is not enabled. Displays the operational state of the interface by using one of the following: • NA/IF (the interface is not available). • MASTER (the interface associated with the MASTER router). • BACKUP (the interface associated with the BACKUP router). Master addr Displays the IP address of the MASTER router. Virtual addr(s) Displays the virtual IP addresses of the VRRP routers associated with the interface.
PAGE 1389
Example Item Description Tracking states.. This line is displayed if the track command is configured on an interface. Below this line, the following information on the tracked interface is displayed: • Dn or Up states whether the interface is down or up. • the interface type slot/port information. Dell>show vrrp -----------------TenGigabitEthernet 1/3, VRID: 1, Net: 10.1.1.253 VRF: 0 default State: Master, Priority: 105, Master: 10.1.1.
PAGE 1390
cost Defaults cost = 10 Command Modes VRRP Supported Modes Full–Switch Command History Usage Information (OPTIONAL) Enter a number as the amount to be subtracted from the priority value. The range is 1 to 254. The default is 10. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
PAGE 1391
vrrp delay minimum Set the delay time for VRRP initialization after an interface comes up. Syntax Parameters vrrp delay minimum seconds seconds Defaults 0 Command Modes INTERFACE Supported Modes Full–Switch Command History Usage Information Related Command Enter the number of seconds for the delay for VRRP initialization after an interface becomes operational. The range is from 0 to 900 (0 indicates no delay). Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.
PAGE 1392
Usage Information This command applies to all the VRRP configured interfaces on a system. When used with the vrrp delay minimum CLI, the later timer rules the VRRP enabling. For example, if vrrp delay reload is 600 and the vrrp delay minimum is 300: • When the system reloads, VRRP waits 600 seconds (10 minutes) to bring up VRRP on all interfaces that are up and configured for VRRP.
PAGE 1393
Defaults Not configured Command Modes INTERFACE Supported Modes Full–Switch Command History Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information NOTE: This command also enables you to clear the port configurations corresponding to a range of ports. • You can specify multiple ports as slot/port-range.
PAGE 1394
show vrrp ipv6 View the IPv6 VRRP groups that are active. If no VRRP groups are active, the system returns No Active VRRP group. Syntax show vrrp ipv6 [vrid] [interface] [brief] Parameters vrid (OPTIONAL) Enter the virtual router identifier for the VRRP group to view only that group. The range is from 1 to 255.
PAGE 1395
Example Line Beginning with Description Adv rcvd:... This line displays counters for the following: • Adv rcvd displays the number of VRRP advertisements received on the interface. • Adv sent displays the number of VRRP advertisements sent on the interface. • Bad pkts rcvd displays the number of invalid packets received on the interface. Virtual MAC address Displays the virtual MAC address of the VRRP group.
PAGE 1396
Usage Information The VRRP group only becomes active and sends VRRP packets when a link-local virtual IP address is configured. When you delete the virtual address, the VRRP group stops sending VRRP packets. • When VRF microcode is not loaded in CAM, the VRID for a VRRP group is the same as the VRID number configured with the vrrp-group or vrrp-ipv6-group command.
PAGE 1397
NOTE: Do not run VRRP version 2 and version 3 in the same group for an extended period of time.
PAGE 1398
67 SNMP Traps This chapter lists the traps sent by the Dell Networking Operating System (OS). Each trap is listed by the fields Message ID, Trap Type, and Trap Option. Table 6.
PAGE 1399
Message ID Trap Type Trap Option NONE NONE ENVMON TEMP ENVMON TEMP ENVMON TEMP ENVMON TEMP ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE ENVMON NONE PROTO NONE PROTO NONE %RPM0-P:CP %SNMP-4-RMON_HC_FALLING_THRESHOLD: RMON highcapacity falling threshold alarm from SNMP OID RESV N/A CHM_MIN_ALRM_TEMP %CHMGR-2-MINOR_TEMP: Minor alarm: chassis temperature CHM_MIN_ALRM_TEMP_CLR %CHMRG-5-MINOR_TEMP_CLR: Minor alarm cleared: chassis temperature normal
PAGE 1400
Message ID Trap Type Trap Option PROTO NONE PROTO NONE PROTO NONE ETS NONE ETS NONE ETS NONE ETS NONE PFC NONE PFC NONE %VRRP-6-VRRP_MASTER: vrid-%d on %s entering MASTER VRRP_PROTOCOL_ERROR VRRP_PROTOERR: VRRP protocol error on %S BGP4_ESTABLISHED %TRAP-5-PEER_ESTABLISHED: Neighbor %a, state %s BGP4_BACKW_XSITION %TRAP-5-BACKWARD_STATE_TRANS: Neighbor %a, state %s ETS_TRAP_TYPE_MODULE_STATUS_CHA NGE %DIFFSERV-5-ETS_TRAP_TYPE_MODULE_STATUS_CHANGE: ETS Module status changed to enabled %D
PAGE 1401
Message ID Trap Type Trap Option PFC NONE PFC NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE FIPS NONE ENTITY NONE %DIFFSERV-5-PFC_TRAP_TYPE_ADMIN_MODE_CHANGE : PFC Admin mode changed to off for port %s PFC_TRAP_TYPE_OPER_STATE_CHANGE %DIFFSERV-5-PFC_TRAP_TYPE_OPER_STATE_CHANGE: PFC Oper state changed to init for port %s %DIFFSERV-5-PFC_TRAP_TYPE_OPER_STATE_CHANGE: PFC Oper state changed to off for port %s %DIFFSERV-5-PFC_TRAP_TYPE_OPER_STATE_CHANGE: PFC Oper state c
PAGE 1402
68 FC Flex IO Modules This part provides a generic, broad-level description of the operations, capabilities, and configuration commands of the Fiber Channel (FC) Flex IO module. FC Flex IO Module mentioned in this guide refers to FCF Port Combo Card.
PAGE 1403
description (for FCoE maps) In an FCoE map, add a text description of the FCoE and FC parameters used to transmit storage traffic over a Switch with the FC Flex IO module NPIV proxy gateway in a converged fabric. Syntax Parameters description text text Defaults None Command Modes FCOE MAP Supported Modes Full–Switch Command History Enter a maximum of 32 characters. Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.
PAGE 1404
downstream server CNA ports as FCoE forwarder (FCF) ports on an FCoE network. When applied to FC and Ethernet ports on an NPIV proxy gateway, an FCoE map allows the switch to operate as an FCoE-FC bridge between an FC SAN and an FCoE network by providing FCoE-enabled servers and switches with the necessary parameters to log in to a SAN fabric. Use the fcoe-map command to create an FCoE map.
PAGE 1405
You must first create a VLAN and then specify the configured VLAN ID in the fabric-id vlan command. Otherwise, the following error message is displayed. FTOS(conf-fcoe-f)#fabric-id 10 vlan 10 % Error: Vlan 10 does not exist Related Commands fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric. show fcoe-map — displays the Fibre Channel and FCoE configuration parameters in FCoE maps.
PAGE 1406
The range of FC-MAP values is from 0EFC00 to 0EFCFF. Defaults None Command Modes FCoE MAP Supported Modes Full–Switch Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.6(0.0) Supported on the FN 2210S Aggregator. 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. The FC-MAP value you enter must match the FC-MAP value used by an FC switch or FCoE forwarder (FCF) in the fabric.
PAGE 1407
Command Modes • Keepalive: enable • Vlan priority: 3 CONFIGURATION INTERFACE Supported Modes Command History Usage Information Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. An FCoE map is a template used to map FCoE and FC parameters in a converged fabric.
PAGE 1408
Command History Version Version 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. Usage Information To delete the FIP keepalive time period from an FCoE map, enter the no fka-adv-erpiod command. Related Commands fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric.
PAGE 1409
Related Commands fcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric. show fcoe-map— displays the Fibre Channel and FCoE configuration parameters in FCoE maps. keepalive In an FCoE map, enable the monitoring of FIP keepalive messages (if it is disabled). Syntax keepalive Parameters None Defaults FIP keepalive monitoring is enabled on Ethernet and Fibre Channel interfaces.
PAGE 1410
Command History Usage Information Version Description 9.9(0.0) Introduced on the FN IOM. 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. Use the show fcoe-map command to display the FC and FCoE parameters used to configure server-facing Ethernet (FCoE) and fabric-facing FC ports in all FCoE maps on a switch with the FC Flex IO module NPIV proxy gateway.
PAGE 1411
Example Field Description FKA-ADV-period Time interval (in seconds) used to transmit FIP keepalive advertisements. FCF Priority The priority used by a server to select an upstream FCoE forwarder. Config-State Indicates whether the configured FCoE and FC parameters in the FCoE map are valid: Active (all mandatory FCoE and FC parameters are correctly configured) or Incomplete (either the FC-MAP value, fabric ID, or VLAN ID are not correctly configured).
PAGE 1412
Usage Information Version Description 9.3(0.0) Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module. Use the show npiv devices command to display information on the server CNA, server-facing Ethernet and fabric-facing FC ports, and the SAN fabric in each server-fabric connection over a switch with the FC Flex IO module NPIV proxy gateway. The following table describes the show npiv devices brief output shown in the example below.
PAGE 1413
Example Related Commands Field Description FCoE VLAN ID of the dedicated VLAN used to transmit FCoE traffic from a server CNA to a fabric and configured on both the server-facing the switch with the FC Flex IO module port and server CNA port. Fabric Map Name of the FCoE map containing the FCoE/FC configuration parameters for the server CNA-fabric connection. Enode WWPN Worldwide port name of the server CNA port. Enode WWNN Worldwide node name of the server CNA.
PAGE 1414
69 Debugging and Diagnostics This chapter contains the following sections: • Offline Diagnostic Commands • Hardware Commands Topics: • Offline Diagnostic Commands • Hardware Commands • clear hardware stack-unit • clear hardware system-flow • show hardware layer2 acl • show hardware layer3 • diag stack-unit • hardware watchdog • online stack-unit • offline stack-unit • show diag • show hardware stack-unit • show hardware system-flow • show hardware buffer interface • show har
PAGE 1415
• show diag Hardware Commands These commands display information from a hardware sub-component or ASIC. The hardware commands are: • clear hardware stack-unit • show diag • show hardware stack-unit • show hardware system-flow clear hardware stack-unit Clear statistics from selected hardware components.
PAGE 1416
clear hardware system-flow Clear system-flow statistics from selected hardware components. Syntax clear hardware system-flow layer2 stack-unit 0–5 port-set 0–0 counters Parameters stack-unit 0–5 Enter the keywords stack-unit then 0 to 5 to select a particular stack member and then enter one of the following command options to clear a specific collection of data.
PAGE 1417
show hardware layer3 Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe. Syntax Parameters show hardware layer3 {acl | qos} stack-unit 0–5 port-set 0–0 acl | qos Enter either the keyword acl or the keyword qos to select between ACL or QoS data. stack-unit 0–5 Enter the keywords stack-unit then a numeral from 0 to 5 to select a stack ID. port-set 0–0 Enter the keyword port-set with a port-pipe number.
PAGE 1418
no-reboot Enter the keyword no-reboot to avoid automatic rebooting of the chassis after completion of diagnostic execution. Generally, this option is never used because if you run the diagnostic once again without rebooting the chassis, it may cause an issue with the diagnostic results.. terminate Enter the keyword terminate to stop the execution of the level diag that is already started using the diag stack-unit command.
PAGE 1419
online stack-unit Place a stack unit in the online state. Syntax Parameters online stack-unit number number Defaults none Command Modes EXEC Privilege Command History Enter the stack-unit number. The range is from 0 to 5. Version Description 9.9(0.0) Introduced on the FN IOM. 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. offline stack-unit Place a stack unit in the offline state.
PAGE 1420
show diag View diagnostics information. Syntax show diag {information | stack-unit unit-id [detail | summary] | testcase} Parameters information Enter the keyword information to view current diagnostics information in the system. stack-unit unit-id Enter the keyword stack-unit followed by the unit-id to display information on a specific stack member. The range is from 0 to 5. detail (OPTIONAL) Enter the keyword detail to view detailed diagnostics information.
PAGE 1421
Example 3 (show diag testcase stackunit Command) Dell#show diag testcase stack-unit 0 ******** Blade IOM Diagnostics Test ********** Test ID ------1 3 4 5 6 7 8 9 11 12 13 14 16 17 101 102 103 104 105 106 107 108 109 110 111 113 114 117 123 124 201 203 204 205 206 207 208 Test Description ---------------POWERRAILSTATUSTEST TSENSORACCESSTEST RTCPRESENCETEST CPUSDRAMPRESENCETEST CPUSDRAMSIZETEST USBAACCESSTEST USBHOSTCONTROLLERACCESSTEST SDFLASHACCESSTEST CPLDPRESENCETEST FLASHACCESSTEST BOARDREVTEST MGMTPH
PAGE 1422
Dell# show hardware stack-unit Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
PAGE 1423
• Supported Modes Command History EXEC Privilege All Modes Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Replaced the keyword port with interface. 9.4(0.0) Supported on the FN I/O Aggregator.
PAGE 1424
0 errors Dell# Example (drop counters) Dell#show hardware stack-unit 1 unit 0 counters unit: 0 port: 1 (interface Te 1/1) Description RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX TX TX TX TX TX TX TX TX TX TX TX TX 1424 - IPV4 L3 Unicast Frame Counter IPV4 L3 Routed Multicast Packets IPV6 L3 Unicast Frame Counter IPV6 L3 Routed Multicast Packets Unicast Packet Counter 64 Byte Frame Counter 65 to 127 Byt
PAGE 1425
TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX - Unicast Frame Counter Multicast Frame Counter Broadcast Frame Counter Byte Counter Control Frame Counter Pause Control Frame Counter Oversized Frame Counter Jabber Counter VLAN Tag Frame Counter Double VLAN Tag Frame Counter RUNT Frame Counter Fragment Counter PFC Frame Priority 0 PFC Frame Priority 1 PFC Frame Priority 2 PFC Frame Priority 3 PFC Frame Priority 4 PFC Frame Priority 5 PFC Frame Priority 6 PFC
PAGE 1426
RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX RX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX TX Example (portstatistics) 1426 - Fragment Counter VLAN Tagged Packets Ingress Dropped Packet MTU Check Error Frame Counter PFC Frame Priority 0 PFC Frame Priority 1 PFC Frame Priority 2 PFC Frame Priority 3 PFC Frame Priority 4 PFC Frame Priority 5 PFC Frame Priority 6 PFC Frame Priority 7 Debug Counter 0 Debug Co
PAGE 1427
loop back Dell# port link xe0 xe1 xe2 xe3 xe4 xe5 xe6 xe7 xe8 xe9 xe10 xe11 up up up down up down up down down down up up duplex scan neg? 10G 10G 10G 1G 10G 1G 10G 1G 10G 10G 10G 10G FD FD FD FD FD FD FD FD FD FD FD FD SW SW SW SW SW SW SW SW SW SW SW SW Yes Yes Yes Yes Yes Yes Yes Yes No No No No state pause Forward Forward Forward Block Forward Block Forward Block Block Block Forward Forward RX RX RX RX RX discrd ops None None None None None None None None None None None None FA FA FA FA FA
PAGE 1428
bcmLinkMonStatusShow: The Current Link Status Is Front End Link Status 0xea3000000000000000000000 Front End Port Present Status 0x000000000000000000000000 Back Plane Link Status 0x00000000 ****************************************************** Link Status of all the ports in the Device - 0 The linkStatus of Front End Port 42 is TRUE The linkStatus of Front End Port 43 is TRUE The linkStatus of Front End Port 44 is TRUE The linkStatus of Front End Port 45 is FALSE The linkStatus of Front End Port 46 is TRUE
PAGE 1429
Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/6 Queue 6 ----Maximum Shared Limit: 7667 Default Packet Buffer allocate for the Queue: 8 Used Packet Buffer: 0 Related Commands show interfaces stack-unit — displays information on all interfaces on a specific stack member. show processes cpu — displays CPU usage information based on running processes. show system — displays the current status of all stack members or a specific member.
PAGE 1430
705 704 703 701 699 698 697 696 695 693 509 508 507 506 510 505 504 503 502 501 500 499 498 497 496 495 494 493 492 491 490 Dell# Example (noncounters) 249 147 145 144 773 772 771 770 769 VLT L2PM Sync Frames VLT ARP Sync Frames VLT IPM Sync Frames VLT NDPM Sync Frames VLT TTL1 Packets Tunneled VLT Dyn Client pkts VLT PIM Sync Frames VLT MRTM Sync Frames VLT SMUX Sync Frames DROP Cases BGP_SPORT PACKETS BGP_DPORT PACKETS MSDP_SPORT PACKETS MSDP_DPORT PACKETS IGMP PACKETS WITH IP OPTIONS FP Entry for OSP
PAGE 1431
############## FP Entry for redirecting LACP traffic to CPU Port ############ EID 2045: gid=1, slice=15, slice_idx=0x02, prio=0x7fd, flags=0x82, Installed tcam: color_indep=0, higig=0, higig_mask=0, KEY=0x00000000 00000000 00000000 0180c200 00020000 00000000 00000000 , FPF4=0x00 MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000 , 0x00 action={act=Drop, param0=0(0x00), param1=0(0x00)}, action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)}, action={act=CopyToCpu, param0=0(0x00), param1=0
PAGE 1432
EXEC Privilege Supported Modes Command History Full–Switch Version Description 9.9(0.0) Introduced on the FN IOM. 9.8(0.0) Introduced on the M I/O Aggregator and FN I/O Aggregator.
PAGE 1433
Used Packet Buffer: 0 ----- Buffer Stats for Interface Te 1/1 Queue 11 ----Maximum Shared Limit: 29514 Default Packet Buffer allocate for the Queue: 8 show hardware counters interface interface Display the counter information for a specific interface. Syntax Parameters Defaults Command Modes show hardware counters interface interface counters Enter the keywords counters to display counter value for the specified stack-member the port-pipe.
PAGE 1434
RX - 4096 to 9216 Byte Frame Counter RX - Good Packet Counter RX - Packet/Frame Counter RX - Unicast Frame Counter RX - Multicast Frame Counter RX - Broadcast Frame Counter RX - Byte Counter RX - Control Frame Counter RX - Pause Control Frame Counter RX - Oversized Frame Counter RX - Jabber Frame Counter RX - VLAN Tag Frame Counter RX - Double VLAN Tag Frame Counter RX - RUNT Frame Counter RX - Fragment Counter RX - VLAN Tagged Packets RX - Ingress Dropped Packet RX - MTU Check Error Frame Counter RX - PFC
PAGE 1435
Version Description 9.8(0.0) Introduced on the M I/O Aggregator and the FN I/O Aggregator.
PAGE 1436
Packets dropped by FP (L2+L3) Drops Port bitmap zero Drops Rx VLAN Drops --- Ingress MAC counters--Ingress FCSDrops Ingress MTUExceeds --- MMU Drops --Ingress MMU Drops Ingress Drops Bytes HOL DROPS(TOTAL) HOL DROPS on COS0 HOL DROPS on COS1 HOL DROPS on COS2 HOL DROPS on COS3 HOL DROPS on COS4 HOL DROPS on COS5 HOL DROPS on COS6 HOL DROPS on COS7 HOL DROPS on COS8 HOL DROPS on COS9 HOL DROPS on COS10 HOL DROPS on COS11 HOL DROPS on COS12 HOL DROPS on COS13 HOL DROPS on COS14 TxPurge CellErr Aged Drops ---
PAGE 1437
A Internet Control Message Protocol (ICMP) Message Types This chapter lists and describes the possible ICMP message type resulting from a ping. The first three columns list the possible symbol or type/code. For example, you would receive a ! or 03 as an echo reply from your ping. Table 7. ICMP messages and their definitions Symbol Type Code . Query Error Timeout (no reply) ! 0 U 3 C Description 3 echo reply . destination unreachable: 0 network unreachable . 1 host unreachable .
PAGE 1438
Symbol & Type Code Description Query 10 0 router solicitation . 11 time exceeded: 0 time-to-live equals 0 during transit . 1 time-to-live equals 0 during reassembly . 12 1438 Error parameter problem: 1 IP header bad (catchall error) . 2 required option missing . 13 0 timestamp request . 14 0 timestamp reply . 15 0 information request (obsolete) . 16 0 information reply (obsolete) . 17 0 address mask request . 18 0 address mask reply .